last executing test programs: 3m44.552516095s ago: executing program 3 (id=1279): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket$kcm(0x21, 0x2, 0x2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'wlan0\x00', 0x200}) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000000)=0x87f4, 0x4) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010042) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r7, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@phonet={0x23, 0xf8, 0x1, 0x6}, 0x80, 0x0}}], 0x2, 0x9200000000000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2) 3m43.619624965s ago: executing program 3 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002940)={'gretap0\x00', 0x0}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async, rerun: 32) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) (async, rerun: 32) sendto$packet(r3, 0x0, 0x16, 0x24008081, 0x0, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) (async, rerun: 64) r7 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x448, 0xc0, 0xc0, 0x278, 0xc0, 0x190, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'wg0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x7, 0x1100, 0x11]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x1, 0x4, 0x1}, {0x8, 0x100000000}, {0xe}, 0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 3m43.002560635s ago: executing program 3 (id=1302): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x4}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r5, &(0x7f0000009e00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) write$nci(r7, 0x0, 0x7) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r11, 0x29, 0x11, &(0x7f0000000000), 0x4) write$nci(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="4005014c"], 0x4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000020001000000776730000000000000000000000000003400088030000080060005000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x5c}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) 3m41.950175354s ago: executing program 3 (id=1313): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x20000000) close(0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000180)="37553b368807695579a64671260bbd743c93fa5f347cda13831187b6e618f22da4f7e491d26ce35f4d80bb2b8f2a52782fb4549748fc85b6c35e7c47a440ce11fa73113f8564316aba1e93f0925bd7ce41349b38124f8f20595f6218ccbfe12d4436bdad150087ee45ad349cfceaf44568f7572f641a7fd06598a8911b752ac1e57ab38c70f1d11766a626813df91d286504304065dd4b51b35177e4b47b28b054792a3188ce56431f6b38dc", &(0x7f0000000240)=@udp=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) (async) sendfile(r1, r1, 0x0, 0x4) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) socket(0x1e, 0x4, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x20000000) (async) close(0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000180)="37553b368807695579a64671260bbd743c93fa5f347cda13831187b6e618f22da4f7e491d26ce35f4d80bb2b8f2a52782fb4549748fc85b6c35e7c47a440ce11fa73113f8564316aba1e93f0925bd7ce41349b38124f8f20595f6218ccbfe12d4436bdad150087ee45ad349cfceaf44568f7572f641a7fd06598a8911b752ac1e57ab38c70f1d11766a626813df91d286504304065dd4b51b35177e4b47b28b054792a3188ce56431f6b38dc", &(0x7f0000000240)=@udp=r2}, 0x20) (async) 3m41.590195279s ago: executing program 3 (id=1318): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x200000000000007c, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 3m41.288522397s ago: executing program 3 (id=1323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1c8, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x400}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x80000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0xf5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffff2155}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x4ec4}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4040}, 0x44090) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x4000801) 3m14.465828843s ago: executing program 32 (id=1323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1c8, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x400}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x80000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0xf5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffff2155}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x4ec4}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4040}, 0x44090) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x4000801) 8.046569018s ago: executing program 0 (id=3143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) readv(r3, &(0x7f0000000680)=[{&(0x7f0000000240)=""/127, 0x7f}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x16, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x2, 0x2, 0x1, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @generic={0x7, 0x2, 0x1, 0x100, 0x400}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ldst={0x3, 0x0, 0x4, 0xa, 0x8, 0xffffffffffffffe0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x1d, &(0x7f00000002c0)=""/29, 0x41000, 0x5c, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1b284, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x4, 0x2, 0xc, 0xa}], 0x10, 0x5}, 0x94) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) getpid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@RTM_GETNSID={0x1c, 0x5a, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x1c}}, 0x20004080) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0xfffffffffffffdf2) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) write(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r10, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x15, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) 7.111296531s ago: executing program 0 (id=3154): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000000340)=[{r2}], 0x1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r6, 0x1, 0xffff0000, &(0x7f0000000240)=""/88, &(0x7f00000002c0)=0x58) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000040)="09000000010003", 0x7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r8, @ANYBLOB="000000f0ffffff0061000000000019009500000000000000539ad8beb6690556e99b0765fd41c715fdf6495f1443c8022e7b8cd2feac4767af8e150ab550b7f3c45d88ccad2f3e5f364bfb6fb9b2756058fc2cf7b2ffae1a45d2177611f0bfb474684086ebe2a7909dc2980e42df89fd9d98a13c17bbc5bae50a05abc9e139529278774aa534c03ccf8c104588fc96dbacde8fdb97af73d9ec72a015813bd3293c348152cb49a091ba452ec59c111ab79cb0ac4e5ebb5c3f885da6000000000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 6.198519553s ago: executing program 0 (id=3165): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaa}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 5.984531466s ago: executing program 0 (id=3167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x94, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000030000000008000017823359fbcf1ae65070307907800030c58451c00000065000e4e24002c00000000ac141444ff61cf4bedbb1b2d012d95a22016db643199432275a3e77cce14e1fddff684dfbc9ce1c8"], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r5, 0x0, 0x0, 0x7fffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x7, 0x8, 0x5, 0x2b, {{0x16, 0x4, 0x1, 0xf, 0x58, 0x64, 0x0, 0x7, 0x4, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x8, 0xfc, 0x0, 0x1, [0x4]}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x7, 0x8, "3917d2a6228a"}, {0x0, 0x11, "38599f9e133fe6b6b934f5433f6645"}, {0x2, 0xb, "38da2692f464685fb2"}, {0x5, 0xa, "de0c4d48cd09d480"}]}, @lsrr={0x83, 0x7, 0x89, [@loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2020049}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="002dc592", @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf251600000005000300010000000500040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x851) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={0x0, r5}, 0x18) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x31, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0x9bb, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000002540)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002580)=0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x5, &(0x7f0000000140)=@framed={{}, [@map_fd={0x18, 0x7, 0x1, 0x0, r8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.679421216s ago: executing program 0 (id=3170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r2}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@generic={0x5, 0x4, 0x7, 0x3, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x96, &(0x7f0000000100)=""/150, 0x0, 0x3, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf8a8, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[r2], &(0x7f00000002c0)=[{0x4, 0x2, 0xa, 0xc}, {0x2, 0x4, 0x8, 0xc}, {0x4, 0x5, 0x2, 0xc}, {0x3, 0x4, 0xa, 0x8}], 0x10, 0x1ff}, 0x94) 5.425275693s ago: executing program 0 (id=3173): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000009000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r9}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r9, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 3.715200078s ago: executing program 5 (id=3191): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/209, 0x0, 0xd1, 0x1}, 0x28) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x2c, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x884) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000c6a92138dbdf250600000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r2], 0x48}}, 0x0) 3.524016295s ago: executing program 4 (id=3193): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x410, 0xffffffff, 0xffffffff, 0x410, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffffff, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x148, 0x1b0, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0xfd}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x1, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x10000, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x4, 0x1, 'syz1\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x886cb6b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x55d) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000680)={0x0, 0x2, 0x1, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}]}, 0x18) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408d0}, 0x4000000) 3.259555266s ago: executing program 5 (id=3196): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r1) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)={0x1c, r3, 0x11d, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x48094) write$cgroup_subtree(r0, 0x0, 0x4d) 3.255829609s ago: executing program 4 (id=3197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x12f, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = socket$inet6(0xa, 0x3, 0x7) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x40000102, 0x0, 0x0) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@acquire={0x128, 0x17, 0x200, 0x70bd2b, 0x25dfdbff, {{@in=@private=0xa010101, 0x4d4, 0xff}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {@in=@loopback, @in=@local, 0x4e23, 0x2, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x11, 0x0, 0xee01}, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x37, 0x4e21, 0x48, 0x2, 0x20, 0x20, 0x32}, {0x7fffffffffffffff, 0x721b, 0x7, 0x80000000, 0x5, 0x7, 0x5, 0x3}, {0x81, 0x4, 0x5}, 0x10, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, 0x800, 0x40, 0x10000, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x2000}, 0x41) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000400"/28], 0x48) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r9, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)=""/212, 0xd4}], 0x1}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 3.053577294s ago: executing program 5 (id=3198): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r3}, 0x70) r4 = accept4(r1, 0x0, 0x0, 0x0) write$nbd(r4, &(0x7f0000000740)={0x67446698, 0x0, 0x2, 0x2, 0x1, "00660d5ea889a138a0802649e1bfb8f8179cf17aa0cfa6b54586331559d761eb"}, 0x30) recvmmsg(r4, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/36, 0x24}, {&(0x7f0000000900)=""/203, 0xcb}], 0x2}, 0x8}], 0x1, 0x10000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800cd6bcbffdf5ce13ef42a3aebd533c39fc000280050001000000000014000180080001000000000008000200e0000002080007400000000024000e8014000180080001006401010108000200ac1414bb0c0002800500010002000000"], 0x88}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f, r9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r9, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2.711346339s ago: executing program 1 (id=3203): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xa, 0xb}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000001907800000000ffffffff2a00dd0000000000"], 0x0) 2.273176081s ago: executing program 2 (id=3204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001100)={@val={0x6f01, 0x800}, @val={0x2, 0x1, 0x6, 0x6, 0x6, 0x81}, @mpls={[], @ipv4=@igmp={{0x5, 0x4, 0x2, 0x29, 0xfc0, 0x66, 0x0, 0x7f, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x14, 0xb, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, "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"}}}}, 0xfce) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.174393668s ago: executing program 4 (id=3205): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x52000, &(0x7f0000000900)={@align=0x6, {0x8, 0x0, 0xffffffff, 0xa}}, 0x5, &(0x7f0000000080), &(0x7f00000001c0)=0x3ff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@dellink={0x28, 0x11, 0x101, 0x0, 0xfffffffe, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000280), 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x12, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc}}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a0101000000000000000001001b000900020073797a32000000002c0003802800008008000340000000021c000b80360001800e000100636f6e6e6c696d69740c0000040002800900010073797a3000"], 0xdc}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000001818200000", @ANYRES32=r6, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b40)={0x0, @rand_addr, @broadcast}, &(0x7f0000000b80)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x2c, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0x5, 0x3, 0x4, 0x40, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xa1}, @call={0x85, 0x0, 0x0, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x705c, 0x4, &(0x7f0000000b00)=""/4, 0x41000, 0x4e, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x1, 0xb2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c40)=[r0, r2, r1, r0, r0, r2, r1], &(0x7f0000000c80)=[{0x1, 0x4, 0x4, 0xc}], 0x10, 0x200000}, 0x94) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0xa2, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xf3, 0x8, 0x68, &(0x7f00000006c0)}}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x81, r11, 0x4}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r7, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000f00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000f40)=[0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0], 0x0, 0x5a, &(0x7f0000000fc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0x13, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001200)='io.stat\x00', 0x0, 0x0) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001440)={0x1b, 0x0, 0x0, 0x3fffd, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014e6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x21, 0x7, 0x1, 0xfffffff8, 0x40204, r0, 0xdc5d, '\x00', r8, r9, 0x4, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x10, 0xf, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd43}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x0, 0xa, 0x6, 0x7, 0xadacf5a66d975b56, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x2e}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000e00)='syzkaller\x00', 0x5, 0x39, &(0x7f0000000e40)=""/57, 0x41000, 0x0, '\x00', r8, @fallback=0x1c, r9, 0x8, &(0x7f0000000e80)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000ec0)={0x4, 0xe, 0x10001, 0x80000000}, 0x10, r12, r13, 0x6, &(0x7f00000012c0)=[r14, r6, r15], &(0x7f0000001300)=[{0x9, 0x4, 0x4, 0x6}, {0x3, 0x3, 0xb}, {0x3, 0x1, 0xd, 0x4}, {0x5, 0x3, 0xa, 0x2}, {0x3, 0x5, 0xb, 0xa}, {0x2, 0x5, 0x4, 0x9}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x12, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}, [@func, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7fffffff}, @ldst={0x1, 0x2, 0x3, 0x1, 0x8, 0x2, 0x1}, @generic={0xd, 0x3, 0x3, 0x5, 0x80000000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000380)='syzkaller\x00', 0x4, 0x86, &(0x7f00000003c0)=""/134, 0x40f00, 0x3, '\x00', 0x0, @sk_msg=0x7, r9, 0x8, &(0x7f00000004c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x7, 0x40, 0x3}, 0x10, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffd8c}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 2.055277364s ago: executing program 1 (id=3206): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000080)={0x3b}) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async, rerun: 32) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) (async, rerun: 64) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f00000001c0)=0x9, 0x4) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000200)={0x3d, 0x4, 0x9, 0xa, 0x800}) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000002c0)={0x28, 0x7, 0x4, 0x6, 0x6}) (async) recvfrom$packet(r8, &(0x7f0000000300)=""/32, 0x20, 0x10001, &(0x7f0000000340)={0x11, 0x6, r4, 0x1, 0x0, 0x6, @random="e5811bc6c23e"}, 0x14) (async, rerun: 32) bind$l2tp6(r6, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x20) (async, rerun: 32) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={0x0, @in={0x2, 0x4e21, @loopback}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, @can={0x1d, r4}, 0xfff7, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)='macvlan1\x00', 0x5c3, 0x392d, 0x5}) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) bind$l2tp6(r7, &(0x7f0000000480)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x2}, 0x20) (async) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000004c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000500)=0x2c) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040004) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000740)=0xe8) r12 = socket$netlink(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r12) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'veth1_to_batadv\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000840)={'syztnl0\x00', r1, 0x20, 0x700, 0x68, 0xa28, {{0x25, 0x4, 0x1, 0x4, 0x94, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x14, 0x87, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0xe}]}, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x1, [{@broadcast, 0x89a6}, {@multicast1, 0xe6f1}]}, @lsrr={0x83, 0x17, 0x15, [@private=0xa010102, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @rr={0x7, 0x1b, 0xc9, [@broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0xaa, 0x3, 0x2, [{@broadcast, 0xf}, {@broadcast, 0x200}, {@empty}]}, @ssrr={0x89, 0x7, 0x2d, [@multicast1]}]}}}}}) (rerun: 64) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r10, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x190, r13, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r12, 0xf505, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xac, 0x2, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8b}]}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7f8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x117f8128}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x81}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x2004}, 0x8080) (async, rerun: 64) r16 = accept4$inet6(r10, &(0x7f0000000d00)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000d40)=0x1c, 0x80000) (rerun: 64) getsockopt$inet6_mreq(r16, 0x29, 0x15, &(0x7f0000000d80)={@initdev}, &(0x7f0000000dc0)=0x14) 1.988050665s ago: executing program 5 (id=3207): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001800)=[{0x0, 0x0, 0x0}], 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018"], 