last executing test programs: 4m44.627745963s ago: executing program 4 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, 0x28, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d153ce4a"]}]}, 0x1c}}, 0x4000010) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa0, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffff91d}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000010) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xa}, {0x3}, {0x3}, {0x2}]}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/220, 0x51, 0xdc, 0x1}, 0x20) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x25001000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x112, 0x3, 0x2}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040884}, 0xa1) recvfrom$rxrpc(r3, &(0x7f0000000140)=""/26, 0x1a, 0xc0, &(0x7f0000000180)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m44.411739209s ago: executing program 4 (id=1689): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b400000300100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100002000"/24, @ANYRES32, @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000c3bd50c5dd4cd61158adb20b88791d9900", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt(r1, 0x2, 0xfff, &(0x7f0000000440)=""/213, &(0x7f00000002c0)=0xd5) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd700000000000010000000500040002000000050002000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r3, &(0x7f0000000180), 0x100000000000003c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r8, &(0x7f0000000040)=""/136, 0x88) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv6_getaddr={0x58, 0x16, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x1, 0x4, 0x3, r11}, [@IFA_LOCAL={0x14, 0x2, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x462}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x40084}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_int(r12, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000640)=ANY=[@ANYRES64=r9, @ANYRESOCT=r0, @ANYRES8=r3, @ANYRESHEX=r11, @ANYRES64=r11], 0x8) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) 4m44.144222743s ago: executing program 4 (id=1693): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="040025bd000000080001000100"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x200088c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r1, 0x100, 0x70bd24, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x40) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000240)=[{&(0x7f00000000c0)="dc", 0x1}], 0x1, 0x3) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f00000004c0)="a62dab6ddfa1eb2f4c2bee82fef0a5122d677e41e5f9a16ad052a71be02b56ee2e9eb9109c03684bde89b2792101af51350d86667728f47c54361e8270f129b5f970fb9725aa5414e451e6c2151d7ad32c6d046f1906fcd426b9d387f900d7c937e923b9849ce5443eebb5e8cbd86ed7fb8350c45584bdb57cf54fd62bc839db7de526", 0x83}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='X', 0xffffff5f}, {&(0x7f0000000c80)='_', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)='t', 0x1}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000001dc0)="81", 0x1}], 0x5}}], 0x2, 0x4008440) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000340)={{0x87, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x3, 'wlc\x00', 0x0, 0xfffffff1, 0x73}, {@multicast1, 0x4e24, 0x1, 0x7, 0x2, 0x6}}, 0x44) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000003080101000000000000000000000000050003000600000006000240000000002400048008000440000000000800054000000000040007"], 0x48}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x1, 0x4, 0x1, 0x9}, &(0x7f0000000280)=0x20) 4m43.232547151s ago: executing program 4 (id=1709): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x4000)=nil, 0x4000, 0x4, 0x10, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x3000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r3, 0x80000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 4m42.942691968s ago: executing program 4 (id=1712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000004100)=""/4104, 0x1008}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/138, 0x8a}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f0000000100)=""/117, 0x75}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010020, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000002c0)="8d09327c", 0x4}, {&(0x7f0000000100)="b03ef9880b815221ff28eac1d4f49bcad59f71c0ef", 0x15}], 0x3) 4m42.629137165s ago: executing program 4 (id=1718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000000000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000002b00)=""/245, 0xf5}, {&(0x7f0000000440)=""/87, 0x57}, {&(0x7f0000003d40)=""/4082, 0xff2}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x90000000}, {{0x0, 0x0, 0x0}, 0xb0}, {{0x0, 0x0, 0x0}, 0xc}], 0x6, 0x10000, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000019bc0)={0x2c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x15f, 0x2a, [@tim={0x5, 0xcd, {0x3, 0x79, 0x1, "dbee4263cfef843014a6db1823e757356603541c2952a945f3359e0a468de8885f0e3db2dfa8575ba96cd47cb4abf19c56dfd939f0c363206893e2035111c833e6f0c2019e9f48979d5ebd0cf5b9083ea53236094b9845d81d712d292ca7ad55ea1864d0b8cca5c9316391d9aca31e8b2ecea7de02accff53be055909e9c0d0ba0c650ac2d536d2d55dac306366d3e52e57484b736e410797fdc1e871e1f3666f7ebb2e25c6855660e5b34dcd361a9afe267fa3a56a2391ac450907373fb2cb0280b8eb85264b27118da"}}, @link_id={0x65, 0x12, {@random="d79aef5ec7a5", @broadcast, @device_b}}, @gcr_ga={0xbd, 0x6, @device_b}, @perr={0x84, 0x2f, {0x1, 0x3, [{{}, @device_a, 0x3, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x1}, {{}, @device_b, 0x0, @void, 0x13}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ht={0x2d, 0x1a, {0x1010, 0x1, 0x1, 0x0, {0x100000001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x800, 0xfff, 0xab}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0xe, 0x20}}, @rann={0x7e, 0x15, {{}, 0x7, 0x9, @broadcast, 0x4, 0x2e21, 0x1}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x128, 0x2a, [@perr={0x84, 0x122, {0x9, 0x12, [{{}, @device_b, 0x80000001, @void, 0x36}, {{}, @device_a, 0x1ff, @void, 0x1f}, {{}, @device_a, 0x34d, @void, 0x24}, {{}, @broadcast, 0x680, @void, 0x27}, {{0x0, 0x1}, @broadcast, 0x1000, @value=@device_b, 0x1e}, {{0x0, 0x1}, @broadcast, 0x10000, @value=@broadcast, 0x1f}, {{}, @device_a, 0x2, @void, 0x2}, {{}, @device_a, 0xfffffffe, @void, 0x3a}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x19}, {{}, @device_b, 0xfffffffa, @void, 0x17}, {{}, @broadcast, 0x4, @void, 0x37}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x39}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x12}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x28}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x23}, {{0x0, 0x1}, @broadcast, 0x7ff, @value, 0x21}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x2b}, {{}, @broadcast, 0x9, @void, 0xc}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x40}, 0x200008a0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x7c, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x822}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3d379b9e9d1e17fc5f4e3f33cb9eec1f46ea10e5353455b6d4ae7505ff"}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x15}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000740)=0x801, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000740)=0x801, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'ipvlan0\x00', &(0x7f0000019840)=@ethtool_gfeatures={0x3a, 0x6, [{}, {}, {}, {}, {}, {}]}}) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'ipvlan0\x00', &(0x7f0000019840)=@ethtool_gfeatures={0x3a, 0x6, [{}, {}, {}, {}, {}, {}]}}) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x24}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000000780)={{r0}, "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"}) (async) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000000780)={{r0}, "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"}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000196c0)={@dev}, &(0x7f0000019700)=0x14) (async) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000196c0)={@dev, 0x0}, &(0x7f0000019700)=0x14) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000019800)=@o_path={&(0x7f00000197c0)='./file0\x00', 0x0, 0x4018, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019900)={0x6, 0x0, &(0x7f0000000540), &(0x7f0000019580)='GPL\x00', 0x6, 0xde, &(0x7f00000195c0)=""/222, 0x41100, 0x14, '\x00', r9, 0x25, r2, 0x8, &(0x7f0000019740)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000019780)={0x3, 0xe, 0x1ff, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000198c0)=[r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) 4m42.307769991s ago: executing program 32 (id=1718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000000000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000002b00)=""/245, 0xf5}, {&(0x7f0000000440)=""/87, 0x57}, {&(0x7f0000003d40)=""/4082, 0xff2}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x90000000}, {{0x0, 0x0, 0x0}, 0xb0}, {{0x0, 0x0, 0x0}, 0xc}], 0x6, 0x10000, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000019bc0)={0x2c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x15f, 0x2a, [@tim={0x5, 0xcd, {0x3, 0x79, 0x1, "dbee4263cfef843014a6db1823e757356603541c2952a945f3359e0a468de8885f0e3db2dfa8575ba96cd47cb4abf19c56dfd939f0c363206893e2035111c833e6f0c2019e9f48979d5ebd0cf5b9083ea53236094b9845d81d712d292ca7ad55ea1864d0b8cca5c9316391d9aca31e8b2ecea7de02accff53be055909e9c0d0ba0c650ac2d536d2d55dac306366d3e52e57484b736e410797fdc1e871e1f3666f7ebb2e25c6855660e5b34dcd361a9afe267fa3a56a2391ac450907373fb2cb0280b8eb85264b27118da"}}, @link_id={0x65, 0x12, {@random="d79aef5ec7a5", @broadcast, @device_b}}, @gcr_ga={0xbd, 0x6, @device_b}, @perr={0x84, 0x2f, {0x1, 0x3, [{{}, @device_a, 0x3, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x3, @value, 0x1}, {{}, @device_b, 0x0, @void, 0x13}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ht={0x2d, 0x1a, {0x1010, 0x1, 0x1, 0x0, {0x100000001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x800, 0xfff, 0xab}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0xe, 0x20}}, @rann={0x7e, 0x15, {{}, 0x7, 0x9, @broadcast, 0x4, 0x2e21, 0x1}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x128, 0x2a, [@perr={0x84, 0x122, {0x9, 0x12, [{{}, @device_b, 0x80000001, @void, 0x36}, {{}, @device_a, 0x1ff, @void, 0x1f}, {{}, @device_a, 0x34d, @void, 0x24}, {{}, @broadcast, 0x680, @void, 0x27}, {{0x0, 0x1}, @broadcast, 0x1000, @value=@device_b, 0x1e}, {{0x0, 0x1}, @broadcast, 0x10000, @value=@broadcast, 0x1f}, {{}, @device_a, 0x2, @void, 0x2}, {{}, @device_a, 0xfffffffe, @void, 0x3a}, {{0x0, 0x1}, @device_b, 0x0, @value, 0x19}, {{}, @device_b, 0xfffffffa, @void, 0x17}, {{}, @broadcast, 0x4, @void, 0x37}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x39}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x12}, {{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x28}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x23}, {{0x0, 0x1}, @broadcast, 0x7ff, @value, 0x21}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x2b}, {{}, @broadcast, 0x9, @void, 0xc}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x40}, 0x200008a0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x7c, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x822}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3d379b9e9d1e17fc5f4e3f33cb9eec1f46ea10e5353455b6d4ae7505ff"}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x15}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000740)=0x801, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000740)=0x801, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'ipvlan0\x00', &(0x7f0000019840)=@ethtool_gfeatures={0x3a, 0x6, [{}, {}, {}, {}, {}, {}]}}) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'ipvlan0\x00', &(0x7f0000019840)=@ethtool_gfeatures={0x3a, 0x6, [{}, {}, {}, {}, {}, {}]}}) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x24}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000000780)={{r0}, "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"}) (async) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000000780)={{r0}, "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"}) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000196c0)={@dev}, &(0x7f0000019700)=0x14) (async) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000196c0)={@dev, 0x0}, &(0x7f0000019700)=0x14) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000019800)=@o_path={&(0x7f00000197c0)='./file0\x00', 0x0, 0x4018, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019900)={0x6, 0x0, &(0x7f0000000540), &(0x7f0000019580)='GPL\x00', 0x6, 0xde, &(0x7f00000195c0)=""/222, 0x41100, 0x14, '\x00', r9, 0x25, r2, 0x8, &(0x7f0000019740)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000019780)={0x3, 0xe, 0x1ff, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000198c0)=[r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) 4.479496347s ago: executing program 3 (id=5396): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="f00014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x115}}, 0x20}}, 0x4004000) 4.398709196s ago: executing program 3 (id=5397): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}], {0x14}}, 0xa4}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006a40)={&(0x7f0000006940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x12}]}}, 0x0, 0x26}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) bind$bt_hci(r5, &(0x7f0000000100), 0x6) getsockname(r5, 0x0, &(0x7f0000002100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711009000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r10, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r8], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r10, 0x1, 0x7}, 0x14) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) 3.575951338s ago: executing program 3 (id=5404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000340)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b0001006272696467650000180002800c002e0003000000030000000500070008000000"], 0x48}}, 0x0) 3.566564478s ago: executing program 3 (id=5409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x529000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'ipvlan0\x00', 0x400}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r5, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x4, 0x1, 0x1, 0xa, 0xa, 0x6, 0x1}, @jmp={0x5, 0x1, 0x1, 0x7, 0x6, 0x10, 0xffffffffffffffff}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7c80}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xea, &(0x7f0000000400)=""/234, 0x41100, 0x9, '\x00', r5, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r1, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @xdp, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.321649112s ago: executing program 3 (id=5413): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000004a3d000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5df0000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b0081000000"], 0x140}}, 0x400c000) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x7fff}, {0x6}]}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a54", 0xe4bd}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 3.154583489s ago: executing program 3 (id=5416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x83d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f00000001c0)="9f936a238defd31881c765387526439caf86286b27db0fb2b9c8ab99bd1f4e368cac3bed7e79ace64e76c0b8828d9356add7afde38dec7d7af07ad20ccec0a22e70ab76270d4560835641809b9f186a9a72eda46b2830f377adaa4f2bc650086298746682cada029f7d4e2127894dd2f8b4eab88332dcac4309b9495292b0d56a1dc6a906c04b74d3c410dfc077243fab82a6248f53f1f7885a5dfab25f7", &(0x7f0000000000)=""/59, &(0x7f0000000280)="39d1f813ab393809f86d2885955289154b20b36f56513a4a986d7748fbc3c2f0aa989f9e4dd4d89ca457f900d1203f38acc977370632391f2041fe9fa57f3ddd521d970fcf0a9d36ddc98aa58d4eea40ce52e1", &(0x7f0000000340)="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", 0x5, r1, 0x4}, 0x38) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000500)={'bridge0\x00'}) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f00000000c0), 0x4) (async) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f00000000c0), 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 2.209503912s ago: executing program 1 (id=5433): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "6ff9ce9c6e0373ad226029e738658ff6fc99da1700bafdcb16fa2d74ae645efa", "381d28c7a0164b0ac87736419603b18d7145bf36b7687b886b01ed4a588fcbfe", "0c28f6e918bd13306f2f0b11ba7e68e865eaa5128845fc1f3961f9def3805978", "85e3dd817e6fd3dd4db6e64285dec524c97e4950723f463980ed860d384b2158", "6c2863077f7c054bd1ff6854da0f2c35907affd7ee5ce2de4c9d9c3577dd495e", "6f0c59c39e44c8d6ee189c1c", 0x8, 0x9, 0x5a, 0x7ff, 0x7}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x18, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000680)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}], 0x2, 0x27}}], 0x48}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) r3 = socket$kcm(0x10, 0x2, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) 1.951658502s ago: executing program 2 (id=5435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1}, 0x40000000) unshare(0x20040600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="7de64ea262cd0d61a417bc5ce19c855f77720e5343b3d94584584c7655d296d9b8c31e4e273b80d7bf03895832430f361eb7f807a44dc8404b89c7c7abb63b4bf099dc2849b456a7f1ce8d1ad28f864b540af10c4333574670b2697962fe0ce833617c2b8e2c5b8e4ce37b280a701c", @ANYRES16=r4, @ANYBLOB="040027bd7000fcdbdf250a0000000c00018008000600777272000800040002000000080005002f050000040003805400038008000500e0000002080003000200000005000800090000000800030003000000080005007f00000108000500e0000002080001000000000008000300020000000800030002000000060007004e2400000800040007000000"], 0x90}, 0x1, 0x0, 0x0, 0x4880}, 0x24000000) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000102500000000", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500160001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.899615105s ago: executing program 1 (id=5436): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x488, [0x8ae, 0x9, 0x2, 0x27, 0x8, 0x10]}) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, r5, 0x36, 0x4, 0x0, @void, @value=r5}, 0x20) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/18], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [], {0x14}}, 0x28}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0x116}, {0x6}]}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002dbd7040ffdbdf1f5700000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x228}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) (async) accept$alg(r1, 0x0, 0x0) 1.771604542s ago: executing program 5 (id=5438): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @none, 0x5, 0x1}, 0xe) (async) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x7f, 0x5, 0x7}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe6d}], 0x1c) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x3}, &(0x7f0000000200)=0x8) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000240)='pimreg1\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={0x0, @vsock={0x28, 0x0, 0x0, @my=0x1}, @can={0x1d, r3}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e20, 0x4}}, 0x80, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)='bridge_slave_0\x00', 0x2, 0xffffffff, 0x8}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20100124}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x5f}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x16, 0x1}, {0x5}, {0x5}, {0x16}, {0x5}, {0x30, 0x1}, {0xc}, {0xc, 0x1}, {0x12}, {0x1, 0x1}, {0x30}, {0x6, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x16}, {0x30, 0x1}, {0x6, 0x1}, {0xc, 0x1}, {0x6c, 0x1}, {0x5, 0x1}, {0x1b, 0x1}, {0x3, 0x1}, {0x1b}, {0x12}, {0x4}, {0x5, 0x1}, {0x2}, {0x2}]}, @chandef_params]}, 0x40}, 0x1, 0x0, 0x0, 0x2004c0c5}, 0x4085) (async) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@bridge_getvlan={0x58, 0x72, 0x4, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x58}}, 0x8014) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r5) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000600)={0x0, 0x7, 0x4, 0x1}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'bond0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, r6, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6f}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x2f, 0x115, "847f8d84ee53f7a9938de37d43f790d44d84782e2855d306184b415719ae9bad922f26a7e1d0b154273efb"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}], @NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x10}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000840)={0x3, 'veth1_vlan\x00', {0x200}, 0xff81}) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000880)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @private=0xa010100}], 0x30) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000008c0)) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000900)={@empty, 