last executing test programs: 47.061296198s ago: executing program 1 (id=1081): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x23054000) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'ip6erspan0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x6eeabed6bd310598) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0xffffffffffffff29, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa904, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=ANY=[@ANYBLOB="3000000002146ef906eed02d0272b99b095bc001fb5fec0600fbdbdf", @ANYBLOB="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", @ANYRES16=r2], 0x30}, 0x1, 0x0, 0x0, 0x20048080}, 0x2fe9f4993c50f7f6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000ff070000b0000000feffff000a950000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 46.398443744s ago: executing program 3 (id=1087): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) (async) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xb}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan1\x00', 0x210}) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) 43.08114041s ago: executing program 4 (id=1100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000002020000000000000001000085000000000402e87b"], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2505000000280001"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028005000d0001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="f5285c346ec9a3cf98b537", 0xb}], 0x1, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r6) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200f5ffffff"}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e0004000280080005000a40bde5f8bea5a73001006e182a5dfc4d9461f1373ca769ffb7e7872da723ea468f09a71ef40ccbc64ec2ad2854a833cc4109406e1cd859a0273709a0089794726ca323b4f47c98e671787a1e4ccbb827113720eb601ecd4b4fc7270f94c8d4fd33dec89633ef07f36bd800"/150, @ANYRESHEX=r7, @ANYBLOB="0800349df817a095178967d246e833957891e6fc0eb18d1e1372236949759aa3e4eb533ace32722bfc916ce4961f5f75c5326d13b71332ffd70ef030263e7c325930a94c02ba3d7643fa487bc3c02a51ec4f91d54b4baeba0d98f468e62510a6831098af345044458d785e10cb2950e3bb7da19ec98b519c0f76f7a8aa4e4a85177a7fcbe7959e5aeaf3b694232a60cf0d4391a75a555c87050826818b6114ffd68480735ab9d330684092f0dd78347865f2755006ab5963d19a6fd199e6008ea5c7f276e32d3e7d025bf51a4cc5ed0e52397ce8313a866a", @ANYRES32=r8, @ANYRESOCT=r1], 0x44}}, 0x0) 42.595307044s ago: executing program 3 (id=1103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480080007006e6174"], 0xc0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="fdffff00"/14, @ANYRES16=r2, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf256800000008000300", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24008800) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) gettid() syz_open_procfs$namespace(0x0, 0x0) socket(0x2, 0x80805, 0x0) getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8) bind$inet6(r10, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x24040001, &(0x7f0000000440)={0xa, 0x4e24, 0xffff, @loopback, 0x8000000d}, 0x1c) shutdown(r10, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100a2567dfe65e460", @ANYRES32=r11, @ANYBLOB="0c009900050020005d000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x20008090) 42.488258106s ago: executing program 4 (id=1105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'team_slave_1\x00'}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60be"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6d}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg$unix(r4, &(0x7f00000004c0)={&(0x7f0000000300), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000380)=""/179, 0xb3}], 0x1}, 0x40002003) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r6, 0x1) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}}, 0xc000) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r8, 0x5) 40.706509051s ago: executing program 0 (id=1107): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 40.611426357s ago: executing program 3 (id=1109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000005340)=[{{&(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="1e55d1511d24b59f396184a3aa69c667665f", 0x12}], 0x1}}], 0x1, 0x20000004) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername(r3, &(0x7f0000000440)=@tipc=@name, &(0x7f00000004c0)=0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x4}, 0x40050) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) listen(r1, 0x2) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0xfffffe93) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tracing={0xffffffffffffffff, 0x47}}, 0x20) ioctl$OCFS2_IOC_GROUP_EXTEND(r6, 0x40046f01, &(0x7f0000000200)=0x10000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', r5, 0x2f, 0x2, 0x2, 0x1, 0x10, @mcast2, @empty, 0x40, 0x1, 0xc18c, 0x7}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x0, 0x24004095, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) 40.068804062s ago: executing program 1 (id=1110): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00000008000400", @ANYRES32=0x0, @ANYBLOB='\f\x00\t'], 0xbc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 40.06810678s ago: executing program 2 (id=1111): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='pimreg\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c004) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$rds(r6, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4}, 0x38) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) 39.909686972s ago: executing program 1 (id=1112): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 39.356067039s ago: executing program 2 (id=1113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0xd, 0xf8b, 0x6, @mcast2, @dev={0xfe, 0x80, '\x00', 0x34}, 0x80, 0x80, 0x1, 0x5}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x8000, 0x10, 0x4, 0x80000000, {{0x1d, 0x4, 0x3, 0x8, 0x74, 0x64, 0x0, 0x4, 0x1db04f572c634d73, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @loopback, {[@lsrr={0x83, 0x7, 0xd7, [@dev={0xac, 0x14, 0x14, 0x16}]}, @timestamp_addr={0x44, 0x4c, 0xdc, 0x1, 0xa, [{@loopback, 0x2d7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x10}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xc000000}, {@loopback, 0x4}, {@local, 0x4}, {@multicast2, 0x797}, {@empty, 0x7}, {@multicast1, 0x1}]}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0x9, [{@remote, 0x3}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x350, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x8c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x5, 0x8, 0x17}, {0x5, 0x4, 0x1}]}}}]}}, {{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0xa8, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0xb0, 0x0, 0x20f}, {0xa, 0x3, 0xc, 0x8}, {0xac, 0x40, 0x8, 0xffffffff}, {0x2, 0x5, 0x2, 0xd1f}, {0x7, 0x77, 0x3, 0x4}, {0x3, 0x3, 0x1, 0xc00}, {0xffff, 0x96, 0x99, 0x1}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}]}, 0x350}, 0x1, 0x0, 0x0, 0x20044801}, 0x48000) (async) shutdown(0xffffffffffffffff, 0x1) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x3, 0x4e22, 0x7, 0xa, 0x0, 0xa0, 0x1, r3, r10}, {0x1875fb38, 0x4, 0x408a, 0x0, 0x8, 0x7fffffff, 0x8, 0x8}, {0x0, 0x7, 0x0, 0x4}, 0x0, 0x6e6bba, 0x2, 0x1, 0x3}, {{@in6=@mcast1, 0x4d2, 0x32}, 0x2, @in6=@mcast2, 0x3505, 0x1, 0x3, 0xff, 0x8001, 0xffff, 0x7b8}}, 0xe8) (async) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000a00), &(0x7f0000000a40)=0x40) (async) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000000a80)=0x1182, 0x4) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000ac0)={r2, @rand_addr=0x64010100, @broadcast}, 0xc) (async) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000b00)={0xc5, @broadcast, 0x4e21, 0x3, 'sh\x00', 0x11, 0x2, 0x56}, 0x2c) (async) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x334, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7f}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffeffff, @mcast1, 0x10001}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @remote, 0x168}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8001, @mcast2, 0x4}}}}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6d5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x81, @mcast1, 0xe}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "7bd7e6fbec58ad0ebeb5a45991e1ccfd60bdafedc97ede2341b4598129255392c2a370"}}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9e6}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xce1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xab}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x990}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x8000}, 0x20040880) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000f40)=0x1000) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r13, &(0x7f0000001040)={&(0x7f0000000f80), 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x8040) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xac, r14, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) r15 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000001280)={r15}, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000012c0), &(0x7f0000001300)=0xe) 39.209743632s ago: executing program 4 (id=1114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf2501000000080002000200b803080001"], 0x24}, 0x1, 0x0, 0x0, 0x1508a1a9b469814b}, 0x4000080) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @empty}, @IFLA_GRE_OKEY={0x8, 0x5, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}]}, 0x50}}, 0x0) 39.156150998s ago: executing program 2 (id=1115): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[], 0x48) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x1b9}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0xaf, 0x4) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000100000000000000000000000030005003c00000002000000ac1e00010000000000000000030006000000000002000000000000000000000000000000080012000000020000b6369931608d2a25"], 0x80}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 38.749738859s ago: executing program 0 (id=1116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 38.735065548s ago: executing program 1 (id=1117): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000680)={0x0, 0x401, 0x3, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000a80)={r1, 0x9, 0x3, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r3 = socket(0x1e, 0x4, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x401, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1705}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000650001"], 0x14}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x20000040) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000140001040300"/19, @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028008000200", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x14) 38.523322835s ago: executing program 4 (id=1118): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fed3df25030000005800018044000400200001000a000000000000000000000000000500000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a7379"], 0x6c}}, 0x0) 38.315014838s ago: executing program 3 (id=1119): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3f8, 0x400, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffe0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x7c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) write(r5, &(0x7f0000000200)="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", 0xfc) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x7ffffffe, 0x0, 0x4) 38.284775899s ago: executing program 0 (id=1120): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 38.035753543s ago: executing program 2 (id=1121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x14, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4008415}, 0x44084) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x10, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) 38.030769658s ago: executing program 4 (id=1122): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffbfffff8000, 0x8) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x1, 0xca, 0x6]}, &(0x7f0000000200)=0x44) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000020603000000000000400000000000000d000300686173683a6e65740000000005000400000004000900020073797a310000000005000500020000000500010006"], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) 37.257119761s ago: executing program 3 (id=1123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r3, 0x11b, 0x9, 0x0, 0x4) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000002c0)={r7, r2}) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x42024, 0x296}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xa, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @exit], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r10, 0x0, 0xfdf0, 0x0, &(0x7f00000002c0)="5fd63edbfd8ad8de16e68701009a", 0x0, 0x707, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) ioctl$int_in(r9, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x7, 0x0) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x6b2, 0xffff, 0x9}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f0000000280)={r12, 0x7, 0x27, "d04fa1089187ac7196bfdb8078f12924d216e58df5533b9fc134fb21de7d5b5eedf968dee0f9f4"}, 0x2f) 37.137209606s ago: executing program 2 (id=1124): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000}, @generic={0x2c}, @initr0, @exit]}, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffe92, 0x0}}, 0x10) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00012abd7000fddbdf256300000008000300", @ANYRES32=r4, @ANYBLOB="0411e50461e560bc48aedfdbdadc9610239126790908d390707931c439d4911971f146cbfdaf96e8bb5d20df20e2b5162702a36f37a25f4a23f313d5b3df672c7f2f1f5d1af08c78dc7ff2a84154c7bbc9ae8fae308f6bca1b6a7c851d70701382d55f31346c35e710b6506d3277608de854c67b63e7e00bbdb6920e29ab0320139dc3e5839fd1974f65ddea9bc7e0bb505f3c526ffe7e0ed923feda"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x45) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002300090425bd7000ffdb00000200000008000100ac1414aac9c95c98174685f9b009382707fa335efc875305"], 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0xc) 36.53065759s ago: executing program 0 (id=1125): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r6, 0x2000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x3000008, 0x13, r7, 0x1000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) 36.431446016s ago: executing program 0 (id=1126): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x13}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@dscp={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010102, 'bridge_slave_0\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) close(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01062abd7000ffdbdf250600000006000b000a"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r6, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x44081) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0108ddffffff0000000b00030000", @ANYRES32=r4, @ANYBLOB="0a000600080211000001000020005080110001004abee33908f8eef16f162471f40000000500020005000000"], 0x48}}, 0x40) 36.26019926s ago: executing program 0 (id=1127): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000150001"], 0x14}}, 0x880) sendmsg$sock(r0, &(0x7f0000000800)={&(0x7f0000000100)=@phonet={0x23, 0x7f, 0x9, 0x3}, 0x80, 0x0}, 0x44000) 36.23145358s ago: executing program 4 (id=1128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000000)={0xa3, @empty, 0x4e21, 0x0, 'sh\x00', 0x2b, 0xd, 0x53}, 0x2c) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000480)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03031b003000320006006300000000442f"], 