0x44}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000200)="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", 0xfd}, {&(0x7f00000003c0)="1a868b74d05c3ecbac3829750bcba0d63e73f0d8569abb4824be9b10aeda4a214f04b6e10eb4ba0bc714dc1fe3618c41f00bd6c2c094", 0x36}, {&(0x7f0000000400)="ffcd89fe3e72ac7dc78ac471c5b973fb47bc4b4c75d1165706e81ea4cd44c734e0b0e469bc6934c4c9b941c61d492165ebed0bf0b13624532d6519b7b955755c3dbbf29dc7c64134d5a6e9fc3cc768fabf27470524f65d8f5286677ddc0f17ad41d7cc97462757fe42accd94f18ed210e5a6af48b2dd55e2562b5d18e5bd9614924714c3c98437895f56422b99fd46f6ad68168d711f02", 0x97}, {&(0x7f00000004c0)="546e4545141a01c0918e4cb7b4033703d771571dffc83a2320e986e9c76eb0c9e4fd2f859c5af0a22bdae541dd0ea9c5d670e966ad6b13aeb8fa9ddf437d14b4ee9159d2d060061fbb3a44a280f2f61281e5a69e087262d524512dd4d3b337cc3beb04f4f03a33f780bc7bda", 0x6c}, {&(0x7f0000000540)="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", 0x1000}], 0x5}}, {{&(0x7f00000015c0)=@llc={0x1a, 0xfffe, 0x6, 0x80, 0x0, 0x7, @remote}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001640)="327a51dbf3ea620ca972a7f67eef59cb76d7a58556a34399712530e802e7dbf6a7a3f941336e43c6b6a4152418487dd1483f78f04089d863bfdb2841285b9ef337a1de5225cea9bd4252d82a9f459db0f4f2153add4b37a12c899bdfefd0c861c38d74dfc5ddefe8e4a2f044cba18ac4ffccd895264f69434302faa987e109c2c007b7b7633eb850b832f59f2011605ad6f815bce61a4da2f8bca2f2c91d592ca29dba85f851e31b80963efd4c224c5ca82deb585950fa79432e160279d5", 0xbe}], 0x1}}, {{&(0x7f0000001740)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000017c0)="7193b56466040cfb8aa48d85e5bdf4bf47aca3860ddd48e1f166c9523ac2ebf8d6bb1ef65c463699e2c2b3eea4c2180325f84d66d98795b355d5cc27757d9809f6ed878417bf0f0017796f9d740c0d819bccdcc3ea48cb12e26d1e13e83dfa43233654edd2e1ee936002ae7b9ccf97397bbabc7389446dd524fafa4690280c6013a772cce1d00e7f2e74ad121c8f6d6fb90d52c5f9ef6d1b4e36b5a18abc67e9807ff9f39dee6ca255527324efe852552e2a07594eb74af3af964b2d6f24133a4bafdfebda511e7f7d", 0xc9}, {&(0x7f00000018c0)="b2ea927be8dff9e60283da422fece541c3b2e3f2c0e8a8af7318a104a5e7b143e3bf61f486570f70e35a87d0ab05d05ef0b597abf378f612", 0x38}, {&(0x7f0000001900)="547d04802a3b77571e386a764a1170c57bbff3df6a490293885d84774a6a4cf0304b697d66ef28a97e84bd132cd88cc8fe1ba7a3e7eb", 0x36}, {&(0x7f0000001940)="2b693f39a7965f8c015ec144aae07b215e5cfaf63612c3a20222e2568ac3fd9d36e16ed9751835a963d5d69389fddf69cd1fbac6eb85bdc6362c8704c67a76a7a866967bdefb3a628584829b01f87bce40f265a54632ab026a90815685c386eb5e12d9c89c9f75c3bf92cf27c6baa56ad15b76a09696309f10981829c8040c6a9dabfc5098", 0x85}], 0x4, &(0x7f0000001a40)=[{0x1010, 0x108, 0x80000000, "8db8a3434d275e728a8b1431c1858feed818beb78e668e12ca5f92d3c389496c3ce7f867e195cf95e6d3032c96111b0f3cbbefae1f14481461eb5f1f8dfd3ab719ec2999933654395d3016772f99c54c42262cac950d96d826ecf55da6b7b11ae825d1e9822e85fdfc2d26f5a0d019bb59c4e4224f1520e6160276565af3884d3a8bdd34995dcf581d1ba9edb414c160fa420d4d468fa7c7147e824449da687cb7befa26102d28105674f5b624eb16170c221f9f89e91b2bc6df7d9c9ff5cc6f0374ae8f3852acf8189a0172bbc8767c645633c37bda2df563934521b83bd6c31167b15730dda5b864c1fec8a026484881852991a2bf14b5f95f3d87255a1f8594069ccc8577ce8a3315f778e308b684e79c38d1b7fa3a7b02f8face3e134b89dd45330ded430718cf31491253bd7ce65ba98a4eb955b9bf7d392931569e6a6ac786ae9e446b42b7387425abcf6de91408376ba739c26e0623efacff572980c8d01c695b997b4e598a09dfb6454e662533892977d0337168bc5d22ad4cb040fc16e19490281f74119cadad69ce5105bdbf70e05b381a870bcf743ae2582a5ed3d0c0bdcc4126faf1caa707e0c9c024d3c8a7ef45908d931739fff27a743718eea3d5203a462cd1069fa364a905df2f73056300b0edf99656d894bb60cfb6bead8f28f835e55e31b8b860307b0226144bdc4711152d06712fb5442acbe85bec34ce3f4b5fbd2ac3db2f7006e6eebbd6fd80cf6822510813d082afe4386b48adfdb7929ea3623851bf3e88e458e017dce8295209f29fbd6bced3749c1b6dc95d127d8b499be6d17f82c48aa3c7dd52ee03326f112c263e754b4e9eafbb95728376cdac7ab9ce9835f99138206e85e71759e08ed4f7c2278d19b91cdca33f8ebaa30c2bf00b0ca0c9583cc089b9be68c07db7058fb4a57033d5fcfbcc3a6708081fa9e90973918c53e43be6ec697c1d77a0f9fd6c53d9d7ff20ddc004ad977bdb0cf89a907173168b90455ff5934a8ef372b388f86f506713e70815f9be9d8e2c69ffe3979a0ebd52b372828270749116b9ef9c763fc58d2645363ba47a566ba3cc0ad76e21425517c7a3abfa4eb6fe72f956eddfd548d8558abaad0ca6dbba2ad9722f5ea074fd002c6b8421a000e1c51153ea561a7d8f2db45284a99c94b6dbed4fdaaa39d04575cf8fd13d3c41b612de98a71cec5afb8778e20212c821fcd88309ce3c96a4f5c8a961461792c34cf76a12067e32b4081337f18b065f81d071f59f139bc23bca405c4b022f3060bc75164d9779a961c65f479165f1e05828d3870366a4d41fe7276c4922a69ba7501d115615904336009377d4e8e64393fde547bd625906ce28318a2abd7649fcfea00e96221161a4e57f47ed680c42448b8a09534719208fc578af94b67fc710a34bebd9df3ed0b495c82127ac65da9ad364e679ad69b766bf7ef0ed3e1b6e3b7a3e6b73f91dffafd56d50c796256f86ceed15ce7728250119dff42d1e5712850b2e303c72e04c9a0a53d9c026e4f156bf8e54394b203b78ae47e6148300acc3a802b83561f0d74041742b13b99c25972debe01ee307da161ed6b6e8e9e80084f8fa595272f08d9fb7c64b58457e82db7149aefdb0aae06a05c852bfd6e4e7775eb89a48a8053b7fa69813d1e71d9cf9bdcff2a19732607be04823d1352dcf33472c05f71493ca139533760af9dd3c0e2bc6ebbed1ce5fdb6bf924b0f4566b2bab56c5d6915a1b2e5c42eaa70760b6d8b7a2ad39862e1e016d3dbc087721cbaa0408420fe3fcbe90c29a75ab60f0e6d019c2f5d5e253d05c087a04081316e2f712735de4e601438e65e05cb1f2ebb3e916873705046a90153a66b2b0bc2a70fd7a40a09ec6e7798d1501e80a26ddf4a0b2742e13d40cee09ecbec55c439658826c787ef1af8ae5c89ef47e21b9fd561866750d8fa382322d570917d60e075324092642cdfdb950b26ca89064f58fc4bbaed16c89b112658a9fe331cf79e67f64a0839c9954ca277098ba1bd66972789e524c0875f2e1d680f47627e50e235f530b9c6799be838d5b02592b25e3fe4ecb0cca35d333ab38c0db3e94bc218ca1880596d9f23d038368eea3ebb0b654d83b9ca0f5d9725496e66eb88dedd637c0724dcdef44b3308fe460b5cf22fa5879f37d8c0ba9b3b71ca6b82fe49751fc9836ed2a190a652689d0ef804eecee57a9dfdd5931c03decd06bbfef0b19273ce8b189241d5917650f769582531abcfe6efc888494e8b7e7763e05c4959e89eded98ec9e4d0d52a4c183d10ee572c21d312be753f12c5a67f1a5478fe1bc3d2838d156d1e806aca231089aa8d0aefc7d8e22111ff5b9f623bb6a9160d5afbb0714cfeade0edf69fdad70de79a457b36b3c3ef3f5bce7b99043d6b77ecf9ed7153621a00a816965ca2217f42089e08234bb8c3eebba4ba0989aab32b942140ee48246c6651da8c4c04af0862796da3ba46812d2b4948a9c1e6d89314162c1949ecb36f436e99ddfadd33d7e828a750a73317e423f6f867713ac702d8486044fc98bc01f8283203d7ecab1d92f39de758e0bc4fdd9e9ead9c501f5ca1430434259825435a22fc31b591a2caea996137ade149f54365ea48735677db4518acb3b88a97304cb9377e4767739d97b6ff68f6fbd075be17330602201cafed616f988a515439f4537d72e9ef55686a441d3a8f0114e598ed7ed713db86c6e4c588dd86c7b0863b1bebca16fb0d06b7a6afc8cb0a7c74418f2e3eb57069a2ea4d5e7ee0ceda9b672e66c729f59e2ca35a0899b2d2d9c96ae9a24ec98f77a210cf698e8d558c5b380b9b704f04a0653c21e37a3d29f301832eecfba294bead3b7f610c1bb0909956e4de855c38e06434c17cc340c3c1d82fcabdb7fb52dc8b3a56798986ac63c1aa9d92d0a046faec958aa6a029d95988b5556b6cb753ea6f06eec5b6b1617105ad6cb26ed5c2ef098b5c4e7971b951ef52b7ba217b23f89e53b966c4b3a51616d447b11d4171ac83283738423b57b26ff1074462f001c3068be12c1f328a5ab3274ebd956eaf3f14a4dc204513184f29dd10575c4fe0ab44692bd690f90a29b7277e8ee5380b44deec267158c4768038cf79a76a317aeb6940019f4ea7a49936591254488addbd8a8141698042038d4fca89f41d46445a072abf2ddb1d3ff846e7fb447c61ea19122f2baf21676f869e5a83aafdbbf5adc662971da3fb8a2890f271157cc68992a63780fa97bfdf9fcfe52560778989a458413eaeee16a2edd28036610a5a1cd22e83d86e9cd54f60428d5f57ac5a4afa1680b6db84e84e45bfda9fd1a771665c5cd86492700d329e9c5ef6067455be55f31fb77588562518955dec85b4febefbe0c6fb0a1df7cb993a1dccbf2258087474cb887c24daf769ba98231b2c4fab2f55fa29c874ffeeca3841b5fc59e57dfbd057a90055ed486ba95cd9421cfdf2ab85edca537472430f6d2d01b6f24bafd689f788ea39d35ba6dce206f7eec1b50883104f6a863a881a475d8c286678a77d9aebf0e9f3d1a63d719347fcddfc9bacc44b37f9acec3225812466c26847e8a0fde7b7f935f917f5b1ba364db1f8b8fc657d125fe8ae67fe6a1020bfdafd302c8cf3860feb669a6b06ee5bfc8a6d27b647b249d851c0e07c48bc32852a89d1bee2edfd56fbf2519a985e18dfa6a10aa03648743108beeb5fd8eeb78b844c300397dc4970ae309dcbe5712d8b52bd36129ac49c7ab65c27fd48500ba47107db3a3647308490ba6b9d43d7a0ad5f6942f50a0f6228a60e24701f1ff39fd2703a1a2634bfe079e670f47794f424c21cd487872ca612720f3f27ce5116fabd40e680ff3f549f07298859e3b4de2ef863e8230ec13fcb258195bba7e43669f7f084bb94644c5e9d10953b31961b118715a7bc12671c45fd1c10c00a91fa944cbe97e005e021c8f2b705f94cffa34c0a638cc78d245900bdac8940c53b51907f2ce4124c670c60f78d47ae478c74693ab8aacabdce6d1651eee3ea3580d26932ceb72ed106d024e591c937644400aef70492e3ee0e9d2ece6b78ffe51bf9168b9c5ed112cd66182c92e77c525a0434521deed63b28d6e1207dc06db11ae19504ec519e63d9638a916949fa8d8ec1160e9dd9f9ce1ea5dd59e02abe1a933f4d079a636985c0dae710e453e45aaef1ab1138dc86f29ad73fedbc750d436dab787a8072d7974ea23e789727d485bae6cbf96c4cc747fa497296d2c2c267b064007700e86cfe874d64a61ceb5053daff52b9931feaa5be3cc15e7beacd8cf782650705117813cb7762333577ca1cd3d417823f6a1dddd043a64b35c673165ea6a587aa4a16cf160e82e409536632cc234062243567328bd1929b7f978f0bc3a4eae1d22645b6bea850e7f82c657d7d8db065ce7b7b7a19008d0127b74a5bcb1668f6efb590db9607c317d6512aba2b69bb1f4498c44e352d4ec69481419c7309ef21924a6bd9c128b247cae8c75c0d076c023c92a950bda1c54b71d592b6b003eb9fd05cbcd7bb75a1cfab7ab30c3372d5fe024a99a1f9f1e3a5fc443cc3123a75f7414c74633c0b75608b786a8e60e8fe35b0931d9c23b9589a90946034815f67c3c4a6730e887eea3cf260069a185db369ca05e27c50bfe362da9d0a60576ad1d2f3bd362f659eb6a7cf605262811c4481db8c98a4b9dde961626d462b23de915878b0695d226f5adfc39fba27f47daf197fdd48d7fed1241489c4fb4a69361b30e6efc9cb7eda6ea330bad91516e53c00899e48bcc2f4956cf8b836f77801ca6f0dbe816b9be1f3441711044a0f1710dc83a742c524a6b57f912716561bbbe8e7f366e52b4a9624dc0e42d8de10ec4497cc6cf83a36d77aa13ba51e582e763a3ab95b73a030d2975704a939d6c75efaf032c43acb74da340d48ab6fdf055a0e725ce35d6708122e768d789686c7469c93d627779d3a1d3bf330e929756005fdda875ef6f70fae4ac1d49b21eef5975df59dce6481b455c8ca57b07aa9c955655ddd238bb34747d0d7c6bef7a951f27c0aaf8aafc0f6a58c632cdca3c00df996c504b323d746e846808946e2f101efc7fd9540085396a5062d9286076a9bf4f4bff1dccbd025538740ffda28c649bbefbe40c19587f83038ea8e0e37c0978bec411201a204243527dae4c2d51acb9f93f9d91b8c51bf422d390a9a3752f0b4aebb269a7658d3b79acec2f759e2895c1e1d2d6a9960fced31a4739d4eac830bce26ce1213a6d287bf62cd91228bd5eeec08b634c58ca0bde3cf0e5f0504ed3045eab5d39fd0c337f20a6e63558b48c069430b1121929456d8b307df150990a6782ede41f148b5fc64f6dc0835368cdc082a7d20afa498c4f9cca76751e1f2e1372e425aa62ff7562574351abcae1caf5367a866d585b53aedcd1bf38209e3d7e9cd4713eddbdc6c0607eb975b14b8fc2f5768225f5790af72e724f97b644069b38ca4185e80c270d1f88da9201fc85f6ebeb5e4492c9008c651edfa4a70311b8ee37b86f0fb26aee7f85ae060b8ecec0dc7ddbaa66be21da69a382aee08e95ce80cba3278bec10a11e0c8b4c22bd0afce1e987f726539f7cc1493be41b318a49d04fcf726184b6b80625f4cb26581bf0c57b506cee6ab77e4b82b0498aa9d905de9c737a0616ea3f20ad002a9141bfe0cd991f898b48778a7932174c9613721a86ca9e03c7c28b922e6f5d0ad25e5e54e349bd67c2810309d90abfa5063acc716c185e0d0e087302c0e75e14e1930fdd179f28d161b0a3b636e1f94f9c2081b1"}, {0x1010, 0x1, 0x1b7dd98d, "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"}, {0x78, 0x108, 0xd00, "4617c62809f348e54550b737874cf9b60c2f7dcda7f19c1b596ea55c664436e54c9789f8c48170ae6791b24a0f1d4771658597fc63e8b0d2a9f6e544b900760b132209f8e63f49f9c879f1b407451bf8809cca114fbcde9ca557f920c6a4aec13833b447299f"}, {0xb0, 0x99, 0x1, "ada0791872700f049ef0a2036ccc1ef42fa289f71cff1f7b5de3b102155dec87b0dc0d852c8302cf5d90bc370a8ae43c22ed19c4038a5ea306e53891af2f898b79a29e762237bc40057b50421f79f50e321a10b7e282371815b86b9fed272b84e568004a625b3c4561ba0ef8ef16821c37c1b1e48e7ab1d0a0c9998fe11c13dd6b1bdab4bdb643364ab2753702e12df8cce3c67bcea3c780c6ffd4ac"}, {0x50, 0x10c, 0xffffffff, "c8a2ab5206b9ec774b443345fe7e3596ea67cdccc63f574a911298258ebeb6070405c94e46e45941dcbfc62fb0661e023e7e9ba7c315fb282d698257136c"}, {0x10, 0x6, 0x5}, {0x38, 0x11, 0x2, "f9e30ff04d238d9b222e860b0da2139c6c1288a6a05fc3cb3811ea486c90d42f674dc6e13570"}, {0x18, 0x103, 0x3, "843293ca"}], 0x21f8}}, {{&(0x7f0000003c80)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003d00)="b62c5529516fa9fde2", 0x9}, {&(0x7f0000003d40)="0c76b74fee1f00db35038047fa1569ff37640332f0a594b73597016f71238a28df29f1489dd703e74a8cc7fdda682d88763c2897dee54d62e7196df0d45a4493", 0x40}, {&(0x7f0000003d80)="8c9d5b001daefb9e32db2d5620c70874cdd221be5a2e58b651c1fa83aa", 0x1d}], 0x3, &(0x7f0000003e00)=[{0xe0, 0x1, 0x0, "accbd654896dcff140d0e5c0a2ca1509f0b0d685caedea8c16ad35c966888ff0a85b4bdf65f0cf51ca78de93cb0569783a84e3d19fa1d14af9731fbe8efc7a54be57ded6d8aa4f76f8719339100055c35a50974507843987f65b8e9acc15e58b603119c02fb1cfb2344805c6e77656eb31f21ddb56377f7cc9e521668e827955635a99751b2375aaba9f3cafe8cc3d8beadc619a0d21289c652def5f4c004eb708353b1840460a1f205793e7314a10725687e84011b81d2897879227bda77bae6f6401170b0da161628b5171008e8a98"}], 0xe0}}], 0x4, 0x480d1) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1.793549583s ago: executing program 1 (id=3208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0xc040) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003e00ffffffff0800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 1.611386183s ago: executing program 5 (id=3209): r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000001c0)=0x80) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x180, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xc8}, @CTA_LABELS_MASK={0x10, 0x17, [0x1, 0xffff0000, 0x9da]}, @CTA_NAT_SRC={0xbc, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xc}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2066}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xda40}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400}]}]}, 0x180}}, 0x905) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x100, 0x6, 0xc, 0x0, 0xb, 0xd, 0x8, 0x1, 0x0}, &(0x7f0000000340)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={r1, 0x1ff, 0x6, 0xffffffff}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r2, &(0x7f0000000d00)=[{{&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x10, 0x11, 0x4}], 0x10}}], 0x1, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x40, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFT_BATCH(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 1.519737268s ago: executing program 4 (id=3210): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001b319c59139ecbca9c0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@local, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000a700000095"], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.489625609s ago: executing program 2 (id=3211): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 1.423964809s ago: executing program 1 (id=3212): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="9b0f2bbd7000ffdbdf2d010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x150, 0x150, 0x8, 0xf8010000, 0x380, 0x238, 0x238, 0x2b0, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x2f4, [0x200000000880, 0x0, 0x0, 0x200000000b14, 0x200000000b44], 0x0, 0x0, &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x4a, 0x6007, 'veth0_to_bridge\x00', 'team_slave_0\x00', 'vlan0\x00', 'veth1_to_batadv\x00', @local, [0xff, 0xff], @multicast, [0xff, 0xff, 0xff], 0xb6, 0x126, 0x15e, [@limit={{'limit\x00', 0x0, 0x20}, {{0x8000, 0xb1de, 0xcc7, 0x2, 0x1ff, 0x9}}}], [@snat={'snat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10}}, {0x12, 0x11, 0x9200, 'pim6reg1\x00', 'erspan0\x00', 'vlan0\x00', 'lo\x00', @multicast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0xff], 0x6e, 0xd6, 0x106, [], [@arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xde}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xc8b0}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x36c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x10, 0x1, 0x8e}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.409420485s ago: executing program 2 (id=3213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf4, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x71}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000001}, 0x2004c800) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000100037040000800000007c698ea40000", @ANYRES32=r4, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r4, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1.281177114s ago: executing program 4 (id=3214): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x240488c4) syz_emit_ethernet(0x82, &(0x7f0000000000)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffef}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) write$tun(r4, &(0x7f0000000100)={@void, @void, @ipv4=@dccp={{0x12, 0x4, 0x0, 0x8, 0x89, 0x68, 0x0, 0x4, 0x21, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@cipso={0x86, 0x30, 0x3, [{0x5, 0xd, "6e43d705b6d9dc47598c10"}, {0x2, 0x10, "6da25d41500dbf1b29df76eb4245"}, {0x5, 0xd, "f7d67ced7c87422ac2bad1"}]}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x4, 0x7, '{W\x00', 0x9, "81c1ec"}, "c8a6028caf51bdc206d2e4c1d28c96a60e08ffd44958d3f19e65ae64651b270f998de543eecf8235cf12845a0cf33579f2"}}}, 0x89) 1.103414813s ago: executing program 2 (id=3215): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x1411, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x2}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x1}}]}, 0x34}}, 0x2004c840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.059445053s ago: executing program 1 (id=3216): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x20}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) close(r4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0x2}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46212}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}}, 0x0) 951.463802ms ago: executing program 2 (id=3217): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r1, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xff, 0x27}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "931293d0c5087a4f7131d3879f29d8b3"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xffff}, @NL80211_ATTR_PMKID={0x14, 0x55, "ee02976c96a61b96351d70c2dcd82bb2"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x891) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x144, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5d01492004933a8d, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x491}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf09}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x43c2ad00}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}]}]}, 0x144}}, 0x8054) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 871.479266ms ago: executing program 5 (id=3218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x18}, 0x40c0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000651515bf1e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 831.05401ms ago: executing program 1 (id=3219): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2602, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x80002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x71, '\x00', 0x0, @sk_msg}, 0x94) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0) (async) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2602, 0x0) (async) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x80002, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x71, '\x00', 0x0, @sk_msg}, 0x94) (async) 499.895649ms ago: executing program 4 (id=3220): r0 = socket(0x28, 0x5, 0x34) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000080)={'security\x00', 0x0, [0x7, 0xf171, 0x6, 0x5e3d, 0x80000000]}, &(0x7f0000000100)=0x54) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x2, 0x8, 0x8, 0x920, 0xffffffffffffffff, 0x48, '\x00', r4, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, @rc={0x1f, @none, 0x50}, @hci={0x1f, 0x1, 0x4}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x3, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000240)='ipvlan0\x00', 0x2, 0x7fffffff, 0xb2}) r5 = openat$cgroup_ro(r3, &(0x7f0000000300)='memory.swap.events\x00', 0x0, 0x0) connect$pppl2tp(r5, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @empty}, 0x1}}, 0x2e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r6, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x8088) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x70}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) listen(r5, 0x4) write$rfkill(r5, &(0x7f0000000600)={0xfffff801, 0x1, 0x0, 0x1, 0x1}, 0x8) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x3e8, 