0x42, r4}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000940)) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0x3, 0x0) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f00000009c0)=0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x60, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e2}]]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x80) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) (rerun: 32) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r10, 0x120, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x8841) 1.736534811s ago: executing program 1 (id=5439): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r4 = accept4$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x10, 0x80000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r8 = socket$kcm(0x21, 0x2, 0xa) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r9 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000003080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2404e0c4}], 0x1, 0x0) recvmsg(r9, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e1865fcde2467ec8e4a5a4afa26b6e410000000001d78167414b4c913000000100100000b000000"], 0x10}, 0x0) r10 = gettid() r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x0, 0x8001, {{0x6, 0x4, 0x1, 0x11, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@lsrr={0x83, 0x3, 0xfc}]}}}}}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x488, 0x416, 0xa01, 0x4, 0x0, {0xa}, [@nested={0x464, 0x7f, 0x0, 0x1, [@nested={0x199, 0xbe, 0x0, 0x1, [@generic="514eb3ba81a1adf961c13c2d2720ea1b5944b04099b7eaaac0248f4f5fb5b4f01fdb1312d2eb0858eb6989d3dde3485d992c5986c94f2c798b06b3db06e31a4043f76c34c9c34f8f6a309ff3c967bf65b2b45ebcc4009d8d77afb07fc02176e71e84fba6037e10def732bf44d6813d4db19965a452242378f4dd078c99d0883c5d2593b7b4cbb5c36e92c43e6031f11fc5973640cff103a4104d30dce81b347655499c9dfec8e4864b42369a1fe4b6650e431cded07d2f0c0460cab293f17d56ef5e625a90d61a1bec8111989b1b7330fabbd69fa852dfec5b4dc6227f0ca13e0cfdc1b10b48647a2255024e20ca4dba6a", @typed={0x8, 0x10f, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x120, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xc4}, @nested={0x4, 0xb3}, @nested={0x4, 0xdb}, @generic="d5665c5697d1d3ead08ea4bec13a9c61ec89fcfc9e8c24a04a118e5249d1d9d39b657a754c1fb291853e924794b52650d8216772a4e8e4040ab75940dca88355159704acdbef2aef91a7cc4c5d49b8bf495f24ad98b31be6e791604f062a213a57fa157242ed6d0fb4b5ca116affd80f8d19a39bf833dc701c2cc20727b54ab9", @nested={0x4, 0xa9}, @nested={0x4, 0xb0}]}, @nested={0x1c4, 0x85, 0x0, 0x1, [@generic="35466b39e6dae80edcd82986484ea6a246602e9bc88fa9f6ef12fa7285ad4d027cd64e235b08119be4366548c6e5bfce0d797032c57a83b940a95bed9b165c32b3d6237bbd4093073d8d12162aa7eeb9fa60cf11f8f7710f2a808a95ce10a4c6896b3a5aaf602096e3f3d794cf05f658aea54b8b558c7d870580fe67c381d7a556404ecdbd5834bc4f77d82038884f569a515f32857c8e977eb11d880434217f019efd6eae543730e44790848a3830d747a34823f4b3e037377dfc3d812608c5d762f66fe0e6841ed7", @typed={0x41, 0xf0, 0x0, 0x0, @binary="93708ec493c2442944ae91ca6754345ed82f943fa4b6e52e42e389658c55d696ccefea17ed78a5d909bc6016713eece15dabd5eea0d403a930b8c1ab37"}, @generic="be6e591f0ec4a52d050cb08a7d0c6c46bfb6fb50ddac05772aa4f2db38a9b432232d886648fde4e159efc9c94f0fdb185a6f148e707d6ca8b79a3fb198d48605a50e29928f6036f4f4a9236f78aae7ce00b9b7dec86d003db7c6f78236cede224db6ede152d824a7c9381d5a5337cf031a25a54009c68fc5ed0c9ae6239373573845a168b6a4578c8259e4295d1f9e094ad5632c3d1224c7297fefcbebe0bca0fe92c3e95d1159f095876f197732f4", @nested={0x4, 0xc1}]}, @typed={0x5, 0x82, 0x0, 0x0, @str='\x00'}, @nested={0x20, 0xcb, 0x0, 0x1, [@nested={0x4, 0x45}, @typed={0x8, 0xf3, 0x0, 0x0, @pid=r10}, @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0xa9, 0x0, 0x0, @u32=0x7}]}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@private0}, @nested={0xc4, 0x75, 0x0, 0x1, [@typed={0x8, 0x151, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0xf6}, @generic="db1c5c7fd739a7989b7b424f09e877b013919915d89f65916dc3b4212e6edd6ea0f517be06b4e948c6865f7787f847c040a95e56c645f1320ed5ef5ac4fb1e469935500efb17d340a0019d67300dc2d1e93f7f9b4d948637517b93e9e6791487096313b5d541ef6aeb325e222417c8d0531f5bc249d98f843520f805be8d9424c3d872a2d4df89669d7ff273d0d997af9d28be69a2cd0d4c606945a49c28344f2c05e5219d95ee8199f2ad2338967daacbfb5825"]}]}, @typed={0x8, 0xbb, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x2, 0x0, 0x0, @uid=0xee01}]}, 0x488}}, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000001c0)=r10) 1.627571659s ago: executing program 2 (id=5440): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010122715d8567416ab1160000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f000000000000000085100000060000008510000004000000660800000000000018000000000000000000000000000000950000000000000005e70600090000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="1801ed01", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRES8=r3, @ANYRES64=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000184400000800000000000000000000002588400101000000"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xe3, &(0x7f0000000600)=""/227, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x4, 0xe7, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r5], 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r10, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.600516208s ago: executing program 5 (id=5441): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffff4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.435799536s ago: executing program 5 (id=5443): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x23, 0x80000, 0x2) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r2, 0x200, 0x7, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1e}, @L2TP_ATTR_MRU={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x40, r4, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20006915}, 0x0) 1.383359927s ago: executing program 2 (id=5444): syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 64) r0 = socket$inet6(0xa, 0x5, 0x0) (rerun: 64) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x4}, 0x8) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000600)=0x3fa, 0x4) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xe0c}}, 0x24) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r4, 0x7ca8e000) (async, rerun: 32) writev(r5, &(0x7f0000000080)=[{0x0}], 0x1) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r7, 0x0, 0x0, 0x40002062, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x1000002, {{0xa, 0x4e20, 0x26, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x88) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) r8 = socket(0x28, 0x5, 0x0) (async) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r9, 0x4) (async, rerun: 32) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000440)=0x9, 0x4) (async, rerun: 32) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 1.292937401s ago: executing program 5 (id=5445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x6, 0xe, 0x8, 0x6}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000080) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.10385066s ago: executing program 0 (id=5446): r0 = socket(0x1e, 0x4, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000200)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x8000) 1.081447929s ago: executing program 2 (id=5447): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000009f5e4d5e9407ba3af24330193b6110e1aed7e860d720092885f3a40bba"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}}], 0x48, 0xc800}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, 0x0) getsockopt(r3, 0x111, 0x1, 0x0, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1e27866aa4bb440b9b9ef4ffbdcc023022e5ec658f7e7c8b98fdbc0e6cb145ff6f1adb6c70d4e5a4f2704718838576093fa580f74437a7f4549683752e9edcaf31cd0f6b189dfa69eae6609ae39aa5d1a8dacf35f12367d2600f500558fc2f130c6f1645096c038f79993dbc06ad43f36a19abd080631e836bfd8a7ac9f4155979d28d07f177f2a6320b8aa4ee07c4abb2193a62ea297eb3f924aa09d5d2d6bc77073fa23e5101c4642044", 0xab}], 0x1, &(0x7f0000000100)=[@ip_tos_u8={{0x11}}], 0x18}, 0x810) 933.921993ms ago: executing program 0 (id=5448): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "6345afc09b81b5ef"}}}}}, 0x22) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r4) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) (async) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "6345afc09b81b5ef"}}}}}, 0x22) (async) close(r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r4) (async) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) (async) 849.781872ms ago: executing program 5 (id=5449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bb312823", @ANYRES16=r7, @ANYBLOB="090829bd7000030000000100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x3b4, r7, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaed8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r1}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x20004011}, 0x40) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r5, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) close(0x4) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) read(r4, &(0x7f0000000080)=""/186, 0xba) listen(r3, 0xffffffff) r11 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xffffffff, 0x1, 0x1, 0xd, 0xda86, 0xe, 0x5, {0x0, @in={{0x2, 0x4e20, @empty}}, 0xb0, 0x8, 0x9, 0x3, 0x1}}, &(0x7f0000000040)=0xb0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x8, @void}, 0x10) 824.625047ms ago: executing program 2 (id=5450): r0 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1d}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4001) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 780.434656ms ago: executing program 0 (id=5451): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000"], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) (async) r2 = socket(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 731.656193ms ago: executing program 1 (id=5452): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0xffffffff, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x4, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg(r2, &(0x7f00000006c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x7, r1, 0x1, 0x2, 0x6, @remote}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000540)="e56c0019dd217485a304f3f833de99aef39fd2c211f2839c91d111aa11bc9af73203469663f43cf966435d32184d1266c8561b52f566856e2f486febf450d9e13683603bec0afe5398bb58ddd79021ee7c222798167193a6d86fce97e07c7f4a932c97", 0x63}, {&(0x7f00000005c0)="290bae794c34cdb1954b61147800600de5b4e0dc582fbb29cb1e28e8bee48543d4b32dfb5a973bb62b6ea2564ee5d71d4daf0d16267ace3396ee21da9a43b774e68e949205987819e80afc4403e465", 0x4f}], 0x2}}, {{&(0x7f0000000640)=@ll={0x11, 0x6, r1, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)="3a49df26f162ed4d8c9709779baf46610aea26a3fe44fa6e7e9aa722cf83d0dd7b701726b566022b26845a601eb4593ab7bdfa7d738647556b", 0x39}], 0x1, &(0x7f0000000b40)=[{0x40, 0x11, 0xffffffff, "67ccfbc0a3250f2039a70804af7e709522ef875c31cad4533da281f17a550398e4626a1cf8987f0040cfbdc926f3e6"}, {0xd0, 0x101, 0x657, "5222b47d87ce362c63e5ed09eb4d26cd7a85ad1084b2d6fa3f6418de6f7c47c2eb0d811610ce82321a8c387cefed69f7fa4ebc29c1865d4959c711c1f337caca3f6ae99d91353c05010d2dad8db700af169166747284c87d3cc54bb1ff99e6d538e682eaa337f5dfa3cb9c5d8327a65ec310d2d1c4b1bc880225d1f6cbf3b5360156632af3823afad913a3a76ca23044c4a181aef6b638edd5ab307ad451480457424aaf150a6b0a89945e85568cded8d068cb200e26cf8e61d5"}, {0x88, 0x10b, 0x7fff, "c1453cd0c790f040966e89c5d9d6710dfb20d3ec903b6b79c448fe9b64492cc14ecd2ea2a056730a2fd9a2ccf92f6693e7846560e87627a7e22c054e8dc3ada9a13ee28efd47677477ab26533b919ffc53d93156dd20e785fc196c4d48bf03074e67cb500f2a9a09737ac631a3e40b4cc8e87578bf50ca01"}, {0x100, 0x209, 0x7, "053eaea67cd23d297ce5062ba0ed0a5d2b2d7fe37901d0896439cc43a458f0006a0f197207723c1032dfa9659d655b558d1f9712dd1fc03be96dc73568f533aadf5e9811d39a138659cb43664603fc25feae6b3f6adff1860223fb99ff9c8e2cd69e3f96db1dd44d30905a4881a8752dc2eb25732403fb709859238279946d4b01cb3a1fbd5fecb22762081673bb8333f24556a068464396d2c7c669719db1737dd1e422568f09cf2556eaed47a219b9232de4a1609f8c96e32f3d529e63d4ad8b07e5de3a832082a35d9abcf7ff407616c7f08aab97dde36aae8a637f329fa44ccc1cfbeed0cac9884776"}, {0xc0, 0x116, 0x2958, "d56cdf9ec599e72c1ad8866b22011d2da5debdecbaad63d753647b21027f4eae2fbb006a0506e9cda77542ce8682e69932bcff5d30906cef5879116d562f65d2b93cf2be64771d48c5ea615148095dcd1eaacc377523e138975e4727640087f9de93c1a20b4fad24979440785061dc293a18da3cca39ecb0fd449d5aebefa611e24de34ba67a6bf9b6a15c747a6626631b941d5c8c3715b7a3fc7ee45ee19aa8dd9bf6ec1eebfd08448d"}, {0x108, 0x116, 0x8, "05fc37c90ab0bcf3bf5a29dd4b25794f1c5a12e80f09191e5559fa835bf1838e6f2b659ecc9d5468ff5cf6f3b059bb8fe3907ce28f8c398846fb260f2cfd589222d2f61857fcf59dbbcaf9301b2eface206a6b9fa702b4d0c8b3f89a5476abc12cc3e04ea09284adbe5e93bd29f9b8ee4397ce4a5d4f7ee86f4a3e52b57e23ccbb143083d61bf009002a67f1e5faa474d6f0e137f1acaa5f82f8e2f519aeca8487167d2f14dfeaaff0eddf055da77f8d91612920e63ddb1a658e7d6dff0a34aead697adba47b0d4148d9c515f57dbc332ccba4fcc9704c0f97fc2185ba47ea48a7fb088b90c87f7b35b64f932b50fc139037"}, {0x78, 0x118, 0x5, "ec43e1fae844eaab7384f83ae9319416a775326d8132d2d509a18bd9c70d8bba3894a622c54a1dfd0e832e1d1ac5f253a7dd6a17fcba2c31d8eb5bb354b18459fbc6cc76131683c13830f480cbdcceeed6956ef644954fc7fc795285a68aef501b09769ce8"}, {0xe8, 0x10a, 0x100, "a6140f96da4ee8347fcc07cd4001f157e5f0b82fbaae963be7fb15c552b5eddc19fd556c6061fca0d109c1d3c9b2ae684eba26694ff001bfbc26d0946fa2b762f94c901d6f4398079b4a0db10e1b84e41b933a3af4397c85625fdd99b43cad29ff7439b496362151e64994c42f73f7d2f4dbedc499bafc75dadda23ffdcfdbc2ad064fbfc443ce75f219c78492836e3df7877237716faed297dc34197edd19f9ade6ed499569823fb4fc489bc65ace2f81b2fda76ee2d019a6fc77c96e1e6d071bdf4d9c3043d39e6bf8a88440290de8c539f64f1272d0"}, {0x20, 0x107, 0x78a8a276, "1fc74f93289f11be88ab21a78873f27b"}, {0x88, 0x10f, 0xfffffffa, "945893f7fac29ea29e67b8ad57e3f1185a34843afb781a8688e8cb64c433b14a1275d348ab9c3e2374704111ec62e1ea35ab20276278b9f8966fc48bcdfacddd621dda90d5ef9803748cef838c09f62d0dbb7853febee32a8c48096c44cb447d9c0ad7d2093f96cc034acf28d806f22b4ccb304ee4"}], 0x668}}], 0x2, 0xc0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x355c32cef104cbbc}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 522.494022ms ago: executing program 0 (id=5453): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaa04aaaaaaaa82d6f3aaaaaaaa0008004c00004400000000000690780a210104ac1414aa44140a01e000000100000000e000000100b8de16ad1ecc7b607acde0143431ba23000300000004030ec0a400000000001766ae9b8e2318b91fbfbdf0013f7bcd282900115e7759d74d6d384857cd6dde38bafd59326c0dd11d5e1ed53f360554c4b5150c12273bf36f7de948853a3b1b8a18a889fb1c14bfa0c19c1aade984ef9c06fd1ee5a948b17e399228ca0ee5f5e8284df44ad45399bfe524a6bd4da907f8dcb9ad59a75b80f293a6af61", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c80000090780000"], 0x0) 518.019341ms ago: executing program 2 (id=5454): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x56, r2}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@private1, 0x1c, r2}) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000140)={'macsec0\x00', @ifru_map={0x688, 0xc5, 0x1000, 0x10, 0x3, 0xfd}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 367.459913ms ago: executing program 5 (id=5455): socket$inet(0x10, 0x3, 0x0) (async) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) getpid() (async) r7 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getpid() r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@iter={&(0x7f00000000c0)=@map_fd=r8, 0x10}}, 0x20) r10 = socket$igmp(0x2, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x8, 0x3, 0x8, @vifc_lcl_ifindex=r12, @multicast2}, 0x10) (async) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x8, 0x3, 0x8, @vifc_lcl_ifindex=r12, @multicast2}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r9}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x300, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x25}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x60}}, 0x0) 366.056487ms ago: executing program 0 (id=5456): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000fb937ab0332a77168100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000012002927000000000000000028001a00e00000010000000000006552c5c959000000000000fe8000000000000000000000000000000000ef00"], 0x38}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r3, 0x3, 0x2}) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a801800048014000500000000000000000800000d000800f9ff"], 0x38}}, 0x2400c090) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x82, &(0x7f00000001c0)={r11, 0x0, 0x3ff}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000600)={r11, 0x3, 0x9e, "3edaa2f20e1f4c88f512aa835d92a7587367ef3f38609d3587679b2f2a7149e947fdb1189e773254f07d35cce57f519a42bc9622e3cd84ab81293e971344c50ecfc7b00f4d51a98a6796b63a175815d903cf5e9ef26587b6287a54bd38a1618fbcac6d2a7cfdd7ea516b6d15a44ca7856c6a1622abd88a14834d7dc29c90330413968b92a3cbe4a339cb361ee1fff447f554ecdbb74cbc0283ba4abc3479"}, 0xa6) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) r12 = accept4(r5, 0x0, 0x0, 0x800) write$cgroup_pressure(r4, &(0x7f0000000240)={'some', 0x20, 0x9, 0x20, 0x8}, 0x2f) (async) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) r13 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r13, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltfilter={0xac, 0x2d, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x7, 0xe}, {0xc, 0x9}, {0xfffc, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xe3}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xd, 0xb}}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0x9, 0x4, 0xf, 0x1}, {0xfd38, 0x4, 0x6, 0xc8c9}, {0x8, 0x7, 0x4, 0x200}, {0x85, 0x1, 0xf8, 0x4}, {0x2167, 0x31, 0xb5, 0xffffffff}, {0x0, 0x7, 0x66, 0x2}, {0xf3, 0x3, 0x4, 0x6}, {0x26e, 0x1, 0xf9, 0x6}, {0x4, 0x4, 0xda, 0xb}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0xac}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 309.103158ms ago: executing program 1 (id=5457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff35, &(0x7f0000000380)}, 0x0) (async) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0xff1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$LINK_DETACH(0x22, &(0x7f00000004c0)=r4, 0x4) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x38, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r0}, 0x10) (async) r8 = socket$packet(0x11, 0x2, 0x300) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @hyper}, 0x10) (async) listen(r9, 0x0) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0xffffff65) (async) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) shutdown(r10, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="01000000020000000400000004"], 0x48) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYRES16=r5, @ANYRES16=r11, @ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (async) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x400000000000235, 0x0) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="0000889e05ceca2495f6e6755b9e8a2a6f6850077994fc", 0x17, 0x14000b01, &(0x7f0000000080)={0x11, 0xf5, r13, 0x1, 0x80, 0x6, @random="87459245ffd5"}, 0x14) 125.819536ms ago: executing program 1 (id=5458): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket(0x10, 0x80000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100, 0xb59d27701cdff289}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="5701000000000600000006000000dc38f73b28c0c22c053c665ee72939d611d63a0f4171585fb0325339c584d5bcef5d817bf6db696004869ff78424ba1deb472c489cfb56b5d6feeace81317e957afd78953b7b4eeff16b1c2667f3acb0c8dc7e5101996b02ab5ac4dd32b47991eb9b1022d92268cf091d3e866e2a138dbd307b003f1f9077c2df13942d675eb8d0f2ed175a21d418f8fba4517b1a7c02e1756b8c3ffed9540f1cd19a9adf89fc07dec3e5a4c91b93cd4e0386e9d5c4d96383ec4979e90dfd6ca83b0f5e0f"], 0x14}}, 0x0) r4 = socket(0x25, 0x80802, 0xfffffffd) bind$netlink(r4, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r6 = socket$netlink(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r7, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140800004800010025bd70000500000000000000e502f12364847f7858062f925f607d1478ed4fcd3a749e5689f02325dcdc70a11d7e9e65833053d822e16a4ff1b630d2fe457ccaa0b1018e4fb6f25b7dfe20"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x24004894) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r9, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) 0s ago: executing program 0 (id=5459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r4, 0x3}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)={r5, 0x2, 0x1, 'L'}, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a80)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x7, 0x1, 0x10, 0x8}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): unable to set because the bond device has slaves [ 333.641075][T17635] geneve2: entered promiscuous mode [ 333.658386][T17635] geneve2: entered allmulticast mode [ 333.694496][ T60] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 333.739153][ T60] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 333.748342][ T1150] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 333.772312][ T1150] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 333.850888][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 333.944489][T17658] openvswitch: netlink: Flow actions attr not present in new flow. [ 334.004984][T17654] syzkaller0: entered promiscuous mode [ 334.042368][T17654] syzkaller0: entered allmulticast mode [ 334.204786][T17670] __nla_validate_parse: 3 callbacks suppressed [ 334.204808][T17670] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3314'. [ 334.224975][T17670] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3314'. [ 334.237704][T17671] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3314'. [ 334.322031][T17671] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3314'. [ 334.383922][T17683] netlink: 'syz.3.3317': attribute type 1 has an invalid length. [ 334.391911][T17683] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3317'. [ 334.403473][T17683] nbd: couldn't find device at index 1048576 [ 334.422533][T17681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3316'. [ 334.563211][T17687] delete_channel: no stack [ 334.599753][T17687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'. [ 335.195102][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'. [ 335.518461][T17733] sock: sock_timestamping_bind_phc: sock not bind to device [ 335.705751][T17747] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 335.719695][T17747] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3336'. [ 335.747261][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3337'. [ 335.872580][T17755] bridge0: entered promiscuous mode [ 335.879279][T17755] macsec1: entered promiscuous mode [ 335.884834][T17755] macsec1: entered allmulticast mode [ 335.890573][T17755] bridge0: entered allmulticast mode [ 336.245265][T17775] tipc: Enabled bearer , priority 0 [ 336.253920][T17775] syzkaller0: entered promiscuous mode [ 336.261439][T17775] syzkaller0: entered allmulticast mode [ 336.296939][T17775] tipc: Resetting bearer [ 336.305638][T17778] Bluetooth: MGMT ver 1.23 [ 336.342584][T17773] tipc: Resetting bearer [ 336.380048][T17773] tipc: Disabling bearer [ 336.615485][T17791] veth7: entered allmulticast mode [ 336.771292][T17798] syzkaller0: entered promiscuous mode [ 336.799119][T17798] syzkaller0: entered allmulticast mode [ 336.812266][T17802] netlink: 'syz.0.3360': attribute type 23 has an invalid length. [ 337.346046][T17821] 8021q: VLANs not supported on gre0 [ 337.596291][T17840] netlink: 'syz.2.3371': attribute type 24 has an invalid length. [ 337.672456][T17837] vlan2: entered allmulticast mode [ 337.696760][T17837] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 337.983473][T17858] C: renamed from team_slave_0 (while UP) [ 338.007306][T17858] netlink: 'syz.1.3380': attribute type 1 has an invalid length. [ 338.027425][T17858] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 338.170439][T17870] block nbd0: not configured, cannot reconfigure [ 338.178863][T17870] x_tables: duplicate underflow at hook 1 [ 338.189698][T17870] netlink: 'syz.1.3383': attribute type 3 has an invalid length. [ 338.223043][T17874] vxcan1: entered promiscuous mode [ 338.333375][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 338.340880][ T6415] Dead loop on virtual device ip6_vti0, fix it urgently! [ 338.452574][T17886] veth0: entered promiscuous mode [ 338.504192][T17886] veth0: left promiscuous mode [ 338.937183][T17905] syzkaller0: entered promiscuous mode [ 338.948961][T17905] syzkaller0: entered allmulticast mode [ 338.972648][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 338.982858][T17905] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 339.536607][T17952] __nla_validate_parse: 26 callbacks suppressed [ 339.536626][T17952] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3405'. [ 339.631936][T17952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3405'. [ 339.886177][T17969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3411'. [ 339.896279][T17969] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3411'. [ 339.907100][T17969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3411'. [ 339.959929][T17969] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 339.993741][T17970] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 340.012539][T17971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3412'. [ 340.239178][T17986] netlink: 'syz.2.3416': attribute type 1 has an invalid length. [ 340.591910][T18016] tipc: Enabling of bearer rejected, failed to enable media [ 340.623628][T18019] netlink: 'syz.5.3424': attribute type 1 has an invalid length. [ 340.780849][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3423'. [ 340.785639][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3426'. [ 340.825326][T18022] bond10: (slave geneve2): making interface the new active one [ 340.836705][T18022] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 340.865258][T18026] tipc: Enabling of bearer rejected, failed to enable media [ 340.878955][ T5924] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 340.880233][T18034] netlink: 'syz.0.3427': attribute type 1 has an invalid length. [ 340.912303][ T5924] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 340.928576][T18034] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3427'. [ 340.948431][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3427'. [ 340.988467][ T5924] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 341.007549][ T5924] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 341.132062][T18044] sctp: [Deprecated]: syz.1.3432 (pid 18044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.132062][T18044] Use struct sctp_sack_info instead [ 341.178597][T18044] sctp: [Deprecated]: syz.1.3432 (pid 18044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.178597][T18044] Use struct sctp_sack_info instead [ 341.707644][T18079] netlink: 'syz.3.3442': attribute type 29 has an invalid length. [ 341.759098][T18079] netlink: 'syz.3.3442': attribute type 29 has an invalid length. [ 341.937986][T18090] nbd: socks must be embedded in a SOCK_ITEM attr [ 342.246918][T18111] netlink: 'syz.3.3451': attribute type 3 has an invalid length. [ 342.404229][T18120] 8021q: adding VLAN 0 to HW filter on device bond11 [ 342.613635][ T6359] IPVS: starting estimator thread 0... [ 342.708596][T18136] IPVS: using max 28 ests per chain, 67200 per kthread [ 343.137972][T18161] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.293773][T18161] bridge_slave_1 (unregistering): left allmulticast mode [ 343.330719][T18161] bridge_slave_1 (unregistering): left promiscuous mode [ 343.346806][T18161] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.642619][T18183] netlink: 'syz.2.3470': attribute type 33 has an invalid length. [ 343.813364][T18189] netlink: 'syz.5.3475': attribute type 18 has an invalid length. [ 343.971057][ T37] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.985236][ T37] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.014802][ T37] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.048275][ T37] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.240791][T18205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.254461][T18205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.265344][T18205] bond0 (unregistering): Released all slaves [ 344.463533][T18218] netlink: 'syz.0.3484': attribute type 1 has an invalid length. [ 344.501048][T18220] veth3: entered promiscuous mode [ 344.526872][T18221] tipc: Enabled bearer , priority 0 [ 344.534101][T18218] syzkaller1: entered promiscuous mode [ 344.540096][T18218] syzkaller1: entered allmulticast mode [ 344.571027][T18226] veth3: entered promiscuous mode [ 344.597142][T18221] syzkaller0: entered promiscuous mode [ 344.602014][T18230] __nla_validate_parse: 14 callbacks suppressed [ 344.602037][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3486'. [ 344.604053][T18221] syzkaller0: entered allmulticast mode [ 344.624868][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3486'. [ 344.665237][T18220] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 344.679275][T18220] bond1 (unregistering): Released all slaves [ 344.716658][T18235] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3489'. [ 344.737861][T18234] tipc: Resetting bearer [ 344.756591][T18235] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.817785][T18216] tipc: Resetting bearer [ 344.854281][T18216] tipc: Disabling bearer [ 344.904270][T18243] netlink: 'syz.2.3490': attribute type 23 has an invalid length. [ 345.328013][T18267] netlink: 'syz.1.3498': attribute type 8 has an invalid length. [ 345.552362][T18281] sit1: entered promiscuous mode [ 345.557394][T18281] sit1: entered allmulticast mode [ 345.884750][T18299] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3508'. [ 345.983369][ T37] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.995055][ T37] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.005295][ T6415] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.047323][ T6415] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.161216][T18317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3512'. [ 346.197008][T18317] netlink: 'syz.3.3512': attribute type 9 has an invalid length. [ 346.277183][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3514'. [ 346.297719][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3515'. [ 346.382184][T18331] netlink: 'syz.0.3515': attribute type 1 has an invalid length. [ 346.394696][T18331] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3515'. [ 346.606432][T18338] netlink: 'syz.3.3520': attribute type 2 has an invalid length. [ 346.880822][ T37] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 346.912598][T18357] netlink: 'syz.3.3526': attribute type 11 has an invalid length. [ 346.929807][ T37] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 346.950063][T18357] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3526'. [ 346.962028][ T37] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 346.988061][ T37] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 347.167443][T18371] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3531'. [ 347.373421][T18389] netlink: 'syz.5.3535': attribute type 2 has an invalid length. [ 347.416204][T18396] delete_channel: no stack [ 348.062223][T18441] bond1: entered allmulticast mode [ 348.069324][T18441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.133410][T18441] bridge0: port 2(bond1) entered blocking state [ 348.141311][T18441] bridge0: port 2(bond1) entered disabled state [ 348.151692][T18441] bond1: entered promiscuous mode [ 348.157655][T18441] bridge0: port 2(bond1) entered blocking state [ 348.164109][T18441] bridge0: port 2(bond1) entered forwarding state [ 348.233267][T18447] netlink: 'syz.2.3551': attribute type 10 has an invalid length. [ 348.249972][T18451] netlink: 'syz.2.3551': attribute type 10 has an invalid length. [ 348.293794][ T6416] bridge0: port 2(bond1) entered disabled state [ 348.316500][T18447] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 348.490915][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 348.740061][T18472] netlink: 'syz.5.3559': attribute type 1 has an invalid length. [ 348.764757][T18472] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 348.782800][T18469] dvmrp1: entered allmulticast mode [ 349.653485][T18503] netlink: 'syz.2.3565': attribute type 1 has an invalid length. [ 349.861372][ T6415] Dead loop on virtual device ip6_vti0, fix it urgently! [ 350.030216][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 350.503883][ T1112] Dead loop on virtual device ip6_vti0, fix it urgently! [ 350.611831][T18503] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 350.704195][T18508] xt_TCPMSS: Only works on TCP SYN packets [ 350.793122][T18510] __nla_validate_parse: 11 callbacks suppressed [ 350.793143][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3566'. [ 350.811606][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3566'. [ 350.822117][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3566'. [ 350.837794][T18510] netlink: 'syz.5.3566': attribute type 15 has an invalid length. [ 350.847226][T18514] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 351.175557][T18535] x_tables: duplicate underflow at hook 2 [ 351.221145][T18538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3575'. [ 351.271344][T18539] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3575'. [ 351.507306][T18526] vxcan1 speed is unknown, defaulting to 1000 [ 351.650214][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3579'. [ 351.726942][T18560] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3580'. [ 352.099165][T18570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3585'. [ 352.123115][T18570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3585'. [ 352.137897][T18570] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3585'. [ 352.286740][T18579] tipc: Enabling of bearer rejected, media not registered [ 352.384124][T18581] tipc: Enabled bearer , priority 0 [ 352.418720][T18586] syzkaller0: entered promiscuous mode [ 352.424630][T18586] syzkaller0: entered allmulticast mode [ 352.516945][T18591] netlink: 'syz.3.3591': attribute type 10 has an invalid length. [ 353.772955][T18586] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 353.793717][T18590] lo: left allmulticast mode [ 353.804578][T18590] tunl0: left allmulticast mode [ 353.811975][T18590] gre0: left allmulticast mode [ 353.821491][T18590] gretap0: left allmulticast mode [ 353.828925][T18590] erspan0: left allmulticast mode [ 353.837882][T18590] ip_vti0: left allmulticast mode [ 353.845419][T18590] ip6_vti0: left allmulticast mode [ 353.852690][T18590] sit0: left allmulticast mode [ 353.863740][T18590] ip6tnl0: left allmulticast mode [ 353.873115][T18590] ip6gre0: left allmulticast mode [ 353.880445][T18590] syz_tun: left allmulticast mode [ 353.887940][T18590] ip6gretap0: left allmulticast mode [ 353.895842][T18590] bridge0: left allmulticast mode [ 353.902973][T18590] vcan0: left allmulticast mode [ 353.909569][T18590] bond0: left allmulticast mode [ 353.917005][T18590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.925539][T18590] team0: left allmulticast mode [ 353.932457][T18590] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.940857][T18590] dummy0: left allmulticast mode [ 353.948589][T18590] nlmon0: left allmulticast mode [ 353.955457][T18590] caif0: left allmulticast mode [ 353.962029][T18590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.009080][T18593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.060138][T18595] tipc: Resetting bearer [ 354.087421][T18605] netlink: 'syz.1.3595': attribute type 1 has an invalid length. [ 354.090861][T18596] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 354.120433][T18596] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 354.131300][T18596] gretap3: entered promiscuous mode [ 354.138776][T18596] gretap3: entered allmulticast mode [ 354.150578][T18580] tipc: Resetting bearer [ 354.184417][T18580] tipc: Disabling bearer [ 354.199149][T18609] syz.1.3595 (18609) used obsolete PPPIOCDETACH ioctl [ 354.330906][ T5924] Dead loop on virtual device ip6_vti0, fix it urgently! [ 354.428899][T18618] netlink: 'syz.5.3601': attribute type 1 has an invalid length. [ 354.533606][T18623] netlink: 'syz.1.3602': attribute type 6 has an invalid length. [ 354.562266][T18633] netlink: 'syz.3.3605': attribute type 1 has an invalid length. [ 354.611361][T18629] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 354.624361][T18629] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 354.738561][T18618] vlan1: entered allmulticast mode [ 354.743752][T18618] bridge0: entered allmulticast mode [ 354.764610][T18618] bond12: (slave vlan1): Opening slave failed [ 355.611915][ T60] Dead loop on virtual device ip6_vti0, fix it urgently! [ 355.833881][T18691] netlink: 'syz.0.3621': attribute type 10 has an invalid length. [ 355.854361][T18691] wg0: left allmulticast mode [ 355.884113][T18689] __nla_validate_parse: 5 callbacks suppressed [ 355.884144][T18689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 355.917873][T18689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 355.960254][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3623'. [ 355.981107][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3623'. [ 356.002237][T18695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.052445][T18702] tipc: Enabled bearer , priority 0 [ 356.072845][T18704] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3626'. [ 356.095642][T18702] syzkaller0: entered promiscuous mode [ 356.104337][T18702] syzkaller0: entered allmulticast mode [ 356.120147][T18704] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3626'. [ 356.156951][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3626'. [ 356.157333][T18702] tipc: Resetting bearer [ 356.177808][T18699] tipc: Resetting bearer [ 356.218529][T18713] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 356.227116][T18699] tipc: Disabling bearer [ 356.240282][T18714] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3629'. [ 356.250477][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 356.276095][T18715] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3629'. [ 356.360649][T18718] netlink: 'syz.2.3631': attribute type 32 has an invalid length. [ 356.378825][T18718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3631'. [ 356.497404][T18718] bond1: option coupled_control: invalid value (52) [ 356.512105][T18718] bond1 (unregistering): Released all slaves [ 356.605731][T18738] IPVS: Error connecting to the multicast addr [ 356.626264][T18743] IPVS: Error connecting to the multicast addr [ 357.101316][T18770] dvmrp1: entered allmulticast mode [ 357.164630][T18776] netlink: 'syz.2.3649': attribute type 1 has an invalid length. [ 357.189615][T18776] nbd: illegal input index 1048576 [ 357.393981][T18799] unsupported nlmsg_type 40 [ 357.537294][T18803] syzkaller0: entered promiscuous mode [ 357.544247][T18803] syzkaller0: entered allmulticast mode [ 357.556781][T18805] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 358.057274][T18821] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 359.180333][T18845] syzkaller0: entered promiscuous mode [ 359.220723][T18845] syzkaller0: entered allmulticast mode [ 359.368660][ T5831] Bluetooth: hci0: command tx timeout [ 359.684342][T18877] netlink: 'syz.0.3676': attribute type 2 has an invalid length. [ 359.723395][T18883] veth0_vlan: mtu less than device minimum [ 359.880544][T18894] nbd: couldn't find a device at index -373156329 [ 360.203229][T18918] syzkaller1: entered promiscuous mode [ 360.219059][T18918] syzkaller1: entered allmulticast mode [ 360.345835][T18921] tipc: Enabled bearer , priority 0 [ 360.354595][T18928] delete_channel: no stack [ 360.371888][T18923] syzkaller0: entered promiscuous mode [ 360.377422][T18923] syzkaller0: entered allmulticast mode [ 360.451971][T18924] tipc: Resetting bearer [ 360.472929][T18931] netlink: 'syz.2.3695': attribute type 5 has an invalid length. [ 360.487057][T18920] tipc: Resetting bearer [ 360.511237][T18920] tipc: Disabling bearer [ 360.538395][T18932] tap0: tun_chr_ioctl cmd 1074025678 [ 360.544007][T18932] tap0: group set to 0 [ 360.799594][T18953] netlink: zone id is out of range [ 360.830469][T18953] netlink: del zone limit has 4 unknown bytes [ 360.837980][T18953] netlink: zone id is out of range [ 360.898893][T18953] netlink: del zone limit has 4 unknown bytes [ 360.931062][T18961] __nla_validate_parse: 13 callbacks suppressed [ 360.931084][T18961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3705'. [ 361.064966][T18965] netlink: 'syz.3.3707': attribute type 11 has an invalid length. [ 361.074594][T18965] netlink: 'syz.3.3707': attribute type 11 has an invalid length. [ 361.093935][T18965] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3707'. [ 361.173910][T18976] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3710'. [ 361.364338][ T5893] IPVS: starting estimator thread 0... [ 361.468496][T18988] IPVS: using max 26 ests per chain, 62400 per kthread [ 361.600284][T19003] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3718'. [ 361.702249][T19008] syzkaller1: entered promiscuous mode [ 361.711167][T19008] syzkaller1: entered allmulticast mode [ 361.844727][T19018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3719'. [ 361.888469][T19019] netlink: 'syz.0.3721': attribute type 29 has an invalid length. [ 361.919118][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'. [ 361.996895][T19026] netlink: 'syz.0.3721': attribute type 29 has an invalid length. [ 362.022233][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'. [ 362.080627][T19033] syzkaller1: entered promiscuous mode [ 362.098491][T19033] syzkaller1: entered allmulticast mode [ 362.194010][T19036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.213913][T19039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3724'. [ 362.233682][T19038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3725'. [ 362.361184][T19044] netem: change failed [ 362.498671][T19053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3731'. [ 