0x76) 36.228817528s ago: executing program 1 (id=1129): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000050100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000001000000000000000000000000000000dd020000000000000000000000000000000000000000000044010500ac141438000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ffffffff000000000000000000000000000000003200000000000000000000000000000000000000000000000200000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002"], 0x1fc}}, 0x0) 36.10953923s ago: executing program 2 (id=1130): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000400)) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x40, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x17}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001080}, 0x40004) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000400}, 0x2000c024) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0xde, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0xa8, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc, 0x57}}]}, @hopopts={0x3a, 0x0, '\x00', [@ra={0x5, 0x2, 0x8000}, @pad1]}, @srh={0x21, 0x8, 0x4, 0x4, 0xa, 0x0, 0x2b, [@local, @dev={0xfe, 0x80, '\x00', 0x23}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x66}]}}}}}}}, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000875300000000000000005f00000000000100000000200002000a12000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x1000) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x8c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2f6}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2004c004}, 0x44800) (async) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x320, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0x46, 0x3, "abde06cd6506f5793084dee3c15c3fe4a2803a7e0eee48a62366d1b814e979ed4767183e27d03f01e36ac75ed964c32ea42994fc0f97396bd268a8a4d1aa8eb46f09"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x35b}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0xcd, 0x3, "af0df80c0e1a950f14ec174f4382b7f6c32bd8bd230b15e6d2869e633097fb8b4b71092162a17a2f3410b21a7f3988e5c3aa5a6f1e406fd73692dc32ba6735e4033e833ae35185787bd38fb5418cd7e79affc6640dc3a5688e6dde3cdc3806f2e6e33238eb9fdba964fb71af2c91ba50dc8bab4886f3d627458dcce398b2eb6fb694dd0b1c865c8ffcf32e111d8aef51d92f94e0b1e0f0b77ef537df687f4ae850d893520b2f1cebab95f10dcbdca13821a56239a6dc046009a788d08ed176af26826e93f43d2a3ac3"}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb482}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0x194, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x100, 0x5, @empty, 0xf9d50}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10, @loopback, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x60000}, 0x10044045) 35.986287104s ago: executing program 3 (id=1131): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x6, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x0, 0x5, 0x3, 0x9}, 0x50) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0x6}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfe, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x4a99972ad10d7a14, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000000)=r11, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) 22.252421606s ago: executing program 1 (id=1132): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)}}, {{&(0x7f0000000880)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000080)="4be1e90000000000006661fc6cb2fa10a26c59c7809ebb53d2ec08d907e59a2609d2b0d4b191ae712a68c6bb42d148c5db0c95a340ad58a716d5a0df1a10a4feafae5fd86ced6ea9c4abe469bff58e3332c719b3adf7ff08c0fb22f5ab04c3ca22345e91d6e5acf026fe694630", 0x6d}], 0x1}}], 0x2, 0x4000) shutdown(r0, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @private1}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa380800450000b0000000000011907800000000ffffffff00004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dcef13774fa6c0000e8000000000004000000000000000000000000c4fba600f39cb307ed000000cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x3, 0x7}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x3, 0x7}, 0xe3, 0x1, 0x0, 0x7, 0xff7, 0xc, 0x1, 0x14, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=@newtfilter={0x118, 0x2c, 0x300, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xe8, 0x2, [@TCA_BASIC_EMATCHES={0xe4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd7f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}, @TCA_EMATCH_TREE_LIST={0xa0, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x3ff, 0x4, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7015}, {0xc6, 0x1ff, 0x1, 0x8}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0xcd}, {0x8, 0x80000001, 0x4, 0x40}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0xbc1}, {0x3, 0x7fff, 0x2000, 0x3, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x400}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xfff7}, {0x0, 0x9, 0x1, 0x4, 0xf, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x38}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0x6}, {0x6, 0x7fff, 0x10000, 0x2}}}]}]}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e23, @remote}, 0x2, 0x2, 0x1, 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1, 0x0, 0xfffffffffffffd8d}, 0x4005) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 0s ago: executing program 32 (id=1127): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000150001"], 0x14}}, 0x880) sendmsg$sock(r0, &(0x7f0000000800)={&(0x7f0000000100)=@phonet={0x23, 0x7f, 0x9, 0x3}, 0x80, 0x0}, 0x44000) kernel console output (not intermixed with test programs): s mode [ 92.840000][ T5631] veth1_macvtap: entered promiscuous mode [ 92.842651][ T5624] veth0_macvtap: entered promiscuous mode [ 92.861271][ T5632] veth0_vlan: entered promiscuous mode [ 92.866329][ T4935] Bluetooth: hci1: command tx timeout [ 92.866372][ T4935] Bluetooth: hci0: command tx timeout [ 92.888511][ T5624] veth1_macvtap: entered promiscuous mode [ 92.889766][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.889784][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.946424][ T5626] Bluetooth: hci2: command tx timeout [ 92.971704][ T5632] veth1_vlan: entered promiscuous mode [ 93.004443][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.004468][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.026754][ T5626] Bluetooth: hci4: command tx timeout [ 93.026791][ T5626] Bluetooth: hci3: command tx timeout [ 93.043568][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.094986][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.109730][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.158618][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.182148][ T5632] veth0_macvtap: entered promiscuous mode [ 93.198048][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.198128][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.198188][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.198231][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.198273][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.198315][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.230487][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.232077][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.297216][ T5632] veth1_macvtap: entered promiscuous mode [ 93.460401][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.471222][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.531053][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.538193][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.538245][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.573925][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 93.626411][ T1417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.626462][ T1417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.626500][ T1417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.626538][ T1417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.681288][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.681311][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.683377][ T5819] veth0: entered promiscuous mode [ 93.770520][ T5823] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 93.815099][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.815120][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.856892][ T5818] veth0: left promiscuous mode [ 93.883394][ T1417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.883434][ T1417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.015651][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.015675][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.111059][ T5827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 94.131853][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.131876][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.163569][ T5827] netlink: 'syz.3.10': attribute type 30 has an invalid length. [ 94.163597][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 94.305566][ T5829] Bluetooth: MGMT ver 1.23 [ 94.631749][ T5839] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.5'. [ 94.632050][ T5839] 0XD: renamed from gretap0 (while UP) [ 94.660593][ T5839] 0XD: entered allmulticast mode [ 94.684862][ T5842] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12'. [ 94.773778][ T5846] Zero length message leads to an empty skb [ 94.785135][ T5843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.898442][ T5854] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 95.159360][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 95.202381][ T5860] netlink: 'syz.2.17': attribute type 1 has an invalid length. [ 95.300920][ T5863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 95.522081][ T5860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'. [ 95.694752][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 96.642555][ T5895] syzkaller1: entered promiscuous mode [ 96.642580][ T5895] syzkaller1: entered allmulticast mode [ 96.777813][ T5902] netlink: 'syz.3.26': attribute type 2 has an invalid length. [ 96.816762][ T5899] syzkaller0: entered promiscuous mode [ 96.816787][ T5899] syzkaller0: entered allmulticast mode [ 97.225869][ T5918] openvswitch: netlink: Flow key attr not present in new flow. [ 97.375140][ T5918] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.405908][ T5918] bond1: (slave lo): Enslaving as an active interface with an up link [ 97.411722][ T5918] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 98.242906][ T5951] netlink: 'syz.2.40': attribute type 1 has an invalid length. [ 98.389681][ T5951] syzkaller0: entered promiscuous mode [ 98.389711][ T5951] syzkaller0: entered allmulticast mode [ 98.518319][ T5959] lo: entered allmulticast mode [ 98.727343][ T5968] __nla_validate_parse: 9 callbacks suppressed [ 98.727365][ T5968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.46'. [ 98.882798][ T5971] syzkaller1: entered promiscuous mode [ 98.882822][ T5971] syzkaller1: entered allmulticast mode [ 98.885210][ T5957] lo: left allmulticast mode [ 98.905594][ T5974] netlink: 'syz.1.48': attribute type 1 has an invalid length. [ 98.905617][ T5974] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.48'. [ 98.924987][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'. [ 99.064549][ T1028] IPVS: starting estimator thread 0... [ 99.109325][ T5985] netlink: 'syz.1.53': attribute type 28 has an invalid length. [ 99.109363][ T5985] netlink: 'syz.1.53': attribute type 3 has an invalid length. [ 99.109377][ T5985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.53'. [ 99.115597][ T5986] netlink: 'syz.1.53': attribute type 28 has an invalid length. [ 99.115620][ T5986] netlink: 'syz.1.53': attribute type 3 has an invalid length. [ 99.115633][ T5986] netlink: 132 bytes leftover after parsing attributes in process `syz.1.53'. [ 99.159048][ T5983] IPVS: using max 24 ests per chain, 57600 per kthread [ 99.416473][ T6001] Bluetooth: hci0: unsupported parameter 5135 [ 99.416503][ T6001] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 99.471536][ T6003] syz.0.60 uses obsolete (PF_INET,SOCK_PACKET) [ 99.781855][ T6012] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 99.898089][ T6018] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 99.956873][ T6028] netlink: 'syz.3.64': attribute type 10 has an invalid length. [ 99.956897][ T6028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.64'. [ 99.963602][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 99.963628][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 99.963657][ T6029] netlink: 'syz.4.68': attribute type 11 has an invalid length. [ 99.963672][ T6029] netlink: 'syz.4.68': attribute type 14 has an invalid length. [ 100.087843][ T6028] dummy0: entered promiscuous mode [ 100.111840][ T6032] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 100.113851][ T6035] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 100.174044][ T6031] netlink: 'syz.1.66': attribute type 13 has an invalid length. [ 100.309050][ T6039] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 100.756250][ T6075] warning: `syz.2.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.908063][ T6081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 101.069468][ T31] audit: type=1804 audit(1790934515.436:2): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.85" name="/newroot/13/cgroup.controllers" dev="tmpfs" ino=85 res=1 errno=0 [ 101.071569][ T31] audit: type=1800 audit(1790934515.436:3): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.85" name="cgroup.controllers" dev="tmpfs" ino=85 res=0 errno=0 [ 101.328354][ T6103] ip_tables: iptables: counters copy to user failed while replacing table [ 101.583992][ T6108] vlan2: entered allmulticast mode [ 101.584017][ T6108] bond0: entered allmulticast mode [ 101.584032][ T6108] bond_slave_0: entered allmulticast mode [ 101.584050][ T6108] bond_slave_1: entered allmulticast mode [ 101.653194][ T6108] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 101.952762][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 102.113450][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 102.408926][ T6139] nbd: socks must be embedded in a SOCK_ITEM attr [ 102.409641][ T6139] block nbd1: shutting down sockets [ 102.664171][ T6145] IPVS: Scheduler module ip_vs_sip not found [ 102.674504][ T6146] veth3: entered allmulticast mode [ 102.742956][ T6156] xt_l2tp: missing protocol rule (udp|l2tpip) [ 102.946369][ T1028] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.946423][ T1028] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.946462][ T1028] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.946526][ T1028] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.757170][ T6201] __nla_validate_parse: 39 callbacks suppressed [ 103.757195][ T6201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.114'. [ 104.098378][ T6220] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 104.176120][ T6222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.118'. [ 104.234836][ T6219] x_tables: duplicate underflow at hook 1 [ 104.270054][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 104.298243][ T6224] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.635094][ T6219] syz.4.117 (6219) used greatest stack depth: 17344 bytes left [ 104.843162][ T6241] validate_nla: 1 callbacks suppressed [ 104.843182][ T6241] netlink: 'syz.3.121': attribute type 1 has an invalid length. [ 105.922785][ T6278] syzkaller0: entered promiscuous mode [ 105.922810][ T6278] syzkaller0: entered allmulticast mode [ 106.309035][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 106.421607][ T6304] IPv6: NLM_F_REPLACE set, but no existing node found! [ 