0xe8, 0x1f8, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000640), {[{{@arp={@remote, @remote, 0xff000000, 0xffffffff, 0x1, 0x8, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x80]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x0, 0x9, 0x40, 0x7, 0x0, 0x8000, 'vlan0\x00', 'dummy0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xd}}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0x8, 0x6, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x3, 0xb7d, 0x5, 0x2, 0x249, 0x3, 'ip6gre0\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x18}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x33}, 0x4, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0xff, 0x3, 0x6, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xe9ae85dbcca95435]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1, 0x3, 0x5, 0x2456, 0x10, 0x2, 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10001, 'syz1\x00', {0x835}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r8 = socket(0x2a, 0x6, 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x64840, 0x0) ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000b80)={'syztnl1\x00', r4, 0x700, 0x80, 0x75, 0xa, {{0x1e, 0x4, 0x2, 0x39, 0x78, 0x65, 0x0, 0xe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, {[@timestamp={0x44, 0x10, 0x38, 0x0, 0x9, [0xf4e9, 0xfffffffc, 0x5]}, @rr={0x7, 0x13, 0xc1, [@broadcast, @loopback, @remote, @private=0xa010100]}, @end, @end, @timestamp_addr={0x44, 0x2c, 0x3b, 0x1, 0x3, [{@private=0xa010102, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x1}, {@rand_addr=0x64010100, 0x9}, {@multicast1, 0x7}, {@multicast2, 0xe68}]}, @generic={0x83, 0x8, "31ff83a05c6b"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) getsockopt$inet6_mreq(r8, 0x29, 0x14, &(0x7f0000000c80)={@rand_addr, 0x0}, &(0x7f0000000cc0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000000fc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d00)={0x260, r10, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r13 = accept4$packet(r2, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001040)=0x14, 0x800) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f0000001080)=@req3={0x3, 0x7, 0x101, 0x7fff, 0x7, 0x10001, 0x5}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000010c0)={r5}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r15, 0x8983, &(0x7f0000001100)={0x1, 'gre0\x00', {}, 0x9}) r16 = accept$inet(r3, &(0x7f0000001140)={0x2, 0x0, @loopback}, &(0x7f0000001180)=0x10) setsockopt$inet_pktinfo(r16, 0x0, 0x8, &(0x7f00000011c0)={r14, @multicast1, @multicast1}, 0xc) 0s ago: executing program 2 (id=3221): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r5, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd4, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x84}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffc5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000380)={0x0, 0x5, 0x9, 0x1ff}, 0x10) (async) close(0x4) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x880) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.1.1490'. [ 282.362210][T11671] netem: change failed [ 282.455611][T11669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1489'. [ 282.476558][T11676] netlink: zone id is out of range [ 282.513027][T11676] netlink: zone id is out of range [ 282.518286][T11676] netlink: zone id is out of range [ 282.523935][T11676] netlink: zone id is out of range [ 282.530839][T11676] netlink: zone id is out of range [ 282.536900][T11676] netlink: zone id is out of range [ 282.546814][T11676] netlink: zone id is out of range [ 282.555085][T11676] netlink: zone id is out of range [ 282.563831][T11676] netlink: zone id is out of range [ 282.573650][T11676] netlink: zone id is out of range [ 282.899145][T11687] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1494'. [ 283.057494][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 283.110333][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 283.146995][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 283.277113][T11699] syzkaller0: entered promiscuous mode [ 283.293942][T11699] syzkaller0: entered allmulticast mode [ 283.341386][T11699] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1498'. [ 283.362703][T11699] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1498'. [ 283.632088][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 283.702519][T11706] syzkaller0: entered promiscuous mode [ 283.737777][T11706] syzkaller0: entered allmulticast mode [ 283.757079][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 283.800385][T11708] netlink: 'syz.0.1500': attribute type 11 has an invalid length. [ 283.888675][T11713] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 284.181838][T11713] 8021q: adding VLAN 0 to HW filter on device bond9 [ 284.242022][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 285.347745][T11774] netlink: 'syz.0.1519': attribute type 1 has an invalid length. [ 285.373528][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 286.082207][T11785] macvtap1: entered promiscuous mode [ 286.110172][T11785] vlan0: entered promiscuous mode [ 286.124045][T11785] macvtap1: entered allmulticast mode [ 286.139971][T11785] vlan0: entered allmulticast mode [ 286.160392][T11785] bond3: entered allmulticast mode [ 286.170523][T11785] bridge2: entered allmulticast mode [ 286.432793][ T30] audit: type=1800 audit(1780438578.719:5): pid=11809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1527" name="memory.events" dev="tmpfs" ino=1640 res=0 errno=0 [ 286.498357][T11808] bond0: entered promiscuous mode [ 286.514086][T11808] bond_slave_0: entered promiscuous mode [ 286.530782][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 286.543995][T11808] bond_slave_1: entered promiscuous mode [ 286.577982][T11808] ip6gretap0: entered promiscuous mode [ 287.529043][T11856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.537669][T11856] bridge0: port 3(bond0) entered blocking state [ 287.545311][T11856] bridge0: port 3(bond0) entered disabled state [ 287.552423][T11856] bond0: entered allmulticast mode [ 287.560888][T11856] bond0: entered promiscuous mode [ 287.567008][T11856] bridge0: port 3(bond0) entered blocking state [ 287.573479][T11856] bridge0: port 3(bond0) entered forwarding state [ 287.583589][ T9531] bridge0: port 3(bond0) entered disabled state [ 287.671052][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 288.800382][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 289.552289][T11820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.920893][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 289.938405][T11884] netlink: 'syz.0.1551': attribute type 24 has an invalid length. [ 289.997780][T11888] net_ratelimit: 49 callbacks suppressed [ 289.997809][T11888] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 290.038688][T11886] __nla_validate_parse: 9 callbacks suppressed [ 290.038710][T11886] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1552'. [ 290.340361][T11905] netlink: 'syz.5.1558': attribute type 4 has an invalid length. [ 290.559921][T11912] xt_hashlimit: size too large, truncated to 1048576 [ 290.986600][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'. [ 291.055024][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 291.087816][T11937] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1570'. [ 291.101684][T11938] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1567'. [ 291.189663][ T4949] block nbd2: Receive control failed (result -32) [ 291.201276][T11938] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1567'. [ 291.412437][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1574'. [ 291.424547][T11947] syzkaller0: entered promiscuous mode [ 291.431276][T11947] syzkaller0: entered allmulticast mode [ 291.671585][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1577'. [ 291.700891][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.723515][T11963] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1578'. [ 291.939378][T11971] xt_recent: Unsupported userspace flags (000000b1) [ 291.992884][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 292.037368][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 292.200965][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 292.543888][T12007] bridge: RTM_NEWNEIGH with invalid ether address [ 292.753901][T12027] tipc: Can't bind to reserved service type 3 [ 292.849971][T12020] syzkaller0: entered promiscuous mode [ 292.869178][T12020] syzkaller0: entered allmulticast mode [ 293.007573][T12039] netlink: 'syz.5.1599': attribute type 7 has an invalid length. [ 293.014164][T12034] netlink: 'syz.2.1596': attribute type 2 has an invalid length. [ 293.035659][T12039] netlink: 'syz.5.1599': attribute type 7 has an invalid length. [ 293.110354][T12035] syzkaller0: entered promiscuous mode [ 293.149022][T12035] syzkaller0: entered allmulticast mode [ 293.340702][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 293.447763][T12057] x_tables: duplicate entry at hook 2 [ 293.646032][T12065] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 294.254606][T12094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.458005][T12103] erspan0: entered promiscuous mode [ 294.467641][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 294.482539][T12103] erspan0: entered allmulticast mode [ 294.744554][ T5737] hid-generic 0005:0BD7:8000.0001: item fetching failed at offset 0/1 [ 294.777406][T12122] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 294.785547][ T5737] hid-generic 0005:0BD7:8000.0001: probe with driver hid-generic failed with error -22 [ 294.808456][T12119] bond1: left allmulticast mode [ 294.937347][T12129] netlink: 'syz.0.1621': attribute type 5 has an invalid length. [ 294.975816][T12129] netlink: 'syz.0.1621': attribute type 6 has an invalid length. [ 295.165759][T12141] __nla_validate_parse: 10 callbacks suppressed [ 295.165789][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 295.217181][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 295.461601][T12157] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.496382][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'. [ 295.560795][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.588234][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'. [ 295.623159][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 295.648089][T12167] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1633'. [ 295.910742][T12188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1639'. [ 296.051298][T12188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1639'. [ 296.068127][T12183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1638'. [ 296.135788][T12187] syzkaller1: entered promiscuous mode [ 296.141995][T12187] syzkaller1: entered allmulticast mode [ 296.227702][T12196] netlink: 'syz.2.1640': attribute type 61 has an invalid length. [ 296.320869][T12203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1645'. [ 296.337411][T12203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1645'. [ 296.753634][ T9528] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 297.890752][ T9528] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 298.807179][T12333] netlink: 'syz.2.1679': attribute type 83 has an invalid length. [ 299.030656][ T9528] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 299.073093][ T30] audit: type=1804 audit(1780438591.359:6): pid=12344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1682" name="/newroot/342/memory.events" dev="tmpfs" ino=1762 res=1 errno=0 [ 299.153652][ T30] audit: type=1800 audit(1780438591.359:7): pid=12344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1682" name="memory.events" dev="tmpfs" ino=1762 res=0 errno=0 [ 299.489773][T12370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.160783][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 300.313460][T12408] netlink: 'syz.5.1703': attribute type 28 has an invalid length. [ 300.342513][T12408] netlink: 'syz.5.1703': attribute type 3 has an invalid length. [ 300.361051][T12408] __nla_validate_parse: 125 callbacks suppressed [ 300.361073][T12408] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1703'. [ 300.478494][T12378] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1692'. [ 300.674010][T12415] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 300.683577][T12417] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1706'. [ 300.959236][T12421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1707'. [ 301.304579][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 301.341948][T12439] sctp: [Deprecated]: syz.2.1711 (pid 12439) Use of int in max_burst socket option deprecated. [ 301.341948][T12439] Use struct sctp_assoc_value instead [ 301.372652][T12438] netlink: 'syz.5.1713': attribute type 1 has an invalid length. [ 301.521927][T12438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.769922][T12450] bond1: (slave gretap1): making interface the new active one [ 301.840295][T12450] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 301.923275][T12464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1718'. [ 301.948828][T12467] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1719'. [ 302.063482][T12472] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1719'. [ 302.265598][T12484] xt_ipcomp: unknown flags 1D [ 302.408046][T12486] netlink: 'syz.4.1724': attribute type 58 has an invalid length. [ 302.461520][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 302.490761][T12486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1724'. [ 302.789137][T12506] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1729'. [ 302.847457][T12510] veth0_to_team: Caught tx_queue_len zero misconfig [ 302.937030][T12513] netlink: 'syz.0.1731': attribute type 4 has an invalid length. [ 303.052402][T12511] syzkaller0: entered promiscuous mode [ 303.058187][T12511] syzkaller0: entered allmulticast mode [ 303.083039][T12513] syz_tun: entered allmulticast mode [ 303.216771][T12531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1734'. [ 303.626117][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 304.743935][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 305.880793][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 305.950914][T12582] netlink: 'syz.5.1741': attribute type 2 has an invalid length. [ 306.222155][T12590] team0: Device gtp0 is up. Set it down before adding it as a team port [ 306.354543][T12593] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1747'. [ 306.388169][T12602] netlink: 'syz.5.1749': attribute type 1 has an invalid length. [ 306.399019][T12602] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1749'. [ 306.713260][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1753'. [ 306.876713][T12632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1752'. [ 306.916477][T12617] team0: No ports can be present during mode change [ 307.014457][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 307.107734][T12646] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 307.150208][T12645] netlink: 'syz.1.1760': attribute type 1 has an invalid length. [ 307.331958][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1760'. [ 307.362382][T12660] netlink: 'syz.2.1763': attribute type 1 has an invalid length. [ 307.406988][T12653] 8021q: adding VLAN 0 to HW filter on device bond11 [ 307.417473][T12653] bond10: (slave bond11): making interface the new active one [ 307.426941][T12653] bond10: (slave bond11): Enslaving as an active interface with an up link [ 307.448052][T12656] bond10: (slave gretap1): Enslaving as a backup interface with an up link [ 307.463340][T12659] 8021q: adding VLAN 0 to HW filter on device bond10 [ 307.859451][T12693] netlink: 'syz.5.1771': attribute type 1 has an invalid length. [ 307.914670][T12693] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1771'. [ 307.939415][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1771'. [ 308.039022][T12693] netlink: 'syz.5.1771': attribute type 2 has an invalid length. [ 308.069232][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 308.114538][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 308.131873][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 308.257692][T12711] batadv_slave_0: Caught tx_queue_len zero misconfig [ 308.287039][T12715] netlink: 'syz.4.1777': attribute type 3 has an invalid length. [ 308.576406][T12733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1783'. [ 309.270225][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 310.414105][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 310.757073][T12728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.829227][T12745] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 310.864000][T12745] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 310.890958][T12745] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 311.148721][T12761] ipvlan0: entered allmulticast mode [ 311.187681][T12761] syz_tun: entered allmulticast mode [ 311.322099][T12776] netlink: 'syz.5.1793': attribute type 24 has an invalid length. [ 311.522831][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 311.743844][T12790] bond7: option resend_igmp: invalid value (32767) [ 311.786041][T12790] bond7: option resend_igmp: allowed values 0 - 255 [ 311.835781][T12790] bond7 (unregistering): Released all slaves [ 312.145209][T12812] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20002 [ 312.675681][T12834] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 312.801575][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 313.096068][T12858] __nla_validate_parse: 1 callbacks suppressed [ 313.096089][T12858] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1817'. [ 313.133289][T12858] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1817'. [ 313.228488][T12864] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 313.287469][T12864] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 313.336493][T12864] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 313.353732][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 313.362463][T12870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1821'. [ 313.365758][T12872] netlink: 'syz.4.1823': attribute type 18 has an invalid length. [ 313.416172][T12864] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 313.423947][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1823'. [ 313.461057][ T9512] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.508490][ T9512] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.532488][ T9512] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.608072][ T9512] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.641946][ T9512] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.778693][ T9521] smbdirect: ib_dev[syz2] removed [ 313.811480][T12889] Cannot find add_set index 4 as target [ 313.961223][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 314.414892][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 314.621587][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1842'. [ 314.630859][T12928] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1840'. [ 314.643344][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1842'. [ 314.661165][T12928] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1840'. [ 314.691320][T12928] netlink: 'syz.4.1840': attribute type 5 has an invalid length. [ 314.733534][T12928] netlink: 'syz.4.1840': attribute type 6 has an invalid length. [ 315.080259][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 315.505590][T12964] netlink: 'syz.0.1850': attribute type 1 has an invalid length. [ 315.816829][T12973] bridge0: port 3(macsec1) entered blocking state [ 315.843308][T12973] bridge0: port 3(macsec1) entered disabled state [ 315.873034][T12973] macsec1: entered allmulticast mode [ 315.906705][T12973] bridge0: entered allmulticast mode [ 315.945896][T12973] macsec1: left allmulticast mode [ 315.964363][T12973] bridge0: left allmulticast mode [ 315.997118][T12980] veth0_to_bridge: entered promiscuous mode [ 316.040378][T12978] veth0_to_bridge: left promiscuous mode [ 316.192437][T12989] netlink: 'syz.2.1859': attribute type 83 has an invalid