362.627862][T19053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.691569][T19060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.699041][T19060] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 362.710992][T19060] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 362.739149][T19068] xt_CT: No such helper "syz1" [ 363.070307][T19081] tipc: Enabled bearer , priority 0 [ 363.178356][T19088] netlink: 'syz.2.3741': attribute type 58 has an invalid length. [ 363.246633][T19093] vlan2: entered promiscuous mode [ 363.256407][T19094] netlink: 'syz.3.3742': attribute type 7 has an invalid length. [ 363.264128][T19093] bond0: entered promiscuous mode [ 363.272982][T19093] bond_slave_0: entered promiscuous mode [ 363.296715][T19094] netlink: 'syz.3.3742': attribute type 8 has an invalid length. [ 363.310153][T19093] bond_slave_1: entered promiscuous mode [ 363.464380][T19079] tipc: Disabling bearer [ 363.752469][T19113] bond1: Unable to set up delay as MII monitoring is disabled [ 363.769756][T19113] bond1 (unregistering): Released all slaves [ 363.810949][T19124] netlink: 'syz.5.3752': attribute type 1 has an invalid length. [ 363.923567][T19124] bond13: entered promiscuous mode [ 363.932845][T19124] 8021q: adding VLAN 0 to HW filter on device bond13 [ 363.946125][T19115] syzkaller1: entered promiscuous mode [ 363.958317][T19115] syzkaller1: entered allmulticast mode [ 364.032451][T19130] 8021q: adding VLAN 0 to HW filter on device bond13 [ 364.048695][T19130] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 364.067758][T19130] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 364.123800][T19130] bond13: (slave wireguard0): making interface the new active one [ 364.134860][T19130] wireguard0: entered promiscuous mode [ 364.147675][T19130] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 364.366148][T19156] veth0_to_batadv: mtu less than device minimum [ 364.409980][T19163] netlink: 'syz.1.3762': attribute type 1 has an invalid length. [ 364.721707][T19160] macvlan2: entered promiscuous mode [ 364.738633][T19160] macvlan2: entered allmulticast mode [ 364.763711][T19160] bond3: entered promiscuous mode [ 364.774324][T19160] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 364.787228][T19160] bond3: left promiscuous mode [ 365.040012][T19199] netlink: 'syz.2.3774': attribute type 8 has an invalid length. [ 365.154211][T19211] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 365.410882][T19223] netlink: 'syz.0.3780': attribute type 10 has an invalid length. [ 365.426914][T19223] geneve0: left allmulticast mode [ 365.479636][T19223] team0: Port device geneve0 added [ 365.486922][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.498211][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.525913][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.547630][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.602136][T19235] netlink: 'syz.3.3785': attribute type 1 has an invalid length. [ 365.704681][T19235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.737577][T19235] bond1: (slave bond2): making interface the new active one [ 365.752241][T19235] bond1: (slave bond2): Enslaving as an active interface with an up link [ 365.852295][ T37] Dead loop on virtual device ip6_vti0, fix it urgently! [ 365.899773][T19256] netlink: 'syz.3.3790': attribute type 12 has an invalid length. [ 365.967498][T19256] __nla_validate_parse: 66 callbacks suppressed [ 365.967519][T19256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3790'. [ 366.248812][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'. [ 366.306222][T19275] sit1: left promiscuous mode [ 366.380228][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3798'. [ 366.439759][ T6415] Dead loop on virtual device ip6_vti0, fix it urgently! [ 366.614175][T19290] netlink: 'syz.2.3802': attribute type 12 has an invalid length. [ 366.657352][T19290] xt_connbytes: Forcing CT accounting to be enabled [ 366.670050][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3805'. [ 366.681125][T19302] batadv_slave_0: left allmulticast mode [ 366.728609][T19303] dvmrp0: entered allmulticast mode [ 366.749287][T19304] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3804'. [ 366.829437][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3808'. [ 367.080325][T19327] sctp: [Deprecated]: syz.0.3812 (pid 19327) Use of int in maxseg socket option. [ 367.080325][T19327] Use struct sctp_assoc_value instead [ 367.098615][T19328] netlink: 'syz.3.3811': attribute type 5 has an invalid length. [ 367.107928][T19328] IPVS: set_ctl: invalid protocol: 59 108.1.1.2:20004 [ 367.144408][ T6416] Dead loop on virtual device ip6_vti0, fix it urgently! [ 367.224554][T19337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3815'. [ 367.349038][T19344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3818'. [ 367.358289][T19344] netlink: 'syz.0.3818': attribute type 7 has an invalid length. [ 367.366164][T19344] netlink: 'syz.0.3818': attribute type 8 has an invalid length. [ 367.380209][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3818'. [ 367.682047][T19371] erspan0: entered allmulticast mode [ 367.829529][T19373] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3827'. [ 367.948523][T19328] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 367.990221][T19384] netlink: 'syz.1.3831': attribute type 1 has an invalid length. [ 368.059363][T19384] tipc: Enabling of bearer rejected, failed to enable media [ 368.137787][T19384] bond4: (slave ip6gretap1): making interface the new active one [ 368.170560][T19384] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 368.188910][T19384] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 368.196837][T19384] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 368.211207][T19401] netlink: 'syz.3.3834': attribute type 12 has an invalid length. [ 368.462921][T19421] tipc: Enabled bearer , priority 0 [ 368.484287][T19421] syzkaller0: entered promiscuous mode [ 368.503412][T19421] syzkaller0: entered allmulticast mode [ 368.674134][T19418] tipc: Resetting bearer [ 368.776594][T19418] tipc: Disabling bearer [ 368.804969][T19441] tipc: Started in network mode [ 368.814247][T19441] tipc: Node identity 52cdd332b0cd, cluster identity 4711 [ 368.823931][T19441] tipc: Enabled bearer , priority 0 [ 368.911893][T19441] tipc: Disabling bearer [ 369.901293][T19519] netlink: 'syz.0.3871': attribute type 11 has an invalid length. [ 370.097996][T19535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.189160][T19539] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 370.971472][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 376.731595][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 377.929579][ T37] Dead loop on virtual device ip6_vti0, fix it urgently! [ 378.010842][ T6416] Dead loop on virtual device ip6_vti0, fix it urgently! [ 382.491299][ T37] Dead loop on virtual device ip6_vti0, fix it urgently! [ 383.776936][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 383.778937][ T6416] Dead loop on virtual device ip6_vti0, fix it urgently! [ 383.786406][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.797285][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 391.892965][T19572] validate_nla: 5 callbacks suppressed [ 391.892986][T19572] netlink: 'syz.1.3888': attribute type 1 has an invalid length. [ 391.935122][T19570] __nla_validate_parse: 15 callbacks suppressed [ 391.935144][T19570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3887'. [ 392.718846][T19625] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3895'. [ 393.040923][T19622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.060050][T19622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.482406][T19622] geneve2: left promiscuous mode [ 393.487428][T19622] geneve2: left allmulticast mode [ 393.519815][T19595] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.556987][T19595] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 393.586659][T19595] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.615413][T19595] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 393.649239][T19595] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.665488][T19595] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 393.699498][T19595] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.724361][T19595] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 393.813020][T19650] netlink: 'syz.1.3900': attribute type 1 has an invalid length. [ 394.000295][T19650] 8021q: adding VLAN 0 to HW filter on device bond5 [ 394.017716][T19604] Dead loop on virtual device ip6_vti0, fix it urgently! [ 394.333401][T19682] netlink: 'syz.2.3909': attribute type 4 has an invalid length. [ 394.538221][T19684] bond1: (slave bond_slave_1): Device is not our slave [ 394.568721][T19684] bond1: option active_slave: invalid value (bond_slave_1) [ 394.615006][T19684] bond1 (unregistering): Released all slaves [ 394.651048][T19606] Dead loop on virtual device ip6_vti0, fix it urgently! [ 394.786512][T19713] netlink: 'syz.0.3914': attribute type 11 has an invalid length. [ 394.814556][T19680] delete_channel: no stack [ 394.820088][T19713] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3914'. [ 394.934340][T19724] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3919'. [ 394.948018][T19719] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3916'. [ 394.961819][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3919'. [ 394.973700][T19724] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 394.981883][T19724] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 394.989435][T19724] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3919'. [ 395.204658][T19737] x_tables: duplicate underflow at hook 4 [ 395.252715][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3926'. [ 395.292032][ T13] Dead loop on virtual device ip6_vti0, fix it urgently! [ 395.526612][T19759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3929'. [ 395.946301][T19786] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3938'. [ 395.963167][T19786] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 395.972821][T19786] 0ªî{X¹¦: entered allmulticast mode [ 395.979054][T19786] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 396.699833][T19802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.749467][T19805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.964808][T19820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3944'. [ 397.131081][T19817] tipc: Enabled bearer , priority 0 [ 397.140923][T19820] syzkaller0: entered promiscuous mode [ 397.146842][T19820] syzkaller0: entered allmulticast mode [ 397.166362][T19811] tipc: Resetting bearer [ 397.181953][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3949'. [ 397.199205][T19810] tipc: Resetting bearer [ 397.237781][T19810] tipc: Disabling bearer [ 397.257204][T19833] netlink: 'syz.2.3949': attribute type 1 has an invalid length. [ 397.273039][T19833] netlink: 'syz.2.3949': attribute type 2 has an invalid length. [ 397.419517][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3952'. [ 397.437526][T19841] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3952'. [ 397.464284][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3952'. [ 397.509219][T19841] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3952'. [ 397.962841][T19870] dvmrp1: left allmulticast mode [ 398.341468][T19886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3967'. [ 398.495363][T19890] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 398.506842][T19890] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 398.855046][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3976'. [ 399.006735][T19919] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3979'. [ 399.048894][T19920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3978'. [ 399.348367][T19606] nci: nci_rsp_packet: unsupported rsp opcode 0xf09 [ 399.536638][T19955] syzkaller1: entered promiscuous mode [ 399.543296][T19955] syzkaller1: entered allmulticast mode [ 399.689664][T19606] Dead loop on virtual device ip6_vti0, fix it urgently! [ 399.770377][T19606] Dead loop on virtual device ip6_vti0, fix it urgently! [ 400.352315][T19986] x_tables: unsorted entry at hook 2 [ 400.410247][ T13] Dead loop on virtual device ip6_vti0, fix it urgently! [ 400.920461][T20024] netlink: 'syz.1.4005': attribute type 2 has an invalid length. [ 400.993023][T20020] vxcan1 speed is unknown, defaulting to 1000 [ 401.317447][T20035] tipc: Enabled bearer , priority 0 [ 401.339494][T20035] syzkaller0: entered promiscuous mode [ 401.348441][T20035] syzkaller0: entered allmulticast mode [ 401.423828][T20035] tipc: Resetting bearer [ 401.437219][T20034] tipc: Resetting bearer [ 401.480454][T20034] tipc: Disabling bearer [ 401.863658][T20053] syzkaller0: entered promiscuous mode [ 401.871096][T20053] syzkaller0: entered allmulticast mode [ 401.896643][T20050] tipc: Enabled bearer , priority 0 [ 401.920192][T20050] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 401.986873][T20067] __nla_validate_parse: 12 callbacks suppressed [ 401.986894][T20067] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4015'. [ 402.006731][T20050] tipc: Resetting bearer [ 402.017893][T20049] tipc: Resetting bearer [ 402.064684][T20049] tipc: Disabling bearer [ 402.551457][T20096] netlink: 'syz.5.4022': attribute type 1 has an invalid length. [ 402.633605][T20103] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4022'. [ 402.659890][T20104] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4022'. [ 402.661622][T20096] 8021q: adding VLAN 0 to HW filter on device bond14 [ 402.685212][T20096] netlink: 'syz.5.4022': attribute type 1 has an invalid length. [ 402.701237][T20098] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 402.716295][T20098] bond1: entered promiscuous mode [ 402.722372][T20098] bond1: entered allmulticast mode [ 402.727997][T20098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.758375][T20103] bond14: entered allmulticast mode [ 402.781530][T20110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4025'. [ 402.822205][T20110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4025'. [ 402.839878][T20113] netlink: 'syz.2.4027': attribute type 1 has an invalid length. [ 402.909618][T20113] bond2: entered promiscuous mode [ 402.915209][T20113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.961811][T20117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.987235][T20117] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 403.000008][T20117] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 403.015441][T20117] bond2: (slave wireguard0): making interface the new active one [ 403.041692][T20117] wireguard0: entered promiscuous mode [ 403.069584][T20117] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 403.441130][T20113] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 403.452118][T20113] wireguard0: left promiscuous mode [ 403.541415][T20142] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4034'. [ 403.576566][T20113] bond2 (unregistering): Released all slaves [ 403.585548][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4035'. [ 403.661789][T20139] netlink: 'syz.5.4035': attribute type 1 has an invalid length. [ 403.673264][T20139] netlink: 'syz.5.4035': attribute type 29 has an invalid length. [ 403.682480][T20139] netlink: 'syz.5.4035': attribute type 29 has an invalid length. [ 403.709423][T20139] netlink: 'syz.5.4035': attribute type 29 has an invalid length. [ 403.717511][T20139] netlink: 'syz.5.4035': attribute type 29 has an invalid length. [ 403.787304][T20141] gre3: entered promiscuous mode [ 403.804131][T20141] gre3: entered allmulticast mode [ 403.840808][T20139] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4035'. [ 404.024735][T20159] netlink: 'syz.2.4042': attribute type 21 has an invalid length. [ 404.051886][T20159] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4042'. [ 404.074978][T20159] netlink: 'syz.2.4042': attribute type 4 has an invalid length. [ 404.099163][T20163] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4042'. [ 404.135649][T20165] batadv0: entered promiscuous mode [ 404.155002][T20165] bond0: entered promiscuous mode [ 404.162045][T20165] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 404.186272][T20165] hsr1: entered allmulticast mode [ 404.195649][T20165] batadv0: entered allmulticast mode [ 404.208334][T20165] bond0: entered allmulticast mode [ 404.222605][T20165] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 405.156824][T20215] tipc: Started in network mode [ 405.162875][T20215] tipc: Node identity , cluster identity 4711 [ 405.169226][T20215] tipc: Failed to set node id, please configure manually [ 405.177038][T20215] tipc: Enabling of bearer rejected, failed to enable media [ 405.260399][T20212] sctp: [Deprecated]: syz.1.4059 (pid 20212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.260399][T20212] Use struct sctp_sack_info instead [ 405.915984][T20257] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 405.925552][T10228] IPVS: starting estimator thread 0... [ 406.038282][T20258] IPVS: using max 25 ests per chain, 60000 per kthread [ 406.116123][T20274] batadv0: entered allmulticast mode [ 406.123222][T20274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.461091][T20302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.024138][T20319] __nla_validate_parse: 21 callbacks suppressed [ 407.024161][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4087'. [ 407.073382][T20321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4090'. [ 407.272656][T20332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.309838][T20332] bond4: (slave gretap1): making interface the new active one [ 407.319750][T20332] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 407.527616][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4098'. [ 407.654685][T20359] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4100'. [ 407.668045][T20359] team0: No ports can be present during mode change [ 407.867732][T20377] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4107'. [ 407.893199][T20377] gretap0: entered promiscuous mode [ 407.903288][T20377] gretap0: left allmulticast mode [ 407.914314][T20378] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4107'. [ 407.932864][T20377] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4107'. [ 407.953176][T20378] 0ªî{X¹¦: renamed from gretap0 [ 407.969747][T20378] 0ªî{X¹¦: left promiscuous mode [ 407.982343][T20378] 0ªî{X¹¦: entered allmulticast mode [ 407.999299][T20378] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 408.044869][T20377] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 408.057739][T20377] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 408.077454][T20387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4110'. [ 408.279030][T20395] validate_nla: 11 callbacks suppressed [ 408.279051][T20395] netlink: 'syz.1.4112': attribute type 1 has an invalid length. [ 408.296368][T20402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4113'. [ 408.377936][T20409] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4110'. [ 408.394734][T20392] veth0: entered promiscuous mode [ 408.413408][T20395] tipc: Started in network mode [ 408.419055][T20395] tipc: Node identity 4298643eaec2, cluster identity 4711 [ 408.426493][T20395] tipc: Enabled bearer , priority 0 [ 408.626490][T20394] tipc: Disabling bearer [ 408.771083][T20427] netlink: 'syz.5.4119': attribute type 1 has an invalid length. [ 408.779275][T20427] netlink: 'syz.5.4119': attribute type 1 has an invalid length. [ 408.797492][T20422] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 408.923588][T20435] delete_channel: no stack [ 409.147075][T20386] veth0: left promiscuous mode [ 409.163220][T20447] netlink: 'syz.1.4122': attribute type 10 has an invalid length. [ 409.588939][T20471] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20001 [ 409.930519][T19606] Dead loop on virtual device ip6_vti0, fix it urgently! [ 410.327412][T20522] netlink: 'syz.2.4143': attribute type 1 has an invalid length. [ 410.584970][T20525] bond2: (slave gretap1): making interface the new active one [ 410.594380][T20525] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 410.650305][T19595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 410.685635][T20522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 410.936652][T20554] netlink: 'syz.3.4151': attribute type 4 has an invalid length. [ 411.037224][T20561] tipc: Enabled bearer , priority 0 [ 411.071732][T20561] syzkaller0: entered promiscuous mode [ 411.077358][T20561] syzkaller0: entered allmulticast mode [ 411.263362][T20570] tipc: Resetting bearer [ 411.301771][T20572] team0: Device wireguard0 is of different type [ 411.543366][T20592] tipc: Enabling of bearer rejected, failed to enable media [ 411.717207][T20609] syz_tun: entered allmulticast mode [ 411.754498][T20607] syz_tun: left allmulticast mode [ 411.829392][T20560] tipc: Resetting bearer [ 411.862001][T20560] tipc: Disabling bearer [ 411.921428][T20619] batadv_slave_0: entered promiscuous mode [ 411.932498][T19606] Dead loop