107.798934][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 107.798961][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 108.139098][ T6363] bridge0: port 3(syz_tun) entered blocking state [ 108.140860][ T6363] bridge0: port 3(syz_tun) entered disabled state [ 108.141100][ T6363] syz_tun: entered allmulticast mode [ 108.168786][ T6363] syz_tun: entered promiscuous mode [ 108.169580][ T6363] bridge0: port 3(syz_tun) entered blocking state [ 108.169712][ T6363] bridge0: port 3(syz_tun) entered forwarding state [ 108.333422][ T6368] pim6reg: entered allmulticast mode [ 108.371048][ T6368] pim6reg: left allmulticast mode [ 108.377097][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.154'. [ 108.790351][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 108.818609][ T6398] netlink: 'syz.4.162': attribute type 10 has an invalid length. [ 108.850352][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 108.872804][ T6401] netlink: 'syz.4.162': attribute type 10 has an invalid length. [ 108.928852][ T6398] team0: Port device dummy0 added [ 108.957114][ T6401] team0: Port device dummy0 removed [ 108.998835][ T6403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.037076][ T50] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.037931][ T304] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.037975][ T304] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.038011][ T304] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.095444][ T6410] FAULT_INJECTION: forcing a failure. [ 109.095444][ T6410] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.095493][ T6410] CPU: 0 UID: 0 PID: 6410 Comm: syz.1.166 Not tainted syzkaller #0 PREEMPT(full) [ 109.095533][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.095561][ T6410] Call Trace: [ 109.095569][ T6410] [ 109.095579][ T6410] dump_stack_lvl+0xe8/0x150 [ 109.095624][ T6410] should_fail_ex+0x410/0x560 [ 109.095655][ T6410] _copy_from_user+0x2d/0xb0 [ 109.095685][ T6410] ___sys_sendmsg+0x1c6/0x360 [ 109.095718][ T6410] ? __lock_acquire+0x747/0x2de0 [ 109.095744][ T6410] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.095811][ T6410] ? __fget_files+0x2a/0x420 [ 109.095841][ T6410] ? __fget_files+0x3a2/0x420 [ 109.095883][ T6410] __x64_sys_sendmsg+0x1b1/0x290 [ 109.095916][ T6410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.095967][ T6410] do_syscall_64+0x166/0x520 [ 109.095997][ T6410] ? trace_irq_disable+0x3b/0x140 [ 109.096018][ T6410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.096042][ T6410] ? clear_bhb_loop+0x70/0xc0 [ 109.096078][ T6410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.096100][ T6410] RIP: 0033:0x7f3afc19e159 [ 109.096126][ T6410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.096144][ T6410] RSP: 002b:00007f3afd015028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.096172][ T6410] RAX: ffffffffffffffda RBX: 00007f3afc425fa0 RCX: 00007f3afc19e159 [ 109.096188][ T6410] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000003 [ 109.096202][ T6410] RBP: 00007f3afd015090 R08: 0000000000000000 R09: 0000000000000000 [ 109.096216][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.096230][ T6410] R13: 00007f3afc426038 R14: 00007f3afc425fa0 R15: 00007ffdbb7ef038 [ 109.096265][ T6410] [ 109.461184][ T6416] xt_l2tp: invalid flags combination: 8 [ 109.527309][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 109.536248][ T6421] netlink: 'syz.0.168': attribute type 1 has an invalid length. [ 109.880026][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 109.966769][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.172'. [ 109.989440][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.172'. [ 110.060538][ T4935] Bluetooth: hci1: connection err: -111 [ 110.122161][ T6444] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.135521][ T6444] team0: Device ipvlan2 is already an upper device of the team interface [ 110.490595][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'. [ 110.514073][ T6456] veth1_to_team: entered promiscuous mode [ 110.518928][ T6456] gretap0: entered promiscuous mode [ 110.530781][ T6456] hsr1: entered promiscuous mode [ 110.545893][ T6459] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 110.546133][ T6459] netlink: 224 bytes leftover after parsing attributes in process `syz.3.178'. [ 110.642942][ T6460] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 110.642967][ T6460] netlink: 224 bytes leftover after parsing attributes in process `syz.3.178'. [ 110.877750][ T6485] FAULT_INJECTION: forcing a failure. [ 110.877750][ T6485] name failslab, interval 1, probability 0, space 0, times 1 [ 110.877810][ T6485] CPU: 1 UID: 0 PID: 6485 Comm: syz.2.180 Not tainted syzkaller #0 PREEMPT(full) [ 110.877833][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.877847][ T6485] Call Trace: [ 110.877856][ T6485] [ 110.877865][ T6485] dump_stack_lvl+0xe8/0x150 [ 110.877913][ T6485] should_fail_ex+0x410/0x560 [ 110.877941][ T6485] ? __alloc_skb+0x1db/0x7a0 [ 110.877967][ T6485] should_failslab+0xa8/0x100 [ 110.877995][ T6485] ? __alloc_skb+0x1db/0x7a0 [ 110.878018][ T6485] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 110.878052][ T6485] ? __alloc_skb+0x18d/0x7a0 [ 110.878078][ T6485] ? __alloc_skb+0x1db/0x7a0 [ 110.878122][ T6485] __alloc_skb+0x1db/0x7a0 [ 110.878151][ T6485] netlink_sendmsg+0x5d4/0xb40 [ 110.878183][ T6485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.878212][ T6485] ? apparmor_socket_sendmsg+0x98/0x360 [ 110.878238][ T6485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.878258][ T6485] sock_sendmsg_nosec+0x14e/0x190 [ 110.878302][ T6485] ____sys_sendmsg+0x54e/0x850 [ 110.878337][ T6485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.878374][ T6485] ? import_iovec+0x73/0xa0 [ 110.878405][ T6485] ___sys_sendmsg+0x2a5/0x360 [ 110.878432][ T6485] ? __lock_acquire+0x747/0x2de0 [ 110.878458][ T6485] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.878523][ T6485] ? __fget_files+0x2a/0x420 [ 110.878551][ T6485] ? __fget_files+0x3a2/0x420 [ 110.878590][ T6485] __x64_sys_sendmsg+0x1b1/0x290 [ 110.878642][ T6485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.878694][ T6485] do_syscall_64+0x166/0x520 [ 110.878725][ T6485] ? trace_irq_disable+0x3b/0x140 [ 110.878746][ T6485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.878768][ T6485] ? clear_bhb_loop+0x70/0xc0 [ 110.878796][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.878818][ T6485] RIP: 0033:0x7f097959e159 [ 110.878847][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.878870][ T6485] RSP: 002b:00007f097a4e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.878897][ T6485] RAX: ffffffffffffffda RBX: 00007f0979825fa0 RCX: 00007f097959e159 [ 110.878914][ T6485] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000003 [ 110.878927][ T6485] RBP: 00007f097a4e3090 R08: 0000000000000000 R09: 0000000000000000 [ 110.878940][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.878953][ T6485] R13: 00007f0979826038 R14: 00007f0979825fa0 R15: 00007ffd3f1f1928 [ 110.878987][ T6485] [ 111.269207][ T6458] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 111.694100][ T6501] netlink: 'syz.4.184': attribute type 21 has an invalid length. [ 111.797193][ T6501] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.184'. [ 112.079539][ T6517] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 112.190320][ T6517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.252575][ T6525] bond2: (slave geneve2): making interface the new active one [ 112.272568][ T6525] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 112.466896][ T6538] syzkaller0: entered promiscuous mode [ 112.466926][ T6538] syzkaller0: entered allmulticast mode [ 112.666504][ T6541] FAULT_INJECTION: forcing a failure. [ 112.666504][ T6541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.666541][ T6541] CPU: 1 UID: 0 PID: 6541 Comm: syz.2.192 Not tainted syzkaller #0 PREEMPT(full) [ 112.666566][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.666578][ T6541] Call Trace: [ 112.666586][ T6541] [ 112.666596][ T6541] dump_stack_lvl+0xe8/0x150 [ 112.666633][ T6541] should_fail_ex+0x410/0x560 [ 112.666664][ T6541] _copy_from_iter+0x1d3/0x1660 [ 112.666690][ T6541] ? __alloc_skb+0x27a/0x7a0 [ 112.666717][ T6541] ? __alloc_skb+0x27a/0x7a0 [ 112.666745][ T6541] ? __alloc_skb+0x27a/0x7a0 [ 112.666770][ T6541] ? __pfx__copy_from_iter+0x10/0x10 [ 112.666793][ T6541] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 112.666827][ T6541] ? __alloc_skb+0x27a/0x7a0 [ 112.666850][ T6541] ? __alloc_skb+0x27a/0x7a0 [ 112.666881][ T6541] ? netlink_sendmsg+0x650/0xb40 [ 112.666903][ T6541] ? skb_put+0x112/0x210 [ 112.666932][ T6541] netlink_sendmsg+0x6c0/0xb40 [ 112.666965][ T6541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.666996][ T6541] ? apparmor_socket_sendmsg+0x98/0x360 [ 112.667023][ T6541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.667044][ T6541] sock_sendmsg_nosec+0x14e/0x190 [ 112.667082][ T6541] ____sys_sendmsg+0x54e/0x850 [ 112.667118][ T6541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.667158][ T6541] ? import_iovec+0x73/0xa0 [ 112.667190][ T6541] ___sys_sendmsg+0x2a5/0x360 [ 112.667226][ T6541] ? __lock_acquire+0x747/0x2de0 [ 112.667253][ T6541] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.667322][ T6541] ? __fget_files+0x2a/0x420 [ 112.667352][ T6541] ? __fget_files+0x3a2/0x420 [ 112.667392][ T6541] __x64_sys_sendmsg+0x1b1/0x290 [ 112.667423][ T6541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.667475][ T6541] do_syscall_64+0x166/0x520 [ 112.667506][ T6541] ? trace_irq_disable+0x3b/0x140 [ 112.667528][ T6541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.667551][ T6541] ? clear_bhb_loop+0x70/0xc0 [ 112.667579][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.667600][ T6541] RIP: 0033:0x7f097959e159 [ 112.667626][ T6541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.667643][ T6541] RSP: 002b:00007f097a4e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.667667][ T6541] RAX: ffffffffffffffda RBX: 00007f0979825fa0 RCX: 00007f097959e159 [ 112.667683][ T6541] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000003 [ 112.667696][ T6541] RBP: 00007f097a4e3090 R08: 0000000000000000 R09: 0000000000000000 [ 112.667710][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.667723][ T6541] R13: 00007f0979826038 R14: 00007f0979825fa0 R15: 00007ffd3f1f1928 [ 112.667758][ T6541] [ 115.349612][ T6619] __nla_validate_parse: 2 callbacks suppressed [ 115.349635][ T6619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.201'. [ 115.994809][ T6617] bridge0: port 3(bond0) entered blocking state [ 115.994916][ T6617] bridge0: port 3(bond0) entered disabled state [ 115.995118][ T6617] bond0: entered allmulticast mode [ 115.995131][ T6617] bond_slave_0: entered allmulticast mode [ 115.995170][ T6617] bond_slave_1: entered allmulticast mode [ 116.047293][ T6617] bond0: entered promiscuous mode [ 116.047319][ T6617] bond_slave_0: entered promiscuous mode [ 116.047523][ T6617] bond_slave_1: entered promiscuous mode [ 116.093783][ T6617] bridge0: port 3(bond0) entered blocking state [ 116.093913][ T6617] bridge0: port 3(bond0) entered forwarding state [ 116.205081][ T6619] hsr_slave_1 (unregistering): left promiscuous mode [ 116.234520][ T6626] FAULT_INJECTION: forcing a failure. [ 116.234520][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 116.234555][ T6626] CPU: 1 UID: 0 PID: 6626 Comm: syz.3.204 Not tainted syzkaller #0 PREEMPT(full) [ 116.234579][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.234593][ T6626] Call Trace: [ 116.234602][ T6626] [ 116.234611][ T6626] dump_stack_lvl+0xe8/0x150 [ 116.234646][ T6626] should_fail_ex+0x410/0x560 [ 116.234676][ T6626] should_failslab+0xa8/0x100 [ 116.234703][ T6626] ? skb_clone+0x212/0x3a0 [ 116.234735][ T6626] kmem_cache_alloc_noprof+0xa1/0x600 [ 116.234772][ T6626] ? skb_clone+0x212/0x3a0 [ 116.234814][ T6626] skb_clone+0x212/0x3a0 [ 116.234858][ T6626] __netlink_deliver_tap+0x355/0x6e0 [ 116.234907][ T6626] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.234942][ T6626] netlink_deliver_tap+0x19c/0x1b0 [ 116.234979][ T6626] netlink_unicast+0x781/0x940 [ 116.235024][ T6626] netlink_sendmsg+0x813/0xb40 [ 116.235054][ T6626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.235080][ T6626] ? apparmor_socket_sendmsg+0x98/0x360 [ 116.235101][ T6626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.235117][ T6626] sock_sendmsg_nosec+0x14e/0x190 [ 116.235147][ T6626] ____sys_sendmsg+0x54e/0x850 [ 116.235174][ T6626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.235204][ T6626] ? import_iovec+0x73/0xa0 [ 116.235229][ T6626] ___sys_sendmsg+0x2a5/0x360 [ 116.235250][ T6626] ? __lock_acquire+0x747/0x2de0 [ 116.235271][ T6626] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.235323][ T6626] ? __fget_files+0x2a/0x420 [ 116.235346][ T6626] ? __fget_files+0x3a2/0x420 [ 116.235386][ T6626] __x64_sys_sendmsg+0x1b1/0x290 [ 116.235412][ T6626] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.235454][ T6626] do_syscall_64+0x166/0x520 [ 116.235477][ T6626] ? trace_irq_disable+0x3b/0x140 [ 116.235494][ T6626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.235512][ T6626] ? clear_bhb_loop+0x70/0xc0 [ 116.235533][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.235551][ T6626] RIP: 0033:0x7f5ff6b9e159 [ 116.235568][ T6626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.235582][ T6626] RSP: 002b:00007f5ff4df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.235601][ T6626] RAX: ffffffffffffffda RBX: 00007f5ff6e25fa0 RCX: 00007f5ff6b9e159 [ 116.235615][ T6626] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000000000000003 [ 116.235626][ T6626] RBP: 00007f5ff4df6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.235637][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.235648][ T6626] R13: 00007f5ff6e26038 R14: 00007f5ff6e25fa0 R15: 00007ffd4fdffc48 [ 116.235678][ T6626] [ 117.194813][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 117.635489][ T6679] bridge0: port 3(syz_tun) entered disabled state [ 117.652362][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.654041][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.700583][ T6679] dummy0: left promiscuous mode [ 117.840556][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.852517][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.335266][ T6682] tipc: Started in network mode [ 118.335307][ T6682] tipc: Node identity 1000001, cluster identity 4369 [ 118.335321][ T6682] tipc: Node number set to 16777217 [ 118.337004][ T56] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.337088][ T56] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.337201][ T56] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.337258][ T56] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.337359][ T56] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.337430][ T56] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.337525][ T56] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.337689][ T56] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.585149][ T6732] netlink: 156 bytes leftover after parsing attributes in process `syz.4.226'. [ 118.968760][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.3.228'. [ 119.120788][ T6762] netlink: 104 bytes leftover after parsing attributes in process `syz.3.228'. [ 120.244550][ T4935] Bluetooth: hci2: Malformed Event: 0x13 [ 120.257843][ T4935] Bluetooth: hci2: Malformed Event: 0x13 [ 120.829974][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.228'. [ 120.952160][ T6779] ipvlan2: entered promiscuous mode [ 121.197764][ T6798] netlink: 48 bytes leftover after parsing