length. [ 316.223563][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 316.449331][T13004] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 316.644706][T13020] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 317.135277][T13038] openvswitch: netlink: Message has -2 unknown bytes. [ 317.157301][T13038] openvswitch: netlink: Message has -2 unknown bytes. [ 317.351443][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 317.396325][T13039] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.403832][T13039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.403986][T13054] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.427843][T13057] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 317.606960][T13060] bond0: (slave bond_slave_0): Releasing backup interface [ 317.621711][T13060] bond_slave_0 (unregistering): left promiscuous mode [ 317.664356][T13060] bond6: (slave veth0_to_bond): Releasing active interface [ 317.688384][T13060] veth0_to_bond (unregistering): left promiscuous mode [ 317.704265][T13060] veth0_to_bond (unregistering): left allmulticast mode [ 317.818359][T13070] bond12 (unregistering): Released all slaves [ 317.962340][T13079] netlink: 'syz.2.1884': attribute type 1 has an invalid length. [ 318.216800][T13086] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 318.229835][T13090] netlink: 'syz.5.1888': attribute type 30 has an invalid length. [ 318.290275][T13086] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.412559][T13095] bond7: (slave veth3): Enslaving as an active interface with a down link [ 318.464505][T13086] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 318.472480][T13086] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 318.507116][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 318.538676][T13099] geneve2: entered promiscuous mode [ 318.548697][T13099] geneve2: entered allmulticast mode [ 318.978009][T13121] SET target dimension over the limit! [ 319.006198][T13121] netlink: 'syz.2.1896': attribute type 1 has an invalid length. [ 319.079497][T13125] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 319.088006][T13125] __nla_validate_parse: 18 callbacks suppressed [ 319.088025][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1898'. [ 319.111710][T13127] netlink: 'syz.0.1897': attribute type 29 has an invalid length. [ 319.159895][T13128] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 319.186345][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1898'. [ 319.211590][T13127] netlink: 'syz.0.1897': attribute type 29 has an invalid length. [ 319.398645][T13140] xt_hashlimit: size too large, truncated to 1048576 [ 319.406784][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 319.433978][T13138] netem: incorrect gi model size [ 319.454872][T13138] netem: change failed [ 319.625308][T13149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1904'. [ 319.646073][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 319.842653][T13153] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 319.891850][T13157] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1908'. [ 319.957674][T13161] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.965571][T13161] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.035544][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'. [ 320.345673][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 320.459710][T13184] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1917'. [ 320.523388][T13178] bond12: Unable to set down delay as MII monitoring is disabled [ 320.577299][T13178] bond12 (unregistering): Released all slaves [ 320.597466][T13184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1917'. [ 320.775163][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 320.922214][T13206] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001 [ 321.190570][T13220] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 321.222912][T13220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.403180][T13222] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 321.435240][T13222] bond5 (unregistering): Released all slaves [ 321.473534][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 321.900391][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 322.125357][T13262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.353381][T13278] netlink: 'syz.1.1941': attribute type 4 has an invalid length. [ 322.402611][T13278] netlink: 'syz.1.1941': attribute type 4 has an invalid length. [ 322.410701][T13281] x_tables: duplicate underflow at hook 1 [ 322.777170][T13306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.033049][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 323.171388][T13326] netlink: 'syz.4.1954': attribute type 1 has an invalid length. [ 323.305550][T13334] netlink: 'syz.5.1957': attribute type 1 has an invalid length. [ 323.525362][T13334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.597758][T13330] tipc: Enabling of bearer rejected, failed to enable media [ 323.864997][T13355] vlan0: entered allmulticast mode [ 323.879595][T13355] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 324.183739][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 324.321745][T13381] netlink: 'syz.5.1967': attribute type 9 has an invalid length. [ 324.565474][T13392] netlink: 'syz.5.1971': attribute type 1 has an invalid length. [ 324.579446][T13392] netlink: 'syz.5.1971': attribute type 11 has an invalid length. [ 324.591886][T13392] __nla_validate_parse: 10 callbacks suppressed [ 324.591905][T13392] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1971'. [ 324.735228][T13398] netlink: 'syz.5.1971': attribute type 1 has an invalid length. [ 324.788281][T13368] vcan1: entered promiscuous mode [ 324.795660][T13368] vcan1: entered allmulticast mode [ 324.885925][T13404] bond0: (slave team0): Releasing backup interface [ 324.930601][T13404] team0: Cannot enslave team device to itself [ 325.146361][T13412] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1977'. [ 325.238015][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'. [ 325.312341][T13415] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 325.329571][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 325.357527][T13415] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 325.390779][ T4949] Bluetooth: hci2: command 0x0406 tx timeout [ 325.400253][T13415] gretap2: entered promiscuous mode [ 325.411473][T13415] gretap2: entered allmulticast mode [ 325.709936][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 325.963206][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'. [ 325.995610][T13452] macvlan0: entered promiscuous mode [ 326.015251][T13451] Set syz0 is full, maxelem 0 reached [ 326.030629][T13452] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1988'. [ 326.129268][T13457] openvswitch: netlink: IP tunnel dst address not specified [ 326.444814][T13469] ipt_ECN: cannot use operation on non-tcp rule [ 326.451893][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 326.660996][ T4949] Bluetooth: hci5: command tx timeout [ 326.776309][T13484] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1995'. [ 326.888687][T13489] syzkaller1: entered promiscuous mode [ 326.911605][T13489] syzkaller1: entered allmulticast mode [ 327.036528][T13496] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1998'. [ 327.064785][T13497] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1999'. [ 327.582533][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 327.667508][T13523] netlink: 'syz.5.2006': attribute type 10 has an invalid length. [ 327.702674][T13523] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2006'. [ 327.767515][T13528] netlink: 'syz.0.2008': attribute type 2 has an invalid length. [ 328.332293][T13540] openvswitch: netlink: Multiple metadata blocks provided [ 328.333797][T13541] openvswitch: netlink: Multiple metadata blocks provided [ 328.414788][T13540] mac80211_hwsim hwsim24 ÿ: renamed from wlan1 (while UP) [ 328.506815][T13545] netlink: 'syz.4.2014': attribute type 10 has an invalid length. [ 328.609058][T13545] team0 (unregistering): Port device team_slave_0 removed [ 328.631370][T13545] team0 (unregistering): Port device team_slave_1 removed [ 328.700830][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 329.104608][T13563] netlink: 'syz.5.2021': attribute type 10 has an invalid length. [ 329.129265][T13563] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.158035][T13563] bond0: (slave team0): Enslaving as an active interface with an up link [ 329.277980][T13561] bond8: entered allmulticast mode [ 329.423067][T13566] veth5: entered allmulticast mode [ 329.461730][T13566] bond8: (slave veth5): Enslaving as an active interface with an up link [ 329.512262][T13561] bond8 (unregistering): (slave veth5): Releasing backup interface [ 329.564291][T13561] bond8 (unregistering): Released all slaves [ 329.699887][T13587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.769296][T13590] __nla_validate_parse: 3 callbacks suppressed [ 329.769316][T13590] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2028'. [ 329.831803][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 330.034461][T13602] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 330.150504][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 330.152717][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'. [ 330.173634][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2031'. [ 330.247649][T13610] bond8: entered promiscuous mode [ 330.267825][T13610] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.295455][T13619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2034'. [ 330.432974][T13610] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.445962][T13610] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 330.482456][T13610] bond8: (slave sit1): Error -95 calling set_mac_address [ 330.541967][T13622] tipc: Enabling of bearer rejected, failed to enable media [ 330.796010][T13641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.804875][T13641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.819932][T13641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.834351][T13641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.915316][T13648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.970697][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 331.512669][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2054'. [ 331.709109][T13691] xt_ecn: cannot match TCP bits for non-tcp packets [ 331.908784][T13697] netlink: 'syz.2.2062': attribute type 2 has an invalid length. [ 332.011334][T13705] veth1_macvtap: left promiscuous mode [ 332.072214][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'. [ 332.090968][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 332.117416][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2064'. [ 332.559410][T13739] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2072'. [ 332.749930][T13752] xt_TCPMSS: Only works on TCP SYN packets [ 333.123452][T13768] netlink: 'syz.2.2078': attribute type 10 has an invalid length. [ 333.231963][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 333.278740][T13768] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 334.146836][T13823] x_tables: duplicate entry at hook 3 [ 334.349504][T13833] netlink: 'syz.4.2095': attribute type 1 has an invalid length. [ 334.380444][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 335.480811][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 336.291412][T13833] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 336.590226][ T9528] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 337.177853][T13881] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2110'. [ 337.293487][T13881] veth3: entered allmulticast mode [ 337.329973][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'. [ 337.381552][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'. [ 337.413548][T13852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2101'. [ 337.556138][T13900] netlink: 'syz.2.2115': attribute type 10 has an invalid length. [ 337.753727][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 338.118622][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 338.166782][T13927] xt_l2tp: v2 doesn't support IP mode [ 338.202733][T13930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.210094][T13930] IPv6: NLM_F_CREATE should be set when creating new route [ 338.217367][T13930] IPv6: NLM_F_CREATE should be set when creating new route [ 338.224744][T13930] IPv6: NLM_F_CREATE should be set when creating new route [ 338.248563][T13930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.272662][T13935] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 338.444720][T13941] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2127'. [ 338.911685][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 340.031144][ T9528] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 340.980774][ T36] wlan1: Trigger new scan to find an IBSS to join [ 341.140738][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 342.240423][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 343.351184][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 344.020392][ T9531] wlan1: Trigger new scan to find an IBSS to join [ 344.451273][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 345.551246][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 346.660587][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 346.980279][ T358] wlan1: Trigger new scan to find an IBSS to join [ 347.760398][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 347.860838][ T358] wlan1: Creating new IBSS network, BSSID 3a:41:1d:71:1a:23 [ 348.860603][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 349.981234][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 351.080763][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 352.200590][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 353.310593][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 354.410477][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 355.530365][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 356.630325][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 357.740626][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 358.860316][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 359.960357][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 361.061747][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 362.160349][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 363.270540][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 363.662440][T13987] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2141'. [ 363.704153][T13992] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2140'. [ 363.994924][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'. [ 364.003612][T14013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2147'. [ 364.025156][T14013] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2147'. [ 364.173061][T14020] netlink: 'syz.4.2149': attribute type 10 has an invalid length. [ 364.185297][T14013] veth7: entered promiscuous mode [ 364.373316][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 364.389027][T14028] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2152'. [ 364.399052][T14028] tc_dump_action: action bad kind [ 364.545970][T14035] ip6gre1: entered allmulticast mode [ 364.776277][T14044] tap0: tun_chr_ioctl cmd 2148553947 [ 365.269398][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2161'. [ 365.297419][ T809] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 365.304621][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2161'. [ 365.372701][T14076] netlink: 'syz.4.2163': attribute type 1 has an invalid length. [ 365.420409][ T809] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 365.470520][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 365.495814][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 365.511447][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 365.535845][T14076] bond10: entered promiscuous mode [ 365.550677][T14076] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.657127][T14090] bond10: (slave bridge6): making interface the new active one [ 365.676400][T14090] bridge6: entered promiscuous mode [ 365.692993][T14090] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 366.047275][T14111] netlink: 'syz.4.2171': attribute type 7 has an invalid length. [ 366.080195][T14111] netlink: 'syz.4.2171': attribute type 8 has an invalid length. [ 366.167365][T14111] gretap0: entered promiscuous mode [ 366.201436][T14111] gretap0: left promiscuous mode [ 366.269773][T14120] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 366.353922][T14120] v: renamed from ip6tnl0 (while UP) [ 366.457358][T14128] netlink: 'syz.0.2179': attribute type 12 has an invalid length. [ 366.482038][T14128] netlink: 'syz.0.2179': attribute type 29 has an invalid length. [ 366.638647][T14136] : renamed from gretap0 (while UP) [ 366.646278][T14143] netlink: 'syz.4.2183': attribute type 3 has an invalid length. [ 366.653754][ T9531] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 366.947936][T14154] netlink: 'syz.5.2186': attribute type 1 has an invalid length. [ 367.109560][T14154] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.121633][T14170] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 367.247659][T14181] syzkaller0: entered promiscuous mode [ 367.260382][T14181] syzkaller0: entered allmulticast mode [ 367.466732][T14189] netlink: 'syz.2.2195': attribute type 4 has an invalid length. [ 367.629340][T14196] bond0: (slave team0): Releasing backup interface [ 367.674844][T14196] bridge_slave_0: left allmulticast mode [ 367.690800][T14196] bridge_slave_0: left promiscuous mode [ 367.704311][T14196] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.746382][T14196] bridge_slave_1: left allmulticast mode [ 367.756568][T14196] bridge_slave_1: left promiscuous mode [ 367.778347][T14196] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.812081][T14196] bond0: (slave bond_slave_0): Releasing backup interface [ 367.842550][ T9528] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 367.861838][T14196] bond0: (slave bond_slave_1): Releasing backup interface [ 367.919319][T14196] team0: Port device team_slave_0 removed [ 367.956649][T14196] team0: Port device team_slave_1 removed [ 367.972014][T14196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.984176][T14196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.002013][T14196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.018979][T14196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.034824][T14196] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.280462][T14190] lo speed is unknown, defaulting to 1000 [ 368.428947][T14226] netlink: 'syz.4.2209': attribute type 2 has an invalid length. [ 368.661824][T14230] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 368.687796][T14230] bond5 (unregistering): Released all slaves [ 368.857180][T14238] syzkaller0: entered promiscuous mode [ 368.878650][T14238] syzkaller0: entered allmulticast mode [ 368.958507][T14238] __nla_validate_parse: 14 callbacks suppressed [ 368.958529][T14238] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2213'. [ 368.961876][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 368.983129][T14238] NCSI netlink: No device for ifindex 813332851 [ 368.999519][T14238] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 369.357825][T14259] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2219'. [ 369.421192][T14260] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2218'. [ 369.468898][T14264] validate_nla: 3 callbacks suppressed [ 369.468918][T14264] netlink: 'syz.2.2220': attribute type 61 has an invalid length. [ 369.510395][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 369.841173][T14281] netlink: 'syz.4.2227': attribute type 1 has an invalid length. [ 369.987266][T14281] bond12: entered promiscuous mode [ 370.007309][T14281] 8021q: adding VLAN 0 to HW filter on device bond12 [ 370.122599][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 370.226183][T14309] netlink: 