last executing test programs: 26.068662582s ago: executing program 2 (id=5828): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0xa020480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r3, r3, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r3, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x3000) sendto$inet(r1, &(0x7f00000003c0)="146a77f2238cd75300e24852c0f206d86ce4fd1599eff305af6f272809d48746e512d547899527798b46ffbffea38ec8e73d9ffc5a675865a983797e2f74919036dac1212eb1caad1788784d7fced2c4155a73bbe003c9b29d3539198394152ddc7ceda3a66e2d502feab9fdb3866236d26ee087aa658ca8eb02bfc70e9489c9b122", 0x82, 0x80, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, &(0x7f00000000c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x6, 0x0, &(0x7f0000000000)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x2}, 0xe) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 25.144419738s ago: executing program 2 (id=5831): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80000) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000280)={0x6, 0xfffffffa}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x4, 0xf, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x25, 0x0, 0x2, 0x29, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r2, 0x80, 0x20, 0x2, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @empty}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 21.505605632s ago: executing program 2 (id=5845): syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="0580c20000000180c22f79f1276fe1118a9600000008004500005800000600002f90780000000000000000248065580000000010000800000086dd080088be0000000010b20000010000000000000008000600000000002000000002fffe0000000000000000000800655800000000"], 0x0) r0 = socket(0x1d, 0x803, 0x80000000) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="203201"], 0x38}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x40002}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@deltclass={0x2c, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff2, 0x3}, {0x10}}, [@tclass_kind_options=@c_tbf={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x110, r7, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x5, 0x5, 0x4, 0x1}, {0x0, 0xa, 0x80, 0x200}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(0xffffffffffffffff) write(r5, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000c, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) 18.223903587s ago: executing program 3 (id=5858): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e22, 0xd, @private2, 0x1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x8, @mcast2, 0x800}}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async) r3 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r3, 0x0, 0x7, 0x0, &(0x7f0000000340)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x40) 17.585375303s ago: executing program 3 (id=5861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES8=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRESHEX], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) r2 = epoll_create1(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000080)={r4, 0x6, 0x3, 0x40}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r10, &(0x7f00000052c0)={0x0, 0x0, &(0x7f0000005280)={&(0x7f0000005100)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf251b00000008009a00020000000400cc00"], 0x20}, 0x1, 0x0, 0x0, 0x40008d6}, 0x840) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r11, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x40, r16, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, r9, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000051) epoll_pwait(r2, &(0x7f0000000340)=[{}], 0x1, 0xfe, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x45, r12}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000100)={0x20000014}) 15.055271182s ago: executing program 2 (id=5876): r0 = socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="c387b7f600000000140012800b000100626174616476d26cd60800005181"], 0x34}}, 0x20000840) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d"], 0xe0}], 0x1}, 0x40040) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x44, r3, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000800}, 0x4004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="4940e138c4380000007423b96ff115f715ed4134d42c96c3d013ccf92e918abf1a44948dfe17f0e5c7fd43d672d4c93044", @ANYRES16=r6, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32=r8, @ANYBLOB], 0x38}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="000228bd7000fedbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc2}, 0x24000010) accept(r0, 0x0, 0x0) 14.566189654s ago: executing program 3 (id=5880): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x1, 0x4f15, 0xe9c}, &(0x7f0000000140)=0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @dev, @multicast1}, &(0x7f0000000240)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r9, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) 13.597351171s ago: executing program 4 (id=5886): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@newtclass={0x34, 0x28, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x9, 0xb}, {0x10, 0xffff}, {0x7, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x65}}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}]}, 0x34}}, 0x8040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r7, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x48000, &(0x7f00000014c0)={0xa, 0x4e21, 0x9, @mcast1}, 0x1c) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x70) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, 0x0, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$kcm(0x29, 0x2, 0x0) 12.102627041s ago: executing program 4 (id=5889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) accept4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x8001) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB="e1ed7b240904fabe4afd320000c8e7a7a412232e84e348930eeb"], 0xfdef) 11.881382671s ago: executing program 3 (id=5891): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000006200)={0x7, 0x8000, 0x1, 0x4, 0x3, 0xa7, 0x1000}, 0xc) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32=r2, @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRESDEC=r1], 0x50}}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="134cb3f6001b0d0000000000000001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x20000840) 11.785834162s ago: executing program 0 (id=5893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4003, @dev}, 0x10, 0x0}, 0x3000c0c5) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x9, &(0x7f0000000040), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff20000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0xd8, 0x10, 0x44b, 0x0, 0x1, {0x7a, 0x0, 0x0, 0x0, 0x9c12}, [@IFLA_VFINFO_LIST={0xb8, 0x16, 0x0, 0x1, [{0x94, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x80000000, @local}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2f, 0x3}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0x1}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x13c, 0x7f9, 0x9, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x100, 0x6}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x1, 0xf26, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) nanosleep(&(0x7f0000000040), 0x0) 11.694703651s ago: executing program 1 (id=5894): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00098008000192d2000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001"], 0xf0}}, 0x42000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd}, 0x94) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x10, r3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_pktinfo(r2, 0x29, 0x8, 0x0, &(0x7f0000000140)) 11.565491225s ago: executing program 0 (id=5895): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async, rerun: 64) syz_emit_ethernet(0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="d10000000000bbbbbbbbbbbb0800450000200000e0000011907800000000000000004e210000000c907861010000873e55e58db7bc05a0b6d4fe42f4a22150c9d111ebf9e642c39a67e09b62484f5c836eb8aea383b0bf2a3397597e0713b7504d39e6314d7e63f5497cb2d472fe60582869cf1d0e77f905d1cd883c18b76c27db2b3dbaa7cdee9a9aa11c764cbfe252"], 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (async) unshare(0x68040200) 11.403726539s ago: executing program 0 (id=5896): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x73}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x73}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) (async) 11.224920847s ago: executing program 0 (id=5897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xb) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x200, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ac79b4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, 0x0, 0x400c000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x13c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff2}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x10c, 0x2, [@TCA_BASIC_EMATCHES={0x108, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}, @TCF_EM_IPT={0xa0, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x400}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x7b, 0x5, "a0a4f7c5ba6991005693e3fe1254a0cc7d52ecdcd6a51a1f2a48bcbbdb65e01ba0af3c0c71917102e2971110e42f6f12902401e6403bd3b154c2fa028a9d4e803d90bd47227328f540c4c8fa27cd04107255c9882c4fea88f452c39b182ded869ec41c4cad1b3114a44e7386436948a62047004c41457d"}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x2, 0xffff}, {0xfe00, 0xa, 0x0, "ab9f368e78304b91d42e"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x9382}, {0x2, 0x4, 0x4}}}]}]}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000039000100faff0700ffdadf2501000000a092efdbdcca6b3df0bf1c5a2b4046a7b1f1cf08894ddb523dd68cf66dd17968cc1c807da468a2fbddd45e417c46760e09307f13a5756b15309b9eb1aded429047d34e42cc4c5d0fa29e6595bf9e41f689efcbc0ab4f55fa8327b154db8aea4d5d5944af24a6b74a0958fc45831bf869fc94622681521652f6d98c971d6e1351ac77ff5a297d08c13fc89fc294bac7c3a3cade3e4ae82ecfdd73815e5facc161e786230c20e082d87e32878979fb44773e5cc698fe67fff9aa9f679b130cc4e750b5a9d1c3fcf53101f2131263"], 0x20}, 0x1, 0x0, 0x0, 0x2400c800}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x5fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x3a4, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a6174489"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xf5, 0x6, "104365a79e8eefeb245b62ab67ecf2004ea21ee06028a8267d72718ce313b4cb5a4967cd6d66f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aab854bf72bf47865856c0c206f75256ce8f8201fd9f6190a6835cb7d3225070335c1c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5b1d012a70d966c0898d7362beb11b194dcaf5da26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a419d404ccea46315cebe3f4786d6a85335c22070a8fda489ee988811dbbbabd54dac46a32"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x418}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 