on virtual device ip6_vti0, fix it urgently! [ 412.007196][T20610] batadv_slave_0: left promiscuous mode [ 412.122787][T20631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.163307][T20633] __nla_validate_parse: 14 callbacks suppressed [ 412.163329][T20633] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4175'. [ 412.269723][T20638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4178'. [ 412.320302][T20642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4176'. [ 412.394759][T20644] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 412.450876][T20648] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4180'. [ 412.483531][T20651] netlink: 476 bytes leftover after parsing attributes in process `syz.0.4181'. [ 412.496573][T20648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4180'. [ 412.507019][T20649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4180'. [ 412.589785][T20653] bond5: Removing last arp target with arp_interval on [ 412.600326][T20649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4180'. [ 412.840397][T20669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4186'. [ 412.952638][T20674] netlink: 'syz.3.4187': attribute type 1 has an invalid length. [ 412.963566][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4189'. [ 413.021271][T20676] hsr_slave_1 (unregistering): left promiscuous mode [ 413.047029][T20680] netlink: 'syz.5.4190': attribute type 1 has an invalid length. [ 413.065498][T20681] netlink: 'syz.0.4191': attribute type 4 has an invalid length. [ 413.210898][T20689] tipc: Started in network mode [ 413.228410][T20689] tipc: Node identity 5a79744a075c, cluster identity 4711 [ 413.236345][T20689] tipc: Enabled bearer , priority 0 [ 413.244223][T20687] tipc: Enabling of bearer rejected, already enabled [ 413.255315][T20687] syzkaller0: entered promiscuous mode [ 413.263043][T20687] syzkaller0: entered allmulticast mode [ 413.277453][T20687] tipc: Resetting bearer [ 413.288487][T20686] tipc: Resetting bearer [ 413.312361][T20686] tipc: Disabling bearer [ 413.331414][T20695] netlink: 'syz.1.4196': attribute type 4 has an invalid length. [ 413.476896][T20700] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20001 [ 413.547169][T20711] syzkaller1: entered promiscuous mode [ 413.560722][T20711] syzkaller1: entered allmulticast mode [ 413.580086][T20711] netlink: 'syz.0.4201': attribute type 6 has an invalid length. [ 414.042242][T20742] delete_channel: no stack [ 414.054489][T20742] delete_channel: no stack [ 414.078499][T20749] netlink: 'syz.5.4210': attribute type 1 has an invalid length. [ 414.104231][T20739] netlink: 'syz.5.4210': attribute type 1 has an invalid length. [ 414.355620][T20753] xt_CT: No such helper "snmp" [ 414.923038][T20810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.988061][T20812] tipc: Enabled bearer , priority 0 [ 414.995759][T20812] syzkaller0: entered promiscuous mode [ 415.002411][T20812] syzkaller0: entered allmulticast mode [ 415.017507][T20812] tipc: Resetting bearer [ 415.041052][T20811] tipc: Resetting bearer [ 415.069150][T20811] tipc: Disabling bearer [ 415.094692][T20816] netlink: 'syz.0.4229': attribute type 2 has an invalid length. [ 415.339562][T20833] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 415.607169][T20848] netlink: 'syz.1.4241': attribute type 1 has an invalid length. [ 415.623775][T20848] netlink: 'syz.1.4241': attribute type 1 has an invalid length. [ 415.704326][T20852] netlink: 'syz.0.4243': attribute type 10 has an invalid length. [ 415.771404][ T13] Dead loop on virtual device ip6_vti0, fix it urgently! [ 415.780396][T20852] team0: Port device dummy0 added [ 415.941492][T20866] tipc: Enabling of bearer rejected, failed to enable media [ 416.229381][T20881] vxcan1 speed is unknown, defaulting to 1000 [ 416.402724][T20894] netlink: 'syz.3.4256': attribute type 1 has an invalid length. [ 416.414620][T19595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 416.572473][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 416.675607][T20909] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 417.397082][T20952] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 417.525093][T20959] __nla_validate_parse: 53 callbacks suppressed [ 417.525113][T20959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4277'. [ 417.541910][T20961] IPVS: set_ctl: invalid protocol: 87 172.30.1.2:20002 [ 417.675381][T20968] tipc: Enabled bearer , priority 0 [ 417.697393][T20968] syzkaller0: entered promiscuous mode [ 417.703069][T20968] syzkaller0: entered allmulticast mode [ 417.729995][T20968] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4279'. [ 417.744910][T20968] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4279'. [ 417.793789][T20976] tipc: Resetting bearer [ 417.814763][T20967] tipc: Resetting bearer [ 417.867361][T20967] tipc: Disabling bearer [ 418.126755][T20989] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 418.141865][T20989] bond4: option packets_per_slave: allowed values 0 - 65535 [ 418.154431][T20989] bond4 (unregistering): Released all slaves [ 418.197715][T21000] batadv_slave_0: entered promiscuous mode [ 418.244009][T20998] batadv_slave_0: left promiscuous mode [ 418.326385][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4292'. [ 418.372637][T21005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4292'. [ 418.404469][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4293'. [ 418.425858][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4293'. [ 418.713882][T21030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.832654][T21041] netlink: 'syz.1.4302': attribute type 10 has an invalid length. [ 419.049226][T21054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4308'. [ 419.083873][T21052] tipc: Enabled bearer , priority 0 [ 419.092102][T21052] syzkaller0: entered promiscuous mode [ 419.098019][T21052] syzkaller0: entered allmulticast mode [ 419.115328][T21054] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 419.126526][T21054] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 419.154415][T21058] macvlan0: entered promiscuous mode [ 419.160053][T21058] macvlan0: entered allmulticast mode [ 419.165815][T21058] bond7: (slave macvlan0): Error -98 calling set_mac_address [ 419.192763][T21052] tipc: Resetting bearer [ 419.202745][T21051] tipc: Resetting bearer [ 419.233010][T21051] tipc: Disabling bearer [ 419.461818][T21069] bond16: option min_links: invalid value (18446744073709551614) [ 419.474024][T21072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4313'. [ 419.478179][T21069] bond16: option min_links: allowed values 0 - 2147483647 [ 419.531598][T21069] bond16 (unregistering): Released all slaves [ 419.616950][T21066] veth0: entered promiscuous mode [ 420.234232][T21128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'. [ 420.322990][T21065] veth0: left promiscuous mode [ 420.837106][T19595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 421.062529][T21172] vxcan1 speed is unknown, defaulting to 1000 [ 421.368778][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.376294][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.543071][T21201] team0: Device geneve2 is up. Set it down before adding it as a team port [ 422.170361][T19595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 422.391470][T21236] bond0: (slave bond_slave_0): Releasing backup interface [ 422.407551][T21236] bond0: (slave bond_slave_1): Releasing backup interface [ 422.408519][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.421893][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.470043][T21236] team0: Port device team_slave_0 removed [ 422.494743][T21236] team0: Port device team_slave_1 removed [ 422.510491][T21236] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.536164][T21243] __nla_validate_parse: 12 callbacks suppressed [ 422.536184][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4362'. [ 422.617198][T21242] macvlan3: entered promiscuous mode [ 422.622791][T21242] macvlan3: entered allmulticast mode [ 422.629575][T21242] bond4: (slave macvlan3): Opening slave failed [ 422.733038][T19595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 422.910944][T21253] netlink: 'syz.2.4365': attribute type 1 has an invalid length. [ 423.092085][T21259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4368'. [ 423.105773][T21261] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4367'. [ 423.115364][T21263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4368'. [ 423.325668][T21276] xt_SECMARK: invalid mode: 9 [ 423.449195][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.456345][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.718588][T21303] netlink: 'syz.3.4377': attribute type 7 has an invalid length. [ 423.733393][T21300] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4378'. [ 423.741562][T21303] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4377'. [ 423.768425][T21300] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4378'. [ 423.805167][T21307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4378'. [ 423.819635][T21307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4378'. [ 423.841749][T21303] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 423.860036][T21303] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 423.987195][T21319] sctp: [Deprecated]: syz.5.4382 (pid 21319) Use of int in max_burst socket option. [ 423.987195][T21319] Use struct sctp_assoc_value instead [ 424.223329][T21331] netlink: 'syz.2.4386': attribute type 1 has an invalid length. [ 424.232069][T21331] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4386'. [ 424.242447][T21330] netlink: 'syz.2.4386': attribute type 1 has an invalid length. [ 424.440635][T21342] xfrm1: entered promiscuous mode [ 424.445871][T21342] xfrm1: entered allmulticast mode [ 424.709466][T21350] netlink: 'syz.0.4391': attribute type 8 has an invalid length. [ 424.873892][T21354] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 425.082825][T21369] pimreg: entered allmulticast mode [ 425.363777][T21388] netlink: 'syz.5.4405': attribute type 58 has an invalid length. [ 425.399965][T21383] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 425.416519][T21383] bond2 (unregistering): Released all slaves [ 425.472846][T21401] netlink: 'syz.3.4404': attribute type 1 has an invalid length. [ 425.526054][T21401] 8021q: adding VLAN 0 to HW filter on device bond8 [ 425.591811][T21405] bond8: (slave gretap2): making interface the new active one [ 425.602373][T21405] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 425.697537][T21411] netlink: 'syz.0.4408': attribute type 11 has an invalid length. [ 425.731400][T21413] netlink: 'syz.2.4410': attribute type 21 has an invalid length. [ 425.983463][T21431] netlink: 'syz.1.4415': attribute type 13 has an invalid length. [ 426.011352][ T36] net_ratelimit: 4 callbacks suppressed [ 426.011370][ T36] Dead loop on virtual device ip6_vti0, fix it urgently! [ 426.012785][T21431] macvtap0: entered allmulticast mode [ 426.032123][T21431] macvtap0: refused to change device tx_queue_len [ 426.184491][T21441] syzkaller1: entered promiscuous mode [ 426.190635][T21441] syzkaller1: entered allmulticast mode [ 426.218549][T21441] syzkaller1: left promiscuous mode [ 426.230945][T21441] syzkaller1: left allmulticast mode [ 426.568386][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.575556][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.701831][T21480] netlink: 'syz.1.4430': attribute type 10 has an invalid length. [ 426.714390][T21480] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 426.789196][T21482] netlink: 'syz.3.4432': attribute type 30 has an invalid length. [ 427.557135][T21499] __nla_validate_parse: 21 callbacks suppressed [ 427.557156][T21499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4440'. [ 427.608724][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.615863][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.821152][T21520] netlink: 766 bytes leftover after parsing attributes in process `syz.5.4445'. [ 427.930298][T19608] Dead loop on virtual device ip6_vti0, fix it urgently! [ 427.939938][ T36] Dead loop on virtual device ip6_vti0, fix it urgently! [ 428.004983][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4449'. [ 428.028066][T21528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4449'. [ 428.037807][T21528] ksmbd: Unknown IPC event: 0, ignore. [ 428.045295][T21528] tipc: Enabled bearer , priority 0 [ 428.053628][T21528] syzkaller0: entered promiscuous mode [ 428.059910][T21528] syzkaller0: entered allmulticast mode [ 428.085330][T21533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4452'. [ 428.099768][T21528] tipc: Resetting bearer [ 428.126704][T21533] gtp0: entered promiscuous mode [ 428.132614][T21533] gtp0: entered allmulticast mode [ 428.141299][T21527] tipc: Resetting bearer [ 428.148277][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4451'. [ 428.182512][T21527] tipc: Disabling bearer [ 428.280521][T21540] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4453'. [ 428.580746][T21562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4459'. [ 428.648390][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.655597][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.742208][T21570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4461'. [ 428.759103][T21570] tipc: Invalid UDP bearer configuration [ 428.759165][T21570] tipc: Enabling of bearer rejected, failed to enable media [ 428.837607][T21577] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4463'. [ 428.873928][T21577] netlink: 'syz.5.4463': attribute type 11 has an invalid length. [ 428.880416][T21581] netlink: 'syz.1.4465': attribute type 21 has an invalid length. [ 429.591706][T21628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.676449][T19606] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8f [ 429.688751][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.197007][T21652] pim6reg1: entered promiscuous mode [ 430.202553][T21652] pim6reg1: entered allmulticast mode [ 430.324449][T21655] batadv_slave_1: entered promiscuous mode [ 430.331483][T21655] batadv_slave_1: left promiscuous mode [ 431.000393][T21696] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 431.190564][T21704] netlink: 'syz.2.4507': attribute type 12 has an invalid length. [ 431.205733][T19608] tipc: Subscription rejected, illegal request [ 431.323920][T21715] net_ratelimit: 3 callbacks suppressed [ 431.323938][T21715] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 431.359261][T21715] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 431.394008][T21715] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 431.427883][T21717] netlink: 'syz.5.4511': attribute type 142 has an invalid length. [ 431.579269][T21728] netlink: 'syz.5.4511': attribute type 27 has an invalid length. [ 431.587391][T21728] netlink: 'syz.5.4511': attribute type 4 has an invalid length. [ 431.768941][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.770710][ T36] Dead loop on virtual device ip6_vti0, fix it urgently! [ 431.776075][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.795780][T21734] netlink: 'syz.3.4515': attribute type 4 has an invalid length. [ 431.843691][T21736] syzkaller1: entered promiscuous mode [ 431.851102][T21736] syzkaller1: entered allmulticast mode [ 431.929018][ T5827] Bluetooth: hci4: command 0x0419 tx timeout [ 432.092521][T21752] netlink: 'syz.2.4520': attribute type 12 has an invalid length. [ 432.110685][T21752] netlink: 'syz.2.4520': attribute type 29 has an invalid length. [ 432.129070][T21752] netlink: 'syz.2.4520': attribute type 1 has an invalid length. [ 432.139806][T21752] netlink: 'syz.2.4520': attribute type 2 has an invalid length. [ 432.444117][T21769] netlink: 'syz.2.4524': attribute type 9 has an invalid length. [ 432.633835][T21787] __nla_validate_parse: 20 callbacks suppressed [ 432.633857][T21787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4529'. [ 432.695378][T21789] tipc: Enabled bearer , priority 0 [ 432.709613][T21789] syzkaller0: entered promiscuous mode [ 432.723325][T21789] syzkaller0: entered allmulticast mode [ 432.756471][T21794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4533'. [ 432.785632][T21789] tipc: Resetting bearer [ 432.808401][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.815610][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.830572][T21798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4534'. [ 432.911557][T21788] tipc: Resetting bearer [ 432.951963][T21788] tipc: Disabling bearer [ 432.975564][T21803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.982881][T21803] IPv6: NLM_F_CREATE should be set when creating new route [ 433.134551][T21809] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.142249][T21809] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.536608][T21829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4546'. [ 433.622985][T21829] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4546'. [ 433.848651][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.855869][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.926182][T21853] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 434.286415][T21871] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 434.302011][T21871] bond6 (unregistering): Released all slaves [ 434.383526][T21877] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4560'. [ 434.579694][T21889] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4564'. [ 434.591567][T21890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4562'. [ 434.746712][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4565'. [ 434.770591][T21898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4565'. [ 434.862955][T21908] x_tables: duplicate underflow at hook 4 [ 435.036040][T21570] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 435.071587][T19595] : left allmulticast mode [ 435.102529][T19595] : left promiscuous mode [ 435.123107][T19595] bridge0: port 1() entered disabled state [ 435.514453][T19595] dvmrp1 (unregistering): left allmulticast mode [ 436.320548][T19595] bond1 (unregistering): Released all slaves [ 436.412001][T19595] bond2 (unregistering): Released all slaves [ 436.501214][T19595] bond0 (unregistering): Released all slaves [ 436.591375][T19595] bond3 (unregistering): Released all slaves [ 436.605980][T19595] bond4 (unregistering): Released all slaves [ 436.621267][T19595] bond5 (unregistering): Released all slaves [ 436.866021][T19595] tipc: Left network mode [ 436.966830][T19595] IPVS: stopping backup sync thread 6405 ... [ 436.983823][ C0] net_ratelimit: 6 callbacks suppressed [ 436.983843][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.996551][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.110653][T21957] can: request_module (can-proto-0) failed. [ 437.202417][T21970] delete_channel: no stack [ 437.541183][T19608] Dead loop on virtual device ip6_vti0, fix it urgently! [ 437.955285][T22011] bond16 (unregistering): Released all slaves [ 438.008911][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.016067][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.193708][T22033] validate_nla: 6 callbacks suppressed [ 438.193728][T22033] netlink: 'syz.3.4603': attribute type 1 has an invalid length. [ 438.208626][T22033] __nla_validate_parse: 3 callbacks suppressed [ 438.208643][T22033] netlink: 784 bytes leftover after parsing attributes in process `syz.3.4603'. [ 438.265527][T22029] bond2: ARP target 1.0.0.0 is already present [ 438.281833][T22029] bond2: option arp_ip_target: invalid value (1) [ 438.312160][T22029] bond2 (unregistering): Released all slaves [ 438.426048][T22034] vlan2: entered promiscuous mode [ 438.445027][T22034] bridge0: entered promiscuous mode [ 438.544127][T19595] hsr_slave_0: left promiscuous mode [ 438.635557][T19595] veth0_macvtap: left promiscuous mode [ 438.645961][T22054] netlink: 'syz.3.4607': attribute type 1 has an invalid length. [ 438.648357][T19595] veth0_vlan: left promiscuous mode [ 438.810281][ T36] Dead loop on virtual device ip6_vti0, fix it urgently! [ 438.883910][T22071] netlink: 'syz.3.4613': attribute type 11 has an invalid length. [ 438.895614][T22071] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4613'. [ 439.004943][T22078] netlink: 'syz.3.4615': attribute type 4 has an invalid length. [ 439.048411][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.055551][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.802427][T22091] netlink: 'syz.3.4617': attribute type 1 has an invalid length. [ 440.092678][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.099851][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.205066][T22117] netlink: 'syz.5.4622': attribute type 4 has an invalid length. [ 440.215633][T22116] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4623'. [ 440.260420][T22119] netlink: 'syz.5.4622': attribute type 21 has an invalid length. [ 440.289652][T22119] IPv6: NLM_F_CREATE should be specified when creating new route [ 440.298737][T22119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.306009][T22119] IPv6: NLM_F_CREATE