attributes in process `syz.3.239'. [ 121.260582][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 121.260825][ T6811] netlink: 308 bytes leftover after parsing attributes in process `syz.1.242'. [ 122.933528][ T6798] netlink: 48 bytes leftover after parsing attributes in process `syz.3.239'. [ 123.492085][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.496512][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.541376][ T6859] netlink: 'syz.2.254': attribute type 3 has an invalid length. [ 123.541817][ T6855] syzkaller0: entered promiscuous mode [ 123.541837][ T6855] syzkaller0: entered allmulticast mode [ 123.598918][ T6857] netlink: 'syz.3.253': attribute type 4 has an invalid length. [ 123.618507][ T6857] netlink: 'syz.3.253': attribute type 4 has an invalid length. [ 123.882431][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 123.937524][ T6870] netlink: 'syz.3.259': attribute type 4 has an invalid length. [ 123.937548][ T6870] netlink: 152 bytes leftover after parsing attributes in process `syz.3.259'. [ 123.980382][ T1417] IPVS: starting estimator thread 0... [ 123.984566][ T6870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.001554][ T6874] team0: entered allmulticast mode [ 124.001576][ T6874] team_slave_0: entered allmulticast mode [ 124.001602][ T6874] team_slave_1: entered allmulticast mode [ 124.010110][ T6878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.262'. [ 124.010176][ T6878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.262'. [ 124.010226][ T6878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.262'. [ 124.076619][ T6879] IPVS: using max 26 ests per chain, 62400 per kthread [ 124.166563][ T6892] netlink: 'syz.2.264': attribute type 1 has an invalid length. [ 124.675360][ T6910] vxcan2: entered allmulticast mode [ 124.871128][ T6916] syzkaller1: entered promiscuous mode [ 124.871154][ T6916] syzkaller1: entered allmulticast mode [ 125.078015][ T6925] syzkaller1: entered promiscuous mode [ 125.078041][ T6925] syzkaller1: entered allmulticast mode [ 125.801281][ T6943] Bluetooth: hci0: unsupported parameter 5134 [ 125.801305][ T6943] Bluetooth: hci0: unsupported parameter 8192 [ 125.801348][ T6943] Bluetooth: hci0: unsupported parameter 5134 [ 125.801361][ T6943] Bluetooth: hci0: unsupported parameter 8192 [ 125.803805][ T6947] x_tables: duplicate underflow at hook 1 [ 125.857262][ T6948] netlink: 'syz.3.275': attribute type 8 has an invalid length. [ 126.225513][ T6961] __nla_validate_parse: 4 callbacks suppressed [ 126.225534][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'. [ 126.253661][ T6962] netlink: 56 bytes leftover after parsing attributes in process `syz.2.279'. [ 126.286278][ T6963] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 126.286301][ T6963] netlink: 224 bytes leftover after parsing attributes in process `syz.2.279'. [ 126.481038][ T6970] sctp: [Deprecated]: syz.3.280 (pid 6970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.481038][ T6970] Use struct sctp_sack_info instead [ 126.512518][ T6970] syzkaller0: entered promiscuous mode [ 126.512543][ T6970] syzkaller0: entered allmulticast mode [ 126.689896][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 126.714016][ T6978] netlink: 'syz.1.281': attribute type 1 has an invalid length. [ 126.811533][ T6978] bond1: entered promiscuous mode [ 126.812014][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.281'. [ 126.815630][ T6978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.843653][ T6980] bond1: entered allmulticast mode [ 126.891684][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.284'. [ 126.920038][ T6978] bond1: (slave bridge1): making interface the new active one [ 126.920067][ T6978] bridge1: entered promiscuous mode [ 126.920275][ T6978] bridge1: entered allmulticast mode [ 126.922496][ T6978] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 126.932708][ T6986] vlan2: entered allmulticast mode [ 126.932768][ T6986] bond0: entered allmulticast mode [ 126.932807][ T6986] bond_slave_0: entered allmulticast mode [ 126.932843][ T6986] bond_slave_1: entered allmulticast mode [ 128.284515][ T7063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.369013][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.311'. [ 128.635816][ T7071] sock: sock_timestamping_bind_phc: sock not bind to device [ 128.970680][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 129.212615][ T7125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.328'. [ 130.185873][ T7142] netlink: 'syz.3.333': attribute type 23 has an invalid length. [ 130.195345][ T7142] netlink: 'syz.3.333': attribute type 11 has an invalid length. [ 130.348615][ T304] IPVS: starting estimator thread 0... [ 130.406669][ T7153] IPVS: Scheduler module ip_vs_mh not found [ 130.436493][ T7154] IPVS: using max 24 ests per chain, 57600 per kthread [ 130.440307][ T4935] Bluetooth: hci4: link tx timeout [ 130.440591][ T4935] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.484317][ T7156] xt_hashlimit: size too large, truncated to 1048576 [ 130.540279][ T7149] ip_vti0: entered promiscuous mode [ 130.545802][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 130.581239][ T7166] xt_hashlimit: size too large, truncated to 1048576 [ 130.690489][ T7158] IPVS: Scheduler module ip_vs_mh not found [ 132.039717][ T7153] tipc: Enabling of bearer rejected, media not registered [ 132.095153][ T7175] vxcan2: entered allmulticast mode [ 132.112130][ T7162] tipc: Enabling of bearer rejected, media not registered [ 132.253220][ T7180] xt_l2tp: missing protocol rule (udp|l2tpip) [ 132.467593][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 132.561617][ T7197] tipc: Can't bind to reserved service type 1 [ 132.597140][ T7193] xt_hashlimit: size too large, truncated to 1048576 [ 132.788243][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.883145][ T7203] bridge_slave_0 (unregistering): left allmulticast mode [ 132.883173][ T7203] bridge_slave_0 (unregistering): left promiscuous mode [ 132.883359][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.923658][ T7210] __nla_validate_parse: 1 callbacks suppressed [ 132.923681][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'. [ 132.994110][ T7215] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 133.012940][ T7205] netlink: 'syz.2.343': attribute type 29 has an invalid length. [ 133.012962][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'. [ 133.134139][ T7223] netlink: 'syz.4.348': attribute type 10 has an invalid length. [ 133.134164][ T7223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.348'. [ 133.195326][ T7215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.393818][ T7232] netlink: 'syz.0.352': attribute type 4 has an invalid length. [ 133.394331][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 133.399408][ T7234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 133.434421][ T7237] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 133.548771][ T7237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.689331][ T7237] bond2: (slave geneve2): making interface the new active one [ 133.695309][ T7237] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 133.695836][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 133.773835][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 133.831327][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 133.894446][ T7260] netlink: 120 bytes leftover after parsing attributes in process `syz.4.357'. [ 134.109579][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 134.182351][ T7276] gretap1: entered promiscuous mode [ 134.396402][ T304] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 134.396469][ T304] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 134.396504][ T304] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 134.396538][ T304] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 135.332849][ T7304] netlink: 'syz.2.368': attribute type 2 has an invalid length. [ 136.181044][ T7336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.452961][ T7345] syzkaller1: entered promiscuous mode [ 136.452986][ T7345] syzkaller1: entered allmulticast mode [ 137.346393][ T7372] syzkaller0: entered promiscuous mode [ 137.346418][ T7372] syzkaller0: entered allmulticast mode [ 137.420920][ T7376] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 137.574858][ T7376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.076711][ T7391] __nla_validate_parse: 13 callbacks suppressed [ 138.076734][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 138.076751][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 138.076777][ T7391] netlink: 'syz.3.390': attribute type 13 has an invalid length. [ 138.076790][ T7391] netlink: 'syz.3.390': attribute type 12 has an invalid length. [ 138.851864][ T7405] ip6gretap1: entered allmulticast mode [ 138.855140][ T7405] batman_adv: batadv0: Adding interface: ip6gretap1 [ 138.855162][ T7405] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.855197][ T7405] batman_adv: batadv0: Interface activated: ip6gretap1 [ 138.856292][ T7401] netlink: 120 bytes leftover after parsing attributes in process `syz.1.393'. [ 138.860439][ T7403] syzkaller0: entered promiscuous mode [ 138.860505][ T7403] syzkaller0: entered allmulticast mode [ 139.322614][ T7426] netlink: 76 bytes leftover after parsing attributes in process `syz.3.396'. [ 139.353043][ T7423] netlink: 'syz.3.396': attribute type 9 has an invalid length. [ 139.535311][ T7428] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 139.673129][ T7428] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.859841][ T7428] bond3: (slave ip6gretap1): making interface the new active one [ 139.903562][ T7428] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 140.015383][ T7274] Set syz1 is full, maxelem 65536 reached [ 140.152611][ T7441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.402'. [ 140.175242][ T7441] netlink: 'syz.0.402': attribute type 49 has an invalid length. [ 140.299134][ T7441] ip6gretap0: entered promiscuous mode [ 140.299161][ T7441] ip6gretap0: entered allmulticast mode [ 140.389629][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.390881][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.406918][ T7455] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 140.406943][ T7455] batman_adv: batadv0: Removing interface: ip6gretap1 [ 140.878190][ T7482] netlink: 'syz.2.414': attribute type 1 has an invalid length. [ 140.953900][ T7477] vlan2: entered promiscuous mode [ 140.953924][ T7477] bridge0: entered promiscuous mode [ 141.153372][ T7482] gretap1: entered allmulticast mode [ 141.682383][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 141.694946][ T7517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.419'. [ 141.715634][ T7517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.735386][ T7517] netlink: 'syz.1.419': attribute type 10 has an invalid length. [ 141.804140][ T7517] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 141.818730][ T7517] team0: Port device wlan0 added [ 141.969456][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 142.043946][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 142.078203][ T7531] netlink: 7 bytes leftover after parsing attributes in process `syz.1.423'. [ 142.573830][ T7551] syzkaller1: entered promiscuous mode [ 142.573855][ T7551] syzkaller1: entered allmulticast mode [ 144.432994][ T7649] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 144.447591][ T7649] bond3 (unregistering): Released all slaves [ 144.785547][ T7653] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 144.810953][ T7653] bond3 (unregistering): Released all slaves [ 145.009171][ T7679] netlink: 'syz.0.451': attribute type 1 has an invalid length. [ 145.053598][ T7678] __nla_validate_parse: 7 callbacks suppressed [ 145.053619][ T7678] netlink: 27 bytes leftover after parsing attributes in process `syz.3.449'. [ 145.093935][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 145.144339][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 145.185234][ T7689] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.199145][ T7687] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.284168][ T7697] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 145.395350][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 145.474510][ T7709] netlink: 52 bytes leftover after parsing attributes in process `syz.4.452'. [ 145.592615][ T7700] bond6: (slave bridge2): Enslaving as a backup interface with an up link [ 145.647602][ T7704] macvlan2: entered promiscuous mode [ 145.647628][ T7704] macvlan2: entered allmulticast mode [ 145.797326][ T7721] bond7: option min_links: invalid value (18446744073709551360) [ 145.797356][ T7721] bond7: option min_links: allowed values 0 - 2147483647 [ 145.830938][ T7721] bond7 (unregistering): Released all slaves [ 146.011618][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 146.151515][ T7743] TCP: TCP_TX_DELAY enabled [ 146.219484][ T7726] team0: Port device team_slave_0 removed [ 146.320242][ T7750] netlink: 'syz.2.463': attribute type 10 has an invalid length. [ 146.325445][ T7730] syzkaller1: entered promiscuous mode [ 146.325470][ T7730] syzkaller1: entered allmulticast mode [ 146.403583][ T7759] netlink: 'syz.2.463': attribute type 10 has an invalid length. [ 146.500372][ T7765] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 146.585093][ T7750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.596688][ T7750] team0: Port device netdevsim1 added [ 146.654024][ T7759] team0: Port device netdevsim1 removed [ 146.663384][ T7759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.679814][ T7759] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 146.683117][ T7759] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 146.684233][ T7734] syzkaller1: entered promiscuous mode [ 146.684254][ T7734] syzkaller1: entered allmulticast mode [ 146.786290][ T56] wlan0: Trigger new scan to find an IBSS to join [ 146.813427][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.467'. [ 146.943744][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 146.943773][ T7769] netlink: 2 bytes leftover after parsing attributes in process `syz.4.467'. [ 146.988629][ T7769] netlink: 165 bytes leftover after parsing attributes in process `syz.4.467'. [ 147.231677][ T7787] IPVS: lc: TCP 127.0.0.1:5376 - no destination available [ 147.371662][ T7800] netlink: 'syz.0.477': attribute type 1 has an invalid length. [ 147.372004][ T7799] netlink: 'syz.0.477': attribute type 1 has an invalid length. [ 147.521808][ T7808] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.537884][ T7808] bond2: (slave bond3): making interface the new active one [ 147.540742][ T7808] bond2: (slave bond3): Enslaving as an active interface with an up link [ 147.596960][ T7799] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 147.619458][ T7808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.642265][ T7817] Bluetooth: hci0: unsupported parameter 5135 [ 147.642292][ T7817] Bluetooth: hci0: unsupported parameter 8192 [ 147.642305][ T7817] Bluetooth: hci0: unsupported parameter 5135 [ 147.642318][ T7817] Bluetooth: hci0: unsupported parameter 8192 [ 148.134917][ T7828] tipc: Invalid UDP bearer configuration [ 148.134977][ T7828] tipc: Enabling of bearer rejected, failed to enable media [ 148.242306][ T7834] netlink: Unknown conntrack attr (0) [ 148.338715][ T7836] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 148.338743][ T7836] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 148.400094][ T7840] syz.0.488: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 148.400322][ T7840] CPU: 0 UID: 0 PID: 7840 Comm: syz.0.488 Not tainted syzkaller #0 PREEMPT(full) [ 148.400348][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.400363][ T7840] Call Trace: [ 148.400371][ T7840] [ 148.400381][ T7840] dump_stack_lvl+0xe8/0x150 [ 148.400420][ T7840] warn_alloc+0x24d/0x270 [ 148.400459][ T7840] ? kasan_save_track+0x4f/0x80 [ 148.400481][ T7840] ? kasan_save_track+0x3e/0x80 [ 148.400507][ T7840] ? __pfx_warn_alloc+0x10/0x10 [ 148.400540][ T7840] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 148.400569][ T7840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.400614][ T7840] __vmalloc_node_range_noprof+0x127/0x1540 [ 148.400673][ T7840] ? rcu_is_watching+0x16/0xb0 [ 148.400705][ T7840] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.400739][ T7840] ? __kmalloc_cache_noprof+0x321/0x600 [ 148.400761][ T7840] ? __kmalloc_cache_noprof+0x14d/0x600 [ 148.400782][ T7840] ? xskq_create+0x56/0x220 [ 148.400816][ T7840] xskq_create+0x148/0x220 [ 148.400845][ T7840] ? xsk_init_queue+0x8a/0xe0 [ 148.400874][ T7840] xsk_init_queue+0x8a/0xe0 [ 148.400904][ T7840] xsk_setsockopt+0x5e0/0x960 [ 148.400941][ T7840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.400967][ T7840] ? __pfx_aa_sk_perm+0x10/0x10 [ 148.400998][ T7840] ? aa_sock_opt_perm+0x142/0x1e0 [ 148.401033][ T7840] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 148.401061][ T7840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.401091][ T7840] do_sock_setsockopt+0x17c/0x1b0 [ 148.401126][ T7840] __x64_sys_setsockopt+0x13d/0x1b0 [ 148.401162][ T7840] do_syscall_64+0x166/0x520 [ 148.401196][ T7840] ? trace_irq_disable+0x3b/0x140 [ 148.401218][ T7840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.401241][ T7840] ? clear_bhb_loop+0x70/0xc0 [ 148.401270][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.401293][ T7840] RIP: 0033:0x7f810e79e159 [ 148.401314][ T7840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.401333][ T7840] RSP: 002b:00007f810c9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.401356][ T7840] RAX: ffffffffffffffda RBX: 00007f810ea25fa0 RCX: 00007f810e79e159 [ 148.401374][ T7840] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 148.401388][ T7840] RBP: 00007f810e83506b R08: 0000000000000004 R09: 0000000000000000 [ 148.401402][ T7840] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.401415][ T7840] R13: 00007f810ea26038 R14: 00007f810ea25fa0 R15: 00007ffd238a2f18 [ 148.401453][ T7840] [ 148.401587][ T7840] Mem-Info: [ 148.401603][ T7840] active_anon:5551 inactive_anon:0 isolated_anon:0 [ 148.401603][ T7840] active_file:0 inactive_file:43316 isolated_file:0 [ 148.401603][ T7840] unevictable:0 dirty:50 writeback:0 [ 148.401603][ T7840] slab_reclaimable:10617 slab_unreclaimable:96895 [ 148.401603][ T7840] mapped:30366 shmem:573 pagetables:1208 [ 148.401603][ T7840] sec_pagetables:0 bounce:0 [ 148.401603][ T7840] kernel_misc_reclaimable:0 [ 148.401603][ T7840] free:1305567 free_pcp:15235 free_cma:0 [ 148.401661][ T7840] Node 0 active_anon:22204kB inactive_anon:0kB active_file:0kB inactive_file:173068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121464kB dirty:200kB writeback:0kB shmem:2292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13412kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 148.401722][ T7840] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 148.401778][ T7840] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 148.401846][ T7840] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 148.401889][ T7840] Node 0 DMA32 free:1265260kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22204kB inactive_anon:0kB active_file:0kB inactive_file:173068kB unevictable:0kB writepending:200kB zspages:0kB present:3129332kB managed:2547148kB mlocked:0kB bounce:0kB free_pcp:60940kB local_pcp:38472kB free_cma:0kB [ 148.401963][ T7840] lowmem_reserve[]: 0 0 0 0 0 [ 148.402003][ T7840] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 148.402143][ T7840] lowmem_reserve[]: 0 0 0 0 0 [ 148.402188][ T7840] Node 1 Normal free:3941648kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 148.402253][ T7840] lowmem_reserve[]: 0 0 0 0 0 [ 148.402295][ T7840] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 148.402433][ T7840] Node 0 DMA32: 349*4kB (UME) 466*8kB (UME) 214*16kB (UME) 121*32kB (UME) 87*64kB (UME) 51*128kB (ME) 40*256kB (UME) 27*512kB (UM) 18*1024kB (UM) 9*2048kB (UM) 288*4096kB (UM) = 1265092kB [ 148.402622][ T7840] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 148.402739][ T7840] Node 1 Normal: 2*4kB (M) 7*8kB (UM) 5*16kB (UM) 6*32kB (UM) 5*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3941648kB [ 148.402933][ T7840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.402952][ T7840] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.402970][ T7840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.402989][ T7840] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.403007][ T7840] 43885 total pagecache pages [ 148.403023][ T7840] 0 pages in swap cache [ 148.403031][ T7840] Free swap = 124996kB [ 148.403040][ T7840] Total swap = 124996kB [ 148.403050][ T7840] 2097051 pages RAM [ 148.403058][ T7840] 0 pages HighMem/MovableOnly [ 148.403066][ T7840] 428648 pages reserved [ 148.403075][ T7840] 0 pages cma reserved [ 148.651977][ T7836] veth1: entered promiscuous mode [ 148.809350][ T7836] vlan2: entered promiscuous mode [ 149.781082][ T7872] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 149.833003][ T56] wlan0: Trigger new scan to find an IBSS to join [ 150.249977][ T7890] __nla_validate_parse: 11 callbacks suppressed [ 150.250001][ T7890] netlink: 4416 bytes leftover after parsing attributes in process `syz.0.498'. [ 150.252769][ T7884] geneve3: entered promiscuous mode [ 150.740673][ T56] wlan0: Creating new IBSS network, BSSID a2:01:76:3a:38:6f [ 151.021829][ T7927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.506'. [ 151.025592][ T7924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.506'. [ 151.290853][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 151.335196][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 151.535403][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 152.498458][ T7974] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 152.541858][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 154.446595][ T8015] netlink: 92 bytes leftover after parsing attributes in process `syz.4.529'. [ 154.475818][ T8016] netlink: 92 bytes leftover after parsing attributes in process `syz.4.529'. [ 154.591589][ T8019] pim6reg: entered allmulticast mode [ 154.594462][ T8019] pim6reg: left allmulticast mode [ 154.671561][ T8023] xt_ecn: cannot match TCP bits for non-tcp packets [ 154.829869][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 154.834292][ T8012] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 156.474180][ T8031] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 156.752282][ T8038] batadv0: entered promiscuous mode [ 156.752309][ T8038] batadv0: entered allmulticast mode [ 156.755318][ T8038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.886505][ T8056] ip_tables: iptables: counters copy to user failed while replacing table [ 156.886940][ T8056] ip_tables: iptables: counters copy to user failed while replacing table [ 156.895267][ T8051] netlink: 'syz.1.536': attribute type 32 has an invalid length. [ 156.909400][ T8056] ip_tables: iptables: counters copy to user failed while replacing table [ 156.910585][ T8056] ip_tables: iptables: counters copy to user failed while replacing table [ 156.942114][ T8056] ip_tables: iptables: counters copy to user failed while replacing table [ 156.942553][ T8056] ip_tables: iptables: counters copy to user failed while replacing table [ 156.942897][ T8056] ip_tables: iptables: counters copy to user failed while replacing table [ 156.979977][ T8050] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 156.980971][ T8056] ip_tables: iptables: counters copy to user failed while replacing table [ 156.981380][ T8056] ip_tables: iptables: counters copy to user failed while replacing table [ 156.981767][ T8056] ip_tables: iptables: counters copy to user failed while replacing table [ 157.337779][ T8074] xt_hashlimit: size too large, truncated to 1048576 [ 157.408715][ T8077] @0: renamed from bond_slave_1 (while UP) [ 157.930693][ T8096] __nla_validate_parse: 1 callbacks suppressed [ 157.930713][ T8096] netlink: 104 bytes leftover after parsing attributes in process `syz.3.545'. [ 158.497703][ T8130] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 158.587539][ T8139] Bluetooth: hci0: unsupported parameter 5135 [ 158.587565][ T8139] Bluetooth: hci0: unsupported parameter 8192 [ 158.587578][ T8139] Bluetooth: hci0: unsupported parameter 5135 [ 158.587591][ T8139] Bluetooth: hci0: unsupported parameter 8192 [ 158.732470][ T8143] vlan2: entered promiscuous mode [ 158.732495][ T8143] macvlan0: entered promiscuous mode [ 159.045609][ T8157] netlink: 112 bytes leftover after parsing attributes in process `syz.0.558'. [ 159.229234][ T8157] syzkaller0: entered promiscuous mode [ 159.229264][ T8157] syzkaller0: entered allmulticast mode [ 159.292539][ T8130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.418021][ T8203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.566'. [ 160.418048][ T8203] nbd: socks must be embedded in a SOCK_ITEM attr [ 162.404403][ T8195] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 162.417816][ T8197] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 162.465386][ T8211] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 162.933441][ T8246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.576'. [ 163.131049][ T8255] tipc: Enabled bearer , priority 0 [ 163.188702][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 163.193433][ T8255] syzkaller0: entered promiscuous mode [ 163.193461][ T8255] syzkaller0: entered allmulticast mode [ 163.194589][ T8255] tipc: Resetting bearer [ 163.256231][ T8252] tipc: Resetting bearer [ 163.703607][ T8283] netlink: 100 bytes leftover after parsing attributes in process `syz.4.583'. [ 163.872187][ T8280] net_ratelimit: 57 callbacks suppressed [ 163.872209][ T8280] netlink: NAT attribute has 1 unknown bytes [ 163.872243][ T8280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.299393][ T8252] tipc: Disabling bearer [ 165.364810][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 165.364854][ T8289] netlink: 224 bytes leftover after parsing attributes in process `syz.1.584'. [ 165.364873][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 165.488764][ T8296] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 165.544901][ T8296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.576223][ T8296] bond4: (slave geneve2): making interface the new active one [ 165.578321][ T8296] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 165.644510][ T8302] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 165.729619][ T8302] bond4: entered promiscuous mode [ 165.730241][ T8302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.764976][ T8302] netlink: 'syz.1.588': attribute type 25 has an invalid length. [ 165.976174][ T8319] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 166.168402][ T8328] syzkaller0: entered promiscuous mode [ 166.168427][ T8328] syzkaller0: entered allmulticast mode [ 166.327479][ T8341] geneve1: entered promiscuous mode [ 166.408540][ T8340] tipc: Started in network mode [ 166.408572][ T8340] tipc: Node identity dea0af78feac, cluster identity 4711 [ 166.409053][ T8340] tipc: Enabled bearer , priority 0 [ 166.493677][ T8347] syzkaller0: entered promiscuous mode [ 166.493708][ T8347] syzkaller0: entered allmulticast mode [ 166.494385][ T8347] tipc: Resetting bearer [ 166.543121][ T8339] tipc: Resetting bearer [ 167.144320][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 167.370551][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 167.441108][ T8381] Cannot find set identified by id 65534 to match [ 168.714160][ T8339] tipc: Disabling bearer [ 168.888119][ T8381] bridge0: port 3(veth1_to_bridge) entered blocking state [ 168.888302][ T8381] bridge0: port 3(veth1_to_bridge) entered disabled state [ 168.888475][ T8381] veth1_to_bridge: entered allmulticast mode [ 168.891408][ T8381] veth1_to_bridge: entered promiscuous mode [ 168.891602][ T8381] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 168.893308][ T8381] bridge0: port 3(veth1_to_bridge) entered blocking state [ 168.893407][ T8381] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 168.896342][ T30] tipc: Node number set to 537702264 [ 169.044343][ T8384] syzkaller0: entered promiscuous mode [ 169.044372][ T8384] syzkaller0: entered allmulticast mode [ 169.113507][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 169.113611][ T8396] netlink: 48 bytes leftover after parsing attributes in process `syz.4.610'. [ 169.374691][ T8400] syzkaller0: entered promiscuous mode [ 169.374718][ T8400] syzkaller0: entered allmulticast mode [ 169.488371][ T8422] sctp: [Deprecated]: syz.3.613 (pid 8422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.488371][ T8422] Use struct sctp_sack_info instead [ 169.490581][ T8422] netlink: 68 bytes leftover after parsing attributes in process `syz.3.613'. [ 169.491525][ T8422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.613'. [ 169.543650][ T8422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.613'. [ 169.545244][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 172.157084][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.619'. [ 172.225230][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 172.240544][ T8459] netlink: 'syz.3.622': attribute type 10 has an invalid length. [ 172.243187][ T8459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.244850][ T8459] team0: Port device netdevsim1 added [ 172.412984][ T8462] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.413941][ T8462] bond5: entered allmulticast mode [ 172.415221][ T8462] team0: Port device bond5 added [ 172.433048][ T8415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.694330][ T8477] x_tables: duplicate underflow at hook 1 [ 172.755232][ T8476] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 172.806017][ T8483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.631'. [ 172.974082][ T8491] syzkaller0: entered promiscuous mode [ 172.974110][ T8491] syzkaller0: entered allmulticast mode [ 173.032083][ T6710] hid-generic 0005:0458:0002.0001: unknown main item tag 0x0 [ 173.076728][ T6710] hid-generic 0005:0458:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 173.693951][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 173.753728][ T8515] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 174.064558][ T8496] bond0: (slave c@0): Releasing backup interface [ 174.079443][ T8496] @0 (unregistering): left promiscuous mode [ 174.079472][ T8496] @0 (unregistering): left allmulticast mode [ 175.214859][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 175.229824][ T4935] block nbd1: Receive control failed (result -1) [ 175.331417][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 175.381571][ T8560] bond3: entered promiscuous mode [ 175.383230][ T8560] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.404480][ T8563] sctp: [Deprecated]: syz.3.648 (pid 8563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.404480][ T8563] Use struct sctp_sack_info instead [ 175.483773][ T8560] bridge1: entered promiscuous mode [ 175.493656][ T8560] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 176.008758][ T8584] 0: renamed from bond_slave_1 (while UP) [ 176.661131][ T8596] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 176.680317][ T8591] syzkaller0: entered