10.957074003s ago: executing program 4 (id=5898): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}}, 0x4000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x9, r5, 0x14}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000d40)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x0, 0x11, r6, 0x489e7000) socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20cc2}}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r0, 0x24, 0x0, 0xd8, &(0x7f0000000000), 0x40000016, 0x0, 0x0, 0x0, 0x0}, 0x40) 10.866965569s ago: executing program 3 (id=5899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd0}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}, 0x1, 0x0, 0x0, 0x48046}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r2, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000040900010073797a310000000038000480340001800c0001007061796c6f616400240002800800014000000017080003400000004f080004400000000008000240000000020900020073797a3200"], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0901040000c000001c00128009000100626f6e64001e00000c0002800500010001000000a88465f7cec85375cffe3c3a489b24bafe4e00fc7c"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @call={0x85, 0x0, 0x0, 0xa5}, @jmp={0x5, 0x0, 0xc, 0xb, 0x0, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x96}, @alu={0x4, 0x1, 0x2, 0xa, 0x9, 0x10}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x87, &(0x7f0000000140)=""/135, 0x41000, 0x4b26c52e8c56481e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xe, 0x7f, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000002c0)=[{0x3, 0x1, 0xc}, {0x0, 0x5, 0xd, 0x4}, {0x4, 0x4, 0x8, 0x5}, {0x4, 0x4, 0xa, 0x1}, {0x0, 0x4, 0x8, 0xa}, {0x3, 0x2, 0xf, 0xb}, {0x4, 0x5, 0xb, 0x5}, {0x0, 0x2, 0x3}], 0x10, 0x10000}, 0x94) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={0xffffffffffffffff, r12, 0x0, r13}, 0x10) 10.748136609s ago: executing program 1 (id=5900): r0 = socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x3637, 0x2, 0x400000000000060, 0x0, 0x5, 0x8006, 0x8}, 0x0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}], 0x1, 0x44804) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 10.637122352s ago: executing program 4 (id=5901): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)="9f336d", 0x3}], 0x2}}], 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) pipe(&(0x7f0000000080)) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) 10.570104345s ago: executing program 2 (id=5902): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x81, 0x9, 0x0, 0x6, 0x40, 0x0, 0xfe}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0x101}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x488, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2769f704}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x44f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x53a5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "b9959efc7896f2e0e807d75747fd8a12eb72a10e0ff6ec64b6eacb4b"}}, @TIPC_NLA_NODE_ID={0x59, 0x3, "0ace4e06c850046e884b6260fdcdc6af5340651cfeafd93970e33cc9abe303f1c9cdb3e42ba1038b3286965fb758ef2e076b31b9db5d934ab83212a7982b4534060fbc498188641a03e849ca08ee42f93993784e9e"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "9c0e567a8bd31f0403fb1afa931bf7a3acfa1598f5a34514cefb4961e5b78e7f71"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf1b1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9aa7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x74}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2800000, @local, 0xff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x69f0}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfd1, @loopback, 0xefa1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @empty, 0x6}}}}]}, @TIPC_NLA_SOCK={0x11c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc0000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfe74}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4ef6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc8d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x29}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x361}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf511}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x63ab}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf6e9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4800000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x414}, 0x20000841) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0xc) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000800)=0x1c, 0x80800) sendmsg$nl_generic(r2, &(0x7f0000000cc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000840)={0x40c, 0x26, 0x100, 0x70bd2b, 0x25dfdbfe, {0x17}, [@typed={0x8, 0x22, 0x0, 0x0, @pid=r4}, @nested={0x1c9, 0xab, 0x0, 0x1, [@generic="e6293c5525cc312b563191da4b29656580f4c8067fcea2e10273a5febd3d5953cc297f0b9ee0cf6d3b3dfb6c3199ab021fa9f335bed30bca5e40669a95f24ab854d4cbc2bf", @typed={0xa, 0x37, 0x0, 0x0, @str='^%\\${\x00'}, @generic="6a16eec3b448c2d1a8b09d8394225020da8672fc63a023ceb451ed8db3e12c98ed4de1bd", @generic="d862cd049d73b391dd5da3eb01e66bd1f585aff798ea58e8878e44264b5c90e22e2f35414d90b9dc83d08d80c8de4a5f353e197c5c121120b0526367f02c39c7479a74d505740cc394fc011dd4152c1021c1172d0235049c7b55b39ac6e8dda28e5dec09384df4df38c3ab119e7a670f54d96eeb59b505d4435c7b2b5ae31a31", @typed={0x4, 0xd1}, @typed={0x21, 0xab, 0x0, 0x0, @binary="56d04ac8aa20c517b9294b03448ab76ccfe356c8775ca71bda5326ed12"}, @generic="45400b03f8dd2c01a639423d5f154cf1fed2e1a6c9c725faa7d08768a8ad189aa5b5c94d7ab64912439b317588c1861deb12307b215453bc3b616916f7988587a716b315cb3c29ed0f758d2826bcb14f58c3ab7607e68901d0ae679b620c23d2c8e52ed4f8dcdc1c3e498d94b68081816ab868229a765f8d286e93388bcbab7bbe5477a5fd1788b39865659ce1be5388a55dfbcf5c8a2e41823fa424da4bde8f35e266917cc61a91"]}, @typed={0x8, 0xc0, 0x0, 0x0, @fd=r5}, @generic="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", @generic="5a1c9889607f3843adf346bd2e3f7af7be450009b4359d08321cdcd3deacce7786b9fac2045b0fb85a09022009975efb191da15b0e26b8c57e68b2b9c0d2e3208daebcaf34d17f18d811ce4b09354cd9d79f7a3ebc11995aff528ac76e", @generic="ad6c62c75ee59195bc7f1af4ea67b9280adcca93e30ca899e9d1c61ac8f9e5c4c7b7d166eb598d1c73ebcafe1d2c2d3f02dcfb21b72ff20c3795bd741c4497003178b5b246d3256e639e9cbf70dbee668bfcaa14a496c5d83b65099720dd75b7816d13da45e3475f40b3300fd56253a3d405bd78d9df6c58796f2feeb928b4f4c7af5efbce9039fbff5534aefa2f8fff61f26531f0bc073f41f4e5dbe862ce88c4c0f1cc7a78afe80487b9318d86a7e15b72a54c21c5e5d4256c47cf628c3a4a54497341"]}, 0x40c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4001) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000ec0)={'ip6gre0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x2f, 0xfa, 0x3, 0x8001, 0x65, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x8000, 0x240, 0x5}}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', r8, r2, 0x1, 0x3}, 0x50) splice(r5, &(0x7f0000000f00)=0x101, r9, &(0x7f0000000fc0)=0xfffffffffffffc00, 0x4, 0xd) r10 = socket$kcm(0x29, 0x2, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001240)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x150, r11, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xa4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x15}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x804}, 0x40010) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@ipv6_getrule={0x1c, 0x22, 0x800, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x8, 0x5f, 0x0, 0x0, 0x2, 0x14}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) sendmsg$nl_route(r12, &(0x7f0000001540)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x90102000}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)=@RTM_NEWMDB={0x118, 0x54, 0x100, 0x70bd28, 0x25dfdbff, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x7d94f72761845cb5, 0x3, 0x0, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x3, {@in6_addr=@local, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x4, 0x3, {@ip4=@rand_addr=0x64010102, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x2, 0x2, {@ip4=@dev={0xac, 0x14, 0x14, 0x1c}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x3, 0x2, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x0, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x2, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x800}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40881}, 0x20804) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000001580)={r5}) getpeername$packet(r13, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001600)=0x14) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_tracing={0x1a, 0x22, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x149, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x8, 0x4, 0x3, 0xfffffffffffffff8, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001780)='syzkaller\x00', 0x4d4b, 0x9b, &(0x7f00000017c0)=""/155, 0x41000, 0x68, '\x00', r14, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000018c0)={0x3, 0xc, 0x8, 0x2}, 0x10, 0x16371, 0xffffffffffffffff, 0x4, &(0x7f0000001900)=[r9, r9, r9, r9, r9], &(0x7f0000001940)=[{0x4, 0x1, 0x5, 0x7}, {0x5, 0x2, 0x1, 0x9}, {0x3, 0x2, 0x7, 0x4}, {0x4, 0x5, 0x7, 0x7}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r15, 0x0, 0x46, 0x69, &(0x7f0000001a40)="bdc7e27e69295981bfc097414700005e125d2fcc42de983ed2530f566d39c0cca0826732535383d992e80e439fe333e2a154fcdbd997362ff26be558950373e17cab3c56b80e", &(0x7f0000001ac0)=""/105, 0x7, 0x0, 0x7a, 0x28, &(0x7f0000001b40)="cc8d65a7929c8f02cd10d917c222f6c7566c59b3afc206c5b0c46c13416bdb1cc6906ea2328dd6f316cf26d1b9b2ff9b1a6a043a200a18bf07e555c5908c04e1e36a5d6f8508a9ba06734af8604f30151b92688db3a09ee8c961c73ee50ca6fcecdb726ef458cb93ff8ddc46a83517ed9fc09cce3f7825be3a59", &(0x7f0000001bc0)="88ba64bd2942be9067beefcea1815d33701ca3d5d84ab148ea78d867ce0b8f3053c64d67d5a382e0", 0x1, 0x0, 0x6}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000001c80)) getsockopt$SO_J1939_SEND_PRIO(r13, 0x6b, 0x3, &(0x7f0000001cc0), &(0x7f0000001d00)=0x4) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r13) sendmsg$NL80211_CMD_VENDOR(r13, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x24, r16, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7c}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040880}, 0x200400c0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001ec0)={r15, 0xffffffffffffffff, 0x14, 0x0, @void}, 0x10) 10.392129671s ago: executing program 3 (id=5903): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x1, 0x80000, 0x0) epoll_create1(0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@local, 0x0, 0x100, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0xbad, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x6e6bb2, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@local, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, &(0x7f0000000140)}, 0x20) accept4(r1, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="000000000000000000b70310000000e0ffb60400000000000002000000ea7600009500"/65], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) 