should be set when creating new route [ 440.313367][T22119] IPv6: NLM_F_CREATE should be set when creating new route [ 440.320654][T22119] IPv6: NLM_F_CREATE should be set when creating new route [ 440.331430][T22116] bond2 (unregistering): Released all slaves [ 440.422782][T19595] IPVS: stop unused estimator thread 0... [ 440.830321][T22138] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4627'. [ 441.106269][T22147] x_tables: duplicate underflow at hook 3 [ 441.650744][T22187] netlink: 'syz.0.4642': attribute type 15 has an invalid length. [ 441.846667][T22198] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 441.910414][T22207] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4649'. [ 442.100636][T22223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4652'. [ 442.177517][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 442.186263][T22203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4647'. [ 442.207280][T22203] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4647'. [ 442.383490][T22230] netlink: 'syz.2.4656': attribute type 11 has an invalid length. [ 442.395550][T22228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4652'. [ 443.103847][T22279] netlink: 'syz.5.4669': attribute type 2 has an invalid length. [ 443.271936][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4673'. [ 443.293359][T19608] net_ratelimit: 1 callbacks suppressed [ 443.293378][T19608] Dead loop on virtual device ip6_vti0, fix it urgently! [ 443.395170][T22298] xt_hashlimit: overflow, rate too high: 0 [ 443.406947][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4677'. [ 443.769346][T22326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4688'. [ 443.833537][T22326] bond5: Invalid ad_actor_system MAC address. [ 443.859887][T22326] bond5: option ad_actor_system: invalid value (1) [ 443.882966][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4690'. [ 443.893730][T22326] bond5 (unregistering): Released all slaves [ 444.012081][T22333] hsr_slave_1 (unregistering): left promiscuous mode [ 444.375264][T22342] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.383154][T22342] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.571001][T19608] Dead loop on virtual device ip6_vti0, fix it urgently! [ 444.666806][T22342] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 444.764543][T22366] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4696'. [ 445.079299][T22387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4701'. [ 445.112237][T22388] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4702'. [ 445.125149][T22388] tunl0: left allmulticast mode [ 445.224626][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 445.230137][T22390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4703'. [ 445.233960][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.355377][T22399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4706'. [ 445.901804][T22438] netlink: 'syz.0.4717': attribute type 8 has an invalid length. [ 446.088809][T22450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4721'. [ 446.489829][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 446.662481][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.675305][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.684995][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.695583][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.718534][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.908305][T19610] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.929725][T19610] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 446.942114][T19610] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 447.013691][T22474] vxcan1 speed is unknown, defaulting to 1000 [ 447.071080][T19610] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.098653][T19610] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 447.118547][T19610] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 447.155312][T22492] veth0: entered promiscuous mode [ 447.241265][T19610] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.288380][T19610] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 447.331733][T19610] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 447.399918][T22491] veth0: left promiscuous mode [ 447.442428][T19610] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.470588][T19610] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 447.494456][T19610] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 447.636936][T22509] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.689782][T22512] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 448.081168][T22474] chnl_net:caif_netlink_parms(): no params data found [ 448.133344][T22533] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 448.475825][T19610] bond5 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 448.494882][T19610] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 448.512097][T22557] netlink: 'syz.3.4747': attribute type 39 has an invalid length. [ 448.531891][T19610] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - fa:b1:24:e3:fe:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 448.703881][T19610] bond1 (unregistering): (slave gretap1): Releasing active interface [ 448.809468][ T5831] Bluetooth: hci1: command tx timeout [ 448.829192][T19610] bond10 (unregistering): (slave geneve2): Releasing active interface [ 448.919275][T19610] bond4 (unregistering): (slave bridge2): Releasing active interface [ 449.146874][T19610] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 449.156333][T19610] bond0 (unregistering): Released all slaves [ 449.171859][T19610] bond1 (unregistering): Released all slaves [ 449.186741][T19610] bond2 (unregistering): Released all slaves [ 449.204385][T19610] bond3 (unregistering): Released all slaves [ 449.222482][T19610] bond4 (unregistering): Released all slaves [ 449.317797][T19610] bond5 (unregistering): (slave veth3): Releasing backup interface [ 449.327269][T19610] bond5 (unregistering): Released all slaves [ 449.418546][T19610] bond6 (unregistering): Released all slaves [ 449.433627][T19610] bond7 (unregistering): Released all slaves [ 449.523874][T19610] bond8 (unregistering): Released all slaves [ 449.538391][T19610] bond9 (unregistering): Released all slaves [ 449.553236][T19610] bond10 (unregistering): Released all slaves [ 449.642896][T19610] bond11 (unregistering): Released all slaves [ 449.656833][T19610] bond12 (unregistering): Released all slaves [ 449.747726][T19610] bond13 (unregistering): (slave wireguard0): Releasing backup interface [ 449.756315][T19610] wireguard0: left promiscuous mode [ 449.763771][T19610] bond13 (unregistering): Released all slaves [ 449.856902][T19610] bond14 (unregistering): Released all slaves [ 449.871914][T19610] bond15 (unregistering): Released all slaves [ 450.045921][T19610] tipc: Disabling bearer [ 450.061374][T19610] tipc: Left network mode [ 450.107552][T19610] IPVS: stopping backup sync thread 19211 ... [ 450.224431][T22474] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.257652][T22474] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.275822][T22474] bridge_slave_0: entered allmulticast mode [ 450.287183][T22474] bridge_slave_0: entered promiscuous mode [ 450.325239][T22474] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.352760][T22581] __nla_validate_parse: 3 callbacks suppressed [ 450.352779][T22581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4753'. [ 450.377788][T22474] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.386305][T22474] bridge_slave_1: entered allmulticast mode [ 450.396294][T22474] bridge_slave_1: entered promiscuous mode [ 450.652060][T22474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.663601][T22595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4759'. [ 450.677192][T22595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4759'. [ 450.760231][T22474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.890634][ T5831] Bluetooth: hci1: command tx timeout [ 452.220778][T22605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4757'. [ 452.240258][T22612] netlink: 'syz.1.4763': attribute type 2 has an invalid length. [ 452.438796][T22474] team0: Port device team_slave_0 added [ 452.459389][T22474] team0: Port device team_slave_1 added [ 452.535857][T22628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4768'. [ 452.586036][T22474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.600700][T22632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4769'. [ 452.600757][T22474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.640987][T22474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.699358][T22474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.735379][T22474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.790532][T22474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.837300][T22643] netlink: 'syz.2.4768': attribute type 11 has an invalid length. [ 452.848929][T22643] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4768'. [ 452.872849][T22628] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4768'. [ 452.918406][T22628] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4768'. [ 452.968029][T19610] hsr_slave_0: left promiscuous mode [ 452.972281][ T5831] Bluetooth: hci1: command tx timeout [ 452.992812][T19610] hsr_slave_1: left promiscuous mode [ 453.027601][T22647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4772'. [ 453.685259][T22651] syzkaller1: entered promiscuous mode [ 453.711971][T22651] syzkaller1: entered allmulticast mode [ 453.749550][T22474] hsr_slave_0: entered promiscuous mode [ 453.769591][T22474] hsr_slave_1: entered promiscuous mode [ 453.775918][T22474] debugfs: 'hsr0' already exists in 'hsr' [ 453.816620][T22474] Cannot create hsr debugfs directory [ 454.065792][T22679] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 454.201883][T19610] IPVS: stop unused estimator thread 0... [ 454.419898][T22694] xt_hashlimit: size too large, truncated to 1048576 [ 454.656129][T22474] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 454.685190][T22474] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 454.705917][T22474] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 454.722121][T22474] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 454.857149][T22474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.892366][T22474] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.916164][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.923380][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.991761][T19610] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.999042][T19610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.013134][T22724] netlink: 'syz.3.4795': attribute type 17 has an invalid length. [ 455.043536][T22724] netlink: 'syz.3.4795': attribute type 17 has an invalid length. [ 455.051666][ T5831] Bluetooth: hci1: command tx timeout [ 455.061667][T22726] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 455.078794][T22724] netlink: 'syz.3.4795': attribute type 17 has an invalid length. [ 455.102715][T22724] netlink: 'syz.3.4795': attribute type 17 has an invalid length. [ 455.131084][T22724] netlink: 'syz.3.4795': attribute type 17 has an invalid length. [ 455.155590][T22474] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 455.175834][T22474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.197814][T22724] netlink: 'syz.3.4795': attribute type 17 has an invalid length. [ 455.222501][T22724] netlink: 'syz.3.4795': attribute type 17 has an invalid length. [ 455.231120][T22730] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 455.264712][T22730] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 455.292707][T22730] gretap2: entered promiscuous mode [ 455.298470][T22730] gretap2: entered allmulticast mode [ 455.307212][T22724] netlink: 'syz.3.4795': attribute type 17 has an invalid length. [ 455.353752][T22724] netlink: 'syz.3.4795': attribute type 17 has an invalid length. [ 455.367499][T22733] __nla_validate_parse: 21 callbacks suppressed [ 455.367520][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4799'. [ 455.372804][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4795'. [ 455.394027][T22724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4795'. [ 455.409460][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4795'. [ 455.418746][T22724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4795'. [ 455.430098][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4795'. [ 455.439303][T22724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4795'. [ 455.451853][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4795'. [ 455.461794][T22724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4795'. [ 455.472529][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4795'. [ 455.770884][T22474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.098535][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 456.582835][T19608] Dead loop on virtual device ip6_vti0, fix it urgently! [ 456.593691][T22474] veth0_vlan: entered promiscuous mode [ 456.615538][T22474] veth1_vlan: entered promiscuous mode [ 456.662186][T22788] syzkaller1: entered promiscuous mode [ 456.667909][T22788] syzkaller1: entered allmulticast mode [ 456.754137][T22474] veth0_macvtap: entered promiscuous mode [ 456.773904][T22474] veth1_macvtap: entered promiscuous mode [ 456.822794][T22474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.845266][T22474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.896852][T19606] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.918721][T19606] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.978584][T19606] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.000725][T19606] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.142214][T19610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.165326][T19610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.224015][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.238372][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.370775][T19608] Dead loop on virtual device ip6_vti0, fix it urgently! [ 457.583947][T22829] bridge_slave_0: default FDB implementation only supports local addresses [ 457.650815][T22830] bridge_slave_0: default FDB implementation only supports local addresses [ 457.732780][T22829] pimreg3: entered allmulticast mode [ 458.010624][T22854] syzkaller1: entered promiscuous mode [ 458.030411][T22854] syzkaller1: entered allmulticast mode [ 458.068952][T22858] validate_nla: 25 callbacks suppressed [ 458.068970][T22858] netlink: 'syz.2.4836': attribute type 10 has an invalid length. [ 458.167531][T22858] team0: Port device dummy0 added [ 458.221888][T22870] netlink: 'syz.0.4840': attribute type 1 has an invalid length. [ 458.445203][T22885] gtp0: entered promiscuous mode [ 458.451487][T22885] gtp0: entered allmulticast mode [ 458.602911][T22894] netlink: 'syz.0.4846': attribute type 4 has an invalid length. [ 459.215661][T22914] netlink: 'syz.1.4854': attribute type 3 has an invalid length. [ 459.551049][T22933] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 459.807159][T22947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.822503][T22945] vlan1: entered promiscuous mode [ 459.828014][T22945] vlan1: entered allmulticast mode [ 459.833422][T22945] hsr_slave_1: entered allmulticast mode [ 460.002534][T22958] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 460.168357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.269341][T22982] netlink: 'syz.2.4877': attribute type 11 has an invalid length. [ 460.287825][T22982] netlink: 'syz.2.4877': attribute type 5 has an invalid length. [ 460.370262][T22988] __nla_validate_parse: 63 callbacks suppressed [ 460.370282][T22988] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4874'. [ 460.488357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.635033][T23004] tipc: Enabling of bearer rejected, failed to enable media [ 460.663349][T23004] Bluetooth: MGMT ver 1.23 [ 460.668509][T23006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4882'. [ 460.938503][T23023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.062104][T23026] vlan2: entered allmulticast mode [ 461.077549][T23026] hsr0: entered allmulticast mode [ 461.090903][T23026] hsr_slave_0: entered allmulticast mode [ 461.096599][T23026] hsr_slave_1: entered allmulticast mode [ 461.125493][T23026] team0: Cannot enslave team device to itself [ 461.141884][T23034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4890'. [ 461.173854][T23031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4891'. [ 461.252286][T23039] netlink: 'syz.3.4891': attribute type 1 has an invalid length. [ 461.260383][T23039] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4891'. [ 461.279147][T23039] netlink: 'syz.3.4891': attribute type 1 has an invalid length. [ 461.375066][T23042] syzkaller1: entered promiscuous mode [ 461.390704][T23042] syzkaller1: entered allmulticast mode [ 461.528306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.653239][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4901'. [ 461.679195][T23059] bond1: left allmulticast mode [ 461.684123][T23059] bond1: left promiscuous mode [ 461.704066][T23059] bridge0: port 2(bond1) entered disabled state [ 461.718819][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4901'. [ 461.739627][T23059] bridge_slave_0: left allmulticast mode [ 461.747016][T23059] bridge_slave_0: left promiscuous mode [ 461.753498][T23059] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.801126][T23059] bridge0 (unregistering): left allmulticast mode [ 461.836118][T23071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4903'. [ 461.845422][T23071] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4903'. [ 461.857713][T19606] Dead loop on virtual device ip6_vti0, fix it urgently! [ 461.874026][T23071] netlink: 'syz.3.4903': attribute type 1 has an invalid length. [ 461.886617][T23071] netlink: 784 bytes leftover after parsing attributes in process `syz.3.4903'. [ 461.900104][T23060] bond2: entered promiscuous mode [ 461.921433][T23074] netlink: 'syz.5.4902': attribute type 1 has an invalid length. [ 462.025961][T23079] nbd: illegal input index 1459617792 [ 462.374407][T23096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.496778][T19595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 462.663726][T23113] netlink: 'syz.1.4917': attribute type 30 has an invalid length. [ 462.791500][T23123] team0: Device wireguard0 is of different type [ 462.865827][T19595] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.874955][T19595] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.904029][T19606] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.937551][T19606] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.967502][T23131] vxcan1 speed is unknown, defaulting to 1000 [ 463.129596][T19595] Dead loop on virtual device ip6_vti0, fix it urgently! [ 463.192328][T23148] sctp: [Deprecated]: syz.1.4927 (pid 23148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.192328][T23148] Use struct sctp_sack_info instead [ 463.524725][T23166] validate_nla: 1 callbacks suppressed [ 463.524744][T23166] netlink: 'syz.0.4933': attribute type 2 has an invalid length. [ 463.581315][T23163] tipc: Enabling of bearer rejected, failed to enable media [ 463.628934][T23166] 0ªî{X¹¦: left allmulticast mode [ 463.682775][T23167] nbd: device at index 1 is going down [ 464.120892][T23166] veth0: left allmulticast mode [ 464.125981][T23166] veth1: left allmulticast mode [ 464.134301][T23166] wg1: left allmulticast mode [ 464.141153][T23166] wg2: left allmulticast mode [ 464.148823][T23166] veth0_to_bridge: left allmulticast mode [ 464.166813][T23166] veth1_to_bridge: left allmulticast mode [ 464.173483][T23166] veth0_to_bond: left allmulticast mode [ 464.180553][T23166] bond_slave_0: left allmulticast mode [ 464.186295][T23166] veth1_to_bond: left allmulticast mode [ 464.192995][T23166] bond_slave_1: left allmulticast mode [ 464.199057][T23166] veth0_to_team: left allmulticast mode [ 464.204972][T23166] team_slave_0: left allmulticast mode [ 464.210986][T23166] veth1_to_team: left allmulticast mode [ 464.216866][T23166] team_slave_1: left allmulticast mode [ 464.223624][T23166] veth0_to_batadv: left allmulticast mode [ 464.231069][T23166] veth1_to_batadv: left allmulticast mode [ 464.237070][T23166] batadv_slave_1: left allmulticast mode [ 464.244857][T23166] xfrm0: left allmulticast mode [ 464.253407][T23166] veth0_to_hsr: left allmulticast mode [ 464.260607][T23166] hsr0: left allmulticast mode [ 464.265461][T23166] hsr_slave_0: left allmulticast mode [ 464.271103][T23166] veth1_virt_wifi: left allmulticast mode [ 464.276995][T23166] veth0_virt_wifi: left allmulticast mode [ 464.283684][T23166] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 464.290988][T23166] veth1_vlan: left allmulticast mode [ 464.296544][T23166] vlan0: left allmulticast mode [ 464.301774][T23166] vlan1: left allmulticast mode [ 464.306769][T23166] macvlan0: left allmulticast mode [ 464.312595][T23166] macvlan1: left allmulticast mode [ 