last executing test programs: 4.089759847s ago: executing program 3 (id=2684): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) r2 = socket$inet(0x2, 0x1, 0x10000) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000080)=0x6, 0x4) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x1, @bcast, @netrom={'nr', 0x0}, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x80000000, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4844) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f00000002c0)={0x5, 0x241f, 0x1, 0x3}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r7, 0xf10, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x26}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000) r8 = accept$ax25(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @default}, [@netrom, @default, @bcast, @null, @rose, @netrom, @rose, @rose]}, &(0x7f00000004c0)=0x48) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000000500)=@bpq0, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={r1, 0x5, 0x2}, 0x8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, r7, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x361}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) socketpair(0x9, 0x800, 0xc, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r10, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@getspdinfo={0x14, 0x25, 0x2, 0x70bd26, 0x25dfdbfb, 0x7, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x800) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x204000, 0x0) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) sendmsg$AUDIT_GET_FEATURE(r10, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3fb, 0x4, 0x70bd26, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f00000009c0)={0x0, @private, @broadcast}, &(0x7f0000000a00)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000a40)={@broadcast, @broadcast, 0x0}, &(0x7f0000000a80)=0xc) getsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f0000000ac0)={@mcast1, 0x0}, &(0x7f0000000b00)=0x14) getsockname$packet(r9, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000c40)={'ip_vti0\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x6, 0x7, {{0x14, 0x4, 0x2, 0x9, 0x50, 0x64, 0x0, 0x5, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1b}, {[@lsrr={0x83, 0x17, 0xad, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x26}, @local, @dev={0xac, 0x14, 0x14, 0x21}]}, @generic={0x88, 0x9, "460d36b384609a"}, @end, @timestamp={0x44, 0x18, 0x21, 0x0, 0x4, [0xffff, 0x0, 0x0, 0x7, 0x0]}]}}}}}) getsockopt$inet6_mreq(r10, 0x29, 0x1c, &(0x7f0000000c80)={@empty, 0x0}, &(0x7f0000000cc0)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002740)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002700)={&(0x7f00000010c0)={0x1618, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x10c8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'nr'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'bpq0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'hash:ip\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'hash:ip\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "1c8b3144e1658d8dedbcc381a6a6ceb79c402e9f56d3598464db871b1e6a9d734d9727aca2977a795a9357b40add164979e95f10c6b3eaca77f08be6c3018006df9239cbe7c3373a4850106daf95fa17434802abb5f8c7ab6f302cbc3fda75d4b10767cc21a22ee16199887086e0e2551ca9b4e3ead51ca1020331ee35eebf9468bca1e2619ee1d497d015e8e5905c96b0f7974907f4e4a60c7a6779a92c7de8ae357dd8329d4816b3f6cb0fc4a978cd7f837250d7d6d692612cb8dcd510a107815732ff33c80c2825ce4b734d9b481b140e9de44e230a2e816331b942f6eb526ddbeb20262ff66cacbda3ad51a0f06ceafc3f2313a6be6d148868b3a587b43d9de7c4de28217a68184166fbd73dbd8ce7b38e19a70d4018f3115a74fc3d6845c6f2a24a1735d48f676256f1d71c0a1aa325113d6a1cae4516fcb10265a0615788742cfde58c3fa741b1f32e8ef06c2c1bbf25272464c93f48425af0f3c753c43ea74f35ccc81f89734dfaeb5f02fe07d18b32e323ea548a2365a1ee424220bd0d25ab79fc21b5e60a77b06ec7c7fa10a19722c8067df53a823e9e1165064335cd355ddfe1f23b68b6b1fd399379cf8beb6b0acad324bfb9a25b2759bcab1453a4dccb292f2dbe6b25c88fead677128ecd602d75cf467ffce6707e70b812032e636f419e38561edf741d7950a1a88d852e8440ad41892c8b7bb90e04a9126cf034d3c4f177f9a888931d762785250d3dc329a72a27e15f3f8620f7dbd640bf29b35192af9a7cef4c43b8d4ff227094accf034ed7317f73ec65ed4f52f17ad6a69e22bc8bd048161dbf6c10d180667e84c0f3bfd057734557ff8ca33894bdd588b84d04068cb2f2b7fc0cc40196c17fef046c47a608264c8365fb691956fd764b9ff838d57a9d63af1d7b1aaccb598b9aa76d35712de6eb2cd6965e736f48cedaa3da630a8b3db83d8b92ab4da7601d877ed0e113d8a89dab99e36e3c14084e819253372b6c010621522acbae399e0130fd58bfb6ff4bcfc06e57b7c4d9960b7a4b6f428f13b11b17cdfb58630015a8b425fbb949921cfc2b5adb96237c1f913cbaab5d734a89a0df8247c9d3ae22e0ec73a7249cc84e8c09b44bf94c38262d8f94f529dbf33309840dd29344771f5bd4385036e0d2a5aa71af747216f50ec20187bb24750728ec1faa089aa1f3e2e7c0a2dd46cf328eb52ba62820b55834a31b6c85d1e8f2d1dc5e9966887b755149bd3c4767ab14cccbe6c85680c03eff0645e2a7b75edbddb5b4e6bcec403560171a71b036a2f128e27aabcf7d804d2cb0140ed36a1bfd6c8d2cdecac4ed64dc75e999c801886e557d0080e5839e15fa245b2ecd05aedbf73111f893cece3f12101f0dc4365a15c18c2987f4190ef05a5c0e56a8d1bbd7b432da381fc67e8cd3a7ac126e38490d08ec9e556b0dbe69434a76ea83db9b3bce84b3dc57152a9c4baa7ca7c47631970a43423baaa0857ec27584c93fd153c987b9b1d14435d0c34ab5fbefc26bf9227230f0f58c424c577a4ebf447aef6e37f0851e8e29c414bf8394f186c86865ff33b368d9b80d44b35fd21b9367cfbec9da1748481d50a5da6672664513b0f9c95111637e90425ebc357bfd0ecef6022703180e9e9c55a331d2abd649317fe9de4ec91ba1360edebb0b07b53c2d3b07ea0846a2e6bba0fee6cbb17007cea4c18f43c48db9820358aa3a642d379dce8e3a610c7a0c44e7196094ea29c875740ed4277b970d61ad25cbb55daf184599b0f87970aaa4a1a0e5677bf5037b8c19fea2c3e10970979236c65aad4a877578c487c546773101b9b41e87cac846cb96b343d9791e964a932933eacd3dcfdef0e3329d2b966d0658da247ff273dc88f6d09e9847280888080f66cfc4016a31517fab3d89fdec4df04261002e73bbfec4828a341cdff9254c403350bf4e9ce43bb2ef9f1335afa28bbb66934c46c3b704970c55e3cb93426a88cc07f5075c6fefa32dd3d61f3512d5b97e180ab44d45aec9a8d174c88310b34bb2f4d433916da68611ca6e73233bd701c0a2cbaa9383fc6d96a033eccb0671f93389e71ef6d8b696936ca15df341fd79aaf3f7a0759e49e25b0547d4d08d05251966daccd07fd450eb8adb6253f9a2e286e2d0cf604fe78bd9dbf31c792221ee11188f03d7e5a7176b30f0c0d43484f7123b44471289fde71904c6c65db49fceae43e2f9964b7a71ab75ea71b16518d33b440adb01053906a4bfc7b28a86144834818e491bae44cd85d1738047ce0795e20d7cd76fa37a5e8897dcdf69f90c5a86ab7619f79699ff500fe8f8370f4fe88cddcd66131315d2bc32e14ee050280a7ddc171586940bcd1ec606b50fc9122ed28102e4c9c86911155dc3cbab775e2d33ccd74e2f3db3e6ba2df003f2472473ce46e55bfcf9d3a5bac532472c31808a6193be5f116241c647ade87b0a1bac4b5fa5f02c32a6d27fe8a4cf20ee36a0b9ae26f1066e6ca171e67414e671263136f8c53d24fe4f68b29eb4a57c9861d85dee8d980cfc9b57d2931f7ddad8192008b9c38997d17ca7375b2fbda942d78d2e3176697be4e0183848267fd30b44ce0063986caa6e0a594e98270df7d35e8be38999f322209bb6328015696c542b6b7cc429840ad535ade79066dae318d904cdf09057034ce7670224ce0e0de022ad2ae15174bce58d49ddd8ca2d7e43cb3883d35a1b9c4504f64870e8c94f55382b4d8a704ff49e7c65aa6666ee0f3d18d879fd97826d161b48144f9f5baf199bbabf2d623f924df3bf3e1ad60dea283e8858c48d95823f37acc245cdfbe2eab8ece71eadda811715f94d1b2b797cbe74a3785355ac4d9c2149ff52bec30532c4ef1ed1b9db3e4b1d3549435b3d97f72471e32bcdf9ce91a4d67a7c0d28c9b8706399ffba372b8ff909ed72c60c48e149135391a0e17f7087133aa3fd8db1ea3f5038222916de1a2ec3733e90fb4f60106ae7673e653d2a425a45d8748a60f1754111c6596853720827900d7332e38e75197d94542d5cef7d4c19178126ae189cd1160934d7698d4acf8007ea956bc180f15c6ec34a0b085ffff553c33bdfe45c9e73c7dd351ca27f0a9b07379a53d6698160ce18b96ba2e34aea7bd9e735dd44aebb86796ef210917ad0ab2b7fc5a925f5406ba37c3728e6f3104d03cf44f97827153691f4a995550a69f5261cdb3313c26ac336c3611622e3171322e08945d1a276fa5539761605335f5d168a6f7d90f123eaa9080a7cff03f077335e2fde1c9840291128f5c8644a903faf5555fa38fbc52dbd19498ed1c0519b5b4216638d9472f982cd14254207fbdf731d7ce78bf9ff5f132f854bbb9fa9e852766c76914762ada462638d92f5f9fa7ef023c2cad32f9e5f6664efc9dbbbaf8b4e0afdaf7ed3411debffd897b4a849d52a6986a6cb038d73b0bb4aa58318a786bda0b08f8055f5db6eb91662ad971c60ba0f3e6f40270cbb0055b859b18ab171a3ef7f42e5458a52228fa050cadb5156bdff0fe2129e4bde7dbbd977939e9fb9395fe75750d791e06061c472c4cbda7b81130f31fcfa6f512e39ad8c9d7b51be7671145e604cda132a61de7bcd4a7e01311ea21e4aa00d7cc350925e1982ffb8c5a40b37501e862a3b55fe3b3d1ec7841d876e67745ccebf93682d74278f5e3a923f0de6201973073f315f871edb7c14d7018b0705e8c8a6cf69356e4159baa3784f40d7a9cbb83a527ba38005e20525e96e91e8757230a672f408640d71062347a8932563d2ead68af65ef8b64e82bcd3305310030f73239c5b87ebd158a5d68715a9d7deee2ca451cae90e19c1a8a2d51eb01a77e7935b1998fc70a7860ba6c0ab857f810681750e725ee0e9bffee354326598bf799ab7af120ced69e15c7805d59ce0f81bd322480a06a9f89a893525fadfd9b3bf9adbeb68c0c367178e165a666faea5c3d8a56ed1b9b827a5b2ec124cdb95be2e65947fcd442965482365370f6250dad01a7c6ed3e10c2fc4ae7e7d6fca0177bcc20261643cf14c8a2197c91600957daaeec26829bd37dd1cb67b15c553cf51e35036695554439f32fe5d9d1dd22e7d003e011ce56e68ce9e6f4512f6e031fa9374c045cf7aa7717c156454c88a29289f84599b3a5952f54c215c7841e18eea9090042019c71e4a51a9c4d337bde883fc924037c19d8ee6b0cbc2536ea0a2d63e015b299c8689b801131f0e4cb0f87c248bf6bfa62bf16aa204fcc9837558af2065e7d9fe3b399b994a4ded52e1e36b019785b787a9c195b2b687e18b7c67e3868e83de92b089c1a02046d5d58a5f2ea99a099501cb6e5b8477492598d6afd6b27ed8fb262a6a43d81656db918ec1db488187231f1d0f04b69ee16446f175ef25af9737484b75aace7ee7dd65c61bd8089c226326d600bd2605a3aad848fd90ecfc1cfc15b55bb22fdb2ced2924b31c2bf77a9847d0218d1d342f7b403c1cce8b7c0152ae4487ebcd5735e91d2d315080beb015440ab7c5380032ecc22ffe86f65e17c1c8af80e25386b39b852801a85d98cf357fa1e5fac76681c65e3fc3d04ba262a96d30dfe7a15344129446496e8f7854d7cc1d8b6bbd26fc8d9f34266badcbfeeac70b386371c54ba55da8d92b99f7f0dd38f7f2871d551d7d4162e4f3df2433e13e727b193a893e9c8a625b55102ae04ec8a1c94b6942f66586ef0147c204b3a1917273f4672b38f5ab1858b657278d4b5907142a41bb6b88412a4e3b7500309a2f0c87f0612fa4b60026ea90c248f7a23ef1440f3304a4e2bd3f7ada73e4878b23ea3e174c3c600a1a87edc069926aedb5cddd00651ced79c8bfe3e281bf7647dd70366ab1836b3ede9016ede807ebd533bb734c994bd5a4b41fa4ed1282201451365642e7d0c949ec58aca974b9c7407f008d9d99cf9c79ef5579e5f99402258ac34018f824049e988cbcc30e4dbf4818d5fe7e57e6663af3c640dde24fbe2351738f0781217bc417c95cc5ef066639431a008484cd3d8d87ec936abc9d1709a457414431e229553b29e5e185205cf57ecc592ce5fdddac3c2d3999576c547dd55159ca5e885042167e6c26d2b8c35acd82dc15f864f5bb6b04c8781c3e018b8692a2ae748fa9bd6a24964fd2fbb7b844f0a139a7e8102f32680a701f46268a52c7b3e4307ad9796c1c6d23757c7989579146c38f9662f9e1ca5d9f3f418d91182011b517bcf87f078a9a2b6408e39665ec75ed0992e7b13053803b9c803f3421a86542ca81293b6acff7ad8a35e546eb52f37d488b7aa291eae999a690b5dcf6dbb3bd79c5bcc69ea271a5dd732c49f6ab505e4d28a044dab55b4740109f6e8ca0c1cbd58cd084682516c09c9265022e0839c808b30d3ef4164f532406c82fe8c4fd530b3869c2b68995f1038cd397aa8a5108abb2a88794fefa3083e7cac9255eb4fa802a1071f3869bc812ac43219b60bc17f15b16f0773ce919f1d1a28b6505e64eda440952644430626f0c1c3983791abf04920cea204f17767406dcf52bbf0adcc3e5859b928dbe1a9aff94ef2b1b131c2627e060696e633027281d0afbca86adeec88b0d113980b4c6cd8ce6982d4a5271834439a956c5102b95a313a3ecddd61cad49e8d81ae4428494227d2666b899466f63e67ae4aa6a9112c109312a6940b9a896942a7faa522b107e6aaad3db18d9663e85858185f26554bb09ba2c1602e2b8677fd5f1a3434f2ce5d229ffec5a17aa3184a30c132942bca6b738854b2198d2fdfa96a1c0c30ceb47472f75629623a7b158172f6e8e8505b15d5a"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x404, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x63, 0x5, "29d39d011acbefa26fc3a037c046583c8d637c2fae10351975a093f016b8c96acf426c3cbbce855fd23357c662a95a03263cba215bf25a515fb71d3da80f0f2a49881dec564a3acdacaa6c43d8ddbc06262e7a68201969b82e9af2d0df27e1"}, @ETHTOOL_A_BITSET_MASK={0x87, 0x5, "8bdeb139ed3f42f61372201f4ad977778f056b6afd26974843648aa894d9d75fbf4a3d38867c9e9eb87e26c1f16c21f5da65539a9be894bcaba4da7b8dd5642107d13b24f8de9ec90d7b8139660c2fd1a86fc69936471812bc4d1896adacf32add90fc7336a32c1cef032f2bdc5a82f966041bbe081081c9ab1cc649c99da810c6811b"}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'nr'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'hash:ip\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x24}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'nr'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x7a, 0x4, "5296a82a2f229f755bf6c77521dd11a55bd225877916d7981aed4f3c2ec1832b35553ea4e148ca28540ee469ab5ee814e564c1e61c5d31b935f9106ca9291e6d28f7e54ed5a89ed44fab3856d2413f2f09a069cc2c728d81873e53d94af1c0009391de5098d4e33cfad97c747badc6dc851240948541"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'N\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^\\^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',%,*@]-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x47}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'hash:ip\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "b6fcc069f451d0945d21d88980cf5e6540c3bd84d43f425fb325ff21f795d719a775b30c4764053baf"}, @ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "c124e85ef25c3ea391bde95487d0722f81853a4e050ec73d7b360d1dc0a4a600c6ade03b9e11b1cedebfa0c050184cdba380cb53ea0455be342a4f260c8da1b6514e71384b8d1c270b33e2d0628638518b68b9a6ae5175098ee0f649b3822b1beb138bb6a635c5f00f0dafdea1c14ae2a5cc82ada8c3f68b2b5b229db7ded51dfc4cc5dd19e5a6f7283b8804860f299385ce4fb23bbcc498efde10299a31377049d7364c6eb848b0400fb438cf9be706e5edaf757f8c3ad70e4088cd1078053a208e9ed30f5bbab542a597fe18f54dbf284264f1b94b4c98e8156111732a5832963357668d"}]}]}, 0x1618}, 0x1, 0x0, 0x0, 0x1000}, 0x20000890) 3.953758298s ago: executing program 3 (id=2688): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d0000fdffffff06040000000000f93132", 0x39}], 0x1) 2.398720571s ago: executing program 3 (id=2705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x102800, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000006c0)=0x4) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000004c0)={0x3, 0x5, 0x51, 0x1}, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r5], 0x20}}, 0x0) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x77af71fbcea68dd}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)={0x130, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9d2a}, @CTA_NAT_DST={0x74, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8}, @CTA_NAT_SRC={0x78, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x3, 0x5, 0x200, 0xe3, 0x3]}]}, 0x130}, 0x1, 0x0, 0x0, 0x404c050}, 0x30040040) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 32) sendto$inet6(r7, &(0x7f0000000400)="b3", 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000100)=0x7fff, 0x4) recvmsg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000b00)=""/241, 0xf1}], 0x1}, 0x10122) (async, rerun: 64) shutdown(r7, 0x0) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002dbd7000ffdbdf2508000000050022000100000006000e0036ff070000000000000000010600020000000000050004000b00000006001c0000010000"], 0x44}, 0x1, 0x0, 0x0, 0xc805}, 0x0) 2.289537262s ago: executing program 1 (id=2707): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000280)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x3, 0x1009}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000002540)={'\x00', @remote}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x38, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000002740)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x800c8100}, 0xc, &(0x7f0000002700)={&(0x7f00000025c0)={0x140, r6, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x540000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x34e6, @loopback, 0x4eb77f1c}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6ca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x44000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x3, 0x2, 0x1, 0x1}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="345068f01ba1afeea27392a0877a25b1bf55ae3b41095b443c9f91be9fadec8a156496550c039aedddbb0f2299d055a66de42b58cc50b25629766e54037490530107e8ce5b9920fc452e826d80b038eb48e8a51d14a0aa4c94df3490e8c3d74d56aa9056afaefd8b509cc139214df871c24d5d44afa06af6592ec0ca", 0x7c}], 0x1, &(0x7f00000002c0)=[{0x60, 0x3a, 0x9, "557f8a5836ad900edba3d12a0e3e51175f1fcf4b63aa5382079ab0e9842d4dd531d4dca3024bf2e0581be3af79c31bfce45988af5b81c1b6603ae847b8db04338c4927af80297d32ca4839e4b69eafe0"}, {0xf8, 0x11, 0x371, "b1f62aed83d96de1a6cd1bbfe048740bca05234d2030078d4e54c718319ad5825c7135dfb5332581429b335dbd04fae00c9e76e5410ea4d06bac8c1c0ed87b56660dedbcb0765db02d88c0ba1d39a43244bc7050ee9c647c438e32c83296f98ff0a3392bfc79eb6d81bb466f13b0471222ec88fb516e5747c23af73c707e5fd07512f777e3561e50d3298bbb0e875dedab74ea69c2d98299493fc114fc6e28eb51fe4a26e18d6fa7864ef8d3706613bf14bcececf6f90dacc2fe2d1e215ea1fb87555594bf5d2dd6bd0e961d880509fbb6a174830ed1a30c3c774469b9e762cf2ea1"}, {0x1010, 0x118, 0x8, "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"}, {0x68, 0x88, 0x2, "2287f40488e06912e036fcbdb2c9b81df49d24f6524cdbecdf39f86fedf316b7aa8766a9f76b3ba32c60f6011999704573450f1bb332f324b56339dcf695fa42632ce1f066d0d00fc6498217c337529af41d200792"}, {0x1010, 0x11, 0x7fff, "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"}, {0x80, 0x118, 0x8, "f5d329aa64ce420593e45063faa75da126ad65c1cf2f52c53d155ab66ffc8c2b75f5b25d254e25d27956a479f0f1791eec008d7331482946d3769043f039bd0921e99b9666cd5a00ed60286d09e5015c43e64980611a186d05c7f93d24e57d28c4396ea962917095c64af8fcd7"}], 0x2260}, 0x804) 2.287450287s ago: executing program 4 (id=2708): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x38, 0x3e, 0x107, 0x0, 0x4000, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x400c050) ioctl$sock_SIOCGIFINDEX(r0, 0x400261f3, &(0x7f0000000100)={'dvmrp0\x00'}) pipe(&(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000140)={@remote, @empty}, 0xc) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000880)={'veth0_to_bond\x00', @ifru_flags=0x1}) 2.24281854s ago: executing program 0 (id=2710): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a0001000000080001003a35eb7c3ee696b7bb9d8ff7bddbd5e37b754f8fd130c25f"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x50, 0x0, &(0x7f0000002b00)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) 2.107398974s ago: executing program 1 (id=2712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64090a04}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000020000060500030084000000050003000100000006000240fbfb0000140004000800034000000002080003400000000200"/64], 0x40}, 0x1, 0x0, 0x0, 0x400c080}, 0x4040810) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x10f8, 0x8}}}}}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000400)={0x2, 0x0, 0x8001, 0x6, 0xc, 0x64cdf208, 0xffff, 0x8, 0x0}, &(0x7f00000004c0)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000580)={r4, 0x6, 0x5, 0xb, 0x2, 0x20df, 0x5, 0x1, {r5, @in6={{0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xc}, 0x80}}, 0x9, 0xa04d275e, 0xffffffff, 0x37cdc731, 0x1}}, &(0x7f0000000640)=0xb0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt(r3, 0x7, 0x1c4, &(0x7f0000000680)=""/164, &(0x7f0000000740)=0xa4) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64090a04}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000020000060500030084000000050003000100000006000240fbfb0000140004000800034000000002080003400000000200"/64], 0x40}, 0x1, 0x0, 0x0, 0x400c080}, 0x4040810) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) (async) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x10f8, 0x8}}}}}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f00000001c0)=0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000400)={0x2, 0x0, 0x8001, 0x6, 0xc, 0x64cdf208, 0xffff, 0x8}, &(0x7f00000004c0)=0x20) (async) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000580)={r4, 0x6, 0x5, 0xb, 0x2, 0x20df, 0x5, 0x1, {r5, @in6={{0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xc}, 0x80}}, 0x9, 0xa04d275e, 0xffffffff, 0x37cdc731, 0x1}}, &(0x7f0000000640)=0xb0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) getsockopt(r3, 0x7, 0x1c4, &(0x7f0000000680)=""/164, &(0x7f0000000740)=0xa4) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) (async) 1.306730165s ago: executing program 3 (id=2713): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xe8, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r3, 0x7}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001", @ANYRES32=r0, @ANYRES64=r3, @ANYRES32=r1, @ANYRESHEX=r0], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xfeffff7f, 0x8, 0x8}}]}]}]}, 0x54}}, 0x0) r5 = gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000000100003040e000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="049c01000750050008001300", @ANYRES32=r5, @ANYBLOB="1400030076657468305f766972745f77e966690008001f00ba00000024000e"], 0x68}, 0x1, 0x0, 0x0, 0x400c0d6}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}, @IFLA_MTU={0x8, 0x4, 0x7ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.306389012s ago: executing program 1 (id=2714): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380), 0x500}, 0x20) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c40)=[{0x0, 0xf5}, {&(0x7f0000000800)="0981b705", 0x4}], 0x2, 0x0, 0x0, 0x240400c0}, 0x4004800) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvmmsg(r3, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 1.302544754s ago: executing program 3 (id=2716): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x80}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'geneve0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x1, 0x1, 0x40, 0x10001, 0xfffffffd, 0x8, 0xe60a, 0x9}}) 1.281719182s ago: executing program 2 (id=2717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r3, 0x5a8, 0x10, 0x7, 0x6}, &(0x7f00000000c0)=0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r4, 0x7, 0x0, 0xddd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/8, &(0x7f00000000c0)=0x8) 1.280815787s ago: executing program 3 (id=2718): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0xcb, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x58}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="183a000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000183b0000050000000000000000000000181700"/52, @ANYRES32=r2, @ANYBLOB="0000000000000000186000000e00000000000000060000008500000088000000186b00000500000000000000e2ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="183a000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000183b0000050000000000000000000000181700"/52, @ANYRES32=r2, @ANYBLOB="0000000000000000186000000e00000000000000060000008500000088000000186b00000500000000000000e2ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000006000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) preadv(r5, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/61, 0x3d}], 0x2, 0x2, 0x8f2) (async) preadv(r5, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/14, 0xe}, {&(0x7f00000006c0)=""/61, 0x3d}], 0x2, 0x2, 0x8f2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.279607854s ago: executing program 2 (id=2719): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x20, 0x7800, 0xd, 0x7ff, {{0x15, 0x4, 0x3, 0x6, 0x54, 0x66, 0x0, 0xac, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_prespec={0x44, 0x24, 0x79, 0x3, 0x7, [{@loopback, 0xffffff81}, {@private=0xa010102, 0x5}, {@local}, {@loopback, 0x8}]}, @timestamp={0x44, 0x8, 0x8d, 0x0, 0x9, [0x8]}, @ssrr={0x89, 0xb, 0x2f, [@multicast1, @loopback]}, @ra={0x94, 0x4, 0x1}, @end, @end]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xd, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0x5, 0x6, 0xa, 0x8, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0xd, 0x3, 0x5, 0x20, 0x10}, @jmp={0x5, 0x1, 0x4bd650119081c37a, 0x3, 0x5, 0xfffffffffffffffc, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x446f8472}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x2f, &(0x7f00000000c0)=""/47, 0x40f00, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r0, r0, r0, r1], &(0x7f00000004c0)=[{0x3, 0x4, 0x7, 0x9}, {0x4, 0x5, 0xb, 0x6}, {0x4, 0x3, 0x6, 0x3}, {0x4, 0x2, 0xf, 0x4}], 0x10, 0x5}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a4014"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.277638736s ago: executing program 4 (id=2720): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYRESDEC], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x3, 0x800, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x33}, 0x7, 0x7, 0x3, 0xa}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x1, 0x8000, 0x20, 0x4, {{0x1d, 0x4, 0x0, 0x4, 0x74, 0x65, 0x0, 0xa0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@cipso={0x86, 0x3f, 0x0, [{0x0, 0x2}, {0x1, 0x8, "1fd857a1fb9e"}, {0x6, 0xd, "b0a2d1c65d51a32dc32536"}, {0x1, 0x8, "d0c8b8cb522a"}, {0x7, 0xb, "5eb374eed952abcb60"}, {0x6, 0xf, "f070bc783411990926e25c6175"}]}, @ssrr={0x89, 0xb, 0xe8, [@dev={0xac, 0x14, 0x14, 0xa}, @remote]}, @timestamp_prespec={0x44, 0x14, 0x9c, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@multicast1, 0x6}]}]}}}}}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000100003050000000000000000000000006561dbefdf0a4289d148d2d4fd1e2626ec2c984d038a8e1ef7e45259", @ANYRES32=0x0, @ANYBLOB="0503020000000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32, @ANYRESDEC=r1], 0x48}}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) r10 = socket$unix(0x1, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xb5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x9d, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x1, 0x1, 0x6, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x20, 0x80, 0x69c00000, 0x3}}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'vlan0\x00', 0x0}) (async) r17 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r17, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x24004001) (async) recvmmsg$unix(r17, 0x0, 0x0, 0x40, &(0x7f0000000780)) getsockname$packet(r17, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) r19 = socket(0x10, 0x3, 0xd) sendmsg$nl_route_sched(r19, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r18, {}, {0x4, 0xffff}, {0xd, 0x2}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r18, {0x7}, {}, {0xffec, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfdde, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0xfffffffffffffd81, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000001180)={0x2e0, 0x0, 0xf18, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.276701954s ago: executing program 0 (id=2721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0x2, 0x7, 0x30000, 0x3, 0x8, 0x100}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x9}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xd5}, @TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x355, 0x665, 0x8, 0x6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x15, 0x1, 0x4, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x1, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x80, 0xfff, 0x6, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x53, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0xf629, 0x1, 0x4, 0x400}}]}]}}}]}, 0xec}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.271181943s ago: executing program 2 (id=2722): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\b\x00'/40], 0x28}, 0x0) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYRESDEC=r0], 0x30}}, 0x4000) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYRESDEC=r0], 0x30}}, 0x4000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000180)='memory.numa_stat\x00', 0x0, 0x0) (async) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='memory.numa_stat\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000008c0)=ANY=[@ANYBLOB="7c8b457e8dda5908fbc772", @ANYBLOB="9d4d32703a661a3e5cdfe5e33e977201832b7f7d72f692730216a6345192bf9c42646d986bc358a3b20a14db65e11213a230c5e7f7b00d15b76b9969c7bca90dddd988ff0ebbaaa811af940745b2ef32a96af673bb4755930ea238", @ANYRES8=r1, @ANYBLOB="3dfe542147e7b91ab40be00ce8af7b90cdb538f98d79022a45a493630e33f210999e8c5d91184aa8d769b53e1e936f00e32645cd61b7e775e1448119f2cc7c4954c70a77d1976ed93904aae3b7f1e599e24a290129d61f80aa47b9bb4ff2a31df55be923e064ef3ddd86803faa222cc03c1fba6a392cc80962d8603976221e17df216e8e17affd2e1d0bff766424a8bdab5b10ea800f636b94dd6fd43c83a61ad2a9daa9451c355b53a8a3add9ce6e999e921c8456c30b608c3d5a668b7c41f170545c08346717be16cc7a26eaf2b28e4b56bc0b26b8161379fc3101c64b2f72de7e9fdd37bfb859cbb1c46c40dea57a8f6efbb7ec4048"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) socket(0x2a, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="3c005a803800f0537591955975ad"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="3c005a803800f0537591955975ad"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004ed7300000000987de7f8c0f0436f92b48546e6511ddcabf9e8a0054597ae3e1f7c175db9126faeda7d885543f6547a7a98b4755158f35cd3b2336dd2269fc6428537e3b83783a40effd8691c8fde9ee2d1c7139e073a2262de248e5cce45fff33587c2d27557b8204663c5820996f00417fd86a35082eb7dcb9f16", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000080010000"], 0x50) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x10, r4, 0xf9f3c000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$tun(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="000000074c1200ea0065000006069078ac141435ac14143e010717a0ac1414427f000001ac1414aa000000000a010102000000004e204e25", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8000000090780005fe06e2d4c3d9fe06e2d4c3d98b831744b85774f910b700ff600f01898a109d4016747a8ac49ef4a3813583095c9ea5ff67f6881045cef87ea31b81560b6482ba3d4b020ead50b572fe14f253d1b1266f09b2e8cbc86aec080e985389fcfa48e72395b6f852d8665fc78a10bfc00a981e4f26045a22d3469af75ffa5c86ea5e8e52dadb1753e8b26931f27bae0306d1a4710697498eab57da686b5d2019d18720c2b75f3aecd5f8fa1ee0bcb13ef267b9acb0f525cdc666bf722edf7e498751a53f3150b049c04ae3ab7844f64d2a92ecc84fc5c52f572d9c9c1b62561df56320"], 0xee) socket$netlink(0x10, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 1.137735812s ago: executing program 4 (id=2723): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d0000001f000006040000000000f93132", 0x39}], 0x1) 846.560888ms ago: executing program 2 (id=2724): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x894b, &(0x7f0000000180)) accept(r0, 0x0, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x20, 0x7, 0x2261, 0xe, 0x200a3, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r6, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x34}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) 721.838175ms ago: executing program 1 (id=2725): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x3a}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)='@', 0x34000}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x3a}, 0x8) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) (async) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)='@', 0x34000}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) 665.466532ms ago: executing program 0 (id=2726): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r4}}, 0x18}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7}}}, 0x24}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r6, 0x0, 0x40800) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r7, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xe8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x64}, 0x1, 0x0, 0x0, 0x4011}, 0x10) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0x17}}]}}}]}, 0x48}}, 0x0) 525.913477ms ago: executing program 1 (id=2727): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x35, r4}) r6 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r5, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 472.264593ms ago: executing program 2 (id=2728): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff}}, 0x0, 0x0, 0x2c, 0x0, "648013c5ac8647a58d333a7ae3ad7c5ab0577b7935b3c202d9b7b7fd2f11f8c0ada2296b948c973ddcf74aca0bd79d34a0393001b129abfa760f9a22446b060d353de49db1f76e1f10f1e66d12b0b5ef"}, 0xd8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0xf}, {0xb, 0x5}, {0x4, 0xfff1}}, ["", "", "", "", ""]}, 0x24}}, 0x0) 404.412709ms ago: executing program 4 (id=2729): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x40010) (async, rerun: 64) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10) (rerun: 64) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @private, @local}, &(0x7f00000001c0)=0xc) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000200)=0x8, &(0x7f0000000240)=0x2) ioctl(r1, 0x2, &(0x7f0000000280)="5838f9e5b713d747ee60f29cf5acee430c5fa74938cf9ba76849d87c8177184658d02d8915e005411c669214c3521d4a1725d17480670151de13591fd3bb6faf4d0da838dabddae3c26b65c8068398d339317c471aafa25fc329c94d3d1b413cc6a0cd9a888cb84842b54b1a08e392e52e92b2af972ae8121fe7a837648be1497c050bc897d8536c5c08c2a5f80b2beac594fc1ceca1d83d9e4022cbb411dc40c27c7f1628f971c2155990989894a3e784124cdd7e295683dcf0a620e20f6858d896a11438b4b485739d19cebf37b8f8cc37e70412be8a1402214813f3b8dab70338c79769828ad951ff98d24aaacbd5b2f25bde20e5a4fab1a42da34aae29b736321be8f18b80162d56a4ff546dd25716c1a1b5468235e0805d1145d1f7b6578aa82201e03a10022cfd0138886219486df2cbd7b5257b914748a30393051be9fc3abbfb76fe3619723126812e351566580e49fcd37bcd874caf0f8dbb75f9052b0b1dde3bb23778353db736ff6e1df8bbe5915531c4c61fb01df9ff5e558b6b17777943d752a6c961200a4c688ebea386390f26dbd240746529c07f9cc5bbb5ba451726a1f66ce2db39e5341682ad5b8479009cb8dc5d42b592cd861b672e2e70f185ce54d2b5e7d3a1a26a935a22220af08b5725a597ac1a77a3230da08e3989e3633bb5d47541ab70fc46b5868cd9fdc8a53a9035d45ff18c8cbeca622e3534c6d178d34402f20621fb982773b9a5315b6009f0ed5c3f96a352cb3cdde80f990869c021ea8bb4d366d5661324128fc93aee5de789356a0792085c892dd14f7230d93f163651274209096abe95812c788ae3382e19f212377495847424536d9e52f4010faac3bbe73e4c0439aab90565d35556add75a9fc10eba38ae17b576c8e86ea6353605e2854231bc517c9fa391e8ecf9abd8a385dcbb3fde08d83e0bb02f71eae4b6b603dfcbf1c6023499f5e7378d32d643552f0ca487225058bf73fc521389287125a0f801add569ad4c5dc123a01cf93de4d4ce7bd907f574a39f2815b9232f7811f4b5dd1d9c2f388b54ce86ff50dc8e111481ce3cb05791c64e567cdfcd3301f7eab9812425536e4ab34780a44fa129c8dfe3ac41dea78fcc913bd36f98bea572d0ddb0711102f5d5b447810c7c7eacfe8dd61b7ac81eeddc16c791d257e07162876aa064520654038341cd0efa25bb3102cc70ac5319e74cb75f9372d5c3af301f69db73e9f1467c6a2f3f073b83458b4318f9841efcf00243ae88d43690beda879dc246439bc760226894c024ccb1c84d2b2946c5c16d669cdd4ce463f8e1f115b6033c6d141e3e971afa2c4566b23d02b3ef58ad3cfc3ac4000415c9e40ebb8b6dc3db87916e507a598da7454def90d5bdf2000b2af51964d53a67776ea00646f4d9c84196b3182ad8373c95f66fec761d765db961eaee469ae6ada0474870ed4e6703523305ed4bc8561898a99144ad7d8608408c829dbba4cc4ff82156109b808616d439c9b1d681c72a943d56528d4881d47fb2912f5f98aabcc250f4edaafed2612f4eabc7d9de6ccb628db5d15413f65e2fb5348938491246e23e27ad3723c808d3c6d28c7e13bf9d63c21fefc6c3bca7b0c6da55157299ff29250ffa5eaaee5f98420e7fcb7e9ce6bbbfc529e119a51fcf716c16d25241d3d65a1dd80a563493045a4399de26c184137ceaf429894b87b191688bdce90efc3cf0296e2441fff39257f601a098555ac3a13eae7d9927fc899e46e41862c834dd7c53d21618efaf5287ca99ab4cc13412501225e30233b8d11ad4bfc85a4a22214bac72cc410f3c5fedfadfd57d281983e49c787d92d68953aaf278e99ddce04109ce313dae2a5c72eed9df5fde45e84935062bdf17598d0c49dd68d9eb3bea590d4f4a086b651d03b83ee6fde598fb985062096e783a83b9c115f91e56be39ff64859f8ad6381cb29d00e7d0b8ed62e70b060691e465a6b0629363c75282585c0935efcd7735cda9a59c8f9c967f157ed5249dd07a24b67d861e25465c50f3c62c224c93817df8262374ef589f613bf9918c20a57b0388aceba7fbf871989648c2ac095e05fd3579f70dd2bb1cf0497f827c6d871dc51eef82593ab0286c8ceb827bc54b40df6b9750ff694cac23ec008e44a0fe3f5eb471bfed6677f831242df44127dbe63ea1ccf0586bd9c3868f88d388ae26bb9abc795c27bfe0da93f1fd92a027e6416d5d1bc2fa6cd27645212d319aa4ef2faf358668073db49a45bc57e93c4d1fb9e09b24bf6107411127d0e0c9fac5677ec81e7feea68480e4923942e1c14f58d57c8cb6beaf60c2756f56e390a8321d11df78a9343bbb8c9d08e6833e1ca18718fb3adf791469e58e7c1796b25bc2374e4bb4803bd4fb274753416672c2ce9ba3dc5305284df804b328b3807bfe77608ae0adad5aadad396ae6437a203fc3446d83d64f7e78260eb80ffc5967b173cc1aacadfc534d2345541c196f8f7cdb17757c5e60fe0125b94c0e284bb1ac5ddff05fafdc0467d1bb8e80fa461e664ff733d2630fb459cc8c397c44a117e86ab1276eef32357b3555e8bfc280b241acef26af2c13705dc757363557923c401dc10d3df6fc62a613cf9aaa229e8104b0bcdfde02bd5101b38a76cf580c690e1f4f5371b1b5f87f2a618b33481b8c3cc60776bb280c7acd7b02a8fd161ddf5a3fe22e5fcf37a93798fe9e55b160b1c2e5e1476d526682149a9ad186511b8a69fcb8e1a50784bce2ee552079d624e5fc642d9d6c4e6cbf21d2e0bf43eb92c97c3147d52796151b226b4fc2ec2817051b884d98a7934bae427e6527cccd4f8027d1a8a9143339e2e23f7891116b058e577eeb02e8565298e2eabac56a9aee932c4d553b2cfae47f2348820a3fd5556efe40df5ce885d251f3c0711dca798cd33e0bcbfabb7e4fb7b0523e25d0c4074e21466faf5ce7e74008375246323f44fc1fc8cab5449fae6dab0ef0c4c220d90e028b5ea078d547fbcbf3c0f286abb0e32102ef1b944fc2abb779abbc9bfc4c4e91ea068ef43ea20e6459eee81bbc1ca33b6282a23335843439ae559599fba8bd0740804f8c7b913215090f44c083e3fa56b215917cf3ba6ec0c934e08edd3b57d789b6987dcac7e6c423ff7cf1599f1fab64e2f5bbeb3c1343a1b773f886cd5418d407c362dd54c57ce4e0be19d0b8c03838992d1150c78669cf1b6e0d500c6c22afe9a3e4f4ad4e4cc7cef5a9a71d61518fcd36b66991279309320d06d00db162c7f1328f3123327728fbaabdc05053e65ecbbf0a96e080fe2d2a5761449acb9783794ed10afdc7debe0a4d21292cb8c2ee611b5c583a35644d8b6e60a2cec1d7363e4713a49db092645affed0ed2866be17cbd4f54d9afcd878241eccdc917331935c27fa4041c7844b228003d1434b94312757d27741d44b942adaa9c6e5e502b8831ce46a5e2fc91e48bec2c38e9dbc84dbd4688dd3845e5a3ba665e04e7ab1291f4943a44bc214b3f04389b474a7727dd284a33c2461026af33c50ce6dce5b3da9d1dc7650a8f454ab48916652793fb0367939a878c5d7a83367079817ba61a7f067f77d2db2104a0a1c028db7669db908fab68b18f3ca1e848cbce8c19c57e2c39852328b3fa74c976f9999989e2aa9d18c8a44c469dc6eae8d3d4c66cdc34f77253554423fe6454f725b0c5c29d3f2d8d820beddf0756501cb827b88437adf04971aff11d201e12f6084f35fa0e2d716a41f724c1f9146e99d4427dd0c64a3e654322a6cc6f3ea44cbb78a00823fe14f040ce5bb46eb66982ec078c357b28f26f5c65687c55960074ecef998d271ae0ccd07db450f0ec56a7abc63a3a743968c6928e83a92b06d72965174226e99a2e254357e6fc35cd07db0084e9d8357eb5d167ec4127a0fe0ecbefe2b0223f67550ed2a2fc9fb9e4dbe3b032d36c67134a8fe225cc9d956dbe43b95373d72dbbacfcfa39e693a456e42e7ffc80b2001f740e59724e75b33b1ed9a16bed387da874e824c2376b54b1e7c2fcc6eeb25eea6e00f61d69c82a7e8503b88b95fea5756108c21adcaef21ad26148321de87186e211812f5939a6d54bf9c3d588091404e4a7b203d68426532b19c7150098c20060009b65299be9f5bf2b5a2596632f910a48fb24a3a4fa9a9605915544378c9c4ce6fb3d96397379038bab19c04e24dc444ec8979bcccae1046016bab071c36561f4716e2e46b54aec43b57e4ca61cf0f7b81b6b3d5030ad47c4f62f2e753f1f5dadc948735e40e8f5071814b9a21b47f333f9db0a86e1e2acb8675e41014dc79924547884f8309d6fc710e81bae35b5d19118c05d1282392725a2bd3a1feabeaf41373ff608dee45a1dcac646f7d9dd47bf411bb95f9c626fe4e68847d2eb584592b089cdc6b19e6671d862ed81ae6251019a7da9c743aeb5f57d3a073b19257ce08095f6feb292bc938a23a986c402158e7a32bf96da8f1d17c750ef4e88413d69cadab6d1f8f0c925b3619fe3425f1828a5e8abc762d4dd92002091729727045d9e4047a1084e92bcb65717e176b929cff2e91d9d90c395bcb2639ef7fc1426b6feb9b4bcebddd70caf4cb4bf9e35cfa3ec9530275b23e4c086324f12f15a553adbc138ad8fd5fa023d9738517354109d7c25fce114a96ae20fa54a35cb0db6509962575f1ce15798a700ec681b2e9469a208c974e487451b8d4b2390e89d7b631f9b6989185a638d3ce4e324b919e4f3981d3b2cd5e5c05aa2b39f7b768fafaeab8343595eaa2e5ec696aa863a41661834ac2986aa8c8216a3accf5595f9f13427661a3e3502f16e48f11234f7c621761a67299b5497c13b8f0ad6a9a538116e00c8a872d1f868bf82b4886df6fd29622c01460b82e0b2c6eba114fecdb05f0f450fb1d546e8d8961e951f36e7f92fc6787bef3abbdab0dbeed33f896859cbabff4c22c373dcbd59923a6db2fce0bcd8bad43edb0f17f79e22afe476bffe366b0816311a1d1a4f3ee51c967fa4fca3515f7e65324826db8b5882cec4eec03a0cdb135f6f5b183516fbcff36e12105c7ee7342f224120416d535871b0cd7d2206d8d14f7ebed0cbfa9ad9f13f80df5697cf5dec9a37601e5abd6a59234316c6ae3b0b7c7c14caedd96f5b56bac369c2a989b609243c0a6396bd0797f84ed366bb91b9a459241a5393febf5b040a668a09f485789d785d27932c8310fcf3a60759b6116f0780aeb48b02d502b087ecf7528aba2844d540dc4f48ca8774c63b8fdaecf9c7f7aae8518a29d923c2601eb2f98deed7f583fbdd55d125d1395c64dab05c6e79a2cc776e3afe9859048c7de745ddbee2fc5391f385a98188f5f33a4987b270a537cbd93caa00c29327d6d827db53b3de94eefbad505f778e2ea6a85a4292a7206e81dae291e37063457d188f2cf5f8b0f033f0d4e77a9ac7ef8338c65a389bf01aff182df0ba071710e59d210f9c08f9aaa2a391512de9ece39ad61a3258080b7c7031625cf1f5bccd7753b443d338ed90257eacfd7eb99122c879ba5b0be116260593a30b96a970b326e33d08c45b2d89e16936e1de224f43a286caaaa55e0e91f7dbea64780fa7ca16d89a9f77f13d45ed4009563fa151783f369ba3d6ce1387ee049fa3e5f351c2b62d54c487157f72832dfef536f82eb8bb5252d960a72d0cf7756a2646e35ac8ff7ddaf417850acd3a8eb3fd45d541fe3c9dece80e8631b4f5bc51763a32ef7ef21d9d7588f87c28177da0284c14c060d736e86ceb0589257cc791cbe67eae7627d66fd3bd82e1db4931b5") (async, rerun: 32) accept4$x25(0xffffffffffffffff, &(0x7f0000001280)={0x9, @remote}, &(0x7f00000012c0)=0x12, 0xc0000) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001300)={0x28, 0x0, 0x2710}, 0x10, 0x800) sendto(r4, &(0x7f0000001340)="905633a849a95a94a8cd7227a43225f8a18f3a0357474701f66308593d3148ea15d914d9ec5aac64d1bbcf61d022f91d9a0892f945f11535a8cfd233ebe0dc86d6abf36d5110db1978b2965c14e201e0255ae0f24f92519a5daa7deba0951c", 0x5f, 0x800, 0x0, 0x0) (async) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000013c0)=0x6) (async, rerun: 32) r5 = accept(0xffffffffffffffff, &(0x7f0000001400)=@rc={0x1f, @fixed}, &(0x7f0000001480)=0x80) (rerun: 32) getsockopt$packet_int(r5, 0x107, 0x3, &(0x7f00000014c0), &(0x7f0000001500)=0x4) (async) connect$vsock_stream(r5, &(0x7f0000001540)={0x28, 0x0, 0x2711}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001580)='veth0_to_bond\x00', 0x10) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f00000015c0)={'vlan0\x00'}) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000001600)={'filter\x00', 0x4}, 0x68) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001680)={0x0, 0x3, 0x10}, 0xc) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000016c0), 0x4) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001780), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0x9, 0xe, 0x78ff, 0x8d14, r6, 0x7fffffff, '\x00', r2, r7, 0x3, 0x5, 0x2, 0xb, @value=r8}, 0x50) (async) nanosleep(&(0x7f00000017c0)={0x77359400}, &(0x7f0000001800)) (async, rerun: 64) r10 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) bind$l2tp6(r10, &(0x7f0000001840)={0xa, 0x0, 0xf, @mcast1, 0x34, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@base={0x1b, 0x7ff, 0x5, 0x8, 0x4, r9, 0x81, '\x00', r2, r1, 0x1, 0x4, 0x3}, 0x50) (async) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000001900)={@remote, @loopback, 0x0, "8188fa27c5d85a7d52285ae47c7d5440e9836e71636c542338923bcfb6dc35de", 0x4, 0x4, 0x101, 0x3}, 0x3c) socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001940)) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) 392.733951ms ago: executing program 0 (id=2730): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newsa={0x150, 0x10, 0x413, 0x70bd26, 0x0, {{@in=@empty, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0xa, 0x4, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d3c8af0aa763c9a18bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) 289.774844ms ago: executing program 