10.119866332s ago: executing program 0 (id=5904): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "ac382ad796bd667cb12ea99509873931d287310300", "0f9dafb4", "6c3fffff0000e651"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x0, 0x96, 0x0, 0x0, 0x9f2}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, 0x0, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x84054) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="39d52dbd7000fedbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="0a00f500080211000000000028002d8008"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008300), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x4c982) 9.814312624s ago: executing program 1 (id=5905): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r5, 0x25, 0x4, @void}, 0x10) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x1694, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x167c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1001, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098472bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa2948788079c1b17f8330790a066aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178229d4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f700000000000000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x669, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1694}, 0x1, 0x0, 0x0, 0x8840}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x14) sendmmsg(r6, &(0x7f0000003b40)=[{{&(0x7f00000017c0)=@can={0x1d, r7}, 0x80, &(0x7f0000003280)=[{&(0x7f00000005c0)="b2823aba5d9fccf8cc6a8ed72c1ed243e6f3725b843b44fb2b3c1ed3810fce1bfec61e24c308251c39aa24e59dd6afade2e7a0ed9bddadacc16786576829bd7031ae1d194576b8e1c2469b7a47fa7390042b523a6c9698f15ed4f5ce135c4f405a71277d1c84ef7165e82fe871cf799a174448ceb3a33733532a99f39ea121d848c53102d6492c08ba094548607ee4bf50a6fd480e431bc92ce25a787709d47b03c5fe4f760e2129e0798fe70f2c7d2148860ac2bbcbad8ca146fa5049ddecdc97669c5db57c8187d52781c460f0ce1a2e2cc55ae4f2204efc0a196240b446cae44d8c6dd1752220387b6491590cbbec920da8e76e5a92f6be7ab9", 0xfb}, {&(0x7f0000004500)="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", 0x5ff}], 0x2}}], 0x1, 0x41) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000240), 0x3) (async, rerun: 32) r9 = socket$inet(0xa, 0x801, 0x84) (async, rerun: 32) socket(0x8, 0x80000, 0x7fffffff) connect$inet(r9, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r9, 0x8) (async) r10 = accept4(r9, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x94, 0x20}, &(0x7f0000000040)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf9, 0xf9, 0x7, [@restrict={0x7, 0x0, 0x0, 0xb, 0x5}, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}, @datasec={0x4, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x4, 0x1ff}, {0x5, 0x3, 0x4}, {0x4, 0x4, 0x7}, {0x3, 0x0, 0x6}], "ff"}, @var={0x9, 0x0, 0x0, 0xe, 0x3}, @fwd={0x3}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x7a, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {0xb, 0x4}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xd, 0x5}, {0xf, 0x5}, {0x1, 0x5}, {0x10, 0x5}, {0x8, 0x4}, {0x1, 0x2}, {0xd}]}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @enum64={0xc, 0x0, 0x0, 0x13, 0x1}]}, {0x0, [0x0, 0x61, 0x5f, 0x61, 0x0]}}, &(0x7f0000000600)=""/68, 0x11b, 0x44, 0x0, 0x4c}, 0x28) (async) socket$inet(0x2, 0x2, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (rerun: 64) 9.69008504s ago: executing program 2 (id=5906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x7f}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@delchain={0x24, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x4000) socket$inet_sctp(0x2, 0x1, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r8}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 907.291815ms ago: executing program 0 (id=5907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000002e40)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2b1c52be5f144dd0c2db5cd68c42", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x600) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000005142106000000000080000008000100000000000800030000000000"], 0x20}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) clock_gettime(0x0, 0x0) recvmmsg(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000200)=0x30) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="010030bd7000ffdbdf25010000000800050000000000060006004e20000008000700440b000014000200776732000000000000000000000000000800088004004403140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5422400030000000000000000000000000000000000000000000000000000000000000000000800050001"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0x1) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3400000042638d00fffffffffddbdf25020000000c0000000600000000000000100001800c00c800020000000000000004000480"], 0x34}, 0x1, 0x0, 0x0, 0x20008880}, 0x4040) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r10, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x5, 0x4, 0xd3800000}}], 0x20, 0x53}, 0x2000a004) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r9, &(0x7f0000000540)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000031010000000000002e0d000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b702fffffffffff58500000083000000bf0900000000000055090100000000009500000000000000851000000700000078b1bfffffffffff18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000186800000c000000000000004000000018120000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000800000085100000fdffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0xdd46, 0x39, &(0x7f00000009c0)=""/57, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x3, 0xe, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000b40)=[{0x5, 0x4, 0x2, 0x8}, {0x4, 0x2, 0x8, 0x3}], 0x10, 0x3}, 0x94) close(r7) recvmsg(r3, &(0x7f0000002cc0)={&(0x7f0000000240)=@tipc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000a00)=""/65, 0x41}, {&(0x7f0000000400)=""/13, 0xd}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/231, 0xec}, {&(0x7f0000000640)=""/108, 0xfffffe9d}, {&(0x7f00000006c0)=""/211, 0xd3}, {&(0x7f00000007c0)=""/21, 0x15}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x0, &(0x7f0000002bc0)=""/200, 0xc8}, 0xbfa3e384079ef56a) 906.771289ms ago: executing program 1 (id=5908): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x80010) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002000"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a3100000000400007800c"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x38, r5, 0x1, 0x4, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20000}]}]}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50f10000", @ANYRES16=r3, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000140008006d616376746170300000000000000000050012006f000000"], 0x50}}, 0x20000034) 810.244558ms ago: executing program 1 (id=5909): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf8, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0x0, 0x800, "c133a12a91872b3730467c92a3a5050f02b82b"}, {0x50, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f516733"}, {0x30, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0x10, 0x113, 0x9}, {0x10, 0x110, 0x4}], 0x1c0}, 0x4000c010) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000020000434e8dd2de2a00000095000000000000009500a5050000400000000000000000000000ee00000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 689.415966ms ago: executing program 4 (id=5910): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x4010) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f00000d3000/0x4000)=nil, 0x4000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2f915000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$PPPIOCGIDLE64(r6, 0x8010743f, &(0x7f00000001c0)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c0016800800"], 0x30}}, 0x8041) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000180)=0x1, 0x2) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f0000000100)={0x5, 0xa3, 0x104, 0x2, 0x3ff, 0x2, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x2b, 0x1, 0x1) connect$inet6(r9, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000028c0)={r8, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x6, 0x10}, &(0x7f0000000080)=0xc) r10 = accept4$bt_l2cap(r1, &(0x7f00000002c0), &(0x7f0000000300)=0xe, 0x80800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r10, 0x4048587b, &(0x7f00000007c0)={{r8, &(0x7f0000000340)='GPL\x00', 0x8102, &(0x7f0000000440)={@align=0x2400000000000, {0xfff8, 0x7f79, 0x6, 0x5}}, 0x4, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0xb}, 0x3, &(0x7f0000000740)=[{0x1, 0x4, &(0x7f0000000500)='^*{-.$\\-:\xe9\x00', &(0x7f0000000540)="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", 0xfc, 0x2}, {0x0, 0x17, &(0x7f0000000640)='%!&:\'$@(!-(&\x00', &(0x7f0000000680), 0x0, 0x2}, {0x1, 0x1, &(0x7f00000006c0)=')\x00', &(0x7f0000000700)="139d9c6761dd7b42099dbeee526335bb4e5342d549c1f34fbdd5a6bf7036e2e0fc631b4558379d49faa74618dc71a4742d62", 0x32, 0x38}]}) 493.36564ms ago: executing program 4 (id=5911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x2c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040810}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r5 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r5, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/248, 0xffffff8e}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/189, 0xbd}, {&(0x7f0000001680)=""/155, 0x9b}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x10) write(r5, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) 0s ago: executing program 1 (id=5912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x2, [0x0, 0x9]}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) kernel console output (not intermixed with test programs): im hwsim71 wlan0: entered allmulticast mode [ 525.623315][T23233] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 525.685171][T23235] sock: sock_set_timeout: `syz.3.4362' (pid 23235) tries to set negative timeout [ 525.738933][T23240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 526.716683][T23298] bridge0: port 1(hsr_slave_0) entered blocking state [ 526.769100][T23298] bridge0: port 1(hsr_slave_0) entered disabled state [ 526.790476][T23298] hsr_slave_0: entered allmulticast mode [ 526.814637][T23304] IPVS: set_ctl: invalid protocol: 47 172.30.0.1:20002 [ 526.839399][T23298] hsr_slave_0: entered promiscuous mode [ 526.857183][T23304] netlink: 'syz.0.4379': attribute type 2 has an invalid length. [ 526.874771][T23304] netlink: 'syz.0.4379': attribute type 1 has an invalid length. [ 526.883370][T23304] netlink: 'syz.0.4379': attribute type 1 has an invalid length. [ 526.979138][T23316] sch_fq: defrate 0 ignored. [ 527.107406][T23323] tipc: Failed to remove unknown binding: 66,1,1/0:1486179996/1486179998 [ 