464.317842][T23166] ipvlan0: left allmulticast mode [ 464.323294][T23166] ipvlan1: left allmulticast mode [ 464.328547][T23166] veth0_vlan: left allmulticast mode [ 464.334000][T23166] veth1_macvtap: left allmulticast mode [ 464.340556][T23166] veth0_macvtap: left allmulticast mode [ 464.346259][T23166] macvtap0: left allmulticast mode [ 464.351775][T23166] macsec0: left allmulticast mode [ 464.372552][T23166] geneve1: left allmulticast mode [ 464.379231][T23166] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 464.386722][T23166] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 464.394113][T23166] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 464.402054][T23166] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 464.410651][T23166] mac80211_hwsim hwsim31 wlan0: left allmulticast mode [ 464.417648][T23166] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 464.426607][T23166] macvtap1: left allmulticast mode [ 464.432457][T23166] bridge1: left allmulticast mode [ 464.437712][T23166] bridge2: left allmulticast mode [ 464.445289][T23166] sit1: left allmulticast mode [ 464.480228][T23166] batadv0: left allmulticast mode [ 464.495478][T23166] xfrm1: left promiscuous mode [ 464.500646][T23166] xfrm1: left allmulticast mode [ 464.529290][T23166] bond2: left promiscuous mode [ 464.678484][T19595] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.710239][T23202] netlink: 'syz.0.4939': attribute type 1 has an invalid length. [ 464.724310][T19595] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.748888][T19595] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.779650][T19595] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.828808][T19595] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.839458][T19595] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.848448][T23206] netlink: 'syz.0.4939': attribute type 1 has an invalid length. [ 465.011736][T23205] bond3: (slave gretap0): making interface the new active one [ 465.021759][T23205] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 465.040981][T19595] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.088304][T19595] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.428881][T23240] __nla_validate_parse: 15 callbacks suppressed [ 465.428904][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4949'. [ 465.489037][T23248] netlink: 'syz.2.4952': attribute type 1 has an invalid length. [ 465.505243][T23240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.530244][T23240] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.565867][T23240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.592195][T23253] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4953'. [ 465.608731][T23253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4953'. [ 465.670097][T23250] bond8: invalid ARP target 0.0.0.0 specified for addition [ 465.687643][T23250] bond8: option arp_ip_target: invalid value (0) [ 465.720084][T23250] bond8 (unregistering): Released all slaves [ 466.053933][T23284] netlink: 'syz.5.4963': attribute type 1 has an invalid length. [ 466.094751][T23284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.119063][T23284] bond2: entered allmulticast mode [ 466.211761][T23293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4967'. [ 466.226773][T23293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4967'. [ 466.424073][T23307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4970'. [ 466.493766][T23316] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 466.736014][T23334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4976'. [ 466.985223][T23341] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 467.006593][T23341] batman_adv: batadv0: Adding interface: netdevsim0 [ 467.025230][T23341] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.073872][T23341] batman_adv: batadv0: Interface activated: netdevsim0 [ 467.082230][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4979'. [ 467.100341][T23356] 8ÿ: entered promiscuous mode [ 467.123215][T23358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.267271][T23371] netlink: 'syz.1.4984': attribute type 1 has an invalid length. [ 467.351339][T23371] bond8: entered promiscuous mode [ 467.358050][T23371] 8021q: adding VLAN 0 to HW filter on device bond8 [ 467.400041][T23382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4986'. [ 467.433698][T23371] bond8: (slave bridge0): making interface the new active one [ 467.465048][T23371] bridge0: entered promiscuous mode [ 467.472715][T23371] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 467.581681][T23382] hsr_slave_1 (unregistering): left promiscuous mode [ 467.595107][T23388] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4988'. [ 468.236973][T23438] tipc: Enabling of bearer rejected, failed to enable media [ 468.547147][T23452] netlink: 'syz.1.5008': attribute type 27 has an invalid length. [ 468.557775][T23453] netlink: 'syz.1.5008': attribute type 27 has an invalid length. [ 468.566267][T23453] netlink: 'syz.1.5008': attribute type 4 has an invalid length. [ 468.574851][T23452] netlink: 'syz.1.5008': attribute type 4 has an invalid length. [ 468.585552][T23452] : renamed from hsr0 [ 468.889044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.017724][T23461] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 469.046967][T23461] team0: Device macvtap1 is already an upper device of the team interface [ 469.160939][T23463] tipc: Started in network mode [ 469.165958][T23463] tipc: Node identity 1e8253aeccac, cluster identity 4711 [ 469.196157][T23463] tipc: Enabled bearer , priority 0 [ 469.216989][T23463] syzkaller0: entered promiscuous mode [ 469.248659][T23463] syzkaller0: entered allmulticast mode [ 469.403840][T23481] netlink: 'syz.1.5016': attribute type 10 has an invalid length. [ 469.453864][T23463] tipc: Resetting bearer [ 469.482128][T23462] tipc: Resetting bearer [ 469.552796][T23462] tipc: Disabling bearer [ 469.592798][T23483] tipc: Enabled bearer , priority 0 [ 469.763609][T23486] syzkaller0: entered promiscuous mode [ 469.785134][T23486] syzkaller0: entered allmulticast mode [ 469.813040][T23486] tipc: Resetting bearer [ 469.882605][T23477] tipc: Resetting bearer [ 470.069344][T23516] x_tables: duplicate underflow at hook 1 [ 470.598392][ T6352] tipc: Node number set to 1562735690 [ 471.357854][T23477] tipc: Disabling bearer [ 471.371249][T23515] __nla_validate_parse: 8 callbacks suppressed [ 471.371271][T23515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5023'. [ 471.398990][T23518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5023'. [ 472.251289][T23579] tipc: Enabled bearer , priority 0 [ 472.258476][T23578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5042'. [ 472.272692][T23580] syzkaller0: entered promiscuous mode [ 472.281462][T23580] syzkaller0: entered allmulticast mode [ 472.355810][T23586] tunl0: entered promiscuous mode [ 472.365688][T23586] netlink: 'syz.3.5043': attribute type 3 has an invalid length. [ 472.373695][T23586] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5043'. [ 472.418998][T23580] tipc: Resetting bearer [ 472.511370][T23600] netlink: 'syz.2.5048': attribute type 7 has an invalid length. [ 472.512225][T23580] tipc: Disabling bearer [ 472.530309][T23601] netlink: 'syz.3.5046': attribute type 1 has an invalid length. [ 472.550696][T23603] netlink: 'syz.2.5048': attribute type 7 has an invalid length. [ 472.642277][T23594] bond10 (unregistering): Released all slaves [ 472.681851][T23609] Bluetooth: MGMT ver 1.23 [ 472.702783][T23609] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.5049'. [ 472.715967][T23609] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 472.818690][T23622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5053'. [ 472.839955][T23626] bridge0: port 1(veth7) entered blocking state [ 472.846358][T23626] bridge0: port 1(veth7) entered disabled state [ 472.847541][T23622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5053'. [ 472.862623][T23622] netlink: 'syz.5.5053': attribute type 11 has an invalid length. [ 472.865675][T23626] veth7: entered allmulticast mode [ 472.879681][T23629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5052'. [ 472.926546][T23626] veth7: entered promiscuous mode [ 472.953873][T23622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5053'. [ 472.966523][T23622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5053'. [ 473.372152][T19608] Dead loop on virtual device ip6_vti0, fix it urgently! [ 473.379655][ T36] Dead loop on virtual device ip6_vti0, fix it urgently! [ 473.554281][T23631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.719686][T23683] validate_nla: 1 callbacks suppressed [ 473.719706][T23683] netlink: 'syz.2.5068': attribute type 1 has an invalid length. [ 473.724449][T23682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.916013][T23694] netlink: 'syz.0.5072': attribute type 6 has an invalid length. [ 474.650235][ T36] Dead loop on virtual device ip6_vti0, fix it urgently! [ 474.728485][ T5831] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 474.794440][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 475.334507][T23765] netlink: 'syz.0.5086': attribute type 4 has an invalid length. [ 475.413971][T23765] netlink: zone id is out of range [ 475.431869][T23770] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 475.444593][T23765] netlink: del zone limit has 4 unknown bytes [ 475.575332][ T36] tipc: Subscription rejected, illegal request [ 475.790491][T23786] sctp: [Deprecated]: syz.2.5097 (pid 23786) Use of struct sctp_assoc_value in delayed_ack socket option. [ 475.790491][T23786] Use struct sctp_sack_info instead [ 476.442997][T23834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.461019][T23835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.489475][T23834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.644950][T23847] __nla_validate_parse: 7 callbacks suppressed [ 476.644970][T23847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5116'. [ 476.842685][T23860] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5120'. [ 477.087910][T23873] mac80211_hwsim hwsim38 ÿ: renamed from wlan1 [ 477.296590][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5126'. [ 477.961864][T23902] macvtap2: entered promiscuous mode [ 477.967248][T23902] macvtap2: entered allmulticast mode [ 478.029521][T23902] bond0: entered allmulticast mode [ 478.035638][T23902] bond_slave_0: entered allmulticast mode [ 478.041830][T23902] bond_slave_1: entered allmulticast mode [ 478.054012][T23902] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 478.100746][T23902] team0: Device macvtap2 failed to register rx_handler [ 478.140904][T23902] bond0: left allmulticast mode [ 478.154922][T23902] bond_slave_0: left allmulticast mode [ 478.175480][T23902] bond_slave_1: left allmulticast mode [ 478.492014][T19606] Dead loop on virtual device ip6_vti0, fix it urgently! [ 478.570984][T23918] sctp: [Deprecated]: syz.0.5137 (pid 23918) Use of int in max_burst socket option. [ 478.570984][T23918] Use struct sctp_assoc_value instead [ 478.622208][T23918] macvlan1: entered promiscuous mode [ 478.657249][T23917] macvlan1: left promiscuous mode [ 478.870445][T23934] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5141'. [ 478.960204][T23932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5142'. [ 479.040413][T23952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5142'. [ 479.087541][T23932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5142'. [ 479.106981][T23932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5142'. [ 479.344401][T23963] netlink: 288 bytes leftover after parsing attributes in process `syz.3.5149'. [ 479.371063][T23963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5149'. [ 479.463659][T23969] netlink: 'syz.0.5152': attribute type 10 has an invalid length. [ 479.488304][T23969] netlink: 'syz.0.5152': attribute type 10 has an invalid length. [ 479.515171][T23969] team0: Port device dummy0 removed [ 479.537888][T23969] dummy0: entered promiscuous mode [ 479.562493][T23969] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 479.572499][T23972] pim6reg1: entered promiscuous mode [ 479.594350][T23972] pim6reg1: entered allmulticast mode [ 480.124697][T23997] netlink: 'syz.5.5162': attribute type 2 has an invalid length. [ 480.515565][T24015] netlink: 'syz.5.5170': attribute type 1 has an invalid length. [ 480.524921][T24014] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 480.528933][T24015] netlink: 'syz.5.5170': attribute type 1 has an invalid length. [ 480.551299][T24015] netlink: 'syz.5.5170': attribute type 2 has an invalid length. [ 480.977661][T24029] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 480.986757][T24029] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 481.107853][T24038] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 481.351990][T24050] netlink: 'syz.3.5182': attribute type 1 has an invalid length. [ 481.371874][T24050] netlink: 'syz.3.5182': attribute type 3 has an invalid length. [ 481.381136][T24050] NCSI netlink: No device for ifindex 13746432 [ 482.584583][T24082] infiniband syz0: set active [ 482.615563][T24082] infiniband syz0: added team_slave_1 [ 482.773934][T24082] RDS/IB: syz0: added [ 482.779022][T24082] smc: adding ib device syz0 with port count 1 [ 482.785222][T24082] smc: ib device syz0 port 1 has no pnetid [ 482.917847][T24128] veth0: entered promiscuous mode [ 482.966016][T24134] xt_NFQUEUE: number of total queues is 0 [ 483.034881][T24127] veth0: left promiscuous mode [ 483.187472][T24144] tipc: Enabled bearer , priority 10 [ 483.343937][T24151] wg1: entered promiscuous mode [ 483.353783][T24151] wg1: entered allmulticast mode [ 483.360730][T24153] __nla_validate_parse: 11 callbacks suppressed [ 483.360748][T24153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5212'. [ 483.513364][T24153] bond4: entered allmulticast mode [ 483.531216][ T13] Dead loop on virtual device ip6_vti0, fix it urgently! [ 483.540601][T24153] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.932927][T24173] tipc: Enabled bearer , priority 0 [ 483.941121][T24177] syzkaller0: entered promiscuous mode [ 483.946619][T24177] syzkaller0: entered allmulticast mode [ 483.959238][T24173] tipc: Resetting bearer [ 483.969224][T24171] tipc: Resetting bearer [ 484.009743][T24171] tipc: Disabling bearer [ 484.135083][T24188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5223'. [ 484.211447][T24194] rdma_op ffff8880519f89f0 conn xmit_rdma 0000000000000000 [ 484.298680][ T6352] tipc: Node number set to 3791704882 [ 484.695167][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5230'. [ 484.738534][T24223] netlink: 'syz.2.5231': attribute type 1 has an invalid length. [ 484.747043][T24223] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.5231'. [ 484.894964][T19608] Dead loop on virtual device ip6_vti0, fix it urgently! [ 484.964152][T24231] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5232'. [ 484.974127][T24231] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5232'. [ 485.125343][T24233] syzkaller0: entered promiscuous mode [ 485.133007][T24233] syzkaller0: entered allmulticast mode [ 485.256682][T24241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5236'. [ 485.266841][T24241] netlink: 'syz.0.5236': attribute type 30 has an invalid length. [ 485.274825][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5236'. [ 485.442220][T24247] x_tables: duplicate underflow at hook 1 [ 485.470739][T24247] netlink: 'syz.3.5238': attribute type 1 has an invalid length. [ 485.520405][T24247] 8021q: adding VLAN 0 to HW filter on device bond10 [ 485.543867][T24247] vlan4: entered promiscuous mode [ 485.549280][T24247] bond10: entered promiscuous mode [ 485.554583][T24247] vlan4: entered allmulticast mode [ 485.560893][T24247] bond10: entered allmulticast mode [ 485.632781][T24263] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5243'. [ 486.024740][T24281] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5246'. [ 486.082820][T24281] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 486.096333][T24281] bond11 (unregistering): Released all slaves [ 486.168673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.190140][T19606] Dead loop on virtual device ip6_vti0, fix it urgently! [ 486.494397][T24299] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 486.535936][T24301] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 486.734990][T24309] tipc: Enabled bearer , priority 0 [ 486.754896][T24309] syzkaller0: entered promiscuous mode [ 486.761549][T24309] syzkaller0: entered allmulticast mode [ 486.810502][T24309] tipc: Resetting bearer [ 486.972946][T24321] tipc: Enabling of bearer rejected, failed to enable media [ 487.011127][T24324] netlink: 'syz.0.5262': attribute type 1 has an invalid length. [ 487.083876][T24324] 8021q: adding VLAN 0 to HW filter on device bond5 [ 487.151186][T24324] netlink: 'syz.0.5262': attribute type 7 has an invalid length. [ 487.183244][T24324] netlink: 'syz.0.5262': attribute type 8 has an invalid length. [ 487.274559][T24340] IPVS: set_ctl: invalid protocol: 2 172.30.0.1:20001 [ 487.375567][T24345] x_tables: duplicate underflow at hook 1 [ 487.493301][T24306] tipc: Resetting bearer [ 487.526896][T24306] tipc: Disabling bearer [ 487.589122][T24349] tipc: Enabled bearer , priority 0 [ 487.653731][T24349] syzkaller0: entered promiscuous mode [ 487.660284][T24349] syzkaller0: entered allmulticast mode [ 487.666543][T24349] tipc: Resetting bearer [ 487.679729][T24348] tipc: Resetting bearer [ 487.725197][T24353] netlink: 'syz.2.5270': attribute type 1 has an invalid length. [ 487.739959][T24309] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 487.921323][T24361] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 487.935867][T24366] nbd: must specify a size in bytes for the device [ 488.003196][T24373] netlink: 'syz.5.5274': attribute type 1 has an invalid length. [ 488.162205][T24378] netlink: 'syz.2.5275': attribute type 1 has an invalid length. [ 488.742106][T19610] Dead loop on virtual device ip6_vti0, fix it urgently! [ 489.278677][T24348] tipc: Disabling bearer [ 489.291029][T24357] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 489.309343][T24357] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 489.513760][T24384] __nla_validate_parse: 6 callbacks suppressed [ 489.513780][T24384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5278'. [ 489.869519][T24409] tipc: Enabling of bearer rejected, media not registered [ 490.082448][T24418] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.5289'. [ 490.107304][T24420] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5288'. [ 490.120846][T24418] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 490.152153][T24418] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 490.356650][T24436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5293'. [ 490.370039][T24436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5293'. [ 490.427532][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5296'. [ 490.454890][T24440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5296'. [ 490.590309][T24453] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 490.651678][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 490.751561][T24459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5301'. [ 490.841456][T24459] team0: Port device team_slave_1 removed [ 491.062937][T24476] xfrm0: entered allmulticast mode [ 491.389967][T24491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5310'. [ 491.478763][T24496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5311'. [ 491.894364][T24523] team0: Device gtp2 is of different type [ 491.897917][T24521] netlink: 'syz.0.5317': attribute type 21 has an invalid length. [ 491.931584][ T1150] Dead loop on virtual device ip6_vti0, fix it urgently! [ 492.345826][T24562] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 492.363273][T24563] netlink: 'syz.0.5329': attribute type 23 has an invalid length. [ 492.414673][T24565] netlink: 'syz.5.5331': attribute type 1 has an invalid length. [ 492.842935][T24593] netlink: 'syz.0.5338': attribute type 1 has an invalid length. [ 492.884305][T24593] 8021q: adding VLAN 0 to HW filter on device bond6 [ 492.903843][T24593] bond6: entered allmulticast mode [ 493.106126][T24607] netlink: 'syz.0.5344': attribute type 10 has an invalid length. [ 493.126440][T24606] netlink: 'syz.0.5344': attribute type 10 has an invalid length. [ 493.137572][T24607] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 493.147613][T24607] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 493.633618][T24640] netlink: 'syz.0.5354': attribute type 10 has an invalid length. [ 493.678465][T24640] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 493.749396][T24640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.855049][ T36] Dead loop on virtual device ip6_vti0, fix it urgently! [ 494.004089][T24653] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 494.060293][T24653] bond3 (unregistering): Released all slaves [ 494.206698][T24655] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 