1 (id=2731): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002000010027123200000000000a008080000000041600000014000200fc02"], 0x30}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa400001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40071}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0d000000000006003c0012800b000100697036746e6c00002c00028014000300fc02000000000000000000000000000014000200fc02"], 0x5c}}, 0x0) 284.414354ms ago: executing program 4 (id=2732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="350000009e7c860e2840bf0d13db10cacdfe3eeb9bf661c7c646503f263ede", @ANYRES16=r1, @ANYBLOB="000328bd7000fbdbdf250100000000000000014100000018001700000014000000016574683a766c616e30000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x4}]}, 0x3c}}, 0x0) 243.735762ms ago: executing program 0 (id=2733): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)=""/25, &(0x7f00000001c0)=0x19) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c0002800800014080ffffff0c0001800800014080ffffff050014002000000005000500020000000500010006"], 0x6c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f00"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) getpeername$packet(r4, &(0x7f0000003b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003b40)=0x14) sendto$packet(r4, &(0x7f0000000200)="4714baa99a0eb99c5b35999e0f3171a4a634f89f3197eab36ab28ab25743ae000603349a0fceb4ff", 0x28, 0x34, &(0x7f0000000240)={0x11, 0x6, r2, 0x1, 0x9, 0x6, @remote}, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0), 0x4) 56.766082ms ago: executing program 4 (id=2734): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 9.783512ms ago: executing program 2 (id=2735): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x8000}}, @func_proto]}}, &(0x7f0000000240)=""/8, 0x3e, 0x8, 0x1, 0x3}, 0x28) 0s ago: executing program 0 (id=2736): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xed}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x20, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x28000801) kernel console output (not intermixed with test programs): 836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1003'. [ 270.098621][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1005'. [ 270.624541][ T9876] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1015'. [ 270.674917][ T9876] 0ªX¹¦À: renamed from caif0 [ 270.780163][ T9876] 0ªX¹¦À: entered allmulticast mode [ 270.802675][ T9876] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 270.849562][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 270.862832][ T9889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1018'. [ 270.970045][ T9894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1019'. [ 271.116040][ T9902] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1024'. [ 271.342102][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 271.438266][ T9921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1028'. [ 271.626943][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1032'. [ 271.757046][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 271.901286][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1037'. [ 272.335146][ T9956] netlink: 'syz.2.1042': attribute type 7 has an invalid length. [ 272.362349][ T9950] lo speed is unknown, defaulting to 1000 [ 272.368768][ T9961] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 272.372519][ T9957] tipc: Enabled bearer , priority 0 [ 272.397829][ T9958] syzkaller0: entered promiscuous mode [ 272.415852][ T9958] syzkaller0: entered allmulticast mode [ 272.506034][ T9958] tipc: Resetting bearer [ 272.604100][ T9958] tipc: Disabling bearer [ 273.076217][ T9981] syzkaller0: entered promiscuous mode [ 273.082753][ T9981] syzkaller0: entered allmulticast mode [ 273.143172][ T9980] tipc: Enabled bearer , priority 0 [ 273.177967][ T9983] syzkaller0: entered promiscuous mode [ 273.183590][ T9983] syzkaller0: entered allmulticast mode [ 273.277645][ T9980] tipc: Resetting bearer [ 273.306268][ T9978] tipc: Resetting bearer [ 273.365561][ T9978] tipc: Disabling bearer [ 273.530259][ T9994] bond3: (slave macvlan9): Error -98 calling set_mac_address [ 273.859677][T10012] tipc: Enabled bearer , priority 0 [ 273.966164][T10016] IPVS: persistence engine module ip_vs_pe_ not found [ 273.994703][T10012] syzkaller0: entered promiscuous mode [ 274.005199][T10012] syzkaller0: entered allmulticast mode [ 274.043636][T10012] tipc: Resetting bearer [ 274.193505][T10011] tipc: Resetting bearer [ 274.213173][T10011] tipc: Disabling bearer [ 274.348878][T10038] sit0: entered promiscuous mode [ 274.355204][T10038] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 274.501804][T10045] ..0·: renamed from hsr0 [ 274.524248][T10045] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.548071][T10045] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.582046][T10045] ..0·: entered allmulticast mode [ 274.587106][T10045] hsr_slave_0: entered allmulticast mode [ 274.611489][T10045] hsr_slave_1: entered allmulticast mode [ 274.621494][T10045] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 275.068762][T10062] bond3: (slave macvlan9): Error -98 calling set_mac_address [ 275.645614][T10103] __nla_validate_parse: 14 callbacks suppressed [ 275.645630][T10103] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1081'. [ 275.717217][T10103] batadv1: entered promiscuous mode [ 275.736763][T10103] batadv1: entered allmulticast mode [ 275.761551][T10111] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1082'. [ 275.856782][T10113] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1081'. [ 275.992384][T10119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1086'. [ 276.050095][T10119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1086'. [ 276.101299][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 276.397815][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1091'. [ 276.499029][T10135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1092'. [ 276.549046][T10140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'. [ 276.563125][T10141] netlink: 'syz.4.1093': attribute type 1 has an invalid length. [ 276.572642][T10135] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1092'. [ 276.885851][T10163] netlink: 'syz.2.1101': attribute type 5 has an invalid length. [ 277.830839][T10187] IPVS: persistence engine module ip_vs_pe_ not found [ 278.274768][T10204] !: renamed from dummy0 (while UP) [ 278.422843][T10208] lo speed is unknown, defaulting to 1000 [ 279.373375][T10234] netlink: 'syz.2.1117': attribute type 6 has an invalid length. [ 280.308667][T10274] bond3: (slave macvlan9): Error -98 calling set_mac_address [ 280.427694][ T5863] Bluetooth: hci4: command 0x0405 tx timeout [ 281.197873][T10291] lo speed is unknown, defaulting to 1000 [ 283.169919][T10320] lo speed is unknown, defaulting to 1000 [ 283.702409][T10329] netlink: 'syz.3.1137': attribute type 3 has an invalid length. [ 284.214918][T10337] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 284.242969][T10337] __nla_validate_parse: 9 callbacks suppressed [ 284.242986][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 284.279543][T10337] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1139'. [ 284.321702][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 284.469809][T10342] IPVS: persistence engine module ip_vs_pe_ not found [ 284.901002][T10346] 0ªX¹¦À: left allmulticast mode [ 284.943526][T10346] bridge_slave_0: left promiscuous mode [ 285.115232][T10346] vlan1: left allmulticast mode [ 285.121066][T10346] @ÿ: left allmulticast mode [ 285.140823][T10346] macvlan2: left promiscuous mode [ 285.152304][T10346] macvlan3: left promiscuous mode [ 285.158109][T10351] netlink: 'syz.3.1144': attribute type 4 has an invalid length. [ 285.162356][T10346] vlan2: left allmulticast mode [ 285.171368][T10346] veth1: left allmulticast mode [ 285.176786][T10346] macvlan4: left promiscuous mode [ 285.183428][T10346] bond0: left promiscuous mode [ 285.192964][T10346] team0: left promiscuous mode [ 285.198618][T10346] macvlan5: left promiscuous mode [ 285.213918][T10354] netlink: 'syz.3.1144': attribute type 4 has an invalid length. [ 285.258480][ T49] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.291752][ T49] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.305985][T10356] netlink: 'syz.0.1145': attribute type 3 has an invalid length. [ 285.321871][T10356] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1145'. [ 285.354274][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.364131][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.396545][T10353] lo speed is unknown, defaulting to 1000 [ 285.580573][T10363] IPVS: Scheduler module ip_vs_sip not found [ 285.616353][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 285.626343][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'. [ 286.306816][T10383] IPVS: persistence engine module ip_vs_pe_ not found [ 286.352967][T10392] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1154'. [ 286.492007][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 286.624126][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 286.647593][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 287.636933][T10430] lo speed is unknown, defaulting to 1000 [ 288.002543][T10439] IPVS: persistence engine module ip_vs_pe_ not found [ 288.272776][T10455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.336863][T10457] bond3: (slave macvlan9): Error -98 calling set_mac_address [ 288.832594][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 289.069858][T10489] lo speed is unknown, defaulting to 1000 [ 289.089187][T10487] netlink: 'syz.0.1179': attribute type 4 has an invalid length. [ 289.110540][T10487] netlink: 'syz.0.1179': attribute type 4 has an invalid length. [ 289.728797][T10491] IPVS: persistence engine module ip_vs_pe_ not found [ 290.293098][T10501] __nla_validate_parse: 4 callbacks suppressed [ 290.293115][T10501] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1183'. [ 290.376664][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 290.581263][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 290.598035][T10508] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0 [ 290.634849][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 290.648836][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 290.665944][T10508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.666726][T10509] netlink: 'syz.2.1185': attribute type 41 has an invalid length. [ 290.777897][T10507] !: renamed from dummy0 (while UP) [ 291.352739][T10524] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 291.365397][T10524] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 291.549547][T10530] IPVS: persistence engine module ip_vs_pe_ not found [ 292.108352][T10542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1194'. [ 292.190440][T10546] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1196'. [ 292.503423][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1198'. [ 292.659505][T10559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1200'. [ 292.701445][T10565] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1199'. [ 292.914171][T10570] IPVS: persistence engine module ip_vs_pe_ not found [ 292.932784][T10571] bond3: (slave macvlan9): Error -98 calling set_mac_address [ 293.144626][T10577] bridge0: entered allmulticast mode [ 293.334224][T10584] lo speed is unknown, defaulting to 1000 [ 293.625924][T10593] netlink: 'syz.0.1211': attribute type 4 has an invalid length. [ 293.655540][T10595] lo speed is unknown, defaulting to 1000 [ 293.690603][T10593] netlink: 'syz.0.1211': attribute type 4 has an invalid length. [ 293.926146][T10409] Set syz1 is full, maxelem 65536 reached [ 293.987811][T10596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 293.991648][T10600] nbd: must specify a size in bytes for the device [ 294.096601][T10598] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 294.178777][ T3013] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 294.334006][T10607] IPVS: persistence engine module ip_vs_pe_ not found [ 294.338379][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 294.394960][T10613] netlink: 'syz.3.1216': attribute type 4 has an invalid length. [ 294.884419][T10620] bond2: (slave macvlan8): Enslaving as a backup interface with an up link [ 295.446765][T10645] xt_socket: unknown flags 0xd0 [ 296.431802][T10649] IPVS: persistence engine module ip_vs_pe_ not found [ 296.795283][T10680] __nla_validate_parse: 6 callbacks suppressed [ 296.795299][T10680] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1232'. [ 296.996097][T10687] bond1: (slave macvlan8): Enslaving as an active interface with an up link [ 297.134538][T10702] netlink: 'syz.3.1240': attribute type 1 has an invalid length. [ 297.145359][T10702] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1240'. [ 297.161634][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 297.262154][T10700] IPVS: persistence engine module ip_vs_pe_ not found [ 297.450150][T10717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1245'. [ 297.725624][T10730] lo speed is unknown, defaulting to 1000 [ 297.739618][T10725] netlink: 'syz.1.1247': attribute type 4 has an invalid length. [ 297.761823][T10725] netlink: 'syz.1.1247': attribute type 4 has an invalid length. [ 297.776962][T10732] bond3: (slave macvlan9): Error -98 calling set_mac_address [ 297.998225][T10742] netlink: 'syz.2.1252': attribute type 21 has an invalid length. [ 298.046180][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 298.055536][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 298.080876][ T3013] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.089738][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 298.102195][ T3013] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.118297][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 298.122144][ T3013] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.137223][T10744] netlink: 'syz.2.1252': attribute type 28 has an invalid length. [ 298.143241][ T3013] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.266096][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1253'. [ 298.353071][T10748] IPVS: persistence engine module ip_vs_pe_ not found [ 298.435515][T10754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1253'. [ 298.897625][T10767] openvswitch: netlink: IP tunnel dst address not specified [ 298.929586][T10769] bond1: (slave macvlan9): Enslaving as an active interface with an up link [ 299.022535][T10774] pim6reg1: entered promiscuous mode [ 299.035126][T10774] pim6reg1: entered allmulticast mode [ 299.179451][T10787] netlink: 'syz.0.1265': attribute type 1 has an invalid length. [ 299.356062][T10787] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.417228][T10792] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.431341][T10792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.479752][T10794] IPVS: persistence engine module ip_vs_pe_ not found [ 299.629131][T10783] lo speed is unknown, defaulting to 1000 [ 299.694905][T10802] vlan2: entered allmulticast mode [ 299.709235][T10802] veth1: entered allmulticast mode [ 299.834448][T10811] tipc: Enabled bearer , priority 0 [ 299.856567][T10811] tipc: Resetting bearer [ 299.918190][T10813] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 299.943915][T10810] tipc: Disabling bearer [ 300.079625][T10821] netlink: 'syz.0.1275': attribute type 11 has an invalid length. [ 300.223232][T10824] delete_channel: no stack [ 300.504597][T10830] lo speed is unknown, defaulting to 1000 [ 300.985542][T10838] IPVS: persistence engine module ip_vs_pe_ not found [ 301.419698][T10853] lo speed is unknown, defaulting to 1000 [ 301.446930][T10850] netlink: 'syz.3.1283': attribute type 4 has an invalid length. [ 301.523009][T10858] netlink: 'syz.3.1283': attribute type 4 has an invalid length. [ 301.985933][T10872] lo speed is unknown, defaulting to 1000 [ 302.023344][T10877] __nla_validate_parse: 1 callbacks suppressed [ 302.023361][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1288'. [ 302.388711][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 302.402644][T10881] hsr_slave_0: left promiscuous mode [ 302.434005][T10881] hsr_slave_1: left promiscuous mode [ 302.861848][T10896] IPVS: persistence engine module ip_vs_pe_ not found [ 303.445744][T10899] lo speed is unknown, defaulting to 1000 [ 304.091890][T10925] bridge_slave_0: left allmulticast mode [ 304.102893][T10925] bridge_slave_0: left promiscuous mode [ 304.110400][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.125172][T10925] bridge_slave_1: left allmulticast mode [ 304.132131][T10925] bridge_slave_1: left promiscuous mode [ 304.143552][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.156905][T10925] bond0: (slave bond_slave_0): Releasing backup interface [ 304.173121][T10925] bond0: (slave bond_slave_1): Releasing backup interface [ 304.185989][T10925] team0: Port device team_slave_0 removed [ 304.201071][T10925] team0: Port device team_slave_1 removed [ 304.210943][T10925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.221083][T10906] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 304.231812][T10925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.245877][T10925] team0: Port device geneve0 removed [ 304.281449][T10927] sit0: left promiscuous mode [ 304.304044][T10925] syz.1.1300 uses old SIOCAX25GETINFO [ 304.313457][T10930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1301'. [ 304.323063][T10927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.487273][T10933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 304.735740][T10939] IPVS: persistence engine module ip_vs_pe_ not found [ 304.988979][T10948] netlink: 'syz.4.1306': attribute type 4 has an invalid length. [ 305.038026][T10947] openvswitch: netlink: IP tunnel dst address not specified [ 305.045779][T10943] netlink: 'syz.4.1306': attribute type 4 has an invalid length. [ 305.183270][T10946] lo speed is unknown, defaulting to 1000 [ 305.314338][T10961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1310'. [ 305.332117][T10961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1310'. [ 305.845028][T10964] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.865817][T10964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.987165][T10959] lo speed is unknown, defaulting to 1000 [ 306.430790][T10971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1312'. [ 306.996521][T10987] sctp: [Deprecated]: syz.0.1318 (pid 10987) Use of int in max_burst socket option. [ 306.996521][T10987] Use struct sctp_assoc_value instead [ 307.095952][T10981] lo speed is unknown, defaulting to 1000 [ 308.339759][T11022] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1329'. [ 308.385307][T11020] IPVS: persistence engine module ip_vs_pe_ not found [ 308.492041][T11027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.532673][T11026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1330'. [ 308.553495][T11026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1330'. [ 309.684981][T11054] lo speed is unknown, defaulting to 1000 [ 309.768445][T11064] IPVS: persistence engine module ip_vs_pe_ not found [ 309.783690][T11058] veth0_to_bond: left allmulticast mode [ 309.793481][T11058] veth0_to_team: left allmulticast mode [ 309.806520][T11058] veth0_vlan: left allmulticast mode [ 309.819053][T11058] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 309.828341][T11058] wireguard0: left allmulticast mode [ 309.837792][T11058] vlan2: left allmulticast mode [ 309.842790][T11058] bond0: left allmulticast mode [ 309.859918][T11058] team0: left allmulticast mode [ 309.875173][T11058] syz_tun: left allmulticast mode [ 309.895752][T11058] macvlan7: left allmulticast mode [ 309.956723][T11070] bond2: (slave macvlan9): Error -98 calling set_mac_address [ 310.154571][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 310.219704][T11050] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 310.372458][T11081] bridge0: port 1(erspan0) entered blocking state [ 310.390680][T11081] bridge0: port 1(erspan0) entered disabled state [ 310.408994][T11081] erspan0: entered allmulticast mode [ 310.426245][T11081] erspan0: entered promiscuous mode [ 310.438208][T11084] erspan0: left allmulticast mode [ 310.444150][T11084] erspan0: left promiscuous mode [ 310.451502][T11084] bridge0: port 1(erspan0) entered disabled state [ 310.473096][T11086] netlink: zone id is out of range [ 310.478329][T11086] netlink: zone id is out of range [ 310.488223][T11086] netlink: zone id is out of range [ 310.493351][T11086] netlink: zone id is out of range [ 310.527605][T11086] netlink: zone id is out of range [ 310.583828][T11086] netlink: zone id is out of range [ 310.626744][T11086] netlink: zone id is out of range [ 310.641849][T11086] netlink: zone id is out of range [ 310.651169][T11086] netlink: del zone limit has 4 unknown bytes [ 310.792784][T11095] tipc: Enabled bearer , priority 0 [ 310.849601][T11090] tipc: Resetting bearer [ 311.042841][T11105] IPVS: persistence engine module ip_vs_pe_ not found [ 311.069775][T11097] syzkaller0: entered promiscuous mode [ 311.096488][T11097] syzkaller0: entered allmulticast mode [ 311.134269][T11089] tipc: Resetting bearer [ 311.194950][T11115] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1354'. [ 311.213396][T11089] tipc: Disabling bearer [ 311.224452][T11115] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1354'. [ 