last executing test programs: 7.494625592s ago: executing program 2 (id=3671): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000040c0)={&(0x7f0000003f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x6, [@var={0x8, 0x0, 0x0, 0xe, 0x5}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x2, 0x9}, @restrict={0xb, 0x0, 0x0, 0xb, 0x4}, @union={0xd, 0x2, 0x0, 0x5, 0x1, 0x6, [{0x3, 0x3, 0x6}, {0x6, 0x1, 0x8}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x4c, 0x1}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x6a, 0x1}]}, {0x0, [0x30, 0x2e, 0x30, 0x61]}}, &(0x7f0000003fc0)=""/215, 0x8e, 0xd7, 0x1, 0x6}, 0x28) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x1, 0x0, 0x0, 0x11, 0x1}]}}, 0x0, 0x2a}, 0x28) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, &(0x7f0000000800)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r0}, 0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000540)) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket(0x8, 0xa, 0xfb) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000580)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000280)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6b}, 0x80, &(0x7f0000002940)=[{&(0x7f0000000300)="a3929855b6062750072f7bd63d9677fb8500cd6097c09b2297825fae6fb9aa8fe060efbe185efab2fb55d5f1c9844ff95037d428b3a33d533141ebf531e329dfb736ce342bc2258d9b2b934783b298b96d0aeff9db76943525cfe65aa90609edf147adb9fa98ee5c107ea13852a2cfcc6a76b13a6be74c", 0x77}, {&(0x7f0000000380)="1d7bf640b74667947e61f55583a4e5ba36add826053500236816cb1de3b507d47d71d3255d0d55883d2fd46d54683d98f7d949be7cdb4fcdd9451177a8c023fc59d78437ea42f3b16aa375d8c6435de17b0b1332184c9b9f47094282310e96cef692588a2d03cc7f5c5e0ea93791680cf8e67bb3ecf7e3b36d30583a42909fc7", 0x80}, {&(0x7f00000005c0)="b04352cb0ef5fba5a5cf28c11232a8949ce0eda76e91d2841ce71079950acb196406d8714957b54c2964efc008fb6c18f079af1a9a9158fd5c2a5737cf283297bd7d557100003dcc88e16707f4495400d16a9cef9725c7db4c664e79f05308e96c465b27ccc6094f9b9a0dedc5f78b12d9c18b05c09e6e89b16fe653f580a943d0da753b3b486db4c6ca49d800b85c31b2506b5563959636180841636f355766bd52c53bbbde2cf1b1767bdb33b02852fbdbd54bd93745643ad64a1e52ac02b56d1c61", 0xc3}, {&(0x7f00000006c0)="d16c690e8dd736ac7e59c4354666edf8ea26a645f9837b59d5f69642351fc148df640d5b11be3a833a4fa7b7f3aad75b0617867b3dd68db116278c2ffffe0cf163511958de0141ff3eb14165a126fef021975f6afb2977fa0d22e07a803ca548ff7fdadd2dab7e59db15d9f88f85747cff6ba1440c319e6d983f3ddb77930924b04d4e998d63a3bd6da38410b6bcb6bdf9af2ba662ad51b6e71ad6490e2e87eddbce029c6e7ef4c7919e6167cb5cf42d5ec9eabd31904c746645bc68a1ecf57fb7cd84636b3b28e64a", 0xc9}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="d18fc25f11a224bf9332a7c193533a8b027bf7281989381a2619d813e1a7608f6a0543011d1f44644da7f1400024fff630a6643776bcb225d3c379943d381afff1239c51189550c27bb6b24e89c22f8469db9c6d56d8c4ffc83d0e574b752d3f2757673cea626c14d620f105e73261767207babd65f05296551a054fbc4bbd0c3ea6499bea2903813dff9a36a37331fddf64b4d0f0ac2a2a1588a84ec97950762b61e73e324b1d4be319a1a4abc211eaa25115310f2a2c524d4d3c5755b8294df7aa160b746ed36f061cce1c4873c59553b489e3a0c7d3fa83f1c07071d018bfbbb152dbaf27456db995d66fdbeccc424ec15efb70ced2d8892d5b33f767234f4db344c8de65d5da9f653bea15909b147e993dde2e8ff2beb9d27d571c176be373c584cfb9e27d54e5141a9fb63c1e96910e351a1893a8f4a79e984227909695330a91e7b736ce4cd5384649a0bb5a8507dc25ec72310d421b5e0aae70867ceb2b54d2cdf59001e61aec8cfb9c72d60f4b20c7c1baab668ffd3a195f6532e11457b6848b10cf41d7854aa097e6e23818d0eae656b9cd746d49fd1cfc9008e8bd250a45fb28b9c5c86896b18ef68895cc04c8b58f283a7c675ba19f73615221072f138764800c563f0d545aba59d07a3612ef38e87fe0d0827ff1fb9ae5d793a59fa13f8beb7b9b59f645a1e28c6cc36932bdea57b326ae40522c9c3a2b5c94b5fb41eb2eb8ee49360cfd124964df4cdcbd9efd0aa3455b4ab44f1f78e0533bd6ddd23f8ec75e48d26376ac9a99c15b51553a0331606056d96334c5a518c1d65dca2e090a335539a4912de523dbe7b75a3ab856bb2bc151a538e7ae001a8cf72c15ca3b378f96f1a175c21f9d01ab117e67227cec572dab27fff2ff6ea3fc0141158e21e5e1ff10b337ef7a1a83652912babbedfb48c2f5159bffdfdecf01e12a3c6d3bffeb0a8fef23fc4ba5bebf8c5199c2789bd4edb88e0677edfc0323c7bd236b05a0f2944e53874ca786a5c2c8930ee9d0ec54d3a3ab5913a3160617dcb8dc5c8a231283610d811a279f0e16d5720a54722f3815a5b0e19f936a5bdce2eecb1afc1da3d0729259f3d047fc3d4636071172fa58e4419784485567028e2c4486d4aa727876b56267836c68eca6e98e8b67b6e0559b59cbc424e61e6ab2801702a815b258a6ce0f6e3aa3a192e504251f292a79d8052ec2d2ec61dd8afe36040e7e813521009bf00a74d2c390b6a176c552a86ac68154ab73f31a3bb56d8e8444ebf136ced482903c1991b5abc192924f4ba8397889f4b752cf31a2ab19fa5c1d4ba3a532160fcb4ee1487f992987e9076159ae30f94dab4d2daabb2b3aabb7a66c906d2cd5d3d37a9372896ed93313ddeb2cc04c58244c8ea1ab0cb987d61f4a9375e1bc96ab29f6faaa8af93f2fada3c3b243f086f0ab0a9d16b8a7f7d4fb7d4f509ae8fede0d46922d8af3f1a9e6b781a925572038cd33f86631991d44764a8e75f307ae234eebde03ae377dc43e33bebd2a5248f83553631e513f7f4c892fcaf3a15bf0f44f106506738a2d1bb3d5edffc9d907e6203b0b75cffd269aff660a57e268223c3ac0e536c5bcd7dbf4a30b88247a7c4b4f3f2aecb317cc8c7e4805e06fc80e54b721208db3fd10bee3be481c529725aee6c501bfaa77821f5cc15855dc8fb12e85e537f30d89627434147407ce6683bb47b3fce2630c91559cb34298e844219ac26e6dcaac663cb812da2358e89bd7fdd3c67a0216866f1b49a2fed10dbf5c0c5b3b09bc2f71e29a90db378fbda4b1ac4628d5d8798cdb6a6b1adec29e4d7f7514a75543d47734486dbdf5eb2488a18de484348e31adbbaecd51bd219bbaa573c01adb7f0bf462b153601b7ac9c7aa5a7d618ff509c51436a19bbde1cfadb355794f7b022c6815f156dda2f92bb601a1d6eea4d061506c1ce7cdd20aa29a4b9940130c53710d445da110d905b0c6a9bac083154d3954e91b61c84e7d019b2fdfb3d2ac93d859005a17e5ffe5360a21da18dc083ef7657e28c18bd4fa74f965341d2069a2518f7ba73e85ebd22ee2bd74017246157d0cc06782b396a928cf0173c6bb85c0721aad071bef5cac5e6999cd0eb588a97f19f5c1fdfdcb5927bd1e6839ed582fadd719026a944b384997b3135e2b6dab68496b3eb7dc7eddc1d4b37dfa28715572a313c471cc738df3979b2bc34152116e0e22ebefd94d6317f95b750778f7befd0ae1ce8bb87e7d6df4def20261c6e73893ca82fbe7d5fc365f72d350770c1aee49f5c2d9644d01d1569e5e60176533aa233d106ea62d3ce22a950ee8691c2ec452f953d36877f762c3d218cd397a3eec8f52baa73086cd0d5feaf8a59e87c485b718284f208578cf4993643216f0fed358a68a8ae2d8a04126ff71ea7ee27cc8258131feae8b9dd37ce086702995399f782a7a0d49ddcd3a511ef734e6a90cd255e7b40a8e3cba24a51b51b3f1a839d83fa62b5021cfcc756dbe51ef2e433ca690d8d880451a1ef04c6c042d3bac02a630f775c3c2ea27c7fbc539f8961e7a35cabda0532be44d43458ffb30f60ad56103f9b078b3655cd115325d99310cff78abc735c5123236ffeff72f3b827b0d446d262a708a8a8c3cca00392d0b1ef5581a2d5b5d337793a1e80bb8fc265085a6c9b360ddb827ec4f51ccb206b55a39abde6caacd639152c484b77a931cf84ddb7f01c6a5918913b107379233a8b886324e41a51ac2aa5094b7b9675a3594908999edbac30c015526839f0db3ae191d67e849fc672cdc045742c8d5608e4f43cc354168ffd0b82e371f1520997c7c0746e3d5cc8be74e8d94e40bdf7b4933e260bb70487c580b3d555484ce2360848193d999be114f0706d79747d72df76d3aa224b9996454408f175580892596ddfe9221d735fbaf9518098470c6ab3fab9c86f5324054e9d40c1d44b856b6b6b77def0f0a159fd560c4c66ae2411322da8c186d6dc433916b59f31d57311c93b128e55d6f90bebcc2d323f0dd5f659ab6863fc459e438dc103867546606e06e7bc229ba8e242d51451a83ea7d8ff459c6c948cec95c841bc6a94c20fabff28bdaf558bc4e8c7f230ef70790f939f4fa8ff019fdd03d8df0bfe1b0068b0adf664f82da7e5cc61f110dd3abc5e2ff2418e2c341a4f8b8a29569bf2fec51b03e7cbc1496c68915d077c71af10a38e25a14ba6997989e7cfc12b45bed7eddb17e020eb89979e4c06802d1db87e9b8b7e5145e57d9396324a1eaf0482cd60932560f7435602356b747eff2140bf8dbf1b3bacf7d76bd9ce57ed97cd069287ca4ac544b7ef16eaa3dce90a4f8b239956c485ff08fbc963a5a366fa1d63184bcd16f565e801cf145ed0a4db05ba55f22856cc8965858dcd33353a8e38acfe929d6f58315ec51fc65ad101c29537df74f97fdeb43ddc5226b06d892ad162fb64716c100583e740f038f6eb652c698434f35416d991f627ee7bf1709b04bc108ca274412f0e80b46582e70048360cabbbf88302fecf54c8ddf397e46fd5c257777e9b57f528da1ae4fc61c34e72e43e766e5cd36ca9894978c2ea65a8a7922289c6b8b129aedb7d83eb83fa7624813a6e637e6129398528733a7cc6a57f75f27f66c66fe31c5402336ca517def478bf4ac69c0a553406ba18c5687001d2a332019756e2fc216614c8a28cccd6710b47507f7eee037ab3a62b62796dacefa4c3707b9cccde0836855544caa3d75786d785ce9c9dc9100a5d68aa9424adcc7b126e9481b4ac7297a3012cfe2e8c1ed0f3fb0d515a11f9ce2833db997e4294798364e064db46832eccf370bdb3856738111f75b389b8c71abe2d43621d91045e3f0746bc9f3967e7cd20ea57bdaddd33c9f672fc2fb982fad652b910a813deab430c2a0f6acf215b0dab20c8ac3608146a2076b427c489a5b6b0ad3e2e3de334e3da65970a82c2255e2240c52b55292091c6191651a03b3ea8816cca8fe88124f9fb1c59e35946d16ae4d52b8da3e03bc41261b8548c1736a39dbd960ba3c1e34dca5ebe67db9e906f4b65dcd4f1b0e346b037389299859aeffc8863a8129548f922685fafc98d1241e221f2967b655e305efedce2b25babdcc7af6379a86a24f76aab2f83d12f124fb8dd299355ee7c08d179c03ebc73de7171591a85fb82b158ce45d29611f110a8cc00c4a3bdddc802ea396663e4424c8272a6d7a7c0e88f83de267b1971ca962f1cfdf84d135b5a50675e034604bef5b4f05614e5f65adbd65755cb2d7e7ea2c12123bad34d5bbe204c7bf8b398ab7371be08a9f38da8f388eb9c86b9ababdaa5ffa788a34a977769e73e8c709c78ea13ca23c150201139ad343a6a356030ffa43b786d02b5e52ce0f27e2f58b2be0faf6e7cb98b637637a342adc9ad8d56321b900f70d47e880059bc17322b0154e8193235db858c93e37d1d78e8624165032edb8082e9dca3cfb75c90c978d94ea5858c5ef89815f157cd97255ecfff065ddf396cb7327e11197fbe06b574c7e7e92b05215d3b65f9108d90285ccc5022989713fe25f0f706da01d83d33d610c5973c0b356e618352a1387e86f6347c1ac791d74d4abf0f57c015427ab444398c17fed9b12296099e6db8e4e912afb8ac51f6e1ee84a0f4c74ed6d3a8bfdd273c96d69cca920d67b6df2300b1573f36b76876f26bcc3f5ac5ba02fe9f164f80b669f7f961b529a7a8d67eb0a3ddb5e884360afe21e16f3d63db2010306a13c85b17425d4c1080e16138390af1d8fe7a0dbbbac02728ff8377e0682a06d58e27231ce2c8ce3daec7b37beacf5321b4ed36b31a69f75120aead35b98623da989d800d948b96006b7af1adcac3a68422cfaab98a6aa7ecac8841c57a3f5f89dad735a9fb8ccf785b04616ee3de6c6e911358472490e1f65efc594fc0b4c8cae651fb12952f87a638864ffffc7a27ed0d633317796e0ddbe9d6e19300375b69a88017f78f413ab6e329244f3ac0620e95734bcbd0cc0354787485973f32b527df23971dc3500c747023a6200d1ca64ec1de37d562e7616e5feb3fb9c95c77153b717349eb1dca139d27ea49983979b8980a16e586f5e1aed88501f93ddcb3e9e274ee4936611307d7ba093a3285eb5dd8826b1c3876081f5ddc9f9184a4f3b56199ed8f69b37a1aa69886f0dbf4b0c08139f1c91c9a417188363f1d63295bd3ce3dd74a7d3e2b578141e84a79f3f0693ac99d24390cf8a8c650a7e29038e30f36d0df5a280724335012bff50827f8fd0731194139fb0da3e6e314cb1b0b00877ff5fb71896a6c6772f2efd65d39ad2b0c5b6519ee15a26182ec55f75c9d33a0b65c08c8a3d856a5e1db2ebf3a35861b58beede720fbf87d250442a40d3175e6c67d5c76d0f2294eba71950327678f8177f1bc3e31c175fd6b86fdb7f84a508c6f977573e09855d2f1b28c78384052bb815649151128688912e4f7ff9c12fdbde2141205bf481877a866f2caee26ef63a29ed6e52b24f5b40caef8d01deb45c885152941a8f318058704abb2a235fc32fc29026471d57fb9757c5299ff6b0af04137a3f9b27e5f7b29210cadde070711bc4263e2489f2f8a84e51d186aaa5e043185e0df81752d798a3788d0ed9201d179449c8a2a4f3013c6d803181f1efd87242a5e0c0a0828ac6b9a5eff8a7e2cc574a6a905db70cb9d161028996c810435c89c5909a574261dec748a10bb03116670610593235bc4f32e23a098ee89cf50f29e68d973f0745371966326727990170a2eb47117b2f8883b13b155c7f03275e36304515db977be7", 0x1000}, {&(0x7f00000028c0)="a2220275defa2beeed1fe644fa9d3459caf83aa0b4b994dd8564bef4bb2473422b00e1183213ddff2d1c29c90fc2dfe31fda34ece8739acaa35279975e7b2cf05fcc43a0796ccfa8c391a6167f0b6ce651f194b27b46f62ed724be90cd15fb5fac36923a2fa582d2aef942d27f02", 0x6e}], 0x7}}, {{&(0x7f00000029c0)=@rc={0x1f, @any, 0xf2}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002a40)="f4f9e46082696ac92195599948b4629d90d75e147736b66c4064da469e6bc4dd8df0ccfdf7eb115f36a965b89a0e29ab7c218e641eaf34be11643f6d84cdefe6a928d5cfa3f0f55b092069e2cfc6e84671a499e0258374fbb2daa578f1515ee18b8c0e776c6920bdfa2c471a45b3686518e3182f1100d05903deb742a6b7b2aea0e9f652b3ed1488cf267002afa9ad9a2d37765c0dda9f86b52c72894462ac8827fd2259f02ba29807ed45ec9145ff4fb315435f4d7f07da4b0f4fb015702813125998d34c6c04377ee6bbb1504fcd56ac7404d4099af0c30db248eed532a7d3ef6b", 0xe2}, {&(0x7f0000002b40)="c8e0d848415dad50bf1c94f520dc12705b71c6ddc63081bc58ef2e6187169f593786d7fb6cf391fa3b63d6e4d2ad41e8d3bbfee4b1c6daf2b9ff1ec7b43622433ac6dcb35dbcd5def531ee7c84", 0x4d}], 0x2, &(0x7f0000002c00)=[{0x88, 0x96, 0x0, "e29b573815d31fc06d53cdb512bc4e03532173417a733f75544ac5b6f8b9cc3d9e57cda7b55ed290637c7be6e9af0e007e9aafd2e0ff59585dbfc5e4875b6a61b6bbea711308ba3b4569fa3aaf3db2a4222769d1e077f14ea5dd698cc414ebf8b9ebe8c2bc279cb6170f99186919112f3046"}, {0x58, 0x88, 0x6, "d0ef6b4febc63ed833c6ab3e6f925cbf31839c494c5a7e36998b073cf9ce7779b303c5dfb12d998ce87366019de7a5f6d1075cbd5eadff526875335ec0f602f444833971"}, {0x18, 0x108, 0x800, "88cdd2"}, {0x1010, 0x104, 0x9, "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"}, {0xa8, 0x29, 0x2, "de5890d77e112277555ecc21c5c36472b0d16623f0ffce625650def0434a2a12c6ebfbb09f1e57b10bda28e88207d0e32af5129e3c06c25ae826ead93ef0e108ccd289ea0ce51cb3420ab7a724579dd9f9c9dd6fb43076a6b6e045633dc406cabe55134898ed53175e80554a7d0bc6234c764933f58cb045ea003683fceb562f984fd5128a5d3add5712ae7143c8ae751be7a2b99d2e"}], 0x11b0}}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003dc0)="4316df3deac26ca841ce5b53afc713b8604cff9a1ef7c64ddb0ef73c3cba0155038b006a33ef", 0x26}], 0x1}}], 0x3, 0x4a8967e724e1b53d) 4.481044947s ago: executing program 2 (id=3680): syz_emit_ethernet(0x7a, &(0x7f0000000400)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @empty, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x4, 0x8, 0xadaa}], "fafb17c133d11e59"}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x7c, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffa}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x20008000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x2, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000340)="e7ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25df5bfd, {0x0, 0x0, 0x0, r12, {0xf, 0xffe0}, {0x9, 0x9}, {0xf, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c844}, 0x2000a100) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f00000001c0)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x23}, r12}, 0xc) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x4008800) 4.169434958s ago: executing program 0 (id=3687): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000200)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x891b, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000440)=@nfc={0x27, r7, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)="7ddf649693309109a8112d3c4498ce18953a1cea4de51e00328eb2ee68e364fcec08f7c66c9c92814bd1d136e2061ee73601be51b40afc644cb144ead66609b62093051a7fb37b6c05ba95eb06d8fa481c9284734054038940f7da624206f938d05aa50d50e930547fbdbde1173b36f912d129610066a3aeb38d0d50e3d3528ada81d1ee57c6ff1fd0702249ddc14dee7a80a4f51c65976b4254e705736ba199cf68567c719fa036cc79021c70a1aae829cccb21c7b55c5ad614e0d894ae69f9a09461a7aa30a7c7d83a3e75e6ebbb", 0xcf}, {&(0x7f00000005c0)="5ceb4a4224e1b9a9edb3ea4f36b87dcb89673b762c151ad2b7b004f2aed8bed30aa1b1292c58f4175ad5b1f77d2cd6fdb492bb15c237b05326e19ac574ea469ea364219e2bb613e046dd0eb6b99921", 0x4f}, {&(0x7f0000000640)="cb0fbc1ca15a75c050adb898ce68d393c7d213880b4c1eeeb67de380d648e6b5f9ba5dd7f8bf9108d12d6a68aa521442bb8d719fa3fe862c6c735bc5071a6c04c436335aa14d2f450df60e366926475bc3bd53508fbb9d115926219c0b18b4291e064eca0bd3e21484d09827f58f0dd734e8c59d73f88b43f2414ddb", 0x7c}, {&(0x7f00000007c0)="6447baf639b5545b97c08698f8b829d20bdec0e06a2472c882263df6577755a21210ad4a57a6bec9d0e9b75dbeb8e3537779761dceb3d1d243ab916960d75b33732b4ec4ad41de4d19e85066dfeb65f5cb349dd7e6a71ad79dbc0ec53308a8a148c126f74a90a591395ba4878a97ff7129", 0x71}, {&(0x7f0000000840)="1d527dd8d9300b94a9a572b175f16c9a86de7249a6f3de573289c1f57534b14689c418a4b7f90029b2962f9ac53ef557d4f85808af3c714a7e4c66c113c62370096856580d48f2fde8480ee8a7724d9619b1d03bcbc53a8cf0ff2404", 0x5c}], 0x5, &(0x7f0000001140)=[{0x110, 0x116, 0x9, "3f61edb3f8553e9f2261f27f17780e589dc96a68331b6b9b7b50beb97a8d87b8bafaaa8c8ab054ca5709e4921bed89696eda7db2b84b4436308fb79e9eb9be69535e3623f40f155f27e153e0bd5d370828a0b6a279b35bfde4b30eaca33c42384089d2ab3e7996ee3ed51baf05f87fe3e17c504fd8c2ba070229e4c1848ae9364742e1676bd5d4a45faa36483e66f6ee00d3c969fd1e80ce5f717e25e7c59e271ff9a71b5a755e345891f2bec4ebc088f8025dfbb8154e532fcc2533f62a97d4fe132831eb61c6605b7cc9a9a9a7d8e885a1d14bee6a4e4beb522eb9a6b99e207c01f87c28895b205c8f37f2d2bddd4487eb7209469e03aaf9f7ae"}, {0xe0, 0x108, 0x9, "a5ffd7c05e148c45e20ac16312f5b4860cde4aec4150a8fcfaf8e4a0837e632291f2645b0d588fe6e5f6310acf3c651afc50f8c9de36500677b29183dade42e9eca5e58460d5c594adf0288f9abaf9e0485fa41bc4f2ad06dff94221dccad5a9c77e66d1c7c7937d3c6338c84e600794031609e6ca180ef052d4d4ed53e19809cefc705c5dc0a4471c83a15f194ebf274b3ff816282c5d8534be6e44a2e6da174875278c284167dd4584560b73712092784311062ad49e4f2e4c97e32b75884a7dc38f327de50e835d"}, {0x68, 0x29, 0x8, "5461d6a1e79cfe8083c029132f415ba056d38bfa9c7e963d5467d19351faf2d644e6a350f4df5f7fb6eabd5a3fc62d9246e6432b55bbac54d71a48b65a0dc689ee87e2720af243748f512a525aa554c5e3"}, {0xf8, 0x108, 0xf9, "b5def17c8c895e2e44361fed2bc71384a6ad9e346868fe676683b638616476e024e11d439ea228d8b15e6edeb2d5810f2ec4f065150e8c6e95a0f0fdd733aadde0d6a2f4f08c194779454a62964486939a5abab31aa182e3cd3e40f376afb3b11501c904aafb8b9267b2b58894c7251f538e39c1f8ff3786a82f897d4eb24f1fe881050d4309251537960b8b45fdf01463f9b79081412005f41e3272dbebb8e9ce6e13ca5c34fb79bc43ae6b069ae34d052dff13fb5e5e0685d7ff963c43ce3dab66da6a08e9babc3de70ffa455f8e72455adb9bd5e5a4207ec4e0de1faf9a296682e622d9d9"}, {0x18, 0x111, 0x1, "84c5b8173e"}, {0x28, 0x0, 0x400000, "b17b58ecae5ddcb45a91e7b1f2b414506fa2744efd55632f"}, {0x108, 0x119, 0x7, "2c54beef5f8514341979c43454ad437695ccc0acaf71970f9d3748708a40ba0fbeb665561b41c249c69ef829cc29d0ae9745b867f54743dfbecee2b3f6e9f2a6ed5e6028552ab3fdbd4db65c0ff9784e2b7b5f404fef56585e6d25f714ed4e4e3de242480b417e31d4be2d69d4c255b640041df9d7198aee688ee278be06102068271736ffed6fd8f5e709e1984c491b62abae0b401e8cadef8789338a8dd5d9900b4e2e1572b98f1d8b2ee1c62acc170fc9b3ff5ec3d9d0ee270cd91722a22e53210758471341e6b3b3b1334d4cff30ca2c6ca3ff80f5cd841c4775e02279bc86851d0ef36a14da8396719c7dcf440e018d"}], 0x498}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001880)=""/4096, &(0x7f0000002880)=0x1000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x84, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x4000) recvmsg$can_raw(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000180)=""/27, 0x1b}], 0x2}, 0x20) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r3, 0xc3583661201c9f3d, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x20040c40) r12 = socket(0x11, 0xa, 0x10000) sendto(r12, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffff8}, 0x10}, 0x94) sendmsg$NL80211_CMD_GET_MPATH(r11, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000}, 0x4040004) 3.851893387s ago: executing program 2 (id=3689): r0 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89b0, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x2500, 0x7, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x1, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}}}}}) 3.85163114s ago: executing program 0 (id=3690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x401c5820, &(0x7f00000004c0)={0x0, 0x0, 0x5}) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000000)={0x0, 0x3}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x54, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) 3.848350333s ago: executing program 1 (id=3691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x845) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff48) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@loopback, 0x6f, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r5 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4f23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x5, 0xfffffffe}}, 0xe8) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0xfffffffc) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$nl_netfilter(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000440)={0x3c0, 0xd, 0x4, 0x3, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x7}, [@nested={0x349, 0x3f, 0x0, 0x1, [@generic="93e1c43fa7f454ab429891a84ee4951b0fae706be142a1e6e24c16bdaabadb6609fbc1c80d986d442df57c50ecd8596f1bca0fc6b255eb788d6d5ea6caefdda5be3dc3b8de5e1f3550539ceee2914acfe8bbc8f0bb49a760ee99", @nested={0x4, 0x45}, @generic="8e139a40840566e83d92d3a8ab9e55edf2512ad72fec195ceab49b2df8453b0e1b3a67aedfb7e577b9cb6814a16d93765eec2e54a4876129fb2e1c3ad9c16dfd0feec7b0f2cf30f0fc7dc06d1237dc2e733958a2b068e794037f9676fe763d19bb185ac6164b958ed333d22de231db45f8262078a59d4182647eb12fed5fe8df8d639d6c3492e3da993ef0fb5cf9a871964ac66e6d1eca476265eb7e3e7f7bc7bfe37870ae9551ac0bede0c6147e0f8ff1abed2764326a7cdc49a2798fb99f51f1cf33e8336e1dcb0a8b52e4a7f20ec6ff506f6b16eff6a039040f199fcea6f8f5081e23b7d3d6ffa817f116d6fe76a05fa2", @generic="1bcb9e5b76af63dc9845a6a1fa786a", @generic="a63d24018ed054e786bc81556c5e9c81110e7abbddd9a5a942dda0c1228f7c469174f9a68333f856824a11cf4dd7bd49a51c466d805dcb870085381ccd6e7d5e6d1ec7c543136f75f0b99fd9e37bbb126bc6065ef23cb665217f99166db7ec9d5faa959e47efab3183", @generic="60a21c4952024a9a6a50b9397ab1eee05a4041bb2aea6d44beec257a219fdab0d02ca11c3b2c1ad660c5fe2eedd9c2b13bdacc424016839902235877ac5c2c501abd7151bab4c4a333b637a676", @generic="f5ee2a2c34d45a45318ad9f29a069c204e11e32870bba945391176bb73893dea696e244270889191b7f8880501e81c4545481167b8c3e7bfe56a82410e3107f150932b2b790ec757f104c37b92bd5fa43246185a6468053199fc1481dd030c6d", @typed={0xcd, 