527.285768][T23336] __nla_validate_parse: 15 callbacks suppressed [ 527.285791][T23336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4389'. [ 527.473212][T23334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4388'. [ 527.738007][T23346] vlan2: entered promiscuous mode [ 527.752995][T23346] bridge0: entered promiscuous mode [ 527.768027][T23349] netlink: 'syz.1.4390': attribute type 4 has an invalid length. [ 527.784187][T23349] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4390'. [ 527.794270][T23349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4390'. [ 527.817965][T23352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4391'. [ 527.859785][T23354] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4392'. [ 528.025856][T23362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4397'. [ 528.046102][T23362] netlink: 'syz.4.4397': attribute type 322 has an invalid length. [ 528.124870][T23367] bond12 (unregistering): Released all slaves [ 528.212411][T23375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4400'. [ 528.566975][T23396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4404'. [ 528.579715][T23396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4404'. [ 529.165103][T23428] 8021q: adding VLAN 0 to HW filter on device bond12 [ 529.178982][T23428] nbd: socks must be embedded in a SOCK_ITEM attr [ 529.212298][T23428] bond12: entered promiscuous mode [ 529.221936][T23428] bond12: entered allmulticast mode [ 529.238772][T23428] 8021q: adding VLAN 0 to HW filter on device bond12 [ 529.271549][T23428] team0: Port device bond12 added [ 529.356208][T23435] team0: Port device bond12 removed [ 529.367903][T23435] bond12 (unregistering): Released all slaves [ 529.387595][T23444] netlink: 'syz.0.4411': attribute type 1 has an invalid length. [ 529.813200][ T30] audit: type=1800 audit(1782108261.109:51): pid=23469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4419" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1710 res=0 errno=0 [ 529.868400][T23467] syzkaller0: entered promiscuous mode [ 529.884206][T23467] syzkaller0: entered allmulticast mode [ 529.928627][T23472] netlink: 'syz.4.4422': attribute type 13 has an invalid length. [ 529.955439][T23472] tipc: Resetting bearer [ 529.985695][T23477] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 530.080148][T23486] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 530.506269][T23457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.520395][T23497] workqueue: Failed to create a rescuer kthread for wq "phy6": -EINTR [ 530.869145][T23522] nbd: nbd64 already in use [ 531.030029][T21297] udevd[21297]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 531.393340][T23534] ip6gre1: entered promiscuous mode [ 531.399890][T23534] ip6gre1: entered allmulticast mode [ 531.484127][T23543] pim6reg1: entered promiscuous mode [ 531.490126][T23543] pim6reg1: entered allmulticast mode [ 531.836339][T23563] netlink: 'syz.1.4441': attribute type 1 has an invalid length. [ 531.937276][T23563] 8021q: adding VLAN 0 to HW filter on device bond12 [ 532.019952][T23565] bond12: (slave ip6gretap2): making interface the new active one [ 532.041771][T23565] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 532.052977][T23563] smc: net device lo applied user defined pnetid SYZ2 [ 532.079973][T23563] smc: net device lo erased user defined pnetid SYZ2 [ 533.054722][T23600] __nla_validate_parse: 15 callbacks suppressed [ 533.054742][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4454'. [ 533.120296][ T5622] block nbd10: Receive control failed (result -1) [ 533.491198][T23624] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4457'. [ 533.515794][T23627] syzkaller0: entered promiscuous mode [ 533.529833][T23627] syzkaller0: entered allmulticast mode [ 533.559864][T23628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4460'. [ 533.564676][T23625] pim6reg1: entered promiscuous mode [ 533.574918][T23625] pim6reg1: entered allmulticast mode [ 533.621001][T23628] gretap1: entered allmulticast mode [ 533.670699][T23633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4461'. [ 533.681024][T23636] netlink: 'syz.3.4462': attribute type 1 has an invalid length. [ 533.695208][T23633] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 533.753670][T23636] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 533.759519][T23633] netlink: 'syz.4.4461': attribute type 27 has an invalid length. [ 533.791682][T23633] tipc: Enabling not permitted [ 533.797879][T23633] tipc: Enabling of bearer rejected, failed to enable media [ 534.014338][T23651] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4466'. [ 534.065911][T23658] netlink: 'syz.3.4466': attribute type 1 has an invalid length. [ 534.095756][T23658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.147338][T23660] syzkaller0: entered promiscuous mode [ 534.158004][T23660] syzkaller0: entered allmulticast mode [ 534.185707][T23660] tipc: Started in network mode [ 534.204450][T23660] tipc: Node identity 3ab7f825a209, cluster identity 5 [ 534.215935][T23660] tipc: Enabled bearer , priority 0 [ 534.279519][T23663] netlink: 67 bytes leftover after parsing attributes in process `syz.0.4468'. [ 534.328016][T23660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.342708][T23671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4471'. [ 534.364286][T23660] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.385783][T23660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.604123][T23660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.618539][T23660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.637282][T23660] veth1_vlan: left promiscuous mode [ 534.648785][T23689] netlink: 'syz.1.4472': attribute type 1 has an invalid length. [ 534.650229][T23660] veth0_vlan: left promiscuous mode [ 534.665213][T23660] veth0_vlan: entered promiscuous mode [ 534.675553][T23660] veth1_vlan: entered promiscuous mode [ 534.687830][T23660] veth1_macvtap: left promiscuous mode [ 534.694742][T23660] veth0_macvtap: left promiscuous mode [ 534.705073][T23691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4472'. [ 534.717934][T23660] veth0_macvtap: entered promiscuous mode [ 534.729384][T23660] veth0_macvtap: entered allmulticast mode [ 534.738055][T23660] veth1_macvtap: entered promiscuous mode [ 534.754613][T23660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.763055][T23660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.812862][T23660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.826090][T23660] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 534.839244][T23660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.850509][T23660] 8021q: adding VLAN 0 to HW filter on device bond5 [ 534.862909][T23660] 8021q: adding VLAN 0 to HW filter on device bond7 [ 534.872959][T23660] 8021q: adding VLAN 0 to HW filter on device bond8 [ 534.882574][T23660] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.900883][T23660] 8021q: adding VLAN 0 to HW filter on device bond10 [ 534.911290][T23660] 8021q: adding VLAN 0 to HW filter on device eth0 [ 534.923695][T23660] 8021q: adding VLAN 0 to HW filter on device eth1 [ 534.933113][T23660] 8021q: adding VLAN 0 to HW filter on device eth2 [ 534.942216][T23660] 8021q: adding VLAN 0 to HW filter on device eth3 [ 534.956241][T23659] tipc: Resetting bearer [ 535.000601][T23659] tipc: Disabling bearer [ 535.096756][ T6568] bridge0: port 1(hsr_slave_0) entered blocking state [ 535.103672][ T6568] bridge0: port 1(hsr_slave_0) entered forwarding state [ 535.199370][T23689] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 535.207512][T23698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4474'. [ 535.256143][T23700] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4475'. [ 535.278230][T23700] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 535.413422][T23704] syzkaller0: entered promiscuous mode [ 535.428500][T23704] syzkaller0: entered allmulticast mode [ 535.994028][T23743] netlink: 'syz.1.4487': attribute type 1 has an invalid length. [ 536.108132][T23746] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 536.141130][T23719] netlink: 'syz.2.4477': attribute type 1 has an invalid length. [ 536.192211][T23719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 536.383009][T23753] bond3: (slave veth0_to_bond): making interface the new active one [ 536.393958][T23768] netlink: 'syz.0.4491': attribute type 31 has an invalid length. [ 536.435546][T23753] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 536.474060][T23719] bond3: entered promiscuous mode [ 536.480450][T23719] veth0_to_bond: entered promiscuous mode [ 536.494147][T23719] bond3: entered allmulticast mode [ 536.502923][T23719] veth0_to_bond: entered allmulticast mode [ 536.531718][T23768] xfrm1: entered allmulticast mode [ 536.639430][T23776] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 539.071097][T23746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.203349][T23804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.324468][T23805] __nla_validate_parse: 2 callbacks suppressed [ 539.324504][T23805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4500'. [ 539.633854][T23830] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4507'. [ 539.695317][T23833] netlink: 'syz.4.4508': attribute type 32 has an invalid length. [ 539.745121][T23835] lo speed is unknown, defaulting to 1000 [ 539.761240][T23835] lo speed is unknown, defaulting to 1000 [ 539.779505][T23835] lo speed is unknown, defaulting to 1000 [ 539.803232][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4509'. [ 539.868337][T23836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.907592][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4509'. [ 540.122028][T23835] infiniband syz1: set down [ 540.127254][ T5725] lo speed is unknown, defaulting to 1000 [ 540.133374][T23835] infiniband syz1: added lo [ 540.158034][T23835] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 540.178174][T23846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4513'. [ 540.180400][T23835] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 540.199619][T23846] ip6gre1: entered promiscuous mode [ 540.210964][T23846] ip6gre1: entered allmulticast mode [ 540.265953][T23835] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 540.374293][T23835] RDS/IB: syz1: added [ 540.390517][T23855] bond12: option updelay: invalid value (18446744073709518847) [ 540.398470][T23855] bond12: option updelay: allowed values 0 - 2147483647 [ 540.408137][T23835] smc: adding ib device syz1 with port count 1 [ 540.415009][T23835] smc: ib device syz1 port 1 has no pnetid [ 540.429754][T23855] bond12 (unregistering): Released all slaves [ 540.458639][ T5725] lo speed is unknown, defaulting to 1000 [ 540.522126][T23835] lo speed is unknown, defaulting to 1000 [ 540.541321][T23855] nbd: must specify a device to reconfigure [ 540.568359][T23855] netlink: 'syz.0.4515': attribute type 