311.254230][T11115] netlink: 'syz.4.1354': attribute type 6 has an invalid length. [ 311.262964][T11115] netlink: 'syz.4.1354': attribute type 5 has an invalid length. [ 311.276703][T11115] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1354'. [ 311.479259][ T5182] Bluetooth: hci0: command 0x0406 tx timeout [ 311.544964][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1357'. [ 311.591466][T11122] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 312.073656][T11144] IPVS: persistence engine module ip_vs_pe_ not found [ 312.435068][T11162] bond3: (slave macvlan9): Error -98 calling set_mac_address [ 312.461223][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'. [ 312.472457][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'. [ 312.482016][T11168] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 312.542478][T11168] bond0: (slave bond_slave_0): Releasing backup interface [ 312.572961][T11168] bond_slave_0: left promiscuous mode [ 312.587157][T11178] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 312.613428][T11168] bond0: (slave bond_slave_1): Releasing backup interface [ 312.640057][T11168] bond_slave_1: left promiscuous mode [ 312.675012][T11168] team_slave_0: left promiscuous mode [ 312.709319][T11168] team0: Port device team_slave_0 removed [ 312.723775][T11168] team_slave_1: left promiscuous mode [ 312.774415][T11187] IPVS: persistence engine module ip_vs_pe_ not found [ 312.788768][T11168] team0: Port device team_slave_1 removed [ 312.797165][T11168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.805623][T11168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.853193][T11168] bond2: (slave ip6gretap1): Releasing backup interface [ 312.867297][T11168] bond2: (slave ip6gretap1): the permanent HWaddr of slave - f6:9e:d8:be:39:da - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 312.907662][T11168] bond2: (slave macvlan8): Removing an active aggregator [ 312.928870][T10268] bond2: Warning: Found an uninitialized port [ 312.943341][T11168] bond2: (slave macvlan8): Releasing backup interface [ 313.032124][T11178] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 313.063708][T11178] bond0: (slave wlan1): Opening slave failed [ 313.069438][T11193] sctp: [Deprecated]: syz.4.1379 (pid 11193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.069438][T11193] Use struct sctp_sack_info instead [ 313.107919][T11195] netlink: 'syz.0.1380': attribute type 15 has an invalid length. [ 313.419187][T11202] __nla_validate_parse: 5 callbacks suppressed [ 313.419205][T11202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1382'. [ 313.483428][T11200] lo speed is unknown, defaulting to 1000 [ 313.761917][T11214] tipc: Enabled bearer , priority 0 [ 313.780849][T11214] syzkaller0: entered promiscuous mode [ 313.786348][T11214] syzkaller0: entered allmulticast mode [ 313.872882][T11218] netlink: 'syz.1.1388': attribute type 10 has an invalid length. [ 313.896680][T11211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1384'. [ 313.923354][T11219] tipc: Resetting bearer [ 314.001198][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1388'. [ 314.010419][T11218] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 314.073399][T11213] tipc: Resetting bearer [ 314.105852][T11213] tipc: Disabling bearer [ 314.176322][T11221] bond0: (slave bridge0): Releasing backup interface [ 314.425402][T11227] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1390'. [ 314.455717][T11223] netlink: 'syz.3.1389': attribute type 4 has an invalid length. [ 314.496189][T11223] netlink: 'syz.3.1389': attribute type 4 has an invalid length. [ 314.528352][T11226] lo speed is unknown, defaulting to 1000 [ 314.952585][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'. [ 315.092944][T11242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1395'. [ 317.432517][T11343] IPVS: persistence engine module ip_vs_pe_ not found [ 317.514472][T11352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1445'. [ 317.554893][T11354] tipc: Enabled bearer , priority 0 [ 317.566173][T11354] syzkaller0: entered promiscuous mode [ 317.572081][T11354] syzkaller0: entered allmulticast mode [ 317.581880][T11354] bridge_slave_1: mtu less than device minimum [ 317.608616][T11354] tipc: Resetting bearer [ 317.619121][T11354] tipc: Resetting bearer [ 317.650897][T11354] tipc: Disabling bearer [ 317.666492][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 317.691024][T11357] ip6tnl1: entered promiscuous mode [ 317.696330][T11357] ip6tnl1: entered allmulticast mode [ 317.880137][T11360] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1448'. [ 317.919335][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1450'. [ 318.134955][T11373] sctp: [Deprecated]: syz.1.1452 (pid 11373) Use of int in maxseg socket option. [ 318.134955][T11373] Use struct sctp_assoc_value instead [ 318.155984][T11373] team0: entered allmulticast mode [ 318.542274][T11382] IPVS: persistence engine module ip_vs_pe_ not found [ 318.727016][T11386] lo speed is unknown, defaulting to 1000 [ 318.816503][T11393] tipc: Enabling of bearer rejected, failed to enable media [ 319.194392][T11415] __nla_validate_parse: 1 callbacks suppressed [ 319.194410][T11415] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1465'. [ 319.610481][T11424] IPVS: persistence engine module ip_vs_pe_ not found [ 319.785848][T11430] netlink: 'syz.0.1471': attribute type 3 has an invalid length. [ 319.860892][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'. [ 320.181255][T11447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1475'. [ 320.243273][T11451] netlink: 'syz.3.1476': attribute type 7 has an invalid length. [ 320.251478][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'. [ 320.269472][T11454] netlink: 'syz.2.1475': attribute type 3 has an invalid length. [ 320.295571][T11454] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1475'. [ 320.350843][T11453] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 320.379106][T11438] lo speed is unknown, defaulting to 1000 [ 320.483221][T11437] team0: Port device netdevsim0 removed [ 320.594036][T11459] netlink: 'syz.2.1477': attribute type 12 has an invalid length. [ 321.126935][T11470] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1480'. [ 321.184032][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 321.338483][T11478] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1484'. [ 321.364613][T11473] IPVS: persistence engine module ip_vs_pe_ not found [ 321.529764][T11489] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1487'. [ 321.552036][T11494] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1483'. [ 321.726467][T11502] netlink: 'syz.0.1489': attribute type 10 has an invalid length. [ 321.890667][T11506] netlink: 'syz.3.1490': attribute type 2 has an invalid length. [ 321.945056][T11506] tipc: Enabled bearer , priority 0 [ 321.953033][T11506] syzkaller0: entered promiscuous mode [ 321.959711][T11506] syzkaller0: entered allmulticast mode [ 321.971743][T11506] tipc: Resetting bearer [ 321.998310][T11505] tipc: Resetting bearer [ 322.029592][T11505] tipc: Disabling bearer [ 322.354896][T11519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.423067][T11512] lo speed is unknown, defaulting to 1000 [ 322.624849][T11529] IPVS: persistence engine module ip_vs_pe_ not found [ 322.661780][T11533] tipc: Enabling of bearer rejected, already enabled [ 322.700084][T11533] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 322.746186][T11533] tipc: Resetting bearer [ 322.756320][T11535] tipc: Enabled bearer , priority 0 [ 322.770929][T11535] syzkaller0: entered promiscuous mode [ 322.786606][T11535] syzkaller0: entered allmulticast mode [ 322.867850][T11534] tipc: Resetting bearer [ 322.909104][T11534] tipc: Disabling bearer [ 323.127772][T11548] syzkaller1: entered promiscuous mode [ 323.133286][T11548] syzkaller1: entered allmulticast mode [ 323.226241][T11546] netlink: 'syz.3.1502': attribute type 4 has an invalid length. [ 323.276298][ T5947] lo speed is unknown, defaulting to 1000 [ 323.282304][T11546] netlink: 'syz.3.1502': attribute type 4 has an invalid length. [ 323.300341][ T5947] syz0: Port: 1 Link DOWN [ 323.367942][ T5947] lo speed is unknown, defaulting to 1000 [ 323.375104][ T10] lo speed is unknown, defaulting to 1000 [ 323.386899][ T10] syz0: Port: 1 Link ACTIVE [ 323.552210][T11561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.559513][T11561] IPv6: NLM_F_CREATE should be set when creating new route [ 323.581872][T11561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.750347][T11569] nbd: must specify at least one socket [ 323.981459][T11573] IPVS: persistence engine module ip_vs_pe_ not found [ 324.137099][T11579] lo speed is unknown, defaulting to 1000 [ 324.935881][T11613] __nla_validate_parse: 2 callbacks suppressed [ 324.935899][T11613] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1521'. [ 325.072543][T11618] IPVS: persistence engine module ip_vs_pe_ not found [ 325.101696][T11622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1524'. [ 325.128833][T11622] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 325.197592][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1524'. [ 325.206580][T11628] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 325.480645][T11641] netlink: 'syz.4.1531': attribute type 1 has an invalid length. [ 325.504917][T11641] tipc: Enabled bearer , priority 0 [ 325.675314][T11646] tipc: Resetting bearer [ 326.348367][T11661] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 326.361713][T11661] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 326.532017][T11664] IPVS: persistence engine module ip_vs_pe_ not found [ 326.540077][T11640] tipc: Disabling bearer [ 326.950428][T11678] netlink: 'syz.2.1541': attribute type 10 has an invalid length. [ 327.038700][T11678] macvlan0: entered promiscuous mode [ 327.070666][T11683] netlink: 'syz.1.1542': attribute type 11 has an invalid length. [ 327.073961][T11678] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 327.087689][T11683] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1542'. [ 327.356425][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 327.607808][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1547'. [ 327.722738][T11705] IPVS: persistence engine module ip_vs_pe_ not found [ 327.869734][ T3013] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.902367][ T3013] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.923154][ T3013] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.944754][ T3013] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.068507][T11712] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 328.111375][T11712] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.164217][T11719] ip6tnl2: entered promiscuous mode [ 328.169910][T11719] ip6tnl2: entered allmulticast mode [ 328.176918][T11719] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 328.202174][T11725] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 328.223956][T11727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1555'. [ 328.231220][T11716] bond5: (slave gretap2): making interface the new active one [ 328.239406][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1553'. [ 328.241742][T11716] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 328.272993][T11727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1555'. [ 328.390126][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 328.563156][T11741] lo speed is unknown, defaulting to 1000 [ 328.602104][T11743] IPVS: persistence engine module ip_vs_pe_ not found [ 328.772642][T11758] tipc: Enabling of bearer rejected, failed to enable media [ 328.822982][T11760] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 329.451390][T11780] pimreg: entered allmulticast mode [ 329.632619][T11790] IPVS: persistence engine module ip_vs_pe_ not found [ 329.701097][T11797] syzkaller1: entered promiscuous mode [ 329.725155][T11797] syzkaller1: entered allmulticast mode [ 329.757088][T11800] netlink: 'syz.1.1578': attribute type 6 has an invalid length. [ 329.976313][T11810] netlink: 'syz.1.1581': attribute type 1 has an invalid length. [ 329.995899][T11805] lo speed is unknown, defaulting to 1000 [ 330.216638][T11810] bond2: entered promiscuous mode [ 330.264433][T11810] 8021q: adding VLAN 0 to HW filter on device bond2 [ 330.349364][T11817] bond2: (slave bridge1): making interface the new active one [ 330.357030][T11817] bridge1: entered promiscuous mode [ 330.371000][T11817] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 330.856572][T11840] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 330.872026][T11840] __nla_validate_parse: 5 callbacks suppressed [ 330.872040][T11840] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1586'. [ 330.897173][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 330.914608][T11840] syzkaller1: entered promiscuous mode [ 330.920329][T11840] syzkaller1: entered allmulticast mode [ 330.972565][T11843] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1588'. [ 331.028388][T11847] ip6tnl2: entered promiscuous mode [ 331.399339][T11873] Set syz1 is full, maxelem 65536 reached [ 331.440602][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 331.533822][T11880] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1597'. [ 332.160830][T11909] tipc: Enabled bearer , priority 0 [ 332.922507][T11907] vlan0: left promiscuous mode [ 332.932565][T11907] veth1_vlan: left allmulticast mode [ 332.938361][T11907] macvlan1: left allmulticast mode [ 333.001708][T11949] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1609'. [ 333.038507][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 333.072749][T11907] macvlan2: left promiscuous mode [ 333.081678][T11907] macvlan3: left promiscuous mode [ 333.090264][T11907] macvlan4: left promiscuous mode [ 333.157641][T11907] bond0: left promiscuous mode [ 333.164390][T11907] macvlan5: left promiscuous mode [ 333.182125][T11907] gtp0: left promiscuous mode [ 333.186975][T11907] gtp0: left allmulticast mode [ 333.236167][ T24] lo speed is unknown, defaulting to 1000 [ 333.245876][T11897] tipc: Disabling bearer [ 333.258474][ T24] syz0: Port: 1 Link DOWN [ 333.329123][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.351250][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.381514][ T5976] lo speed is unknown, defaulting to 1000 [ 333.489716][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.525217][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.594583][T11964] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.695524][T11968] atomic_op ffff88807b098998 conn xmit_atomic 0000000000000000 [ 333.721836][T11964] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.779750][T11976] tap0: tun_chr_ioctl cmd 1074812118 [ 333.816652][T11964] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.921741][T11964] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.961914][T11986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1620'. [ 334.107451][ T5863] Bluetooth: hci4: command 0x0405 tx timeout [ 334.107579][T10269] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.252462][ T3013] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.268709][ T3013] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.291492][ T3013] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.367177][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1623'. [ 334.558771][T12007] lo speed is unknown, defaulting to 1000 [ 334.986429][T12022] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1628'. [ 335.192509][T12010] netlink: 'syz.2.1625': attribute type 2 has an invalid length. [ 335.441630][T12041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.662064][T12047] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 336.568840][T12070] netlink: 'syz.4.1642': attribute type 4 has an invalid length. [ 336.607191][T12072] lo speed is unknown, defaulting to 1000 [ 336.647956][T12076] netlink: 'syz.4.1642': attribute type 4 has an invalid length. [ 337.021418][T12084] __nla_validate_parse: 3 callbacks suppressed [ 337.021436][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1645'. [ 337.645697][T12107] lo speed is unknown, defaulting to 1000 [ 337.757765][T12111] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1654'. [ 337.787006][T12111] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 337.805766][T12111] netlink: 'syz.3.1654': attribute type 6 has an invalid length. [ 337.834454][T12111] netlink: 'syz.3.1654': attribute type 3 has an invalid length. [ 338.054310][T12121] netlink: 'syz.3.1655': attribute type 10 has an invalid length. [ 338.087445][T12118] gtp1: entered promiscuous mode [ 338.200051][T12121] bond0: (slave wlan1): Opening slave failed [ 338.366546][T12125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1658'. [ 338.531498][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 338.920436][T12147] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1664'. [ 339.036297][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'. [ 339.140971][T12148] lo speed is unknown, defaulting to 1000 [ 339.149864][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'. [ 339.223385][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'. [ 339.233346][T10268] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.265338][T10268] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.281340][T10268] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.309421][T10268] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.606596][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 339.653681][T10268] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 339.673985][T12169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1670'. [ 340.185772][T12197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.193066][T12197] IPv6: NLM_F_CREATE should be set when creating new route [ 340.200431][T12197] IPv6: NLM_F_CREATE should be set when creating new route [ 340.221604][T12193] IPVS: persistence engine module ip_vs_pe_ not found [ 340.493889][T12205] netlink: 'syz.2.1680': attribute type 4 has an invalid length. [ 340.495488][T12211] lo speed is unknown, defaulting to 1000 [ 340.506956][T12205] netlink: 'syz.2.1680': attribute type 4 has an invalid length. [ 341.086680][T12227] batadv3: entered promiscuous mode [ 341.102630][T12227] batadv3: entered allmulticast mode [ 341.318646][T12235] IPVS: persistence engine module ip_vs_pe_ not found [ 341.429689][T12239] IPVS: persistence engine module ip_vs_pe_ not found [ 341.436833][T12241] netlink: 'syz.0.1688': attribute type 1 has an invalid length. [ 341.800101][T12254] netlink: 'syz.1.1693': attribute type 13 has an invalid length. [ 341.813898][T12254] netlink: 'syz.1.1693': attribute type 17 has an invalid length. [ 341.944651][T12254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.195046][T12252] lo speed is unknown, defaulting to 1000 [ 342.237806][T12264] __nla_validate_parse: 9 callbacks suppressed [ 342.237824][T12264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1695'. [ 342.284879][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'. [ 342.668096][ T5863] Bluetooth: hci4: command 0x0405 tx timeout [ 342.708037][T12288] netlink: 'syz.3.1701': attribute type 4 has an invalid length. [ 342.781942][T12285] IPVS: persistence engine module ip_vs_pe_ not found [ 342.963059][T12299] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 342.988566][T12299] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 343.060142][T12299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1704'. [ 343.190423][T12309] tipc: Enabled bearer , priority 0 [ 343.375424][T12318] sctp: [Deprecated]: syz.4.1711 (pid 12318) Use of int in max_burst socket option deprecated. [ 343.375424][T12318] Use struct sctp_assoc_value instead [ 343.736375][T12328] IPVS: persistence engine module ip_vs_pe_ not found [ 343.800594][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1716'. [ 344.111686][T12355] tipc: Enabled bearer , priority 0 [ 344.119429][T12355] syzkaller0: entered promiscuous mode [ 344.125012][T12355] syzkaller0: entered allmulticast mode [ 344.294706][T12353] tipc: Resetting bearer [ 344.307584][ T5976] tipc: Node number set to 3032979474 [ 344.323895][T12351] tipc: Resetting bearer [ 344.368069][T12351] tipc: Disabling bearer [ 344.583775][T12379] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1729'. [ 344.619198][T12375] IPVS: persistence engine module ip_vs_pe_ not found [ 344.737703][T12388] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1731'. [ 344.747622][ T5863] Bluetooth: hci4: command 0x0405 tx timeout [ 344.754516][T12387] netlink: 'syz.3.1730': attribute type 10 has an invalid length. [ 344.764043][T12387] bond0: (slave wlan1): Opening slave failed [ 345.014577][T12396] lo speed is unknown, defaulting to 1000 [ 345.027679][T12405] netlink: 'syz.3.1733': attribute type 6 has an invalid length. [ 345.046132][T12409] netlink: 'syz.1.1734': attribute type 4 has an invalid length. [ 345.087803][T12398] netlink: 'syz.1.1734': attribute type 4 has an invalid length. [ 345.315128][T12418] bridge_slave_0: entered promiscuous mode [ 345.371500][T12418] bridge_slave_0: entered allmulticast mode [ 345.956032][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1738'. [ 345.967567][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1738'. [ 345.990079][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1738'. [ 345.993625][T12406] lo speed is unknown, defaulting