0x339, 0x0, 0x0, @binary="513316a0846bb0ff353a84552cd704a26849a91e39f36097a7a5046e0c01b728bdba21813ca9560fe49813898de420e65062030453df5ee8e1a450fd99ae0a9191a45772a971455ad149871446c2978c2aba4dbd821a2c188794021e6b5f3cd8e32f9867df4285e1a16ab65806a81d805922890f678ba39f5d9118b8ec88e898a12ca127316561a3c26146c0adfa9879617233c4b7f26666530025ed86f28564927d9f9c5ad3059230ad91b3858a339172b87ffea30955e1f5bec1afaba4a132bae852be50ac588738"}]}, @generic="c5e4608df3da9abd72a5a3add4647a1133b91e2f5683fea707c3b140e7aba4146c62f147d8a163e364efbaead98c0adb802d7378841dbc6df25031eeccdf6f4a281fbea72384d634e39c4743ad0319", @typed={0x8, 0xf0, 0x0, 0x0, @uid=r3}, @typed={0x8, 0xed, 0x0, 0x0, @fd=r8}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x14000845}, 0x4004080) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x4e, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000000a40000000060a0b040000000000000000020000001400048010000180090001007866726d000000000000028000000300010000000000024000000003000003000100000000000300020000000000044000000002000003000200007a000001400000000a0900010073797a3000000000091a020073797a3200000000140000001100010000000000000000000000000a"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.848148504s ago: executing program 2 (id=3692): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x4, 0x7, 0x5, 0x5, 0x6]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x24040004) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r3, 0x100, 0x2, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x20d6, 0x6}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x24040000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000003010102000000e318946c000a0000000c0019800800010094fb"], 0x30}}, 0x0) 3.81784712s ago: executing program 1 (id=3693): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r3}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x10, 0xf, 0x7, 0x48, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x2, 0x1}}) sendmsg$nl_xfrm(r2, &(0x7f0000001d80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="301100001500080029bd7000fbdbdf2500000000000000000000000000000000ac1e01010000000000000000000000004e2300074e2200030a0000a006000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="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"/4328], 0x1130}, 0x1, 0x0, 0x0, 0x10}, 0x2000080) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffa, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@private0, @in6=@loopback, @in=@broadcast, 0x3c, 0x3, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 1.323337516s ago: executing program 0 (id=3694): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4c8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r3, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x6}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}], {0x95, 0x0, 0x700}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f0000000200)}, 0x10) syz_emit_ethernet(0x47, &(0x7f0000001780)=ANY=[@ANYBLOB="ffffffffffff0180c200010000006012000800113a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa800090780000000090c8a1a190c999b1f0"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000600)) 1.274318597s ago: executing program 2 (id=3696): r0 = socket$netlink(0x10, 0x3, 0xf) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x404000c) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r4], 0x2c}}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x9, 0x80, 0x60, @local, @empty, 0x7, 0x0, 0xaef8, 0x4}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfc}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x4045) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) sendmsg$nl_route(r3, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@getroute={0x14, 0x1a, 0x300, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c5) (async) r7 = socket(0x2d, 0x2, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) (async) r8 = socket(0x10, 0x803, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c) (async) sendto$inet6(r10, &(0x7f0000000100)="b8", 0xfef4, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f00000001c0)=0x8) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r9, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) (async) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8084) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.274029952s ago: executing program 3 (id=3697): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x52, 0x0, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x570}]}, 0x78}, 0x1, 0x0, 0x0, 0x44000}, 0x8040) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@sack_perm, @sack_perm, @mss={0x2, 0x4}, @window={0x3, 0x2, 0x9f0}, @window={0x3, 0x8, 0x14}], 0x5) sendmsg$rds(r0, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="e80300502800"}) 1.271739898s ago: executing program 1 (id=3698): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400600027c035c9cc652bdcea3ea5a7134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecb84ec95ee5de6ccd40dd6e4f1ef3d93452a92782f9ffcdb020e6f3baf432b25a55e08", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4c000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @random="5d3ec70048e8", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2b, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x73, 0x2, 0x2, 0xc, 0x0, [@empty]}]}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0xf, 0x80) syz_emit_ethernet(0x9d, &(0x7f00000002c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0x1}, @void, {@mpls_mc={0x8848, {[{0x6}, {0xbf2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x7}, {0x3}], @ipv6=@tcp={0x4, 0x6, "1090a2", 0x53, 0x6, 0xff, @private0, @empty, {[@routing={0x3b, 0x4, 0x2, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}]}], {{0x4e24, 0x4e23, r1, r2, 0x1, 0x0, 0xa, 0x80, 0xf, 0x0, 0x0, {[@sack={0x5, 0x12, [0xa5a7, 0x40007, 0x0, 0x9]}]}}, {"506994"}}}}}}}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf250701f2800c0004000bac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.079156737s ago: executing program 3 (id=3700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) (async) r8 = socket(0x2a, 0x2, 0x0) bind$xdp(r8, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x3c}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@newtfilter={0x710, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x6e0, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x7}}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0x3}}, @TCA_BASIC_EMATCHES={0x330, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x401}, {0x3, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x4, 0x2, 0xfe00}, {0x3, 0x2, 0x2, ' l'}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfff, 0x8, 0x4}, {0x2, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x2b8, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x1}, {0x1, 0x6, 0xc}}}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x48, 0x2, 0x0, 0x0, {{0x52}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1ff, 0x7, 0x5}, {{0x4, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x5c, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x7}, {0xfff, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="5b7e0a9303", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="b5", @TCF_META_TYPE_VAR="9d66837da4151f"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="97afe82d69d8144c5670"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x6, 0x1}, {0xa6c, 0x3}}}]}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x4, 0x4, 0xd94}, [@TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="25d522", @TCF_META_TYPE_VAR="ab74d8cd8c"]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="8d47e799984923", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3}, {0x7, 0x0, 0x2}}}]}}, @TCF_EM_IPT={0x5c, 0x3, 0x0, 0x0, {{0x72d, 0x9, 0xc}, [@TCA_EM_IPT_MATCH_DATA={0x16, 0x5, "d065dbbacd049a389678fdd459b01f2c97be"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfe}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_IPT={0x140, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x3ff}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x12, 0x5, "550ae59c4ff6cd9d9cfe9c0c7822"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xff, 0x5, "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"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6}, {0x8268, 0x0, 0x1, 0x4, 0x4, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1b2, 0x7, 0x4}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}]}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x27}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x7}}, @TCA_BASIC_ACT={0x74, 0x3, [@m_skbedit={0x70, 0x5, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x887723d1c4aaab3f}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0x32, 0x6, "8fdc7bb20e54616ae1ea4d24154fb2f41a7c6caf72c5fff338a0ce1141a7ae294f3d254eb8bde5270d1da8155386"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0x300, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4000}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x2e4, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x7}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_IPT={0x2bc, 0x3, 0x0, 0x0, {{0x10, 0x9, 0x81}, [@TCA_EM_IPT_MATCH_DATA={0xb1, 0x5, "ea9dc54f368dae0d893dfd9ff1bd5a2fe058502f1dedaee4b7a9054e29caaa23de90c24abfcaf73692ef311815a001cf13bb418fb20dc1814df52784ab2c2242a119909a4a02d565dd9b67e5cec8eb92c45e438da10274ec45162e8520be912a1a08326b985d01228d869b10613961539731e84ed7f2f9d412ba2321b20581b9afa6a5bf5838c1e33418ac804223bf09d96eeba18e65017c74438ee3f41755ba5bf800749ea4ba1085bd976e83"}, @TCA_EM_IPT_MATCH_DATA={0xa7, 0x5, "651f72a329820d296817cda466e88056b71ae09bb1e5f08b28c702bd62c2615fef44baa6adf9c8a831997ed6ecaa45addb74cb111edad475a2ae1087202a17fcc29c32dfc95f69851bcf02115fdc180901a3fa657aeefb8f782290bac09023d39bf57cab8e74e53644b7a3fd063f36d9ecca6504b973646c08a9311aa097dc50d74891d7906eb5caf6ff04d2e00bad596d386ca31c96392926974d046054f26f2bc09c"}, @TCA_EM_IPT_MATCH_DATA={0x5a, 0x5, "8721f09de876c8a777dda6f5385c92091c1e39744e4edfa89555ee0fe9ce6a4a6882b2b2d9d163552019d1ae48c62901eec76e281e559a333887c79e5fe72600e1ac05aa57fe833b5382807de824b553e3e74ff6886c"}, @TCA_EM_IPT_MATCH_DATA={0x41, 0x5, "c86ec59417a9d511751269ffbbd8d30623ea817ed1e3d78fb4fe41b4fb87041cca14b536ea0659bea4e596ae4d19d7c69c68b82ab62fe4348a414dcc0b"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x87, 0x5, "1109aea211ca37735e2097b68aa295ffc931c516bbe1f9a430cdbefc5e6a88d38cd21812004054da8716af377bb5afa20ac9f86f2b4e8802383bef5ac52aeb48b67a7ccde5d943f15cdedd88b1021b8fbf139f0fcecf1943729edc8d6a1fd10038b1f190eda834cd952d87e577860dbd74827b2144d1f4134b90e4bb7ada8e4b312e08"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xff3e, 0x8, 0xfff7}, {0x0, 0x4, 0x4}}}]}]}]}}]}, 0x710}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c783, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x20, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x34004, 0x0, 0xffffffff, 0x0, 0x1}}]}}]}, 0x50}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1, 0xffffffffffffffff}, 0x4) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r3, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x1e, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x9, 0x0, 0x6, 0x4, 0x4001, 0x1, 0x8c5, '\x00', r5, r1, 0x3, 0x5, 0x5}, 0x50) (async) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0xb172, 0x0, 0xffffffffffffffff, 0x9, '\x00', r5, r1, 0x0, 0x1, 0x4}, 0x50) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r15}, 0x4) r16 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r16, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000bc0)={'filter\x00', 0x4}, 0x68) (async) shutdown(r16, 0x1) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r16, 0x84, 0xa, &(0x7f00000002c0)={0xf21b, 0x4, 0x8000, 0x4, 0xffff, 0x4, 0x9, 0x4}, &(0x7f0000000380)=0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x1d, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@generic={0xc4, 0x2, 0x0, 0x8, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0x9, 0x9, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x42}]}, &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x7, 0x80, 0x3}, 0x10, r11, r2, 0x0, &(0x7f0000000ac0)=[0x1, r12, r13, r14, r3, r15, r17], 0x0, 0x10, 0xff5}, 0x94) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) 889.277967ms ago: executing program 1 (id=3703): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt(r1, 0x1, 0x24, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a6bf5}, 0x4004) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 753.714311ms ago: executing program 1 (id=3704): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f00000002c0)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x68, &(0x7f0000000200)}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r6 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) preadv(r9, &(0x7f0000000880)=[{&(0x7f0000000380)=""/100, 0x64}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000700)=""/121, 0x79}, {&(0x7f0000000780)=""/206, 0xce}], 0x4, 0x9, 0x3) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r8) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT=r1], 0xfdef) (async, rerun: 64) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (rerun: 64) 753.401932ms ago: executing program 3 (id=3705): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async, rerun: 32) bind$inet6(r0, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) (async, rerun: 32) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1d}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xf}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x5}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3dc}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xfffffffe}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8090}, 0x814) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r1, 0x0, 0xc014) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0003000000000000000000020000000000000004000000000000003a000000"], 0x24}}, 0x0) 753.179163ms ago: executing program 4 (id=3706): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000780040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffe, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}}, 0x800) 632.488718ms ago: executing program 3 (id=3707): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) setsockopt(r5, 0xff, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000050000002400000008000300", @ANYRES32=r8, @ANYBLOB="1c002d80"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="00082bbd6000fedbdf2520a935c300a7bd3f27b5a77a948c00000008000300", @ANYRES32=r3, @ANYBLOB="0c000600030000000300000008000300", @ANYRES32=r8, @ANYBLOB="0c002d80080002000300000054002d800800030007000000080002000000000005000400000000000500040001000000050001000500000008000200010000000800030006000000050004000100000005000100040000000800030004000000"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x24000840) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000001) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000e400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000002feffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000002000000b70500000800000000deff00c500"/32], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r15, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010000007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r16 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r16, 0x1, 0xfffffffe, 0x40, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={r17}) 603.320595ms ago: executing program 4 (id=3708): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close(r1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRESOCT, @ANYBLOB="09000000000004001400030076657468315f766c616e000000000000651515bf1e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 478.626141ms ago: executing program 1 (id=3709): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x9, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x1, 0x0, 0x9, 0x4, 0x8, 0x0, 0x9}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 478.161473ms ago: executing program 4 (id=3710): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MARK={0x8, 0x10, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_getrule={0x1c, 0x22, 0x4, 0x70bd2d, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x80, 0x4, 0x0, 0x0, 0x4, 0xc}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x48090) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r6, 0x1}, 0x14}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 379.194081ms ago: executing program 3 (id=3711): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) bind$802154_raw(r2, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0xb) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r4, 0x0, 0x50, 0x0, &(0x7f0000002e40)=0x10) getsockopt$nfc_llcp(r1, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x70}, [@exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query]}, &(0x7f00000004c0)='GPL\x00', 0x56, 0xbe, &(0x7f0000000180)=""/190, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x2, 0x1, 0x401}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x4, 0x5, 0xb, 0x3}], 0x10, 0x9}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000006001000000000005000000b7080000000000007b8af8ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff000800000018230000e61fa55e6a37c4a37f752f5102c21473d2ac3dc87c168ef6af437bba06564679191447495db274077f01ab20028c4c1fa1921b421f704c7f8b67d0130a7010dd021c9524df4f29bab6985e895ce7ba5e174500"/170, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x3, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x0, 0x1, 0xf, 0x6}, {0x0, 0x1, 0xf, 0x5}, {0x4, 0x4, 0xa, 0xa}, {0x4, 0x1, 0x6, 0x4}], 0x10, 0x445}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0xffffffffffffffc4, 0x8, r5}, @IFLA_XDP_FD={0x0, 0x1, r6}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) (async) bind$802154_raw(r2, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0xb) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_opts(r4, 0x0, 0x50, 0x0, &(0x7f0000002e40)=0x10) (async) getsockopt$nfc_llcp(r1, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x70}, [@exit, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query]}, &(0x7f00000004c0)='GPL\x00', 0x56, 0xbe, &(0x7f0000000180)=""/190, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x2, 0x1, 0x401}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x4, 0x5, 0xb, 0x3}], 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000006001000000000005000000b7080000000000007b8af8ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff000800000018230000e61fa55e6a37c4a37f752f5102c21473d2ac3dc87c168ef6af437bba06564679191447495db274077f01ab20028c4c1fa1921b421f704c7f8b67d0130a7010dd021c9524df4f29bab6985e895ce7ba5e174500"/170, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x3, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x0, 0x1, 0xf, 0x6}, {0x0, 0x1, 0xf, 0x5}, {0x4, 0x4, 0xa, 0xa}, {0x4, 0x1, 0x6, 0x4}], 0x10, 0x445}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0xffffffffffffffc4, 0x8, r5}, @IFLA_XDP_FD={0x0, 0x1, r6}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async) 334.481956ms ago: executing program 0 (id=3712): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r5, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x1, 0x40000a0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="18210000", @ANYRES32=r4, @ANYBLOB="5c08f48015b25b890426ebb47134fe07574166aa7bf1291196027b6bfbc52d000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xd0, &(0x7f00000002c0)=""/208, 0x0, 0x0, '\x00', 0x0, @sched_cls, r4, 0x8, 0x0, 0x0, 0xe}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) close(r6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 222.572805ms ago: executing program 4 (id=3713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2c, 0xe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 221.990816ms ago: executing program 2 (id=3714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000a50000000500000095000000000000009500a5050000000078432dd442f68ba7fe2d282dc5bd6363a98aecd4b0deda447fc21574f82c7ff3eac5b814f85708ac7765aba5cb99845d8d1de7b9aefaa8b749ef36251fbe292c7e339c9d436dbdd3bcfa4c0b42413a1b5693c9ab00b0973b57cbf344499e932f11ea0126896b99df066fc1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001401000100000000006f6e6400000000040002800c000100bbbbbbbbbbbb0000"], 0x40}}, 0x0) 221.659886ms ago: executing program 0 (id=3715): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2, 0xb, 0x7, 0x5, 0x4, 0x4, 0x7}, 0x9c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r1, &(0x7f0000000040)={0x10, 0x6}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621}, 0x10}}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000000)=0x4) 146.332796ms ago: executing program 4 (id=3716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) 90.334883ms ago: executing program 3 (id=3717): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x800, 0x4) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) (async) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0xfffc, 0xfffd, 0x4, 0xa, 0x0, 0x0, 0x87, r6}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000500)={{r5, &(0x7f0000000200)='bridge0\x00', 0x280000, &(0x7f0000000240)={@align=0xff, {0x9, 0x0, 0x4, 0x100000001}}, 0x6, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000003c0)=0xe37}, {[0x400, 0x6, 0x6, 0x8]}, 0x8, 0xc5, &(0x7f0000000400)=""/197}) sendmsg$kcm(r7, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000580)="1e062ce912977f5b39a3ad58941e78ff89e77b7955329cd6d3d2a983b4d32a0febb7926419a6f39ca9c90e1029ce3d2322ff349052180c7b5c298620c9a7212dcb185202190be8b3a29ee29de71d3948b6bba162563fd004", 0x58}, {&(0x7f0000000600)="98b738e1034cc0dfd5ed9d64a5fa38ea2ae6d21405e84d275035cfdd354b35fe14598448e3b1d66581c369af9e430e2e8632ddc2e41f6661b85551a7264a2451a87877b1bbddfda2269c5180d28701bd94f05dc67f3a4a74a24aef5438ed66901aa9ae57a80320d77468c3bea074bc342bd35727def7f2715136944758c5244413ff53", 0x83}, {&(0x7f0000001240)="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", 0x1000}], 0x3, &(0x7f0000002280)=[{0x88, 0x10a, 0x7, "0e7e2092ff48470e42ec12446b9ad421845669222be1e63048e1d91c758bd31dd9a2d226d3c20f100f0d03f4e0c23e5aceac145d2da41cd4b204219e25a774d4eb82680a676bb649d5598c9613814c334ef86b26c2988b802645e83829a1eb48bcbd87e1dd9f9108d50e84ce108c582e8929"}, {0xc0, 0x108, 0xffff81bb, "82ea65d1d48ebadd01822dd8a63b4e6a4c8caa0f81f766b9a50b8a1bbd14ed9a3ef560631b04a8891ce2112baf7949d0ef255d75301eccca23ab6412cb5a037863cfc0ca9d1dc8f13792b828dc6c46297bd39a4894ccffe1ec286438aec2d35e33edf9ba4f0cbde098373a2b313a6cc847b3e8e00a5e65cb712f6429b37dae128b22c10066f8e92205b331112008d23cff8ee25bd7953aff79afd9fb5300ba6ccb9761cb19ccaed823678f7ab3e7324e"}, {0xf0, 0x84, 0x1, "2a06750f38a9f35a0d474ea09cb9f3503ee2a1ce15ad9f28c02517ab7f431d2d9348c319334778b6907c0cdd341082e6c1fbf93824c349eb2bb9cffdb9e73842856c336e024c9737d7834d53ad86cbd37181398b5824ae40c29ec4cf703383724e2939e5b65e02f7050ab089e4ff1aa1178eaefe291af0aef4293b2d3ca9fa96b16aac71ad70adccf6df75a52512fcbd7211657af21d504ee20059fc27a464a3f11afb600aac3a89de263fde3e16cd551079451ce6ca9350050f8762399019ad19ba0eec21f44e096a6db1639c8dd3b68f2a89f6159247a7fc4e491a4165"}], 0x238}, 0x20040014) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r7) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xc8, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x897}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x25e}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8080}, 0x400c010) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind(r10, &(0x7f0000000300)=@generic={0x1d, "89d079df2815ae43ccda410d348bbaf2c702c43620d58cdcb15013f741d03baaac7b8af347ca8ca97c8c3809f4ce980c1cc8c67d21e7f9df75174022adfe4be24c8bdd3404567381bdb993980ee0e2e9c718953d01b39522000cc983dffd0c0b4dd1d9a48151cb47dfb833b15605350d8a722fa9893e21643cd43ffd3fd8"}, 0x80) (async) close(r9) (async) connect$unix(r9, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) 30.33995ms ago: executing program 0 (id=3718): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013f00000000009500170000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 0s ago: executing program 4 (id=3719): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xb5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4880) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) close(r6) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): es in process `syz.0.2049'. [ 276.086789][T13540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2049'. [ 276.329552][T13552] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2052'. [ 276.401729][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2053'. [ 276.700422][T13561] bond4: entered promiscuous mode [ 276.717015][T13567] xt_hashlimit: size too large, truncated to 1048576 [ 276.743400][T13561] bond4: entered allmulticast mode [ 276.767541][T13561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.785808][T13577] netlink: 'syz.2.2056': attribute type 1 has an invalid length. [ 276.797209][T13577] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2056'. [ 276.825639][T13569] netlink: 'syz.2.2056': attribute type 4 has an invalid length. [ 277.036943][T13582] gre1: entered promiscuous mode [ 278.321800][T13636] syzkaller0: entered promiscuous mode [ 278.338407][T13636] syzkaller0: entered allmulticast mode [ 278.759585][T13656] Unsupported ieee802154 address type: 0 [ 279.120990][T13665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.178103][T13662] syz.1.2082 (13662) used greatest stack depth: 17944 bytes left [ 279.218010][T13670] __nla_validate_parse: 5 callbacks suppressed [ 279.218027][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 279.267063][T13670] tipc: Enabled bearer , priority 0 [ 279.288604][T13670] syzkaller0: entered promiscuous mode [ 279.308730][T13670] syzkaller0: entered allmulticast mode [ 279.366689][T13668] tipc: Resetting bearer [ 279.431133][T13668] tipc: Disabling bearer [ 279.552016][T13690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2090'. [ 280.343083][T13733] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2103'. [ 280.406192][T13738] sctp: [Deprecated]: syz.3.2106 (pid 13738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.406192][T13738] Use struct sctp_sack_info instead [ 281.010952][T13774] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2115'. [ 281.071236][T13771] syzkaller0: entered promiscuous mode [ 281.082627][T13771] syzkaller0: entered allmulticast mode [ 281.097177][T13778] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2116'. [ 281.324155][T13788] xt_hashlimit: size too large, truncated to 1048576 [ 281.960266][T13813] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2126'. [ 282.000669][T13819] macvtap1: entered promiscuous mode [ 282.006796][T13819] macvtap1: entered allmulticast mode [ 282.012265][T13819] veth1_vlan: entered allmulticast mode [ 282.155247][T13828] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 282.529729][T13834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2132'. [ 282.550370][T13839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2134'. [ 282.566668][T13834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2132'. [ 282.581474][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 282.599198][T13838] netlink: 'syz.4.2134': attribute type 5 has an invalid length. [ 283.059398][T13857] syzkaller0: entered promiscuous mode [ 283.070510][T13857] syzkaller0: entered allmulticast mode [ 283.370760][T13860] bridge6: entered promiscuous mode [ 283.402639][T13860] bridge6: entered allmulticast mode [ 283.853753][T13883] netlink: 'syz.3.2144': attribute type 23 has an invalid length. [ 284.259508][T13902] __nla_validate_parse: 4 callbacks suppressed [ 284.259559][T13902] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2149'. [ 284.263848][T13903] netlink: 'syz.3.2148': attribute type 11 has an invalid length. [ 284.358698][T13903] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2148'. [ 284.403871][T13905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.070366][T13922] netlink: zone id is out of range [ 285.091229][T13922] netlink: zone id is out of range [ 285.106513][T13922] netlink: zone id is out of range [ 285.140009][T13922] netlink: zone id is out of range [ 285.187278][T13922] netlink: zone id is out of range [ 285.231010][T13922] netlink: zone id is out of range [ 285.251606][T13922] netlink: zone id is out of range [ 285.274210][T13922] netlink: zone id is out of range [ 285.297892][T13922] netlink: zone id is out of range [ 285.323586][T13922] netlink: zone id is out of range [ 285.340426][T13932] netlink: 'syz.1.2159': attribute type 1 has an invalid length. [ 285.410091][T13932] nbd: error processing sock list [ 285.769037][T13954] vlan2: entered promiscuous mode [ 285.801383][T13954] bridge0: entered promiscuous mode [ 285.904474][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2166'. [ 286.008939][ T29] audit: type=1800 audit(1781016071.155:7): pid=13966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2168" name="memory.events" dev="tmpfs" ino=2352 res=0 errno=0 [ 286.313136][T13973] tap0: tun_chr_ioctl cmd 1074025672 [ 286.340293][T13973] tap0: ignored: set checksum disabled [ 286.357375][T13976] netlink: 'syz.3.2171': attribute type 1 has an invalid length. [ 286.378934][T13978] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2172'. [ 286.408435][T13978] syzkaller0: entered promiscuous mode [ 286.414687][T13978] syzkaller0: entered allmulticast mode [ 286.664161][T13977] bond7: (slave bridge7): making interface the new active one [ 286.673825][T13986] netlink: 'syz.0.2172': attribute type 64 has an invalid length. [ 286.689919][T13977] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 286.702011][T13986] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2172'. [ 286.711934][T13988] netlink: 'syz.1.2174': attribute type 1 has an invalid length. [ 286.780214][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 286.928370][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 287.124277][T13990] bond7: (slave bridge8): Enslaving as a backup interface with an up link [ 287.156879][T13978] macsec0: entered promiscuous mode [ 287.268121][T13990] macvlan3: entered promiscuous mode [ 287.305838][T13990] macvlan3: entered allmulticast mode [ 287.326653][T13990] bond7: entered promiscuous mode [ 287.332311][T13990] bridge8: entered promiscuous mode [ 287.344503][T13990] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 287.354886][T13990] bond7: left promiscuous mode [ 287.362731][T13990] bridge8: left promiscuous mode [ 287.486015][T14005] netlink: 'syz.2.2178': attribute type 3 has an invalid length. [ 287.558416][T13975] macsec0: left promiscuous mode [ 287.737606][T14010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2179'. [ 287.792459][T14010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2179'. [ 287.829450][T14010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2179'. [ 287.858421][T14012] netlink: 'syz.2.2180': attribute type 3 has an invalid length. [ 287.875119][T14012] netlink: 'syz.2.2180': attribute type 18 has an invalid length. [ 287.883971][T14012] netlink: 'syz.2.2180': attribute type 18 has an invalid length. [ 288.189555][T14030] netlink: 'syz.3.2184': attribute type 11 has an invalid length. [ 288.208099][T14030] netlink: 'syz.3.2184': attribute type 5 has an invalid length. [ 288.571700][T14043] x_tables: duplicate underflow at hook 1 [ 288.576888][T14038] x_tables: duplicate underflow at hook 1 [ 288.919896][T14051] syzkaller1: entered promiscuous mode [ 288.947683][T14051] syzkaller1: entered allmulticast mode [ 289.270805][T14068] __nla_validate_parse: 9 callbacks suppressed [ 289.270843][T14068] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2193'. [ 289.435692][T14071] netlink: 'syz.3.2196': attribute type 3 has an invalid length. [ 289.470882][T14071] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2196'. [ 289.840739][T14087] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 290.058749][T14101] veth0: entered promiscuous mode [ 290.111319][T14100] veth0: left promiscuous mode [ 290.431459][T14112] nbd1: detected capacity change from 0 to 63 [ 290.475332][T14116] block nbd1: NBD_DISCONNECT [ 290.540967][T14116] block nbd1: Disconnected due to user request. [ 290.586440][ C1] net_ratelimit: 55 callbacks suppressed [ 290.586467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.587515][T14116] block nbd1: shutting down sockets [ 290.619695][ T5655] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.646441][ T5655] Buffer I/O error on dev nbd1, logical block 0, async page read [ 290.668063][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 290.680107][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 290.688701][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 290.697096][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 290.707659][ T5655] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.718191][ T5655] Buffer I/O error on dev nbd1, logical block 0, async page read [ 290.732543][ T5655] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.742195][ T5655] Buffer I/O error on dev nbd1, logical block 1, async page read [ 290.751094][ T5655] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.772997][ T5655] Buffer I/O error on dev nbd1, logical block 2, async page read [ 290.805215][ T5655] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.815401][ T5655] Buffer I/O error on dev nbd1, logical block 3, async page read [ 290.823845][ T5655] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.834826][ T5655] Buffer I/O error on dev nbd1, logical block 0, async page read [ 290.843231][ T5655] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.902922][ T5655] Buffer I/O error on dev nbd1, logical block 1, async page read [ 290.940706][ T5655] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 290.998316][ T5655] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.073480][ T5655] ldm_validate_partition_table(): Disk read failed. [ 291.093980][T14138] tc_dump_action: action bad kind [ 291.101295][T14133] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2214'. [ 291.122405][ T5655] Dev nbd1: unable to read RDB block 0 [ 291.137933][T14133] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2214'. [ 291.157399][ T5655] nbd1: unable to read partition table [ 291.174634][T14133] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2214'. [ 291.202344][ T5655] ldm_validate_partition_table(): Disk read failed. [ 291.219021][T14133] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2214'. [ 291.256972][T14133] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2214'. [ 291.269952][ T5655] Dev nbd1: unable to read RDB block 0 [ 291.309109][ T5655] nbd1: unable to read partition table [ 291.620675][T14156] netlink: 'syz.1.2222': attribute type 21 has an invalid length. [ 291.626488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.640563][T14156] IPv6: NLM_F_CREATE should be specified when creating new route [ 292.002675][T14170] set match dimension is over the limit! [ 292.040308][ T29] audit: type=1804 audit(1781016077.185:8): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2227" name="/newroot/477/cgroup.controllers" dev="tmpfs" ino=2449 res=1 errno=0 [ 292.113714][ T29] audit: type=1800 audit(1781016077.185:9): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2227" name="cgroup.controllers" dev="tmpfs" ino=2449 res=0 errno=0 [ 292.302322][T14179] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2230'. [ 292.347193][T14179] netlink: 'syz.0.2230': attribute type 1 has an invalid length. [ 292.369876][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 292.382760][T14189] syzkaller1: entered promiscuous mode [ 292.395061][T14189] syzkaller1: entered allmulticast mode [ 292.414065][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 292.666643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.679132][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.312557][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.383379][T14229] netlink: 'syz.1.2242': attribute type 2 has an invalid length. [ 293.445081][T14235] netlink: 'syz.1.2242': attribute type 2 has an invalid length. [ 293.706472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.801571][T14244] erspan0: entered promiscuous mode [ 294.515894][T14278] netlink: 'syz.1.2253': attribute type 1 has an invalid length. [ 294.552786][T14278] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2253'. [ 294.610566][T14278] netlink: 'syz.1.2253': attribute type 1 has an invalid length. [ 294.642529][T14282] ieee802154 phy0 wpan0: encryption failed: -126 [ 294.654888][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2253'. [ 294.795802][T14285] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2257'. [ 295.042681][T14289] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2259'. [ 295.123794][T14291] netlink: 'syz.3.2260': attribute type 12 has an invalid length. [ 295.258006][T14291] bond9: option primary_reselect: invalid value (255) [ 295.268062][T14291] bond9 (unregistering): Released all slaves [ 295.279686][T14301] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 295.294692][T14301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.623714][T14314] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 295.632349][T14315] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 295.672881][T14314] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 295.848499][T14315] bond5: entered promiscuous mode [ 295.870617][T14315] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.977421][T14318] bond5: (slave bridge6): making interface the new active one [ 296.014471][T14318] bridge6: entered promiscuous mode [ 296.052997][T14318] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 296.411910][T14325] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2268'. [ 296.425610][T14328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.434036][T14333] vcan0: tx address claim with different name [ 296.674444][T14343] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 296.692299][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'. [ 296.905069][T14353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2276'. [ 297.694194][T14394] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2285'. [ 297.983064][T14409] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 298.122472][T14409] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2288'. [ 298.174941][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 298.780765][T14439] sch_tbf: burst 46 is lower than device syzkaller0 mtu (1514) ! [ 298.834483][T14439] 8021q: VLANs not supported on wg0 [ 298.876548][T14447] netlink: 'syz.1.2299': attribute type 6 has an invalid length. [ 299.129376][ T6166] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.156969][ T6166] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.191617][ T6166] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.212668][ T6166] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.785328][T14483] __nla_validate_parse: 8 callbacks suppressed [ 299.785346][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2309'. [ 299.874686][T14483] xfrm1: entered promiscuous mode [ 299.897077][T14489] Cannot find add_set index 4 as target [ 299.904311][T14483] xfrm1: entered allmulticast mode [ 299.905200][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2309'. [ 299.981792][T14497] Cannot find add_set index 4 as target [ 300.025888][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'. [ 300.090449][T14498] netlink: 'syz.3.2314': attribute type 29 has an invalid length. [ 300.119353][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'. [ 300.421856][T14519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2317'. [ 300.573122][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 300.602121][T14511] No such timeout policy "syz1" [ 300.885499][T14507] syzkaller0: entered promiscuous mode [ 300.901446][T14507] syzkaller0: entered allmulticast mode [ 301.383349][T14551] netlink: 'syz.1.2324': attribute type 1 has an invalid length. [ 301.403005][T14551] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2324'. [ 301.423028][T14551] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2324'. [ 303.606019][T14543] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 303.615853][T14543] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 303.625795][T14543] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 303.865903][T14562] IPv6: NLM_F_REPLACE set, but no existing node found! [ 304.054010][T14580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2326'. [ 304.222482][T14589] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 