last executing test programs: 1.989723665s ago: executing program 4 (id=4551): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008b000000bf090000000000005509010000000000950000000000000085000000c9000000bf91000000000000b70205000000000085000000c5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x8, 0x4, 0x40, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0x4}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = accept(r6, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r7}, 0x47) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x6, 0x10}, &(0x7f00000005c0)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000600)=@sack_info={r10, 0x4, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd74d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x30, 0x7f, &(0x7f00000001c0)=""/127, 0x40f00, 0x10, '\x00', r1, @fallback=0x2, r2, 0x8, &(0x7f0000000300)={0x7, 0xc}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x3, 0x405, 0x6}, 0x10, 0x0, r5, 0x8, &(0x7f0000000380)=[r8, r0, r0, r0, r9, r0], &(0x7f00000003c0)=[{0x0, 0x5, 0x3, 0x1}, {0x1, 0x2, 0xe, 0x9}, {0x2, 0x2, 0xe, 0xb}, {0x1, 0x3, 0x9, 0xb}, {0x3, 0x3, 0xf, 0x5}, {0x0, 0x4, 0x6, 0x4}, {0x4, 0x3, 0x0, 0xb}, {0x5, 0x5, 0xa, 0xb}], 0x10, 0x1}, 0x94) 1.627778612s ago: executing program 0 (id=4559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) (async) recvmmsg(r2, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/170, 0xaa}], 0x4, &(0x7f00000002c0)=""/73, 0x49}, 0x18000}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/9, 0x9}, {&(0x7f0000003500)=""/138, 0xfffffffffffffe9b}], 0x7}, 0x7b8}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/213, 0xd5}, {&(0x7f00000037c0)=""/10, 0xa}, {&(0x7f0000003800)=""/199, 0xc7}, {&(0x7f0000003900)=""/183, 0xb7}], 0x4}, 0x4}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/150, 0x96}, {&(0x7f0000003b40)=""/99, 0x63}, {&(0x7f0000003bc0)=""/142, 0x8e}], 0x3, &(0x7f0000003cc0)=""/251, 0xfb}, 0x5710925a}, {{&(0x7f0000003dc0)=@nl=@proc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000003e40)=""/154, 0x9a}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x2, &(0x7f0000004f40)=""/98, 0x62}, 0x3}, {{&(0x7f0000004fc0)=@ax25={{}, [@netrom, @null, @null, @null, @rose, @null, @netrom]}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005040)=""/4096, 0x1000}], 0x1}, 0x400}], 0x6, 0x10142, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r7 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x0, 0xb, 0xe0d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$packet(r11, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="19000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0800270002000000080026006c090000"], 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) 1.053833391s ago: executing program 1 (id=4561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x800}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'veth0_to_bond\x00', @link_local}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) unshare(0x6a040000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x28801}, 0x4000851) r3 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffb1, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x8, 0x3, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1b6f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x188a6d0b, @local, 0x8}, @in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00', 0x7}]}, &(0x7f00000000c0)=0x10) (async) sendto$packet(r8, &(0x7f00000005c0)="800000800000210ee7decd7a000065ce10b3808a9787c7dec189eeb5d545dc8722e1ab46cfdda960bf3da69e7c1304de3a116fab930a2781550824a9ffd7a21e587546195addef995cb6f0ce717cd9aef078c5b93bc464aa3c487aa04bdf24ce433cd21d920efb4a9ca996af00a10e90b05a83de01f8c900000000000000000000000000000000000000000082183977db8e1b1361f9119bc2ff0638bd1d554c3053c3f90ceb2d67303edb67c380d2", 0xaf, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @local}, 0x14) 1.051050262s ago: executing program 3 (id=4563): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x8, [@volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @enum={0x4, 0x3, 0x0, 0x6, 0x4, [{0xe, 0x8}, {0x3, 0x7}, {0x9, 0x1}]}, @struct={0x10, 0x2, 0x0, 0x4, 0x1, 0x5, [{0xa, 0x3, 0x4}, {0x3, 0x3, 0x800}]}, @const={0xc, 0x0, 0x0, 0xa, 0x4}, @restrict={0x3, 0x0, 0x0, 0xb, 0x4}, @struct={0xa, 0x2, 0x0, 0x4, 0x0, 0x5, [{0xc, 0x3, 0x7}, {0x5, 0x4, 0x8}]}, @struct={0x10, 0x5, 0x0, 0x4, 0x1, 0xa, [{0x0, 0x1, 0x479}, {0x7, 0x2, 0x5}, {0x7, 0x5, 0x5}, {0x5, 0x5, 0x3}, {0xe, 0x2, 0x9}]}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x30, 0x30]}}, &(0x7f0000000e80)=""/4096, 0xf8, 0x1000, 0x1, 0x10000}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x3, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r1}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="186ee467a51b22a26c000000000000000020924f", @ANYRES32=r1, @ANYBLOB="000000000000000071000000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r4], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000300)={@multicast2, @multicast1, 0x0}, &(0x7f0000000340)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x60}}, 0x40000c0) 1.047699312s ago: executing program 0 (id=4564): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180), &(0x7f0000000240)=0x4) ioctl$sock_ifreq(r2, 0x8942, &(0x7f0000000140)={'veth0_vlan\x00', @ifru_map={0xffffffff, 0xa90, 0x2, 0x1, 0x2, 0xfb}}) ioctl$sock_netdev_private(r2, 0x89f8, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) 1.046462571s ago: executing program 3 (id=4566): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendto$packet(r0, &(0x7f0000000140)="7f600878ecfe071fc36309027a11310c177c4aa48f6aec575d2860e5f13452e463", 0x21, 0x8000, &(0x7f0000000240)={0x11, 0x15, r1, 0x1, 0x1}, 0x14) (async) sendto$packet(r0, &(0x7f0000000140)="7f600878ecfe071fc36309027a11310c177c4aa48f6aec575d2860e5f13452e463", 0x21, 0x8000, &(0x7f0000000240)={0x11, 0x15, r1, 0x1, 0x1}, 0x14) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000001000)=0x29) (async) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000001000)=0x29) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x849, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x849, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010008000000430100008000000088a800001400"], 0x68}}, 0x24040800) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c801400010008000000430100008000000088a800001400"], 0x68}}, 0x24040800) 1.041130092s ago: executing program 1 (id=4568): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x81) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1.035460792s ago: executing program 3 (id=4569): r0 = socket$inet6(0xa, 0x3, 0x2f) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{r2, 0x6, 0x11d, 0x8001, 0x8, 0x9, 0x8, 0x5, 0x0, 0x7, 0x474, 0x5, 0x30, 0xe, 0x8000000000000000}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@rand_addr=0x400, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x10, 0x38}, {0x5, 0x1, 0xdfffffffbffffffc, 0x5, 0x5, 0x400000000000, 0x0, 0x10000000000}, {0x3ad, 0x0, 0x0, 0xfffffffffffff7fd}, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0xa, @in6=@local, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5, 0x20000000}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.009816681s ago: executing program 2 (id=4570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000b31720700000000000000000000000071122a0000000000950000000000008036edab60c3be25d34a2b1376d7f6b751ab35d233012dd383edf46e25fff970b1b6d79c35c2f9296fd72817fe4a298ae5161c5d17fde30cc3f86b6c2d83ee9593056851c526217df2e6e2a9840b92917434aa4545fe4ef58cc50e191c79b8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) socket(0x27, 0x807, 0x5) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x40002, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffe}]}}]}, 0x38}}, 0x40c4) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@dellink={0x5b0, 0x11, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8080, 0x8}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2478}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_TXQLEN={0x8, 0xd, 0xfffffff4}, @IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_VFINFO_LIST={0x364, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xffffff7f}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x7}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xe, 0x80}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x5, 0xe}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfffffff8, 0xffffffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x9, 0x800}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xa, 0x80}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x2}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x5f53}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x1}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x81, @multicast}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfffffff8, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x400}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x6, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x800}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x908, 0xa48, 0x18000000, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0xffffffaa, 0xffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0x394, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x1, 0xfffffc00}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x7f8, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xf8b}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2aa5}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @remote}}, @IFLA_VF_VLAN={0x10, 0x2, {0xc, 0xcf0, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x51e, 0x9}}]}, {0x13c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x7a, 0xfffffff9, 0x8100}}, {0x14, 0x1, {0x277f, 0xf9f, 0x2, 0x8100}}, {0x14, 0x1, {0x7fffffff, 0x925, 0x40, 0x291584a553d75bc4}}, {0x14, 0x1, {0x1fd8, 0x6d7, 0x1, 0x8100}}, {0x14, 0x1, {0x7, 0x32e, 0x8, 0x88a8}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffffff4e, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80, 0x4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0xa3d, 0x2, 0x400}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0xf4f, 0x1, 0x88a8}}, {0x14, 0x1, {0x4, 0xd5b, 0x1, 0x88a8}}, {0x14, 0x1, {0x6c6b, 0x3fe, 0x8000, 0x8100}}, {0x14, 0x1, {0xf2, 0xb9e, 0xa, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0xc29d, 0x2}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2}}]}]}, @IFLA_VFINFO_LIST={0x1fc, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x3, 0x8, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0xffff8001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}]}, {0x12c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x5}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x800, 0x76a}}, @IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x32c, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xd4, 0x46cfe9c6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7a, 0x5}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0xcad, 0x2, 0x8100}}, {0x14, 0x1, {0xab1, 0x610, 0x0, 0x8100}}, {0x14, 0x1, {0x9, 0x46f, 0x200, 0x88a8}}, {0x14, 0x1, {0x6, 0x99c, 0x9, 0x8100}}, {0x14, 0x1, {0x7fffffff, 0x99f, 0x8, 0x8100}}, {0x14, 0x1, {0x8, 0xcb4, 0x6, 0x88a8}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0xffffffffffffffff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x2}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x88}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8, 0x8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x56, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffa50, 0x8001}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x93, 0xf20}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x9}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xfff}}]}]}]}, 0x5b0}}, 0x0) 998.926767ms ago: executing program 4 (id=4571): write(0xffffffffffffffff, &(0x7f0000000000)="43d80e8948d2f6f2099cc1f9f70c920071ef808d25df2129aa26df5eec7b5ed98992b84988fa5df488bf2ffaa35e2808f2715d71368d477a04a69b57d4949ce2a50927c976fdbba556e2fcc22fc0a38e4d390df8659de11306327a0d4c9fa6bde166c9da0385809c46e532", 0x6b) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000080), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000280)=""/234, 0xea}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/196, 0xc4}], 0x6, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x10000) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000006c0)={{0x2, 0x4e24, @multicast2}, {0x6, @remote}, 0x46, {0x2, 0x4e20, @rand_addr=0x64010102}, 'wlan0\x00'}) shutdown(r3, 0x0) r8 = socket$inet(0x2, 0x80000, 0x3) socket$inet(0x2, 0x5, 0x7fffffff) socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r1) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x9ee7f964f115d8c2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000880)={{0x2, 0x4e23, @multicast2}, {0x300, @multicast}, 0x42, {0x2, 0x4e21, @remote}, 'veth0_vlan\x00'}) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000900)={0x4, {{0x2, 0x4e21, @remote}}}, 0x88) socket$netlink(0x10, 0x3, 0xf) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000009c0)={{0x2, 0x4e20, @remote}, {0x1, @remote}, 0x8, {0x2, 0x4e22, @remote}, 'wlan0\x00'}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000a40)={0x0, 0x2}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000ac0)={0x4, 0x1, 0x1, 0xb, 0x1, 0x9, 0xf7, 0x5265, r10}, &(0x7f0000000b00)=0x20) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000b40)={0x49bb, 0x200, 0x7fff, 0x6, r10}, 0x10) socket$isdn(0x22, 0x3, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000b80)={r10, 0x8000}, &(0x7f0000000bc0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000c00)={r12, 0x0, 0xa, [0x81, 0x7, 0x0, 0x6, 0xcc8, 0x6, 0x9, 0x7ff, 0x7, 0x4]}, &(0x7f0000000c40)=0x1c) r13 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(r13, 0x8955, &(0x7f0000000c80)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @random="576c8cf153ca"}, 0x42, {0x2, 0x4e24, @multicast1}, 'veth0_to_bond\x00'}) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r14, 0x8982, &(0x7f0000000d00)={0x7, 'team_slave_1\x00', {0x88}, 0x10}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000d40)=0x0) connect$nfc_llcp(r7, &(0x7f0000000d80)={0x27, r15, 0xffffffffffffffff, 0x5, 0x51, 0x7f, "80e1978e26a44586332c996aee7efdb5f04e88f1add87e62725f8b2f4c17fb9ee7edb5dd8e388dcd39228916cdde015f48cdfec3f716180f8d428b7e15a167", 0x1d}, 0x60) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x30, 0x140f, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}}, 0x82) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000f00)={0x80}) 866.110683ms ago: executing program 3 (id=4572): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)={0x2}, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) 862.393226ms ago: executing program 0 (id=4573): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000002480)={@local, @random="513a80bbd809", @void, {@llc={0x4, {@snap={0xaa, 0xaa, "ba", "581ef5", 0x19, "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"}}}}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@gettaction={0x114, 0x32, 0x1, 0x70bd25, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x78f6}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x3, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbd}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x61c8726e}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20049001}, 0x4044) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xa9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 799.023415ms ago: executing program 3 (id=4574): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000040)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x3c, 0x68, 0x1, 0x70bd26, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0xb}]}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x3c, 0x68, 0x1, 0x70bd26, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0xb}]}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 726.879665ms ago: executing program 2 (id=4575): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x7fff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24f7ff00", @ANYRES16=r4, @ANYBLOB="000825bd7000fbdbdf250300000008003b000600000008002b00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x800c085) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) sendfile(r5, r5, 0x0, 0x20001) sendfile(r2, r5, 0x0, 0x401) sendto$inet(r0, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x7fff, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24f7ff00", @ANYRES16=r4, @ANYBLOB="000825bd7000fbdbdf250300000008003b000600000008002b00ff000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x800c085) (async) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) (async) sendfile(r5, r5, 0x0, 0x20001) (async) sendfile(r2, r5, 0x0, 0x401) (async) sendto$inet(r0, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) (async) 675.902852ms ago: executing program 1 (id=4576): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044811}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x94, r11, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x407, 0x7, 0x5}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'dvmrp0\x00', @local}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="035b654dbc4b067d2b28a94a9b23e176", 0x10}], 0x1}, 0x4) 650.157817ms ago: executing program 4 (id=4577): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xa]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x728a, r2}, 0x38) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000740)="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", 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/17, 0x11, 0x0, &(0x7f0000000200)=""/69, 0x45}, &(0x7f0000000280)=0x40) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x3, 0x804}, 0x48) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20044011}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[@ANYRESOCT=r9], 0xfe33) 618.781392ms ago: executing program 3 (id=4578): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x3ffd}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000047c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)={0x60, 0x1404, 0x2, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x48011}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{&(0x7f0000000000)=@rc={0x1f, @none}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000180)}, {&(0x7f0000004880)=""/182, 0xb6}, {&(0x7f00000004c0)=""/157, 0x9d}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000580)=""/203, 0xcb}], 0x6, &(0x7f0000000680)=""/98, 0x62}, 0xf}, {{&(0x7f0000000700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/82, 0x52}], 0x3, &(0x7f0000000900)=""/121, 0x79}, 0x2f9}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/49, 0x31}], 0x1, &(0x7f0000000a80)=""/137, 0x89}, 0x10}, {{&(0x7f0000000b40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000bc0)=""/74, 0x4a}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000004940)=""/167, 0xa7}, {&(0x7f0000000d80)=""/178, 0xb2}, {&(0x7f0000000e40)=""/36, 0x24}], 0x5}, 0x3}, {{&(0x7f0000000f00)=@ax25={{0x3, @bcast}, [@null, @rose, @null, @netrom, @netrom, @bcast, @null]}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000f80)=""/196, 0xc4}, {&(0x7f0000001080)=""/76, 0x4c}, {&(0x7f0000001100)=""/32, 0x20}, {&(0x7f0000001140)=""/208, 0xd0}, {&(0x7f0000001240)=""/130, 0x82}], 0x5, &(0x7f0000001380)=""/218, 0xda}, 0x4}, {{&(0x7f0000001480)=@hci, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/177, 0xb1}, {0xfffffffffffffffc}], 0x2, &(0x7f0000001600)=""/244, 0xf4}, 0x5}, {{&(0x7f0000001700)=@nfc_llcp, 0x80, &(0x7f0000001880)=[{&(0x7f0000001780)=""/222, 0xde}], 0x1, &(0x7f00000018c0)=""/42, 0x2a}, 0x99}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001900)=""/156, 0x9c}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/2, 0x2}, {&(0x7f0000004800)=""/68, 0x44}, {&(0x7f0000002a80)=""/168, 0xa8}, {&(0x7f0000002b40)=""/252, 0xfc}], 0x6, &(0x7f0000002cc0)=""/177, 0xb1}, 0x1}, {{&(0x7f0000002d80)=@generic, 0x80, &(0x7f0000004140)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/139, 0x8b}, {&(0x7f0000003ec0)=""/19, 0x13}, {&(0x7f0000003f00)=""/187, 0xbb}, {&(0x7f0000003fc0)=""/196, 0xc4}, {&(0x7f00000040c0)=""/49, 0x31}, {&(0x7f0000000400)=""/30, 0x1e}], 0x7, &(0x7f00000041c0)=""/187, 0xbb}, 0xf7}, {{&(0x7f0000004280)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004300)=""/35, 0x23}, {&(0x7f0000004340)=""/88, 0x58}], 0x2, &(0x7f0000004400)=""/36, 0x24}, 0x3}], 0xa, 