to 1000 [ 346.003153][T12431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1738'. [ 346.082517][T12437] netlink: 'syz.0.1739': attribute type 12 has an invalid length. [ 346.267964][T12442] IPVS: persistence engine module ip_vs_pe_ not found [ 346.567191][T12455] macvlan11: entered promiscuous mode [ 346.572802][T12455] bond0: entered promiscuous mode [ 346.578291][T12455] team0: entered promiscuous mode [ 347.535330][T12488] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 347.581588][T12494] __nla_validate_parse: 63 callbacks suppressed [ 347.581605][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 347.775583][T12497] lo speed is unknown, defaulting to 1000 [ 347.920043][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'. [ 348.137113][T12515] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 350.751506][T12507] lo speed is unknown, defaulting to 1000 [ 350.938071][T12556] netlink: 'syz.1.1766': attribute type 3 has an invalid length. [ 351.040720][T12558] bond2: (slave macvlan10): Enslaving as a backup interface with a down link [ 351.054905][T12559] team0: left allmulticast mode [ 351.146715][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1768'. [ 351.237782][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1769'. [ 351.246834][T12564] netlink: 'syz.3.1769': attribute type 20 has an invalid length. [ 351.260910][T12517] lo speed is unknown, defaulting to 1000 [ 351.282100][ T3027] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.282328][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1769'. [ 351.301797][ T3027] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.318221][T12564] netlink: 'syz.3.1769': attribute type 20 has an invalid length. [ 351.392079][ T3027] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.410316][ T3027] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.803627][T12570] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1771'. [ 351.875532][T12559] siw: device registration error -23 [ 351.987944][T12577] netlink: 'syz.1.1773': attribute type 1 has an invalid length. [ 352.007560][T12577] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1773'. [ 352.181893][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 352.268309][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1773'. [ 352.291739][T12580] netlink: 'syz.1.1773': attribute type 12 has an invalid length. [ 352.352826][T12583] macvlan11: entered promiscuous mode [ 352.362741][T12583] bond0: entered promiscuous mode [ 352.623155][T12588] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 352.629042][T12588] dvmrp1: linktype set to 769 [ 352.945633][T12595] netlink: 'syz.3.1780': attribute type 6 has an invalid length. [ 352.963446][T12594] netlink: zone id is out of range [ 352.974868][T12594] netlink: zone id is out of range [ 352.981568][T12594] netlink: zone id is out of range [ 352.986860][T12594] netlink: zone id is out of range [ 353.002163][T12595] netlink: 'syz.3.1780': attribute type 12 has an invalid length. [ 353.010856][T12595] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1780'. [ 353.026930][T12594] netlink: zone id is out of range [ 353.048930][T12594] netlink: zone id is out of range [ 353.055121][T12594] netlink: zone id is out of range [ 353.102803][T12594] netlink: zone id is out of range [ 353.129061][T12594] netlink: zone id is out of range [ 353.134259][T12594] netlink: zone id is out of range [ 353.348931][T12604] lo speed is unknown, defaulting to 1000 [ 353.351318][T12603] tipc: Enabling of bearer rejected, already enabled [ 353.379940][T12604] lo speed is unknown, defaulting to 1000 [ 353.386341][T12603] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 353.412208][T12599] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1781'. [ 353.437653][T12603] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 353.446299][T12604] lo speed is unknown, defaulting to 1000 [ 353.449431][T12599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1781'. [ 353.504284][T12604] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 353.523151][T12603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1783'. [ 353.543461][T12604] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 353.558748][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1784'. [ 353.594885][T12599] tipc: Enabled bearer , priority 0 [ 353.626849][T12617] tipc: Resetting bearer [ 353.645490][T12604] lo speed is unknown, defaulting to 1000 [ 353.665024][T12618] veth0_to_bridge: entered promiscuous mode [ 353.686652][T12618] veth0_to_bridge: entered allmulticast mode [ 353.698354][T12604] lo speed is unknown, defaulting to 1000 [ 353.709513][T12604] lo speed is unknown, defaulting to 1000 [ 353.736802][T12604] lo speed is unknown, defaulting to 1000 [ 353.738930][T12622] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1786'. [ 353.744799][T12604] lo speed is unknown, defaulting to 1000 [ 353.773747][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 353.789198][T12609] smc: removing ib device syz0 [ 353.814460][T12621] macvlan1: entered promiscuous mode [ 353.827016][T12621] bond0: entered promiscuous mode [ 353.849770][T12626] netlink: 'syz.3.1788': attribute type 12 has an invalid length. [ 353.911828][T12619] siw: device registration error -23 [ 354.126547][T12598] tipc: Disabling bearer [ 354.372352][T12649] syzkaller1: entered promiscuous mode [ 354.379843][T12649] syzkaller1: entered allmulticast mode [ 354.561063][ T5924] IPVS: starting estimator thread 0... [ 354.687449][T12665] IPVS: using max 25 ests per chain, 60000 per kthread [ 355.106374][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 355.220938][T12680] ipvlan2: entered promiscuous mode [ 355.525148][ T30] audit: type=1804 audit(1756553802.571:2): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1801" name="/newroot/335/memory.events" dev="tmpfs" ino=1729 res=1 errno=0 [ 355.557161][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1802'. [ 355.593223][ T30] audit: type=1800 audit(1756553802.571:3): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1801" name="memory.events" dev="tmpfs" ino=1729 res=0 errno=0 [ 355.641326][T12683] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1799'. [ 355.683853][T12696] macvlan12: entered promiscuous mode [ 356.230190][T12647] lo speed is unknown, defaulting to 1000 [ 356.525397][T12725] pimreg: entered allmulticast mode [ 356.535050][T12725] pimreg: left allmulticast mode [ 356.844694][T12727] bond6: entered promiscuous mode [ 356.872030][T12727] bond6: entered allmulticast mode [ 356.882614][T12727] 8021q: adding VLAN 0 to HW filter on device bond6 [ 357.209540][T12751] netlink: 'syz.1.1814': attribute type 4 has an invalid length. [ 357.227546][T12757] netlink: 'syz.1.1814': attribute type 4 has an invalid length. [ 357.414819][T12768] pimreg: left allmulticast mode [ 357.788783][T12790] netlink: 'syz.3.1823': attribute type 10 has an invalid length. [ 357.814609][T12790] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 357.854400][T12790] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 357.974662][T12801] netlink: 'syz.3.1828': attribute type 1 has an invalid length. [ 358.125221][T12810] __nla_validate_parse: 12 callbacks suppressed [ 358.125239][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'. [ 358.142291][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'. [ 358.315399][T12827] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1838'. [ 358.560725][T12837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1842'. [ 358.574573][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 358.629881][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1842'. [ 358.788758][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1845'. [ 358.798444][T12844] tipc: Enabling of bearer rejected, failed to enable media [ 358.806895][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1845'. [ 358.826513][T12843] tipc: Enabling of bearer rejected, failed to enable media [ 358.902883][T12849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1846'. [ 358.916720][T12849] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1846'. [ 358.992981][T12855] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 359.017459][T12855] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 359.072264][T12858] netlink: 'syz.1.1849': attribute type 1 has an invalid length. [ 359.206824][T12862] tipc: Enabled bearer , priority 26 [ 359.673910][T12891] netlink: 'syz.2.1860': attribute type 32 has an invalid length. [ 359.925748][T12877] lo speed is unknown, defaulting to 1000 [ 360.181615][T12904] dvmrp1: entered allmulticast mode [ 360.225538][T12903] tipc: Enabling of bearer rejected, already enabled [ 360.259573][T12903] net_ratelimit: 13 callbacks suppressed [ 360.259590][T12903] syzkaller0: mtu greater than device maximum [ 360.377913][T12917] netlink: 'syz.1.1869': attribute type 6 has an invalid length. [ 360.508652][T12922] veth0_to_bridge: left allmulticast mode [ 360.534097][T12922] bond6: left allmulticast mode [ 360.785207][T12938] tipc: Enabling of bearer rejected, already enabled [ 361.443149][T12980] pimreg: entered allmulticast mode [ 361.580490][T12982] pimreg: left allmulticast mode [ 361.751364][T12990] bond1: (slave macvlan12): Error -98 calling set_mac_address [ 361.854686][T12971] lo speed is unknown, defaulting to 1000 [ 361.864349][T12997] netlink: 'syz.4.1894': attribute type 5 has an invalid length. [ 362.683537][T12970] lo speed is unknown, defaulting to 1000 [ 362.935654][T13034] wg1 speed is unknown, defaulting to 1000 [ 362.942465][T13034] wg1 speed is unknown, defaulting to 1000 [ 363.007109][T13034] wg1 speed is unknown, defaulting to 1000 [ 363.254007][T13044] netlink: 'syz.3.1905': attribute type 1 has an invalid length. [ 363.300100][T13034] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 363.366643][T13048] __nla_validate_parse: 15 callbacks suppressed [ 363.366662][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1905'. [ 363.546959][T13047] bond3: (slave geneve2): making interface the new active one [ 363.561966][T13047] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 363.650762][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 363.662970][T13057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1906'. [ 363.664159][T13048] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.677406][T13034] wg1 speed is unknown, defaulting to 1000 [ 363.696189][ T7297] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 363.735144][ T7297] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 363.759951][ T7297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 363.786368][ T7297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 363.816172][T13034] wg1 speed is unknown, defaulting to 1000 [ 363.905607][T13034] wg1 speed is unknown, defaulting to 1000 [ 363.948151][T13034] wg1 speed is unknown, defaulting to 1000 [ 363.968196][T13034] wg1 speed is unknown, defaulting to 1000 [ 363.976084][T13034] wg1 speed is unknown, defaulting to 1000 [ 364.115771][T13071] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1911'. [ 364.227790][T13070] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1911'. [ 364.256151][T13073] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1911'. [ 364.694597][T13092] tipc: New replicast peer: 255.255.255.255 [ 364.702558][T13092] tipc: Enabled bearer , priority 26 [ 364.768824][T13092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1915'. [ 365.189257][T13111] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1919'. [ 365.260426][T13107] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 365.353830][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 365.380975][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1924'. [ 365.552026][T13132] netlink: 'syz.4.1921': attribute type 1 has an invalid length. [ 365.582740][T13132] netlink: 'syz.4.1921': attribute type 2 has an invalid length. [ 365.618316][T13132] netlink: 'syz.4.1921': attribute type 1 has an invalid length. [ 365.655217][T13132] netlink: 'syz.4.1921': attribute type 2 has an invalid length. [ 365.817532][ T5924] tipc: Node number set to 25562016 [ 365.846409][T13151] netlink: 'syz.0.1932': attribute type 6 has an invalid length. [ 366.007987][T13160] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 366.131205][T13176] netlink: 'syz.1.1937': attribute type 1 has an invalid length. [ 366.157423][T13176] netlink: 'syz.1.1937': attribute type 2 has an invalid length. [ 366.170107][T13176] netlink: 'syz.1.1937': attribute type 1 has an invalid length. [ 366.961827][T13217] syzkaller0: entered promiscuous mode [ 366.974729][T13217] syzkaller0: entered allmulticast mode [ 367.227491][ T5863] Bluetooth: hci4: command 0x0405 tx timeout [ 368.983465][T13218] lo speed is unknown, defaulting to 1000 [ 368.990788][T13234] tipc: Enabling of bearer rejected, already enabled [ 369.004043][T13218] wg1 speed is unknown, defaulting to 1000 [ 369.165203][T13246] __nla_validate_parse: 6 callbacks suppressed [ 369.165220][T13246] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1959'. [ 369.169362][T13242] syzkaller1: entered promiscuous mode [ 369.191730][T13242] syzkaller1: entered allmulticast mode [ 369.233420][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1956'. [ 369.279883][T13247] validate_nla: 2 callbacks suppressed [ 369.279899][T13247] netlink: 'syz.4.1959': attribute type 29 has an invalid length. [ 369.306089][T13246] netlink: 'syz.4.1959': attribute type 29 has an invalid length. [ 369.451131][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1962'. [ 369.504186][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'. [ 369.688055][T13261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1963'. [ 369.711179][T13262] veth0_to_bond: entered allmulticast mode [ 369.717226][T13245] lo speed is unknown, defaulting to 1000 [ 369.785054][T13275] netlink: zone id is out of range [ 369.799187][T13245] wg1 speed is unknown, defaulting to 1000 [ 369.822715][T13275] netlink: zone id is out of range [ 369.836336][T13276] netlink: del zone limit has 4 unknown bytes [ 369.863842][T13275] netlink: zone id is out of range [ 369.892516][T13275] netlink: zone id is out of range [ 369.903104][T13275] netlink: zone id is out of range [ 369.925934][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 369.939848][T13279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1967'. [ 369.947783][T13275] netlink: zone id is out of range [ 369.949416][T13279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1967'. [ 369.974046][T13275] netlink: zone id is out of range [ 369.987766][T13282] macvlan12: entered promiscuous mode [ 370.000676][T13275] netlink: zone id is out of range [ 370.014072][T13275] netlink: zone id is out of range [ 370.344008][T13299] sctp: [Deprecated]: syz.0.1973 (pid 13299) Use of int in max_burst socket option. [ 370.344008][T13299] Use struct sctp_assoc_value instead [ 370.380142][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'. [ 370.400022][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'. [ 370.550465][T13252] lo speed is unknown, defaulting to 1000 [ 370.580713][T13306] netlink: 'syz.4.1975': attribute type 6 has an invalid length. [ 370.588914][T13252] wg1 speed is unknown, defaulting to 1000 [ 370.650589][T13308] netlink: 'syz.1.1976': attribute type 1 has an invalid length. [ 370.700381][T13308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.707652][T13308] IPv6: NLM_F_CREATE should be set when creating new route [ 370.714875][T13308] IPv6: NLM_F_CREATE should be set when creating new route [ 370.756707][T13308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.857990][T13310] netlink: 'syz.2.1977': attribute type 64 has an invalid length. [ 371.570698][T13335] bond0: (slave syz_tun): Releasing backup interface [ 371.606754][T13335] syz_tun (unregistering): left promiscuous mode [ 372.154802][T13358] syzkaller0: entered promiscuous mode [ 372.170425][T13358] syzkaller0: entered allmulticast mode [ 373.646895][T13341] lo speed is unknown, defaulting to 1000 [ 373.652295][T13363] pimreg: entered allmulticast mode [ 373.712913][T13341] wg1 speed is unknown, defaulting to 1000 [ 373.719209][T13347] lo speed is unknown, defaulting to 1000 [ 373.745148][T13347] wg1 speed is unknown, defaulting to 1000 [ 373.835562][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.857149][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.080790][T13385] macvlan13: entered promiscuous mode [ 374.321025][T13402] tipc: Enabling of bearer rejected, already enabled [ 374.742534][T13421] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 374.775775][T13421] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 374.799211][T13421] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 374.809224][T13421] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 374.821056][T13421] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 374.833896][T13421] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 374.844671][T13423] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.855128][T13423] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.866138][T13421] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 374.869154][T13425] __nla_validate_parse: 6 callbacks suppressed [ 374.869168][T13425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2007'. [ 374.886372][T13426] netlink: 'syz.2.2006': attribute type 39 has an invalid length. [ 374.906586][T13421] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 374.923233][T13421] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 374.947281][T13421] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 374.967927][T13428] syz_tun: entered allmulticast mode [ 374.988738][T13428] dvmrp8: entered allmulticast mode [ 375.030719][T13423] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.049438][T13423] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.068948][T13433] netlink: 'syz.0.2008': attribute type 23 has an invalid length. [ 375.177258][T13423] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.197593][T13423] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.200350][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2011'. [ 375.217786][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 375.278028][T13437] macvlan5: entered promiscuous mode [ 375.284698][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 375.296102][T13423] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.317492][T13423] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.368710][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.376553][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.503577][T13446] net_ratelimit: 9 callbacks suppressed [ 375.503593][T13446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.531419][ T7297] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.556220][ T7297] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.583745][T10268] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.595163][T10268] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.613277][T13447] tipc: Enabled bearer , priority 0 [ 375.621733][T13428] lo speed is unknown, defaulting to 1000 [ 375.639212][T13450] team0: Refused to change device type [ 375.656879][T13428] wg1 speed is unknown, defaulting to 1000 [ 375.673268][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.684283][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.734569][ T7297] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.748013][ T7297] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.792497][T13427] syz_tun: left allmulticast mode [ 375.805893][T13427] dvmrp8: left allmulticast mode [ 375.951833][T13444] tipc: Disabling bearer [ 376.283256][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'. [ 376.307646][T13481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.589559][T13489] vlan0: entered promiscuous mode [ 376.594690][T13489] veth1: entered promiscuous mode [ 376.897261][T13503] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2031'. [ 378.043948][T13532] netlink: 'syz.4.2040': attribute type 4 has an invalid length. [ 379.106806][T13495] lo speed is unknown, defaulting to 1000 [ 379.114570][T13495] wg1 speed is unknown, defaulting to 1000 [ 379.304304][T13543] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 379.315198][ T5863] Bluetooth: hci4: link tx timeout [ 379.326813][T13540] netlink: 'syz.1.2041': attribute type 3 has an invalid length. [ 379.327455][ T5863] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 379.343826][ T5182] Bluetooth: hci4: link tx timeout [ 379.351814][ T5182] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 379.359868][ T5182] Bluetooth: hci4: link tx timeout [ 379.365076][ T5182] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 379.377674][ T5182] Bluetooth: hci4: link tx timeout [ 379.382802][ T5182] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 379.391723][ T5182] Bluetooth: hci4: link tx timeout [ 379.396852][ T5182] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 379.406720][ T5182] Bluetooth: hci4: link tx timeout [ 379.413189][ T5182] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 379.688305][T13539] lo speed is unknown, defaulting to 1000 [ 379.695870][T13539] wg1 speed is unknown, defaulting to 1000 [ 379.698116][T13559] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2047'. [ 380.281885][T13561] lo speed is unknown, defaulting to 1000 [ 380.315241][T13573] netlink: 