304.292182][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 304.857042][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2339'. [ 305.046775][T14619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2339'. [ 305.422705][T14645] xt_l2tp: missing protocol rule (udp|l2tpip) [ 305.524199][T14649] veth0: entered promiscuous mode [ 305.552176][T14649] veth0: left promiscuous mode [ 305.789427][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2352'. [ 306.117373][T14676] netlink: 'syz.1.2355': attribute type 29 has an invalid length. [ 306.174225][T14677] netlink: 'syz.1.2355': attribute type 29 has an invalid length. [ 306.269710][T14676] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2355'. [ 306.343903][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 306.934317][T14713] netlink: 'syz.4.2368': attribute type 1 has an invalid length. [ 306.950047][T14715] netlink: 'syz.4.2368': attribute type 1 has an invalid length. [ 307.127482][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2372'. [ 307.164406][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2372'. [ 307.182825][T14725] netlink: 'syz.4.2372': attribute type 14 has an invalid length. [ 307.193642][T14725] netlink: 'syz.4.2372': attribute type 13 has an invalid length. [ 307.361528][T14740] bond0: left promiscuous mode [ 307.368298][T14740] bond_slave_0: left promiscuous mode [ 307.373954][T14740] bond_slave_1: left promiscuous mode [ 307.385081][T14740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.552879][T14747] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 307.812362][T14765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2381'. [ 308.078444][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2383'. [ 308.353162][T14781] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2385'. [ 308.371436][T14784] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 308.553937][T14792] can: request_module (can-proto-0) failed. [ 308.959699][T14819] syzkaller0: entered promiscuous mode [ 308.969602][T14819] syzkaller0: entered allmulticast mode [ 309.457290][T14841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.481472][T14841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.503168][T14844] openvswitch: netlink: VLAN attribute unexpected. [ 309.558347][T14847] netlink: 'syz.4.2407': attribute type 39 has an invalid length. [ 309.620258][T14847] hsr_slave_0: left promiscuous mode [ 309.713503][T14851] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 310.505194][T14885] netlink: 'syz.1.2417': attribute type 12 has an invalid length. [ 311.222289][T14913] pim6reg: entered allmulticast mode [ 311.305944][T14913] __nla_validate_parse: 7 callbacks suppressed [ 311.305964][T14913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2422'. [ 311.352772][T14913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2422'. [ 311.750823][T14948] netlink: 12074 bytes leftover after parsing attributes in process `syz.2.2429'. [ 311.824656][T14950] netlink: 'syz.0.2431': attribute type 8 has an invalid length. [ 312.052413][T14965] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2435'. [ 312.063850][T14967] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2435'. [ 312.927361][T15009] netlink: 'syz.0.2447': attribute type 10 has an invalid length. [ 312.947203][T15009] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 312.949415][T15008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2446'. [ 313.719365][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2458'. [ 313.803227][T15054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2458'. [ 313.838199][T15049] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.859173][T15058] nbd: couldn't find device at index 2958377 [ 313.998586][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 314.187572][T15049] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.380487][T15079] xt_hashlimit: size too large, truncated to 1048576 [ 314.521513][T15049] bond0: (slave netdevsim1): Releasing backup interface [ 314.724649][T15049] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.103566][T15049] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.275292][T15112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2468'. [ 315.493775][T14915] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.504354][T15123] sctp: [Deprecated]: syz.0.2471 (pid 15123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.504354][T15123] Use struct sctp_sack_info instead [ 315.537428][T14915] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.609258][T14920] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.625524][T15129] netlink: 'syz.0.2474': attribute type 1 has an invalid length. [ 315.672551][T14920] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.713165][T15131] openvswitch: netlink: Message has -2 unknown bytes. [ 315.892293][T15135] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 315.938104][T15135] xt_hashlimit: size too large, truncated to 1048576 [ 316.105332][T15145] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 316.129880][T15145] netlink: 'syz.4.2481': attribute type 6 has an invalid length. [ 316.151872][T15145] netlink: 'syz.4.2481': attribute type 5 has an invalid length. [ 316.174226][T15150] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 316.278524][T15151] netlink: 'syz.3.2480': attribute type 21 has an invalid length. [ 316.314907][T15151] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.381610][T15155] __nla_validate_parse: 8 callbacks suppressed [ 316.381626][T15155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2483'. [ 316.991607][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.971798][T15179] ip6tnl2: entered allmulticast mode [ 319.051921][T15190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2490'. [ 319.407529][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2495'. [ 319.954757][T15222] openvswitch: netlink: IP tunnel dst address not specified [ 320.672152][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2508'. [ 320.714402][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'. [ 320.763290][T15258] netlink: 'syz.1.2509': attribute type 1 has an invalid length. [ 321.032046][T15273] af_packet: tpacket_rcv: packet too big, clamped from 564 to 4294967272. macoff=96 [ 321.199046][T15281] netlink: 'syz.3.2517': attribute type 11 has an invalid length. [ 321.217457][T15281] netlink: 'syz.3.2517': attribute type 11 has an invalid length. [ 321.234210][T15281] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2517'. [ 321.313275][T15287] xt_addrtype: ipv6 does not support BROADCAST matching [ 321.608922][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2523'. [ 321.647713][T15300] block nbd1: Unsupported socket: should be TCP or UNIX. [ 321.673991][T15306] openvswitch: netlink: IPv4 tun info is not correct [ 321.717499][T15306] netlink: 'syz.3.2524': attribute type 1 has an invalid length. [ 322.022344][T15325] sock: sock_set_timeout: `syz.2.2527' (pid 15325) tries to set negative timeout [ 322.042100][T15297] syzkaller0: entered promiscuous mode [ 322.074665][T15297] syzkaller0: entered allmulticast mode [ 322.164359][T15326] bond0: Device is already in use. [ 322.242566][T15334] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2530'. [ 322.552442][T15349] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2533'. [ 324.934936][T15373] netlink: 808 bytes leftover after parsing attributes in process `syz.1.2538'. [ 325.416603][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 325.534427][T15409] netlink: 'syz.4.2547': attribute type 1 has an invalid length. [ 325.595559][ T29] audit: type=1804 audit(1781016110.735:10): pid=15413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2549" name="/newroot/491/cgroup.controllers" dev="tmpfs" ino=2523 res=1 errno=0 [ 325.620630][T15409] bond14: entered promiscuous mode [ 325.630998][T15409] 8021q: adding VLAN 0 to HW filter on device bond14 [ 325.636313][ T29] audit: type=1800 audit(1781016110.735:11): pid=15413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2549" name="cgroup.controllers" dev="tmpfs" ino=2523 res=0 errno=0 [ 325.764069][T15428] bond0: entered promiscuous mode [ 325.771677][T15428] bridge1: entered promiscuous mode [ 325.778513][T15428] batadv0: entered promiscuous mode [ 325.792761][T15428] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 325.803128][T15428] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 325.819305][T15428] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 325.828653][T15428] bond0: left promiscuous mode [ 325.835752][T15428] bridge1: left promiscuous mode [ 325.844275][T15428] batadv0: left promiscuous mode [ 325.883666][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2554'. [ 326.007303][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2554'. [ 326.016451][T15441] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2556'. [ 326.017092][T15446] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2557'. [ 326.072785][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2554'. [ 326.387293][T15465] syzkaller0: entered promiscuous mode [ 326.405976][T15465] syzkaller0: entered allmulticast mode [ 326.510681][T15471] syzkaller1: entered promiscuous mode [ 326.518278][T15471] syzkaller1: entered allmulticast mode [ 326.621138][T15437] __nla_validate_parse: 61 callbacks suppressed [ 326.621155][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2554'. [ 326.657577][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 327.017457][T15496] C: renamed from lo (while UP) [ 327.035159][T15496] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 327.081819][T15496] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 327.118476][T15496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2571'. [ 327.400868][T15512] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2575'. [ 327.449581][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2575'. [ 327.500444][T15517] bridge_slave_0: invalid flags given to default FDB implementation [ 327.747617][T15528] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.815012][T15531] bond8: option lp_interval: invalid value (0) [ 327.824304][T15531] bond8: option lp_interval: allowed values 1 - 2147483647 [ 327.837855][T15531] bond8 (unregistering): Released all slaves [ 328.264385][T15573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2588'. [ 328.318043][T15575] netlink: 'syz.2.2592': attribute type 2 has an invalid length. [ 328.326029][T15575] netlink: 'syz.2.2592': attribute type 2 has an invalid length. [ 328.433627][T15580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2593'. [ 328.549791][T15590] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20004 [ 328.662453][T15597] syzkaller0: entered promiscuous mode [ 328.682412][T15597] syzkaller0: entered allmulticast mode [ 328.781278][T15601] ’’’’’’: renamed from virt_wifi0 [ 328.914585][T15608] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 329.014498][T15612] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 329.044886][T15612] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 329.119310][T15622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2606'. [ 329.180346][T15625] netlink: 'syz.0.2607': attribute type 62 has an invalid length. [ 329.492220][T15640] xt_hashlimit: size too large, truncated to 1048576 [ 329.578671][T15650] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 330.064276][T15673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2621'. [ 330.124884][T15673] 8021q: VLANs not supported on ip6gre0 [ 330.320330][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2624'. [ 330.579709][T15699] openvswitch: netlink: IP tunnel dst address not specified [ 330.608344][T15699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.811468][T15708] syzkaller0: entered promiscuous mode [ 330.818500][T15708] syzkaller0: entered allmulticast mode [ 330.950393][T15730] netlink: 'syz.3.2638': attribute type 2 has an invalid length. [ 330.959592][T15730] netlink: 'syz.3.2638': attribute type 2 has an invalid length. [ 331.038470][T15733] netlink: 'syz.0.2639': attribute type 1 has an invalid length. [ 331.079249][T15733] bond7: entered promiscuous mode [ 331.085196][T15733] 8021q: adding VLAN 0 to HW filter on device bond7 [ 332.354763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 332.845994][T15733] bond7: (slave bridge8): making interface the new active one [ 332.853923][T15733] bridge8: entered promiscuous mode [ 332.860200][T15733] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 333.061720][T15768] __nla_validate_parse: 3 callbacks suppressed [ 333.061738][T15768] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2647'. [ 333.154626][T15770] netlink: 'syz.4.2649': attribute type 1 has an invalid length. [ 333.175229][T15770] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2649'. [ 333.192597][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2651'. [ 333.195737][T15770] netlink: 'syz.4.2649': attribute type 1 has an invalid length. [ 333.214291][T15780] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2653'. [ 333.227202][T15770] netlink: 'syz.4.2649': attribute type 8 has an invalid length. [ 333.244455][T15770] netlink: 582 bytes leftover after parsing attributes in process `syz.4.2649'. [ 333.269649][T15770] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2649'. [ 333.419119][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2656'. [ 333.455456][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2656'. [ 333.476188][T15793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2656'. [ 333.485534][T15794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2656'. [ 333.534822][T15800] 8021q: VLANs not supported on ip_vti0 [ 333.876895][T15814] openvswitch: netlink: Invalid VLAN frame [ 334.369535][T15848] netlink: 'syz.4.2674': attribute type 10 has an invalid length. [ 334.731990][T15870] netlink: 'syz.1.2681': attribute type 1 has an invalid length. [ 334.748799][T15871] pimreg3: entered allmulticast mode [ 334.895047][T15873] bond8: (slave gretap1): making interface the new active one [ 334.910506][T15873] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 335.439151][T15922] netlink: 'syz.4.2694': attribute type 1 has an invalid length. [ 335.723403][T15934] openvswitch: netlink: Flow key attr not present in new flow. [ 336.203868][T15961] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 336.354435][T15975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.392687][T15975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.441776][T15975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.507701][T15981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.588638][T15975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.618442][T15975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.783736][T15993] x_tables: duplicate underflow at hook 3 [ 336.870404][T16000] xt_hashlimit: size too large, truncated to 1048576 [ 337.000390][T16011] netlink: 'syz.4.2724': attribute type 21 has an invalid length. [ 337.019046][T16011] netlink: 'syz.4.2724': attribute type 5 has an invalid length. [ 337.172389][T16015] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 337.188457][T16015] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 337.374238][T16030] openvswitch: netlink: Message has 6 unknown bytes. [ 337.568433][T16044] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 338.058448][T16063] netlink: 'syz.2.2740': attribute type 10 has an invalid length. [ 338.531296][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.554038][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.568618][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.580496][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.589042][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.632249][T16098] SET target dimension over the limit! [ 338.642892][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.651985][T16098] __nla_validate_parse: 20 callbacks suppressed [ 338.652001][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2750'. [ 338.667569][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.676663][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.684684][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.689541][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2750'. [ 338.709876][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.744972][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2750'. [ 338.844285][T16105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2753'. [ 338.855323][T16105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'. [ 339.078753][T16112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2755'. [ 339.620448][ T6146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.642741][ T6146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.654690][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2764'. [ 339.655299][ T6146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 339.677114][T16133] IPv6: NLM_F_CREATE should be specified when creating new route [ 339.750030][T16151] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2765'. [ 339.859513][ T6146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.904897][ T6146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.938601][ T6146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 339.988505][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2768'. [ 340.089241][T16169] netlink: 'syz.4.2770': attribute type 1 has an invalid length. [ 340.119106][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2770'. [ 340.217940][ T6146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.245001][ T6146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.277603][ T6146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 340.554732][ T6146] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.575239][ T6146] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.592632][ T6146] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 340.747616][ T5635] Bluetooth: hci5: command tx timeout [ 340.760192][T14920] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.812565][T14920] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.893686][ T6156] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.974922][ T1003] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.994295][T16210] veth0: entered promiscuous mode [ 341.360017][T16227] xt_hashlimit: size too large, truncated to 1048576 [ 342.010267][ T6146] bond3 (unregistering): (slave bridge0): Releasing backup interface [ 342.291853][ T6146]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.302602][ T6146]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.312846][ T6146]  (unregistering): Released all slaves [ 342.325989][ T6146] bond0 (unregistering): Released all slaves [ 342.343542][ T6146] bond1 (unregistering): Released all slaves [ 342.357211][ T6146] bond2 (unregistering): Released all slaves [ 342.372271][ T6146] bond3 (unregistering): Released all slaves [ 342.391270][ T6146] bond4 (unregistering): Released all slaves [ 342.410402][ T6146] bond5 (unregistering): (slave C): Releasing backup interface [ 342.418460][ T6146] bond5 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 342.430680][ T6146] bond5 (unregistering): Released all slaves [ 342.443827][ T6146] bond6 (unregistering): Released all slaves [ 342.458563][ T6146] bond7 (unregistering): Released all slaves [ 342.475904][T16212] veth0: left promiscuous mode [ 342.525596][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 342.651750][T16251] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 342.703571][ T6146] tipc: Disabling bearer [ 342.757624][ T6146] tipc: Left network mode [ 342.827021][ T5635] Bluetooth: hci5: command tx timeout [ 342.878143][ T6146] IPVS: stopping backup sync thread 8145 ... [ 342.989269][T16269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.693249][T16317] __nla_validate_parse: 9 callbacks suppressed [ 343.693267][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2799'. [ 343.805955][T16320] netlink: 'syz.4.2800': attribute type 16 has an invalid length. [ 343.841712][T16320] netlink: 'syz.4.2800': attribute type 3 has an invalid length. [ 343.870983][T16320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2800'. [ 344.002071][T16094] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.033905][T16094] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.072486][T16094] bridge_slave_0: entered allmulticast mode [ 344.076528][T16328] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.2803'. [ 