'syz.0.2234': attribute type 1 has an invalid length. [ 370.279471][T14309] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 370.394446][T14323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2238'. [ 370.949103][T14354] netlink: 'syz.4.2248': attribute type 61 has an invalid length. [ 370.959004][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'. [ 370.995969][T14349] netlink: 'syz.2.2247': attribute type 16 has an invalid length. [ 371.006727][T14356] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 371.029158][T14349] netlink: 'syz.2.2247': attribute type 17 has an invalid length. [ 371.039557][T14356] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 371.088218][T14356] bond12: entered promiscuous mode [ 371.094694][T14356] 8021q: adding VLAN 0 to HW filter on device bond12 [ 371.119572][T14349] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 371.246521][T14359] netlink: 'syz.4.2250': attribute type 5 has an invalid length. [ 371.253016][T14362] x_tables: duplicate underflow at hook 2 [ 371.281739][T14362] netlink: 9800 bytes leftover after parsing attributes in process `syz.1.2251'. [ 371.291110][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 371.717908][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.735292][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.747076][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.276974][T14402] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2263'. [ 372.369886][T14409] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.2263'. [ 372.510816][T14413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.534217][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 372.566285][T14414] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2267'. [ 372.794688][T14424] syzkaller0: entered promiscuous mode [ 372.798554][T14422] block nbd3: server does not support multiple connections per device. [ 372.810827][T14424] syzkaller0: entered allmulticast mode [ 372.847198][T14422] block nbd3: shutting down sockets [ 372.900337][ T5648] Bluetooth: hci5: command 0x0405 tx timeout [ 372.963867][T14440] netlink: 'syz.0.2274': attribute type 1 has an invalid length. [ 373.059590][T14440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 373.193407][T14443] bond5: (slave veth9): Enslaving as an active interface with a down link [ 373.307851][T14444] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 373.321473][T14444] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 373.620404][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 373.672456][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 374.004313][T14431] lo speed is unknown, defaulting to 1000 [ 374.129205][T14482] __nla_validate_parse: 3 callbacks suppressed [ 374.129226][T14482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2285'. [ 374.165501][T14482] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2285'. [ 374.177034][T14484] bond9: entered promiscuous mode [ 374.184087][T14484] 8021q: adding VLAN 0 to HW filter on device bond9 [ 374.196355][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2287'. [ 374.205570][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2287'. [ 374.353789][T14492] bond9: (slave bridge4): making interface the new active one [ 374.366072][T14492] bridge4: entered promiscuous mode [ 374.373717][T14492] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 374.383236][T14491] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2288'. [ 374.536465][T14498] bridge_slave_0: default FDB implementation only supports local addresses [ 374.764941][T14512] validate_nla: 2 callbacks suppressed [ 374.764958][T14512] netlink: 'syz.0.2295': attribute type 13 has an invalid length. [ 374.800910][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 375.272724][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 375.286568][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 375.308088][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 375.365214][T14531] hsr_slave_1 (unregistering): left promiscuous mode [ 375.446456][T14547] erspan0: left promiscuous mode [ 375.496355][T14547] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 375.557543][ T5766] lo speed is unknown, defaulting to 1000 [ 375.604476][T14545] netlink: 'syz.2.2305': attribute type 10 has an invalid length. [ 375.931639][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 376.594941][T14601] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2320'. [ 376.737627][T14606] netlink: 'syz.1.2321': attribute type 1 has an invalid length. [ 376.774678][T14606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2321'. [ 377.070197][ T9518] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 377.464980][ T9521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.474615][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.485519][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.214938][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 378.333937][T14687] netlink: 'syz.2.2344': attribute type 1 has an invalid length. [ 378.389246][T14687] netlink: 'syz.2.2344': attribute type 10 has an invalid length. [ 378.787970][T14723] netlink: 'syz.5.2355': attribute type 3 has an invalid length. [ 378.809968][T14723] netlink: 'syz.5.2355': attribute type 1 has an invalid length. [ 378.873825][T14729] ksmbd: Unknown IPC event: 0, ignore. [ 378.964856][T14734] openvswitch: netlink: IP tunnel dst address not specified [ 379.221641][T14754] __nla_validate_parse: 13 callbacks suppressed [ 379.221665][T14754] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2365'. [ 379.297886][T14757] netlink: 'syz.1.2366': attribute type 3 has an invalid length. [ 379.331203][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 379.340928][T14760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.417797][T14760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.466285][T14769] Cannot find set identified by id 65534 to match [ 379.638233][T14774] netlink: 'syz.4.2372': attribute type 1 has an invalid length. [ 379.650815][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2372'. [ 379.667333][T14774] netlink: 'syz.4.2372': attribute type 1 has an invalid length. [ 379.695207][T14780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2375'. [ 379.713901][T14779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2375'. [ 379.714119][T14780] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 379.744333][T14783] sctp: [Deprecated]: syz.0.2376 (pid 14783) Use of int in max_burst socket option deprecated. [ 379.744333][T14783] Use struct sctp_assoc_value instead [ 379.749150][T14779] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 379.997659][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2380'. [ 380.024935][ T9512] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 380.031352][T14794] syzkaller0: entered promiscuous mode [ 380.060810][T14794] syzkaller0: entered allmulticast mode [ 380.144320][T14796] bridge6: port 1(veth5) entered blocking state [ 380.153289][T14796] bridge6: port 1(veth5) entered disabled state [ 380.172199][T14796] veth5: entered allmulticast mode [ 380.197067][T14796] veth5: entered promiscuous mode [ 380.296208][T14813] bridge6: port 2(veth0_to_bond) entered blocking state [ 380.328683][T14813] bridge6: port 2(veth0_to_bond) entered disabled state [ 380.357462][T14813] veth0_to_bond: entered allmulticast mode [ 380.391111][T14813] veth0_to_bond: entered promiscuous mode [ 380.429092][T14813] bridge6: port 2(veth0_to_bond) entered blocking state [ 380.436300][T14813] bridge6: port 2(veth0_to_bond) entered forwarding state [ 380.460877][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 380.487091][T14822] netem: change failed [ 380.587227][T14831] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2389'. [ 380.699446][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'. [ 381.014762][T14858] sctp: [Deprecated]: syz.4.2394 (pid 14858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.014762][T14858] Use struct sctp_sack_info instead [ 381.097239][T14858] sctp: [Deprecated]: syz.4.2394 (pid 14858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.097239][T14858] Use struct sctp_sack_info instead [ 381.113001][T14862] netlink: 'syz.5.2396': attribute type 21 has an invalid length. [ 381.143933][T14858] sctp: [Deprecated]: syz.4.2394 (pid 14858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.143933][T14858] Use struct sctp_sack_info instead [ 381.174790][T14858] sctp: [Deprecated]: syz.4.2394 (pid 14858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.174790][T14858] Use struct sctp_sack_info instead [ 381.277136][T14858] sctp: [Deprecated]: syz.4.2394 (pid 14858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.277136][T14858] Use struct sctp_sack_info instead [ 381.321154][T14858] sctp: [Deprecated]: syz.4.2394 (pid 14858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.321154][T14858] Use struct sctp_sack_info instead [ 381.346945][T14858] sctp: [Deprecated]: syz.4.2394 (pid 14858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.346945][T14858] Use struct sctp_sack_info instead [ 381.364244][T14858] sctp: [Deprecated]: syz.4.2394 (pid 14858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.364244][T14858] Use struct sctp_sack_info instead [ 381.390625][T14858] sctp: [Deprecated]: syz.4.2394 (pid 14858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.390625][T14858] Use struct sctp_sack_info instead [ 381.415790][T14862] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2396'. [ 381.429509][T14858] sctp: [Deprecated]: syz.4.2394 (pid 14858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.429509][T14858] Use struct sctp_sack_info instead [ 381.651565][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 381.707884][T14888] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2402'. [ 382.096527][T14906] macvtap0: entered allmulticast mode [ 382.108735][T14906] veth0_macvtap: entered allmulticast mode [ 382.146990][T14914] netlink: 294 bytes leftover after parsing attributes in process `syz.1.2409'. [ 382.174002][T14914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.206772][T14914] netlink: 'syz.1.2409': attribute type 12 has an invalid length. [ 382.235135][T14915] pim6reg: entered allmulticast mode [ 382.248208][T14919] netlink: 'syz.5.2411': attribute type 22 has an invalid length. [ 382.280478][T14919] netlink: 'syz.5.2411': attribute type 22 has an invalid length. [ 382.348225][T14922] netlink: 'syz.0.2413': attribute type 11 has an invalid length. [ 382.577420][T14931] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 382.603276][T14931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.771349][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 382.839533][T14945] netlink: 'syz.2.2421': attribute type 21 has an invalid length. [ 382.961680][T14952] netlink: 'syz.4.2422': attribute type 4 has an invalid length. [ 383.220733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.230551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.241018][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.251390][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.385900][T14963] 8021q: adding VLAN 0 to HW filter on device bond13 [ 383.422895][T14968] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 383.890654][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 384.432014][ T5633] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 384.443645][ T5633] CPU: 0 UID: 0 PID: 5633 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 384.443671][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 384.443682][ T5633] Call Trace: [ 384.443690][ T5633] [ 384.443699][ T5633] dump_stack_lvl+0xe8/0x150 [ 384.443728][ T5633] dump_header+0xd3/0x4c0 [ 384.443759][ T5633] oom_kill_process+0x3ab/0x970 [ 384.443790][ T5633] out_of_memory+0x106c/0x1410 [ 384.443811][ T5633] ? try_charge_memcg+0xbb9/0x1570 [ 384.443842][ T5633] ? __pfx___mutex_lock+0x10/0x10 [ 384.443871][ T5633] ? __pfx_out_of_memory+0x10/0x10 [ 384.443891][ T5633] ? do_raw_spin_unlock+0xf5/0x210 [ 384.443928][ T5633] try_charge_memcg+0xc77/0x1570 [ 384.443977][ T5633] ? __pfx_try_charge_memcg+0x10/0x10 [ 384.444000][ T5633] ? percpu_ref_tryget+0x15/0x180 [ 384.444043][ T5633] ? charge_memcg+0x23/0x2b0 [ 384.444071][ T5633] charge_memcg+0x1a2/0x2b0 [ 384.444109][ T5633] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 384.444134][ T5633] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 384.444165][ T5633] __swap_cache_prepare_and_add+0xdc/0x700 [ 384.444194][ T5633] ? page_rmappable_folio+0x9a/0x170 [ 384.444223][ T5633] swap_cache_alloc_folio+0xf1/0x240 [ 384.444250][ T5633] swap_cluster_readahead+0x355/0x670 [ 384.444281][ T5633] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 384.444319][ T5633] ? get_vma_policy+0x27b/0x3c0 [ 384.444350][ T5633] swapin_readahead+0x196/0xc50 [ 384.444378][ T5633] ? swap_table_get+0x1e/0x260 [ 384.444406][ T5633] ? __pfx_swapin_readahead+0x10/0x10 [ 384.444429][ T5633] ? swap_table_get+0x1e/0x260 [ 384.444449][ T5633] ? swap_table_get+0x1e/0x260 [ 384.444466][ T5633] ? swap_table_get+0x1e/0x260 [ 384.444487][ T5633] ? swap_table_get+0x216/0x260 [ 384.444508][ T5633] ? swap_cache_get_folio+0x2e4/0x2f0 [ 384.444539][ T5633] do_swap_page+0x555/0x5120 [ 384.444568][ T5633] ? __pte_offset_map+0x29/0x240 [ 384.444597][ T5633] ? __pte_offset_map+0x29/0x240 [ 384.444628][ T5633] ? do_swap_page+0x128/0x5120 [ 384.444649][ T5633] ? __pfx_do_swap_page+0x10/0x10 [ 384.444667][ T5633] ? __pte_offset_map+0x1ae/0x240 [ 384.444694][ T5633] ? pte_offset_map_rw_nolock+0xea/0x160 [ 384.444720][ T5633] handle_mm_fault+0x1536/0x3170 [ 384.444758][ T5633] ? handle_mm_fault+0xf1/0x3170 [ 384.444791][ T5633] ? __pfx_handle_mm_fault+0x10/0x10 [ 384.444812][ T5633] ? lock_vma_under_rcu+0x45a/0x500 [ 384.444870][ T5633] do_user_addr_fault+0xa73/0x1340 [ 384.444901][ T5633] ? rcu_is_watching+0x15/0xb0 [ 384.444926][ T5633] ? trace_page_fault_user+0x84/0x1e0 [ 384.444950][ T5633] exc_page_fault+0x6a/0xc0 [ 384.444974][ T5633] asm_exc_page_fault+0x26/0x30 [ 384.444994][ T5633] RIP: 0033:0x7fcca735d68e [ 384.445015][ T5633] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 384.445032][ T5633] RSP: 002b:00007fff09649348 EFLAGS: 00010246 [ 384.445050][ T5633] RAX: 0000000000000000 RBX: 000055557d7c4500 RCX: 00007fcca735d68e [ 384.445064][ T5633] RDX: 00007fff096493a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.445076][ T5633] RBP: 00007fff0964940c R08: 0000000000000000 R09: 0000000000000000 [ 384.445088][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 384.445116][ T5633] R13: 00000000000927c0 R14: 000000000005db4a R15: 00007fff09649460 [ 384.445152][ T5633] [ 384.445281][ T5633] memory: usage 307200kB, limit 307200kB, failcnt 580 [ 384.802131][ T5633] memory+swap: usage 296524kB, limit 9007199254740988kB, failcnt 0 [ 384.810211][ T5633] kmem: usage 295264kB, limit 9007199254740988kB, failcnt 0 [ 384.817520][ T5633] Memory cgroup stats for /syz0: [ 384.817944][ T5633] cache 0 [ 384.827907][ T5633] rss 0 [ 384.830850][ T5633] rss_huge 0 [ 384.834073][ T5633] shmem 0 [ 384.837022][ T5633] mapped_file 0 [ 384.840753][ T5633] dirty 0 [ 384.843731][ T5633] writeback 0 [ 384.847034][ T5633] workingset_refault_anon 0 [ 384.851892][ T5633] workingset_refault_file 0 [ 384.856416][ T5633] swap 249856 [ 384.859716][ T5633] swapcached 249856 [ 384.866059][ T5633] pgpgin 33927 [ 384.869463][ T5633] pgpgout 33927 [ 384.873041][ T5633] pgfault 83820 [ 384.876524][ T5633] pgmajfault 3 [ 384.879914][ T5633] inactive_anon 0 [ 384.884018][ T5633] active_anon 0 [ 384.887526][ T5633] inactive_file 0 [ 384.891575][ T5633] active_file 0 [ 384.895088][ T5633] unevictable 0 [ 384.898564][ T5633] hierarchical_memory_limit 314572800 [ 384.904996][ T5633] hierarchical_memsw_limit 9223372036854771712 [ 384.914566][ T5633] total_cache 0 [ 384.918153][ T5633] total_rss 0 [ 384.923123][ T5633] total_rss_huge 0 [ 384.926890][ T5633] total_shmem 0 [ 384.930725][ T5633] total_mapped_file 0 [ 384.934761][ T5633] total_dirty 0 [ 384.938231][ T5633] total_writeback 0 [ 384.942778][ T5633] total_workingset_refault_anon 0 [ 384.947843][ T5633] total_workingset_refault_file 0 [ 384.953740][ T5633] total_swap 249856 [ 384.957601][ T5633] total_swapcached 249856 [ 384.963991][ T5633] total_pgpgin 33927 [ 384.967940][ T5633] total_pgpgout 33927 [ 384.972595][ T5633] total_pgfault 83820 [ 384.976616][ T5633] total_pgmajfault 3 [ 384.982325][ T5633] total_inactive_anon 0 [ 384.986547][ T5633] total_active_anon 0 [ 384.990920][ T5633] total_inactive_file 0 [ 384.995114][ T5633] total_active_file 0 [ 384.999113][ T5633] total_unevictable 0 [ 385.004148][ T5633] anon_cost 0 [ 385.007771][ T5633] file_cost 0 [ 385.011867][ T5633] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2424,pid=14953,uid=0 [ 385.031724][ T5633] Memory cgroup out of memory: Killed process 14953 (syz.0.2424) total-vm:176432kB, anon-rss:1240kB, file-rss:31576kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 385.052376][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 385.065579][T14958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.396792][T14995] __nla_validate_parse: 12 callbacks suppressed [ 385.396813][T14995] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2434'. [ 385.435091][T14989] syzkaller1: entered promiscuous mode [ 385.458417][T14995] netlink: Unknown conntrack attr (type=2304, max=9) [ 385.461745][T14989] syzkaller1: entered allmulticast mode [ 385.516458][T14999] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 385.869452][T15010] netlink: 'syz.5.2438': attribute type 83 has an invalid length. [ 385.915590][T15010] netlink: 'syz.5.2438': attribute type 83 has an invalid length. [ 386.161505][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 386.693683][T15042] bond14: option resend_igmp: invalid value (32767) [ 386.717990][T15042] bond14: option resend_igmp: allowed values 0 - 255 [ 386.751721][T15042] bond14 (unregistering): Released all slaves [ 387.114802][T15065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.156943][T15066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.292489][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 387.489202][T15084] netlink: 'syz.4.2460': attribute type 1 has an invalid length. [ 387.696560][T15103] netlink: 'syz.5.2465': attribute type 2 has an invalid length. [ 387.707561][T15103] netlink: 'syz.5.2465': attribute type 2 has an invalid length. [ 387.758543][T15084] bond13: entered promiscuous mode [ 387.809381][T15084] 8021q: adding VLAN 0 to HW filter on device bond13 [ 387.828231][T15114] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2466'. [ 388.013940][T15100] bond13: (slave bridge7): making interface the new active one [ 388.061301][T15100] bridge7: entered promiscuous mode [ 388.113311][T15100] bridge7: left promiscuous mode [ 388.433706][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 388.594392][T15143] openvswitch: netlink: Flow key attribute not present in set flow. [ 388.899234][T15166] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2478'. [ 388.922278][T15166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2478'. [ 389.516429][T15181] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 389.565546][T15186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2484'. [ 389.580834][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 389.819222][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2485'. [ 389.946467][T15198] x_tables: unsorted entry at hook 1 [ 389.955043][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 390.149795][T15209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2489'. [ 390.289728][T15215] x_tables: duplicate underflow at hook 4 [ 390.397985][T15219] netlink: 'syz.5.2492': attribute type 1 has an invalid length. [ 390.684808][T15233] netlink: 'syz.5.2497': attribute type 1 has an invalid length. [ 390.693045][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 390.701857][T15233] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2497'. [ 391.025318][T15237] 8021q: adding VLAN 0 to HW filter on device bond14 [ 