'syz.4.2050': attribute type 4 has an invalid length. [ 380.320724][T13561] wg1 speed is unknown, defaulting to 1000 [ 380.366536][T13569] netlink: 'syz.4.2050': attribute type 4 has an invalid length. [ 381.090975][T13604] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 381.324151][T13571] lo speed is unknown, defaulting to 1000 [ 381.341551][T13571] wg1 speed is unknown, defaulting to 1000 [ 381.387442][ T5182] Bluetooth: hci4: command 0x0405 tx timeout [ 381.644956][T13631] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2065'. [ 381.647664][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'. [ 381.671800][T13624] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2065'. [ 381.715991][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'. [ 381.794490][T13640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2066'. [ 382.286243][T13652] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2067'. [ 382.296001][T13652] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 382.742551][T13640] lo speed is unknown, defaulting to 1000 [ 382.764191][T13640] wg1 speed is unknown, defaulting to 1000 [ 383.270108][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 383.653801][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 383.792452][T13696] netlink: 'syz.3.2082': attribute type 10 has an invalid length. [ 383.808508][T13697] pim6reg: entered allmulticast mode [ 384.187108][T13716] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2086'. [ 384.806687][T13723] lo speed is unknown, defaulting to 1000 [ 384.814367][T13723] wg1 speed is unknown, defaulting to 1000 [ 384.870346][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2091'. [ 384.878456][T13710] lo speed is unknown, defaulting to 1000 [ 384.893413][T13710] wg1 speed is unknown, defaulting to 1000 [ 384.913616][T13735] macvlan13: entered promiscuous mode [ 386.089962][T13767] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 386.262977][T13769] bond3: (slave gretap1): making interface the new active one [ 386.282215][T13769] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 386.299605][T13771] tunl0: entered promiscuous mode [ 386.304869][T13771] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 386.400601][T13771] tipc: Enabling of bearer rejected, already enabled [ 386.653867][T13793] macvlan6: entered promiscuous mode [ 387.353992][T13824] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 387.386066][T13827] __nla_validate_parse: 4 callbacks suppressed [ 387.386085][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2115'. [ 387.512707][T13833] wireguard0: entered promiscuous mode [ 387.521174][T13833] wireguard0: entered allmulticast mode [ 387.652854][T13849] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2119'. [ 387.849745][T13854] dvmrp8: entered allmulticast mode [ 387.926509][T13788] lo speed is unknown, defaulting to 1000 [ 387.956315][T13788] wg1 speed is unknown, defaulting to 1000 [ 387.996184][T13792] lo speed is unknown, defaulting to 1000 [ 388.118137][T13792] wg1 speed is unknown, defaulting to 1000 [ 388.460983][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 388.470884][T13866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2123'. [ 388.502331][T13852] dvmrp8: left allmulticast mode [ 389.040990][T13876] IPVS: length: 128 != 8 [ 389.458014][T13893] netlink: 'syz.2.2132': attribute type 96 has an invalid length. [ 389.621685][T13899] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2135'. [ 389.624448][T13900] netlink: 'syz.3.2133': attribute type 1 has an invalid length. [ 389.754354][T13900] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.828406][T13904] bond5: (slave gretap1): making interface the new active one [ 389.838999][T13904] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 389.848733][T13906] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2137'. [ 390.126296][ T9] wg1 speed is unknown, defaulting to 1000 [ 390.136008][T13935] tc_dump_action: action bad kind [ 390.147751][T13916] syzkaller1: entered promiscuous mode [ 390.154747][T13916] syzkaller1: entered allmulticast mode [ 390.602816][T13912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.838735][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2145'. [ 390.878893][T13953] dvmrp8: entered allmulticast mode [ 390.913999][T13952] dvmrp8: left allmulticast mode [ 391.012899][T13959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2149'. [ 391.134946][T13941] lo speed is unknown, defaulting to 1000 [ 391.165084][T13941] wg1 speed is unknown, defaulting to 1000 [ 391.286060][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2153'. [ 391.446801][T13987] netlink: 'syz.1.2155': attribute type 13 has an invalid length. [ 391.462896][T13987] netlink: 'syz.1.2155': attribute type 17 has an invalid length. [ 391.542928][T13987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.563321][ T3027] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 392.066872][T13998] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 392.416531][T13989] lo speed is unknown, defaulting to 1000 [ 392.431311][T14010] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4. [ 392.449133][T13989] wg1 speed is unknown, defaulting to 1000 [ 392.498833][T14015] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2163'. [ 392.584570][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 392.613067][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 392.626152][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 392.631944][T14021] netlink: 'syz.2.2166': attribute type 18 has an invalid length. [ 392.660759][T14021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2166'. [ 392.692294][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2165'. [ 392.773613][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 392.902179][T14032] team0: Mode changed to "loadbalance" [ 393.198003][T14048] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2174'. [ 393.658101][T14030] lo speed is unknown, defaulting to 1000 [ 393.759597][T14030] wg1 speed is unknown, defaulting to 1000 [ 393.816432][T14066] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2180'. [ 394.105167][T14069] netlink: 'syz.1.2181': attribute type 6 has an invalid length. [ 394.487613][T14040] lo speed is unknown, defaulting to 1000 [ 394.602952][T14040] wg1 speed is unknown, defaulting to 1000 [ 394.905995][T14101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2186'. [ 394.948404][T14099] tipc: Enabled bearer , priority 0 [ 395.121608][T14099] syzkaller0: entered promiscuous mode [ 395.128669][T14099] syzkaller0: entered allmulticast mode [ 395.215771][T14105] bridge0 (unregistering): left allmulticast mode [ 395.295319][T14115] netlink: 'syz.4.2190': attribute type 4 has an invalid length. [ 395.331230][T14112] syzkaller0: mtu less than device minimum [ 395.340192][T14098] tipc: Resetting bearer [ 395.348151][T14116] netlink: 'syz.4.2190': attribute type 4 has an invalid length. [ 395.364902][T14098] tipc: Disabling bearer [ 395.390648][T14087] lo speed is unknown, defaulting to 1000 [ 395.475239][T14087] wg1 speed is unknown, defaulting to 1000 [ 395.533909][T14118] netlink: 'syz.3.2191': attribute type 4 has an invalid length. [ 395.595674][T14122] netlink: 'syz.3.2191': attribute type 4 has an invalid length. [ 396.027777][T14132] bridge0: entered promiscuous mode [ 396.048572][T14132] team0: Port device bridge0 added [ 396.373361][T14113] lo speed is unknown, defaulting to 1000 [ 396.409734][T14113] wg1 speed is unknown, defaulting to 1000 [ 396.416115][T14120] lo speed is unknown, defaulting to 1000 [ 396.479051][T14120] wg1 speed is unknown, defaulting to 1000 [ 397.546458][T14159] tipc: Enabling of bearer rejected, already enabled [ 397.715326][T14169] __nla_validate_parse: 4 callbacks suppressed [ 397.715343][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 397.940810][T14179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.965826][ T5182] Bluetooth: hci4: command 0x0405 tx timeout [ 398.168088][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 398.174158][T14199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2212'. [ 398.194526][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2211'. [ 398.206740][T14199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2212'. [ 398.402279][T14202] netlink: 'syz.0.2214': attribute type 4 has an invalid length. [ 398.447924][T14213] netlink: 'syz.3.2217': attribute type 4 has an invalid length. [ 398.456671][T14213] netlink: 'syz.3.2217': attribute type 4 has an invalid length. [ 398.478189][T14213] netlink: 'syz.3.2217': attribute type 4 has an invalid length. [ 398.511986][T14209] netlink: 'syz.0.2214': attribute type 4 has an invalid length. [ 398.544812][T14213] netlink: 'syz.3.2217': attribute type 4 has an invalid length. [ 398.554127][T14213] netlink: 'syz.3.2217': attribute type 4 has an invalid length. [ 398.571373][ T12] tipc: Resetting bearer [ 398.599194][T14213] netlink: 'syz.3.2217': attribute type 4 has an invalid length. [ 398.620629][T14213] netlink: 'syz.3.2217': attribute type 4 has an invalid length. [ 398.633515][T14213] netlink: 'syz.3.2217': attribute type 4 has an invalid length. [ 398.775799][T14204] lo speed is unknown, defaulting to 1000 [ 398.783406][T14204] wg1 speed is unknown, defaulting to 1000 [ 398.823157][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2223'. [ 399.083785][T14240] wireguard: wg1: Could not create IPv4 socket [ 399.136162][T14240] wg1: entered promiscuous mode [ 399.171658][T14244] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2226'. [ 399.196236][T14240] wg1: entered allmulticast mode [ 399.316609][T14248] netlink: 147436 bytes leftover after parsing attributes in process `syz.4.2227'. [ 399.345117][T14241] syzkaller1: entered promiscuous mode [ 399.366322][T14241] syzkaller1: entered allmulticast mode [ 399.790915][T14262] FAULT_INJECTION: forcing a failure. [ 399.790915][T14262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.838045][T14262] CPU: 1 UID: 0 PID: 14262 Comm: syz.3.2231 Not tainted syzkaller #0 PREEMPT(full) [ 399.838070][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.838088][T14262] Call Trace: [ 399.838095][T14262] [ 399.838103][T14262] dump_stack_lvl+0x189/0x250 [ 399.838128][T14262] ? __pfx____ratelimit+0x10/0x10 [ 399.838153][T14262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.838172][T14262] ? __pfx__printk+0x10/0x10 [ 399.838203][T14262] ? __might_fault+0xb0/0x130 [ 399.838237][T14262] should_fail_ex+0x414/0x560 [ 399.838265][T14262] _copy_from_iter+0x1de/0x1790 [ 399.838290][T14262] ? __lock_acquire+0xab9/0xd20 [ 399.838319][T14262] ? __pfx__copy_from_iter+0x10/0x10 [ 399.838351][T14262] tun_get_user+0x219/0x3e20 [ 399.838386][T14262] ? aa_file_perm+0x44d/0x1550 [ 399.838404][T14262] ? __pfx_tun_get_user+0x10/0x10 [ 399.838420][T14262] ? _parse_integer_limit+0x1ae/0x1f0 [ 399.838451][T14262] ? __lock_acquire+0xab9/0xd20 [ 399.838477][T14262] ? ref_tracker_alloc+0x318/0x460 [ 399.838497][T14262] ? __lock_acquire+0xab9/0xd20 [ 399.838520][T14262] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 399.838546][T14262] ? tun_get+0x1c/0x2f0 [ 399.838568][T14262] ? tun_get+0x1c/0x2f0 [ 399.838584][T14262] ? tun_get+0x1c/0x2f0 [ 399.838606][T14262] tun_chr_write_iter+0x113/0x200 [ 399.838626][T14262] vfs_write+0x5c6/0xb30 [ 399.838653][T14262] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 399.838671][T14262] ? __pfx_vfs_write+0x10/0x10 [ 399.838703][T14262] ? __fget_files+0x2a/0x420 [ 399.838727][T14262] ksys_write+0x145/0x250 [ 399.838750][T14262] ? __pfx_ksys_write+0x10/0x10 [ 399.838767][T14262] ? rcu_is_watching+0x15/0xb0 [ 399.838789][T14262] ? do_syscall_64+0xbe/0x3b0 [ 399.838811][T14262] do_syscall_64+0xfa/0x3b0 [ 399.838826][T14262] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.838842][T14262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.838859][T14262] ? clear_bhb_loop+0x60/0xb0 [ 399.838879][T14262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.838900][T14262] RIP: 0033:0x7ff3f778ebe9 [ 399.838916][T14262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.838930][T14262] RSP: 002b:00007ff3f86e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 399.838949][T14262] RAX: ffffffffffffffda RBX: 00007ff3f79c5fa0 RCX: 00007ff3f778ebe9 [ 399.838962][T14262] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000003 [ 399.838973][T14262] RBP: 00007ff3f86e2090 R08: 0000000000000000 R09: 0000000000000000 [ 399.838984][T14262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.838994][T14262] R13: 00007ff3f79c6038 R14: 00007ff3f79c5fa0 R15: 00007ffc4c8181c8 [ 399.839024][T14262] [ 400.325738][T14267] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.336532][T14267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.354284][T14230] lo speed is unknown, defaulting to 1000 [ 400.416088][T14230] wg1 speed is unknown, defaulting to 1000 [ 400.731005][T14284] bond6: entered allmulticast mode [ 400.736589][T14284] 8021q: adding VLAN 0 to HW filter on device bond6 [ 400.851641][T14284] bridge0: entered allmulticast mode [ 400.870468][T14284] bond6: (slave bridge0): Enslaving as a backup interface with an up link [ 400.959899][T10268] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 401.167698][ T13] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 401.232624][T14289] lo speed is unknown, defaulting to 1000 [ 401.240280][T14289] wg1 speed is unknown, defaulting to 1000 [ 401.406209][T14310] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2244'. [ 401.517825][T14317] FAULT_INJECTION: forcing a failure. [ 401.517825][T14317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.565081][T14317] CPU: 1 UID: 0 PID: 14317 Comm: syz.0.2243 Not tainted syzkaller #0 PREEMPT(full) [ 401.565106][T14317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.565116][T14317] Call Trace: [ 401.565123][T14317] [ 401.565131][T14317] dump_stack_lvl+0x189/0x250 [ 401.565155][T14317] ? __pfx____ratelimit+0x10/0x10 [ 401.565179][T14317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.565198][T14317] ? __pfx__printk+0x10/0x10 [ 401.565220][T14317] ? __might_fault+0xb0/0x130 [ 401.565254][T14317] should_fail_ex+0x414/0x560 [ 401.565281][T14317] _copy_from_user+0x2d/0xb0 [ 401.565301][T14317] kstrtouint_from_user+0xc4/0x170 [ 401.565327][T14317] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 401.565370][T14317] proc_fail_nth_write+0x88/0x200 [ 401.565389][T14317] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 401.565414][T14317] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 401.565436][T14317] vfs_write+0x27e/0xb30 [ 401.565467][T14317] ? __pfx_vfs_write+0x10/0x10 [ 401.565490][T14317] ? __fget_files+0x2a/0x420 [ 401.565511][T14317] ? __fget_files+0x3a0/0x420 [ 401.565525][T14317] ? __fget_files+0x2a/0x420 [ 401.565551][T14317] ksys_write+0x145/0x250 [ 401.565574][T14317] ? __pfx_ksys_write+0x10/0x10 [ 401.565591][T14317] ? rcu_is_watching+0x15/0xb0 [ 401.565615][T14317] ? do_syscall_64+0xbe/0x3b0 [ 401.565637][T14317] do_syscall_64+0xfa/0x3b0 [ 401.565653][T14317] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.565668][T14317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.565690][T14317] ? clear_bhb_loop+0x60/0xb0 [ 401.565711][T14317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.565727][T14317] RIP: 0033:0x7f3fe158d69f [ 401.565743][T14317] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 401.565757][T14317] RSP: 002b:00007f3fe23b4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 401.565775][T14317] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3fe158d69f [ 401.565787][T14317] RDX: 0000000000000001 RSI: 00007f3fe23b40a0 RDI: 0000000000000004 [ 401.565798][T14317] RBP: 00007f3fe23b4090 R08: 0000000000000000 R09: 0000000000000000 [ 401.565808][T14317] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 401.565818][T14317] R13: 00007f3fe17c6128 R14: 00007f3fe17c6090 R15: 00007ffe2dded568 [ 401.565850][T14317] [ 401.825816][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 401.859068][T14321] smc: removing ib device syz! [ 401.886964][T14316] lo speed is unknown, defaulting to 1000 [ 401.896142][T14316] wg1 speed is unknown, defaulting to 1000 [ 402.714800][T14345] pim6reg1: entered promiscuous mode [ 402.720716][T14345] pim6reg1: entered allmulticast mode [ 402.821455][T14342] syzkaller1: entered promiscuous mode [ 402.826971][T14342] syzkaller1: entered allmulticast mode [ 402.991791][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'. [ 403.018186][T14353] tipc: Enabled bearer , priority 0 [ 403.039460][T14349] syzkaller0: entered promiscuous mode [ 403.056580][T14349] syzkaller0: entered allmulticast mode [ 403.162247][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2255'. [ 403.193092][T14351] tipc: Resetting bearer [ 403.245458][T14348] tipc: Resetting bearer [ 403.263458][T14348] tipc: Disabling bearer [ 403.429279][T14368] validate_nla: 29 callbacks suppressed [ 403.429299][T14368] netlink: 'syz.3.2257': attribute type 10 has an invalid length. [ 403.436355][T14365] lo speed is unknown, defaulting to 1000 [ 403.476708][T14365] wg1 speed is unknown, defaulting to 1000 [ 403.886414][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2263'. [ 403.910732][T14393] netlink: 'syz.3.2262': attribute type 3 has an invalid length. [ 403.996401][T14391] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.2263'. [ 404.008441][T14393] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2262'. [ 404.155579][T14395] lo speed is unknown, defaulting to 1000 [ 404.169237][T14400] block nbd3: NBD_DISCONNECT [ 404.182785][T14400] ip6_vti0: entered allmulticast mode [ 404.226448][T14395] wg1 speed is unknown, defaulting to 1000 [ 404.680190][T14399] ip6_vti0: left allmulticast mode [ 404.888194][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2272'. [ 405.114874][T14441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2274'. [ 405.126386][T14441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2274'. [ 405.143725][T14441] erspan0: entered promiscuous mode [ 405.151670][T14441] gretap0: entered promiscuous mode [ 405.161263][T14441] gretap0: left promiscuous mode [ 405.203326][T14441] erspan0: left promiscuous mode [ 405.220650][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2275'. [ 405.261250][T14445] bridge0: entered allmulticast mode [ 405.312726][T14445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2275'. [ 405.376028][T14445] bridge0 (unregistering): left allmulticast mode [ 406.186381][T14485] bridge0: entered promiscuous mode [ 406.192105][T14485] bridge0: entered allmulticast mode [ 406.554735][T14515] netlink: 'syz.3.2295': attribute type 11 has an invalid length. [ 406.570767][T14506] lo speed is unknown, defaulting to 1000 [ 406.590365][T14515] netlink: 'syz.3.2295': attribute type 11 has an invalid length. [ 406.600429][T14506] wg1 speed is unknown, defaulting to 1000 [ 406.775694][T14526] netlink: 'syz.3.2300': attribute type 1 has an invalid length. [ 407.328497][T14545] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 407.554632][T14553] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 407.613764][T14553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.046532][T14589] lo speed is unknown, defaulting to 1000 [ 408.078516][T14589] wg1 speed is unknown, defaulting to 1000 [ 408.097550][T14581] netlink: 'syz.3.2320': attribute type 4 has an invalid length. [ 408.149578][T14598] netlink: 'syz.3.2320': attribute type 4 has an invalid length. [ 408.175140][T14597] __nla_validate_parse: 7 callbacks suppressed [ 408.175156][T14597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2323'. [ 408.234715][T14601] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 408.369873][T14611] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2327'. [ 408.908763][T14637] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2336'. [ 408.918474][T14636] lo speed is unknown, defaulting to 1000 [ 408.935824][T14636] wg1 speed is unknown, defaulting to 1000 [ 409.029828][T14632] netlink: 'syz.2.2336': attribute type 10 has an invalid length. [ 409.061258][T14640] can: request_module (can-proto-0) failed. [ 409.092183][T14632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.108414][T14632] batadv0: entered promiscuous mode [ 409.114640][T14632] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 409.134073][T14632] netlink: 'syz.2.2336': attribute type 10 has an invalid length. [ 409.143162][T14642] lo speed is unknown, defaulting to 1000 [ 409.154371][T14632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2336'. [ 409.184318][T14642] wg1 speed is unknown, defaulting to 1000 [ 409.190959][T14632] batadv0: entered allmulticast mode [ 409.231971][T14632] bond0: (slave batadv0): Releasing backup interface [ 409.290598][T14632] bridge0: port 1(batadv0) entered blocking state [ 409.317620][T14632] bridge0: port 1(batadv0) entered disabled state [ 409.348913][T14648] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2338'. [ 409.460676][T14650] team0: No ports can be present during mode change [ 409.621640][T10268] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 409.631361][T10268] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 409.722151][T14662] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2342'. [ 410.174616][T14672] lo speed is unknown, defaulting to 1000 [ 410.229368][T14672] wg1 speed is unknown, defaulting to 1000 [ 