11 has an invalid length. [ 540.589846][T23855] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4515'. [ 540.878595][T23835] lo speed is unknown, defaulting to 1000 [ 540.989201][T23882] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4519'. [ 541.211421][T23890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4521'. [ 541.231695][T23890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.239044][T23890] IPv6: NLM_F_CREATE should be set when creating new route [ 541.317279][T23896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4523'. [ 541.393721][T23835] lo speed is unknown, defaulting to 1000 [ 541.402551][T23897] netlink: 'syz.4.4523': attribute type 40 has an invalid length. [ 541.649557][T23835] lo speed is unknown, defaulting to 1000 [ 541.794053][T23835] lo speed is unknown, defaulting to 1000 [ 541.862041][ T5621] Bluetooth: hci3: command 0x0405 tx timeout [ 541.935692][T23835] lo speed is unknown, defaulting to 1000 [ 542.071620][T23835] lo speed is unknown, defaulting to 1000 [ 542.197185][T23835] lo speed is unknown, defaulting to 1000 [ 542.315519][T23835] lo speed is unknown, defaulting to 1000 [ 542.489648][T23906] syzkaller1: entered promiscuous mode [ 542.495236][T23906] syzkaller1: entered allmulticast mode [ 542.511276][T23906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4525'. [ 543.107907][ T6573] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.138042][ T6573] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.589702][ T6573] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.598441][ T6573] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.362802][T23965] __nla_validate_parse: 3 callbacks suppressed [ 545.362823][T23965] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4542'. [ 545.648404][T23969] xt_TCPMSS: Only works on TCP SYN packets [ 545.806961][T23973] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4544'. [ 545.872744][T23975] netlink: ct family unspecified [ 545.879917][T23975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.676824][T23989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4550'. [ 546.707331][T23989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4550'. [ 547.121917][T24008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4555'. [ 547.144229][T24008] vlan2: entered allmulticast mode [ 547.156528][T24008] macvtap0: entered allmulticast mode [ 547.218891][T23999] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1897 [ 548.351175][T24033] lo speed is unknown, defaulting to 1000 [ 550.296975][T24100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4560'. [ 551.655737][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4563'. [ 551.695222][T24120] netlink: 'syz.1.4563': attribute type 9 has an invalid length. [ 551.722471][T24120] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.4563'. [ 551.747739][T24122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.764915][T24123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.983943][T24127] netlink: 'syz.4.4566': attribute type 10 has an invalid length. [ 552.002780][T24127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4566'. [ 552.025063][T24127] team0: entered promiscuous mode [ 552.039754][T24127] xfrm0: entered promiscuous mode [ 552.057629][T24127] team0: entered allmulticast mode [ 552.067530][T24127] xfrm0: entered allmulticast mode [ 552.077962][T24127] tipc: Resetting bearer [ 552.094260][T24127] tipc: Resetting bearer [ 552.107860][T24127] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 552.294684][T24134] veth0: entered promiscuous mode [ 552.333324][T24131] veth0: left promiscuous mode [ 553.107325][T24150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4572'. [ 553.144328][T24150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4572'. [ 553.616152][T24162] openvswitch: netlink: IP tunnel dst address not specified [ 554.644419][T24204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4586'. [ 554.698279][T24205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'. [ 556.382013][T24193] bond5: option all_slaves_active: invalid value (127) [ 556.450608][T24193] bond5 (unregistering): Released all slaves [ 556.466988][T24215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4587'. [ 556.570239][T24217] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 556.623906][T24219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4589'. [ 556.633659][T24219] openvswitch: netlink: Flow key attr not present in new flow. [ 556.723262][T24220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4589'. [ 556.743641][T24220] bond0: left allmulticast mode [ 556.901185][T24206] netlink: 'syz.2.4586': attribute type 4 has an invalid length. [ 557.091679][T24228] lo: entered promiscuous mode [ 557.103139][T24228] lo: left allmulticast mode [ 557.110247][T24228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.126030][T24229] netlink: 'syz.4.4591': attribute type 1 has an invalid length. [ 557.205366][T24229] bond5: entered promiscuous mode [ 557.236038][T24229] 8021q: adding VLAN 0 to HW filter on device bond5 [ 557.258781][T24225] vlan2: entered allmulticast mode [ 557.264135][T24225] bond5: entered allmulticast mode [ 557.293252][T24225] bond5: (slave bridge31): making interface the new active one [ 557.304755][T24225] bridge31: entered promiscuous mode [ 557.311429][T24225] bridge31: entered allmulticast mode [ 557.320785][T24225] bond5: (slave bridge31): Enslaving as an active interface with an up link [ 557.549548][T24242] netlink: 'syz.3.4595': attribute type 21 has an invalid length. [ 557.569813][T24242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4595'. [ 557.590814][T24242] netlink: 'syz.3.4595': attribute type 1 has an invalid length. [ 558.165070][T24266] netlink: 'syz.4.4600': attribute type 1 has an invalid length. [ 558.309711][T24266] 8021q: adding VLAN 0 to HW filter on device bond6 [ 558.383557][T24266] bond6: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 558.424379][T24266] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 558.647410][T24288] netlink: 'syz.2.4590': attribute type 1 has an invalid length. [ 559.350604][T24309] netlink: 'syz.0.4609': attribute type 11 has an invalid length. [ 559.475327][T24315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4610'. [ 562.287030][ T30] audit: type=1804 audit(1782108293.519:52): pid=24323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4612" name="/newroot/400/cgroup.controllers" dev="tmpfs" ino=2066 res=1 errno=0 [ 562.325896][T24327] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 562.424243][ T30] audit: type=1800 audit(1782108293.519:53): pid=24323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4612" name="cgroup.controllers" dev="tmpfs" ino=2066 res=0 errno=0 [ 562.570928][ T30] audit: type=1800 audit(1782108293.519:54): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4612" name="cgroup.controllers" dev="tmpfs" ino=2066 res=0 errno=0 [ 562.724556][T24342] netlink: 'syz.0.4617': attribute type 3 has an invalid length. [ 562.749403][T24342] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4617'. [ 563.087278][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.328556][T24354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4621'. [ 564.534920][T24354] ip6gre2: entered promiscuous mode [ 564.553936][T24354] ip6gre2: entered allmulticast mode [ 564.623501][T24358] vlan3: entered allmulticast mode [ 564.648472][T24358] bond0: entered allmulticast mode [ 564.672104][T24358] bond_slave_0: entered allmulticast mode [ 564.691867][T24358] bond_slave_1: entered allmulticast mode [ 564.715047][T24358] dummy0: entered allmulticast mode [ 564.735949][T24358] syz_tun: entered allmulticast mode [ 564.768065][ T6563] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 564.795479][ T6563] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 564.803698][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 564.936634][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 565.618084][ T808] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 566.026151][T24386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4628'. [ 566.037129][T24386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4628'. [ 566.050017][T24386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4628'. [ 566.059617][T24386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4628'. [ 567.633267][T24394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.341181][T24400] lo speed is unknown, defaulting to 1000 [ 568.625880][T24423] netlink: 'syz.3.4637': attribute type 1 has an invalid length. [ 568.736593][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 569.196092][T24437] 5nè‹Ò: entered promiscuous mode [ 570.469390][T24453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4645'. [ 570.478761][T24453] netlink: 'syz.4.4645': attribute type 15 has an invalid length. [ 570.488194][T24453] netlink: 'syz.4.4645': attribute type 25 has an invalid length. [ 570.497564][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4645'. [ 570.623205][T24397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.720151][T24461] netlink: 'syz.4.4646': attribute type 8 has an invalid length. [ 570.836402][ C0] sched: DL replenish lagged too much [ 570.950239][T24471] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 570.971811][T24471] syzkaller1: linktype set to 769 [ 571.007667][T24465] syzkaller0: entered promiscuous mode [ 571.016582][T24464] netlink: 'syz.1.4648': attribute type 22 has an invalid length. [ 571.049456][T24465] syzkaller0: entered allmulticast mode [ 571.061192][T24468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4648'. [ 571.093859][T24469] tipc: Enabled bearer , priority 0 [ 571.130615][T24468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4648'. [ 571.172526][T24465] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 571.318324][T24476] syzkaller0: entered promiscuous mode [ 571.346786][T24476] syzkaller0: entered allmulticast mode [ 571.361319][T24469] tipc: Resetting bearer [ 571.435970][T24463] tipc: Resetting bearer [ 571.448946][T24487] netlink: 912 bytes leftover after parsing attributes in process `syz.3.4654'. [ 571.528276][T24463] tipc: Disabling bearer [ 571.570777][T24489] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 574.690233][T24489] tipc: Started in network mode [ 574.695503][T24489] tipc: Node identity 3204937519db, cluster identity 4711 [ 574.703076][T24489] tipc: Enabled bearer , priority 0 [ 574.757406][T24490] syzkaller0: entered promiscuous mode [ 574.763803][T24490] tipc: Resetting bearer [ 574.775571][T24499] syzkaller0: entered promiscuous mode [ 574.782340][T24499] syzkaller0: entered allmulticast mode [ 575.218760][T24519] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 575.266220][ T6570] tipc: Resetting bearer [ 575.339158][T24487] tipc: Resetting bearer [ 575.388471][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4662'. [ 