0x0, &(0x7f00000046c0)={0x77359400}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 499.455576ms ago: executing program 2 (id=4579): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x74, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x3, 0xe8, 0x24, 0x401}}}}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x74}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, r7, 0xd1b, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40a03, 0x0) preadv(r8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r5, 0x25, 0x0, @val=@netfilter}, 0x40) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r10 = accept(r9, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) recvmsg(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x30845aa81b581fea) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, r1, 0xbce10000) 482.918437ms ago: executing program 4 (id=4580): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x0, 0x80000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast1}], 0x10) 445.842481ms ago: executing program 1 (id=4581): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x1, 0x2, 0x4, 0x3, {0x1, 0x22, 0x7, 0x4}}, 0x7) 351.320434ms ago: executing program 0 (id=4582): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x33e, 0x0, 0x0, 0x0, 0xf3d, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x0, 0x7f, 0x2}) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x12, 0x0) bind$x25(r2, &(0x7f0000000200), 0x12) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000240)={'erspan0\x00', {0x2, 0x4e24, @loopback}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2, 0x11, 0x78, 0xf, 0x3, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x18}}, 0x40000) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r6, 0x89e8) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000884}, 0x40000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x2e4, 0x1, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x9a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_EXP={0x4}, @NFQA_CT={0x24c, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x139}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x43d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_NAT_SRC={0x60, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2b4fca3e}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6f70}]}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}, @CTA_TUPLE_ORIG={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}]}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20048800}, 0x800) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) sendto$inet6(r1, &(0x7f00000008c0)="5e836ca6504454248eedc0c878d6887c375ab68282e2c8a1a54cf4462bbbd976d7d88c30228cb5f2769cc9f2878f8d12e0871cfb998aadebd960de87653085a4de26138b24dd5d2a9d8a5213581cfa07de3d404c51c0da8edfb124081bcbaf40cde4743347950ea2ba984a7821cc2fb5952ec8ddb336df16c476e5325abfbcf1bbb856d1e65b1baa10936831f30d827f8bfa51aacbfc47df38ebffe8312c0b5775ccbcce8cd0981fa3ddebb234", 0xad, 0x40000, &(0x7f0000000980)={0xa, 0x4e21, 0x4, @mcast2, 0xe7a3c27d}, 0x1c) bind$l2tp(r0, &(0x7f00000009c0)={0x2, 0x0, @broadcast, 0x2}, 0x10) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000000a00)={0x8, 0xa, 0x364f, 0xac, 0x7, 0x25, 0x21, "800a2b10771fd39ff96ef60b281b30c7ed695552", "91d61822c2ed39947b7d680d2493bafb6f75b630"}) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r4) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r10, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6f}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4008811) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f0000000c00)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r10, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}}, 0x0) sendmsg$key(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x2, 0x7, 0xd, 0x9, 0x25, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x0, 0x6, {0x6, 0x32, 0xa6, 0x5a, 0x0, 0x7, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x35}, @in=@dev={0xac, 0x14, 0x14, 0x40}}}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x22, 0x4, 0x6}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0xe}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_address={0x3, 0x4, 0x6c, 0x80, 0x0, @in={0x2, 0x4e24, @broadcast}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0xfffffffd}}, @sadb_x_sec_ctx={0x5, 0x18, 0xb, 0x5, 0x1a, "e89059f69c319742585dcb13c1b234838f23cb2b4ec43832ed45"}, @sadb_x_sa2={0x2, 0x13, 0x81, 0x0, 0x0, 0x70bd26, 0x34ff}]}, 0x128}}, 0x40) 350.338625ms ago: executing program 2 (id=4583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r2}, 0x10) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r5}, 0x40) (async) syz_emit_ethernet(0xab3, &(0x7f00000005c0)={@remote, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x5, 0xaa5, 0x67, 0x0, 0xab, 0x11, 0x0, @rand_addr=0x64010100, @remote}, {0x4e23, 0x4e20, 0xa91, 0x0, @opaque="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"}}}}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x800, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x6}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xd489, 0x8, 0x10000, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xdc}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) 310.84467ms ago: executing program 4 (id=4584): socket$inet(0x2, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 221.585961ms ago: executing program 0 (id=4585): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_crypto(0x10, 0x3, 0x15) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_ext_convert_to_initialized_fastpath\x00', r2, 0x0, 0x9}, 0x18) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 171.655336ms ago: executing program 2 (id=4586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000000)={'veth1_vlan\x00', 0x1ba}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000340000000000800064000000001"], 0x9c}}, 0x0) 170.559244ms ago: executing program 1 (id=4587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) (async) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x700, 0x40, 0x10000, 0x7ff, {{0xe, 0x4, 0x2, 0x0, 0x38, 0x68, 0x0, 0x80, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @local, {[@rr={0x7, 0x23, 0x44, [@local, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x3a, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d40)={'ip6_vti0\x00', &(0x7f0000000cc0)={'ip6_vti0\x00', 0x0, 0x4, 0x92, 0x3, 0x0, 0x2c, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x40, 0x8098, 0x4, 0x8}}) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r7, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x32, 0x10122, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e00)={'syztnl2\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x9, 0x8, 0x1, @loopback, @loopback, 0x20, 0x8, 0x1, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003100)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r10, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4) sendmmsg$inet(r4, &(0x7f00000032c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000080)="a0f71eac9f4b5c1c56b87621bb", 0xd}, {&(0x7f00000000c0)="f23efa09400aa1f98134a93502ba9cb3a26bf26a2841b0d378de46ca3e237b7861d9", 0x22}, {&(0x7f00000002c0)="37c18062afe41a3b4f9d96eaf482e4e151bf968d20e647d531ba5c8ed9ebe8a8f7b545c6d2966d5f5eebdb9caf1b6eb45de94c8d65e8c3392f460f8c3d17430452f1f36bd3368286f369be35789ca44e614a36523c952c5bebbad52736a83141b221f516badf6e502529ff50c67987972897baf3605dd2539e555b87761a2d80e5997dc4808f38016f21e8ea0b283978ac52fa43636a6a4d22ebb428956c22c932b336c381087dcc3d5115250bc3e7527a700525ec913520c16303116aff380c294613cba9e0bee8feef4bd50cbc37ec5b5f860c0ff08e8bc43ed9d94effe05e5c6de864334c82c985f4da7e78fbbaa892e0", 0xf2}, {&(0x7f00000003c0)="5dd37ebf850ff454a34c62983eeb4f794f94ca2731eaf5a33032c260ade86086a6f26e2e8005d153e55b9c8070458fd9c2a7f079beeaf4543b542c1c1cdcc0e5f198f1413be3a065df2f0cee8390603d9b4163df527b30ba69386d08ccddceb648b687a27d4651d6f7ffe5d6958da576b3a4e866c0d0c64ce930e469fb86355f1c0d6c50268e41348fbda422773a709109d7cc685b03d7bed89ee703c9b7664307c0d8778c95dd7ce7cbe83ebcd18878c8be1cb2b52ed08f35d10564becdf4ecd3dc3e9432", 0xc5}, {&(0x7f0000000540)="9817f1a07ffe18f3241ca48be46f1e90998bd247c3c4f45e998c12e64eddaa113eabf197eac062f45fc577264d7d64a845ca3fbf1d77968711e440d96833658e00b0b6d164aa9eaf1695e3cc5decbb9c31a02390271cf240ba3ea390b32f0fbe77868ee68e3476245502b9833c21fdefff84a7f99cc6fd05fa7dd39f9bb029ee5d7c5fcd169e106a1af3538df4dd4e93d00870bdc2fc6fa607d964de58b355b85e5c6f2e88", 0xa5}], 0x5, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @broadcast}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x7, [@loopback, @local, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}]}, @cipso={0x86, 0x17, 0x3, [{0x7, 0x11, "f85c156ffdcf5ee014e100fa4a88c4"}]}, @cipso={0x86, 0x38, 0x3, [{0x6, 0x7, "86eb21bd1c"}, {0x0, 0x12, "3eb2872a0abb202e5759c1eafbfc7033"}, {0x1, 0xc, "0661af44756ea74a64be"}, {0x5, 0xd, "af339f1ecf413b9ab82259"}]}]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xad, [@local]}, @timestamp_addr={0x44, 0x44, 0x33, 0x1, 0xa, [{@loopback, 0x1}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x80000001}, {@private=0xa010101, 0x4}, {@local, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x102}, {@broadcast, 0x80}]}, @end, @ssrr={0x89, 0x7, 0xa1, [@broadcast]}, @timestamp_prespec={0x44, 0x44, 0x16, 0x3, 0x1, [{@loopback, 0x7}, {@multicast1, 0xff}, {@multicast1, 0x68e1}, {@loopback, 0x7}, {@rand_addr=0x64010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x51}, {@private=0xa010100, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @generic={0x83, 0xb, "0a365ec1eea828f9ba"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7b}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14}}], 0x1a8}}, {{&(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000001100)="fa26fd6cf69b8d764815ff977a0ce5600108969e6dec4477bc565a736999c35a53decaac78e56ea5434b98304cb952005ee1d03e8e42055c011f4d1fa1eb343258b8845ec2ba632459aa54a658fe3fac2c9bc87e1371aec992dbf8b1484ad625d607cb66692323384d0f3454e77af523c6bf27f6ce8f48be27f17baa07d694cd5f077ff14e1d836443340683a9a79c27bd0ab8144a16741be7f95c4557c3595ae430cf2b8dfad29cee51148ce28b889289c4c30113de85168ce9515c8cf93a071f7cff85aefd812602b15b6736801c135ba15c6e67b9906f51d439713e3c01a40233ed6775e695f5c0ebfd571e041825c91984ea31f682328abcf1cec6b96fda4f0771a4863447f5155cf190e99bb67c412dc7ac1508124cb11a159560c8636b4b22c5b2b556a2781cfb09e19d7354e389ab378c9774e1dfd8f04e2ebd045d3806c09015b4fce950c0c0dcf45b6e1552bf07eb237c91fc9ebe11ccad3500a1ebd39c808635d85c811de00b2a39d0e2db9fdd148d2783a8e5fadb999ffc36a344cc6a9fa7a35ec3eca0ef66a3a0dc8d0836305a35b51a22ebb2d7141c8267d25bff6227f33876e3c160560ce50f03782bf81726e340a8a1be276bb1b21d8d91d0355a387ec2feaa5390d05ca60cae2c1146876faaa99d7a3d728c74961d25800d5a0426ea9cff0aefcf635dc4e1c4d67b1be92eb91645763821eaf313cde0c3ceedd8378277a97e8e6254595dc9a56298afaedfe48e7c53c2f936c2025541211a0e45f18f77b05b4349907cc95b38d53278c52a10034363acae7bbdf88ac66c0e885ffb2c157f75d9cdde3dec7374aa5f9a6bef56f83ad5ac8e780c8e79e5cf0f79bc74e1bf0a0744b4bda847ba1a60a3f3693aed73795019d8775474c3fd2a36ba6a898d729629eb30930be6594e3602269da92ee9a9bac50cee0f078fd50fe6c0ba8f1cf0183f7b95067d6c1bc214fef6c8e13b64e63f759c5807552fe6294e33c47e900764e0eece5cbf982c13b157905c50060d0abdd2440c7a637da07b8c19c578bec82c02be71790f1d3eba4d3d1812187001101af1e82ca9b5873b1ebaabeb14bcb4e8e1648a3676d59f55734d93b0da4b60fdbf0b77b3b0e65703ac8214ae348ee110a35674549df98371557cbb6bb359490720ad178202ba065ddcd765662ca0f798382398acd2dcfca2ec35280d4a2d2397b20095bfac04a6e34efa670b10768a402fea087f08f5293061103c40688ae9d156b95fc953080f1e86acc6b81cf04315f26c15e159f2e717e1b3e1f1f72101547501dc7ec1c9ebb6873dc2b6b25d2ad3f97b85e8e36a75a427ceedabde0baeedb7fe8c62b4b36cbdade89b764e1614c1685d56a782412512c2c92b4751a513af49dac968fbbbcfd0587ec23003f465d1f65ec1abb01b400aa9b1bd74fb2ed9ea17b4958696918510154c9f400550e6e4d17a47f511b9b9ff6717d2d1ce556555a708d03be894633026a9a7cb2f9c490b5050dbd459bc948315f30a8459dd2c5c4e16e2e9eabb1f037faf81e255505953f6ef107447e47fdcd8f8c1942043e56dd15a0e8bbf9fbcc071d90d5f8fc1d7a2251454ef1d76aa097bfea946f09ff3de032821cb825e374a4a70552ed0e03b45149f49dc93af41e451fe71f0c92033a7c1a1e8d2dae3b853266a13dd1e0ca0772d43e01a6b353d961521a8b20cab98ff7f88f492775d4f45b4a08b628d9d16b5326bbb35a96fcecd60a152d564c19065db40d5aa1c463e50487c34b5d4c43c3d9b7a6ed54f540a05d37e1b6b5eed9d1f96034cd0b340f150f0696b4c91ec461865adbb13f2b2549a0f0c15807c693726596ed34e4b419fe34d9adc5161d5b9454476648fd415a71587b705f8d23da606de955d5637d65d0f102fb88342210a2f1abf8ff10628756c4098c1995256607345df1bba29ce1f9e9784e3d551d42cc6d25b9084615ef5300d048ae7aaf0be96ae9dc804d5747a568b90acddd5d1af9634787dbec505d08cc705db098819e75bf22b224b969a0c1dbcb6659e91c0b86ccb5a4dbaafd686a4894e775e0b41a35377c3028d1f11188c907d2db92897ecc7ea8807fd88a08db155f0e1f3ed776e6c6e91350f3eb98e547a26596ec6a8d682d2f0222e9c035d2004296d2bd6d619b23e78f92f9e3a0b91429534cec989c0979b1cec303b29e5181ede1549583fd9fe16f2106fc65f6f0183aa826396912b9f84b0155690705361ac79e12df7758502200ede604aa3e6ff934ae709ec370f9d64a0400e7277e106c1cda3b4b11b0b22e3af4526838c398ab9e0d8c6ea393a32ee8dd52d73e3ce86b56a56b22ab62ad3cfa2977819c58f1bd9b4cfb984f4fb0fe7897122c06af88f49951506bb012dfdac16616779e4094f3b48e73159e16dde4a03a06a301677e4167d4b85e1762e8ac6d9e50d5a6c97f77d97ae0620e2e4c967cbb21f03c91b948a3ac31d581b75eff00b548a5bbfebd721ab1fb2d328bc830cb86dc9be7f9edf53eb17238ff94f9823bac3fc115557848a17078b37774d46f51f926464dcd021b2eb47417a6189401f90af638d8a6e99b9aa41a2e76ef50b6ad227badf942ccfa2d580e72427f606e0595b319ccfc09bdde02eb5f233b3217d8ee32eb554a9b97dafb546f68a57a6a0b171f44e63c7d16f2c1934a0f73470cf9fc238d8d8274897ce605430225f94a0c2dc206f13c61c2191bcb888e4fc6e4a34316b8dc0da16d2deada2f72afad9a444e0a9f91e7a08be02195727c53048bd3b086890ee5149e7fde23a88ba55b3be66bdca384fb40f69f9539c590d3d00e6565e476c4f9ca4fb077f58f7df79926730d088947d1fa724371798ef08b1a9676dca19902b4cb2ddfdb4a7cbbb83aeaf2f040463cb9d5a96b88aa8e448651bf2717572d397f9e1d3027612cddbcac40af8acb2767d68619ee0a570d8662873c8278d37041a3bc48a9b9d2e1a56db649c9fe265746de9a7f6fc44468ffba9c8f60287f835faefc4c54b0c058c0be5f29976be8268c0e6ec4eb27e7ecfb621f2c28de1ac1d347ce6b0857671737af64a63e00f899847d9aaf21932f7e65cc1e345b6186c90c274739502bfb32d0de71c7d28957c0f73c06e60bae899d906c85f79e5535221da243bd561b7ca7332e714f803628cf4c9790b29c0c4cd74c3ed4340939431ad06d66a79bfab7e5383e10da37dce770cfb6b7559cbc1034cf2ee601cd95290f38c0d693d3a3dd2991d055ec0c9d544fe997b88fbc52f0e88399aceb24f99341adab0b3d8e13d6c1f12d22cf4d87ecfde6a8e7778810996f5b2a53290bc18af7b9111f39b61fdfd8c4e56197f1db1e9f7eff15d6fa94d7156d7d9e71c0a68a1e5124d3c920d1fd340de93cd82b9ff994d8d7e7adccdd6437cd952db112cda225f39e199d796f4f8e059f6408371f06e378ccd3690f1285ee06885601d8a9bee1dc5177c7f7300561edc62a13da0e8b53b515e5253c4b8b2e6e12e64ab61574ad0b82c3d1d1600df2330ac6911ead9a2b6e9ac9468ef9658c1a7a3b7b3ba3b3a641b1210da8a15f4efd4588e061cb303457322f8fc357733624ff22b42d4e85c38e6123d54066db82e47cc93a5fc834baf6d94cb6c56916497ca65c299c831663350e36385dd00b7c8ddec58357019d284cfe919ad2b7e97795d13b882531feb1e7a0f8a7ff7da00766e440c626044ac2d9b38362ab3faed063df8bd874a37411443a2cf5b2451192cda868817210fcc6c826de3f51db6031ba6f9863ef72cd230476e517c52dfa41f479e5cd3bdde51a0c89b7f797d07cc5e08ccbf6711a9f488735058d22e1f42b4bbcc22fffff00f5b066c0d78c3b98f52c8a459a4c4981eaf2b16249d60c944beccd3c8da69e4bf0bb6a47bf09c95d09544236ff6f297f7d632d05c19df6109d2b7f20697c244d4823ec6052a0c81fb50b0b79d451f8944c6b9e6b8fabce9a541496c6f54d750f7cff85573f83da047bef6a74678f94ea425d4a96a2d232005977ede5dc6fc55262fac5c0c2349aa747bb6212cebcaa1c7d85b3a63d858a9d11b5b6ab63651cb2be68af0685641fa26f364cf60e6b4f138383a0475706885940a0b9bb8875c8e35db8fcc9d958a32da52c6a938d7b1562aa71c3545c53289d616eed2ee5ebdc70a3dbfbfe7d385e9d456c4792e19ec6d59e2b1bb36e1777b931bb4224cdc18faa0e47ad0bf021f9f75198da2e92d68a0d522a843fe1b9897f96ee5962712a35de6ac2da5f2f174a3461e10a8e4f4b58c43f9ec4f7c12e49475298c85a6e1e661ce83a469614d423d41725818109132b161999aba45782b63a0d7b352f53e2dd4c495250c3a7cb36ed08670ad17d0ab2221b0fc36738af91cc4776b5fb931529b048ed1681159c37be1ad3a3592180137b94242bd3697393e9948d34428499fcde73afb5336994f8c0b210d87ad8b1fad0312f9c7456fc4f9286ec0f8755c6900a0a5cd0570cb02cc1d5e70ce3581b8c2c186bef2527b9542fbb83f1fdea8f183daf99035e27143ca03332aa654427ea9e6854c493edead855f439ad1dc8f5e989af41be8e6e9dc6481d11372a996135a0ee4864a2be35339cc509f16ba0b3c350d578f8c381bd29cb29f686cd51f3e768e2d1b7f2245d118c28dbc6d7ca2d2062c0c946cc9f919b1f27ef64cecb78adbea41d3fc3b8f6c84f1fc3f7b171081410c6805a8330932bbb5697c0cf6bad64c83efab4aa99a46f72d9d59388881b56b2dd85478260f1fc9b2099bda56abc84972375e2d82f0bbcd4d99a041cd545cd5b9f70847e84319348f4a00718947d2e394a021b34ef282f5ce558e7ddb84dc177dfc676cc0820f0bb81f1606706eab0e26744e373394eb08649c3dcd9432d6def26ee2cb169c2509bdb1d96c0aa84ab85c3633f40d3b1b15e55e9ee1dda50da98f7075b4a080d9d479c412fbb7918196d1d4f991584e6f706e8c6dcbf9062449369eb124dfb6162e8c93f9d8ee6b6166dc298dd5516ba4a8b3a07156ca92e749b34dec0252a72fa56e8706eb86680f2ce9dec8cb4e4074adcca7a0422905b22bbf651193ff5b2fe29e7f9f29a880b15763b5ab04c3cba12b299bffa41f9918bdf8b1959e3b1d3e8c153d453e2d3d0df8641a28d08a0ba395f33f8e42bb3c0d97cd16a1bf7bc42efc40a6b1b0d20006be6f54b24ec014a7b90c439cf5afb71c9779b9ac5c300161537b3e02a54e87a6fdc77932daf7b99ed483237fcf38c30ab09cf7dd6091f710cdb59fd1cfe696699020352c19624fdbbf5191f502b5aa7631f357896a8e5dc82737f3e54b6cfc5311bb8938bb246479024239bc87572191213b9fda6a5d5b1b8ccfde5ba34db2c8e6cff491039f74f811e6cbb3d880dfee3b606c5f70479435a8dbdd47c698483bcdceff972be1002d8ee90958e37ae401aa2005c6aeb52aa4f57edf1a4ad93d5fc10f46af3d765294fc323e955934e4b5beaff342e31f956754cb9207d4c45e10a6ea1331b7e40d35011ad2abc2e000443904f986f1caa4bc9614e98b7afa4618f7d8a013dc4fe74920f88021c9c05441122674fce558f2cf5c23894f93af8603a087250456f677f98ef0d5778b2603f2d4d61cf159e9168250dd1efdd57b010d7ce8fa2560514cc55e6755e09f24436c2288297c145c7b846a0a51027e49888d0ad2150bd75d1152967cc570c1d04813d00d23f6f83d336f3121583f2df6032fb7968ad60dfe486380280dacf0d52490bb54b2c0a79fc57db6c2c037bd80ca984a7193616dab62aa1b0679be246ca6f2cb3d44b437abbad4", 0x1000}, {&(0x7f00000008c0)="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", 0xfb}, {&(0x7f00000009c0)="0eecc52a21bfb7ae5476ffd89b25bc16df0f835c30061db6725984f37a19b16bf2dd8ef8c519e4568af1c40a03ec9e66ed43049663b2d1abfe47ad1028836c19f83c04811ba37875c38c03f6848ca19caee00438152c9a4d34de7b7affd633cf6957ff06f2df6d811e0c27aa65cc7cfc2535f1ddae00305a990ab49855184dea8bfff7f1cd3d6e2e0e83d4a74da9361de177f8f3a40e6d015074f0b7202223c0601be65bff2a80707ba66509886e9f418525e3c707e13d284f7320cf2ff8605819fd3af7383906a72bc8d468b3d24d54a34c0a92c23b4b1df63b99e603342ce511", 0xe1}, {&(0x7f0000000ac0)="79fe7c9bc5d5d43bb5ca6c7e6eff9a01d6f3613dda6d95279f7be58f214b370c76f501cea1aed35b001d0a05a77fae95733490c4d14a6e3c0c0b57de6f1f3d796060bdb4404967833cde99da789fce631c56d438084a9964cf81a3612725018561fcfd423f60b45872d39f7393b66170270d6eb6ba77c3afb15833f598b3f0783490ff1967cbfd799f9ae9b6bb146b4f047875cd42899a1b38e6ed0c293bb9b673f9", 0xa2}, {&(0x7f0000000b80)="629e035d9333422774d15e9c74006205240733ba004dbe3f9ea923e4d13c85ce154922f571ab60758dd066087002dd5bafb99d8952553fda2fef2d38b38706f9c833d1c84ef1587b476d67be7c3457c4ef09489db7e11a8bb6f1d3c6be93391be4b8fe73b0aabc51730c882b12d90f258076f9bbfed0709775b2392cd8cfd77751aabd2bd40b943568fd6d7295fcc64d13ebac1a65ece0", 0x97}, {&(0x7f00000004c0)="f70cba0fda04cf381f1814feac7f97982e7a132b6d282bb16c9253f7b8d5553255a2d107c5b9d36d90df5450ec1ae912697c5d89a03e3d4f7fcdfbb4ae6058", 0x3f}], 0x6, &(0x7f0000000e40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x86a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010101, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x2c, 0x2b, 0x0, 0xd, [0x1, 0x7, 0x2, 0x8, 0x4bed, 0x8, 0x40c2, 0x9, 0xd, 0x5]}, @timestamp={0x44, 0x20, 0x54, 0x0, 0xe, [0x6, 0x3ff, 0x2, 0x2, 0x1, 0x2, 0x0]}, @rr={0x7, 0x7, 0x8f, [@remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @rand_addr=0x64010100}}}], 0xf8}}, {{&(0x7f0000000f40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000000f80)="8776b2060ac5c8310120d8b1f8625f8632c626c7dd02d76df39b33ea737583d271cdc619868fa16bdc5e900a51d2e08a950b5394e0234bf334b28efd0c474ca59b69b5d5c7b9fbbf119ac68a40623a48caccf195c3c034d0d239fdd4bc59d8eb4e00a65637d111813378abbd816745cdb8a3f5210cc823ddec61e02a96ea4a6a8cc63b54f4cc87995f5f23f0c507f38208483eb164e3057e6f06261292aa5ab2e737cb0108b4fa13fee365c308094cd29d5abb9c554159eb33a3d07dd25f3e5f9d2ce3b4bc22e48e3bf6546e19533f49de70e3f1cd3b37352ba83e1b138af659ce", 0xe1}], 0x2, &(0x7f0000003140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x23, 0x1, 0xf, [{@multicast1, 0xce4}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @timestamp={0x44, 