344.099112][T16094] bridge_slave_0: entered promiscuous mode [ 344.152144][T16333] netlink: 'syz.4.2802': attribute type 1 has an invalid length. [ 344.177769][T16333] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2802'. [ 344.194633][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 344.223762][T16094] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.251900][T16094] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.274014][T16094] bridge_slave_1: entered allmulticast mode [ 344.282559][T16094] bridge_slave_1: entered promiscuous mode [ 344.415178][T16339] tipc: Enabled bearer , priority 0 [ 344.445540][T16347] netlink: 'syz.1.2808': attribute type 3 has an invalid length. [ 344.459658][T16346] netlink: 'syz.1.2808': attribute type 3 has an invalid length. [ 344.473500][T16094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.509261][T16094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.534747][T16342] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 344.559378][T16342] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 344.573687][T16342] tipc: Resetting bearer [ 344.607606][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2811'. [ 344.642649][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2811'. [ 344.668098][ T6146] vlan0: left allmulticast mode [ 344.682380][ T6146] veth0_vlan: left allmulticast mode [ 344.699650][ T6146] vlan0: left promiscuous mode [ 344.713840][ T6146] veth1_vlan: left promiscuous mode [ 344.724259][ T6146] veth0_vlan: left promiscuous mode [ 344.906891][ T5635] Bluetooth: hci5: command tx timeout [ 344.935142][ T6146] pim6reg (unregistering): left allmulticast mode [ 345.471639][ T6146] team0 (unregistering): Port device team_slave_1 removed [ 345.495392][ T6146] team0 (unregistering): Port device team_slave_0 removed [ 345.616401][T16353] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 345.645893][T14916] tipc: Resetting bearer [ 345.663309][T16361] tipc: Resetting bearer [ 345.682863][T16367] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2812'. [ 345.695609][T16380] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 345.701039][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 345.730094][T16369] netlink: 'syz.3.2813': attribute type 1 has an invalid length. [ 345.750101][T16369] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2813'. [ 345.783570][T16369] netlink: 'syz.3.2813': attribute type 1 has an invalid length. [ 345.799609][T16094] team0: Port device team_slave_0 added [ 345.805313][T16369] netlink: 'syz.3.2813': attribute type 8 has an invalid length. [ 345.819199][T16094] team0: Port device team_slave_1 added [ 345.824952][T16369] netlink: 606 bytes leftover after parsing attributes in process `syz.3.2813'. [ 345.937018][T16392] ip6tnl2: entered allmulticast mode [ 345.950619][T16094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.966123][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.000333][T16094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.017009][T16094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.024168][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.052461][T16094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.235535][T16094] hsr_slave_0: entered promiscuous mode [ 346.275875][T16094] hsr_slave_1: entered promiscuous mode [ 346.484351][T16412] netlink: 'syz.1.2820': attribute type 33 has an invalid length. [ 346.540489][T16424] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2823'. [ 346.688470][ T6146] IPVS: stop unused estimator thread 0... [ 346.840548][T16445] netlink: 'syz.0.2823': attribute type 1 has an invalid length. [ 346.996920][ T5635] Bluetooth: hci5: command tx timeout [ 347.173394][T16445] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.284019][T16094] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.460732][T16476] netlink: 'syz.3.2830': attribute type 58 has an invalid length. [ 347.618406][T16094] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.703621][T16484] netlink: 'syz.3.2831': attribute type 1 has an invalid length. [ 347.742065][T16094] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.856101][T16094] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.684035][T16437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.693846][T16459] netlink: 'syz.1.2828': attribute type 1 has an invalid length. [ 349.710605][T16459] __nla_validate_parse: 1 callbacks suppressed [ 349.710621][T16459] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.2828'. [ 349.761906][T16094] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.813585][T16094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.876641][T16094] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.877261][T16541] Bluetooth: MGMT ver 1.23 [ 349.898242][T16546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.900394][T16544] netlink: 'syz.0.2835': attribute type 1 has an invalid length. [ 349.922434][T16094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.955274][T16544] bond10: entered promiscuous mode [ 349.962038][T16544] 8021q: adding VLAN 0 to HW filter on device bond10 [ 349.971734][T16094] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 350.000479][T16094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 350.012394][T16094] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 350.081627][T16094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 350.125356][T16568] xt_addrtype: ipv6 does not support BROADCAST matching [ 350.277204][T16575] Unsupported ieee802154 address type: 0 [ 350.284820][T16094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.329116][T16094] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.345633][T14917] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.352820][T14917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.400158][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.407414][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.489789][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2843'. [ 350.535973][T16579] 8021q: adding VLAN 0 to HW filter on device bond10 [ 350.626919][T16584] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 351.182924][T16608] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2851'. [ 351.349422][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a0d6800: rx timeout, send abort [ 351.678714][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 351.857740][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a0d6800: abort rx timeout. Force session deactivation [ 352.101462][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 352.213389][T16634] 8021q: adding VLAN 0 to HW filter on device bond11 [ 352.244556][T16635] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 352.259144][T16094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.305025][T16646] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2861'. [ 352.404652][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'. [ 352.469421][T16094] veth0_vlan: entered promiscuous mode [ 352.514304][T16094] veth1_vlan: entered promiscuous mode [ 352.618414][T16094] veth0_macvtap: entered promiscuous mode [ 352.654255][T16094] veth1_macvtap: entered promiscuous mode [ 352.699432][T16094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.732477][T16094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.789968][ T1003] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.820747][ T1003] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.851892][ T1003] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.872261][ T1003] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.047219][T16684] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 353.063603][T16683] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2873'. [ 353.108232][T16681] netlink: 'syz.4.2872': attribute type 3 has an invalid length. [ 353.122144][T16681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2872'. [ 353.135831][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.172247][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.244054][T16684] netlink: 'syz.4.2872': attribute type 3 has an invalid length. [ 353.249933][T14917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.260394][T14917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.380604][T16697] : renamed from gretap0 (while UP) [ 353.744106][T16719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2884'. [ 353.914757][T16733] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 353.987360][T16746] openvswitch: netlink: Flow actions attr not present in new flow. [ 354.004862][T16736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.005670][T16747] openvswitch: netlink: Flow actions attr not present in new flow. [ 354.585553][T16778] netlink: 'syz.3.2899': attribute type 83 has an invalid length. [ 354.697436][T16784] openvswitch: netlink: IPv4 tun info is not correct [ 354.753369][T16787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.828528][T16794] Cannot find del_set index 0 as target [ 354.983539][T16795] syzkaller0: entered promiscuous mode [ 355.020161][T16795] syzkaller0: entered allmulticast mode [ 355.461716][T16826] __nla_validate_parse: 4 callbacks suppressed [ 355.461734][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2912'. [ 355.481548][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2912'. [ 355.528262][T16832] sctp: [Deprecated]: syz.1.2914 (pid 16832) Use of int in max_burst socket option. [ 355.528262][T16832] Use struct sctp_assoc_value instead [ 355.550902][T16828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2912'. [ 355.755604][T16842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2916'. [ 355.969309][T16850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2917'. [ 357.312072][T16844] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2917'. [ 357.601406][T16868] syzkaller0: entered promiscuous mode [ 357.634369][T16868] syzkaller0: entered allmulticast mode [ 357.700011][T16873] macsec0: entered promiscuous mode [ 357.712699][T16873] macsec0: entered allmulticast mode [ 357.728991][T16873] veth1_macvtap: entered allmulticast mode [ 357.742885][T16873] macsec0: left promiscuous mode [ 357.759567][T16873] macsec0: left allmulticast mode [ 357.778506][T16873] veth1_macvtap: left allmulticast mode [ 357.911355][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2927'. [ 357.926246][T16876] vlan3: entered promiscuous mode [ 357.933053][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 357.942204][T16876] bridge0: entered promiscuous mode [ 357.949158][T16884] netlink: 'syz.2.2926': attribute type 1 has an invalid length. [ 357.958044][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 357.973111][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 357.984365][T16884] netlink: 'syz.2.2926': attribute type 1 has an invalid length. [ 358.005281][T16888] netlink: 'syz.3.2928': attribute type 2 has an invalid length. [ 358.021583][T16888] netlink: 'syz.3.2928': attribute type 1 has an invalid length. [ 358.188788][T16896] syzkaller1: entered promiscuous mode [ 358.204584][T16896] syzkaller1: entered allmulticast mode [ 358.313379][T16904] IPVS: Error connecting to the multicast addr [ 358.790173][T16933] only policy match revision 0 supported [ 358.790194][T16933] unable to load match [ 360.099651][T17018] xt_nfacct: accounting object `syz1' does not exist [ 360.112482][T17020] xt_TCPMSS: Only works on TCP SYN packets [ 360.407267][T17034] netlink: 'syz.1.2969': attribute type 1 has an invalid length. [ 360.445024][T17034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.452343][T17034] IPv6: NLM_F_CREATE should be set when creating new route [ 360.505759][T17049] netlink: 'syz.1.2969': attribute type 1 has an invalid length. [ 360.537136][T17049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.643693][T17055] xt_hashlimit: max too large, truncated to 1048576 [ 360.778393][T17059] netlink: 'syz.4.2974': attribute type 1 has an invalid length. [ 360.789842][T17062] __nla_validate_parse: 17 callbacks suppressed [ 360.789860][T17062] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2975'. [ 360.793585][T17064] xt_TCPMSS: Only works on TCP SYN packets [ 360.808059][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2974'. [ 360.954116][T17071] netlink: 'syz.1.2978': attribute type 1 has an invalid length. [ 361.026603][T17071] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2978'. [ 361.061791][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2978'. [ 361.148083][T17085] netlink: 'syz.4.2984': attribute type 1 has an invalid length. [ 361.218853][T17085] 8021q: adding VLAN 0 to HW filter on device bond15 [ 361.282322][T17098] netlink: 'syz.0.2981': attribute type 2 has an invalid length. [ 361.698385][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2992'. [ 361.712098][T17129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2992'. [ 361.969775][T17140] netlink: 'syz.4.2997': attribute type 10 has an invalid length. [ 362.270158][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.284249][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.295629][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.313087][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.322998][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.692904][T17169] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 362.801687][T17179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3007'. [ 362.825231][T17179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3007'. [ 362.856947][T17182] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 362.947524][T14917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.964909][T14917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.980502][T17187] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 363.084728][T17193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3009'. [ 363.168988][T14917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.179478][T14917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.250369][T17201] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3011'. [ 363.346867][T14917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.358542][T14917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.371253][T17206] netlink: 'syz.3.3012': attribute type 5 has an invalid length. [ 363.413585][T17206] xt_nat: multiple ranges no longer supported [ 363.538064][T14917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.548792][T14917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.347164][ T5644] Bluetooth: hci4: command tx timeout [ 364.485091][T14916] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.608671][ T6146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.696801][ T6146] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.791729][ T6162] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.930270][T14917] team0: left promiscuous mode [ 364.942829][T14917] bridge0: port 1(team0) entered disabled state [ 365.038451][T14917] pimreg: left allmulticast mode [ 365.264331][T14917] bond8 (unregistering): (slave gretap1): Releasing active interface [ 365.650713][T14917] bond7 (unregistering): (slave bridge8): Releasing backup interface [ 365.711767][T14917] bond10 (unregistering): (slave bridge9): Releasing backup interface [ 365.782505][T14917] bond0 (unregistering): Released all slaves [ 365.795930][T14917] bond1 (unregistering): Released all slaves [ 365.832408][T14917] bond2 (unregistering): Released all slaves [ 365.863890][T14917] bond3 (unregistering): Released all slaves [ 365.883814][T14917] bond4 (unregistering): Released all slaves [ 365.902880][T14917] bond5 (unregistering): Released all slaves [ 365.916024][T14917] bond6 (unregistering): Released all slaves [ 365.930795][T14917] bond7 (unregistering): Released all slaves [ 365.952011][T14917] bond8 (unregistering): Released all slaves [ 365.965338][T14917] bond9 (unregistering): Released all slaves [ 365.980308][T14917] bond10 (unregistering): Released all slaves [ 366.236794][T17311] x_tables: duplicate entry at hook 1 [ 366.247424][T14917] : left promiscuous mode [ 366.251148][T17311] __nla_validate_parse: 4 callbacks suppressed [ 366.251164][T17311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3035'. [ 366.312316][T17314] netlink: 'syz.0.3038': attribute type 1 has an invalid length. [ 366.321929][T17314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.329213][T17314] IPv6: NLM_F_CREATE should be set when creating new route [ 366.339181][T17314] netlink: 'syz.0.3038': attribute type 1 has an invalid length. [ 366.370836][T17314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.427279][ T5644] Bluetooth: hci4: command tx timeout [ 366.439688][T14917] tipc: Disabling bearer [ 366.469379][T14917] tipc: Left network mode [ 366.733562][T17307] syzkaller0: entered promiscuous mode [ 366.760405][T17307] syzkaller0: entered allmulticast mode [ 366.813543][T17151] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.832896][T17151] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.840199][T17151] bridge_slave_0: entered allmulticast mode [ 366.848130][T17151] bridge_slave_0: entered promiscuous mode [ 366.874744][T17339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3041'. [ 366.903114][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3042'. [ 368.508660][ T5644] Bluetooth: hci4: command tx timeout [ 368.679367][T17151] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.686686][T17151] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.693866][T17151] bridge_slave_1: entered allmulticast mode [ 368.701657][T17151] bridge_slave_1: entered promiscuous mode [ 368.725397][T17327] bond16: entered promiscuous mode [ 368.746275][T17327] bond16: entered allmulticast mode [ 368.765058][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 368.866311][T17151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.878926][T17151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.928223][T17151] team0: Port device team_slave_0 added [ 368.941464][T17151] team0: Port device team_slave_1 added [ 368.972767][T17151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.979894][T17151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.006117][T17151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.023052][T17373] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3044'. [ 369.025520][T17151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.046786][T17151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.073835][T17151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.095855][T17373] No such timeout policy "syz0" [ 369.134765][T17151] hsr_slave_0: entered promiscuous mode [ 369.143150][T17151] hsr_slave_1: entered promiscuous mode [ 369.152450][T17151] debugfs: 'hsr0' already exists in 'hsr' [ 369.158542][T17151] Cannot create hsr debugfs directory [ 369.207500][T14917] veth1_macvtap: left promiscuous mode [ 369.213070][T14917] veth0_macvtap: left promiscuous mode [ 369.219178][T14917] veth1_vlan: left promiscuous mode [ 369.224475][T14917] veth0_vlan: left promiscuous mode [ 369.557089][T17332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.840305][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3047'. [ 370.235190][T17151] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.408634][T17402] syzkaller1: entered promiscuous mode [ 370.423051][T17402] syzkaller1: entered allmulticast mode [ 370.445228][T17417] netlink: 'syz.4.3054': attribute type 1 has an invalid length. [ 370.473435][T17417] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3054'. [ 370.588953][ T5644] Bluetooth: hci4: command tx timeout [ 370.639327][T17151] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.744861][T17151] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.819652][T17431] syz_tun: left allmulticast mode [ 370.824615][T17433] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3058'. [ 370.842282][T17431] syz_tun: left promiscuous mode [ 370.854928][T17431] bridge0: port 3(syz_tun) entered disabled state [ 370.869363][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3059'. [ 370.904153][T17431] bridge_slave_1: left allmulticast mode [ 370.911804][T17431] bridge_slave_1: left promiscuous mode [ 370.917713][T17431] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.954473][T17431] bond0: (slave bond_slave_0): Releasing backup interface [ 370.970376][T17431] bond0: (slave bond_slave_1): Releasing backup interface [ 370.991037][T17431] team0: Port device team_slave_0 removed [ 371.008352][T17431] team0: Port device team_slave_1 removed [ 371.010487][T17443] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3062'. [ 