391.165945][T15248] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.2500'. [ 391.192403][T15248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2500'. [ 391.238673][T15248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2500'. [ 391.323169][T15258] netlink: 'syz.5.2502': attribute type 1 has an invalid length. [ 391.347016][T15258] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2502'. [ 391.365605][T15263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2504'. [ 391.498832][T15275] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 391.564445][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'. [ 391.757835][T15284] vlan2: entered allmulticast mode [ 391.801894][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 391.941620][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2513'. [ 392.317096][T15318] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2517'. [ 392.364105][T15321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2516'. [ 392.415290][T15324] netlink: 'syz.2.2518': attribute type 7 has an invalid length. [ 392.525190][T15321] veth11: entered promiscuous mode [ 392.572629][T15330] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 392.822109][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.847474][T15344] netlink: 'syz.0.2524': attribute type 1 has an invalid length. [ 392.922371][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 393.005478][T15352] ip6t_srh: unknown srh invflags 4000 [ 393.145447][T15364] netlink: 'syz.1.2528': attribute type 32 has an invalid length. [ 393.302991][T15364] bond15: option coupled_control: invalid value (192) [ 393.312579][T15364] bond15 (unregistering): Released all slaves [ 393.634468][T15385] netlink: 'syz.0.2533': attribute type 18 has an invalid length. [ 393.660397][T15385] netlink: 'syz.0.2533': attribute type 18 has an invalid length. [ 394.041756][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 395.062739][ T358] wlan1: Trigger new scan to find an IBSS to join [ 395.190215][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 396.310358][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 396.791184][T15401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.808699][T15463] __nla_validate_parse: 17 callbacks suppressed [ 396.808719][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2551'. [ 397.053896][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'. [ 397.079687][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2554'. [ 397.117356][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2554'. [ 397.434732][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 397.734786][T15518] netlink: 'syz.0.2563': attribute type 1 has an invalid length. [ 397.749688][T15518] netlink: 'syz.0.2563': attribute type 2 has an invalid length. [ 398.021887][ T358] wlan1: Trigger new scan to find an IBSS to join [ 398.485865][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'. [ 398.568405][T15564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.572930][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 398.577643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.768595][T15574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.812354][ T9] lo speed is unknown, defaulting to 1000 [ 398.816937][T15578] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2576'. [ 398.827515][ T9] syú2: Port: 1 Link DOWN [ 399.159521][T15602] v: renamed from nlmon0 [ 399.702052][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 400.840625][ T9518] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 401.060541][ T9521] wlan1: Trigger new scan to find an IBSS to join [ 401.504680][T15564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.942314][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 401.993494][ T9521] wlan1: Creating new IBSS network, BSSID a2:21:a8:de:42:77 [ 402.291839][T15664] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2596'. [ 402.354610][T15666] dvmrp0: entered allmulticast mode [ 402.497755][T15673] netlink: 1024 bytes leftover after parsing attributes in process `syz.1.2598'. [ 402.705252][T15686] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2600'. [ 403.081173][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 403.108795][T15704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2607'. [ 403.181302][T15707] netlink: 'syz.0.2609': attribute type 26 has an invalid length. [ 403.209029][T15708] netlink: 'syz.0.2609': attribute type 26 has an invalid length. [ 403.244618][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 403.257062][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'. [ 403.278773][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 403.300660][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2611'. [ 403.304316][T15707] netlink: 'syz.0.2609': attribute type 26 has an invalid length. [ 403.346975][T15708] netlink: 'syz.0.2609': attribute type 26 has an invalid length. [ 403.395570][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 403.420215][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 404.138553][T15761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.157084][T15759] syzkaller1: entered promiscuous mode [ 404.178822][T15759] syzkaller1: entered allmulticast mode [ 404.231806][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 404.246266][T15759] batman_adv: batadv0: Adding interface: dummy0 [ 404.253015][T15759] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.279974][T15759] batman_adv: batadv0: Interface activated: dummy0 [ 404.368421][T15763] batadv0: mtu less than device minimum [ 404.377649][T15763] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.392080][T15763] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.403298][T15763] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.414851][T15763] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.426711][T15763] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.438140][T15763] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.449847][T15763] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.461909][T15763] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.473923][T15763] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.664697][T15777] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.672704][T15777] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.764420][T15780] syz_tun: entered allmulticast mode [ 404.822149][T15781] pim6reg: entered allmulticast mode [ 404.986182][T15786] syz_tun (unregistering): left allmulticast mode [ 405.372143][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 405.788764][T15845] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 405.963461][T15853] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 405.995041][T15853] bond10: (slave lo): Enslaving as an active interface with an up link [ 406.167005][T15862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.474759][T15890] netlink: 'syz.2.2658': attribute type 11 has an invalid length. [ 406.510273][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 406.657326][T15900] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 407.337689][T15929] netlink: 'syz.5.2670': attribute type 1 has an invalid length. [ 407.351732][T15929] __nla_validate_parse: 15 callbacks suppressed [ 407.351751][T15929] netlink: 16179 bytes leftover after parsing attributes in process `syz.5.2670'. [ 407.630331][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 407.679136][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2674'. [ 407.696525][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2674'. [ 407.739286][T15946] wireguard: wg0: Could not create IPv4 socket [ 407.950856][T15941] syzkaller0: entered promiscuous mode [ 407.956517][T15941] syzkaller0: entered allmulticast mode [ 408.171171][T15967] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2680'. [ 408.755728][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 409.861070][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 410.466440][T15959] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2679'. [ 410.477449][T15967] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 410.667894][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 410.736427][T15999] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2684'. [ 410.781006][T16000] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2684'. [ 410.964903][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 411.263642][T16023] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2695'. [ 411.386807][ T9521] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 411.435182][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2699'. [ 411.465336][T16032] netlink: 'syz.4.2698': attribute type 5 has an invalid length. [ 411.486620][T16033] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 411.524870][T16032] net_ratelimit: 15 callbacks suppressed [ 411.524891][T16032] openvswitch: netlink: IPv4 tun info is not correct [ 411.677234][T16044] netlink: 'syz.2.2701': attribute type 1 has an invalid length. [ 411.757495][T16044] 8021q: adding VLAN 0 to HW filter on device bond11 [ 411.813084][T16054] team0: Port device team_slave_0 removed [ 411.846471][T16054] bond11: (slave team_slave_0): Enslaving as a backup interface with an up link [ 412.133996][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 412.551667][T16083] syzkaller1: entered promiscuous mode [ 412.561689][T16083] syzkaller1: entered allmulticast mode [ 412.572139][T16086] __nla_validate_parse: 6 callbacks suppressed [ 412.572158][T16086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2714'. [ 412.745241][T16088] xt_hashlimit: size too large, truncated to 1048576 [ 412.764391][T16090] netlink: 'syz.0.2716': attribute type 83 has an invalid length. [ 412.848158][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'. [ 412.852008][T16046] infiniband syz2: set down [ 412.862983][T16046] infiniband syz2: added ipvlan0 [ 412.878966][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2717'. [ 412.889016][T16046] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 412.911468][T16046] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 412.970309][T16046] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 413.046180][T16046] RDS/IB: syz2: added [ 413.075065][T16046] smc: adding ib device syz2 with port count 1 [ 413.080540][T16104] netlink: 'syz.2.2719': attribute type 1 has an invalid length. [ 413.083126][T16046] smc: ib device syz2 port 1 has no pnetid [ 413.281197][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 413.485919][T16117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2722'. [ 413.535222][T16124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.981220][T16145] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2729'. [ 414.311710][T16160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2731'. [ 414.391514][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 415.520737][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 416.640426][ T9525] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 416.719772][T16130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.760980][T16190] netlink: 'syz.5.2733': attribute type 2 has an invalid length. [ 416.785179][T16190] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2733'. [ 417.024344][T16201] ip6erspan1: entered allmulticast mode [ 417.182209][T16212] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2740'. [ 417.337583][T16219] netlink: 22 bytes leftover after parsing attributes in process `syz.5.2742'. [ 417.554939][T16231] netlink: 'syz.2.2747': attribute type 142 has an invalid length. [ 417.563173][T16234] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2748'. [ 417.653091][T16234] netlink: 83 bytes leftover after parsing attributes in process `syz.5.2748'. [ 417.741284][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 417.876656][T16256] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 417.916115][T16256] SET target dimension over the limit! [ 417.969414][T16256] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2754'. [ 417.994485][T16256] openvswitch: netlink: Flow key attr not present in new flow. [ 418.012448][T16256] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2754'. [ 418.514097][T16261] lo speed is unknown, defaulting to 1000 [ 418.758109][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2769'. [ 418.760620][T16297] xt_hashlimit: size too large, truncated to 1048576 [ 418.802951][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2768'. [ 418.813521][T16299] ipvlan0: entered allmulticast mode [ 418.825070][T16303] netlink: 'syz.1.2770': attribute type 1 has an invalid length. [ 418.842351][T16302] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2769'. [ 418.914598][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 418.988174][T16303] bond16: entered promiscuous mode [ 418.994089][T16303] 8021q: adding VLAN 0 to HW filter on device bond16 [ 419.016271][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2768'. [ 419.072358][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2772'. [ 419.111135][T16310] netlink: 'syz.1.2770': attribute type 1 has an invalid length. [ 419.151552][T16310] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 419.506013][T16335] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2778'. [ 419.516269][T16335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2778'. [ 419.525921][T16335] netlink: 'syz.2.2778': attribute type 3 has an invalid length. [ 419.534613][T16335] netlink: 'syz.2.2778': attribute type 2 has an invalid length. [ 419.713160][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 420.042135][ T9521] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 420.854212][T16384] syzkaller0: entered promiscuous mode [ 420.863715][T16384] syzkaller0: entered allmulticast mode [ 421.204074][ T9518] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 421.266599][T16395] netlink: 'syz.4.2791': attribute type 10 has an invalid length. [ 421.302345][T16399] netlink: 'syz.4.2791': attribute type 10 has an invalid length. [ 421.369314][T16406] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.376745][T16406] bridge0: port 2(bridge_slave_1) entered listening state [ 421.384469][T16406] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.391732][T16406] bridge0: port 1(bridge_slave_0) entered listening state [ 421.490822][T16406] bridge0: entered promiscuous mode [ 421.505400][T16406] bridge0: entered allmulticast mode [ 421.678700][T16417] 8021q: adding VLAN 0 to HW filter on device bond12 [ 421.696959][T16417] bridge0: port 3(bond12) entered blocking state [ 421.735822][T16417] bridge0: port 3(bond12) entered disabled state [ 421.763680][T16417] bond12: entered allmulticast mode [ 421.771771][T16431] netlink: 'syz.1.2799': attribute type 1 has an invalid length. [ 421.788165][T16417] bond12: entered promiscuous mode [ 421.872519][T16431] 8021q: adding VLAN 0 to HW filter on device bond18 [ 421.928486][T16430] bond18: (slave geneve4): making interface the new active one [ 421.947976][T16430] bond18: (slave geneve4): Enslaving as an active interface with an up link [ 422.324373][T16460] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.332254][ T36] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 422.334363][T16460] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.491737][T16466] syzkaller0: entered promiscuous mode [ 422.503949][T16472] netlink: 'syz.1.2811': attribute type 178 has an invalid length. [ 422.513337][T16466] syzkaller0: entered allmulticast mode [ 422.528595][T16466] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 423.185199][T16509] __nla_validate_parse: 9 callbacks suppressed [ 423.185219][T16509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'. [ 423.500866][ T9518] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 423.755651][T16537] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.2827'. [ 423.773956][T16544] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 424.016942][T16551] xt_hashlimit: size too large, truncated to 1048576 [ 424.078728][T16559] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2832'. [ 424.091136][T16556] erspan0: entered allmulticast mode [ 424.134107][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.332852][T16570] netlink: 'syz.4.2834': attribute type 3 has an invalid length. [ 424.347161][T16571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.416401][T16572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.630664][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 424.945647][ T5648] Bluetooth: hci5: link tx timeout [ 424.952036][ T5648] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 424.963663][ T4949] Bluetooth: hci5: link tx timeout [ 424.971503][ T4949] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 425.148270][T16610] netlink: set zone limit has 4 unknown bytes [ 425.373771][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2850'. [ 425.401371][T16631] sctp: [Deprecated]: syz.2.2853 (pid 16631) Use of int in max_burst socket option deprecated. [ 425.401371][T16631] Use struct sctp_assoc_value instead [ 425.760619][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 425.762522][T16649] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2858'. [ 425.844994][T16649] vlan1: entered allmulticast mode [ 425.858570][T16649] gretap0: entered allmulticast mode [ 425.879363][T16660] netlink: 'syz.1.2858': attribute type 39 has an invalid length. [ 425.881127][T16656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2861'. [ 425.909075][T16661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2861'. [ 425.985187][T16659] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2862'. [ 426.172977][T16671] netlink: 'syz.5.2866': attribute type 1 has an invalid length. [ 426.201405][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2866'. [ 426.446739][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2870'. [ 426.458711][T16685] openvswitch: netlink: Message has 8 unknown bytes. [ 426.476447][T16685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.533841][T16683] veth1_macvtap: left promiscuous mode [ 426.697925][T16704] netlink: 'syz.1.2875': attribute type 1 has an invalid length. [ 426.894829][ T9533] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 427.062357][ T5648] Bluetooth: hci5: command 0x0405 tx timeout [ 427.186215][T16692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.193755][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.213688][T16692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.233626][T16730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.267690][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.285943][T16730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.297906][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.317791][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.392544][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.447160][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.475349][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.506907][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.561760][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.591438][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.624212][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.659092][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.690844][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.718447][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.746769][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.776578][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.801705][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.844441][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.884371][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.898323][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.916575][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.934331][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.949636][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.981830][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.000870][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.015989][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.029881][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.049069][T16692] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 