0x24, 0xa0, 0x0, 0x4, [0x0, 0x40, 0x1, 0x6, 0xd, 0x1, 0x1, 0xf6]}, @timestamp={0x44, 0x8, 0xe1, 0x0, 0xc, [0x7f]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x74, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0xd0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @rr={0x7, 0xf, 0x62, [@remote, @local, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x1a, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x23}, 0x1000}, {@multicast2, 0x3}]}, @generic={0x0, 0x4, "31fd"}, @timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x8, [{@multicast1, 0xc5}, {@multicast1, 0x7}, {@private=0xa010102, 0x100}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @rand_addr=0x64010101, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x168}}], 0x3, 0x48010) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0xb35, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xa0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 69.131354ms ago: executing program 0 (id=4588): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000040900020073797a310001000008000a40fffffffc0900010073797a31000000000800054000000009140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) 52.385339ms ago: executing program 4 (id=4589): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x47, 0x0, &(0x7f0000002100)) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x2000, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1406, 0x1}, 0x10}}, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'nr0\x00', 0x600}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r2}) 3.945121ms ago: executing program 2 (id=4590): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e24, @private=0xa010101}, 0x10) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000010841000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e200200000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f00000004c0)=""/133, 0x85}], 0x3, &(0x7f0000000600)=[@fadd={0x58, 0x114, 0x6, {{0xc9}, &(0x7f0000000580)=0xffffffffffffff39, &(0x7f00000005c0)=0x6, 0x7ff, 0x5, 0x6, 0x9, 0x2, 0x5d2}}], 0x58, 0x4000000}, 0x10) r7 = socket$nl_crypto(0x10, 0x3, 0x15) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r11, 0x1, 0x0, 0x0, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001000000000000000fdffffff0500f200000000000a0000000000000000000000000000000000000000000001000000000000000002000100000000000000000c0200006005000500000000000a004e220000000000000000000000000000000000000001000000000000000002001315f700000028bd70003e020000"], 0x80}, 0x1, 0x7}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@struct={0x6, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x4, 0x3}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f00000000c0)=""/2, 0x44, 0x2, 0x1}, 0x20) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYRES8=r8, @ANYBLOB="27363220e70a9137a02eb7e75f323f97d36ce8344cff6bb3e431c89e3dd24bfabe4cda2fbf763993b00222f427af826d75b88b2842fea42612830b39", @ANYBLOB="359d761a5c118b813b64efa1de1302d57ff470f11ce38c0fd2d7035fb0acceb67b1bbd7678c40b76bfd3a6b100f936d3bab2711bd074987c68b2e98c80114a0b7ff92a2ec91f158df01bac193ebdadc3cbb8650aaaacb3b188ede1cd753a689dee1777d3f443f29ac1566d724bfee3a9950f7ba47bbc94b969e1f2d89eae228b4a642fa3d2e12666b01963c9c6f929d5af1cc208d74e24bf56047c69936a7119b8ee36125e4ae2814f5461da0f41739e510b33fe3ea0beb593dbe4bef8c1fdfe7f3aae0253d8246a2332c78e8a688df4abfa157bab92a5bc3db202092d9db366757690", @ANYBLOB="2341ede63db88d1fd27976eef33b5cbc3d2402931a109374184b0179c13d635812faa2cafe413c039576e846fae6e55862e32188506d03f8ef588aa0a7127dc9e5123a88133d5e67bc6f5f78378137b0d04eb111ab26be293501f4d7bf57ad9dda3d7f948047a802936a8b68553bf5245bf2c318207a28e872324465643542671831b65ec1c79634ad46b92f0223dd3dd147d08387e58b2f863c60c634a6bcab4399864c3ddbdc3c981714e383d7c216e9dc01", @ANYRESHEX=r6, @ANYRES64=r4], 0xf0}, 0x1, 0x0, 0x0, 0x40040040}, 0x44815) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d300000360087006c325f64726f70730000000005008e0001000000"], 0x4c}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 0s ago: executing program 1 (id=4591): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @bcast, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b4010020001280080001007674690014000280000000000000010008000600030c0000"], 0x40}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = accept4$netrom(r0, 0x0, &(0x7f00000000c0), 0x80000) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140)=0x23c00000, &(0x7f0000000180)=0x4) (async) r5 = socket(0x3, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x1, 0xd19c, 0x1, 0xb29d, 0x3, 0x9, 0xfffffbff, 0x5}}) kernel console output (not intermixed with test programs): 'syz.0.2871': attribute type 12 has an invalid length. [ 325.514416][T16047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'. [ 325.538464][T16047] netlink: 'syz.0.2871': attribute type 12 has an invalid length. [ 325.567832][T16047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'. [ 325.601920][T16047] netlink: 'syz.0.2871': attribute type 12 has an invalid length. [ 325.671235][T16047] netlink: 'syz.0.2871': attribute type 12 has an invalid length. [ 325.794027][T16047] netlink: 'syz.0.2871': attribute type 12 has an invalid length. [ 326.044200][T16083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.528423][T16108] IPVS: length: 254 != 8 [ 326.674735][ T79] bridge_slave_1: left allmulticast mode [ 326.698189][ T79] bridge_slave_1: left promiscuous mode [ 326.735014][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.760359][ T79] bridge_slave_0: left allmulticast mode [ 326.775226][ T79] bridge_slave_0: left promiscuous mode [ 326.784536][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.293272][ T52] Bluetooth: hci5: command tx timeout [ 327.359200][ T79] bond4 (unregistering): (slave gretap1): Releasing active interface [ 327.939298][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.952609][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.962935][ T79] bond0 (unregistering): Released all slaves [ 328.059880][ T79] bond1 (unregistering): Released all slaves [ 328.155649][ T79] bond2 (unregistering): Released all slaves [ 328.168652][ T79] bond3 (unregistering): Released all slaves [ 328.181415][ T79] bond4 (unregistering): Released all slaves [ 328.280091][ T79] bond5 (unregistering): Released all slaves [ 328.317838][T16146] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 328.371394][T16057] chnl_net:caif_netlink_parms(): no params data found [ 328.466547][ T79] 9: left promiscuous mode [ 328.588965][ T79] tipc: Left network mode [ 328.936548][T16057] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.946944][T16057] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.954802][T16057] bridge_slave_0: entered allmulticast mode [ 328.977060][T16057] bridge_slave_0: entered promiscuous mode [ 328.987486][T16057] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.999366][T16057] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.007845][T16057] bridge_slave_1: entered allmulticast mode [ 329.018388][T16057] bridge_slave_1: entered promiscuous mode [ 329.324435][T16057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.362391][ T52] Bluetooth: hci5: command tx timeout [ 329.434663][T16221] __nla_validate_parse: 14 callbacks suppressed [ 329.434686][T16221] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2911'. [ 329.438223][T16057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.441361][T16221] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2911'. [ 329.471100][T16221] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2911'. [ 329.560413][T16057] team0: Port device team_slave_0 added [ 329.609269][T16057] team0: Port device team_slave_1 added [ 329.621518][T16229] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2914'. [ 329.691667][T16057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.700451][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.727496][T16057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.753191][T16057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.780180][T16235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2916'. [ 329.780549][T16057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.854418][T16057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.919468][T16238] 8021q: VLANs not supported on ip6tnl0 [ 330.090608][T16057] hsr_slave_0: entered promiscuous mode [ 330.098813][T16057] hsr_slave_1: entered promiscuous mode [ 330.102952][T16252] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2923'. [ 330.105994][T16057] debugfs: 'hsr0' already exists in 'hsr' [ 330.119974][T16057] Cannot create hsr debugfs directory [ 330.208331][T16256] nbd: must specify at least one socket [ 330.217891][T16256] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 330.236508][T16259] validate_nla: 3 callbacks suppressed [ 330.236528][T16259] netlink: 'syz.0.2925': attribute type 22 has an invalid length. [ 330.406556][T16265] team0: Caught tx_queue_len zero misconfig [ 330.445948][T16259] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2925'. [ 331.041118][ T79] hsr_slave_0: left promiscuous mode [ 331.062646][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.090541][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.127021][T16297] netlink: 'syz.0.2935': attribute type 21 has an invalid length. [ 331.150167][T16301] openvswitch: netlink: Flow actions attr not present in new flow. [ 331.448649][ T52] Bluetooth: hci5: command tx timeout [ 331.642971][ T79] team0 (unregistering): Port device team_slave_0 removed [ 331.718648][ T6106] smc: removing ib device sy [ 331.888799][ T79] team0 (unregistering): Port device dummy0 removed [ 332.024536][T16297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2935'. [ 332.034450][T16305] netlink: 'syz.4.2938': attribute type 29 has an invalid length. [ 332.164585][T16310] netlink: 'syz.4.2938': attribute type 29 has an invalid length. [ 332.433283][T16330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2942'. [ 332.479605][T16335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2944'. [ 332.533431][T16335] openvswitch: netlink: Flow actions attr not present in new flow. [ 332.541740][T16335] openvswitch: netlink: Flow actions attr not present in new flow. [ 332.577107][T16342] : entered promiscuous mode [ 332.900666][T16359] netlink: 'syz.3.2949': attribute type 9 has an invalid length. [ 332.920369][T16359] netlink: 'syz.3.2949': attribute type 11 has an invalid length. [ 332.946633][T16359] netlink: 'syz.3.2949': attribute type 12 has an invalid length. [ 333.523365][ T52] Bluetooth: hci5: command tx timeout [ 333.854065][T16389] xt_TCPMSS: Only works on TCP SYN packets [ 334.598957][ T79] IPVS: stop unused estimator thread 0... [ 334.607987][T16057] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.779582][T16434] openvswitch: netlink: Unknown key attributes 2 [ 334.796575][T16434] openvswitch: netlink: Unknown key attributes 2 [ 334.896255][T16057] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 334.931400][T16057] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 334.957163][T16057] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 335.051397][T16453] sctp: [Deprecated]: syz.1.2970 (pid 16453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.051397][T16453] Use struct sctp_sack_info instead [ 335.169521][T16461] __nla_validate_parse: 6 callbacks suppressed [ 335.169543][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 335.280197][T16057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.364401][T16057] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.424603][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.431814][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.491305][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.498565][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.607846][T16477] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 335.617432][T16477] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 335.967703][T16498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 336.018622][T16498] vlan4: entered allmulticast mode [ 336.029670][T16498] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 336.056144][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2985'. [ 336.064897][T16057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.208466][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2986'. [ 336.221600][T16057] veth0_vlan: entered promiscuous mode [ 336.260050][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'. [ 336.271675][T16057] veth1_vlan: entered promiscuous mode [ 336.306778][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2986'. [ 336.330002][T16509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2986'. [ 336.339862][T16511] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2988'. [ 336.350633][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2986'. [ 336.351268][T16057] veth0_macvtap: entered promiscuous mode [ 336.363878][T16511] netlink: 'syz.1.2988': attribute type 2 has an invalid length. [ 336.375200][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 336.419961][T16511] : entered promiscuous mode [ 336.429997][T16057] veth1_macvtap: entered promiscuous mode [ 336.505735][T16057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.534705][T16057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.593446][ T6911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.609931][ T6911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.638994][ T6911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.657368][ T6911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.930551][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.955792][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.979308][T16541] netlink: 'syz.3.2997': attribute type 7 has an invalid length. [ 337.012699][ T6106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.025990][ T6106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.566604][T16571] "syz.1.3005" (16571) uses obsolete ecb(arc4) skcipher [ 337.661459][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.690449][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.699463][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.721428][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.738190][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.292362][T16569] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 338.324279][T16589] tipc: Enabled bearer , priority 0 [ 338.374704][T16589] syzkaller0: entered promiscuous mode [ 338.380217][T16589] syzkaller0: entered allmulticast mode [ 338.556852][T16592] tipc: Resetting bearer [ 338.703393][T16604] netlink: 'syz.1.3013': attribute type 1 has an invalid length. [ 338.735506][T16587] tipc: Resetting bearer [ 338.764695][T16587] tipc: Disabling bearer [ 339.089650][T16572] chnl_net:caif_netlink_parms(): no params data found [ 339.274936][ T1156] team0: left allmulticast mode [ 339.279860][ T1156] hsr0: left allmulticast mode [ 339.293390][ T1156] hsr_slave_0: left allmulticast mode [ 339.307392][ T1156] bridge0: port 1(team0) entered disabled state [ 339.344246][ T1156] tipc: Resetting bearer [ 339.589083][ T1156] tipc: Disabling bearer [ 339.613736][T16654] netlink: 'syz.0.3024': attribute type 1 has an invalid length. [ 339.621870][T16654] NCSI netlink: No device for ifindex 0 [ 339.674993][ T1156] dvmrp0 (unregistering): left allmulticast mode [ 339.710972][ T1156] bond3 (unregistering): (slave geneve3): Releasing active interface [ 339.842552][ T5846] Bluetooth: hci3: command tx timeout [ 339.897534][ T1156] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 340.117292][ T1156] ` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 340.127210][ T1156] ` (unregistering): Released all slaves [ 340.229065][ T1156] bond1 (unregistering): Released all slaves [ 340.242429][ T1156] bond2 (unregistering): Released all slaves [ 340.344574][ T1156] bond3 (unregistering): Released all slaves [ 340.358124][ T1156] bond4 (unregistering): Released all slaves [ 340.456196][ T1156] bond5 (unregistering): Released all slaves [ 340.545240][T16649] ipvlan3: entered promiscuous mode [ 340.600789][T16653] bond0: entered promiscuous mode [ 340.631663][T16653] bond_slave_0: entered promiscuous mode [ 340.639173][T16653] bond_slave_1: entered promiscuous mode [ 340.657946][T16653] .: entered promiscuous mode [ 340.684550][T16653] batadv0: entered promiscuous mode [ 340.702840][T16653] debugfs: 'hsr1' already exists in 'hsr' [ 340.708782][T16653] Cannot create hsr debugfs directory [ 340.716199][T16653] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 340.746447][T16671] __nla_validate_parse: 39 callbacks suppressed [ 340.746469][T16671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3026'. [ 340.783358][ T1156] : left promiscuous mode [ 340.947173][T16677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3026'. [ 340.975949][T16671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.152644][T16680] tipc: Resetting bearer [ 341.248109][T16680] tipc: Disabling bearer [ 341.420591][ T1156] : left promiscuous mode [ 341.504605][T16677] veth0: entered promiscuous mode [ 341.515202][T16677] veth0: entered allmulticast mode [ 341.568145][ T1156] tipc: Disabling bearer [ 341.578222][ T1156] tipc: Disabling bearer [ 341.610047][ T1156] tipc: Left network mode [ 341.610220][T16572] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.638011][T16572] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.638465][ T1156] IPVS: stopping master sync thread 6312 ... [ 341.653440][T16572] bridge_slave_0: entered allmulticast mode [ 341.671039][T16572] bridge_slave_0: entered promiscuous mode [ 341.680070][T16701] netlink: 'syz.3.3034': attribute type 1 has an invalid length. [ 341.690690][T16572] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.691724][T16701] netlink: 'syz.3.3034': attribute type 2 has an invalid length. [ 341.706767][T16572] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.707871][T16701] netlink: 'syz.3.3034': attribute type 1 has an invalid length. [ 341.723142][T16572] bridge_slave_1: entered allmulticast mode [ 341.745122][T16572] bridge_slave_1: entered promiscuous mode [ 341.811155][T16671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.922801][ T5846] Bluetooth: hci3: command tx timeout [ 341.955320][T16671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.129925][T16713] xt_bpf: check failed: parse error [ 342.143668][T16671] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.194496][T16572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.217907][T16572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.350675][T16724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3039'. [ 342.384569][T16723] syzkaller1: entered promiscuous mode [ 342.390082][T16723] syzkaller1: entered allmulticast mode [ 342.409799][T16572] team0: Port device team_slave_0 added [ 342.476519][T16727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3041'. [ 342.478038][T16572] team0: Port device team_slave_1 added [ 342.501422][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.630366][T16572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.638166][T16572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.665281][T16572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.676877][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.677962][T16735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3042'. [ 342.695105][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 342.728562][T16572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.742050][T16572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.768508][T16572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.811527][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.822614][T16735] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.829860][T16735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.898017][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.028343][T16741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3046'. [ 343.050565][ T1156] hsr_slave_0: left promiscuous mode [ 343.055691][T16744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3045'. [ 343.056190][ T1101] batman_adv: batadv2: MLD Querier disappeared - multicast optimizations disabled [ 343.064974][T16744] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3045'. [ 343.065045][T16744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3045'. [ 343.123639][T16746] delete_channel: no stack [ 343.165965][ T1156] pim6reg527 (unregistering): left allmulticast mode [ 343.220480][T16755] netlink: 'syz.3.3049': attribute type 13 has an invalid length. [ 343.480147][ T1156] vlan1 (unregistering): left allmulticast mode [ 343.487980][ T1156] veth0_vlan (unregistering): left allmulticast mode [ 343.577622][ T1156] hsr0 (unregistering): left promiscuous mode [ 343.587698][ T1156] team0 (unregistering): Port device hsr0 removed [ 344.005757][ T5846] Bluetooth: hci3: command tx timeout [ 344.101743][T16741] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 344.109543][T16755] gretap0: refused to change device tx_queue_len [ 344.125077][T16755] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 344.227852][T16572] hsr_slave_0: entered promiscuous mode [ 344.249825][T16572] hsr_slave_1: entered promiscuous mode [ 344.258900][T16572] debugfs: 'hsr0' already exists in 'hsr' [ 344.266347][T16572] Cannot create hsr debugfs directory [ 344.320060][T16777] netlink: 'syz.0.3052': attribute type 12 has an invalid length. [ 344.391449][T16777] bond7: option primary_reselect: invalid value (255) [ 344.408956][T16777] bond7 (unregistering): Released all slaves [ 345.199778][T16830] block nbd0: not configured, cannot reconfigure [ 345.216106][T16830] syzkaller1: entered promiscuous mode [ 345.221640][T16830] syzkaller1: entered allmulticast mode [ 345.257383][T16830] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 345.482061][T16842] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 345.500001][T16572] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.575710][T16572] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.624249][T16857] netlink: 'syz.0.3071': attribute type 5 has an invalid length. [ 345.632491][T16572] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.702897][T16572] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.737538][T16859] netlink: 'syz.3.3072': attribute type 2 has an invalid length. [ 345.809464][T16874] __nla_validate_parse: 7 callbacks suppressed [ 345.809486][T16874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3076'. [ 345.826417][T16874] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3076'. [ 345.839766][T16874] netlink: 'syz.3.3076': attribute type 5 has an invalid length. [ 345.846064][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 346.034491][T16572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.085018][T16572] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.091719][ T1156] IPVS: stop unused estimator thread 0... [ 346.094115][ T5846] Bluetooth: hci3: command tx timeout [ 346.135219][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.142466][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.192106][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.199313][ T6911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.395995][T16896] sit0: entered promiscuous mode [ 346.434691][T16896] netlink: 'syz.0.3081': attribute type 1 has an invalid length. [ 346.463218][T16896] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3081'. [ 346.497774][T16901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3083'. [ 346.658976][T16913] xt_l2tp: v2 doesn't support IP mode [ 346.693711][T16913] syzkaller0: entered promiscuous mode [ 346.699243][T16913] syzkaller0: entered allmulticast mode [ 346.751243][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3088'. [ 346.772968][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3088'. [ 346.782876][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3088'. [ 346.796173][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3089'. [ 346.806864][T16924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.918684][T16922] syzkaller1: entered promiscuous mode [ 346.924572][T16922] syzkaller1: entered allmulticast mode [ 346.969848][T16572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.029888][T16934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3090'. [ 347.087890][T16939] xfrm1: entered promiscuous mode [ 347.100856][T16939] xfrm1: entered allmulticast mode [ 347.294290][T16945] netlink: 'syz.2.3094': attribute type 1 has an invalid length. [ 347.297674][T16949] delete_channel: no stack [ 347.307518][T16948] netlink: 'syz.0.3093': attribute type 4 has an invalid length. [ 347.327901][T16945] bond0: entered promiscuous mode [ 347.337726][T16945] bond_slave_0: entered promiscuous mode [ 347.349929][T16945] bond_slave_1: entered promiscuous mode [ 347.360704][T16945] bond0: left promiscuous mode [ 347.366388][T16945] bond_slave_0: left promiscuous mode [ 347.375848][T16945] bond_slave_1: left promiscuous mode [ 347.663412][T16958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.752519][T16958] tap0: tun_chr_ioctl cmd 1074025678 [ 347.757885][T16958] tap0: group set to 0 [ 347.817589][T16572] veth0_vlan: entered promiscuous mode [ 347.889984][T16572] veth1_vlan: entered promiscuous mode [ 347.964505][T16572] veth0_macvtap: entered promiscuous mode [ 348.015963][T16572] veth1_macvtap: entered promiscuous mode [ 348.063294][T16984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.067397][T16572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.139558][T16572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.170957][ T1156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.198663][ T1156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.218294][ T1156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.257629][ T1156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.363334][T16994] can: request_module (can-proto-5) failed. [ 348.457996][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.477916][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.648358][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.669190][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.850308][T17033] netlink: 'syz.1.3117': attribute type 1 has an invalid length. [ 349.089958][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 349.115676][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 349.127014][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 349.135549][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 349.143453][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 349.160913][T17044] bond6: (slave bridge9): making interface the new active one [ 349.171848][T17044] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 349.242899][T17043] bond6: (slave bridge10): Enslaving as an active interface with a down link [ 349.342464][T17054] netlink: 'syz.2.3121': attribute type 2 has an invalid length. [ 349.410767][T17051] syzkaller0: entered promiscuous mode [ 349.411100][T17059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.419903][T17051] syzkaller0: entered allmulticast mode [ 349.510549][T17060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.919941][T17069] syzkaller0: entered promiscuous mode [ 349.925838][T17069] syzkaller0: entered allmulticast mode [ 350.354869][T17093] tipc: Can't bind to reserved service type 0 [ 350.449652][T17048] chnl_net:caif_netlink_parms(): no params data found [ 350.783961][T17048] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.791251][T17048] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.798850][T17048] bridge_slave_0: entered allmulticast mode [ 350.807361][T17048] bridge_slave_0: entered promiscuous mode [ 351.205770][ T52] Bluetooth: hci1: command tx timeout [ 352.224707][T17048] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.232328][T17048] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.240892][T17048] bridge_slave_1: entered allmulticast mode [ 352.254509][T17048] bridge_slave_1: entered promiscuous mode [ 352.375284][T17123] __nla_validate_parse: 10 callbacks suppressed [ 352.375306][T17123] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3138'. [ 352.488228][T17048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.501375][T17048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.591359][T17048] team0: Port device team_slave_0 added [ 352.599396][T17126] syzkaller0: entered promiscuous mode [ 352.614891][T17126] syzkaller0: entered allmulticast mode [ 352.644010][T17048] team0: Port device team_slave_1 added [ 352.932873][T17151] netlink: 'syz.4.3146': attribute type 13 has an invalid length. [ 352.944887][T17154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3148'. [ 352.965051][T17154] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3148'. [ 352.976749][T17048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.984055][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.024562][T17048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.077530][T17048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.084804][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.111849][T17048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.225878][T17048] hsr_slave_0: entered promiscuous mode [ 353.243330][T17048] hsr_slave_1: entered promiscuous mode [ 353.253122][T17048] debugfs: 'hsr0' already exists in 'hsr' [ 353.258865][T17048] Cannot create hsr debugfs directory [ 353.283005][ T52] Bluetooth: hci1: command tx timeout [ 353.375144][T17162] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3152'. [ 353.446162][T17162] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3152'. [ 353.490730][T17171] netlink: 'syz.4.3154': attribute type 1 has an invalid length. [ 353.783642][T17182] netlink: 'syz.4.3158': attribute type 1 has an invalid length. [ 353.820044][T17186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.835494][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.209261][T17211] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3164'. [ 354.300029][T17213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3165'. [ 354.449231][T17048] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 354.547374][T17048] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 354.561306][T17232] xt_hashlimit: size too large, truncated to 1048576 [ 354.578710][T17048] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 354.598235][T17048] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 354.778367][T17249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.852410][ T9] hid (null): report_id 0 is invalid [ 354.873865][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 355.034766][T17048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.134121][T17048] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.177802][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.185041][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.246387][T17268] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 355.257014][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.264258][ T6911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.304185][T17273] syzkaller1: entered promiscuous mode [ 355.323135][T17273] syzkaller1: entered allmulticast mode [ 355.363109][ T52] Bluetooth: hci1: command tx timeout [ 355.414067][T17279] bond0: Device is already in use. [ 355.584584][T17287] dvmrp6: entered allmulticast mode [ 355.664188][T17296] netlink: 'syz.2.3185': attribute type 6 has an invalid length. [ 355.810817][T17300] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3185'. [ 356.318850][T17048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.423049][ T9] hid_parser_main: 377 callbacks suppressed [ 356.423075][ T9] hid-generic 0005:07C0:0401.0002: unknown main item tag 0x0 [ 356.477213][ T9] hid-generic 0005:07C0:0401.0002: unknown main item tag 0x0 [ 356.495905][T17048] veth0_vlan: entered promiscuous mode [ 356.505942][ T9] hid-generic 0005:07C0:0401.0002: unknown main item tag 0x0 [ 356.535572][ T9] hid-generic 0005:07C0:0401.0002: unknown main item tag 0x0 [ 356.545035][T17048] veth1_vlan: entered promiscuous mode [ 356.567218][ T9] hid-generic 0005:07C0:0401.0002: unknown main item tag 0x0 [ 356.596651][ T9] hid-generic 0005:07C0:0401.0002: unknown main item tag 0x0 [ 356.621636][ T9] hid-generic 0005:07C0:0401.0002: unknown main item tag 0x0 [ 356.635012][T17048] veth0_macvtap: entered promiscuous mode [ 356.647350][ T9] hid-generic 0005:07C0:0401.0002: unknown main item tag 0x0 [ 356.659457][ T9] hid-generic 0005:07C0:0401.0002: unknown main item tag 0x0 [ 356.675780][T17048] veth1_macvtap: entered promiscuous mode [ 356.688285][T17341] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3194'. [ 356.697384][ T9] hid-generic 0005:07C0:0401.0002: unknown main item tag 0x0 [ 356.699511][ T9] hid-generic 0005:07C0:0401.0002: collection stack underflow [ 356.748129][T17048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.762719][ T9] hid-generic 0005:07C0:0401.0002: item 0 0 0 12 parsing failed [ 356.782687][ T9] hid-generic 0005:07C0:0401.0002: probe with driver hid-generic failed with error -22 [ 356.800137][T17048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.851956][ T6106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.883140][ T6106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.920844][ T6106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.013043][ T6106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.454338][ T52] Bluetooth: hci1: command tx timeout [ 357.466592][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3205'. [ 357.476021][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.484626][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.492743][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3205'. [ 357.548555][T17381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3203'. [ 357.558168][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.568000][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.706491][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 357.731393][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3119'. [ 357.763984][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.764122][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 357.790428][T17401] x_tables: duplicate underflow at hook 2 [ 357.797573][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.808036][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.819220][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3119'. [ 357.829301][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.844518][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3119'. [ 357.859545][T17403] netlink: 'syz.4.3208': attribute type 21 has an invalid length. [ 357.871018][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3208'. [ 357.891478][ T60] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.894600][T17403] netlink: 'syz.4.3208': attribute type 21 has an invalid length. [ 357.906373][ T60] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.917143][T17403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3208'. [ 357.942813][ T60] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.957498][ T60] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.795429][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.809916][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.819567][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.830372][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.838675][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.177333][T17473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.186525][T17470] bridge: RTM_NEWNEIGH with invalid ether address [ 359.204151][T17464] netlink: 'syz.3.3225': attribute type 1 has an invalid length. [ 359.533894][ T5846] Bluetooth: hci1: command tx timeout [ 359.704085][T17477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.708712][T17499] netlink: 'syz.3.3234': attribute type 14 has an invalid length. [ 359.726355][T17477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.737329][T17477] bond0 (unregistering): Released all slaves [ 360.257476][T17449] chnl_net:caif_netlink_parms(): no params data found [ 360.445601][T17449] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.462799][T17449] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.470428][T17449] bridge_slave_0: entered allmulticast mode [ 360.487952][T17449] bridge_slave_0: entered promiscuous mode [ 360.543373][T17449] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.551279][T17449] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.561885][T17449] bridge_slave_1: entered allmulticast mode [ 360.574489][T17449] bridge_slave_1: entered promiscuous mode [ 360.638203][T17449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.657143][T17449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.711077][T17449] team0: Port device team_slave_0 added [ 360.720759][T17449] team0: Port device team_slave_1 added [ 360.758116][T17449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.765727][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.794321][T17449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.824809][T17449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.835272][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.867334][T17449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.891619][ T5846] Bluetooth: hci4: command tx timeout [ 360.933951][T17548] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 361.002694][T17551] netlink: 'syz.1.3250': attribute type 11 has an invalid length. [ 361.046939][T17449] hsr_slave_0: entered promiscuous mode [ 361.054662][T17449] hsr_slave_1: entered promiscuous mode [ 361.061259][T17449] debugfs: 'hsr0' already exists in 'hsr' [ 361.067228][T17449] Cannot create hsr debugfs directory [ 361.153050][T17555] netlink: 'syz.2.3252': attribute type 5 has an invalid length. [ 361.311091][T17563] netlink: 'syz.2.3255': attribute type 10 has an invalid length. [ 361.367802][T17449] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.410832][T17449] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 361.423437][T17449] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 361.486051][T17449] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.498238][T17449] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 361.508519][T17449] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 361.613492][T17449] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.626998][T17449] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 361.647232][T17449] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 361.736267][T17449] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.753133][T17449] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 361.765197][T17449] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 362.047382][T17449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.084181][T17449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.125463][T17449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.126209][T17590] netlink: 'syz.4.3263': attribute type 1 has an invalid length. [ 362.150712][T17449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.423693][T17449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.481468][T17449] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.533661][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.540834][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.584230][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.591398][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.644025][T17613] __nla_validate_parse: 16 callbacks suppressed [ 362.644049][T17613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3267'. [ 362.839732][T17616] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3268'. [ 362.965509][ T5846] Bluetooth: hci4: command tx timeout [ 362.972617][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3269'. [ 363.002431][T17621] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 363.272586][T17449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.333409][T17639] netlink: 'syz.2.3273': attribute type 33 has an invalid length. [ 363.407085][T17449] veth0_vlan: entered promiscuous mode [ 363.430285][T17449] veth1_vlan: entered promiscuous mode [ 363.432457][T17639] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3273'. [ 363.441395][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3275'. [ 363.483377][T17645] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3275'. [ 363.508114][T17647] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3276'. [ 363.552370][T17645] erspan0: entered promiscuous mode [ 363.608845][T17449] veth0_macvtap: entered promiscuous mode [ 363.648850][T17449] veth1_macvtap: entered promiscuous mode [ 363.734999][T17656] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3277'. [ 363.797534][T17656] netlink: 'syz.2.3277': attribute