371.023677][T17431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.023933][T17443] unsupported nlmsg_type 40 [ 371.053614][T17437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3060'. [ 371.062651][T17437] tipc: Invalid UDP bearer configuration [ 371.062701][T17437] tipc: Enabling of bearer rejected, failed to enable media [ 371.191459][T17151] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.675428][T17470] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3068'. [ 371.704706][T17472] tipc: Started in network mode [ 371.710616][T17472] tipc: Node identity f2a848532508, cluster identity 4711 [ 371.725757][T17472] tipc: Enabled bearer , priority 0 [ 371.771236][T17472] syzkaller0: entered promiscuous mode [ 371.781593][T17472] syzkaller0: entered allmulticast mode [ 371.931205][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3071'. [ 371.979004][T17472] sch_tbf: burst 122 is lower than device syzkaller0 mtu (1514) ! [ 372.009693][T17492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3073'. [ 372.062456][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3073'. [ 372.102440][T17472] tipc: Resetting bearer [ 372.141781][T17471] tipc: Resetting bearer [ 372.208147][T17471] tipc: Disabling bearer [ 372.246017][T17500] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3074'. [ 372.329916][T17151] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.370062][T17151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.399235][T17151] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.417821][T17508] netlink: 'syz.2.3076': attribute type 1 has an invalid length. [ 372.444751][T17151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.521614][T17508] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.526907][T17515] tipc: Trying to set illegal importance in message [ 372.565153][T17151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.582547][T17521] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 372.588984][T17522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3079'. [ 372.613972][T17151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.627224][T17151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 372.639414][T17151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.745749][T17521] 8021q: adding VLAN 0 to HW filter on device bond10 [ 372.956681][T17536] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.052001][T17151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.087284][T17546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3083'. [ 373.130447][T17151] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.164556][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'. [ 373.189401][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'. [ 373.199238][T14920] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.206414][T14920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.252859][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.260894][ T6162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.435333][T17565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3087'. [ 373.583725][ T5644] block nbd1: Receive control failed (result -32) [ 374.031061][T17595] syzkaller0: entered promiscuous mode [ 374.044915][T17599] netlink: 'syz.4.3095': attribute type 1 has an invalid length. [ 374.052763][T17595] syzkaller0: entered allmulticast mode [ 374.127808][T17599] netlink: 'syz.4.3095': attribute type 3 has an invalid length. [ 374.586913][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.741255][T17637] sctp: [Deprecated]: syz.4.3103 (pid 17637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.741255][T17637] Use struct sctp_sack_info instead [ 374.806825][T17151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.829308][ T5634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.102810][T17151] veth0_vlan: entered promiscuous mode [ 375.124840][T17650] syzkaller0: entered promiscuous mode [ 375.131776][T17649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.167795][T17650] syzkaller0: entered allmulticast mode [ 375.203433][T17151] veth1_vlan: entered promiscuous mode [ 375.495921][T17151] veth0_macvtap: entered promiscuous mode [ 375.531710][T17151] veth1_macvtap: entered promiscuous mode [ 375.605604][T17151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.695102][T17151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.710327][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.751762][ T1003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.764690][T17672] openvswitch: netlink: Flow actions attr not present in new flow. [ 375.805998][ T1003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.839914][ T1003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.870909][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.008317][ T1003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.255607][T14920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.298178][T14920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.434733][T14915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.467181][T14915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.908041][ T5634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.007542][T17729] __nla_validate_parse: 7 callbacks suppressed [ 377.007561][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3125'. [ 377.059921][T17730] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3126'. [ 377.400923][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.421829][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.439536][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.454590][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.469937][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.599731][T17764] openvswitch: netlink: Message has 1 unknown bytes. [ 377.624104][T17764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.767554][T17767] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 377.790428][T14917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.802415][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.815961][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.957107][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.065485][T17784] bond0: (slave bond_slave_0): Releasing backup interface [ 378.286733][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3143'. [ 378.324651][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3143'. [ 378.429721][T14916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.431692][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.445719][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.463699][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.555194][T17798] netlink: 'syz.1.3144': attribute type 2 has an invalid length. [ 378.564873][T17812] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 378.591606][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3147'. [ 378.883712][T17832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3152'. [ 378.894301][T17832] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3152'. [ 378.933127][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'. [ 378.990195][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3151'. [ 379.021659][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3154'. [ 379.056766][T14920] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.085840][T14920] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.118126][T14920] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.236887][T14920] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.271506][T17855] netlink: 'syz.4.3155': attribute type 9 has an invalid length. [ 379.282065][T17855] netlink: 'syz.4.3155': attribute type 6 has an invalid length. [ 379.506301][T17865] lo speed is unknown, defaulting to 1000 [ 379.521227][T17865] lo speed is unknown, defaulting to 1000 [ 379.546880][ T5644] Bluetooth: hci0: command tx timeout [ 379.597604][T17749] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.605796][T17749] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.613819][T17749] bridge_slave_0: entered allmulticast mode [ 379.621809][T17749] bridge_slave_0: entered promiscuous mode [ 379.637307][T17749] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.644588][T17749] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.652174][T17749] bridge_slave_1: entered allmulticast mode [ 379.660508][T17749] bridge_slave_1: entered promiscuous mode [ 379.668026][T17865] lo speed is unknown, defaulting to 1000 [ 379.700373][T17749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.721840][T17865] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 379.743546][T17749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.786871][T17865] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 379.805137][T17865] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 379.823282][T17865] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 379.908591][T17749] team0: Port device team_slave_0 added [ 379.967605][T17749] team0: Port device team_slave_1 added [ 379.972861][T17865] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 380.159237][T17749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.167549][T17749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.195064][T17749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.230766][T17865] lo speed is unknown, defaulting to 1000 [ 380.238160][T17749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.260446][T17749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.309319][T17749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.339051][T17865] lo speed is unknown, defaulting to 1000 [ 380.412298][T17865] lo speed is unknown, defaulting to 1000 [ 380.462340][T17912] netlink: 'syz.4.3164': attribute type 1 has an invalid length. [ 380.495354][T17865] lo speed is unknown, defaulting to 1000 [ 380.531406][T17749] hsr_slave_0: entered promiscuous mode [ 380.558032][T17749] hsr_slave_1: entered promiscuous mode [ 380.574483][T17749] debugfs: 'hsr0' already exists in 'hsr' [ 380.598701][T17749] Cannot create hsr debugfs directory [ 380.610497][T17865] lo speed is unknown, defaulting to 1000 [ 380.641998][T17865] lo speed is unknown, defaulting to 1000 [ 380.789814][T17933] xt_hashlimit: size too large, truncated to 1048576 [ 380.831370][T17923] xt_hashlimit: invalid interval [ 380.979318][T17941] netlink: 'syz.1.3174': attribute type 9 has an invalid length. [ 381.109162][T17749] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.139017][T17749] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.214910][T17948] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 381.283156][T17749] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.315085][T17749] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.539153][T17955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.551674][T17955] bond0 (unregistering): Released all slaves [ 381.569256][T17749] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.590686][T17749] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.627435][ T5644] Bluetooth: hci0: command tx timeout [ 381.702570][T17749] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.725581][T17749] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.012894][T17987] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 382.083115][T17987] __nla_validate_parse: 13 callbacks suppressed [ 382.083133][T17987] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3187'. [ 382.125890][T17749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 382.149635][T17749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.166448][T17749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 382.182918][T17749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.202266][T17749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.213255][T17749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.222793][T17749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.238186][T17749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.261548][T17991] syzkaller0: entered promiscuous mode [ 382.272697][T17991] syzkaller0: entered allmulticast mode [ 382.281065][T17998] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 382.445208][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3192'. [ 382.480111][T18012] syzkaller0: entered promiscuous mode [ 382.495846][T18012] syzkaller0: entered allmulticast mode [ 382.603904][T18025] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3196'. [ 382.621705][T17749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.722516][T17749] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.768547][T14917] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.775739][T14917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.865375][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.872579][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.123810][T18052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3203'. [ 383.129040][T18055] net_ratelimit: 16 callbacks suppressed [ 383.129056][T18055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.169363][T18052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3203'. [ 383.207353][T18052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3203'. [ 383.223556][T18061] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3203'. [ 383.290560][T18066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3206'. [ 383.349088][T18067] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.462652][T18070] netlink: 'syz.4.3207': attribute type 49 has an invalid length. [ 383.707873][ T5644] Bluetooth: hci0: command tx timeout [ 383.736598][T18085] netlink: 'syz.4.3211': attribute type 39 has an invalid length. [ 384.195636][T17749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.318268][T17749] veth0_vlan: entered promiscuous mode [ 384.360963][T17749] veth1_vlan: entered promiscuous mode [ 384.387698][T18127] tipc: Enabling of bearer rejected, already enabled [ 384.440140][T18127] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 384.451080][T17749] veth0_macvtap: entered promiscuous mode [ 384.460915][T18127] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 384.477185][T17749] veth1_macvtap: entered promiscuous mode [ 384.523075][T18132] netlink: 'syz.4.3222': attribute type 1 has an invalid length. [ 384.524130][T17749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.554696][T18132] 8021q: adding VLAN 0 to HW filter on device bond18 [ 384.565826][T18132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3222'. [ 384.566440][T17749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.609293][T14920] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.628686][T14920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.641971][T14920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.679579][T14920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.800451][T14920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.818952][T14920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.884590][T14915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.904521][T14915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.165212][T18151] team0: Device gtp0 is up. Set it down before adding it as a team port [ 385.475211][T18162] netlink: 'syz.1.3232': attribute type 3 has an invalid length. [ 385.614092][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.636478][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.652447][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.662711][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.672311][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.786458][ T5644] Bluetooth: hci0: command tx timeout [ 385.798733][T18162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3232'. [ 386.065058][T14920] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.153337][T18191] veth1_macvtap: left promiscuous mode [ 386.173956][T18193] SET target dimension over the limit! [ 386.250774][T14920] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.394878][T14920] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.458582][T18167] lo speed is unknown, defaulting to 1000 [ 386.500301][T14920] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.759775][T14915] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.839800][T14915] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.934416][T14916] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.992586][T18225] netlink: 'syz.3.3248': attribute type 1 has an invalid length. [ 387.018156][ T6146] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.254356][T14920] bond10 (unregistering): (slave gretap1): Releasing active interface [ 387.266752][T14920] tipc: Disabling bearer [ 387.343404][T14920] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 387.796796][ T5644] Bluetooth: hci3: command tx timeout [ 387.810259][T14920] bond0 (unregistering): Released all slaves [ 387.820400][T14920] bond1 (unregistering): Released all slaves [ 387.833523][T14920] bond2 (unregistering): Released all slaves [ 387.853057][T14920] bond3 (unregistering): Released all slaves [ 387.867540][T14920] bond4 (unregistering): Released all slaves [ 387.881880][T14920] bond5 (unregistering): Released all slaves [ 387.895398][T14920] bond6 (unregistering): Released all slaves [ 387.918520][T14920] bond7 (unregistering): Released all slaves [ 387.931828][T14920] bond8 (unregistering): Released all slaves [ 387.944512][T14920] bond9 (unregistering): Released all slaves [ 387.960586][T14920] bond10 (unregistering): Released all slaves [ 387.974908][T14920] bond11 (unregistering): Released all slaves [ 387.998034][T14920] bond12 (unregistering): Released all slaves [ 388.012586][T14920] bond13 (unregistering): Released all slaves [ 388.025634][T14920] bond14 (unregistering): Released all slaves [ 388.047576][T14920] bond15 (unregistering): Released all slaves [ 388.061142][T14920] bond16 (unregistering): Released all slaves [ 388.074529][T14920] bond17 (unregistering): Released all slaves [ 388.092245][T14920] bond18 (unregistering): Released all slaves [ 388.110886][T18225] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 388.435461][T14920] : left promiscuous mode [ 388.535217][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.576280][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.583612][T18167] bridge_slave_0: entered allmulticast mode [ 388.605296][T18167] bridge_slave_0: entered promiscuous mode [ 388.624625][T14920] : left promiscuous mode [ 388.664460][T18248] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 388.724773][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.760797][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.779535][T18167] bridge_slave_1: entered allmulticast mode [ 388.802827][T18167] bridge_slave_1: entered promiscuous mode [ 388.930547][T14920] tipc: Disabling bearer [ 388.960762][T14920] tipc: Left network mode [ 388.965411][T18265] syzkaller0: entered promiscuous mode [ 388.987495][T18265] syzkaller0: entered allmulticast mode [ 389.095628][T18167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.116479][T18278] netlink: 'syz.2.3260': attribute type 1 has an invalid length. [ 389.202991][T18284] __nla_validate_parse: 2 callbacks suppressed [ 389.203011][T18284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'. [ 389.232105][T18287] netlink: 'syz.1.3259': attribute type 83 has an invalid length. [ 389.291401][T18278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.349597][T18167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.412532][T18281] sit1: entered promiscuous mode [ 389.418953][T18281] sit1: entered allmulticast mode [ 389.593075][T18167] team0: Port device team_slave_0 added [ 389.698325][T18167] team0: Port device team_slave_1 added [ 389.721921][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 389.772866][T18312] netlink: 'syz.3.3267': attribute type 1 has an invalid length. [ 389.783357][T18312] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3267'. [ 389.811387][T18312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3267'. [ 389.865710][T18312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.876577][ T5644] Bluetooth: hci3: command tx timeout [ 389.897033][T18167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.918068][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.944636][T18167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.045056][T18318] netem: change failed [ 390.070499][T18167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.097074][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.133523][T18167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.168663][T18334] tipc: Started in network mode [ 390.187707][T18334] tipc: Node identity ac14140f, cluster identity 4711 [ 390.205280][T18334] tipc: New replicast peer: 255.255.255.255 [ 390.212602][T18334] tipc: Enabled bearer , priority 10 [ 390.583267][T18352] xt_hashlimit: size too large, truncated to 1048576 [ 390.605762][T18167] hsr_slave_0: entered promiscuous mode [ 390.639203][T18167] hsr_slave_1: entered promiscuous mode [ 390.661264][T18167] debugfs: 'hsr0' already exists in 'hsr' [ 390.674610][T18167] Cannot create hsr debugfs directory [ 390.891011][T14920] veth1_vlan: left allmulticast mode [ 390.901402][T14920] veth1_vlan: left promiscuous mode [ 391.128701][T14920] smc: removing net device team0 with user defined pnetid SYZ2 [ 391.164228][T18368] syzkaller0: entered promiscuous mode [ 391.171221][T18368] syzkaller0: entered allmulticast mode [ 391.181817][T18369] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3276'. [ 391.379359][ T5746] tipc: Node number set to 2886997007 [ 391.442384][T18373] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.3277'. [ 391.518486][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3279'. [ 391.621887][T18167] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.679235][T18387] Bluetooth: MGMT ver 1.23 [ 391.724530][T18384] tap0: tun_chr_ioctl cmd 1074025672 [ 391.733950][T18384] tap0: ignored: set checksum disabled [ 391.789732][T18167] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.804895][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3281'. [ 391.923108][T18167] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.947875][ T5644] Bluetooth: hci3: command tx timeout [ 392.200814][T18167] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.283636][T18424] syzkaller0: entered promiscuous mode [ 392.295984][T18424] syzkaller0: entered allmulticast mode [ 392.374673][T14922] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 393.683699][T18497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3290'. [ 393.694847][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 393.727668][T18497] macvlan0: entered allmulticast mode [ 393.733226][T18497] dummy0: entered allmulticast mode [ 393.742748][T18497] dummy0: entered promiscuous mode [ 394.026186][ T5644] Bluetooth: hci3: command tx timeout [ 395.224536][T18427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.268243][T18167] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.317023][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.406779][T18167] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.419972][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 395.439083][T18167] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.465589][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 395.480568][T18167] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.517690][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.595042][T18585] block nbd0: Unsupported socket: should be TCP or UNIX. [ 395.630826][T18574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3293'. [ 395.762569][T18574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3293'. [ 395.812724][T18596] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 395.853363][T18167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.921919][T18612] netlink: 'syz.3.3298': attribute type 11 has an invalid length. [ 396.058565][T18612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'. [ 396.290668][T18613] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 396.335434][T18638] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 396.575005][T18652] netlink: 'syz.0.3305': attribute type 4 has an invalid length. [ 396.583914][T18652] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3305'. [ 396.688706][T18643] syzkaller0: entered promiscuous mode [ 396.694323][T18643] syzkaller0: entered allmulticast mode [ 396.931203][T18666] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3307'. [ 398.617076][T18167] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.671081][T14917] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.678273][T14917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.781520][T14920] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.788723][T14920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.812010][T18685] IPv6: NLM_F_CREATE should be specified when creating new route [ 399.394376][T18717] bond11 (unregistering): Released all slaves [ 399.510614][T18737] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3320'. [ 399.543125][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3321'. [ 399.947447][T18167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.980354][T18753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3325'. [ 400.160482][T18761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3328'. [ 400.341146][T18767] netlink: 'syz.2.3329': attribute type 1 has an invalid length. [ 400.506008][T18773] syz_tun: entered allmulticast mode [ 400.589796][T18773] syzkaller0: entered promiscuous mode [ 400.608508][T18773] syzkaller0: entered allmulticast mode [ 400.634015][T18775] ’’’’’’: renamed from virt_wifi0 (while UP) [ 400.663202][T18782] netlink: 'syz.1.3335': attribute type 1 has an invalid length. [ 400.674986][T18782] netlink: 'syz.1.3335': attribute type 1 has an invalid length. [ 400.683527][T18782] netlink: 'syz.1.3335': attribute type 1 has an invalid length. [ 400.691574][T18782] netlink: 'syz.1.3335': attribute type 2 has an invalid length. [ 400.700064][T18782] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3335'. [ 400.757029][T18785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3333'. [ 400.783410][T18167] veth0_vlan: entered promiscuous mode [ 400.821282][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'. [ 400.833581][T18788] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 400.842850][T18167] veth1_vlan: entered promiscuous mode [ 400.869546][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 400.881614][T18167] veth0_macvtap: entered promiscuous mode [ 400.896543][T18785] macvlan2: entered promiscuous mode [ 400.901953][T18785] macvlan2: entered allmulticast mode [ 400.914127][T18167] veth1_macvtap: entered promiscuous mode [ 400.959334][T18167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.998459][T18167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.038197][T14915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.055932][T14915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.079394][T14915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.094485][T14915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.340118][T18805] netlink: 'syz.3.3340': attribute type 3 has an invalid length. [ 403.353843][T18817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3343'. [ 403.509249][T18822] netlink: 'syz.3.3344': attribute type 268 has an invalid length. [ 403.516500][T18824] netlink: 'syz.2.3345': attribute type 12 has an invalid length. [ 403.525125][T18824] netlink: 'syz.2.3345': attribute type 29 has an invalid length. [ 403.534862][T18824] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3345'. [ 403.564462][T14916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.590185][T14916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.616369][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3345'. [ 403.662683][T18832] gtp0: entered promiscuous mode [ 403.671674][T18832] gtp0: entered allmulticast mode [ 403.672295][ T29] audit: type=1800 audit(1781016188.815:12): pid=18829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3347" name="memory.events" dev="tmpfs" ino=329 res=0 errno=0 [ 403.680868][T18824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.741165][T18824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.760035][T18839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3349'. [ 403.803232][T14920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.819917][T14920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.899976][T18844] : renamed from vlan0 (while UP) [ 403.909697][T18846] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3350'. [ 403.952077][T18849] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 404.115917][T18861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3229'. [ 404.413011][T18879] netlink: 'syz.4.3357': attribute type 30 has an invalid length. [ 404.552858][T18879] tipc: Started in network mode [ 404.580117][T18879] tipc: Node identity e6e1835405e3, cluster identity 4711 [ 404.624885][T18879] tipc: Enabled bearer , priority 0 [ 404.711958][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.724440][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.740963][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.758861][T18879] tipc: Resetting bearer [ 404.770647][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.781420][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.961339][T18878] tipc: Disabling bearer [ 405.040541][T18896] syzkaller0: entered promiscuous mode [ 405.055395][T18896] syzkaller0: entered allmulticast mode [ 405.258052][T14922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.278388][T14922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.543999][T18942] netlink: 'syz.2.3367': attribute type 11 has an invalid length. [ 405.601531][T14922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.631692][T14922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.754887][T14922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.803576][T14922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.853091][T18951] netlink: 'syz.0.3369': attribute type 21 has an invalid length. [ 406.020349][T18951] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 406.049826][T18951] bond2 (unregistering): Released all slaves [ 406.093425][T18963] xt_hashlimit: size too large, truncated to 1048576 [ 406.095112][T18967] netlink: 'syz.2.3372': attribute type 9 has an invalid length. [ 406.138065][T14922] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.156314][T14922] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.307722][T18898] lo speed is unknown, defaulting to 1000 [ 406.339622][T18975] __nla_validate_parse: 6 callbacks suppressed [ 406.339640][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3376'. [ 406.591831][T14917] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.630530][T18978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3377'. [ 406.652729][T18989] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3381'. [ 406.662171][ T5739] IPVS: starting estimator thread 0... [ 406.673215][T18989] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3381'. [ 406.714261][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3382'. [ 406.727053][T14920] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.756210][T18993] IPVS: using max 36 ests per chain, 86400 per kthread [ 406.805463][T19001] xt_CT: You must specify a L4 protocol and not use inversions on it [ 406.817648][T18998] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 406.898436][T19005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3384'. [ 406.916565][ T5635] Bluetooth: hci1: command tx timeout [ 407.022691][T14915] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.170389][T19007] bridge3: port 1(veth3) entered blocking state [ 407.178488][T19007] bridge3: port 1(veth3) entered disabled state [ 407.185860][T19007] veth3: entered allmulticast mode [ 407.201883][T19007] veth3: entered promiscuous mode [ 407.215415][T19013] bridge3: port 2(veth0_to_bond) entered blocking state [ 407.235111][T19013] bridge3: port 2(veth0_to_bond) entered disabled state [ 407.242893][T19013] veth0_to_bond: entered allmulticast mode [ 407.255504][T19013] veth0_to_bond: entered promiscuous mode [ 407.263603][T19013] bridge3: port 2(veth0_to_bond) entered blocking state [ 407.270724][T19013] bridge3: port 2(veth0_to_bond) entered forwarding state [ 407.316014][T14915] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.332639][T19005] tipc: Enabled bearer , priority 10 [ 407.342903][T19021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3386'. [ 407.744744][T19041] netlink: 'syz.2.3390': attribute type 1 has an invalid length. [ 408.130945][T14922] bond7 (unregistering): (slave bridge7): Releasing active interface [ 408.353737][T14922] bond0 (unregistering): Released all slaves [ 408.363896][T14922] bond1 (unregistering): Released all slaves [ 408.377589][T14922] bond2 (unregistering): Released all slaves [ 408.394912][T14922] bond3 (unregistering): Released all slaves [ 408.414104][T14922] bond4 (unregistering): Released all slaves [ 408.430249][T14922] bond5 (unregistering): Released all slaves [ 408.443810][T14922] bond6 (unregistering): Released all slaves [ 408.466318][T14922] bond7 (unregistering): Released all slaves [ 408.482407][T14922] bond8 (unregistering): Released all slaves [ 408.495528][T14922] bond9 (unregistering): Released all slaves [ 408.511354][T14922] bond10 (unregistering): Released all slaves [ 408.549770][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 408.648195][ T54] tipc: Node number set to 3617605715 [ 408.704110][T14922] : left promiscuous mode [ 408.879291][T14922] : left promiscuous mode [ 408.979666][T19068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3396'. [ 408.989826][ T5635] Bluetooth: hci1: command tx timeout [ 409.077502][T19058] vlan2: entered promiscuous mode [ 409.114438][T19058] geneve1: entered promiscuous mode [ 409.127467][T19058] vlan2: entered allmulticast mode [ 409.142608][T19058] geneve1: entered allmulticast mode [ 409.162690][T19072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3397'. [ 409.179057][T14922] tipc: Disabling bearer [ 409.194519][T14922] tipc: Left network mode [ 409.434782][T19083] tipc: Started in network mode [ 409.451316][T19083] tipc: Node identity e0000001, cluster identity 4711 [ 409.472801][T19083] tipc: Enabling of bearer rejected, failed to enable media [ 409.951652][T18898] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.978584][T19116] sctp: [Deprecated]: syz.0.3406 (pid 19116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.978584][T19116] Use struct sctp_sack_info instead [ 409.981687][T18898] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.044316][T18898] bridge_slave_0: entered allmulticast mode [ 410.058388][T18898] bridge_slave_0: entered promiscuous mode [ 410.109137][T18898] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.135549][T18898] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.154665][T18898] bridge_slave_1: entered allmulticast mode [ 410.183718][T18898] bridge_slave_1: entered promiscuous mode [ 410.404597][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3411'. [ 410.442672][T18898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.531339][T18898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.564420][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 410.715956][T18898] team0: Port device team_slave_0 added [ 410.731582][T18898] team0: Port device team_slave_1 added [ 410.935869][T18898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.963738][T18898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.055740][T18898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.068543][ T5635] Bluetooth: hci1: command tx timeout [ 411.086002][T18898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.112289][T18898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.139346][T18898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.195784][T19178] vcan0: entered allmulticast mode [ 411.214527][T19183] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 411.462316][T18898] hsr_slave_0: entered promiscuous mode [ 411.489889][T18898] hsr_slave_1: entered promiscuous mode [ 411.505988][T18898] debugfs: 'hsr0' already exists in 'hsr' [ 411.527288][T18898] Cannot create hsr debugfs directory [ 411.577528][T19198] tipc: Enabled bearer , priority 0 [ 411.733709][T19198] tipc: Disabling bearer [ 411.779630][T19213] __nla_validate_parse: 2 callbacks suppressed [ 411.779645][T19213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3430'. [ 411.968297][T19214] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 412.011774][T19214] bond2: (slave lo): Enslaving as an active interface with an up link [ 412.031074][T19214] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 412.082472][T19220] bond0: entered promiscuous mode [ 412.094431][T19220] bond_slave_0: entered promiscuous mode [ 412.114668][T19220] bond_slave_1: entered promiscuous mode [ 412.292738][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 412.500523][T19252] Bluetooth: MGMT ver 1.23 [ 413.150717][T14922] hsr_slave_0: left promiscuous mode [ 413.156573][ T5635] Bluetooth: hci1: command tx timeout [ 413.173511][T14922] hsr_slave_1: left promiscuous mode [ 413.282671][T14922] dummy0: left allmulticast mode [ 413.292894][T14922] veth0_macvtap: left promiscuous mode [ 413.462009][T14922] pim6reg (unregistering): left allmulticast mode [ 413.561785][T14922] team0 (unregistering): Port device batadv1 removed [ 414.051778][T19303] Cannot find del_set index 0 as target [ 414.231704][T18898] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.437354][T19327] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 414.445774][T19323] x_tables: unsorted underflow at hook 1 [ 414.565781][T18898] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.609885][T19331] lo: entered promiscuous mode [ 414.652720][T19338] xt_limit: Overflow, try lower: 604147548/4200216962 [ 414.658663][T19331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.732574][ T5634] lo speed is unknown, defaulting to 1000 [ 414.754975][ T5634] syś2: Port: 1 Link DOWN [ 414.819300][T18898] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.887851][T14922] IPVS: stop unused estimator thread 0... [ 415.063923][T18898] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.213856][T19369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3467'. [ 415.614897][T19378] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20004 [ 415.639764][T18898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 415.658733][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.684201][T18898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 415.728245][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.745418][T18898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.811654][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.839324][T18898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 415.861504][T19392] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3472'. [ 415.883541][T19395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3473'. [ 415.908610][T18898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.097362][T19414] netlink: 'syz.1.3475': attribute type 1 has an invalid length. [ 416.143996][T19414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3475'. [ 416.380764][T18898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.457642][T19435] netlink: 'syz.0.3480': attribute type 1 has an invalid length. [ 416.466524][T19435] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3480'. [ 416.487982][T19435] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3480'. [ 416.506638][T19435] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3480'. [ 416.551579][T18898] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.583141][T14920] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.590347][T14920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.671899][T14920] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.679074][T14920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.869820][T19455] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 417.090772][T19458] syzkaller0: entered promiscuous mode [ 417.106925][T19458] syzkaller0: entered allmulticast mode [ 417.133221][T19458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3487'. [ 417.668147][T19497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3496'. [ 418.244069][T19509] tipc: Disabling bearer [ 418.310310][T19526] IPVS: set_ctl: invalid protocol: 41 172.30.0.2:20000 [ 418.354139][T18898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.624574][T18898] veth0_vlan: entered promiscuous mode [ 418.674959][T18898] veth1_vlan: entered promiscuous mode [ 418.819888][T18898] veth0_macvtap: entered promiscuous mode [ 418.877734][T18898] veth1_macvtap: entered promiscuous mode [ 