410.290122][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2346'. [ 410.438397][T14699] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2349'. [ 410.526908][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 410.600812][T14704] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2350'. [ 410.655090][T14710] netlink: 'syz.2.2346': attribute type 4 has an invalid length. [ 410.725097][T14714] netlink: 'syz.2.2346': attribute type 4 has an invalid length. [ 410.792925][T14707] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 411.653932][T14736] netlink: 'syz.0.2356': attribute type 39 has an invalid length. [ 412.384298][T14776] lo speed is unknown, defaulting to 1000 [ 412.416015][T14776] wg1 speed is unknown, defaulting to 1000 [ 412.667735][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 412.814175][T14802] openvswitch: netlink: Flow key attr not present in new flow. [ 412.816172][T14804] macvlan1: entered promiscuous mode [ 412.830048][T14804] ipvlan0: entered promiscuous mode [ 412.836558][T14804] ipvlan0: left promiscuous mode [ 412.843571][T14804] macvlan1: left promiscuous mode [ 412.883141][T14806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.120882][T14808] bridge0: left promiscuous mode [ 413.125872][T14808] bridge0: left allmulticast mode [ 413.595077][T14840] sit1: entered promiscuous mode [ 413.673935][T14846] __nla_validate_parse: 59 callbacks suppressed [ 413.673953][T14846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2388'. [ 413.681295][T14847] netlink: 'syz.3.2385': attribute type 1 has an invalid length. [ 413.807654][T14850] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.854227][T14850] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.881283][T14860] tipc: Enabled bearer , priority 0 [ 413.895385][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'. [ 413.910711][T14852] netlink: 'syz.2.2389': attribute type 5 has an invalid length. [ 413.921664][T14852] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2389'. [ 413.950259][T14859] bond0: left promiscuous mode [ 413.955089][T14859] team0: left promiscuous mode [ 413.960312][T14859] bridge0: left promiscuous mode [ 413.976009][T14850] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.986200][T14850] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.046151][T14852] geneve2: entered promiscuous mode [ 414.063041][T14852] geneve2: entered allmulticast mode [ 414.083599][ T3027] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.103283][ T3027] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.129821][T14870] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2393'. [ 414.174517][T14850] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.198184][T14869] netlink: 'syz.1.2395': attribute type 1 has an invalid length. [ 414.205290][T14850] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.206021][T14869] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2395'. [ 414.247013][ T3027] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.258401][ T3027] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.269832][T14875] tipc: Resetting bearer [ 414.284965][ T3027] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 414.311230][T14848] tipc: Disabling bearer [ 414.314054][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'. [ 414.326243][T14882] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2397'. [ 414.365809][T14879] netlink: 'syz.3.2396': attribute type 9 has an invalid length. [ 414.374093][T14879] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2396'. [ 414.469666][T14885] netlink: 'syz.1.2398': attribute type 2 has an invalid length. [ 414.492811][T14885] k›*·]‘: entered promiscuous mode [ 414.509129][T14885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.642284][T14894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.895124][T14903] lo speed is unknown, defaulting to 1000 [ 414.904598][T14903] wg1 speed is unknown, defaulting to 1000 [ 414.982231][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2406'. [ 414.986012][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 415.054148][T14910] bond0: left allmulticast mode [ 415.060126][T14910] bridge1: port 1(bond0) entered disabled state [ 415.170405][T14910] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 415.434198][T14933] syz_tun: entered allmulticast mode [ 415.684360][T14946] tipc: Enabled bearer , priority 0 [ 415.693180][T14946] syzkaller0: entered promiscuous mode [ 415.698957][T14946] syzkaller0: entered allmulticast mode [ 415.716185][T14940] netlink: 'syz.4.2413': attribute type 4 has an invalid length. [ 415.720613][T14945] lo speed is unknown, defaulting to 1000 [ 415.740751][T14940] netlink: 'syz.4.2413': attribute type 4 has an invalid length. [ 415.769154][T14945] wg1 speed is unknown, defaulting to 1000 [ 415.783605][T14850] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.812976][T14850] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.823085][T14850] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 415.947213][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.956182][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 415.966041][ T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 415.974986][T14944] tipc: Resetting bearer [ 415.991326][T14944] tipc: Disabling bearer [ 416.017082][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.025791][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 416.036489][ T59] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 416.124281][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.152885][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 416.173470][ T59] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 416.305519][ T7297] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.320234][ T7297] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 416.330313][ T7297] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 416.352214][T14966] tipc: Enabled bearer , priority 0 [ 416.419455][T14966] tipc: Disabling bearer [ 416.566900][T14980] 8021q: VLANs not supported on nlmon0 [ 416.628342][T14984] openvswitch: netlink: Flow key attr not present in new flow. [ 416.831187][T14991] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 416.941735][ T3027] bond6: (slave bridge0): link status definitely down, disabling slave [ 417.550516][T15030] bond0: (slave syz_tun): Releasing backup interface [ 417.606065][T15030] bond0: (slave team0): Releasing backup interface [ 417.641866][T15030] bond1: (slave macvlan6): Releasing backup interface [ 417.667510][T15030] bond1: (slave macvlan6): the permanent HWaddr of slave - 62:1b:b7:9b:ef:37 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 417.696544][T15030] bond3: (slave vti0): Releasing backup interface [ 417.705950][T15030] bond1: (slave macvlan8): Releasing backup interface [ 417.716649][T15030] bond1: (slave macvlan9): Releasing backup interface [ 417.731618][T15030] bond5: (slave gretap2): Releasing active interface [ 417.745221][T15030] team0: Port device bridge0 removed [ 417.971271][T15053] openvswitch: netlink: IP tunnel dst address not specified [ 418.142331][T15063] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 418.162587][T15063] netlink: 'syz.1.2449': attribute type 1 has an invalid length. [ 418.235418][T15065] tipc: Enabled bearer , priority 0 [ 418.256601][T15065] tipc: Resetting bearer [ 418.484954][T15079] siw: device registration error -23 [ 418.699927][T15090] __nla_validate_parse: 7 callbacks suppressed [ 418.699943][T15090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2458'. [ 418.716079][T15089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2458'. [ 418.916578][T15101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2462'. [ 419.034268][T15103] batadv_slave_1: entered promiscuous mode [ 419.041870][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 419.130832][T15108] syzkaller0: entered promiscuous mode [ 419.139013][T15108] syzkaller0: entered allmulticast mode [ 419.146736][T15107] tipc: Enabled bearer , priority 0 [ 419.179100][T15107] tipc: Resetting bearer [ 419.209734][T15107] tipc: Disabling bearer [ 419.314074][T15112] syzkaller1: entered promiscuous mode [ 419.323950][T15112] syzkaller1: entered allmulticast mode [ 419.724898][T15122] tipc: Enabled bearer , priority 0 [ 419.732613][T15122] syzkaller0: entered promiscuous mode [ 419.738348][T15122] syzkaller0: entered allmulticast mode [ 419.772053][T15122] tipc: Resetting bearer [ 419.844640][T15121] tipc: Resetting bearer [ 419.939798][T15137] netlink: 'syz.4.2472': attribute type 1 has an invalid length. [ 419.948110][T15137] netlink: 'syz.4.2472': attribute type 4 has an invalid length. [ 419.955841][T15137] netlink: 15538 bytes leftover after parsing attributes in process `syz.4.2472'. [ 420.023980][T15121] tipc: Disabling bearer [ 420.630884][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'. [ 420.926050][T15159] tipc: Enabled bearer , priority 0 [ 420.946457][T15159] syzkaller0: entered promiscuous mode [ 420.966010][T15159] syzkaller0: entered allmulticast mode [ 421.029566][T11929] IPVS: starting estimator thread 0... [ 421.038534][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2479'. [ 421.061134][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2479'. [ 421.139336][T15164] tipc: Resetting bearer [ 421.158386][T15163] IPVS: using max 29 ests per chain, 69600 per kthread [ 421.202091][T15157] tipc: Resetting bearer [ 421.223628][T15157] tipc: Disabling bearer [ 421.241314][T15168] lo speed is unknown, defaulting to 1000 [ 421.242339][T15171] tipc: Enabled bearer , priority 0 [ 421.256537][T15168] wg1 speed is unknown, defaulting to 1000 [ 421.270520][T15171] syzkaller0: entered promiscuous mode [ 421.292592][T15171] syzkaller0: entered allmulticast mode [ 421.409577][T15171] tipc: Resetting bearer [ 421.452392][T15169] tipc: Resetting bearer [ 421.538096][T15169] tipc: Disabling bearer [ 421.737215][T15192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2486'. [ 421.747988][T15194] bond0: (slave team0): Releasing backup interface [ 421.755446][T15194] team0: left promiscuous mode [ 421.768961][T15194] bridge0: port 1(batadv0) entered disabled state [ 421.799415][T15194] bond0: (slave macvlan0): Releasing backup interface [ 421.819072][T15194] tipc: Resetting bearer [ 421.823777][T15198] openvswitch: netlink: Message has 20 unknown bytes. [ 421.832818][T15194] bond5: (slave gretap1): Releasing active interface [ 421.832838][T15198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.876596][T15194] bond3: (slave macvlan8): Releasing backup interface [ 421.916816][T15191] lo speed is unknown, defaulting to 1000 [ 421.924174][T15198] team0: Unable to change to the same mode the team is in [ 421.947257][T15191] wg1 speed is unknown, defaulting to 1000 [ 422.042986][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2487'. [ 422.910733][T15225] vxcan1 (unregistering): left allmulticast mode [ 423.007203][T15238] netlink: 'syz.0.2497': attribute type 4 has an invalid length. [ 423.267418][T15241] lo speed is unknown, defaulting to 1000 [ 423.306816][T15241] wg1 speed is unknown, defaulting to 1000 [ 423.328845][T15243] lo speed is unknown, defaulting to 1000 [ 423.351856][T15243] wg1 speed is unknown, defaulting to 1000 [ 423.556980][T15245] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 423.732771][T15259] __nla_validate_parse: 7 callbacks suppressed [ 423.732789][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2503'. [ 424.013194][T15274] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2508'. [ 424.118844][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 424.174574][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'. [ 424.267173][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2512'. [ 424.317213][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'. [ 424.772441][T15292] lo speed is unknown, defaulting to 1000 [ 424.798192][T15292] wg1 speed is unknown, defaulting to 1000 [ 424.987554][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2523'. [ 424.996576][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2523'. [ 425.117009][T15333] netlink: 'syz.4.2524': attribute type 3 has an invalid length. [ 425.191689][T15339] syz_tun: left allmulticast mode [ 425.215737][T15339] siw: device registration error -23 [ 425.403146][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 425.425907][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'. [ 425.549735][T15352] nbd: must specify at least one socket [ 425.566627][T15352] ip6gretap0: entered promiscuous mode [ 425.572657][T15352] macsec1: entered allmulticast mode [ 425.580375][T15352] ip6gretap0: entered allmulticast mode [ 425.590915][T15352] ip6gretap0: left allmulticast mode [ 425.596381][T15352] ip6gretap0: left promiscuous mode [ 425.695310][T15355] syzkaller0: entered promiscuous mode [ 425.701071][T15355] syzkaller0: entered allmulticast mode [ 427.285200][T15358] tipc: Enabled bearer , priority 0 [ 427.292406][T15359] syzkaller0: entered promiscuous mode [ 427.298088][T15359] syzkaller0: entered allmulticast mode [ 427.373416][T15363] tipc: Resetting bearer [ 427.460779][T15363] tipc: Disabling bearer [ 427.507225][T15387] ip6tnl3: entered promiscuous mode [ 427.796823][T15411] IPVS: Error connecting to the multicast addr [ 427.832800][T15409] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 427.851231][T15409] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 428.044594][T15425] netlink: 'syz.3.2553': attribute type 10 has an invalid length. [ 428.061144][T15425] batadv_slave_0: entered promiscuous mode [ 428.077238][T15425] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 428.274998][T15434] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 428.464110][T15454] syzkaller1: entered promiscuous mode [ 428.520457][T15454] syzkaller1: entered allmulticast mode [ 428.839377][T15474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.885849][T15478] __nla_validate_parse: 10 callbacks suppressed [ 428.885866][T15478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2566'. [ 429.285223][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2572'. [ 429.425330][T15498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2573'. [ 430.920493][T15493] macvlan7: entered promiscuous mode [ 431.281801][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2581'. [ 431.424109][T15536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2583'. [ 431.575812][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'. [ 431.646997][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 431.657527][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 431.687541][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 431.696428][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 431.757856][T15543] macvlan1: entered promiscuous mode [ 431.763304][T15543] bond0: entered promiscuous mode [ 431.833901][T15551] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.888408][T15557] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.895473][T15557] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 431.909280][T15557] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 431.943614][T15549] lo speed is unknown, defaulting to 1000 [ 431.951939][T15549] wg1 speed is unknown, defaulting to 1000 [ 432.018676][T15566] netlink: 'syz.4.2589': attribute type 4 has an invalid length. [ 432.046526][T15566] netlink: 'syz.4.2589': attribute type 4 has an invalid length. [ 432.251360][T15581] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 432.522860][T15591] netlink: 'syz.1.2599': attribute type 4 has an invalid length. [ 432.575064][T15598] netlink: 'syz.1.2599': attribute type 4 has an invalid length. [ 432.615133][T15595] lo speed is unknown, defaulting to 1000 [ 432.633641][T15595] wg1 speed is unknown, defaulting to 1000 [ 432.813214][T15601] lo speed is unknown, defaulting to 1000 [ 432.820903][T15601] wg1 speed is unknown, defaulting to 1000 [ 432.920115][T15622] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 432.983053][T15627] netlink: 'syz.2.2606': attribute type 13 has an invalid length. [ 433.024812][T15627] netlink: 'syz.2.2606': attribute type 17 has an invalid length. [ 433.149615][T15630] netlink: 'syz.4.2608': attribute type 4 has an invalid length. [ 433.233765][T15642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 433.241079][T15642] IPv6: NLM_F_CREATE should be set when creating new route [ 433.248456][T15642] IPv6: NLM_F_CREATE should be set when creating new route [ 433.255674][T15642] IPv6: NLM_F_CREATE should be set when creating new route [ 433.287447][T15627] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.326702][T15627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.378030][T15620] lo speed is unknown, defaulting to 1000 [ 433.423757][T15648] macvlan8: entered promiscuous mode [ 433.472284][T15620] wg1 speed is unknown, defaulting to 1000 [ 433.496789][T15644] veth0_to_bridge: left promiscuous mode [ 433.543691][T15644] batadv_slave_1: left promiscuous mode [ 433.591992][T15644] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 433.638650][T15644] macvlan11: left promiscuous mode [ 433.666080][T15644] bond6: left promiscuous mode [ 433.696662][T15644] macvlan12: left promiscuous mode [ 433.730662][T15644] macvlan13: left promiscuous mode [ 433.748302][T15644] wireguard0: left promiscuous mode [ 433.764133][T15644] wireguard0: left allmulticast mode [ 433.877870][T15631] lo speed is unknown, defaulting to 1000 [ 433.911017][T15631] wg1 speed is unknown, defaulting to 1000 [ 433.946193][T15646] hsr_slave_0: left promiscuous mode [ 433.959733][T15646] hsr_slave_1: left promiscuous mode [ 434.002744][T15662] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.131176][T15662] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.264755][T15662] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.367292][T15679] __nla_validate_parse: 7 callbacks suppressed [ 434.367310][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2617'. [ 434.384538][T15662] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.589491][ T3027] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.625750][ T3027] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.654776][T15682] netlink: 'syz.4.2618': attribute type 1 has an invalid length. [ 434.750694][ T3027] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.821739][ T3013] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.944755][T15689] netlink: 'syz.2.2621': attribute type 10 has an invalid length. [ 434.965902][T15689] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2621'. [ 434.981649][T15689] team0: entered promiscuous mode [ 434.987144][T15689] bridge0: port 1(team0) entered blocking state [ 434.997052][T15689] bridge0: port 1(team0) entered disabled state [ 435.012344][T15689] team0: entered allmulticast mode [ 435.027277][T15691] netlink: 'syz.1.2622': attribute type 7 has an invalid length. [ 435.047853][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2622'. [ 435.129964][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2623'. [ 435.157681][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2623'. [ 435.180041][T15691] tap0: tun_chr_ioctl cmd 1074812118 [ 435.186859][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 435.251326][T15691] bridge3: port 1(bond5) entered blocking state [ 435.263735][T15691] bridge3: port 1(bond5) entered disabled state [ 435.270264][T15691] bond5: entered allmulticast mode [ 435.672570][T15722] netem: change failed [ 435.701405][T15722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2629'. [ 435.721167][T15724] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2630'. [ 435.834145][ T3013] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.858310][ T3013] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.875780][ T3013] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.892055][ T3013] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.334343][T15738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2635'. [ 436.495501][T15742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.525539][T15745] lo speed is unknown, defaulting to 1000 [ 436.549541][T15745] wg1 speed is unknown, defaulting to 1000 [ 436.618804][T15748] sit0: entered promiscuous mode [ 436.623922][T15748] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2637'. [ 436.828451][T15750] 8021q: adding VLAN 0 to HW filter on device bond7 [ 436.841728][T15747] lo speed is unknown, defaulting to 1000 [ 436.925981][T15754] veth5: entered promiscuous mode [ 436.953538][T15747] wg1 speed is unknown, defaulting to 1000 [ 437.348240][T15767] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 437.355858][T15767] batadv1: entered promiscuous mode [ 437.392220][T15767] team0: Port device batadv1 added [ 437.432427][T15773] validate_nla: 3 callbacks suppressed [ 437.432445][T15773] netlink: 'syz.1.2645': attribute type 13 has an invalid length. [ 437.447131][T15773] netlink: 'syz.1.2645': attribute type 17 has an invalid length. [ 437.526563][T15773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.702997][T15773] lo speed is unknown, defaulting to 1000 [ 437.714687][T15773] wg1 speed is unknown, defaulting to 1000 [ 438.491460][T15824] netlink: 'syz.2.2657': attribute type 16 has an invalid length. [ 438.498191][T15819] netlink: 'syz.4.2656': attribute type 4 has an invalid length. [ 438.514077][T15824] netlink: 'syz.2.2657': attribute type 17 has an invalid length. [ 