type 3 has an invalid length. [ 363.838736][T17449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.884118][T17449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.916745][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.951026][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.993383][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.057559][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.090472][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3283'. [ 364.226466][ T6911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.249850][ T6911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.301354][T17678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3285'. [ 364.330756][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.350679][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.898966][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.908436][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.918285][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.927302][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.936986][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.048706][ T5846] Bluetooth: hci4: command tx timeout [ 365.095418][T17708] openvswitch: netlink: Missing valid actions attribute. [ 365.102765][T17708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.517523][T17710] ip6t_srh: unknown srh match flags 5F28 [ 366.633851][T17719] netlink: 'syz.3.3301': attribute type 33 has an invalid length. [ 366.695875][ T6907] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.724207][ T6907] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.756882][T17721] sit0: entered promiscuous mode [ 366.767859][T17721] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 366.806807][ T6907] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.829706][ T6907] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.946343][ T6907] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.965927][ T5846] Bluetooth: hci0: command tx timeout [ 367.000858][ T6907] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.116305][ T6907] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.126291][ T5846] Bluetooth: hci4: command tx timeout [ 367.171077][ T6907] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.444897][T17758] gre1: entered promiscuous mode [ 367.449913][T17758] gre1: entered allmulticast mode [ 367.529056][T17758] gre1: entered promiscuous mode [ 367.534793][T17758] gre1: entered allmulticast mode [ 367.608792][T17767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.669522][T17767] __nla_validate_parse: 2 callbacks suppressed [ 367.669543][T17767] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3314'. [ 367.708599][ T6907] batadv2: left allmulticast mode [ 367.720146][ T6907] batadv2: left promiscuous mode [ 367.726259][ T6907] bridge0: port 2(batadv2) entered disabled state [ 367.736305][ T6907] bridge_slave_0: left allmulticast mode [ 367.745979][ T6907] bridge_slave_0: left promiscuous mode [ 367.751898][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.799293][ T6907] veth17: left allmulticast mode [ 367.806144][ T6907] veth17: left promiscuous mode [ 367.811236][ T6907] bridge8: port 1(veth17) entered disabled state [ 368.044998][ T6907] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 368.067193][ T6907] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface [ 368.077055][ T6907] ip6gretap2 (unregistering): left allmulticast mode [ 368.230974][ T6907] dvmrp0 (unregistering): left allmulticast mode [ 368.802121][ T6907] bond6 (unregistering): (slave bridge9): Releasing active interface [ 368.810246][ T6907] bond6 (unregistering): (slave bridge9): the permanent HWaddr of slave - 6a:1b:18:4d:cd:d5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 368.861877][ T6907] bond6 (unregistering): (slave bridge10): Releasing active interface [ 368.913195][ T6907] bond0 (unregistering): left promiscuous mode [ 368.919372][ T6907] bond_slave_0: left promiscuous mode [ 368.925078][ T6907] bond_slave_1: left promiscuous mode [ 368.931349][ T6907] .: left promiscuous mode [ 368.937671][ T6907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.950328][ T6907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.961187][ T6907] bond0 (unregistering): (slave .): Releasing backup interface [ 368.971082][ T6907] bond0 (unregistering): Released all slaves [ 368.984695][ T6907] bond1 (unregistering): Released all slaves [ 368.998310][ T6907] bond2 (unregistering): Released all slaves [ 369.010708][ T6907] bond3 (unregistering): Released all slaves [ 369.052311][ T5846] Bluetooth: hci0: command tx timeout [ 369.121306][ T6907] bond4 (unregistering): Released all slaves [ 369.228138][ T6907] bond5 (unregistering): Released all slaves [ 369.242692][ T6907] bond6 (unregistering): Released all slaves [ 369.255338][ T6907] bond7 (unregistering): Released all slaves [ 369.482325][ T6907] : left promiscuous mode [ 369.534317][ T6907] : left promiscuous mode [ 369.575083][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'. [ 369.599131][T17702] chnl_net:caif_netlink_parms(): no params data found [ 369.655323][ T6907] tipc: Left network mode [ 369.697379][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3322'. [ 369.738770][T17801] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 369.757326][T17801] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3322'. [ 369.938260][T17809] netlink: 'syz.3.3326': attribute type 1 has an invalid length. [ 369.948895][T17815] netlink: 'syz.0.3327': attribute type 3 has an invalid length. [ 369.971256][T17813] netlink: 'syz.4.3325': attribute type 7 has an invalid length. [ 369.991816][T17813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 370.055931][T17816] lo: entered allmulticast mode [ 370.136461][T17829] netlink: 'syz.3.3326': attribute type 2 has an invalid length. [ 370.178125][T17821] bond1: (slave gretap1): making interface the new active one [ 370.201877][T17821] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 370.237901][T17816] lo: left allmulticast mode [ 370.259214][T17834] netlink: 'syz.0.3329': attribute type 15 has an invalid length. [ 370.310780][T17834] geneve2: entered promiscuous mode [ 370.432328][T17842] netlink: 'syz.0.3332': attribute type 32 has an invalid length. [ 370.515501][T17702] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.558729][T17702] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.582289][T17702] bridge_slave_0: entered allmulticast mode [ 370.603918][T17702] bridge_slave_0: entered promiscuous mode [ 370.633695][T17702] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.640957][T17702] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.660356][T17702] bridge_slave_1: entered allmulticast mode [ 370.745833][T17702] bridge_slave_1: entered promiscuous mode [ 370.828298][T17866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.857154][T17866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.871843][T17866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.913993][T17866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.945502][T17866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.963613][T17866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.977734][T17866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.988080][T17853] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3335'. [ 371.005797][T17866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.005974][ T6907] batadv0: left promiscuous mode [ 371.020956][T17866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.046905][ T6907] hsr_slave_0: left promiscuous mode [ 371.047196][T17866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.085196][ T6907] hsr_slave_1: left promiscuous mode [ 371.098268][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.113246][ T6907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.124358][ T5846] Bluetooth: hci0: command tx timeout [ 371.159089][ T6907] veth1_macvtap: left promiscuous mode [ 371.174388][ T6907] veth0_macvtap: left promiscuous mode [ 371.184964][ T6907] veth1_vlan: left promiscuous mode [ 371.190389][ T6907] veth0_vlan: left promiscuous mode [ 371.717006][ T42] smc: removing ib device syz1 [ 371.916316][T17702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.079728][T17702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.146432][T17880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3340'. [ 372.244507][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3340'. [ 372.262319][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3340'. [ 372.299550][T17890] netlink: 'syz.4.3345': attribute type 21 has an invalid length. [ 372.421500][T17890] netlink: 'syz.4.3345': attribute type 6 has an invalid length. [ 372.429675][T17890] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3345'. [ 372.461417][T17702] team0: Port device team_slave_0 added [ 372.502241][T17702] team0: Port device team_slave_1 added [ 372.782438][T17702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.789446][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.868358][T17702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.922655][T17915] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3351'. [ 372.925885][T17702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.957867][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.006458][T17702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.182315][T17925] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3355'. [ 373.207349][ T5846] Bluetooth: hci0: command tx timeout [ 373.333227][T17922] Bluetooth: MGMT ver 1.23 [ 373.874192][T17702] hsr_slave_0: entered promiscuous mode [ 373.902760][T17702] hsr_slave_1: entered promiscuous mode [ 373.912774][T17702] debugfs: 'hsr0' already exists in 'hsr' [ 373.926905][T17702] Cannot create hsr debugfs directory [ 373.937536][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3357'. [ 374.984696][T17952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3360'. [ 374.994019][T17952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3360'. [ 375.098783][T17955] x_tables: duplicate underflow at hook 1 [ 375.317891][ T6907] IPVS: stop unused estimator thread 0... [ 375.486316][T17968] bridge_slave_0: left allmulticast mode [ 375.497988][T17968] bridge_slave_0: left promiscuous mode [ 375.510103][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.545848][T17968] bridge_slave_1: left allmulticast mode [ 375.551761][T17968] bridge_slave_1: left promiscuous mode [ 375.558684][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.569418][T17968] bond0: (slave bond_slave_0): Releasing backup interface [ 375.581453][T17968] bond0: (slave bond_slave_1): Releasing backup interface [ 375.598782][T17968] team0: Port device team_slave_0 removed [ 375.628807][T17968] team0: Port device team_slave_1 removed [ 375.637087][T17968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.645295][T17968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.670308][T17968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.691429][T17968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.734251][T17981] tipc: Started in network mode [ 375.739188][T17981] tipc: Node identity aa5d0c47fb6, cluster identity 4711 [ 375.750739][T17981] tipc: Enabled bearer , priority 0 [ 375.777332][T17980] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 375.868370][T17985] syzkaller0: entered promiscuous mode [ 375.874131][T17985] syzkaller0: entered allmulticast mode [ 375.914708][T17980] tipc: Resetting bearer [ 375.980911][T17969] tipc: Resetting bearer [ 376.014899][T17969] tipc: Disabling bearer [ 376.112383][T18003] net_ratelimit: 26 callbacks suppressed [ 376.112406][T18003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.384375][T18023] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3378'. [ 376.401327][T18012] syz.0.3374 (18012) used greatest stack depth: 17688 bytes left [ 376.426606][T17702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 376.432127][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3378'. [ 376.458758][T18023] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3378'. [ 376.459479][T17702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.489519][T18030] ieee802154 phy1 wpan1: encryption failed: -126 [ 376.505862][T17702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.512561][T18023] netlink: 'syz.4.3378': attribute type 3 has an invalid length. [ 376.520370][T18023] netlink: 'syz.4.3378': attribute type 2 has an invalid length. [ 376.529455][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3380'. [ 376.544170][T18023] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3378'. [ 376.565540][T17702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.767772][T18041] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 376.787458][T18041] bond1 (unregistering): Released all slaves [ 376.866418][T18051] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.895448][T18051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.125762][T17702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.175690][T17702] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.241077][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.248411][ T6911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.298276][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.305548][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.386682][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.396598][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.430028][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.514876][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.591683][T17702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 377.604837][T17702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.056269][T17702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.199680][T17702] veth0_vlan: entered promiscuous mode [ 378.249232][T17702] veth1_vlan: entered promiscuous mode [ 378.249254][T18132] netlink: 'syz.2.3409': attribute type 1 has an invalid length. [ 378.310227][T18132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.334573][T18140] bond1: (slave batadv1): Opening slave failed [ 378.359302][T18137] macsec2: entered promiscuous mode [ 378.423954][T18142] macsec1: entered promiscuous mode [ 378.532467][T17702] veth0_macvtap: entered promiscuous mode [ 378.555545][T17702] veth1_macvtap: entered promiscuous mode [ 378.600860][T17702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.619506][T18151] __nla_validate_parse: 10 callbacks suppressed [ 378.619527][T18151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3413'. [ 378.622755][T17702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.704693][ T1156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.734406][ T1156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.781609][ T1156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.807470][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.815186][ T1156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.818803][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 378.865292][T18160] netlink: 'syz.2.3418': attribute type 16 has an invalid length. [ 378.873421][T18160] netlink: 'syz.2.3418': attribute type 17 has an invalid length. [ 378.921445][T18160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.032355][T18165] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3417'. [ 379.052585][T18165] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3417'. [ 379.066467][T18170] ieee802154 phy1 wpan1: encryption failed: -126 [ 379.104496][ T6911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.127054][ T6911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.258503][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.280522][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.588201][T18194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3427'. [ 379.633213][T18194] netlink: 'syz.1.3427': attribute type 2 has an invalid length. [ 379.715226][T18198] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 379.789157][T18215] sctp: [Deprecated]: syz.1.3432 (pid 18215) Use of int in max_burst socket option. [ 379.789157][T18215] Use struct sctp_assoc_value instead [ 379.845303][T18216] sctp: [Deprecated]: syz.1.3432 (pid 18216) Use of int in max_burst socket option. [ 379.845303][T18216] Use struct sctp_assoc_value instead [ 379.957121][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3436'. [ 380.014121][T18224] tipc: Started in network mode [ 380.019125][T18224] tipc: Node identity f2ebd80a3c3a, cluster identity 4711 [ 380.027028][T18224] tipc: Enabled bearer , priority 0 [ 380.071513][T18224] syzkaller0: entered promiscuous mode [ 380.095904][T18224] syzkaller0: entered allmulticast mode [ 380.129089][T18224] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 380.188988][T18224] tipc: Resetting bearer [ 380.231201][T18223] tipc: Resetting bearer [ 380.304885][T18223] tipc: Disabling bearer [ 380.488741][T18251] netlink: 'syz.0.3444': attribute type 1 has an invalid length. [ 380.539737][T18251] netlink: 'syz.0.3444': attribute type 2 has an invalid length. [ 380.564526][T18251] netlink: 'syz.0.3444': attribute type 1 has an invalid length. [ 380.867346][T18276] netlink: 'syz.0.3451': attribute type 2 has an invalid length. [ 380.901158][T18276] : entered promiscuous mode [ 381.097132][T18286] netlink: 356 bytes leftover after parsing attributes in process `syz.4.3456'. [ 381.109446][T18290] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3455'. [ 381.151870][T18286] netlink: 356 bytes leftover after parsing attributes in process `syz.4.3456'. [ 381.437009][T18312] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3459'. [ 381.437664][T18314] syzkaller0: entered promiscuous mode [ 381.452046][T18314] syzkaller0: entered allmulticast mode [ 381.528892][T18314] wg2: entered promiscuous mode [ 381.534175][T18314] wg2: entered allmulticast mode [ 381.630056][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 382.677081][T18385] netlink: 'syz.0.3487': attribute type 15 has an invalid length. [ 382.784273][T18387] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 382.828925][T18387] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 382.851275][T18387] gretap2: entered promiscuous mode [ 382.864225][T18387] gretap2: entered allmulticast mode [ 382.882640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.891431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.895643][T18394] IPVS: stopping master sync thread 18400 ... [ 382.900137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.914161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.197576][T18410] bond0: entered promiscuous mode [ 383.270746][T18410] bond0: left promiscuous mode [ 383.629958][T18430] __nla_validate_parse: 9 callbacks suppressed [ 383.629981][T18430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3502'. [ 383.716803][T18436] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20002 [ 383.758098][T18438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3502'. [ 383.930519][T18451] sctp: [Deprecated]: syz.3.3506 (pid 18451) Use of int in max_burst socket option deprecated. [ 383.930519][T18451] Use struct sctp_assoc_value instead [ 383.958914][T18448] tipc: Enabled bearer , priority 0 [ 383.966474][T18449] tipc: Enabling of bearer rejected, already enabled [ 384.029498][T18459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3509'. [ 384.040805][T18445] tipc: Resetting bearer [ 384.058507][T18445] tipc: Disabling bearer [ 384.092069][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 384.100110][ C1] lec:lec_tx_timeout: lec0 [ 384.126820][T18461] netlink: 'syz.4.3510': attribute type 13 has an invalid length. [ 384.502196][T18461] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.509781][T18461] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.955256][T18461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.995778][T18461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.006680][T18477] netlink: 'syz.3.3513': attribute type 12 has an invalid length. [ 385.557172][T18477] bond2: option primary_reselect: invalid value (255) [ 385.574550][T18485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3515'. [ 385.610397][T18477] bond2 (unregistering): Released all slaves [ 385.638437][T18492] netlink: 'syz.4.3517': attribute type 58 has an invalid length. [ 385.672075][T18492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3517'. [ 