promiscuous mode [ 176.680360][ T8591] syzkaller0: entered allmulticast mode [ 177.009999][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 177.010028][ T8615] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 177.172129][ T8625] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.163382][ T8642] syzkaller0: entered promiscuous mode [ 178.163407][ T8642] syzkaller0: entered allmulticast mode [ 178.330333][ T8657] netlink: 132 bytes leftover after parsing attributes in process `syz.4.679'. [ 178.430062][ T8664] netlink: 132 bytes leftover after parsing attributes in process `syz.4.679'. [ 179.021622][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 179.225685][ T8707] syzkaller0: entered promiscuous mode [ 179.225711][ T8707] syzkaller0: entered allmulticast mode [ 179.503362][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 179.503399][ T8721] netlink: 'syz.3.697': attribute type 11 has an invalid length. [ 179.621193][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 179.642785][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.803896][ T8737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.701'. [ 179.821945][ T8736] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.894220][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 179.944875][ T8736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.944902][ T8736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.968170][ T8736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.968199][ T8736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.080283][ T8746] tipc: Enabling of bearer rejected, media not registered [ 180.222868][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.705'. [ 180.308093][ T8756] netlink: 13 bytes leftover after parsing attributes in process `syz.1.711'. [ 180.338731][ T8750] syzkaller0: entered promiscuous mode [ 180.338757][ T8750] syzkaller0: entered allmulticast mode [ 181.569842][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.716'. [ 181.570627][ T8785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.716'. [ 182.066566][ T304] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.504332][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.727'. [ 182.631181][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 182.661595][ T8824] netlink: 'syz.3.726': attribute type 49 has an invalid length. [ 182.761339][ T8830] netlink: 84 bytes leftover after parsing attributes in process `syz.4.729'. [ 183.398702][ T8877] : renamed from vlan0 (while UP) [ 183.592382][ T8889] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.621002][ T8892] x_tables: duplicate underflow at hook 1 [ 183.621093][ T8892] x_tables: duplicate underflow at hook 1 [ 183.621176][ T8892] x_tables: duplicate underflow at hook 1 [ 183.621254][ T8892] x_tables: duplicate underflow at hook 1 [ 183.621332][ T8892] x_tables: duplicate underflow at hook 1 [ 183.621409][ T8892] x_tables: duplicate underflow at hook 1 [ 183.621525][ T8892] x_tables: duplicate underflow at hook 1 [ 183.621603][ T8892] x_tables: duplicate underflow at hook 1 [ 183.621708][ T8892] x_tables: duplicate underflow at hook 1 [ 183.621785][ T8892] x_tables: duplicate underflow at hook 1 [ 183.711880][ T8887] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.962100][ T8905] netlink: 'syz.4.749': attribute type 2 has an invalid length. [ 183.962123][ T8905] netlink: 'syz.4.749': attribute type 1 has an invalid length. [ 183.962137][ T8905] netlink: 224 bytes leftover after parsing attributes in process `syz.4.749'. [ 184.062582][ T8903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.747'. [ 184.334695][ T8916] xt_CT: No such helper "snmp" [ 184.469050][ T8933] xt_l2tp: invalid flags combination: 8 [ 184.725435][ T8935] syzkaller1: entered promiscuous mode [ 184.725461][ T8935] syzkaller1: entered allmulticast mode [ 185.095698][ T8958] wlan1 speed is unknown, defaulting to 1000 [ 185.095805][ T8958] wlan1 speed is unknown, defaulting to 1000 [ 185.148570][ T8958] wlan1 speed is unknown, defaulting to 1000 [ 185.196680][ T8958] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 185.196720][ T8958] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 185.196759][ T8958] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 185.269926][ T8958] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 185.287064][ T8966] Bluetooth: MGMT ver 1.23 [ 185.287987][ T8958] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 185.309339][ T8966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.766'. [ 185.369752][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 185.419956][ T8974] netlink: 72 bytes leftover after parsing attributes in process `syz.0.768'. [ 185.747452][ T8958] wlan1 speed is unknown, defaulting to 1000 [ 185.768954][ T8958] wlan1 speed is unknown, defaulting to 1000 [ 185.792727][ T8958] wlan1 speed is unknown, defaulting to 1000 [ 185.803542][ T8958] wlan1 speed is unknown, defaulting to 1000 [ 185.813765][ T8958] wlan1 speed is unknown, defaulting to 1000 [ 186.050380][ T8990] netlink: 44 bytes leftover after parsing attributes in process `syz.0.774'. [ 186.161843][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 186.162195][ T8989] netlink: 15 bytes leftover after parsing attributes in process `syz.3.772'. [ 186.164304][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 186.164400][ T8989] netlink: 15 bytes leftover after parsing attributes in process `syz.3.772'. [ 186.552554][ T8997] can: request_module (can-proto-4) failed. [ 186.871907][ T9024] wg2 speed is unknown, defaulting to 1000 [ 186.887961][ T9024] wg2 speed is unknown, defaulting to 1000 [ 186.890887][ T9024] wg2 speed is unknown, defaulting to 1000 [ 186.927535][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 186.927573][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.789'. [ 186.959057][ T9033] rdma_rxe: rxe_newlink: failed to add wg2 [ 186.988135][ T1375] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.988185][ T1375] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.988244][ T1375] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.587628][ T9024] infiniband syz1: set down [ 187.587652][ T9024] infiniband syz1: added wg2 [ 187.641052][ T9024] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 187.641094][ T9024] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 187.641136][ T9024] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 187.698950][ T9043] tipc: Enabling of bearer rejected, failed to enable media [ 187.699007][ T6687] wg2 speed is unknown, defaulting to 1000 [ 187.742518][ T9024] RDS/IB: syz1: added [ 187.743118][ T9024] smc: adding ib device syz1 with port count 1 [ 187.743254][ T9024] smc: ib device syz1 port 1 has no pnetid [ 187.747872][ T6687] wg2 speed is unknown, defaulting to 1000 [ 187.777534][ T9024] wg2 speed is unknown, defaulting to 1000 [ 187.970320][ T9054] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 188.174630][ T9066] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 188.191890][ T9024] wg2 speed is unknown, defaulting to 1000 [ 188.204556][ T9059] IPVS: stopping master sync thread 9066 ... [ 188.546469][ T9024] wg2 speed is unknown, defaulting to 1000 [ 188.843149][ T9078] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 188.843191][ T9078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.996655][ T9024] wg2 speed is unknown, defaulting to 1000 [ 189.013171][ T9086] ip_tables: iptables: counters copy to user failed while replacing table [ 189.449063][ T9103] syzkaller1: entered promiscuous mode [ 189.449092][ T9103] syzkaller1: entered allmulticast mode [ 189.628116][ T9111] netlink: 'syz.0.811': attribute type 4 has an invalid length. [ 189.664735][ T9111] netlink: 'syz.0.811': attribute type 4 has an invalid length. [ 189.801569][ T9024] wg2 speed is unknown, defaulting to 1000 [ 190.319793][ T9137] __nla_validate_parse: 5 callbacks suppressed [ 190.319839][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 190.428405][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 190.510007][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 190.805197][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.823'. [ 190.851266][ T9153] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 190.903735][ T9150] xt_CT: No such helper "snmp" [ 191.021686][ T9156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.419814][ T9184] netlink: 356 bytes leftover after parsing attributes in process `syz.1.831'. [ 191.420003][ T9184] netlink: 356 bytes leftover after parsing attributes in process `syz.1.831'. [ 192.150036][ T9203] netlink: 'syz.4.837': attribute type 11 has an invalid length. [ 192.946786][ T141] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 193.843866][ T9238] syzkaller0: entered promiscuous mode [ 193.843891][ T9238] syzkaller0: entered allmulticast mode [ 193.854752][ T9238] netlink: 36 bytes leftover after parsing attributes in process `syz.4.849'. [ 193.960870][ T9243] bond0: (slave vlan1): Enslaving as an active interface with an up link [ 194.033297][ T9247] bridge1: entered promiscuous mode [ 194.033322][ T9247] bridge1: entered allmulticast mode [ 194.051264][ T9247] team0: Port device bridge1 added [ 194.122646][ T9247] bridge0: port 1(team0) entered blocking state [ 194.122817][ T9247] bridge0: port 1(team0) entered disabled state [ 194.123582][ T9247] team0: entered allmulticast mode [ 194.123601][ T9247] team_slave_0: entered allmulticast mode [ 194.123619][ T9247] team_slave_1: entered allmulticast mode [ 194.124086][ T9247] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 194.151858][ T9255] netlink: 'syz.0.853': attribute type 18 has an invalid length. [ 194.184368][ T9247] team0: entered promiscuous mode [ 194.184391][ T9247] team_slave_0: entered promiscuous mode [ 194.184574][ T9247] team_slave_1: entered promiscuous mode [ 194.184740][ T9247] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 194.228831][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 194.249773][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.259533][ T9259] ip6gre1: entered promiscuous mode [ 194.259556][ T9259] ip6gre1: entered allmulticast mode [ 194.331831][ T9258] syzkaller0: entered promiscuous mode [ 194.331856][ T9258] syzkaller0: entered allmulticast mode [ 194.391779][ T9255] xt_CT: No such helper "netbios-ns" [ 194.872269][ T9286] veth1_to_bond: entered allmulticast mode [ 194.901217][ T9286] veth1_to_bond: entered promiscuous mode [ 194.901757][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 194.937607][ T9286] veth1_to_bond (unregistering): left allmulticast mode [ 194.937659][ T9286] veth1_to_bond (unregistering): left promiscuous mode [ 195.043543][ T9298] netlink: 112 bytes leftover after parsing attributes in process `syz.3.862'. [ 195.063724][ T9298] netlink: 'syz.3.862': attribute type 1 has an invalid length. [ 195.088345][ T9286] bond0: (slave bond_slave_1): Releasing backup interface [ 195.149666][ T9290] bridge2: entered promiscuous mode [ 195.258948][ T9301] wlan1 speed is unknown, defaulting to 1000 [ 195.261417][ T9301] wg2 speed is unknown, defaulting to 1000 [ 195.659499][ T9315] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 195.872122][ T9321] __nla_validate_parse: 1 callbacks suppressed [ 195.872143][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 195.896185][ T9321] netlink: 'syz.1.870': attribute type 10 has an invalid length. [ 195.926380][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.157945][ T9331] netlink: 244 bytes leftover after parsing attributes in process `syz.1.872'. [ 196.161541][ T9331] netlink: 'syz.1.872': attribute type 11 has an invalid length. [ 196.547815][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 196.747261][ T9342] IPVS: set_ctl: invalid protocol: 0 172.20.20.17:20002 [ 196.805451][ T9344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.824648][ T9344] netlink: 84 bytes leftover after parsing attributes in process `syz.3.875'. [ 197.202813][ T9359] sit1: entered promiscuous mode [ 197.204197][ T9360] netlink: 14 bytes leftover after parsing attributes in process `syz.3.880'. [ 197.329246][ T9335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.065252][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 198.092769][ T9364] tipc: New replicast peer: 127.0.0.1 [ 198.094040][ T9364] tipc: Enabled bearer , priority 10 [ 198.583739][ T9386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.062341][ T9417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.895'. [ 199.128028][ T9420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.896'. [ 199.128063][ T9420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.896'. [ 199.140433][ T9423] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.170457][ T9420] bridge0: port 3() entered blocking state [ 199.171070][ T9420] bridge0: port 3() entered disabled state [ 199.171234][ T9420] netdevsim netdevsim0 : entered allmulticast mode [ 199.223780][ T9420] netdevsim netdevsim0 : entered promiscuous mode [ 199.244820][ T9427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.898'. [ 199.368905][ T9427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.640667][ T9450] netlink: 'syz.3.905': attribute type 23 has an invalid length. [ 199.687648][ T9455] ip_tables: iptables: counters copy to user failed while replacing table [ 199.688082][ T9455] ip_tables: iptables: counters copy to user failed while replacing table [ 199.688463][ T9455] ip_tables: iptables: counters copy to user failed while replacing table [ 199.694718][ T9455] ip_tables: iptables: counters copy to user failed while replacing table [ 199.695164][ T9455] ip_tables: iptables: counters copy to user failed while replacing table [ 199.703340][ T9455] ip_tables: iptables: counters copy to user failed while replacing table [ 199.713830][ T9455] ip_tables: iptables: counters copy to user failed while replacing table [ 199.763047][ T9460] sctp: [Deprecated]: syz.4.903 (pid 9460) Use of int in maxseg socket option. [ 199.763047][ T9460] Use struct sctp_assoc_value instead [ 199.811009][ T9464] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 199.811129][ T9464] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 199.811242][ T9464] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 199.811348][ T9464] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 199.811448][ T9464] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 199.811594][ T9464] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 199.811697][ T9464] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 199.811803][ T9464] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 199.811906][ T9464] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 200.870447][ T31] audit: type=1804 audit(1790934615.236:4): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.914" name="/newroot/181/cgroup.controllers" dev="tmpfs" ino=944 res=1 errno=0 [ 200.870501][ T31] audit: type=1800 audit(1790934615.236:5): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.914" name="cgroup.controllers" dev="tmpfs" ino=944 res=0 errno=0 [ 200.952214][ T9489] can: request_module (can-proto-0) failed. [ 200.974776][ T9490] __nla_validate_parse: 3 callbacks suppressed [ 200.974796][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 201.062137][ T9500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.919'. [ 201.550914][ T9524] syzkaller0: entered promiscuous mode [ 201.550938][ T9524] syzkaller0: entered allmulticast mode [ 201.610279][ T9520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 201.610309][ T9520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 201.611061][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 