577.136581][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 578.714414][T24487] tipc: Disabling bearer [ 578.809258][T24543] bridge5: entered promiscuous mode [ 578.814594][T24543] bridge5: entered allmulticast mode [ 578.831212][T24543] team0: Port device bridge5 added [ 578.837589][T24544] bridge0: port 2(team0) entered blocking state [ 578.844051][T24544] bridge0: port 2(team0) entered disabled state [ 578.851759][T24544] team0: entered allmulticast mode [ 578.858158][T24544] team_slave_0: entered allmulticast mode [ 578.863967][T24544] team_slave_1: entered allmulticast mode [ 578.872882][T24544] team0: entered promiscuous mode [ 578.878345][T24544] team_slave_0: entered promiscuous mode [ 578.884206][T24544] team_slave_1: entered promiscuous mode [ 578.898577][T24544] bridge0: port 2(team0) entered blocking state [ 578.904970][T24544] bridge0: port 2(team0) entered forwarding state [ 578.914158][ T808] tipc: Node number set to 736072565 [ 579.708137][T24570] veth0: entered promiscuous mode [ 579.776279][T24566] syzkaller0: entered promiscuous mode [ 579.788460][T24566] syzkaller0: entered allmulticast mode [ 579.797426][T24567] veth0: left promiscuous mode [ 580.095033][T24581] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4672'. [ 580.225003][T24585] netlink: 'syz.3.4674': attribute type 1 has an invalid length. [ 580.238712][T24585] netlink: 'syz.3.4674': attribute type 2 has an invalid length. [ 580.272100][T24588] netlink: 'syz.3.4674': attribute type 1 has an invalid length. [ 580.280581][T24588] netlink: 'syz.3.4674': attribute type 2 has an invalid length. [ 580.313211][T24589] ipt_ECN: cannot use operation on non-tcp rule [ 583.737820][T24603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4678'. [ 583.761274][T24597] xt_hashlimit: size too large, truncated to 1048576 [ 584.151509][T24607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4679'. [ 584.238709][T24608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4678'. [ 584.412178][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4681'. [ 584.459677][T24619] xfrm0: entered allmulticast mode [ 585.302668][T24633] nftables ruleset with unbound set [ 585.390622][T24635] netlink: 'syz.1.4686': attribute type 1 has an invalid length. [ 588.652497][T24651] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 588.691352][T24651] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 588.709748][T24651] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 589.138359][T24668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4694'. [ 589.158619][T24668] hsr_slave_0: left promiscuous mode [ 589.184447][T24668] hsr_slave_1: left promiscuous mode [ 589.451694][T24678] tipc: Enabled bearer , priority 0 [ 589.469174][T24679] syzkaller0: entered promiscuous mode [ 589.477121][T24679] syzkaller0: entered allmulticast mode [ 589.492672][T24682] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 589.528166][T24682] bond12: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 589.556855][T24685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4699'. [ 589.570339][T24682] bond12 (unregistering): Released all slaves [ 590.061408][T24699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4703'. [ 590.135449][T24685] bridge0: port 2(team0) entered disabled state [ 590.359598][T24685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.372142][T24685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.392100][T24685] bridge0: port 1(hsr_slave_0) entered disabled state [ 590.603456][T24685] veth0_macvtap: left allmulticast mode [ 590.736811][ T5622] Bluetooth: hci2: command 0x0405 tx timeout [ 591.012957][T24679] tipc: Resetting bearer [ 591.056744][T24679] tipc: Disabling bearer [ 591.081240][T24699] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 591.111074][T24719] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4704'. [ 591.149690][T14971] tipc: Node number set to 3375364864 [ 591.164938][ T6573] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.210030][ T6573] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.231063][ T6573] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.271638][ T6573] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.285721][T24723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4705'. [ 591.314379][ T6573] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.323336][T24726] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 591.353137][ T6573] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.384330][T24735] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4707'. [ 591.405262][ T6573] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.416573][T24735] openvswitch: netlink: Missing key (keys=40, expected=100) [ 591.437927][T24741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4708'. [ 591.446889][ T6573] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.564818][T24744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4709'. [ 591.973596][T24755] netlink: 'syz.4.4714': attribute type 1 has an invalid length. [ 592.094368][T24755] bond7: entered promiscuous mode [ 592.117852][T24755] 8021q: adding VLAN 0 to HW filter on device bond7 [ 592.159292][T24739] veth5: entered allmulticast mode [ 592.181423][T24739] bond15: (slave veth5): Enslaving as an active interface with an up link [ 592.214610][T24736] lo speed is unknown, defaulting to 1000 [ 592.239035][T24756] bond15 (unregistering): (slave veth5): Releasing backup interface [ 592.281712][T24756] bond15 (unregistering): Released all slaves [ 592.397020][T24759] bond7: (slave bridge33): making interface the new active one [ 592.405012][T24759] bridge33: entered promiscuous mode [ 592.413508][T24759] bond7: (slave bridge33): Enslaving as an active interface with an up link [ 592.423527][T24772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4717'. [ 592.436137][T24772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4717'. [ 592.496626][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 592.575381][T24778] : entered promiscuous mode [ 592.879185][T24781] bond12: invalid ARP target 0.0.0.0 specified for addition [ 592.915441][T24781] bond12: option arp_ip_target: invalid value (0) [ 592.970257][T24781] bond12 (unregistering): Released all slaves [ 593.730160][T24839] macvlan0: left promiscuous mode [ 593.747539][T24839] netlink: 'syz.1.4732': attribute type 2 has an invalid length. [ 593.769418][T24841] sctp: [Deprecated]: syz.4.4733 (pid 24841) Use of struct sctp_assoc_value in delayed_ack socket option. [ 593.769418][T24841] Use struct sctp_sack_info instead [ 593.789983][T24841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.072530][T24853] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR [ 594.439810][T24886] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 594.453263][T24887] x_tables: duplicate underflow at hook 2 [ 594.472151][T24887] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 594.728957][T24903] __nla_validate_parse: 6 callbacks suppressed [ 594.728977][T24903] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4747'. [ 594.745482][T24902] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4747'. [ 594.756880][T24902] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4747'. [ 594.766126][T24902] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4747'. [ 595.062309][T24906] macsec1: entered allmulticast mode [ 595.083906][T24906] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 595.113092][T24923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4745'. [ 595.223153][T24930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4752'. [ 595.336011][T24936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4752'. [ 595.400750][T24928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4751'. [ 595.434904][T24918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 595.497815][ T8269] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 595.550879][T24944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4754'. [ 595.560244][ T8269] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 595.993486][T24969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4757'. [ 596.161440][T24979] netlink: 'syz.0.4758': attribute type 11 has an invalid length. [ 596.175723][T24979] netlink: 'syz.0.4758': attribute type 4 has an invalid length. [ 596.266100][T24965] lo speed is unknown, defaulting to 1000 [ 596.658702][T24996] netlink: 'syz.1.4761': attribute type 1 has an invalid length. [ 596.962765][T25006] vlan3: entered promiscuous mode [ 597.200515][T25013] xt_ecn: cannot match TCP bits for non-tcp packets [ 597.544805][T25023] netlink: 'syz.0.4769': attribute type 1 has an invalid length. [ 597.620533][T25023] bond12: entered promiscuous mode [ 597.630565][T25023] 8021q: adding VLAN 0 to HW filter on device bond12 [ 597.756958][T25027] netlink: 'syz.2.4768': attribute type 29 has an invalid length. [ 597.877436][T25035] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 598.019888][T25039] vlan3: entered promiscuous mode [ 598.052903][T25039] bridge0: entered promiscuous mode [ 598.102692][T25039] netlink: 'syz.3.4774': attribute type 4 has an invalid length. [ 598.523520][T25054] Unsupported ieee802154 address type: 0 [ 598.961868][T25060] netlink: 'syz.0.4780': attribute type 1 has an invalid length. [ 599.088579][T25060] 8021q: adding VLAN 0 to HW filter on device bond13 [ 599.104968][T25074] netlink: 'syz.1.4784': attribute type 1 has an invalid length. [ 599.279062][T25071] bond13: (slave veth7): Enslaving as an active interface with a down link [ 599.302096][T25073] bond0: (slave dummy0): Releasing backup interface [ 599.313306][T25073] dummy0: left allmulticast mode [ 599.332476][T25073] bond13: (slave dummy0): making interface the new active one [ 599.349546][T25073] dummy0: entered promiscuous mode [ 599.375509][T25073] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 599.515887][T25074] netlink: 'syz.1.4784': attribute type 6 has an invalid length. [ 600.063842][T25117] 0: reclassify loop, rule prio 0, protocol 700 [ 600.116251][T25120] x_tables: duplicate underflow at hook 1 [ 600.511290][T25140] __nla_validate_parse: 9 callbacks suppressed [ 600.511335][T25140] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4800'. [ 600.732165][T25150] netlink: 12700 bytes leftover after parsing attributes in process `syz.1.4800'. [ 600.834245][T25162] netlink: 'syz.2.4806': attribute type 11 has an invalid length. [ 600.843103][T25162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4806'. [ 601.004777][T25168] tipc: Resetting bearer [ 601.100649][T25168] geneve0: left allmulticast mode [ 601.185491][T25168] erspan0: left allmulticast mode [ 601.228911][T25171] syzkaller0: entered promiscuous mode [ 601.234752][T25171] syzkaller0: entered allmulticast mode [ 601.243183][ T6573] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.253023][ T6573] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 601.262364][ T6573] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 56281 - 0 [ 601.272548][ T6573] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.282023][ T6573] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 601.291392][ T6573] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 56281 - 0 [ 601.300934][ T6573] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.311388][ T6573] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 601.321175][ T6573] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 56281 - 0 [ 601.332437][ T6573] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.344740][ T6573] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 601.354403][ T6573] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 56281 - 0 [ 601.364033][T25172] tipc: Enabled bearer , priority 0 [ 601.384770][T25166] tipc: Resetting bearer [ 601.398582][T25166] tipc: Disabling bearer [ 601.430810][T25175] netlink: 'syz.1.4810': attribute type 3 has an invalid length. [ 601.441650][T25175] xt_ipcomp: unknown flags 1D [ 601.573319][T25181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4812'. [ 601.671083][T25184] netlink: 'syz.1.4814': attribute type 1 has an invalid length. [ 601.722002][T25184] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4814'. [ 601.800046][T25198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4815'. [ 601.941391][T25206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4815'. [ 602.235776][T25222] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4824'. [ 602.495182][T25230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4827'. [ 602.720676][T25239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4829'. [ 602.882323][T25247] ipip1: entered promiscuous mode [ 602.891840][T25247] ipip1: entered allmulticast mode [ 603.018674][T25255] netlink: 'syz.4.4832': attribute type 1 has an invalid length. [ 603.035104][T25255] atomic_op ffff888061a09198 conn xmit_atomic 0000000000000000 [ 603.047437][T25255] batadv_slave_1: entered promiscuous mode [ 603.361195][T25273] netlink: 'syz.3.4840': attribute type 25 has an invalid length. [ 603.370421][T25273] netlink: 'syz.3.4840': attribute type 3 has an invalid length. [ 603.410984][T25277] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 603.537490][T25277] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 603.611038][T25268] : entered promiscuous mode [ 603.985682][T25315] netlink: 'syz.3.4850': attribute type 27 has an invalid length. [ 604.065239][T25315] batman_adv: batadv0: Adding interface: dummy0 [ 604.072506][T25315] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 604.101967][T25315] batman_adv: batadv0: Interface activated: dummy0 [ 604.527878][T25348] kÿ: entered promiscuous mode [ 604.720036][T25356] openvswitch: netlink: Message has 8 unknown bytes. [ 604.742838][T25356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.824103][T25363] IPv6: NLM_F_CREATE should be specified when creating new route [ 604.987578][T25370] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 605.235727][T25386] netlink: 'syz.4.4871': attribute type 23 has an invalid length. [ 605.690568][T25414] IPVS: length: 191 != 8 [ 605.919825][ T30] audit: type=1804 audit(1782108337.219:55): pid=25432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4880" name="/newroot/409/cgroup.controllers" dev="tmpfs" ino=2125 res=1 errno=0 [ 605.960949][ T30] audit: type=1800 audit(1782108337.219:56): pid=25432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4880" name="cgroup.controllers" dev="tmpfs" ino=2125 res=0 errno=0 [ 606.384588][T25446] __nla_validate_parse: 12 callbacks suppressed [ 606.384608][T25446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4884'. [ 606.385295][T25447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4884'. [ 606.412378][T25446] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 607.244439][T25453] syzkaller0: entered promiscuous mode [ 607.250193][T25453] syzkaller0: entered allmulticast mode [ 607.294352][T25452] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 608.218821][T25388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 608.617898][T25470] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4892'. [ 608.971746][T25491] syzkaller0: entered promiscuous mode [ 608.991069][T25491] syzkaller0: entered allmulticast mode [ 609.416832][T25515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4906'. [ 611.937782][ T6556] dummy0: left promiscuous mode [ 612.182872][T25533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4909'. [ 612.259608][T25505] lo speed is unknown, defaulting to 1000 [ 612.547918][T25539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4912'. [ 613.398541][T25572] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 613.407398][T25572] mac80211_hwsim hwsim62 wlan0: entered allmulticast mode [ 613.414714][T25572] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 613.451563][T25573] openvswitch: netlink: Message has 192 unknown bytes. [ 613.581249][T25584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4917'. [ 613.602735][T25584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4917'. [ 613.623355][T25582] syzkaller0: entered promiscuous mode [ 613.639749][T25589] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4924'. [ 613.654331][T25588] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 613.655174][T25582] syzkaller0: entered allmulticast mode [ 613.679128][T25586] syzkaller0: entered promiscuous mode [ 613.699468][T25586] syzkaller0: entered allmulticast mode [ 613.718105][T25584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4917'. [ 613.729635][T25584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4917'. [ 613.783119][T25584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4917'. [ 613.795640][T25584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4917'. [ 613.817946][T25584] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4917'. [ 614.340166][T25616] tipc: Enabled bearer , priority 0 [ 614.399987][T25620] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 614.472105][T25634] syzkaller1: entered promiscuous mode [ 614.479853][T25634] syzkaller1: entered allmulticast mode [ 614.527652][T25633] ipip1: entered promiscuous mode [ 614.542599][T25633] ipip1: entered allmulticast mode [ 614.625869][T25615] tipc: Disabling bearer [ 614.648826][T25640] netlink: 'syz.0.4937': attribute type 1 has an invalid length. [ 614.674690][T25640] 8021q: adding VLAN 0 to HW filter on device bond14 [ 614.704966][T25640] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 614.916103][T25650] Bluetooth: MGMT ver 1.23 [ 615.138560][T25663] syzkaller0: entered promiscuous mode [ 615.168841][T25663] syzkaller0: entered allmulticast mode [ 615.269996][T25666] IPv6: sit3: Disabled Multicast RS [ 615.511355][T25681] bond0: Unable to set down delay as MII monitoring is disabled [ 615.542342][T25681] bond0 (unregistering): Released all slaves [ 616.524004][T25744] sock: sock_set_timeout: `syz.0.4969' (pid 25744) tries to set negative timeout [ 616.697588][T25758] syzkaller0: entered promiscuous mode [ 616.703746][T25758] syzkaller0: entered allmulticast mode [ 616.862771][T25766] netlink: 'syz.0.4975': attribute type 49 has an invalid length. [ 616.927661][T25768] netlink: 'syz.0.4976': attribute type 89 has an invalid length. [ 616.940952][T25768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.028459][T25771] syzkaller1: entered promiscuous mode [ 617.034615][T25771] syzkaller1: entered allmulticast mode [ 617.059428][T25773] netlink: 'syz.2.4977': attribute type 4 has an invalid length. [ 617.098087][T25774] netlink: 'syz.0.4978': attribute type 1 has an invalid length. [ 617.393983][T25789] tun0: tun_chr_ioctl cmd 1074812117 [ 617.536234][T25798] vlan2: entered promiscuous mode [ 617.541586][T25798] bridge0: entered promiscuous mode [ 617.732392][T25808] xt_hashlimit: size too large, truncated to 1048576 [ 617.964932][T25819] __nla_validate_parse: 29 callbacks suppressed [ 617.964965][T25819] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4992'. [ 618.011648][T25821] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4993'. [ 618.060644][T25821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4993'. [ 618.463546][T25843] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 618.542627][T25851] netlink: 'syz.3.5000': attribute type 3 has an invalid length. [ 618.567084][T25851] netlink: 'syz.3.5000': attribute type 3 has an invalid length. [ 618.728575][T25858] block nbd0: must specify backend [ 619.149592][T25884] syzkaller0: entered promiscuous mode [ 619.155753][T25884] syzkaller0: entered allmulticast mode [ 619.231192][T25888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5007'. [ 619.588332][T25896] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5011'. [ 621.755845][T25860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 622.045870][T25924] team0: left promiscuous mode [ 622.050937][T25924] xfrm0: left promiscuous mode [ 622.163373][T25928] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5020'. [ 622.210439][T25932] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5020'. [ 622.273563][T25934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5022'. [ 622.516970][T25946] batadv_slave_1: entered promiscuous mode [ 622.692809][T25954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5026'. [ 622.751814][T25957] bond8: Unable to set up delay as MII monitoring is disabled [ 622.762952][T25957] bond8 (unregistering): Released all slaves [ 622.870634][T25963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5028'. [ 623.216694][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 623.318230][T25945] batadv_slave_1: left promiscuous mode [ 623.710782][T25997] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 623.728649][T25998] netlink: 'syz.3.5036': attribute type 10 has an invalid length. [ 623.775760][T25998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5036'. [ 623.840550][T26002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5039'. [ 623.896743][T26005] --map-set only usable from mangle table [ 623.997421][T26011] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 624.039626][T25988] lo speed is unknown, defaulting to 1000 [ 624.319545][T26019] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5044'. [ 624.478822][T26025] xt_TCPMSS: Only works on TCP SYN packets [ 624.487213][T26029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5048'. [ 624.505730][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.981267][T26047] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5051'. [ 625.488815][T26053] lo speed is unknown, defaulting to 1000 [ 627.431681][T26032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 627.779986][T26083] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5060'. [ 627.803891][T26083] tipc: Invalid UDP bearer configuration [ 627.803935][T26083] tipc: Enabling of bearer rejected, failed to enable media [ 