385.683955][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.725862][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.753350][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3516'. [ 385.857650][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.887403][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.909321][T18494] netlink: 'syz.4.3517': attribute type 37 has an invalid length. [ 385.911510][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.960016][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.022299][T18510] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 386.051271][T18510] team0: Device macvtap1 is already an upper device of the team interface [ 386.083044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.091420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.099830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.108208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.116582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.146906][T18514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.274236][T18519] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.281192][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.340995][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.397039][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3527'. [ 386.422381][T18521] : renamed from bond_slave_0 (while UP) [ 386.615997][T18537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3532'. [ 386.727398][T18549] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001 [ 386.739767][T18540] macsec1: entered promiscuous mode [ 386.747191][T18540] macsec1: entered allmulticast mode [ 386.757664][T18550] xt_TCPMSS: Only works on TCP SYN packets [ 386.758351][T18540] bond2: (slave macsec1): Error -34 calling dev_set_mtu [ 386.807910][T18553] netlink: 'syz.3.3536': attribute type 4 has an invalid length. [ 386.980387][T18552] syzkaller1: entered promiscuous mode [ 387.002497][T18552] syzkaller1: entered allmulticast mode [ 387.284661][T18584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3546'. [ 387.301656][T18585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3546'. [ 387.591906][T18604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.619405][T18605] netlink: 'syz.4.3551': attribute type 1 has an invalid length. [ 387.634904][T18604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.673937][T18604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.689645][T18604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.805777][T18620] team0: Device gtp0 is up. Set it down before adding it as a team port [ 388.345988][T18656] netlink: 'syz.4.3562': attribute type 2 has an invalid length. [ 389.047477][T18690] netlink: 'syz.3.3568': attribute type 2 has an invalid length. [ 389.070792][T18691] netlink: 'syz.3.3568': attribute type 2 has an invalid length. [ 389.080875][T18690] netlink: 'syz.3.3568': attribute type 11 has an invalid length. [ 389.090537][T18691] __nla_validate_parse: 5 callbacks suppressed [ 389.090555][T18691] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3568'. [ 389.102408][T18690] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3568'. [ 389.111030][T18692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3568'. [ 389.282347][ C0] net_ratelimit: 2 callbacks suppressed [ 389.282367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.296454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.304869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.313292][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.376663][T18674] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 390.574380][T18714] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 391.210319][T18750] syzkaller0: entered promiscuous mode [ 391.226264][T18750] syzkaller0: entered allmulticast mode [ 391.461703][T18772] validate_nla: 1 callbacks suppressed [ 391.461724][T18772] netlink: 'syz.3.3589': attribute type 10 has an invalid length. [ 392.482366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.490698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.499061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.507342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.229750][T18772] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 393.446423][T18799] netlink: 'syz.1.3596': attribute type 3 has an invalid length. [ 393.464687][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3596'. [ 393.485741][T18799] netlink: 'syz.1.3596': attribute type 1 has an invalid length. [ 393.502604][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3596'. [ 393.556378][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3599'. [ 393.582770][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3599'. [ 394.325301][T18856] netlink: 'syz.4.3610': attribute type 32 has an invalid length. [ 394.353440][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3610'. [ 394.673363][T18856] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 394.877635][T18886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3615'. [ 394.912215][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3615'. [ 395.055935][T18895] xt_socket: unknown flags 0x50 [ 395.061946][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3619'. [ 395.103727][T18895] sctp: [Deprecated]: syz.0.3619 (pid 18895) Use of int in max_burst socket option. [ 395.103727][T18895] Use struct sctp_assoc_value instead [ 395.145200][T18898] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3621'. [ 395.172222][T18899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3621'. [ 395.334645][T18911] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 395.490508][T18919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.602379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.610997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.619482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.627936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.710776][T18924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3629'. [ 395.856446][T18940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3634'. [ 396.063812][T18955] bridge_slave_0: left allmulticast mode [ 396.069580][T18955] bridge_slave_0: left promiscuous mode [ 396.075815][T18955] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.113085][T18955] bridge_slave_1: left allmulticast mode [ 396.119707][T18955] bridge_slave_1: left promiscuous mode [ 396.126797][T18955] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.128326][T18960] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 396.147598][ T9] IPVS: starting estimator thread 0... [ 396.163328][T18955] team0: Port device team_slave_0 removed [ 396.176262][T18955] team0: Port device team_slave_1 removed [ 396.188395][T18955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.203187][T18955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.213163][T18955] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 396.225022][T18965] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3641'. [ 396.258468][T18963] IPVS: using max 27 ests per chain, 64800 per kthread [ 396.381597][T18972] netlink: 'syz.4.3645': attribute type 13 has an invalid length. [ 396.397362][T18975] veth0: entered promiscuous mode [ 396.409998][T18972] macvtap0: entered allmulticast mode [ 396.410162][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3646'. [ 396.433292][T18972] macvtap0: refused to change device tx_queue_len [ 397.239556][ T6911] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.260785][ T6911] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.288950][ T6911] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.319055][ T6911] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.467833][T19049] xt_addrtype: ipv6 does not support BROADCAST matching [ 397.636966][T19059] netlink: 'syz.4.3672': attribute type 1 has an invalid length. [ 397.738281][T19072] netlink: 'syz.3.3677': attribute type 1 has an invalid length. [ 397.844536][T19081] netlink: 'syz.2.3678': attribute type 9 has an invalid length. [ 397.868976][ T30] audit: type=1800 audit(1767938963.923:8): pid=19080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3680" name=04 dev="tmpfs" ino=738 res=0 errno=0 [ 398.069896][T19090] netlink: 'syz.3.3684': attribute type 1 has an invalid length. [ 398.151360][T19090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.196832][T19097] bond2: (slave geneve2): making interface the new active one [ 398.225778][T19097] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 398.361610][T19104] syzkaller0: entered promiscuous mode [ 398.373709][T19104] syzkaller0: entered allmulticast mode [ 398.578309][T19119] tipc: Started in network mode [ 398.598417][T19119] tipc: Node identity 06de4990a899, cluster identity 4711 [ 398.613474][T19119] tipc: Enabled bearer , priority 0 [ 398.635672][T19121] xt_cluster: node mask cannot exceed total number of nodes [ 398.660323][T19119] tipc: Resetting bearer [ 398.701160][T19114] tipc: Disabling bearer [ 398.802569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.811019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.819522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.827924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.120444][T19153] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 399.461146][T19176] IPv6: sit1: Disabled Multicast RS [ 399.499297][T19178] __nla_validate_parse: 17 callbacks suppressed [ 399.499316][T19178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3708'. [ 399.610062][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3707'. [ 399.729269][T19188] wlan0 speed is unknown, defaulting to 1000 [ 399.745157][T19188] wlan0 speed is unknown, defaulting to 1000 [ 399.761087][T19188] wlan0 speed is unknown, defaulting to 1000 [ 399.789135][T19188] infiniband szz0: RDMA CMA: cma_listen_on_dev, error -98 [ 399.858623][T19196] tipc: Started in network mode [ 399.866614][T19196] tipc: Node identity f2687535b4bf, cluster identity 4711 [ 399.875391][T19203] netlink: 'syz.3.3713': attribute type 1 has an invalid length. [ 399.903355][T19196] tipc: Enabled bearer , priority 0 [ 399.928217][T19188] wlan0 speed is unknown, defaulting to 1000 [ 399.951443][T19188] wlan0 speed is unknown, defaulting to 1000 [ 399.964514][T19188] wlan0 speed is unknown, defaulting to 1000 [ 399.973271][T19188] wlan0 speed is unknown, defaulting to 1000 [ 399.985403][T19188] wlan0 speed is unknown, defaulting to 1000 [ 399.996524][T19188] wlan0 speed is unknown, defaulting to 1000 [ 400.006395][T19188] wlan0 speed is unknown, defaulting to 1000 [ 400.017371][T19188] wlan0 speed is unknown, defaulting to 1000 [ 400.049070][T19199] tipc: Disabling bearer [ 400.205847][T19218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3714'. [ 400.410502][T19226] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3719'. [ 400.423437][T19229] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 400.676672][T19241] veth1_to_bond: entered allmulticast mode [ 400.706384][T19241] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3723'. [ 400.761035][T19246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3723'. [ 400.854163][T19246] veth1_to_bond (unregistering): left allmulticast mode [ 400.854223][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3725'. [ 400.905481][T19245] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3725'. [ 401.216473][T19260] netlink: 'syz.3.3729': attribute type 25 has an invalid length. [ 401.602805][T19292] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3739'. [ 401.611809][T19292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3739'. [ 401.649095][T19285] syzkaller0: entered promiscuous mode [ 401.675557][T19285] syzkaller0: entered allmulticast mode [ 401.922311][ C0] net_ratelimit: 1 callbacks suppressed [ 401.922333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.936341][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.944742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.953157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.961671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.007059][T19317] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 403.634297][T19329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.799586][T19340] syzkaller0: entered promiscuous mode [ 403.812922][T19340] syzkaller0: entered allmulticast mode [ 404.097510][T19351] openvswitch: netlink: Key type 31 is not supported [ 404.214500][T19365] syzkaller0: entered promiscuous mode [ 404.265622][T19365] syzkaller0: entered allmulticast mode [ 404.291150][T19374] netlink: 'syz.0.3761': attribute type 63 has an invalid length. [ 404.418098][T19380] netlink: 'syz.0.3761': attribute type 63 has an invalid length. [ 404.647338][T19394] delete_channel: no stack [ 404.678882][T19399] netlink: 'syz.0.3771': attribute type 1 has an invalid length. [ 404.761247][T19399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.809098][T19399] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 404.857491][T19399] bond3: entered allmulticast mode [ 404.979315][T19414] __nla_validate_parse: 5 callbacks suppressed [ 404.979337][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3773'. [ 405.017916][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3773'. [ 405.122320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.131210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.139644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.573173][T19445] netlink: 'syz.3.3783': attribute type 1 has an invalid length. [ 405.940022][T19466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3789'. [ 406.110289][T19472] netlink: 'syz.4.3791': attribute type 10 has an invalid length. [ 406.114251][T19473] netlink: 'syz.4.3791': attribute type 10 has an invalid length. [ 406.133235][T19472] veth1_macvtap: left promiscuous mode [ 406.146080][T19472] team0: Device veth1_macvtap failed to register rx_handler [ 406.173812][T19472] netlink: 'syz.4.3791': attribute type 10 has an invalid length. [ 406.192490][T19478] netlink: 'syz.4.3791': attribute type 10 has an invalid length. [ 406.209424][T19473] team0: Device veth1_macvtap failed to register rx_handler [ 406.232985][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'. [ 406.249394][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'. [ 406.283239][T19472] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3791'. [ 406.310554][T19488] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 406.327099][T19473] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3791'. [ 406.639045][T19509] netlink: 'syz.2.3796': attribute type 1 has an invalid length. [ 406.665154][T19504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3799'. [ 406.716960][T19510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3799'. [ 406.801563][T19509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.834865][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3799'. [ 406.874091][T19514] bond2: (slave veth0_to_bond): making interface the new active one [ 406.888783][T19514] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 406.936450][T19494] bond2: entered promiscuous mode [ 406.942660][T19494] veth0_to_bond: entered promiscuous mode [ 406.961964][T19494] bond2: entered allmulticast mode [ 406.970192][T19494] veth0_to_bond: entered allmulticast mode [ 407.026047][T19502] macvlan0: entered promiscuous mode [ 407.124084][T19524] net_ratelimit: 3 callbacks suppressed [ 407.124107][T19524] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 407.184329][T19534] netlink: 'syz.0.3806': attribute type 1 has an invalid length. [ 407.307481][T19534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.368126][T19538] bond3 (unregistering): Released all slaves [ 407.380816][T19550] x_tables: duplicate entry at hook 1 [ 407.412477][T19544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.419436][T19544] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 407.431922][T19544] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 407.533965][T19534] veth1: entered promiscuous mode [ 407.558613][T19534] bond4: (slave veth1): Enslaving as an active interface with a down link [ 407.590841][T19550] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 407.617184][T19553] block nbd0: not configured, cannot reconfigure [ 407.632417][T19547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.930287][T19562] bond5: entered promiscuous mode [ 407.940484][T19562] bond5: entered allmulticast mode [ 407.947952][T19562] 8021q: adding VLAN 0 to HW filter on device bond5 [ 408.243284][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.251741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.260198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.268642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.277071][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.288615][T19599] block nbd0: not configured, cannot reconfigure [ 410.048534][T19620] ip6gre1: entered allmulticast mode [ 410.180779][T19625] __nla_validate_parse: 13 callbacks suppressed [ 410.180801][T19625] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3836'. [ 410.205712][T19626] ipt_rpfilter: unknown options [ 410.216913][T19626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.249028][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3840'. [ 410.255022][T19626] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3837'. [ 410.267997][T19626] validate_nla: 1 callbacks suppressed [ 410.268014][T19626] netlink: 'syz.1.3837': attribute type 1 has an invalid length. [ 410.286976][T19626] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3837'. [ 410.293225][T19634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3840'. [ 410.416498][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3842'. [ 410.454491][T19642] netlink: 'syz.2.3845': attribute type 1 has an invalid length. [ 410.569446][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3846'. [ 410.640563][T19656] : renamed from veth1_vlan (while UP) [ 410.642941][T19657] netlink: 'syz.0.3848': attribute type 83 has an invalid length. [ 410.649854][ T5846] Bluetooth: hci0: command 0x0405 tx timeout [ 410.671900][T19656] netlink: 'syz.3.3849': attribute type 10 has an invalid length. [ 410.713395][T19656] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.737078][T19656] bond0: (slave team0): Enslaving as an active interface with an up link [ 410.814696][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3852'. [ 410.844162][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3852'. [ 410.977093][T19673] netlink: 'syz.3.3854': attribute type 39 has an invalid length. [ 411.264120][T19695] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3862'. [ 411.339195][T19704] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 411.354291][T19705] block nbd0: not configured, cannot reconfigure [ 411.361020][T19706] block nbd0: not configured, cannot reconfigure [ 411.443257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.519605][T19708] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 411.587103][T19708] netlink: 'syz.1.3866': attribute type 21 has an invalid length. [ 412.135479][T19748] pim6reg1: entered promiscuous mode [ 412.146038][T19748] pim6reg1: entered allmulticast mode [ 412.928137][T19801] netlink: 'syz.4.3897': attribute type 1 has an invalid length. [ 413.003625][T19801] bond0 (unregistering): Released all slaves [ 413.136560][T19814] netlink: 'syz.2.3900': attribute type 11 has an invalid length. [ 413.548295][T19837] sctp: [Deprecated]: syz.4.3908 (pid 19837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.548295][T19837] Use struct sctp_sack_info instead [ 413.594795][T19838] bond3 (unregistering): Released all slaves [ 413.805052][T19851] netlink: 'syz.2.3912': attribute type 3 has an invalid length. [ 413.842824][T19851] netlink: 'syz.2.3912': attribute type 7 has an invalid length. [ 413.852222][T19855] x_tables: duplicate underflow at hook 1 [ 414.273745][T19881] bond0: entered promiscuous mode [ 414.278935][T19881] bond0: entered allmulticast mode [ 414.285067][T19881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.374044][T19889] syzkaller1: entered promiscuous mode [ 414.379573][T19889] syzkaller1: entered allmulticast mode [ 414.562304][ C0] net_ratelimit: 3 callbacks suppressed [ 414.562325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.576403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.584802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.593223][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.601608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.651442][T19910] xt_hashlimit: size too large, truncated to 1048576 [ 414.896072][T19935] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 414.899166][T19916] IPVS: stopping master sync thread 19935 ... [ 415.298554][T19956] IPVS: set_ctl: invalid protocol: 88 255.255.255.255:20001 [ 415.388647][T19960] __nla_validate_parse: 21 callbacks suppressed [ 415.388669][T19960] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3939'. [ 415.406989][T19963] validate_nla: 4 callbacks suppressed [ 415.407008][T19963] netlink: 'syz.4.3941': attribute type 12 has an invalid length. [ 415.668292][T19980] team0: Device gtp1 is up. Set it down before adding it as a team port [ 415.889648][T19999] wg1: entered promiscuous mode [ 415.905595][T19999] wg1: entered allmulticast mode [ 415.998907][T20008] netlink: 'syz.1.3953': attribute type 25 has an invalid length. [ 416.007394][T20008] netlink: 'syz.1.3953': attribute type 7 has an invalid length. [ 416.084593][T20018] netlink: 'syz.2.3952': attribute type 2 has an invalid length. [ 416.104845][T20018] netlink: 'syz.2.3952': attribute type 1 has an invalid length. [ 416.271245][T20026] syzkaller0: entered promiscuous mode [ 416.279336][T20026] syzkaller0: entered allmulticast mode [ 416.495035][T20042] netlink: 'syz.0.3962': attribute type 1 has an invalid length. [ 416.559908][T20042] bond6: entered promiscuous mode [ 416.566347][T20042] 8021q: adding VLAN 0 to HW filter on device bond6 [ 416.578024][T20047] netlink: 'syz.4.3963': attribute type 1 has an invalid length. [ 416.610108][T20047] netlink: 'syz.4.3963': attribute type 3 has an invalid length. [ 416.620714][T20047] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3963'. [ 416.646249][T20051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.701200][T20042] bond6: (slave bridge2): making interface the new active one [ 416.728485][T20057] netlink: 'syz.4.3967': attribute type 1 has an invalid length. [ 416.732420][T20042] bridge2: entered promiscuous mode [ 416.744944][T20042] bridge2: left promiscuous mode [ 416.893482][T20064] gretap1: entered promiscuous mode [ 416.904096][T20064] bond3: (slave gretap1): making interface the new active one [ 416.914938][T20064] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 417.066858][T20077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3972'. [ 417.116278][T20079] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3975'. [ 417.127170][T20077] netlink: 'syz.1.3972': attribute type 11 has an invalid length. [ 417.149752][T20079] veth0_to_team: entered promiscuous mode [ 417.154503][T20077] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3972'. [ 417.435333][T20108] bond7: invalid ARP target 0.0.0.0 specified for addition [ 417.444814][T20108] bond7: option arp_ip_target: invalid value (0) [ 417.467567][T20108] bond7 (unregistering): Released all slaves [ 417.556394][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3981'. [ 417.758005][T20137] netlink: 'syz.0.3986': attribute type 9 has an invalid length. [ 417.766280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.766492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.766621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.766753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.353060][T20145] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3988'. [ 418.559178][T20158] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3995'. [ 418.591496][T20158] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3995'. [ 418.849070][T20172] syzkaller0: entered promiscuous mode [ 418.868696][T20172] syzkaller0: entered allmulticast mode [ 419.016352][T20186] batadv_slave_0: entered promiscuous mode [ 419.063572][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'. [ 419.080407][T20185] batadv_slave_0: left promiscuous mode [ 419.231946][T20194] syzkaller0: entered promiscuous mode [ 419.241543][T20194] syzkaller0: entered allmulticast mode [ 419.413016][T20207] lo: entered promiscuous mode [ 419.677106][T20226] Bluetooth: MGMT ver 1.23 [ 420.421789][T20278] __nla_validate_parse: 7 callbacks suppressed [ 420.421811][T20278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4028'. [ 420.485217][T20278] validate_nla: 4 callbacks suppressed [ 420.485237][T20278] netlink: 'syz.2.4028': attribute type 7 has an invalid length. [ 420.556276][T20278] netlink: 'syz.2.4028': attribute type 8 has an invalid length. [ 420.578257][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 420.592471][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4028'. [ 420.617455][T20290] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 420.749934][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4032'. [ 420.780490][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4032'. [ 420.882539][ C1] net_ratelimit: 1 callbacks suppressed [ 420.882560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.896582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.904984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.913399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.921742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.930186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.938594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.006098][T20317] netlink: 'syz.4.4039': attribute type 10 has an invalid length. [ 421.021543][T20315] netlink: 'syz.1.4038': attribute type 10 has an invalid length. [ 421.034098][T20317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.061296][T20315] team0: Device veth1_macvtap failed to register rx_handler [ 421.114895][T20317] netlink: 596 bytes leftover after parsing attributes in process `syz.4.4039'. [ 421.240694][T20322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4040'. [ 421.251399][T20312] netlink: 'syz.3.4037': attribute type 20 has an invalid length. [ 421.260002][T20312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4037'. [ 421.298673][T20325] netlink: 'syz.2.4041': attribute type 1 has an invalid length. [ 421.307686][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'. [ 421.318030][T20325] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4041'. [ 421.343778][T20312] netlink: 'syz.3.4037': attribute type 20 has an invalid length. [ 421.363604][T20322] bond1: Invalid ad_actor_system MAC address. [ 421.369729][T20322] bond1: option ad_actor_system: invalid value (1) [ 421.384069][T20322] bond1 (unregistering): Released all slaves [ 421.397581][T20325] netlink: 'syz.2.4041': attribute type 1 has an invalid length. [ 421.668422][T20343] syzkaller0: entered promiscuous mode [ 421.716507][T20343] syzkaller0: entered allmulticast mode [ 422.129771][T20375] netlink: 'syz.4.4054': attribute type 13 has an invalid length. [ 422.161690][T20377] netlink: 'syz.1.4055': attribute type 1 has an invalid length. [ 422.447039][T20392] veth3: entered allmulticast mode [ 422.456481][T20392] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 423.816738][T20492] nbd: device at index 64 is going down [ 423.838405][T20483] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 424.082511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.421513][T20529] syzkaller0: entered promiscuous mode [ 424.437764][T20531] x_tables: duplicate underflow at hook 2 [ 424.444601][T20529] syzkaller0: entered allmulticast mode [ 424.519560][T20535] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001 [ 424.523822][T20531] xt_SECMARK: invalid mode: 9 [ 424.692645][T20540] netlink: 'syz.4.4108': attribute type 11 has an invalid length. [ 425.007612][T20573] xt_ecn: cannot match TCP bits for non-tcp packets [ 425.914147][T20619] veth3: entered allmulticast mode [ 425.927604][T20629] tipc: New replicast peer: 255.255.255.255 [ 425.935288][T20629] tipc: Enabled bearer , priority 10 [ 426.175150][T20637] x_tables: unsorted underflow at hook 1 [ 426.218670][T20646] __nla_validate_parse: 30 callbacks suppressed [ 426.218692][T20646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4139'. [ 426.237046][T20647] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4138'. [ 426.252202][T20648] nbd: must specify a size in bytes for the device [ 426.259087][T20647] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4138'. [ 426.303271][T20654] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 426.303287][T20647] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4138'. [ 426.324544][T20652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4141'. [ 426.385797][T20657] nbd: illegal input index 2958377 [ 426.752534][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4146'. [ 426.994093][T20681] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4152'. [ 427.062118][ T8434] tipc: Node number set to 1362955335 [ 427.077655][T20691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4156'. [ 427.132886][T20698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4156'. [ 427.143683][T20698] nbd: device at index 64 is going down [ 427.202438][ C0] net_ratelimit: 5 callbacks suppressed [ 427.202460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.216571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.224861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.233225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.234221][T20701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4157'. [ 427.241561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.460625][T20711] validate_nla: 6 callbacks suppressed [ 427.460646][T20711] netlink: 'syz.3.4161': attribute type 10 has an invalid length. [ 427.516021][T20711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.551944][T20711] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 427.568757][T20715] IPv6: NLM_F_CREATE should be specified when creating new route [ 427.584351][T20716] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 427.757218][T20724] lo: entered promiscuous mode [ 427.775297][T20724] tunl0: entered promiscuous mode [ 427.800160][T20724] gre0: entered promiscuous mode [ 427.814322][T20727] netlink: 'syz.0.4167': attribute type 2 has an invalid length. [ 427.856023][T20724] gretap0: entered promiscuous mode [ 427.892957][T20729] netlink: 'syz.1.4169': attribute type 5 has an invalid length. [ 427.920279][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056796000: rx timeout, send abort [ 427.930863][T20724] erspan0: entered promiscuous mode [ 427.966090][T20724] ip_vti0: entered promiscuous mode [ 428.007680][T20727] 9: entered promiscuous mode [ 428.092235][T20736] ip6gre1: entered promiscuous mode [ 428.145379][T20738] ip6tnl0: Caught tx_queue_len zero misconfig [ 428.187140][T20743] netlink: 'syz.0.4174': attribute type 1 has an invalid length. [ 428.420413][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a8de400: rx timeout, send abort [ 428.430019][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056796000: abort rx timeout. Force session deactivation [ 428.499700][T20762] netlink: 'syz.2.4181': attribute type 1 has an invalid length. [ 428.514699][T20762] netlink: 'syz.2.4181': attribute type 2 has an invalid length. [ 428.529986][T20765] block nbd0: Unsupported socket: should be TCP or UNIX. [ 428.812720][T20786] netlink: 'syz.1.4190': attribute type 1 has an invalid length. [ 428.928724][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a8de400: abort rx timeout. Force session deactivation [ 428.940744][T20794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 429.061406][T20799] ipt_rpfilter: unknown options [ 429.319102][T20818] netlink: 'syz.2.4201': attribute type 6 has an invalid length. [ 429.352976][T20817] netlink: 'syz.2.4201': attribute type 6 has an invalid length. [ 429.397482][T20824] TCP: TCP_TX_DELAY enabled [ 429.556956][T20826] syzkaller0: entered promiscuous mode [ 429.571384][T20826] syzkaller0: entered allmulticast mode [ 430.407073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.415360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.423697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.431923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.367135][T20857] openvswitch: netlink: IPv6 tunnel dst address is zero [ 431.559072][T20868] __nla_validate_parse: 21 callbacks suppressed [ 431.559093][T20868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4216'. [ 431.614419][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4216'. [ 431.750485][T20883] gtp0: entered promiscuous mode [ 431.771825][T20883] gtp0: entered allmulticast mode [ 431.942510][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4221'. [ 431.947357][T20895] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4222'. [ 432.014983][T20895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4222'. [ 432.037071][T20895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4222'. [ 432.070816][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4224'. [ 432.471196][T20932] syzkaller0: entered promiscuous mode [ 432.480760][T20932] syzkaller0: entered allmulticast mode [ 432.595213][T20937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4232'. [ 432.596726][T20938] syzkaller0: entered promiscuous mode [ 432.608490][T20937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4232'. [ 432.609916][T20938] syzkaller0: entered allmulticast mode [ 432.953121][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4239'. [ 433.051144][T20967] validate_nla: 33 callbacks suppressed [ 433.051167][T20967] netlink: 'syz.3.4240': attribute type 4 has an invalid length. [ 433.815142][T21003] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 433.904038][T21007] 8021q: VLANs not supported on ip6gre0 [ 433.921328][T21007] 8021q: VLANs not supported on ip6gre0 [ 434.008650][T21012] openvswitch: netlink: Duplicate key (type 1). [ 434.029477][T21015] netlink: 'syz.0.4257': attribute type 1 has an invalid length. [ 434.205847][T21018] 8021q: VLANs not supported on gre0 [ 434.221539][T21026] 8021q: VLANs not supported on gre0 [ 434.390863][T21041] netlink: 'syz.3.4265': attribute type 1 has an invalid length. [ 434.411347][T21039] lo: Caught tx_queue_len zero misconfig [ 434.486631][T21041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.604507][T21050] netlink: 'syz.3.4268': attribute type 1 has an invalid length. [ 434.911455][T21074] openvswitch: netlink: IP tunnel dst address not specified [ 434.923029][T21074] openvswitch: netlink: IP tunnel dst address not specified [ 435.117450][T21082] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 435.143626][T21082] bond4 (unregistering): Released all slaves [ 435.338439][ T5961] IPVS: starting estimator thread 0... [ 435.404946][T21090] syzkaller0: entered promiscuous mode [ 435.410603][T21090] syzkaller0: entered allmulticast mode [ 435.444597][T21107] IPVS: using max 27 ests per chain, 64800 per kthread [ 435.690390][T21120] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20002 [ 436.245444][ T52] Bluetooth: hci0: command 0x0405 tx timeout [ 438.919143][T21158] openvswitch: netlink: Flow actions attr not present in new flow. [ 439.049380][T21159] __nla_validate_parse: 7 callbacks suppressed [ 439.049399][T21159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4295'. [ 439.184728][T21166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4299'. [ 439.560295][T21188] bond4: option min_links: invalid value (18446744073709551614) [ 439.568197][T21188] bond4: option min_links: allowed values 0 - 2147483647 [ 439.577007][T21188] bond4 (unregistering): Released all slaves [ 439.647280][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4307'. [ 439.736233][T21211] netlink: 'syz.2.4310': attribute type 10 has an invalid length. [ 439.745143][T21211] bridge0: port 3(team0) entered blocking state [ 439.757020][T21211] bridge0: port 3(team0) entered disabled state [ 439.765113][T21211] team0: entered allmulticast mode [ 439.770382][T21211] team_slave_0: entered allmulticast mode [ 439.777326][T21211] team_slave_1: entered allmulticast mode [ 439.786076][T21211] team0: entered promiscuous mode [ 439.835277][T21211] team_slave_0: entered promiscuous mode [ 439.841207][T21211] team_slave_1: entered promiscuous mode [ 439.944244][T21211] sctp: [Deprecated]: syz.2.4310 (pid 21211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.944244][T21211] Use struct sctp_sack_info instead [ 440.001917][T21221] netlink: 'syz.0.4312': attribute type 13 has an invalid length. [ 440.031104][T21218] sctp: [Deprecated]: syz.2.4310 (pid 21218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.031104][T21218] Use struct sctp_sack_info instead [ 440.123806][T21225] sctp: [Deprecated]: syz.2.4310 (pid 21225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.123806][T21225] Use struct sctp_sack_info instead [ 440.249865][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 440.407132][T21234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4313'. [ 440.447266][T21234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4313'. [ 440.477125][T21229] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 440.522997][T21238] netlink: 'syz.2.4316': attribute type 1 has an invalid length. [ 440.531723][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4316'. [ 440.562179][T21238] netlink: 'syz.2.4316': attribute type 1 has an invalid length. [ 440.580042][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4316'. [ 441.155146][T14372] bond2 (unregistering): (slave gretap1): Releasing active interface [ 441.745528][T14372] bond0 (unregistering): Released all slaves [ 441.759587][T14372] bond1 (unregistering): Released all slaves [ 441.773617][T14372] bond2 (unregistering): Released all slaves [ 441.787192][T14372] bond3 (unregistering): Released all slaves [ 441.803146][T14372] bond4 (unregistering): Released all slaves [ 441.827070][T14372] bond5 (unregistering): Released all slaves [ 441.845249][T14372] bond6 (unregistering): (slave lo): Releasing backup interface [ 441.855128][T14372] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 441.871716][T14372] bond6 (unregistering): Released all slaves [ 442.095676][T14372] tipc: Left network mode [ 442.187323][T21276] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4325'. [ 442.293601][T21284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4329'. [ 442.305865][T21285] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 442.317045][T21284] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 442.557832][T21303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4333'. [ 442.652823][T21298] team0: Device gtp0 is up. Set it down before adding it as a team port [ 442.860276][T21297] syzkaller0: entered promiscuous mode [ 442.883222][T21297] syzkaller0: entered allmulticast mode [ 443.040450][T21327] netlink: 'syz.3.4343': attribute type 1 has an invalid length. [ 444.808260][T21327] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 444.895671][T21351] syzkaller0: entered promiscuous mode [ 444.912111][T21351] syzkaller0: entered allmulticast mode [ 445.266061][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.274109][ C1] lec:lec_tx_timeout: lec0 [ 446.678581][T21380] __nla_validate_parse: 1 callbacks suppressed [ 446.678604][T21380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4349'. [ 446.749333][T21380] bond3: entered promiscuous mode [ 446.756438][T21380] bond3: entered allmulticast mode [ 446.773338][T21380] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.805819][T21387] macvlan2: entered promiscuous mode [ 446.811674][T21387] macvlan2: entered allmulticast mode [ 446.821288][T21387] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 447.128178][T21410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4355'. [ 447.208820][T21400] syzkaller1: entered promiscuous mode [ 447.216250][T21400] syzkaller1: entered allmulticast mode [ 447.270673][T21412] bond4: Unable to set up delay as MII monitoring is disabled [ 447.286674][T21412] bond4 (unregistering): Released all slaves [ 447.442630][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 447.536814][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4359'. [ 448.919969][T14372] hsr_slave_0: left promiscuous mode [ 448.949420][T14372] hsr_slave_1: left promiscuous mode [ 448.988329][T14372] veth1_macvtap: left promiscuous mode [ 449.007970][T14372] veth0_macvtap: left promiscuous mode [ 449.141222][T14372] pim6reg (unregistering): left allmulticast mode [ 450.119374][T21455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4367'. [ 450.136558][T21457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4367'. [ 