201.611081][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 201.611316][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 201.611333][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 201.611546][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 201.611563][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 201.613669][ T4935] Bluetooth: hci3: Malformed Event: 0x02 [ 203.320938][ T9600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.594056][ T9600] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.645198][ T9614] net_ratelimit: 17 callbacks suppressed [ 203.645222][ T9614] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 203.921110][ T9600] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.044262][ T9600] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.212374][ T4935] Bluetooth: hci4: link tx timeout [ 204.212395][ T4935] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 204.360349][ T38] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.471905][ T1028] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.707473][ T1028] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.707524][ T1028] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.063264][ T9722] validate_nla: 10 callbacks suppressed [ 206.063304][ T9722] netlink: 'syz.2.981': attribute type 49 has an invalid length. [ 206.226267][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 206.379874][ T85] IPVS: starting estimator thread 0... [ 206.434810][ T9745] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 206.466326][ T9743] IPVS: using max 26 ests per chain, 62400 per kthread [ 206.623281][ T9745] 8021q: adding VLAN 0 to HW filter on device bond7 [ 206.733871][ T9759] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 206.800159][ T9767] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 206.866368][ T1028] wlan1: Trigger new scan to find an IBSS to join [ 206.924189][ T9749] bond7: (slave veth3): Enslaving as a backup interface with a down link [ 207.034419][ T9773] xt_check_table_hooks: 24 callbacks suppressed [ 207.034443][ T9773] x_tables: duplicate underflow at hook 1 [ 207.063950][ T9753] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 207.076706][ T1028] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 207.212028][ T9779] bridge2: entered promiscuous mode [ 207.249272][ T141] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 207.483715][ T9794] syzkaller0: entered promiscuous mode [ 207.483741][ T9794] syzkaller0: entered allmulticast mode [ 207.515088][ T9794] tipc: Enabled bearer , priority 0 [ 207.542530][ T9792] tipc: Resetting bearer [ 207.609311][ T9792] tipc: Disabling bearer [ 207.660468][ T9797] batadv_slave_1: entered promiscuous mode [ 207.690176][ T9795] batadv_slave_1: left promiscuous mode [ 208.430183][ T9838] __nla_validate_parse: 141 callbacks suppressed [ 208.430206][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 208.557359][ T9841] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1008'. [ 208.976077][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'. [ 209.265355][ T9864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1013'. [ 209.355107][ T9867] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 209.451387][ T9874] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20004 [ 209.456190][ T141] IPVS: starting estimator thread 0... [ 209.483182][ T9867] 8021q: adding VLAN 0 to HW filter on device bond8 [ 209.485318][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 209.556078][ T9876] IPVS: using max 29 ests per chain, 69600 per kthread [ 209.560182][ T9872] gretap2: entered promiscuous mode [ 210.184271][ T9867] 8021q: adding VLAN 0 to HW filter on device bond9 [ 210.204823][ T9867] bond8: (slave bond9): Enslaving as an active interface with a down link [ 210.247846][ T9877] bond8 (unregistering): (slave bond9): Releasing active interface [ 210.250400][ T9877] bond8 (unregistering): Released all slaves [ 210.311975][ T9893] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1020'. [ 210.338105][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 210.463904][ T9898] wlan1 speed is unknown, defaulting to 1000 [ 210.474273][ T9898] wg2 speed is unknown, defaulting to 1000 [ 210.866501][ T304] wlan1: Trigger new scan to find an IBSS to join [ 211.355405][ T9939] openvswitch: netlink: Missing valid actions attribute. [ 211.463787][ T9941] netlink: 'syz.1.1029': attribute type 3 has an invalid length. [ 211.669859][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 211.669903][ T5620] Bluetooth: hci1: command 0x0406 tx timeout [ 211.670024][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 211.823023][ T9957] netlink: 'syz.4.1035': attribute type 1 has an invalid length. [ 211.827942][ T9957] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 211.915805][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 211.969117][ T9959] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 211.969159][ T9959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.869479][ T141] wlan1: Creating new IBSS network, BSSID c2:d9:5c:7e:ee:9e [ 213.078800][ T9981] ip_tables: iptables: counters copy to user failed while replacing table [ 213.120817][ T9981] netlink: 'syz.3.1042': attribute type 4 has an invalid length. [ 213.367001][ T9990] xt_policy: neither incoming nor outgoing policy selected [ 213.696898][ T9990] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 213.729362][ T9990] bond8 (unregistering): Released all slaves [ 214.899193][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 215.063844][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'. [ 215.103313][T10039] 8021q: adding VLAN 0 to HW filter on device bond7 [ 215.115372][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 215.159136][T10046] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1056'. [ 215.239075][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 216.494380][T10082] sock: sock_timestamping_bind_phc: sock not bind to device [ 216.582256][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 216.624096][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 216.685421][T10090] Cannot find set identified by id 0 to match [ 216.761346][ T5626] Bluetooth: hci3: connection err: -111 [ 216.860146][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'. [ 218.243135][T10055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.464856][T10108] macvlan3: entered promiscuous mode [ 218.464880][T10108] macvlan3: entered allmulticast mode [ 218.468490][ T6707] dummy0: entered promiscuous mode [ 218.492466][T10108] dummy0: entered allmulticast mode [ 218.507335][T10108] team0: Port device macvlan3 added [ 218.551730][T10121] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 218.572401][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 218.572430][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 218.634164][T10121] macsec0: entered promiscuous mode [ 218.644323][T10125] netlink: 'syz.0.1079': attribute type 12 has an invalid length. [ 218.644345][T10125] netlink: 'syz.0.1079': attribute type 29 has an invalid length. [ 218.646474][T10117] macsec0: left promiscuous mode [ 218.824015][T10133] nbd: socks must be embedded in a SOCK_ITEM attr [ 218.846855][T10134] nbd: socks must be embedded in a SOCK_ITEM attr [ 218.907816][T10137] wlan1 speed is unknown, defaulting to 1000 [ 218.914547][T10137] wg2 speed is unknown, defaulting to 1000 [ 219.013273][T10127] xt_CT: No such helper "snmp" [ 219.118820][T10146] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 219.155346][T10146] li: renamed from lo [ 219.833609][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 219.835071][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 219.836391][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 219.837654][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 219.838883][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 219.840215][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 219.841441][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 219.842653][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 219.843922][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 219.845143][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 220.039363][T10183] __nla_validate_parse: 35 callbacks suppressed [ 220.039387][T10183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'. [ 223.010026][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 223.059001][T10226] bond5: entered allmulticast mode [ 223.064540][T10233] bridge0: port 3(bond0) entered blocking state [ 223.064766][T10233] bridge0: port 3(bond0) entered disabled state [ 223.100934][T10233] bond0: entered promiscuous mode [ 223.100960][T10233] bond_slave_0: entered promiscuous mode [ 223.101320][T10233] 0: entered promiscuous mode [ 223.101507][T10233] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 223.134123][T10233] bridge0: port 3(bond0) entered blocking state [ 223.134223][T10233] bridge0: port 3(bond0) entered forwarding state [ 223.209328][T10233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1102'. [ 223.605757][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1103'. [ 224.307096][ T6281] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 224.558290][T10233] hsr_slave_1 (unregistering): left promiscuous mode [ 224.836744][ C1] net_ratelimit: 3299 callbacks suppressed [ 224.836772][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 224.838141][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 224.839535][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 224.840898][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 224.842294][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 224.843823][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 224.845169][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 224.846505][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 224.847730][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 224.849019][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 225.430108][T10258] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1108'. [ 226.202932][T10262] syzkaller0: entered promiscuous mode [ 226.202957][T10262] syzkaller0: entered allmulticast mode [ 226.577763][T10275] IPVS: set_ctl: invalid protocol: 197 255.255.255.255:20001 [ 227.415408][T10296] syzkaller1: entered allmulticast mode [ 227.666452][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 228.605000][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 229.846210][ C1] net_ratelimit: 3395 callbacks suppressed [ 229.846233][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 229.847720][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 229.849183][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 229.850720][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 229.852133][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 229.853601][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 229.855045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 229.856596][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 229.860111][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 229.863782][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 230.042485][T10331] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 230.043230][T10339] tipc: Enabling of bearer rejected, failed to enable media [ 232.744827][ C1] sched: DL replenish lagged too much [ 234.856060][ C0] net_ratelimit: 16237 callbacks suppressed [ 234.856086][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.856565][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.856681][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 234.857004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.857128][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 234.857437][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.857864][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.858295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.858594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 234.858773][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.866134][ C1] net_ratelimit: 17217 callbacks suppressed [ 239.866160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 239.866222][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.866690][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.867106][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.867489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.867661][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 239.867881][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.868088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 239.868262][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.868679][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.876328][ C0] net_ratelimit: 17201 callbacks suppressed [ 244.876355][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.876794][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.877096][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 244.877239][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.877567][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 244.877678][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.878124][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.878563][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.879010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.879085][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 249.886069][ C0] net_ratelimit: 16685 callbacks suppressed [ 249.886094][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.886407][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 249.886539][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.886803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 249.886985][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.887471][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.887909][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.888134][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 249.888360][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.888526][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.896114][ C0] net_ratelimit: 16490 callbacks suppressed [ 254.896140][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.896569][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.896991][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.897113][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 254.897425][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.897520][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.897848][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.898303][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.898725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.898939][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 255.878401][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.070672][ T85] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 259.906163][ C0] net_ratelimit: 16517 callbacks suppressed [ 259.906188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.906681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.907105][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 259.907126][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.907504][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 259.907573][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.908017][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.908456][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.908870][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 259.908906][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.916046][ C0] net_ratelimit: 16758 callbacks suppressed [ 264.916072][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.916520][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.916845][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 264.916935][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.917265][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 264.917340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.917756][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.918162][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.918569][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.918639][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 269.926154][ C0] net_ratelimit: 16799 callbacks suppressed [ 269.926189][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.926620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.926868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 269.927041][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.927308][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.927485][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.927892][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.928313][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.928733][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.928757][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 274.936054][ C0] net_ratelimit: 16773 callbacks suppressed [ 274.936079][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.936522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.937022][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.937250][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 274.937434][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.937662][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 274.937900][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.938333][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.938770][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.939121][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 279.946223][ C0] net_ratelimit: 16413 callbacks suppressed [ 279.946250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.946618][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 279.946702][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.947082][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 279.947929][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.948379][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.948588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 279.948860][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.949074][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 279.949312][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.956205][ C0] net_ratelimit: 17294 callbacks suppressed [ 284.956231][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.956681][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.957051][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 284.957120][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.957523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.957595][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.958044][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.958491][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.958929][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.959086][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 289.966099][ C1] net_ratelimit: 16621 callbacks suppressed [ 289.966124][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 289.966150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.966595][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.967043][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.967481][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.967642][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 289.967912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.968093][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 289.968346][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.968826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.976299][ C0] net_ratelimit: 16721 callbacks suppressed [ 294.976326][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.976469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 294.976773][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.976869][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.977241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.977706][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.978154][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.978276][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 294.978595][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.978746][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 299.986226][ C0] net_ratelimit: 17098 callbacks suppressed [ 299.986229][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 299.986251][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.986693][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.987101][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.987497][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.987702][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 299.987896][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.988176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 299.988298][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.988698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.996029][ C0] net_ratelimit: 17392 callbacks suppressed [ 304.996055][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.996504][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.996707][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 304.996960][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.997122][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 304.997423][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.997896][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.998337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.998482][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 304.998784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.006507][ C1] net_ratelimit: 16445 callbacks suppressed [ 310.006532][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 310.006917][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.006998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.007355][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.007779][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.008203][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.008493][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 310.008628][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.008929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.009060][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.015881][ C0] net_ratelimit: 17131 callbacks suppressed [ 315.015908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.016331][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.016694][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 315.016766][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.017143][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.017199][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.017610][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.018024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.018453][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.018630][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 317.291714][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.025978][ C0] net_ratelimit: 16618 callbacks suppressed [ 320.026004][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.026229][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 320.026430][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.026625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.026861][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.027286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.027709][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.027928][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 320.028165][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.028441][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.036153][ C0] net_ratelimit: 16699 callbacks suppressed [ 325.036179][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.036411][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 325.036622][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.036917][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.037051][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.037486][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.037915][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.038355][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.038397][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 325.038831][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.046060][ C0] net_ratelimit: 16676 callbacks suppressed [ 330.046086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.046263][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.046509][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.046923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.047384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.047794][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.047813][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 330.048207][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.048305][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.048660][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.056016][ C0] net_ratelimit: 16498 callbacks suppressed [ 335.056038][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.056042][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.056511][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.056965][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.057409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.057489][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 335.057848][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.057894][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.058305][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.058789][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.265847][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 335.369181][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10337/1:b..l [ 335.377232][ C1] rcu: (detected by 1, t=10513 jiffies, g=41429, q=1756 ncpus=2) [ 335.385214][ C1] task:syz.2.1130 state:R running task stack:28808 pid:10337 tgid:10334 ppid:5624 task_flags:0x400040 flags:0x00080002 [ 335.398779][ C1] Call Trace: [ 335.402109][ C1] [ 335.405087][ C1] __schedule+0x17db/0x58f0 [ 335.409674][ C1] ? __pfx___schedule+0x10/0x10 [ 335.414578][ C1] ? __lock_acquire+0x747/0x2de0 [ 335.419574][ C1] preempt_schedule_irq+0x4b/0x90 [ 335.424652][ C1] irqentry_exit+0x14f/0x910 [ 335.429292][ C1] ? trace_irq_disable+0x3b/0x140 [ 335.434368][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 335.440393][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 335.445727][ C1] Code: ff ff ff e8 40 1c 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 62 e7 f0 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 45 0a cc 48 8d 3d 87 9c d9 [ 335.465374][ C1] RSP: 0018:ffffc9000dcc77e0 EFLAGS: 00000292 [ 335.471491][ C1] RAX: b6c45ed4f8ee2400 RBX: 0000000000000000 RCX: 0000000000000046 [ 335.479768][ C1] RDX: 00000000105209fd RSI: ffffffff8e688424 RDI: ffffffff8c6dac80 [ 335.487784][ C1] RBP: ffff88807c4f0000 R08: ffffffff81b104ed R09: 0000000000000000 [ 335.495800][ C1] R10: ffffc9000dcc78f8 R11: ffffffff81b293f0 R12: ffffffff8ed5c920 [ 335.503811][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 335.511956][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.518181][ C1] ? is_module_text_address+0x1d/0x1e0 [ 335.523706][ C1] ? is_module_text_address+0x1d/0x1e0 [ 335.529223][ C1] is_module_text_address+0x39/0x1e0 [ 335.534558][ C1] ? is_module_text_address+0x1d/0x1e0 [ 335.540077][ C1] kernel_text_address+0x94/0xe0 [ 335.545065][ C1] __kernel_text_address+0xd/0x30 [ 335.550135][ C1] unwind_get_return_address+0x4d/0x90 [ 335.555644][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.561850][ C1] arch_stack_walk+0xfb/0x150 [ 335.566588][ C1] stack_trace_save+0xa9/0x100 [ 335.571412][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 335.576863][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 335.581967][ C1] kasan_save_track+0x3e/0x80 [ 335.587917][ C1] ? kasan_save_track+0x3e/0x80 [ 335.592909][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 335.597716][ C1] ? __kmalloc_noprof+0x36b/0x720 [ 335.602796][ C1] ? sk_prot_alloc+0xe7/0x210 [ 335.607516][ C1] ? sk_alloc+0x3a/0x390 [ 335.611840][ C1] ? __netlink_create+0x62/0x260 [ 335.616824][ C1] ? netlink_create+0x3ca/0x590 [ 335.621711][ C1] ? __sock_create+0x4b3/0x9d0 [ 335.626515][ C1] ? __sys_socket+0xd6/0x1b0 [ 335.631143][ C1] ? __x64_sys_socket+0x7a/0x90 [ 335.636032][ C1] ? do_syscall_64+0x166/0x520 [ 335.640848][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.647013][ C1] __kasan_kmalloc+0x93/0xb0 [ 335.651649][ C1] __kmalloc_noprof+0x36b/0x720 [ 335.656552][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 335.661625][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 335.666699][ C1] ? sk_prot_alloc+0xe7/0x210 [ 335.671416][ C1] ? sk_prot_alloc+0xe7/0x210 [ 335.676148][ C1] sk_prot_alloc+0xe7/0x210 [ 335.680700][ C1] ? sk_alloc+0x27/0x390 [ 335.684983][ C1] sk_alloc+0x3a/0x390 [ 335.689103][ C1] __netlink_create+0x62/0x260 [ 335.693926][ C1] netlink_create+0x3ca/0x590 [ 335.698644][ C1] ? __pfx_nfnetlink_unbind+0x10/0x10 [ 335.704058][ C1] ? __pfx_nfnetlink_bind+0x10/0x10 [ 335.709302][ C1] __sock_create+0x4b3/0x9d0 [ 335.713939][ C1] __sys_socket+0xd6/0x1b0 [ 335.718400][ C1] __x64_sys_socket+0x7a/0x90 [ 335.723116][ C1] do_syscall_64+0x166/0x520 [ 335.727749][ C1] ? trace_irq_disable+0x3b/0x140 [ 335.732816][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.738951][ C1] ? clear_bhb_loop+0x70/0xc0 [ 335.743675][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.749605][ C1] RIP: 0033:0x7f097959e159 [ 335.754060][ C1] RSP: 002b:00007f097a4c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 335.762515][ C1] RAX: ffffffffffffffda RBX: 00007f0979826090 RCX: 00007f097959e159 [ 335.770558][ C1] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 335.778562][ C1] RBP: 00007f097963506b R08: 0000000000000000 R09: 0000000000000000 [ 335.786570][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.794577][ C1] R13: 00007f0979826128 R14: 00007f0979826090 R15: 00007ffd3f1f1928 [ 335.802646][ C1] [ 340.065947][ C0] net_ratelimit: 14865 callbacks suppressed [ 340.065976][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.066136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.066418][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.066905][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.067342][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.067647][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:3e:61:4f:ce:ea:36, vlan:0) [ 340.067788][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.068096][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.068227][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.068713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.076045][ C1] net_ratelimit: 16194 callbacks suppressed [ 345.076070][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.076177][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)