418.924409][T18898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.994911][T18898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.058152][T14915] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.093950][T14915] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.154031][T14915] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.197072][T14915] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.399952][T19576] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3515'. [ 419.471804][T19576] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3515'. [ 419.613744][T19587] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 419.672999][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.719950][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.869877][T14917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.900179][T14917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.920380][T19600] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3519'. [ 419.969881][T19600] 8021q: VLANs not supported on ip6_vti0 [ 420.073583][T19611] netlink: 'syz.4.3522': attribute type 7 has an invalid length. [ 420.133082][T19611] netlink: 'syz.4.3522': attribute type 9 has an invalid length. [ 420.178762][T19611] netlink: 'syz.4.3522': attribute type 6 has an invalid length. [ 420.223966][T19619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3525'. [ 420.375693][T19617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.663547][T19617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.705783][ T5753] IPVS: starting estimator thread 0... [ 420.807787][T19647] IPVS: using max 33 ests per chain, 79200 per kthread [ 420.915792][T19617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.985468][T19662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3533'. [ 421.162044][T19617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.243238][T19678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3538'. [ 421.713967][T19707] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3544'. [ 421.725230][T14915] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.772614][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.798600][T19709] netlink: 'syz.0.3544': attribute type 1 has an invalid length. [ 421.879114][ T6146] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.916529][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.043466][T19723] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3546'. [ 422.170596][T19732] netlink: 'syz.0.3549': attribute type 2 has an invalid length. [ 422.290334][T19742] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.299885][T19742] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.311952][T19742] bridge3: port 2(veth0_to_bond) entered disabled state [ 422.365884][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3548'. [ 422.559190][T19757] macvlan0: entered promiscuous mode [ 422.653575][T19764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3555'. [ 422.682252][T19759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3552'. [ 422.700532][T19767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.808268][T19770] veth3: entered allmulticast mode [ 422.819229][T19770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3558'. [ 423.238220][T19746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.467745][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3565'. [ 423.595069][T19806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3567'. [ 423.671383][T19814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3568'. [ 423.757282][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'. [ 423.787546][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'. [ 423.810394][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3568'. [ 423.823752][T19817] xt_l2tp: invalid flags combination: 0 [ 423.900822][T19824] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 424.268121][T19843] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 424.365494][T19847] 8021q: VLANs not supported on ip_vti0 [ 424.398674][T19855] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 424.562606][T19858] openvswitch: netlink: Duplicate key (type 2). [ 424.610341][ T5739] hid-generic 0005:0007:0007.0001: item fetching failed at offset 0/1 [ 424.645203][ T5739] hid-generic 0005:0007:0007.0001: probe with driver hid-generic failed with error -22 [ 424.905015][T19884] veth1_macvtap: left promiscuous mode [ 424.917162][T19884] macsec0: entered promiscuous mode [ 424.925448][T19884] macsec0: entered allmulticast mode [ 424.951555][T19881] netlink: 'syz.1.3587': attribute type 12 has an invalid length. [ 424.981049][T19893] veth1_macvtap: entered promiscuous mode [ 424.995685][T19893] veth1_macvtap: entered allmulticast mode [ 425.003154][T19893] macsec0: left promiscuous mode [ 425.012776][T19893] macsec0: left allmulticast mode [ 425.051647][T19893] veth1_macvtap: left allmulticast mode [ 425.073563][T19881] netlink: 'syz.1.3587': attribute type 12 has an invalid length. [ 425.085729][T19881] netlink: 'syz.1.3587': attribute type 12 has an invalid length. [ 425.104194][T19881] netlink: 'syz.1.3587': attribute type 12 has an invalid length. [ 425.134120][T19881] netlink: 'syz.1.3587': attribute type 12 has an invalid length. [ 425.220455][T19881] netlink: 'syz.1.3587': attribute type 12 has an invalid length. [ 425.237107][T19881] netlink: 'syz.1.3587': attribute type 12 has an invalid length. [ 425.246452][T19881] netlink: 'syz.1.3587': attribute type 12 has an invalid length. [ 425.514413][T19911] team0: Port device team_slave_0 removed [ 426.121015][T19948] bond0: (slave gretap1): making interface the new active one [ 426.154896][T19948] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 426.284030][T19954] hsr_slave_1 (unregistering): left promiscuous mode [ 426.332770][T19959] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 426.563691][ T5766] IPVS: starting estimator thread 0... [ 426.667119][T19984] IPVS: using max 30 ests per chain, 72000 per kthread [ 426.798840][T19994] syzkaller0: entered promiscuous mode [ 426.816225][T19994] syzkaller0: entered allmulticast mode [ 427.129631][T20014] openvswitch: netlink: IP tunnel dst address not specified [ 427.385545][T20032] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 427.394689][T20034] __nla_validate_parse: 8 callbacks suppressed [ 427.394714][T20034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3643'. [ 427.783694][T20052] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.792539][T20052] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.824410][T20052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3648'. [ 427.983841][T20062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3651'. [ 427.993382][T20062] validate_nla: 59 callbacks suppressed [ 427.993400][T20062] netlink: 'syz.3.3651': attribute type 1 has an invalid length. [ 428.008201][T20062] netlink: 'syz.3.3651': attribute type 2 has an invalid length. [ 428.015970][T20062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3651'. [ 428.085385][T20062] syzkaller0: mtu less than device minimum [ 428.093704][T20062] syzkaller0: entered allmulticast mode [ 428.549097][T20093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3659'. [ 428.575080][T20093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3659'. [ 428.646358][T20106] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3659'. [ 428.688461][T20095] syzkaller0: entered promiscuous mode [ 428.714848][T20095] syzkaller0: entered allmulticast mode [ 428.754563][T20106] ¾x9’: renamed from bridge_slave_0 (while UP) [ 428.898781][T20113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3663'. [ 429.090323][T20128] netlink: 'syz.2.3668': attribute type 2 has an invalid length. [ 429.106905][T20128] netlink: 'syz.2.3668': attribute type 11 has an invalid length. [ 429.117579][T20128] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3668'. [ 429.333938][T14915] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 429.423049][T20154] netlink: 'syz.0.3674': attribute type 1 has an invalid length. [ 429.441101][T20154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.448431][T20154] IPv6: NLM_F_CREATE should be set when creating new route [ 429.482128][T20160] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3675'. [ 429.613695][T20169] xt_hashlimit: size too large, truncated to 1048576 [ 429.708151][T14917] wlan0: Trigger new scan to find an IBSS to join [ 432.090057][T20129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.353301][T20186] netlink: 'syz.4.3682': attribute type 1 has an invalid length. [ 432.651969][T20211] IPv6: NLM_F_CREATE should be specified when creating new route [ 432.758140][T14917] wlan0: Trigger new scan to find an IBSS to join [ 432.844795][T20224] __nla_validate_parse: 3 callbacks suppressed [ 432.844812][T20224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3692'. [ 435.299414][T20187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.435051][T20234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3695'. [ 435.459517][T20234] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.3695'. [ 435.523742][T20242] syz_tun: refused to change device tx_queue_len [ 435.534328][T20238] xt_hashlimit: size too large, truncated to 1048576 [ 435.535408][T20243] netlink: 'syz.1.3698': attribute type 21 has an invalid length. [ 435.583711][T20243] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3698'. [ 435.620106][T20243] netlink: 'syz.1.3698': attribute type 5 has an invalid length. [ 435.649628][T20243] netlink: 'syz.1.3698': attribute type 6 has an invalid length. [ 435.678352][T20243] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3698'. [ 435.706600][ T48] wlan0: Trigger new scan to find an IBSS to join [ 435.984965][T20274] openvswitch: netlink: IP tunnel dst address not specified [ 435.985099][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 435.994655][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3706'. [ 436.033278][T20274] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 436.192632][T20282] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3707'. [ 436.348743][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3711'. [ 436.389676][T20293] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3712'. [ 436.646214][T14917] wlan0: Creating new IBSS network, BSSID 8e:04:43:e1:0e:94 [ 436.697054][ T5766] ------------[ cut here ]------------ [ 436.704237][ T5766] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 436.714142][ T5766] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: kworker/1:6/5766 [ 436.724888][ T5766] Modules linked in: [ 436.730318][ T5766] CPU: 1 UID: 0 PID: 5766 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 436.739766][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.749882][ T5766] Workqueue: mld mld_ifc_work [ 436.754602][ T5766] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 436.760937][ T5766] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 436.780591][ T5766] RSP: 0018:ffffc90004dc6658 EFLAGS: 00010246 [ 436.786724][ T5766] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 436.794713][ T5766] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9041acd0 [ 436.802758][ T5766] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 436.810783][ T5766] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88805633ade8 [ 436.818827][ T5766] R13: 0000000000000000 R14: ffffffff9041acd0 R15: ffff888084d331f8 [ 436.826839][ T5766] FS: 0000000000000000(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 436.835782][ T5766] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.842436][ T5766] CR2: 00007f719424f156 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 436.850477][ T5766] Call Trace: [ 436.853767][ T5766] [ 436.856783][ T5766] rate_control_send_low+0x1a7/0x7b0 [ 436.862081][ T5766] ? __skb_flow_dissect+0x2545/0x6e80 [ 436.867544][ T5766] rate_control_get_rate+0x20b/0x5d0 [ 436.872863][ T5766] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 436.878551][ T5766] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 436.884639][ T5766] invoke_tx_handlers_late+0xba/0x18a0 [ 436.890162][ T5766] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 436.896111][ T5766] ieee80211_tx_dequeue+0x403e/0x54d0 [ 436.901521][ T5766] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 436.907288][ T5766] ? ieee80211_next_txq+0x82e/0x9a0 [ 436.912503][ T5766] ieee80211_handle_wake_tx_queue+0x132/0x2c0 [ 436.918617][ T5766] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 436.925223][ T5766] ? ieee80211_queue_skb+0x182d/0x22c0 [ 436.930730][ T5766] ? __local_bh_enable_ip+0xd0/0x130 [ 436.936023][ T5766] ieee80211_queue_skb+0x1a1f/0x22c0 [ 436.941370][ T5766] ieee80211_tx+0x2c2/0x4b0 [ 436.945892][ T5766] ? __pfx_ieee80211_tx+0x10/0x10 [ 436.951011][ T5766] ? ieee80211_xmit+0x315/0x400 [ 436.955887][ T5766] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 436.961917][ T5766] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 436.968109][ T5766] ? process_scheduled_works+0xb5d/0x1860 [ 436.973823][ T5766] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 436.980276][ T5766] ? skb_network_protocol+0x23d/0x400 [ 436.985655][ T5766] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 436.991937][ T5766] ieee80211_subif_start_xmit+0xf3/0x570 [ 436.997622][ T5766] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 437.003865][ T5766] ? __pfx_netif_skb_features+0x10/0x10 [ 437.009481][ T5766] dev_hard_start_xmit+0x2cd/0x830 [ 437.014613][ T5766] __dev_queue_xmit+0x14d9/0x3950 [ 437.019681][ T5766] ? __dev_queue_xmit+0x2b6/0x3950 [ 437.024811][ T5766] ? __pfx___dev_queue_xmit+0x10/0x10 [ 437.030218][ T5766] ? neigh_resolve_output+0x438/0x750 [ 437.035603][ T5766] ? eth_header+0x11b/0x200 [ 437.040142][ T5766] ? __asan_memcpy+0x40/0x70 [ 437.044759][ T5766] ? ip6_output+0x126/0x550 [ 437.049311][ T5766] ip6_output+0x340/0x550 [ 437.053651][ T5766] ? __pfx_ip6_output+0x10/0x10 [ 437.058540][ T5766] NF_HOOK+0x177/0x4f0 [ 437.062655][ T5766] ? __pfx_NF_HOOK+0x10/0x10 [ 437.067281][ T5766] ? __pfx_dst_output+0x10/0x10 [ 437.072150][ T5766] ? lockdep_hardirqs_on+0x7a/0x110 [ 437.077399][ T5766] ? __local_bh_enable_ip+0xd0/0x130 [ 437.082697][ T5766] ? icmp6_dst_alloc+0x3a6/0x440 [ 437.087710][ T5766] mld_sendpack+0x8b4/0xe40 [ 437.092252][ T5766] ? mld_sendpack+0x213/0xe40 [ 437.096993][ T5766] ? __pfx_mld_sendpack+0x10/0x10 [ 437.102085][ T5766] mld_ifc_work+0x835/0xe70 [ 437.106676][ T5766] ? process_scheduled_works+0xa70/0x1860 [ 437.112414][ T5766] process_scheduled_works+0xb5d/0x1860 [ 437.118053][ T5766] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.124050][ T5766] ? assign_work+0x3d5/0x5e0 [ 437.128678][ T5766] worker_thread+0xa53/0xfc0 [ 437.133290][ T5766] kthread+0x389/0x470 [ 437.137397][ T5766] ? __pfx_worker_thread+0x10/0x10 [ 437.142509][ T5766] ? __pfx_kthread+0x10/0x10 [ 437.147141][ T5766] ret_from_fork+0x514/0xb70 [ 437.151736][ T5766] ? __pfx_ret_from_fork+0x10/0x10 [ 437.156887][ T5766] ? __switch_to+0xc79/0x1410 [ 437.161590][ T5766] ? __pfx_kthread+0x10/0x10 [ 437.166231][ T5766] ret_from_fork_asm+0x1a/0x30 [ 437.171029][ T5766] [ 437.174056][ T5766] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 437.181324][ T5766] CPU: 1 UID: 0 PID: 5766 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 437.190675][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.200719][ T5766] Workqueue: mld mld_ifc_work [ 437.205394][ T5766] Call Trace: [ 437.208658][ T5766] [ 437.211576][ T5766] vpanic+0x56c/0xa60 [ 437.215555][ T5766] ? __pfx__printk+0x10/0x10 [ 437.220138][ T5766] ? __pfx_vpanic+0x10/0x10 [ 437.224622][ T5766] ? is_bpf_text_address+0x292/0x2b0 [ 437.229891][ T5766] ? is_bpf_text_address+0x26/0x2b0 [ 437.235079][ T5766] panic+0xc5/0xd0 [ 437.238784][ T5766] ? __pfx_panic+0x10/0x10 [ 437.243186][ T5766] ? ret_from_fork_asm+0x1a/0x30 [ 437.248111][ T5766] __warn+0x315/0x4c0 [ 437.252073][ T5766] ? __rate_control_send_low+0x524/0x800 [ 437.257692][ T5766] ? __rate_control_send_low+0x524/0x800 [ 437.263310][ T5766] __report_bug+0x29a/0x540 [ 437.267805][ T5766] ? __rate_control_send_low+0x524/0x800 [ 437.273433][ T5766] ? __pfx___report_bug+0x10/0x10 [ 437.278455][ T5766] ? lock_acquire+0x106/0x350 [ 437.283128][ T5766] report_bug_entry+0x19a/0x290 [ 437.287965][ T5766] ? __rate_control_send_low+0x5bb/0x800 [ 437.293585][ T5766] ? __rate_control_send_low+0x5c0/0x800 [ 437.299203][ T5766] handle_bug+0xce/0x200 [ 437.303432][ T5766] exc_invalid_op+0x1a/0x50 [ 437.307924][ T5766] asm_exc_invalid_op+0x1a/0x20 [ 437.312758][ T5766] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 437.318988][ T5766] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 437.338582][ T5766] RSP: 0018:ffffc90004dc6658 EFLAGS: 00010246 [ 437.344640][ T5766] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 437.352593][ T5766] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9041acd0 [ 437.360556][ T5766] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 437.368513][ T5766] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88805633ade8 [ 437.376475][ T5766] R13: 0000000000000000 R14: ffffffff9041acd0 R15: ffff888084d331f8 [ 437.384442][ T5766] ? __rate_control_send_low+0x58d/0x800 [ 437.390070][ T5766] rate_control_send_low+0x1a7/0x7b0 [ 437.395356][ T5766] ? __skb_flow_dissect+0x2545/0x6e80 [ 437.400720][ T5766] rate_control_get_rate+0x20b/0x5d0 [ 437.405993][ T5766] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 437.411623][ T5766] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 437.417696][ T5766] invoke_tx_handlers_late+0xba/0x18a0 [ 437.423161][ T5766] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 437.429059][ T5766] ieee80211_tx_dequeue+0x403e/0x54d0 [ 437.434448][ T5766] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 437.440158][ T5766] ? ieee80211_next_txq+0x82e/0x9a0 [ 437.445356][ T5766] ieee80211_handle_wake_tx_queue+0x132/0x2c0 [ 437.451414][ T5766] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 437.457992][ T5766] ? ieee80211_queue_skb+0x182d/0x22c0 [ 437.463451][ T5766] ? __local_bh_enable_ip+0xd0/0x130 [ 437.468730][ T5766] ieee80211_queue_skb+0x1a1f/0x22c0 [ 437.474026][ T5766] ieee80211_tx+0x2c2/0x4b0 [ 437.478528][ T5766] ? __pfx_ieee80211_tx+0x10/0x10 [ 437.483560][ T5766] ? ieee80211_xmit+0x315/0x400 [ 437.488405][ T5766] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 437.494379][ T5766] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 437.500527][ T5766] ? process_scheduled_works+0xb5d/0x1860 [ 437.506234][ T5766] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 437.512635][ T5766] ? skb_network_protocol+0x23d/0x400 [ 437.517994][ T5766] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 437.524238][ T5766] ieee80211_subif_start_xmit+0xf3/0x570 [ 437.529858][ T5766] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 437.536091][ T5766] ? __pfx_netif_skb_features+0x10/0x10 [ 437.541718][ T5766] dev_hard_start_xmit+0x2cd/0x830 [ 437.546825][ T5766] __dev_queue_xmit+0x14d9/0x3950 [ 437.551839][ T5766] ? __dev_queue_xmit+0x2b6/0x3950 [ 437.556946][ T5766] ? __pfx___dev_queue_xmit+0x10/0x10 [ 437.562308][ T5766] ? neigh_resolve_output+0x438/0x750 [ 437.567688][ T5766] ? eth_header+0x11b/0x200 [ 437.572177][ T5766] ? __asan_memcpy+0x40/0x70 [ 437.576768][ T5766] ? ip6_output+0x126/0x550 [ 437.581259][ T5766] ip6_output+0x340/0x550 [ 437.585576][ T5766] ? __pfx_ip6_output+0x10/0x10 [ 437.590415][ T5766] NF_HOOK+0x177/0x4f0 [ 437.594475][ T5766] ? __pfx_NF_HOOK+0x10/0x10 [ 437.599054][ T5766] ? __pfx_dst_output+0x10/0x10 [ 437.603896][ T5766] ? lockdep_hardirqs_on+0x7a/0x110 [ 437.609077][ T5766] ? __local_bh_enable_ip+0xd0/0x130 [ 437.614344][ T5766] ? icmp6_dst_alloc+0x3a6/0x440 [ 437.619279][ T5766] mld_sendpack+0x8b4/0xe40 [ 437.623800][ T5766] ? mld_sendpack+0x213/0xe40 [ 437.628471][ T5766] ? __pfx_mld_sendpack+0x10/0x10 [ 437.633515][ T5766] mld_ifc_work+0x835/0xe70 [ 437.638035][ T5766] ? process_scheduled_works+0xa70/0x1860 [ 437.643738][ T5766] process_scheduled_works+0xb5d/0x1860 [ 437.649284][ T5766] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.655253][ T5766] ? assign_work+0x3d5/0x5e0 [ 437.659827][ T5766] worker_thread+0xa53/0xfc0 [ 437.664436][ T5766] kthread+0x389/0x470 [ 437.668520][ T5766] ? __pfx_worker_thread+0x10/0x10 [ 437.673624][ T5766] ? __pfx_kthread+0x10/0x10 [ 437.678204][ T5766] ret_from_fork+0x514/0xb70 [ 437.682779][ T5766] ? __pfx_ret_from_fork+0x10/0x10 [ 437.687903][ T5766] ? __switch_to+0xc79/0x1410 [ 437.692571][ T5766] ? __pfx_kthread+0x10/0x10 [ 437.697146][ T5766] ret_from_fork_asm+0x1a/0x30 [ 437.701907][ T5766] [ 437.705183][ T5766] Kernel Offset: disabled [ 437.709496][ T5766] Rebooting in 86400 seconds..