450.287928][T21466] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4371'. [ 450.291360][T14372] IPVS: stop unused estimator thread 0... [ 450.427880][T21471] netlink: 824 bytes leftover after parsing attributes in process `syz.1.4372'. [ 450.512830][ T1156] bridge_slave_1: left allmulticast mode [ 450.518532][ T1156] bridge_slave_1: left promiscuous mode [ 450.552400][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.594455][ T1156] bridge_slave_0: left allmulticast mode [ 450.601417][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.638013][ T1156] veth5: left allmulticast mode [ 450.654114][ T1156] veth5: left promiscuous mode [ 450.664996][ T1156] bridge5: port 1(veth5) entered disabled state [ 450.884060][T21501] delete_channel: no stack [ 450.941582][ T1156] gretap0 (unregistering): left promiscuous mode [ 451.252920][ T1156] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 451.551669][ T1156] bond0 (unregistering): left promiscuous mode [ 451.558699][ T1156] bond_slave_0: left promiscuous mode [ 451.564724][ T1156] bond_slave_1: left promiscuous mode [ 451.575239][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.585985][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.595780][ T1156] bond0 (unregistering): Released all slaves [ 451.610679][ T1156] bond1 (unregistering): (slave bond2): Releasing backup interface [ 451.620110][ T1156] bond1 (unregistering): Released all slaves [ 451.720037][ T1156] bond2 (unregistering): Released all slaves [ 451.826540][ T1156] bond3 (unregistering): Released all slaves [ 451.839675][ T1156] bond4 (unregistering): Released all slaves [ 451.853395][ T1156] bond5 (unregistering): Released all slaves [ 451.866338][ T1156] bond6 (unregistering): Released all slaves [ 451.975306][ T1156] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 451.985430][ T1156] bond7 (unregistering): Released all slaves [ 451.998662][T21478] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 452.175281][ T1156] : left promiscuous mode [ 452.310827][T21516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4384'. [ 452.320465][T21516] openvswitch: netlink: Missing key (keys=40, expected=80) [ 452.341289][ T1156] : left promiscuous mode [ 452.492875][ T1156] tipc: Left network mode [ 452.579670][T21533] netlink: 'syz.0.4389': attribute type 3 has an invalid length. [ 452.610654][T21533] netlink: 'syz.0.4389': attribute type 1 has an invalid length. [ 452.646711][T21533] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4389'. [ 452.687395][T21533] netlink: 'syz.0.4389': attribute type 7 has an invalid length. [ 453.058124][ T1156] hsr_slave_0: left promiscuous mode [ 453.094819][ T1156] hsr_slave_1: left promiscuous mode [ 453.101837][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.125737][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.156373][T21559] netlink: 'syz.3.4394': attribute type 1 has an invalid length. [ 453.226119][ T1156] pimreg (unregistering): left allmulticast mode [ 454.297653][T21586] eql: remember to turn off Van-Jacobson compression on your slave devices [ 454.335955][T21586] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 454.495667][T21604] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4405'. [ 454.505446][T21604] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 454.560497][T21599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4404'. [ 454.569647][T21599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.608962][T21599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.651475][T21597] lo: Caught tx_queue_len zero misconfig [ 454.693218][T21621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4409'. [ 454.790375][ T1156] IPVS: stop unused estimator thread 0... [ 455.174920][T21637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.238575][T21642] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.262998][T21642] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.378466][T21637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.426488][T21642] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.437095][T21642] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.463482][T21645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4419'. [ 455.577215][T21637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.656535][T21642] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.689767][T21642] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.844031][T21637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.931517][T21642] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.948848][T21642] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.122091][ T1101] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.184396][ T1101] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.313519][ T6907] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.334677][ T6907] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.364152][ T6907] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.387515][ T6907] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.412262][ T6907] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.629646][T21679] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4428'. [ 456.646688][ T6907] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.657437][ T6907] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.712324][ T6907] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.753185][ T6907] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.761415][ T6907] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.841454][T21683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4433'. [ 456.907768][T21687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4431'. [ 456.933337][T21687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4431'. [ 456.983106][T21687] tipc: Started in network mode [ 456.988051][T21687] tipc: Node identity ac14140f, cluster identity 4711 [ 457.009843][T21687] tipc: New replicast peer: 255.255.255.255 [ 457.019838][T14374] tipc: Subscription rejected, illegal request [ 457.049168][T21687] tipc: Enabled bearer , priority 10 [ 457.594417][T21720] __nla_validate_parse: 2 callbacks suppressed [ 457.594439][T21720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4442'. [ 458.032761][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4447'. [ 458.042765][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4447'. [ 458.225678][ T5923] tipc: Node number set to 2886997007 [ 458.886144][T21777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4455'. [ 459.260017][T21788] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 459.412622][T21792] netlink: 'syz.4.4464': attribute type 1 has an invalid length. [ 459.467139][T21796] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4463'. [ 459.502723][T21798] netlink: 'syz.2.4465': attribute type 4 has an invalid length. [ 459.510643][T21797] netlink: 'syz.2.4465': attribute type 4 has an invalid length. [ 459.610222][T21793] xt_hashlimit: max too large, truncated to 1048576 [ 459.819295][T21810] netlink: 71 bytes leftover after parsing attributes in process `syz.4.4468'. [ 460.054669][T21815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4470'. [ 460.097595][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4471'. [ 460.203924][T21817] 8021q: adding VLAN 0 to HW filter on device bond4 [ 460.700442][T21830] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.4475'. [ 460.908923][T21840] geneve2: entered promiscuous mode [ 460.938363][T21840] : renamed from hsr0 (while UP) [ 461.081625][T21851] netlink: 'syz.2.4482': attribute type 39 has an invalid length. [ 461.267152][T21861] wlan0 speed is unknown, defaulting to 1000 [ 461.415916][T21866] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.423797][T21866] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.580511][T21656] Set syz1 is full, maxelem 65536 reached [ 461.681722][T21875] xt_SECMARK: invalid mode: 9 [ 461.783437][ T79] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.869217][ T79] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.902092][ T79] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.911018][ T79] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.172738][T21899] netlink: 'syz.0.4495': attribute type 24 has an invalid length. [ 462.250012][T21897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4496'. [ 462.467097][T21911] netlink: 'syz.3.4500': attribute type 39 has an invalid length. [ 462.494501][T21919] tipc: Enabled bearer , priority 0 [ 462.528417][T21919] +: renamed from syzkaller0 [ 462.556224][T21919] tipc: Disabling bearer [ 462.785207][T21936] netlink: 'syz.0.4508': attribute type 11 has an invalid length. [ 462.802445][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 463.384709][T21973] netlink: 'syz.4.4516': attribute type 2 has an invalid length. [ 463.413044][T21973] __nla_validate_parse: 1 callbacks suppressed [ 463.413065][T21973] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4516'. [ 463.433787][T21974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4517'. [ 463.452856][T21974] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 463.463698][T21974] netlink: 'syz.3.4517': attribute type 10 has an invalid length. [ 463.471799][T21974] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 463.493550][T21978] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4518'. [ 463.504387][ T8434] IPVS: starting estimator thread 0... [ 463.574490][T21982] netlink: 'syz.3.4519': attribute type 1 has an invalid length. [ 463.602417][T21982] netlink: 'syz.3.4519': attribute type 4 has an invalid length. [ 463.612849][T21979] IPVS: using max 24 ests per chain, 57600 per kthread [ 463.614053][T21982] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4519'. [ 463.731113][T21990] dvmrp6: entered allmulticast mode [ 463.772211][ T6536] wlan0 speed is unknown, defaulting to 1000 [ 463.779685][ T6910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.799514][ T6910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.835702][ T6536] wlan0 speed is unknown, defaulting to 1000 [ 463.847871][ T6536] szz0: Port: 1 Link ACTIVE [ 463.856155][T21999] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4524'. [ 463.897402][T22002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4525'. [ 463.983888][T22005] netlink: 844 bytes leftover after parsing attributes in process `syz.3.4526'. [ 464.389387][T22034] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4534'. [ 464.562892][T22042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4538'. [ 464.580075][T22040] syzkaller0: entered promiscuous mode [ 464.586894][T22040] syzkaller0: entered allmulticast mode [ 465.447591][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4545'. [ 465.597208][T22072] delete_channel: no stack [ 466.656103][T22096] netlink: 'syz.0.4553': attribute type 1 has an invalid length. [ 466.743444][T22102] bond8: (slave gretap1): making interface the new active one [ 466.752173][T22102] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 467.028383][T22127] wlan0 speed is unknown, defaulting to 1000 [ 467.243172][T22141] netlink: 'syz.3.4566': attribute type 4 has an invalid length. [ 467.438344][T22152] netlink: 'syz.1.4568': attribute type 1 has an invalid length. [ 467.567633][T22152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.674573][T22157] bond1: (slave veth5): Enslaving as an active interface with a down link [ 467.702500][T22152] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 468.374744][T22217] : renamed from veth1_vlan (while UP) [ 468.486132][T22224] [ 468.488519][T22224] ====================================================== [ 468.495558][T22224] WARNING: possible circular locking dependency detected [ 468.503115][T22224] syzkaller #0 Not tainted [ 468.507544][T22224] ------------------------------------------------------ [ 468.514582][T22224] syz.1.4591/22224 is trying to acquire lock: [ 468.520666][T22224] ffffffff8f473db8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 468.530018][T22224] [ 468.530018][T22224] but task is already holding lock: [ 468.537395][T22224] ffff88804959ec70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 468.546740][T22224] [ 468.546740][T22224] which lock already depends on the new lock. [ 468.546740][T22224] [ 468.557162][T22224] [ 468.557162][T22224] the existing dependency chain (in reverse order) is: [ 468.566191][T22224] [ 468.566191][T22224] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 468.574209][T22224] _raw_spin_lock_bh+0x36/0x50 [ 468.579501][T22224] nr_rt_device_down+0x12a/0x720 [ 468.584961][T22224] nr_device_event+0x137/0x150 [ 468.590240][T22224] notifier_call_chain+0x19d/0x3a0 [ 468.595874][T22224] netif_close_many+0x29c/0x410 [ 468.601244][T22224] netif_close+0x158/0x210 [ 468.606173][T22224] dev_close+0x10a/0x220 [ 468.610932][T22224] bpq_device_event+0x377/0x6a0 [ 468.616300][T22224] notifier_call_chain+0x19d/0x3a0 [ 468.621932][T22224] netif_close_many+0x29c/0x410 [ 468.627322][T22224] netif_close+0x158/0x210 [ 468.632277][T22224] dev_close+0x10a/0x220 [ 468.637034][T22224] bond_setup_by_slave+0x5f/0x3d0 [ 468.642581][T22224] bond_enslave+0x6ca/0x3ac0 [ 468.647709][T22224] bond_do_ioctl+0x68d/0x870 [ 468.652812][T22224] dev_ifsioc+0x90b/0xf00 [ 468.657652][T22224] dev_ioctl+0x7b4/0x1150 [ 468.662497][T22224] sock_do_ioctl+0x22c/0x300 [ 468.667610][T22224] sock_ioctl+0x576/0x790 [ 468.672491][T22224] __se_sys_ioctl+0xfc/0x170 [ 468.677601][T22224] do_syscall_64+0xec/0xf80 [ 468.682619][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.689024][T22224] [ 468.689024][T22224] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 468.696850][T22224] _raw_spin_lock_bh+0x36/0x50 [ 468.702164][T22224] nr_rt_device_down+0xa9/0x720 [ 468.707548][T22224] nr_device_event+0x137/0x150 [ 468.712841][T22224] notifier_call_chain+0x19d/0x3a0 [ 468.718479][T22224] netif_close_many+0x29c/0x410 [ 468.723854][T22224] netif_close+0x158/0x210 [ 468.728789][T22224] dev_close+0x10a/0x220 [ 468.733551][T22224] bpq_device_event+0x377/0x6a0 [ 468.738923][T22224] notifier_call_chain+0x19d/0x3a0 [ 468.744564][T22224] netif_close_many+0x29c/0x410 [ 468.749942][T22224] netif_close+0x158/0x210 [ 468.754875][T22224] dev_close+0x10a/0x220 [ 468.759640][T22224] bond_setup_by_slave+0x5f/0x3d0 [ 468.765194][T22224] bond_enslave+0x6ca/0x3ac0 [ 468.770309][T22224] bond_do_ioctl+0x68d/0x870 [ 468.775419][T22224] dev_ifsioc+0x90b/0xf00 [ 468.780268][T22224] dev_ioctl+0x7b4/0x1150 [ 468.785115][T22224] sock_do_ioctl+0x22c/0x300 [ 468.790231][T22224] sock_ioctl+0x576/0x790 [ 468.795083][T22224] __se_sys_ioctl+0xfc/0x170 [ 468.800204][T22224] do_syscall_64+0xec/0xf80 [ 468.805663][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.812081][T22224] [ 468.812081][T22224] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 468.820000][T22224] __lock_acquire+0x15a6/0x2cf0 [ 468.825369][T22224] lock_acquire+0x107/0x340 [ 468.830399][T22224] _raw_spin_lock_bh+0x36/0x50 [ 468.835695][T22224] nr_remove_neigh+0x25/0xe0 [ 468.840805][T22224] nr_add_node+0x1d9f/0x2570 [ 468.845915][T22224] nr_rt_ioctl+0xc12/0xd50 [ 468.850855][T22224] sock_do_ioctl+0xdc/0x300 [ 468.855882][T22224] sock_ioctl+0x576/0x790 [ 468.860737][T22224] __se_sys_ioctl+0xfc/0x170 [ 468.865857][T22224] do_syscall_64+0xec/0xf80 [ 468.870885][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.877311][T22224] [ 468.877311][T22224] other info that might help us debug this: [ 468.877311][T22224] [ 468.887540][T22224] Chain exists of: [ 468.887540][T22224] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 468.887540][T22224] [ 468.901447][T22224] Possible unsafe locking scenario: [ 468.901447][T22224] [ 468.908901][T22224] CPU0 CPU1 [ 468.914264][T22224] ---- ---- [ 468.919628][T22224] lock(&nr_node->node_lock); [ 468.924395][T22224] lock(nr_node_list_lock); [ 468.931508][T22224] lock(&nr_node->node_lock); [ 468.938789][T22224] lock(nr_neigh_list_lock); [ 468.944771][T22224] [ 468.944771][T22224] *** DEADLOCK *** [ 468.944771][T22224] [ 468.952914][T22224] 1 lock held by syz.1.4591/22224: [ 468.958021][T22224] #0: ffff88804959ec70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 468.967773][T22224] [ 468.967773][T22224] stack backtrace: [ 468.973662][T22224] CPU: 0 UID: 0 PID: 22224 Comm: syz.1.4591 Not tainted syzkaller #0 PREEMPT(full) [ 468.973681][T22224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.973697][T22224] Call Trace: [ 468.973703][T22224] [ 468.973709][T22224] dump_stack_lvl+0xe8/0x150 [ 468.973730][T22224] print_circular_bug+0x2e2/0x300 [ 468.973751][T22224] check_noncircular+0x12e/0x150 [ 468.973771][T22224] __lock_acquire+0x15a6/0x2cf0 [ 468.973792][T22224] ? __lock_acquire+0x6b6/0x2cf0 [ 468.973807][T22224] ? nr_remove_neigh+0x25/0xe0 [ 468.973824][T22224] lock_acquire+0x107/0x340 [ 468.973837][T22224] ? nr_remove_neigh+0x25/0xe0 [ 468.973854][T22224] ? nr_add_node+0xcce/0x2570 [ 468.973869][T22224] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 468.973890][T22224] ? nr_remove_neigh+0x25/0xe0 [ 468.973907][T22224] _raw_spin_lock_bh+0x36/0x50 [ 468.973929][T22224] ? nr_remove_neigh+0x25/0xe0 [ 468.973946][T22224] nr_remove_neigh+0x25/0xe0 [ 468.973963][T22224] nr_add_node+0x1d9f/0x2570 [ 468.973981][T22224] ? nr_call_to_digi+0x126/0x1b0 [ 468.973997][T22224] nr_rt_ioctl+0xc12/0xd50 [ 468.974016][T22224] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 468.974035][T22224] ? apparmor_capable+0x137/0x1a0 [ 468.974061][T22224] ? capable+0x89/0xe0 [ 468.974076][T22224] ? nr_ioctl+0x1b1/0x3b0 [ 468.974097][T22224] sock_do_ioctl+0xdc/0x300 [ 468.974119][T22224] ? __pfx_sock_do_ioctl+0x10/0x10 [ 468.974138][T22224] ? do_futex+0x395/0x420 [ 468.974152][T22224] ? call_rcu+0x644/0x890 [ 468.974175][T22224] sock_ioctl+0x576/0x790 [ 468.974195][T22224] ? __pfx_sock_ioctl+0x10/0x10 [ 468.974215][T22224] ? __fget_files+0x2a/0x420 [ 468.974232][T22224] ? __fget_files+0x3a0/0x420 [ 468.974250][T22224] ? __fget_files+0x2a/0x420 [ 468.974268][T22224] ? bpf_lsm_file_ioctl+0x9/0x20 [ 468.974285][T22224] ? __pfx_sock_ioctl+0x10/0x10 [ 468.974303][T22224] __se_sys_ioctl+0xfc/0x170 [ 468.974327][T22224] do_syscall_64+0xec/0xf80 [ 468.974342][T22224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.974357][T22224] ? trace_irq_disable+0x37/0x100 [ 468.974376][T22224] ? clear_bhb_loop+0x60/0xb0 [ 468.974392][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.974407][T22224] RIP: 0033:0x7f414a58f749 [ 468.974421][T22224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.974434][T22224] RSP: 002b:00007f414b440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.974451][T22224] RAX: ffffffffffffffda RBX: 00007f414a7e5fa0 RCX: 00007f414a58f749 [ 468.974462][T22224] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000004 [ 468.974472][T22224] RBP: 00007f414a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 468.974482][T22224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.974491][T22224] R13: 00007f414a7e6038 R14: 00007f414a7e5fa0 R15: 00007ffd3c219a58 [ 468.974508][T22224] [ 469.358343][T22233] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.365725][T22233] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.387852][T22233] veth0: left promiscuous mode [ 469.393253][T22233] veth0: left allmulticast mode [ 469.402151][T22233] wg2: left promiscuous mode [ 469.406778][T22233] wg2: left allmulticast mode [ 469.427104][T22233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.437750][T22233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.458095][T22233] macvlan0: left promiscuous mode [ 469.479277][T22233] xfrm1: left promiscuous mode [ 469.487581][T22233] xfrm1: left allmulticast mode [ 469.496197][T22233] bond2: left promiscuous mode [ 469.500976][T22233] veth0_to_bond: left promiscuous mode [ 469.507748][T22233] bond2: left allmulticast mode [ 469.513471][T22233] veth0_to_bond: left allmulticast mode [ 469.520786][T22233] bond3: left promiscuous mode [ 469.526101][T22233] bond3: left allmulticast mode [ 469.532929][T22233] geneve2: left promiscuous mode [ 469.541191][ T79] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.549971][ T79] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.559183][ T79] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.567896][ T79] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.587647][ T79] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.597538][ T79] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.606132][ T79] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.615473][ T79] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0