428.078881][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.091863][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.134431][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.149657][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.163941][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.176311][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.188065][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.202167][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.225876][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.247883][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.261308][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.286340][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.308132][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.322986][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.336019][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.347841][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.366604][T16763] __nla_validate_parse: 2 callbacks suppressed [ 428.366626][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 428.379728][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.384449][T16763] openvswitch: netlink: Flow actions attr not present in new flow. [ 428.414781][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.443049][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.482634][T16732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.565213][T16770] netlink: 'syz.2.2897': attribute type 1 has an invalid length. [ 428.735717][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2897'. [ 428.845859][T16774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2897'. [ 428.865215][T16770] veth9: entered promiscuous mode [ 428.882129][T16774] 8021q: adding VLAN 0 to HW filter on device bond13 [ 428.941518][T16789] netlink: 'syz.5.2901': attribute type 4 has an invalid length. [ 429.121291][T16794] sctp: [Deprecated]: syz.1.2905 (pid 16794) Use of int in max_burst socket option deprecated. [ 429.121291][T16794] Use struct sctp_assoc_value instead [ 429.191715][ T83] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 429.227824][T16799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2905'. [ 429.245769][T16800] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2908'. [ 429.420736][ T4949] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 429.439516][ T4949] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 429.450856][ T4949] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 429.460904][ T4949] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 429.468942][T16811] netlink: 'syz.5.2910': attribute type 55 has an invalid length. [ 429.479868][ T4949] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 429.570629][T16811] netlink: 'syz.5.2910': attribute type 10 has an invalid length. [ 429.627277][T16811] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2910'. [ 429.891091][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'. [ 430.119631][T16827] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 430.289274][T16836] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2914'. [ 430.327836][T16836] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2914'. [ 430.342124][ T9532] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 430.363896][T16838] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2914'. [ 430.664900][T16856] netlink: 'syz.1.2917': attribute type 1 has an invalid length. [ 430.843023][T16856] bond19: entered promiscuous mode [ 430.863859][T16856] 8021q: adding VLAN 0 to HW filter on device bond19 [ 431.054788][T16873] netlink: 'syz.5.2920': attribute type 2 has an invalid length. [ 431.103727][T16873] netlink: 'syz.5.2920': attribute type 2 has an invalid length. [ 431.138931][T16873] netlink: 'syz.5.2920': attribute type 1 has an invalid length. [ 431.168512][T16873] netlink: 'syz.5.2920': attribute type 1 has an invalid length. [ 431.205883][T16873] netlink: 'syz.5.2920': attribute type 1 has an invalid length. [ 431.461723][ T9533] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 431.540750][ T4949] Bluetooth: hci6: command tx timeout [ 431.562578][T16906] geneve3: entered promiscuous mode [ 431.593120][T16906] geneve3: entered allmulticast mode [ 431.616049][ T9533] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 431.664957][ T9533] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 431.698954][ T9533] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 431.703339][T16807] lo speed is unknown, defaulting to 1000 [ 431.746478][ T9533] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 432.153630][T16932] vlan3: entered allmulticast mode [ 432.761172][ T9533] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 433.162376][T16974] tipc: Enabled bearer , priority 0 [ 433.189565][T16974] syzkaller0: entered allmulticast mode [ 433.242389][T16977] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 433.483395][T16974] tipc: Disabling bearer [ 433.536518][T16996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.592739][T17000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.624080][ T4949] Bluetooth: hci6: command tx timeout [ 433.894155][ T9533] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 433.903525][T17021] geneve1: entered promiscuous mode [ 434.069565][T17024] bond6: option fail_over_mac: invalid value (16) [ 434.087170][T17024] bond6 (unregistering): Released all slaves [ 434.182266][T17031] IPv6: sit1: Disabled Multicast RS [ 434.209770][T17031] sit1: entered allmulticast mode [ 434.405759][T16807] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.428135][T16807] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.437028][T16807] bridge_slave_0: entered allmulticast mode [ 434.446973][T16807] bridge_slave_0: entered promiscuous mode [ 434.459555][T17056] __nla_validate_parse: 6 callbacks suppressed [ 434.459576][T17056] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2953'. [ 434.492710][T16807] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.526617][T16807] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.534417][T16807] bridge_slave_1: entered allmulticast mode [ 434.543572][T16807] bridge_slave_1: entered promiscuous mode [ 434.566024][T17063] validate_nla: 2 callbacks suppressed [ 434.566043][T17063] netlink: 'syz.5.2953': attribute type 1 has an invalid length. [ 434.816059][T16807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.848218][T16807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.879316][T17077] netlink: 'syz.1.2958': attribute type 64 has an invalid length. [ 435.046836][T16807] team0: Port device team_slave_0 added [ 435.066066][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 435.115385][T16807] team0: Port device team_slave_1 added [ 435.139829][T17089] netlink: 'syz.0.2960': attribute type 11 has an invalid length. [ 435.192700][T17093] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2960'. [ 435.208117][T17093] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2960'. [ 435.230630][T17093] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2960'. [ 435.287911][T16807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.307636][T16807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.367743][T16807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.398322][T17100] xt_hashlimit: size too large, truncated to 1048576 [ 435.417046][T16807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.439825][T16807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.454081][T17105] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 435.518804][T16807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.702301][ T4949] Bluetooth: hci6: command tx timeout [ 435.856595][T16807] hsr_slave_0: entered promiscuous mode [ 435.875085][T16807] hsr_slave_1: entered promiscuous mode [ 435.890199][T16807] debugfs: 'hsr0' already exists in 'hsr' [ 435.903242][T16807] Cannot create hsr debugfs directory [ 436.243173][ T9533] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 436.604169][T17154] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2973'. [ 436.951832][T16807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.983661][T16807] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.282970][T16807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.312944][T16807] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.352048][ T9533] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 437.381667][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2978'. [ 437.392494][T17183] netlink: 50 bytes leftover after parsing attributes in process `syz.5.2978'. [ 437.402919][T17183] netlink: 50 bytes leftover after parsing attributes in process `syz.5.2978'. [ 437.534995][T16807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.581212][T16807] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.632382][T17194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2980'. [ 437.655671][T17194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2980'. [ 437.760863][T16807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.771362][T16807] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.780632][ T4949] Bluetooth: hci6: command tx timeout [ 438.013951][T17224] tipc: Enabled bearer , priority 28 [ 438.067518][T17228] tipc: Enabling of bearer rejected, already enabled [ 438.471568][ T9532] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 438.488664][T17245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.567974][T16807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 438.597103][T16807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.653865][T16807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 438.717649][T16807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.753777][T16807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 438.777903][T16807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.785976][ T1028] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.797768][ T1028] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.821470][T16807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 438.832329][T16807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.839712][ T1028] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.848874][ T1028] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.035812][ T5766] tipc: Node number set to 2886997039 [ 439.152382][T16807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.157526][T17279] xt_hashlimit: size too large, truncated to 1048576 [ 439.285138][T16807] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.345089][T17287] IPVS: set_ctl: invalid protocol: 85 0.0.0.0:20004 [ 439.476050][T17283] syzkaller0: entered promiscuous mode [ 439.496669][T17283] syzkaller0: entered allmulticast mode [ 439.547967][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.555235][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.617770][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.625052][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.633346][ T9533] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 439.718609][T17309] netlink: 'syz.1.3005': attribute type 1 has an invalid length. [ 439.735886][T17309] __nla_validate_parse: 10 callbacks suppressed [ 439.735905][T17309] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3005'. [ 439.765356][T17309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3005'. [ 440.771163][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 441.897237][ T9532] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 442.653780][T17360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.694258][T17360] syzkaller0: entered promiscuous mode [ 442.707066][T17360] syzkaller0: entered allmulticast mode [ 442.774192][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3010'. [ 442.797185][T17375] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3010'. [ 442.815675][T17360] tipc: Enabled bearer , priority 0 [ 442.855941][T17359] tipc: Resetting bearer [ 442.943817][T17359] tipc: Disabling bearer [ 443.025224][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 443.053951][T17387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.383222][T16692] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 443.811449][T16807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.835622][T17418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3021'. [ 444.011524][T17418] ipvlan2: entered allmulticast mode [ 444.162057][ T358] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 444.318316][T17432] netlink: 'syz.2.3024': attribute type 1 has an invalid length. [ 444.354514][T17434] netlink: 'syz.5.3026': attribute type 1 has an invalid length. [ 444.376216][T17434] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3026'. [ 444.391528][T17437] macvlan0: entered promiscuous mode [ 444.448699][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3026'. [ 444.474809][T17434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3026'. [ 444.715492][T16807] veth0_vlan: entered promiscuous mode [ 444.750824][T16807] veth1_vlan: entered promiscuous mode [ 444.889147][T16807] veth0_macvtap: entered promiscuous mode [ 444.932822][T16807] veth1_macvtap: entered promiscuous mode [ 445.047288][T16807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.091551][T16807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.113545][ T83] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.126326][ T83] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.146814][ T83] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.169912][ T83] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.171281][T17469] netlink: 'syz.1.3031': attribute type 1 has an invalid length. [ 445.286001][T17474] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.3033'. [ 445.300813][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 445.326958][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 445.398953][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.424501][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.508998][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.517787][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.633458][T17485] syzkaller1: entered promiscuous mode [ 445.654430][T17485] syzkaller1: entered allmulticast mode [ 446.069703][T17500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.093398][ T5648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.113213][ T5648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.122702][ T5648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.139595][ T5648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.152138][ T5648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.192029][T17500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.289266][T17502] erspan0: entered promiscuous mode [ 446.323978][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 446.463710][ T83] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 446.595551][T17491] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 446.610332][T17491] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 446.924065][T17535] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3044'. [ 446.960474][T17535] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 447.084061][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3047'. [ 447.169277][T17535] syzkaller0: entered promiscuous mode [ 447.175250][T17535] syzkaller0: entered allmulticast mode [ 447.593122][ T83] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 448.276320][ T5648] Bluetooth: hci1: command tx timeout [ 448.740560][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 449.713786][T17520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.846278][ T1028] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 450.155501][T17498] lo speed is unknown, defaulting to 1000 [ 450.340635][ T5648] Bluetooth: hci1: command tx timeout [ 450.353717][T17564] macvtap0: entered allmulticast mode [ 450.375553][T17564] veth0_macvtap: entered allmulticast mode [ 450.446247][T17566] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3054'. [ 450.490577][T17566] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3054'. [ 450.520235][T17566] netlink: 'syz.1.3054': attribute type 5 has an invalid length. [ 450.544527][T17566] netlink: 'syz.1.3054': attribute type 6 has an invalid length. [ 450.588614][T17566] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3054'. [ 450.792045][T17578] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3058'. [ 450.964282][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 451.044660][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3063'. [ 451.094562][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3064'. [ 451.634946][T17616] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 451.700966][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 451.711303][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 451.833291][T17631] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3072'. [ 451.935720][T17636] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3074'. [ 452.052771][T17636] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.060226][T17636] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.084796][ T83] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 452.125401][T17498] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.134750][T17651] xt_TCPMSS: Only works on TCP SYN packets [ 452.148425][T17498] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.172141][T17498] bridge_slave_0: entered allmulticast mode [ 452.198637][T17498] bridge_slave_0: entered promiscuous mode [ 452.228071][T17631] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3072'. [ 452.229218][T17498] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.280437][T17498] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.304676][T17498] bridge_slave_1: entered allmulticast mode [ 452.325149][T17498] bridge_slave_1: entered promiscuous mode [ 452.336702][T17658] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 452.422167][ T5648] Bluetooth: hci1: command tx timeout [ 452.509252][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3080'. [ 452.563759][T17664] veth0_macvtap: left allmulticast mode [ 452.581841][T17664] veth0_macvtap: left promiscuous mode [ 452.709922][T17498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.752962][T17498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.843034][T17673] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 452.951310][T17498] team0: Port device team_slave_0 added [ 452.975500][T17498] team0: Port device team_slave_1 added [ 453.106851][T17498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.138680][T17498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.176700][T17498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.222958][T17498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.240855][T17498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.242491][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 453.270403][T17498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.487745][T17498] hsr_slave_0: entered promiscuous mode [ 453.528270][T17498] hsr_slave_1: entered promiscuous mode [ 453.556113][T17498] debugfs: 'hsr0' already exists in 'hsr' [ 453.576185][T17498] Cannot create hsr debugfs directory [ 454.254998][T17498] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.267747][T17498] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.441803][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 454.481146][T17498] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.500639][ T5648] Bluetooth: hci1: command tx timeout [ 454.513928][T17498] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.706442][T17498] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.732644][T17498] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.926097][T17498] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.952168][T17498] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.247568][T17781] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 