494.237257][T24655] bond3 (unregistering): Released all slaves [ 494.467060][T24677] 8021q: VLANs not supported on caif0 [ 494.505335][T24679] gre0: entered promiscuous mode [ 494.671451][T24687] __nla_validate_parse: 11 callbacks suppressed [ 494.671471][T24687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5368'. [ 494.726618][T24698] C: renamed from lo [ 494.947944][T24714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5375'. [ 494.960313][T24709] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5375'. [ 494.966435][T24716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5376'. [ 494.984270][T24716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5376'. [ 495.008043][T24716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5376'. [ 495.029552][T24714] tipc: Enabled bearer , priority 0 [ 495.080375][T24707] tipc: Disabling bearer [ 495.215184][T24725] tipc: Enabled bearer , priority 0 [ 495.246683][T24725] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 495.273307][T24731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5380'. [ 495.283444][T24725] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 495.324864][T24735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5380'. [ 495.336311][T24730] bond3 (unregistering): Released all slaves [ 495.362997][T24731] xfrm1: entered promiscuous mode [ 495.368439][T24731] xfrm1: entered allmulticast mode [ 495.377088][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5383'. [ 495.388497][T24736] netlink: 'syz.1.5383': attribute type 5 has an invalid length. [ 495.407603][T24736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5383'. [ 495.470507][T24736] geneve3: entered promiscuous mode [ 495.485946][T24736] geneve3: entered allmulticast mode [ 495.511737][T19610] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 495.529356][T19610] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 495.559052][T19610] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 495.572286][T19610] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 496.045620][T24781] IPVS: set_ctl: invalid protocol: 44 172.20.20.33:20001 [ 496.338689][ T6352] tipc: Node number set to 500892414 [ 497.150821][T24838] sctp: [Deprecated]: syz.1.5407 (pid 24838) Use of int in max_burst socket option deprecated. [ 497.150821][T24838] Use struct sctp_assoc_value instead [ 497.167723][T24842] sctp: [Deprecated]: syz.1.5407 (pid 24842) Use of int in max_burst socket option deprecated. [ 497.167723][T24842] Use struct sctp_assoc_value instead [ 497.346257][T24857] syz_tun: entered allmulticast mode [ 497.503797][T24858] syz_tun: left allmulticast mode [ 497.647043][T24872] batman_adv: batadv0: Adding interface: dummy0 [ 497.656482][T24872] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.701452][T24872] batman_adv: batadv0: Interface activated: dummy0 [ 497.804067][T24885] geneve2: entered promiscuous mode [ 497.809993][T24885] geneve2: entered allmulticast mode [ 497.818686][ T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 497.967741][T24884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.980320][T24884] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.004144][ T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 498.014764][ T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 498.521648][T24927] netlink: 'syz.0.5429': attribute type 3 has an invalid length. [ 498.736353][T24947] tunl0: entered promiscuous mode [ 498.742681][T24947] netlink: 'syz.1.5433': attribute type 3 has an invalid length. [ 499.527266][T24884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.559279][T24884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.573674][T24884] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 499.612218][T19610] Dead loop on virtual device ip6_vti0, fix it urgently! [ 499.767777][T24884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.779894][T24884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.796738][T25009] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 499.810722][T24884] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 499.914644][T24884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.934300][T24884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.952891][T24884] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 500.145109][T25025] netlink: 'syz.2.5450': attribute type 10 has an invalid length. [ 500.220125][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.251954][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 500.279368][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 500.343829][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.352217][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 500.373561][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 500.438164][ T1150] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.453972][T25043] netlink: 'syz.2.5454': attribute type 1 has an invalid length. [ 500.466795][ T1150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 500.483120][ T1150] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 500.614074][T25043] bond7: entered promiscuous mode [ 500.652717][T25043] 8021q: adding VLAN 0 to HW filter on device bond7 [ 500.686066][ T1150] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.695951][ T1150] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 500.704435][ T1150] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 500.726835][T24881] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.752819][T24881] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 500.763089][T24881] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 500.795477][T25066] bond7: (slave bridge5): making interface the new active one [ 500.803350][T25066] bridge5: entered promiscuous mode [ 500.814701][T25066] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 500.834698][ T1150] ================================================================== [ 500.842825][ T1150] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 500.850407][ T1150] Read of size 8 at addr ffff888077f982b0 by task kworker/u8:6/1150 [ 500.858393][ T1150] [ 500.860742][ T1150] CPU: 1 UID: 0 PID: 1150 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 500.860765][ T1150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 500.860777][ T1150] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 500.860818][ T1150] Call Trace: [ 500.860825][ T1150] [ 500.860832][ T1150] dump_stack_lvl+0x189/0x250 [ 500.860852][ T1150] ? __kasan_check_byte+0x12/0x40 [ 500.860881][ T1150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.860898][ T1150] ? lock_release+0x4b/0x3e0 [ 500.860918][ T1150] ? __virt_addr_valid+0x4a5/0x5c0 [ 500.860943][ T1150] print_report+0xca/0x240 [ 500.860964][ T1150] ? __mutex_lock+0x147/0x1350 [ 500.860985][ T1150] kasan_report+0x118/0x150 [ 500.860998][ T1150] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 500.861019][ T1150] ? __mutex_lock+0x147/0x1350 [ 500.861049][ T1150] __mutex_lock+0x147/0x1350 [ 500.861073][ T1150] ? __mutex_lock+0x5bb/0x1350 [ 500.861097][ T1150] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 500.861119][ T1150] ? __pfx___mutex_lock+0x10/0x10 [ 500.861143][ T1150] ? __lock_acquire+0xab9/0xd20 [ 500.861166][ T1150] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 500.861189][ T1150] ? process_scheduled_works+0x9ef/0x17b0 [ 500.861207][ T1150] ? process_scheduled_works+0x9ef/0x17b0 [ 500.861226][ T1150] process_scheduled_works+0xae1/0x17b0 [ 500.861257][ T1150] ? __pfx_process_scheduled_works+0x10/0x10 [ 500.861284][ T1150] worker_thread+0x8a0/0xda0 [ 500.861309][ T1150] ? __kthread_parkme+0x7b/0x200 [ 500.861333][ T1150] kthread+0x711/0x8a0 [ 500.861357][ T1150] ? __pfx_worker_thread+0x10/0x10 [ 500.861375][ T1150] ? __pfx_kthread+0x10/0x10 [ 500.861398][ T1150] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.861415][ T1150] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.861435][ T1150] ? __pfx_kthread+0x10/0x10 [ 500.861457][ T1150] ret_from_fork+0x4bc/0x870 [ 500.861476][ T1150] ? __pfx_ret_from_fork+0x10/0x10 [ 500.861496][ T1150] ? __switch_to_asm+0x39/0x70 [ 500.861515][ T1150] ? __switch_to_asm+0x33/0x70 [ 500.861534][ T1150] ? __pfx_kthread+0x10/0x10 [ 500.861557][ T1150] ret_from_fork_asm+0x1a/0x30 [ 500.861585][ T1150] [ 500.861592][ T1150] [ 501.070006][ T1150] Allocated by task 24884: [ 501.074471][ T1150] kasan_save_track+0x3e/0x80 [ 501.079160][ T1150] __kasan_kmalloc+0x93/0xb0 [ 501.083771][ T1150] __kmalloc_noprof+0x411/0x7f0 [ 501.088634][ T1150] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 501.094795][ T1150] notifier_call_chain+0x1b6/0x3e0 [ 501.099915][ T1150] register_netdevice+0x1608/0x1ae0 [ 501.105138][ T1150] nsim_create+0xae8/0xf10 [ 501.109550][ T1150] __nsim_dev_port_add+0x6b6/0xb10 [ 501.114682][ T1150] nsim_dev_port_add_all+0x37/0xf0 [ 501.119813][ T1150] nsim_dev_reload_up+0x451/0x780 [ 501.124972][ T1150] devlink_reload+0x4e9/0x8d0 [ 501.129670][ T1150] devlink_nl_reload_doit+0xb35/0xd50 [ 501.135140][ T1150] genl_family_rcv_msg_doit+0x212/0x300 [ 501.140701][ T1150] genl_rcv_msg+0x60e/0x790 [ 501.145217][ T1150] netlink_rcv_skb+0x205/0x470 [ 501.149985][ T1150] genl_rcv+0x28/0x40 [ 501.153980][ T1150] netlink_unicast+0x82f/0x9e0 [ 501.158759][ T1150] netlink_sendmsg+0x805/0xb30 [ 501.163533][ T1150] __sock_sendmsg+0x21c/0x270 [ 501.168224][ T1150] ____sys_sendmsg+0x505/0x830 [ 501.173033][ T1150] ___sys_sendmsg+0x21f/0x2a0 [ 501.177714][ T1150] __x64_sys_sendmsg+0x19b/0x260 [ 501.182763][ T1150] do_syscall_64+0xfa/0xfa0 [ 501.187370][ T1150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.193354][ T1150] [ 501.195681][ T1150] Freed by task 24881: [ 501.199748][ T1150] kasan_save_track+0x3e/0x80 [ 501.204450][ T1150] __kasan_save_free_info+0x46/0x50 [ 501.209655][ T1150] __kasan_slab_free+0x5c/0x80 [ 501.214433][ T1150] kfree+0x19a/0x6d0 [ 501.218339][ T1150] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 501.224602][ T1150] notifier_call_chain+0x1b6/0x3e0 [ 501.229724][ T1150] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 501.236178][ T1150] unregister_netdevice_queue+0x33c/0x380 [ 501.241929][ T1150] nsim_destroy+0x1dd/0x670 [ 501.246438][ T1150] __nsim_dev_port_del+0x14d/0x1b0 [ 501.251652][ T1150] nsim_dev_reload_destroy+0x288/0x490 [ 501.257153][ T1150] nsim_dev_reload_down+0x8a/0xc0 [ 501.262205][ T1150] devlink_reload+0x1b3/0x8d0 [ 501.266896][ T1150] devlink_nl_reload_doit+0xb35/0xd50 [ 501.272293][ T1150] genl_family_rcv_msg_doit+0x212/0x300 [ 501.277861][ T1150] genl_rcv_msg+0x60e/0x790 [ 501.282377][ T1150] netlink_rcv_skb+0x205/0x470 [ 501.287156][ T1150] genl_rcv+0x28/0x40 [ 501.291204][ T1150] netlink_unicast+0x82f/0x9e0 [ 501.296114][ T1150] netlink_sendmsg+0x805/0xb30 [ 501.300906][ T1150] __sock_sendmsg+0x21c/0x270 [ 501.305613][ T1150] ____sys_sendmsg+0x505/0x830 [ 501.310476][ T1150] ___sys_sendmsg+0x21f/0x2a0 [ 501.315162][ T1150] __x64_sys_sendmsg+0x19b/0x260 [ 501.320129][ T1150] do_syscall_64+0xfa/0xfa0 [ 501.324646][ T1150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.330550][ T1150] [ 501.332873][ T1150] Last potentially related work creation: [ 501.338670][ T1150] kasan_save_stack+0x3e/0x60 [ 501.343366][ T1150] kasan_record_aux_stack+0xbd/0xd0 [ 501.348582][ T1150] insert_work+0x3d/0x330 [ 501.352920][ T1150] __queue_work+0xbaf/0xfb0 [ 501.357426][ T1150] queue_work_on+0x181/0x270 [ 501.362022][ T1150] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 501.367658][ T1150] udp_tunnel_push_rx_port+0x17d/0x200 [ 501.373225][ T1150] geneve_offload_rx_ports+0xd7/0x160 [ 501.378608][ T1150] geneve_netdevice_event+0x6a/0x80 [ 501.383832][ T1150] notifier_call_chain+0x1b6/0x3e0 [ 501.388965][ T1150] call_netdevice_notifiers+0x88/0xc0 [ 501.394392][ T1150] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 501.400559][ T1150] notifier_call_chain+0x1b6/0x3e0 [ 501.405682][ T1150] register_netdevice+0x1608/0x1ae0 [ 501.410888][ T1150] nsim_create+0xae8/0xf10 [ 501.415313][ T1150] __nsim_dev_port_add+0x6b6/0xb10 [ 501.420438][ T1150] nsim_dev_port_add_all+0x37/0xf0 [ 501.425569][ T1150] nsim_dev_reload_up+0x451/0x780 [ 501.430605][ T1150] devlink_reload+0x4e9/0x8d0 [ 501.435305][ T1150] devlink_nl_reload_doit+0xb35/0xd50 [ 501.440678][ T1150] genl_family_rcv_msg_doit+0x212/0x300 [ 501.446233][ T1150] genl_rcv_msg+0x60e/0x790 [ 501.450747][ T1150] netlink_rcv_skb+0x205/0x470 [ 501.455516][ T1150] genl_rcv+0x28/0x40 [ 501.459515][ T1150] netlink_unicast+0x82f/0x9e0 [ 501.464301][ T1150] netlink_sendmsg+0x805/0xb30 [ 501.469068][ T1150] __sock_sendmsg+0x21c/0x270 [ 501.473759][ T1150] ____sys_sendmsg+0x505/0x830 [ 501.478529][ T1150] ___sys_sendmsg+0x21f/0x2a0 [ 501.483211][ T1150] __x64_sys_sendmsg+0x19b/0x260 [ 501.488161][ T1150] do_syscall_64+0xfa/0xfa0 [ 501.492676][ T1150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.498580][ T1150] [ 501.500913][ T1150] Second to last potentially related work creation: [ 501.507494][ T1150] kasan_save_stack+0x3e/0x60 [ 501.512186][ T1150] kasan_record_aux_stack+0xbd/0xd0 [ 501.517387][ T1150] insert_work+0x3d/0x330 [ 501.521717][ T1150] __queue_work+0xcd2/0xfb0 [ 501.526225][ T1150] queue_work_on+0x181/0x270 [ 501.530844][ T1150] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 501.536500][ T1150] udp_tunnel_push_rx_port+0x17d/0x200 [ 501.541963][ T1150] vxlan_offload_rx_ports+0x139/0x200 [ 501.547347][ T1150] vxlan_netdevice_event+0x111/0x470 [ 501.552637][ T1150] notifier_call_chain+0x1b6/0x3e0 [ 501.557764][ T1150] call_netdevice_notifiers+0x88/0xc0 [ 501.563232][ T1150] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 501.569389][ T1150] notifier_call_chain+0x1b6/0x3e0 [ 501.574503][ T1150] register_netdevice+0x1608/0x1ae0 [ 501.579709][ T1150] nsim_create+0xae8/0xf10 [ 501.584224][ T1150] __nsim_dev_port_add+0x6b6/0xb10 [ 501.589342][ T1150] nsim_dev_port_add_all+0x37/0xf0 [ 501.594460][ T1150] nsim_dev_reload_up+0x451/0x780 [ 501.599492][ T1150] devlink_reload+0x4e9/0x8d0 [ 501.604171][ T1150] devlink_nl_reload_doit+0xb35/0xd50 [ 501.609545][ T1150] genl_family_rcv_msg_doit+0x212/0x300 [ 501.615119][ T1150] genl_rcv_msg+0x60e/0x790 [ 501.619629][ T1150] netlink_rcv_skb+0x205/0x470 [ 501.624393][ T1150] genl_rcv+0x28/0x40 [ 501.628416][ T1150] netlink_unicast+0x82f/0x9e0 [ 501.633193][ T1150] netlink_sendmsg+0x805/0xb30 [ 501.637959][ T1150] __sock_sendmsg+0x21c/0x270 [ 501.642651][ T1150] ____sys_sendmsg+0x505/0x830 [ 501.647591][ T1150] ___sys_sendmsg+0x21f/0x2a0 [ 501.652271][ T1150] __x64_sys_sendmsg+0x19b/0x260 [ 501.657228][ T1150] do_syscall_64+0xfa/0xfa0 [ 501.661732][ T1150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.667716][ T1150] [ 501.670042][ T1150] The buggy address belongs to the object at ffff888077f98200 [ 501.670042][ T1150] which belongs to the cache kmalloc-256 of size 256 [ 501.684098][ T1150] The buggy address is located 176 bytes inside of [ 501.684098][ T1150] freed 256-byte region [ffff888077f98200, ffff888077f98300) [ 501.697898][ T1150] [ 501.700224][ T1150] The buggy address belongs to the physical page: [ 501.706646][ T1150] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77f98 [ 501.715415][ T1150] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 501.724012][ T1150] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 501.731583][ T1150] page_type: f5(slab) [ 501.735576][ T1150] raw: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 501.744200][ T1150] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 501.752792][ T1150] head: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 501.761470][ T1150] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 501.770143][ T1150] head: 00fff00000000001 ffffea0001dfe601 00000000ffffffff 00000000ffffffff [ 501.778818][ T1150] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 501.787485][ T1150] page dumped because: kasan: bad access detected [ 501.793933][ T1150] page_owner tracks the page as allocated [ 501.799655][ T1150] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 17388, tgid 17387 (syz.1.3235), ts 326616272627, free_ts 323506211751 [ 501.821206][ T1150] post_alloc_hook+0x240/0x2a0 [ 501.826073][ T1150] get_page_from_freelist+0x2365/0x2440 [ 501.831625][ T1150] __alloc_frozen_pages_noprof+0x181/0x370 [ 501.837443][ T1150] alloc_pages_mpol+0x232/0x4a0 [ 501.842333][ T1150] allocate_slab+0x96/0x3a0 [ 501.846852][ T1150] ___slab_alloc+0xe94/0x18a0 [ 501.851530][ T1150] __slab_alloc+0x65/0x100 [ 501.855948][ T1150] __kmalloc_cache_noprof+0x411/0x6f0 [ 501.861335][ T1150] tcf_chain_create+0xb0/0x310 [ 501.866103][ T1150] __tcf_chain_get+0x111/0x3c0 [ 501.870880][ T1150] tc_new_tfilter+0x753/0x15b0 [ 501.875651][ T1150] rtnetlink_rcv_msg+0x7cf/0xb70 [ 501.880591][ T1150] netlink_rcv_skb+0x205/0x470 [ 501.885361][ T1150] netlink_unicast+0x82f/0x9e0 [ 501.890156][ T1150] netlink_sendmsg+0x805/0xb30 [ 501.894926][ T1150] __sock_sendmsg+0x21c/0x270 [ 501.899631][ T1150] page last free pid 17317 tgid 17315 stack trace: [ 501.906132][ T1150] __free_frozen_pages+0xbc4/0xd30 [ 501.911255][ T1150] __put_partials+0x146/0x170 [ 501.915944][ T1150] put_cpu_partial+0x1f2/0x2e0 [ 501.920726][ T1150] __slab_free+0x2b9/0x390 [ 501.925156][ T1150] qlist_free_all+0x97/0x140 [ 501.929775][ T1150] kasan_quarantine_reduce+0x148/0x160 [ 501.935242][ T1150] __kasan_slab_alloc+0x22/0x80 [ 501.940104][ T1150] __kmalloc_noprof+0x3c3/0x7f0 [ 501.944965][ T1150] tomoyo_realpath_from_path+0xe3/0x5d0 [ 501.950531][ T1150] tomoyo_check_open_permission+0x1c1/0x3b0 [ 501.956433][ T1150] security_file_open+0xb1/0x270 [ 501.961377][ T1150] do_dentry_open+0x384/0x13f0 [ 501.966144][ T1150] vfs_open+0x3b/0x340 [ 501.970222][ T1150] path_openat+0x2ee5/0x3830 [ 501.974819][ T1150] do_filp_open+0x1fa/0x410 [ 501.979349][ T1150] do_sys_openat2+0x121/0x1c0 [ 501.984033][ T1150] [ 501.986352][ T1150] Memory state around the buggy address: [ 501.992001][ T1150] ffff888077f98180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 502.000153][ T1150] ffff888077f98200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.008230][ T1150] >ffff888077f98280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.016315][ T1150] ^ [ 502.021946][ T1150] ffff888077f98300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 502.030031][ T1150] ffff888077f98380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 502.038092][ T1150] ================================================================== [ 502.049033][ T1150] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 502.056262][ T1150] CPU: 0 UID: 0 PID: 1150 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 502.065733][ T1150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.075884][ T1150] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 502.083190][ T1150] Call Trace: [ 502.086481][ T1150] [ 502.089429][ T1150] dump_stack_lvl+0x99/0x250 [ 502.094040][ T1150] ? __asan_memcpy+0x40/0x70 [ 502.098646][ T1150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.103858][ T1150] ? __pfx__printk+0x10/0x10 [ 502.108468][ T1150] vpanic+0x237/0x6d0 [ 502.112467][ T1150] ? __pfx_vpanic+0x10/0x10 [ 502.116981][ T1150] ? preempt_schedule+0xae/0xc0 [ 502.122023][ T1150] ? __pfx_preempt_schedule+0x10/0x10 [ 502.127403][ T1150] panic+0xb9/0xc0 [ 502.131143][ T1150] ? __pfx_panic+0x10/0x10 [ 502.135664][ T1150] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 502.141568][ T1150] ? __mutex_lock+0x147/0x1350 [ 502.146341][ T1150] check_panic_on_warn+0x89/0xb0 [ 502.151298][ T1150] ? __mutex_lock+0x147/0x1350 [ 502.156088][ T1150] end_report+0x78/0x160 [ 502.160343][ T1150] kasan_report+0x129/0x150 [ 502.164846][ T1150] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 502.170757][ T1150] ? __mutex_lock+0x147/0x1350 [ 502.175538][ T1150] __mutex_lock+0x147/0x1350 [ 502.180243][ T1150] ? __mutex_lock+0x5bb/0x1350 [ 502.185038][ T1150] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 502.191407][ T1150] ? __pfx___mutex_lock+0x10/0x10 [ 502.196443][ T1150] ? __lock_acquire+0xab9/0xd20 [ 502.201302][ T1150] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 502.207381][ T1150] ? process_scheduled_works+0x9ef/0x17b0 [ 502.213117][ T1150] ? process_scheduled_works+0x9ef/0x17b0 [ 502.218857][ T1150] process_scheduled_works+0xae1/0x17b0 [ 502.224432][ T1150] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.230440][ T1150] worker_thread+0x8a0/0xda0 [ 502.235053][ T1150] ? __kthread_parkme+0x7b/0x200 [ 502.240012][ T1150] kthread+0x711/0x8a0 [ 502.244101][ T1150] ? __pfx_worker_thread+0x10/0x10 [ 502.249254][ T1150] ? __pfx_kthread+0x10/0x10 [ 502.253864][ T1150] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.259089][ T1150] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.264316][ T1150] ? __pfx_kthread+0x10/0x10 [ 502.268917][ T1150] ret_from_fork+0x4bc/0x870 [ 502.273520][ T1150] ? __pfx_ret_from_fork+0x10/0x10 [ 502.278651][ T1150] ? __switch_to_asm+0x39/0x70 [ 502.283488][ T1150] ? __switch_to_asm+0x33/0x70 [ 502.288285][ T1150] ? __pfx_kthread+0x10/0x10 [ 502.292895][ T1150] ret_from_fork_asm+0x1a/0x30 [ 502.297719][ T1150] [ 502.301112][ T1150] Kernel Offset: disabled [ 502.305457][ T1150] Rebooting in 86400 seconds..