438.515512][T15822] lo speed is unknown, defaulting to 1000 [ 438.568699][T15827] netlink: 'syz.4.2656': attribute type 4 has an invalid length. [ 438.616832][T15824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.669318][T15822] wg1 speed is unknown, defaulting to 1000 [ 438.744415][T15824] netlink: 'syz.2.2657': attribute type 29 has an invalid length. [ 439.014038][T15830] netlink: 'syz.0.2659': attribute type 30 has an invalid length. [ 439.163785][T15855] tipc: Enabling of bearer rejected, already enabled [ 439.178543][T15850] bond0: Device is already in use. [ 439.210481][T15853] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.319206][T15853] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.374860][T15868] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 512, id = 0 [ 439.374886][T15866] IPVS: stopping backup sync thread 15868 ... [ 439.439782][T15853] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.622649][T15853] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.660035][T15887] __nla_validate_parse: 10 callbacks suppressed [ 439.660052][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2676'. [ 439.792875][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 440.067269][T15891] macvlan14: entered promiscuous mode [ 440.136819][T15896] lo speed is unknown, defaulting to 1000 [ 440.186310][T15896] wg1 speed is unknown, defaulting to 1000 [ 440.192112][T15902] netlink: 'syz.0.2680': attribute type 1 has an invalid length. [ 440.229376][ T3027] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.282341][T15907] netlink: 'syz.3.2681': attribute type 15 has an invalid length. [ 440.290496][T15907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2681'. [ 440.318134][T15904] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 440.329548][T15904] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 440.349113][ T3027] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.401375][T15902] gretap3: entered promiscuous mode [ 440.420124][T15902] bond7: (slave gretap3): making interface the new active one [ 440.430551][T15902] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 440.477832][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.499099][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.610396][T15915] IPv6: NLM_F_CREATE should be specified when creating new route [ 440.634532][T15916] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 440.647067][T15915] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.654349][T15915] IPv6: NLM_F_CREATE should be set when creating new route [ 440.661722][T15915] IPv6: NLM_F_CREATE should be set when creating new route [ 440.668975][T15915] IPv6: NLM_F_CREATE should be set when creating new route [ 440.702250][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2686'. [ 440.837985][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'. [ 440.931100][T15924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2687'. [ 441.001870][T15931] macvlan2: entered promiscuous mode [ 441.031129][T15939] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 441.048485][T15929] lo speed is unknown, defaulting to 1000 [ 441.061405][T15929] wg1 speed is unknown, defaulting to 1000 [ 441.263583][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2690'. [ 441.351917][T15954] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2693'. [ 441.457920][T15952] team0: left allmulticast mode [ 441.474986][T15952] team0: left promiscuous mode [ 441.481153][T15952] bridge0: port 1(team0) entered disabled state [ 441.761778][T15940] lo speed is unknown, defaulting to 1000 [ 441.806807][T15940] wg1 speed is unknown, defaulting to 1000 [ 441.930038][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2699'. [ 442.055574][T15980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2701'. [ 442.806697][T16016] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 442.828062][T16016] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 442.919595][T16016] veth6: entered allmulticast mode [ 443.378139][T16037] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.389636][T16037] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 443.616706][T16037] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.628574][T16037] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 443.754319][T16037] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.769014][T16065] validate_nla: 4 callbacks suppressed [ 443.769040][T16065] netlink: 'syz.4.2723': attribute type 4 has an invalid length. [ 443.791984][T16037] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 443.860158][T16067] netlink: 'syz.4.2723': attribute type 4 has an invalid length. [ 443.967999][T16037] bond0: (slave netdevsim0): Releasing backup interface [ 443.978796][T16037] bond0: (slave netdevsim0): the permanent HWaddr of slave - 8a:c5:ee:5c:1c:e3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 444.022523][T16037] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 444.041661][T16037] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.059151][T16037] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 444.101807][T16071] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 444.112551][T16063] lo speed is unknown, defaulting to 1000 [ 444.122871][T16063] wg1 speed is unknown, defaulting to 1000 [ 444.290102][T16084] netlink: 'syz.2.2728': attribute type 1 has an invalid length. [ 444.397245][ T3013] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.407629][ T3013] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.460495][ T3013] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.483437][ T3013] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.531802][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.555450][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.593586][ T3013] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.604876][ T3013] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 444.628563][T16034] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.647541][T16034] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 444.698306][ T3013] ================================================================== [ 444.706411][ T3013] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 444.713968][ T3013] Read of size 8 at addr ffff888076a55cb0 by task kworker/u8:6/3013 [ 444.721942][ T3013] [ 444.724258][ T3013] CPU: 0 UID: 0 PID: 3013 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 444.724275][ T3013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.724284][ T3013] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 444.724308][ T3013] Call Trace: [ 444.724314][ T3013] [ 444.724321][ T3013] dump_stack_lvl+0x189/0x250 [ 444.724336][ T3013] ? __kasan_check_byte+0x12/0x40 [ 444.724354][ T3013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.724368][ T3013] ? lock_release+0x4b/0x3e0 [ 444.724387][ T3013] ? __virt_addr_valid+0x4a5/0x5c0 [ 444.724404][ T3013] print_report+0xca/0x240 [ 444.724417][ T3013] ? __mutex_lock+0x147/0x1350 [ 444.724431][ T3013] kasan_report+0x118/0x150 [ 444.724449][ T3013] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 444.724467][ T3013] ? __mutex_lock+0x147/0x1350 [ 444.724482][ T3013] __mutex_lock+0x147/0x1350 [ 444.724496][ T3013] ? __mutex_lock+0x5bb/0x1350 [ 444.724510][ T3013] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 444.724529][ T3013] ? __pfx___mutex_lock+0x10/0x10 [ 444.724544][ T3013] ? __lock_acquire+0xab9/0xd20 [ 444.724564][ T3013] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 444.724585][ T3013] ? process_scheduled_works+0x9ef/0x17b0 [ 444.724597][ T3013] ? process_scheduled_works+0x9ef/0x17b0 [ 444.724610][ T3013] process_scheduled_works+0xae1/0x17b0 [ 444.724632][ T3013] ? __pfx_process_scheduled_works+0x10/0x10 [ 444.724650][ T3013] worker_thread+0x8a0/0xda0 [ 444.724672][ T3013] kthread+0x70e/0x8a0 [ 444.724687][ T3013] ? __pfx_worker_thread+0x10/0x10 [ 444.724699][ T3013] ? __pfx_kthread+0x10/0x10 [ 444.724714][ T3013] ? _raw_spin_unlock_irq+0x23/0x50 [ 444.724730][ T3013] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.724742][ T3013] ? __pfx_kthread+0x10/0x10 [ 444.724756][ T3013] ret_from_fork+0x3f9/0x770 [ 444.724770][ T3013] ? __pfx_ret_from_fork+0x10/0x10 [ 444.724784][ T3013] ? __switch_to_asm+0x39/0x70 [ 444.724799][ T3013] ? __switch_to_asm+0x33/0x70 [ 444.724818][ T3013] ? __pfx_kthread+0x10/0x10 [ 444.724832][ T3013] ret_from_fork_asm+0x1a/0x30 [ 444.724859][ T3013] [ 444.724865][ T3013] [ 444.927580][ T3013] Allocated by task 16037: [ 444.931980][ T3013] kasan_save_track+0x3e/0x80 [ 444.936644][ T3013] __kasan_kmalloc+0x93/0xb0 [ 444.941223][ T3013] __kmalloc_noprof+0x27a/0x4f0 [ 444.946057][ T3013] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 444.952196][ T3013] notifier_call_chain+0x1b6/0x3e0 [ 444.957285][ T3013] register_netdevice+0x1608/0x1ae0 [ 444.962471][ T3013] nsim_create+0xae8/0xf10 [ 444.966873][ T3013] __nsim_dev_port_add+0x6b6/0xb10 [ 444.971969][ T3013] nsim_dev_port_add_all+0x37/0xf0 [ 444.977066][ T3013] nsim_dev_reload_up+0x451/0x780 [ 444.982076][ T3013] devlink_reload+0x4e9/0x8d0 [ 444.986737][ T3013] devlink_nl_reload_doit+0xb35/0xd50 [ 444.992119][ T3013] genl_family_rcv_msg_doit+0x215/0x300 [ 444.997648][ T3013] genl_rcv_msg+0x60e/0x790 [ 445.002130][ T3013] netlink_rcv_skb+0x205/0x470 [ 445.006870][ T3013] genl_rcv+0x28/0x40 [ 445.010831][ T3013] netlink_unicast+0x82c/0x9e0 [ 445.015585][ T3013] netlink_sendmsg+0x805/0xb30 [ 445.020326][ T3013] __sock_sendmsg+0x219/0x270 [ 445.025000][ T3013] ____sys_sendmsg+0x505/0x830 [ 445.029744][ T3013] ___sys_sendmsg+0x21f/0x2a0 [ 445.034401][ T3013] __x64_sys_sendmsg+0x19b/0x260 [ 445.039319][ T3013] do_syscall_64+0xfa/0x3b0 [ 445.043808][ T3013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.049680][ T3013] [ 445.051985][ T3013] Freed by task 16034: [ 445.056030][ T3013] kasan_save_track+0x3e/0x80 [ 445.060691][ T3013] kasan_save_free_info+0x46/0x50 [ 445.065699][ T3013] __kasan_slab_free+0x5b/0x80 [ 445.070443][ T3013] kfree+0x18e/0x440 [ 445.074317][ T3013] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 445.080544][ T3013] notifier_call_chain+0x1b6/0x3e0 [ 445.085632][ T3013] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 445.092032][ T3013] unregister_netdevice_queue+0x33c/0x380 [ 445.097732][ T3013] nsim_destroy+0x1dd/0x670 [ 445.102217][ T3013] __nsim_dev_port_del+0x14d/0x1b0 [ 445.107309][ T3013] nsim_dev_reload_destroy+0x288/0x490 [ 445.112756][ T3013] nsim_dev_reload_down+0x8a/0xc0 [ 445.117776][ T3013] devlink_reload+0x1b3/0x8d0 [ 445.122443][ T3013] devlink_nl_reload_doit+0xb35/0xd50 [ 445.127800][ T3013] genl_family_rcv_msg_doit+0x215/0x300 [ 445.133326][ T3013] genl_rcv_msg+0x60e/0x790 [ 445.137812][ T3013] netlink_rcv_skb+0x205/0x470 [ 445.142556][ T3013] genl_rcv+0x28/0x40 [ 445.146523][ T3013] netlink_unicast+0x82c/0x9e0 [ 445.151272][ T3013] netlink_sendmsg+0x805/0xb30 [ 445.156013][ T3013] __sock_sendmsg+0x219/0x270 [ 445.160675][ T3013] ____sys_sendmsg+0x505/0x830 [ 445.165422][ T3013] ___sys_sendmsg+0x21f/0x2a0 [ 445.170080][ T3013] __x64_sys_sendmsg+0x19b/0x260 [ 445.174998][ T3013] do_syscall_64+0xfa/0x3b0 [ 445.179481][ T3013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.185353][ T3013] [ 445.187657][ T3013] Last potentially related work creation: [ 445.193347][ T3013] kasan_save_stack+0x3e/0x60 [ 445.198011][ T3013] kasan_record_aux_stack+0xbd/0xd0 [ 445.203190][ T3013] insert_work+0x3d/0x330 [ 445.207503][ T3013] __queue_work+0xbaf/0xfb0 [ 445.212009][ T3013] queue_work_on+0x181/0x270 [ 445.216578][ T3013] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 445.222195][ T3013] udp_tunnel_push_rx_port+0x180/0x200 [ 445.227645][ T3013] geneve_offload_rx_ports+0xd7/0x160 [ 445.232999][ T3013] geneve_netdevice_event+0x6a/0x80 [ 445.238200][ T3013] notifier_call_chain+0x1b6/0x3e0 [ 445.243289][ T3013] call_netdevice_notifiers+0x88/0xc0 [ 445.248645][ T3013] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 445.254869][ T3013] notifier_call_chain+0x1b6/0x3e0 [ 445.259960][ T3013] register_netdevice+0x1608/0x1ae0 [ 445.265145][ T3013] nsim_create+0xae8/0xf10 [ 445.269543][ T3013] __nsim_dev_port_add+0x6b6/0xb10 [ 445.274638][ T3013] nsim_dev_port_add_all+0x37/0xf0 [ 445.279749][ T3013] nsim_dev_reload_up+0x451/0x780 [ 445.284764][ T3013] devlink_reload+0x4e9/0x8d0 [ 445.289437][ T3013] devlink_nl_reload_doit+0xb35/0xd50 [ 445.294793][ T3013] genl_family_rcv_msg_doit+0x215/0x300 [ 445.300354][ T3013] genl_rcv_msg+0x60e/0x790 [ 445.304948][ T3013] netlink_rcv_skb+0x205/0x470 [ 445.309695][ T3013] genl_rcv+0x28/0x40 [ 445.313659][ T3013] netlink_unicast+0x82c/0x9e0 [ 445.318416][ T3013] netlink_sendmsg+0x805/0xb30 [ 445.323158][ T3013] __sock_sendmsg+0x219/0x270 [ 445.327829][ T3013] ____sys_sendmsg+0x505/0x830 [ 445.332585][ T3013] ___sys_sendmsg+0x21f/0x2a0 [ 445.337241][ T3013] __x64_sys_sendmsg+0x19b/0x260 [ 445.342157][ T3013] do_syscall_64+0xfa/0x3b0 [ 445.346641][ T3013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.352510][ T3013] [ 445.354812][ T3013] Second to last potentially related work creation: [ 445.361378][ T3013] kasan_save_stack+0x3e/0x60 [ 445.366043][ T3013] kasan_record_aux_stack+0xbd/0xd0 [ 445.371226][ T3013] insert_work+0x3d/0x330 [ 445.375540][ T3013] __queue_work+0xcd2/0xfb0 [ 445.380027][ T3013] queue_work_on+0x181/0x270 [ 445.384599][ T3013] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 445.390237][ T3013] udp_tunnel_push_rx_port+0x180/0x200 [ 445.395679][ T3013] vxlan_offload_rx_ports+0x139/0x200 [ 445.401038][ T3013] vxlan_netdevice_event+0x111/0x470 [ 445.406305][ T3013] notifier_call_chain+0x1b6/0x3e0 [ 445.411395][ T3013] call_netdevice_notifiers+0x88/0xc0 [ 445.416750][ T3013] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 445.422981][ T3013] notifier_call_chain+0x1b6/0x3e0 [ 445.428073][ T3013] register_netdevice+0x1608/0x1ae0 [ 445.433253][ T3013] nsim_create+0xae8/0xf10 [ 445.437649][ T3013] __nsim_dev_port_add+0x6b6/0xb10 [ 445.442743][ T3013] nsim_dev_port_add_all+0x37/0xf0 [ 445.447842][ T3013] nsim_dev_reload_up+0x451/0x780 [ 445.452851][ T3013] devlink_reload+0x4e9/0x8d0 [ 445.457529][ T3013] devlink_nl_reload_doit+0xb35/0xd50 [ 445.462889][ T3013] genl_family_rcv_msg_doit+0x215/0x300 [ 445.468416][ T3013] genl_rcv_msg+0x60e/0x790 [ 445.472926][ T3013] netlink_rcv_skb+0x205/0x470 [ 445.477693][ T3013] genl_rcv+0x28/0x40 [ 445.481656][ T3013] netlink_unicast+0x82c/0x9e0 [ 445.486401][ T3013] netlink_sendmsg+0x805/0xb30 [ 445.491146][ T3013] __sock_sendmsg+0x219/0x270 [ 445.495807][ T3013] ____sys_sendmsg+0x505/0x830 [ 445.500564][ T3013] ___sys_sendmsg+0x21f/0x2a0 [ 445.505221][ T3013] __x64_sys_sendmsg+0x19b/0x260 [ 445.510146][ T3013] do_syscall_64+0xfa/0x3b0 [ 445.514633][ T3013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.520506][ T3013] [ 445.522812][ T3013] The buggy address belongs to the object at ffff888076a55c00 [ 445.522812][ T3013] which belongs to the cache kmalloc-256 of size 256 [ 445.536843][ T3013] The buggy address is located 176 bytes inside of [ 445.536843][ T3013] freed 256-byte region [ffff888076a55c00, ffff888076a55d00) [ 445.550617][ T3013] [ 445.552924][ T3013] The buggy address belongs to the physical page: [ 445.559323][ T3013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x76a54 [ 445.568070][ T3013] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 445.576548][ T3013] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 445.584082][ T3013] page_type: f5(slab) [ 445.588048][ T3013] raw: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 445.596610][ T3013] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 445.605180][ T3013] head: 00fff00000000040 ffff88801a441b40 dead000000000100 dead000000000122 [ 445.613841][ T3013] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 445.622501][ T3013] head: 00fff00000000001 ffffea0001da9501 00000000ffffffff 00000000ffffffff [ 445.631159][ T3013] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 445.639828][ T3013] page dumped because: kasan: bad access detected [ 445.646263][ T3013] page_owner tracks the page as allocated [ 445.651958][ T3013] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5860, tgid 5860 (syz-executor), ts 81476841534, free_ts 81380843691 [ 445.673308][ T3013] post_alloc_hook+0x240/0x2a0 [ 445.678079][ T3013] get_page_from_freelist+0x21e4/0x22c0 [ 445.683621][ T3013] __alloc_frozen_pages_noprof+0x181/0x370 [ 445.689417][ T3013] alloc_pages_mpol+0x232/0x4a0 [ 445.694255][ T3013] allocate_slab+0x8a/0x370 [ 445.698741][ T3013] ___slab_alloc+0xbeb/0x1410 [ 445.703407][ T3013] __kmalloc_noprof+0x305/0x4f0 [ 445.708244][ T3013] fib_create_info+0x1728/0x3210 [ 445.713168][ T3013] fib_table_insert+0xc6/0x1b50 [ 445.718000][ T3013] fib_magic+0x2c4/0x390 [ 445.722230][ T3013] fib_add_ifaddr+0x144/0x5f0 [ 445.726907][ T3013] fib_inetaddr_event+0x12e/0x190 [ 445.731945][ T3013] notifier_call_chain+0x1b6/0x3e0 [ 445.737048][ T3013] blocking_notifier_call_chain+0x6a/0x90 [ 445.742749][ T3013] __inet_insert_ifa+0xa13/0xbf0 [ 445.747672][ T3013] inet_rtm_newaddr+0xf3a/0x18b0 [ 445.752598][ T3013] page last free pid 5870 tgid 5870 stack trace: [ 445.758922][ T3013] __free_frozen_pages+0xbc4/0xd30 [ 445.764031][ T3013] __slab_free+0x303/0x3c0 [ 445.768428][ T3013] qlist_free_all+0x97/0x140 [ 445.773005][ T3013] kasan_quarantine_reduce+0x148/0x160 [ 445.778448][ T3013] __kasan_slab_alloc+0x22/0x80 [ 445.783283][ T3013] __kmalloc_cache_noprof+0x1be/0x3d0 [ 445.788636][ T3013] ref_tracker_alloc+0x133/0x460 [ 445.793566][ T3013] netdev_queue_update_kobjects+0x1d1/0x6c0 [ 445.799439][ T3013] netdev_register_kobject+0x258/0x310 [ 445.804886][ T3013] register_netdevice+0x126c/0x1ae0 [ 445.810080][ T3013] cfg80211_register_netdevice+0x150/0x2f0 [ 445.815873][ T3013] ieee80211_if_add+0xe60/0x1390 [ 445.820826][ T3013] ieee80211_register_hw+0x3551/0x4080 [ 445.826269][ T3013] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 445.831975][ T3013] hwsim_new_radio_nl+0xea4/0x1b10 [ 445.837071][ T3013] genl_family_rcv_msg_doit+0x215/0x300 [ 445.842605][ T3013] [ 445.844910][ T3013] Memory state around the buggy address: [ 445.850517][ T3013] ffff888076a55b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 445.858558][ T3013] ffff888076a55c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 445.866598][ T3013] >ffff888076a55c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 445.874639][ T3013] ^ [ 445.880252][ T3013] ffff888076a55d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 445.888315][ T3013] ffff888076a55d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 445.896353][ T3013] ================================================================== [ 445.954873][ T3013] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 445.962104][ T3013] CPU: 0 UID: 0 PID: 3013 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 445.971561][ T3013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.981621][ T3013] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 445.988950][ T3013] Call Trace: [ 445.992232][ T3013] [ 445.995164][ T3013] dump_stack_lvl+0x99/0x250 [ 445.999756][ T3013] ? __asan_memcpy+0x40/0x70 [ 446.004340][ T3013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.009535][ T3013] ? __pfx__printk+0x10/0x10 [ 446.014137][ T3013] vpanic+0x281/0x750 [ 446.018102][ T3013] ? preempt_schedule+0xae/0xc0 [ 446.022939][ T3013] ? __pfx_vpanic+0x10/0x10 [ 446.027422][ T3013] ? preempt_schedule_common+0x83/0xd0 [ 446.032867][ T3013] ? preempt_schedule+0xae/0xc0 [ 446.037729][ T3013] ? __pfx_preempt_schedule+0x10/0x10 [ 446.043108][ T3013] panic+0xb9/0xc0 [ 446.046835][ T3013] ? __pfx_panic+0x10/0x10 [ 446.051253][ T3013] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 446.057160][ T3013] ? __mutex_lock+0x147/0x1350 [ 446.061912][ T3013] check_panic_on_warn+0x89/0xb0 [ 446.066884][ T3013] ? __mutex_lock+0x147/0x1350 [ 446.071630][ T3013] end_report+0x78/0x160 [ 446.075858][ T3013] kasan_report+0x129/0x150 [ 446.080366][ T3013] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 446.086249][ T3013] ? __mutex_lock+0x147/0x1350 [ 446.091030][ T3013] __mutex_lock+0x147/0x1350 [ 446.095619][ T3013] ? __mutex_lock+0x5bb/0x1350 [ 446.100381][ T3013] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 446.106609][ T3013] ? __pfx___mutex_lock+0x10/0x10 [ 446.111626][ T3013] ? __lock_acquire+0xab9/0xd20 [ 446.116481][ T3013] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 446.122536][ T3013] ? process_scheduled_works+0x9ef/0x17b0 [ 446.128237][ T3013] ? process_scheduled_works+0x9ef/0x17b0 [ 446.133936][ T3013] process_scheduled_works+0xae1/0x17b0 [ 446.139491][ T3013] ? __pfx_process_scheduled_works+0x10/0x10 [ 446.145454][ T3013] worker_thread+0x8a0/0xda0 [ 446.150043][ T3013] kthread+0x70e/0x8a0 [ 446.154112][ T3013] ? __pfx_worker_thread+0x10/0x10 [ 446.159210][ T3013] ? __pfx_kthread+0x10/0x10 [ 446.163803][ T3013] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.169003][ T3013] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.174183][ T3013] ? __pfx_kthread+0x10/0x10 [ 446.178757][ T3013] ret_from_fork+0x3f9/0x770 [ 446.183336][ T3013] ? __pfx_ret_from_fork+0x10/0x10 [ 446.188453][ T3013] ? __switch_to_asm+0x39/0x70 [ 446.193204][ T3013] ? __switch_to_asm+0x33/0x70 [ 446.197976][ T3013] ? __pfx_kthread+0x10/0x10 [ 446.202551][ T3013] ret_from_fork_asm+0x1a/0x30 [ 446.207302][ T3013] [ 446.210597][ T3013] Kernel Offset: disabled [ 446.214905][ T3013] Rebooting in 86400 seconds..