455.478898][T17786] tipc: Disabling bearer [ 455.494171][T17788] __nla_validate_parse: 8 callbacks suppressed [ 455.494191][T17788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3116'. [ 455.579455][T17786] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 455.593784][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 455.976000][T17805] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 455.995517][T17805] bond4: (slave lo): Enslaving as an active interface with an up link [ 456.014919][T17805] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 456.047433][T17498] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 456.059708][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.178724][T17813] tipc: Enabled bearer , priority 0 [ 456.211329][T17498] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 456.291412][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.415096][T17806] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 456.468266][T17813] tipc: Resetting bearer [ 456.478002][T17498] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 456.689873][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.702179][T17814] syzkaller0: entered promiscuous mode [ 456.710393][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 456.721024][T17814] syzkaller0: entered allmulticast mode [ 456.739166][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3129'. [ 456.763039][T17804] tipc: Resetting bearer [ 456.794988][T17804] tipc: Disabling bearer [ 456.832971][T17841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3129'. [ 456.842831][T17498] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 456.854905][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.859712][T17844] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 456.881064][T17836] netlink: 'syz.4.3128': attribute type 1 has an invalid length. [ 456.890654][T17841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3129'. [ 457.061973][T17852] bond5: entered allmulticast mode [ 457.099527][T17860] netlink: 'syz.1.3133': attribute type 29 has an invalid length. [ 457.114156][T17860] netlink: 548 bytes leftover after parsing attributes in process `syz.1.3133'. [ 457.157531][T17862] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 457.169791][T17862] bond0: (slave lo): Error: Device can not be enslaved while up [ 457.366222][T17866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3136'. [ 457.399658][T17498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.416665][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3136'. [ 457.486195][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3139'. [ 457.525616][T17498] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.578899][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.586168][ T9532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.599149][T17883] netlink: 'syz.0.3140': attribute type 1 has an invalid length. [ 457.655631][T17883] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.3140'. [ 457.670454][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.673498][T17887] netlink: 'syz.4.3142': attribute type 1 has an invalid length. [ 457.677688][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.825690][T17887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.843849][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 457.899790][T17894] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 457.919319][T17894] bond1: (slave batadv1): making interface the new active one [ 457.934643][T17894] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 458.138963][T17896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3143'. [ 458.365884][T17913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.782786][T17937] syzkaller1: entered promiscuous mode [ 458.792337][T17938] netlink: 'syz.0.3154': attribute type 2 has an invalid length. [ 458.810245][T17937] syzkaller1: entered allmulticast mode [ 458.815950][T17938] netlink: 'syz.0.3154': attribute type 8 has an invalid length. [ 458.905157][T17937] netlink: 'syz.4.3155': attribute type 12 has an invalid length. [ 458.928328][T17937] netlink: 'syz.4.3155': attribute type 29 has an invalid length. [ 458.949843][T17937] netlink: 'syz.4.3155': attribute type 1 has an invalid length. [ 458.958904][T17937] netlink: 'syz.4.3155': attribute type 2 has an invalid length. [ 458.971180][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 459.137827][T17956] 8021q: adding VLAN 0 to HW filter on device bond6 [ 459.256048][T17957] bond6: (slave geneve4): making interface the new active one [ 459.277463][T17957] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 459.362526][T17498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.483214][T17971] bond0: (slave gre0): refused to change device type [ 459.627255][T17498] veth0_vlan: entered promiscuous mode [ 459.684810][T17498] veth1_vlan: entered promiscuous mode [ 459.911413][T17498] veth0_macvtap: entered promiscuous mode [ 459.957699][T17498] veth1_macvtap: entered promiscuous mode [ 460.052537][T17498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.092603][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 460.133484][T17498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.205615][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.218764][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.234038][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.252954][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.626170][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.656839][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.815075][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.831096][T18028] tipc: Started in network mode [ 460.836172][T18028] tipc: Node identity b6abed7bcd96, cluster identity 4711 [ 460.837565][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.847170][T18028] tipc: Enabled bearer , priority 0 [ 460.861643][T18028] syzkaller0: entered promiscuous mode [ 460.867205][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803e4f9400: rx timeout, send abort [ 460.877121][T18028] syzkaller0: entered allmulticast mode [ 460.891018][T18028] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 460.949267][T18028] tipc: Resetting bearer [ 460.968446][T18027] tipc: Resetting bearer [ 461.005783][T18027] tipc: Disabling bearer [ 461.197451][T18034] __nla_validate_parse: 5 callbacks suppressed [ 461.197471][T18034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3178'. [ 461.227179][ T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 461.250419][T18036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3179'. [ 461.364165][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803e4f9000: rx timeout, send abort [ 461.373146][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803e4f9400: abort rx timeout. Force session deactivation [ 461.465997][T18043] netlink: 640 bytes leftover after parsing attributes in process `syz.5.3183'. [ 461.478969][T18043] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 461.618280][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3184'. [ 461.679616][T18051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3184'. [ 461.737862][T18054] netlink: 'syz.5.3188': attribute type 11 has an invalid length. [ 461.809115][T18054] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3188'. [ 461.840228][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3188'. [ 461.872756][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803e4f9000: abort rx timeout. Force session deactivation [ 462.055137][T18066] openvswitch: netlink: Key type 30 is not supported [ 462.151707][ T4949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.169665][ T4949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.179889][ T4949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.191208][ T4949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.207260][ T4949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.288583][T18077] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.3192'. [ 462.374304][T18081] xt_nfacct: accounting object `syz1' does not exist [ 462.375342][ T9512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 462.632209][T18086] bridge8: entered allmulticast mode [ 462.652760][T18095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3195'. [ 462.869518][T18101] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3199'. [ 463.099446][T18117] validate_nla: 4 callbacks suppressed [ 463.099863][T18117] netlink: 'syz.5.3198': attribute type 1 has an invalid length. [ 463.131635][T18117] netlink: 'syz.5.3198': attribute type 11 has an invalid length. [ 463.346165][ T9532] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.401633][ T9532] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.544244][ T83] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 463.625707][ T9532] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.642456][ T9532] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.904843][T18145] netlink: 'syz.5.3207': attribute type 1 has an invalid length. [ 463.934487][ T9532] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.955359][T18145] netlink: 'syz.5.3207': attribute type 7 has an invalid length. [ 463.971042][ T9532] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.993270][T18145] netlink: 'syz.5.3207': attribute type 8 has an invalid length. [ 464.033295][T18145] NCSI netlink: No device for ifindex 65584 [ 464.105836][T18148] netlink: 'syz.1.3208': attribute type 62 has an invalid length. [ 464.264507][ T4949] Bluetooth: hci0: command tx timeout [ 464.649640][T18069] lo speed is unknown, defaulting to 1000 [ 464.663914][ T13] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 464.692136][T18163] erspan0: entered allmulticast mode [ 464.952748][T18166] syzkaller1: entered promiscuous mode [ 464.989461][T18166] syzkaller1: entered allmulticast mode [ 465.514835][ T9512] smc: removing ib device syz2 [ 465.636485][ T1028] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.645965][ T1028] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.715279][T17472] ================================================================== [ 465.723416][T17472] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 465.732222][T17472] Read of size 8 at addr ffff88804e8162f0 by task kworker/0:1/17472 [ 465.740228][T17472] [ 465.742586][T17472] CPU: 0 UID: 0 PID: 17472 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 465.742609][T17472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.742621][T17472] Workqueue: events smc_ib_port_event_work [ 465.742652][T17472] Call Trace: [ 465.742661][T17472] [ 465.742669][T17472] dump_stack_lvl+0xe8/0x150 [ 465.742692][T17472] print_address_description+0x55/0x1e0 [ 465.742711][T17472] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 465.742733][T17472] print_report+0x58/0x70 [ 465.742750][T17472] kasan_report+0x117/0x150 [ 465.742769][T17472] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 465.742793][T17472] __ethtool_get_link_ksettings+0x5e/0x170 [ 465.742816][T17472] ib_get_eth_speed+0x180/0x7f0 [ 465.742842][T17472] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 465.742870][T17472] ? do_raw_spin_unlock+0xf5/0x210 [ 465.742901][T17472] rxe_query_port+0x93/0x3d0 [ 465.742927][T17472] ib_query_port+0x170/0x830 [ 465.742955][T17472] smc_ib_port_event_work+0x15a/0x940 [ 465.742994][T17472] ? process_scheduled_works+0xa70/0x1860 [ 465.743013][T17472] ? process_scheduled_works+0xa70/0x1860 [ 465.743032][T17472] process_scheduled_works+0xb5d/0x1860 [ 465.743065][T17472] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.743088][T17472] ? assign_work+0x3d5/0x5e0 [ 465.743106][T17472] worker_thread+0xa53/0xfc0 [ 465.743131][T17472] kthread+0x389/0x470 [ 465.743150][T17472] ? __pfx_worker_thread+0x10/0x10 [ 465.743163][T17472] ? __pfx_kthread+0x10/0x10 [ 465.743180][T17472] ret_from_fork+0x514/0xb70 [ 465.743196][T17472] ? __pfx_ret_from_fork+0x10/0x10 [ 465.743210][T17472] ? __switch_to+0xc79/0x1410 [ 465.743231][T17472] ? __pfx_kthread+0x10/0x10 [ 465.743249][T17472] ret_from_fork_asm+0x1a/0x30 [ 465.743271][T17472] [ 465.743276][T17472] [ 465.916329][T17472] Allocated by task 11215: [ 465.920750][T17472] kasan_save_track+0x3e/0x80 [ 465.925442][T17472] __kasan_kmalloc+0x93/0xb0 [ 465.930035][T17472] __kvmalloc_node_noprof+0x528/0x8a0 [ 465.935415][T17472] alloc_netdev_mqs+0xa8/0x1210 [ 465.940266][T17472] rtnl_create_link+0x31f/0xd70 [ 465.945120][T17472] rtnl_newlink_create+0x277/0xb70 [ 465.950244][T17472] rtnl_newlink+0x166a/0x1bb0 [ 465.954942][T17472] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 465.959970][T17472] netlink_rcv_skb+0x232/0x4b0 [ 465.964752][T17472] netlink_unicast+0x75c/0x8e0 [ 465.969521][T17472] netlink_sendmsg+0x813/0xb40 [ 465.974290][T17472] __sys_sendto+0x672/0x710 [ 465.978808][T17472] __x64_sys_sendto+0xde/0x100 [ 465.983659][T17472] do_syscall_64+0x174/0x580 [ 465.988250][T17472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.994145][T17472] [ 465.996572][T17472] Freed by task 18185: [ 466.000636][T17472] kasan_save_track+0x3e/0x80 [ 466.005325][T17472] kasan_save_free_info+0x46/0x50 [ 466.010614][T17472] __kasan_slab_free+0x5c/0x80 [ 466.015389][T17472] kfree+0x1c5/0x640 [ 466.019284][T17472] device_release+0xc4/0x1f0 [ 466.023877][T17472] kobject_put+0x228/0x560 [ 466.028297][T17472] netdev_run_todo+0xc75/0xde0 [ 466.033060][T17472] rtnl_dellink+0x6a7/0x820 [ 466.037570][T17472] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 466.042512][T17472] netlink_rcv_skb+0x232/0x4b0 [ 466.047281][T17472] netlink_unicast+0x75c/0x8e0 [ 466.052056][T17472] netlink_sendmsg+0x813/0xb40 [ 466.056826][T17472] ____sys_sendmsg+0x972/0x9f0 [ 466.061594][T17472] ___sys_sendmsg+0x2a5/0x360 [ 466.066322][T17472] __x64_sys_sendmsg+0x1bd/0x2a0 [ 466.071271][T17472] do_syscall_64+0x174/0x580 [ 466.075889][T17472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.081834][T17472] [ 466.084217][T17472] The buggy address belongs to the object at ffff88804e816000 [ 466.084217][T17472] which belongs to the cache kmalloc-cg-4k of size 4096 [ 466.098570][T17472] The buggy address is located 752 bytes inside of [ 466.098570][T17472] freed 4096-byte region [ffff88804e816000, ffff88804e817000) [ 466.112499][T17472] [ 466.114828][T17472] The buggy address belongs to the physical page: [ 466.121238][T17472] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e810 [ 466.130013][T17472] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 466.138534][T17472] memcg:ffff88804e811011 [ 466.142777][T17472] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 466.150326][T17472] page_type: f5(slab) [ 466.154313][T17472] raw: 00fff00000000040 ffff88813fe33500 dead000000000100 dead000000000122 [ 466.162900][T17472] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff88804e811011 [ 466.171488][T17472] head: 00fff00000000040 ffff88813fe33500 dead000000000100 dead000000000122 [ 466.180160][T17472] head: 0000000000000000 0000200000040004 00000000f5000000 ffff88804e811011 [ 466.188831][T17472] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 466.197501][T17472] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 466.206164][T17472] page dumped because: kasan: bad access detected [ 466.212588][T17472] page_owner tracks the page as allocated [ 466.218306][T17472] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11218, tgid 11218 (udevd), ts 276533201843, free_ts 276511822266 [ 466.239403][T17472] post_alloc_hook+0x22d/0x280 [ 466.244190][T17472] get_page_from_freelist+0x2593/0x2610 [ 466.249747][T17472] __alloc_frozen_pages_noprof+0x18d/0x380 [ 466.255649][T17472] allocate_slab+0x77/0x660 [ 466.260156][T17472] refill_objects+0x339/0x3d0 [ 466.264833][T17472] __pcs_replace_empty_main+0x321/0x720 [ 466.270382][T17472] __kvmalloc_node_noprof+0x657/0x8a0 [ 466.275762][T17472] seq_read_iter+0x202/0xe10 [ 466.280354][T17472] vfs_read+0x582/0xa70 [ 466.284514][T17472] ksys_read+0x150/0x270 [ 466.288757][T17472] do_syscall_64+0x174/0x580 [ 466.293346][T17472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.299243][T17472] page last free pid 5631 tgid 5631 stack trace: [ 466.305564][T17472] __free_frozen_pages+0xc1c/0xd30 [ 466.310709][T17472] __slab_free+0x274/0x2c0 [ 466.315158][T17472] qlist_free_all+0x99/0x100 [ 466.319775][T17472] kasan_quarantine_reduce+0x148/0x160 [ 466.325248][T17472] __kasan_slab_alloc+0x22/0x80 [ 466.330123][T17472] __kmalloc_cache_node_noprof+0x391/0x6b0 [ 466.335939][T17472] __get_vm_area_node+0x13f/0x300 [ 466.340973][T17472] __vmalloc_node_range_noprof+0x36a/0x1750 [ 466.346871][T17472] vzalloc_noprof+0xb2/0xe0 [ 466.351380][T17472] __do_replace+0xb3/0x990 [ 466.355802][T17472] do_ipt_set_ctl+0xb45/0xe00 [ 466.360478][T17472] nf_setsockopt+0x26f/0x290 [ 466.365075][T17472] do_sock_setsockopt+0x17c/0x1b0 [ 466.370195][T17472] __x64_sys_setsockopt+0x13d/0x1b0 [ 466.375412][T17472] do_syscall_64+0x174/0x580 [ 466.380093][T17472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.385991][T17472] [ 466.388319][T17472] Memory state around the buggy address: [ 466.393947][T17472] ffff88804e816180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.402012][T17472] ffff88804e816200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.410071][T17472] >ffff88804e816280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.418130][T17472] ^ [ 466.425846][T17472] ffff88804e816300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.433910][T17472] ffff88804e816380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 466.441967][T17472] ================================================================== [ 466.457207][ T83] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 466.474618][ T4949] Bluetooth: hci0: command tx timeout [ 466.961244][T17472] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 466.968521][T17472] CPU: 0 UID: 0 PID: 17472 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 466.978012][T17472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.988101][T17472] Workqueue: events smc_ib_port_event_work [ 466.993962][T17472] Call Trace: [ 466.997266][T17472] [ 467.000215][T17472] vpanic+0x56c/0xa60 [ 467.004228][T17472] ? __pfx_vpanic+0x10/0x10 [ 467.008751][T17472] ? __pfx___schedule+0x10/0x10 [ 467.013643][T17472] panic+0xc5/0xd0 [ 467.017389][T17472] ? __pfx_panic+0x10/0x10 [ 467.021828][T17472] ? preempt_schedule_common+0x82/0xd0 [ 467.027317][T17472] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 467.033305][T17472] check_panic_on_warn+0x89/0xb0 [ 467.038256][T17472] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 467.044241][T17472] end_report+0x73/0x170 [ 467.048484][T17472] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 467.054461][T17472] kasan_report+0x128/0x150 [ 467.059014][T17472] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 467.065011][T17472] __ethtool_get_link_ksettings+0x5e/0x170 [ 467.070823][T17472] ib_get_eth_speed+0x180/0x7f0 [ 467.075682][T17472] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 467.081062][T17472] ? do_raw_spin_unlock+0xf5/0x210 [ 467.086187][T17472] rxe_query_port+0x93/0x3d0 [ 467.090787][T17472] ib_query_port+0x170/0x830 [ 467.095385][T17472] smc_ib_port_event_work+0x15a/0x940 [ 467.100765][T17472] ? process_scheduled_works+0xa70/0x1860 [ 467.106484][T17472] ? process_scheduled_works+0xa70/0x1860 [ 467.112215][T17472] process_scheduled_works+0xb5d/0x1860 [ 467.117769][T17472] ? __pfx_process_scheduled_works+0x10/0x10 [ 467.123749][T17472] ? assign_work+0x3d5/0x5e0 [ 467.128347][T17472] worker_thread+0xa53/0xfc0 [ 467.132950][T17472] kthread+0x389/0x470 [ 467.137026][T17472] ? __pfx_worker_thread+0x10/0x10 [ 467.142135][T17472] ? __pfx_kthread+0x10/0x10 [ 467.146727][T17472] ret_from_fork+0x514/0xb70 [ 467.151320][T17472] ? __pfx_ret_from_fork+0x10/0x10 [ 467.156431][T17472] ? __switch_to+0xc79/0x1410 [ 467.161110][T17472] ? __pfx_kthread+0x10/0x10 [ 467.165703][T17472] ret_from_fork_asm+0x1a/0x30 [ 467.170474][T17472] [ 467.173885][T17472] Kernel Offset: disabled [ 467.178208][T17472] Rebooting in 86400 seconds..