628.048194][ T5742] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 628.065538][T26092] netlink: 'syz.1.5063': attribute type 12 has an invalid length. [ 628.114428][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5062'. [ 628.150316][T26088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5062'. [ 628.168678][T26088] ip6tnl0: Caught tx_queue_len zero misconfig [ 628.234485][T26111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5066'. [ 628.455350][T26118] vlan0: entered promiscuous mode [ 628.721627][T26142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5076'. [ 628.736682][ T8259] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 628.821406][T26139] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5070'. [ 629.023973][T26156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5080'. [ 629.124344][T26163] netlink: 'syz.4.5082': attribute type 2 has an invalid length. [ 629.517202][T26187] netlink: 'syz.0.5088': attribute type 8 has an invalid length. [ 629.599586][T26191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.637261][ T5621] Bluetooth: hci3: link tx timeout [ 629.642843][ T5621] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 629.811997][T26207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5094'. [ 629.830371][T26208] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5091'. [ 629.929113][T26212] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.5095'. [ 630.385362][T26225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5099'. [ 630.402036][T26225] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5099'. [ 630.553715][T26207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5094'. [ 631.062889][T26240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5105'. [ 631.157917][T26240] 8021q: adding VLAN 0 to HW filter on device bond6 [ 631.202915][T26240] bond6 (unregistering): Released all slaves [ 631.251673][T26246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.699983][ T5622] Bluetooth: hci3: command 0x0405 tx timeout [ 631.765685][T26264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5112'. [ 632.467719][T26290] xfrm0: entered allmulticast mode [ 632.489089][T26290] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 632.541357][T26293] tipc: Enabling of bearer rejected, failed to enable media [ 632.960130][T26309] netlink: 'syz.3.5125': attribute type 1 has an invalid length. [ 633.014194][T26309] 8021q: adding VLAN 0 to HW filter on device bond6 [ 633.221707][T26318] batadv_slave_1: entered promiscuous mode [ 633.257195][T26316] batadv_slave_1: left promiscuous mode [ 633.545362][T26330] lo: Caught tx_queue_len zero misconfig [ 633.572605][T26330] netlink: 'syz.4.5128': attribute type 1 has an invalid length. [ 633.910597][T26336] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 634.245668][T26352] __nla_validate_parse: 3 callbacks suppressed [ 634.245690][T26352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5140'. [ 634.446748][T26357] syzkaller0: entered promiscuous mode [ 634.456747][T26357] syzkaller0: entered allmulticast mode [ 635.131429][T26401] block nbd11: server does not support multiple connections per device. [ 635.193948][T26401] block nbd11: shutting down sockets [ 635.462941][T26418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5159'. [ 635.482891][T26418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5159'. [ 635.507595][T26418] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5159'. [ 635.519308][T26418] netlink: 'syz.3.5159': attribute type 3 has an invalid length. [ 635.544768][T26418] netlink: 'syz.3.5159': attribute type 2 has an invalid length. [ 635.565242][T26418] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5159'. [ 635.587769][T26418] netlink: 'syz.3.5159': attribute type 2 has an invalid length. [ 635.827361][T26430] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5163'. [ 635.851920][T26430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.875627][T26430] netlink: 'syz.4.5163': attribute type 1 has an invalid length. [ 635.885831][T26431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5162'. [ 635.919198][T26430] block nbd0: must specify backend [ 635.935899][T26430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5163'. [ 635.995478][ T6568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.015129][ T6568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.205173][T26449] syzkaller1: entered promiscuous mode [ 636.218929][T26449] syzkaller1: entered allmulticast mode [ 636.240344][T26449] netlink: 'syz.0.5169': attribute type 1 has an invalid length. [ 636.249030][T26449] netlink: 'syz.0.5169': attribute type 2 has an invalid length. [ 636.257284][T26449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5169'. [ 636.413669][T26455] syzkaller1: entered promiscuous mode [ 636.435580][T26455] syzkaller1: entered allmulticast mode [ 636.513547][T26459] netlink: 'syz.0.5172': attribute type 4 has an invalid length. [ 636.551106][T26461] veth1_to_bond: Caught tx_queue_len zero misconfig [ 636.774258][T26473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5176'. [ 636.803058][T26473] unsupported nlmsg_type 40 [ 636.943095][T26493] netlink: 'syz.1.5182': attribute type 1 has an invalid length. [ 636.951439][T26493] netlink: 'syz.1.5182': attribute type 1 has an invalid length. [ 636.968851][T26493] netlink: 'syz.1.5182': attribute type 2 has an invalid length. [ 638.430999][T26561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 638.443309][T26561] bond4: (slave bond5): making interface the new active one [ 638.453800][T26561] bond4: (slave bond5): Enslaving as an active interface with an up link [ 638.832845][T26589] sch_tbf: peakrate 2 is lower than or equals to rate 8 ! [ 639.124621][T26599] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 639.255000][T26607] only policy match revision 0 supported [ 639.255021][T26607] unable to load match [ 639.574735][T26581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.831354][T26627] __nla_validate_parse: 4 callbacks suppressed [ 639.831396][T26627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5214'. [ 640.035636][T26629] syzkaller0: entered promiscuous mode [ 640.042539][T26629] syzkaller0: entered allmulticast mode [ 640.069267][T26629] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.5217'. [ 640.269339][T26643] syzkaller0: entered promiscuous mode [ 640.288525][T26643] syzkaller0: entered allmulticast mode [ 640.789581][T26680] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5231'. [ 640.896197][T26686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5232'. [ 641.029596][T26686] 8021q: adding VLAN 0 to HW filter on device bond7 [ 641.048277][T26695] validate_nla: 4 callbacks suppressed [ 641.048297][T26695] netlink: 'syz.2.5228': attribute type 1 has an invalid length. [ 641.083958][T26690] bond7: option ad_select: unable to set because the bond device is up [ 641.115066][T26695] netlink: 'syz.2.5228': attribute type 4 has an invalid length. [ 641.126113][T26695] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5228'. [ 641.143373][T26692] netlink: 'syz.2.5228': attribute type 1 has an invalid length. [ 641.289599][T26692] netlink: 'syz.2.5228': attribute type 4 has an invalid length. [ 641.299452][T26692] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5228'. [ 641.447695][T26699] tipc: Enabling of bearer rejected, failed to enable media [ 641.481199][T26718] xt_CT: No such helper "snmp_trap" [ 641.614879][T26729] geneve0: entered promiscuous mode [ 641.625444][T26729] geneve0: left promiscuous mode [ 641.998153][T26746] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5247'. [ 642.008132][T26746] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5247'. [ 642.244820][T26756] netlink: 'syz.0.5250': attribute type 21 has an invalid length. [ 642.275134][T26756] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5250'. [ 642.329352][T26756] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5250'. [ 642.419726][T26767] netlink: 'syz.4.5253': attribute type 11 has an invalid length. [ 642.429437][T26766] vlan4: entered allmulticast mode [ 642.449472][T26766] bond0: entered allmulticast mode [ 642.552806][T26775] netlink: 'syz.4.5256': attribute type 1 has an invalid length. [ 642.620838][T26775] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 642.631776][T26783] sock: sock_timestamping_bind_phc: sock not bind to device [ 642.654899][T26784] IPVS: Error connecting to the multicast addr [ 642.701256][T26783] IPVS: Error connecting to the multicast addr [ 643.762033][T26841] netlink: 'syz.0.5272': attribute type 11 has an invalid length. [ 645.257737][T26934] bond0: entered promiscuous mode [ 645.275770][T26934] bond_slave_0: entered promiscuous mode [ 645.299721][T26934] bond_slave_1: entered promiscuous mode [ 645.349318][T26934] bond0: left promiscuous mode [ 645.365460][T26934] bond_slave_0: left promiscuous mode [ 645.390887][T26934] bond_slave_1: left promiscuous mode [ 645.476186][T26945] geneve4: entered promiscuous mode [ 645.518818][ T6570] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 41904 - 0 [ 645.545921][ T6570] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 41904 - 0 [ 645.588726][ T6570] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 41904 - 0 [ 645.619718][ T6570] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 41904 - 0 [ 645.702160][T26962] __nla_validate_parse: 7 callbacks suppressed [ 645.702191][T26962] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5301'. [ 646.125310][T26995] syzkaller0: entered promiscuous mode [ 646.147721][T26995] syzkaller0: entered allmulticast mode [ 646.184063][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5308'. [ 646.778915][T27024] xt_NFQUEUE: number of queues (65535) out of range (got 65538) [ 646.794088][T27026] xt_NFQUEUE: number of queues (65535) out of range (got 65538) [ 647.038249][T27035] netlink: 'syz.3.5321': attribute type 5 has an invalid length. [ 647.149736][T27043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5322'. [ 647.313267][T27052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5324'. [ 647.374379][T27055] xt_ipcomp: unknown flags 1D [ 647.418346][T27032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5320'. [ 647.455312][T27036] syzkaller0: delete flow: hash 290206071 index 1 [ 647.481069][T27052] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 647.569324][T27062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5327'. [ 647.584486][T27064] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5327'. [ 647.818853][T27077] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5330'. [ 647.850017][T27077] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 648.080449][T27094] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 648.134249][T27099] netlink: 'syz.2.5325': attribute type 1 has an invalid length. [ 648.144218][T27099] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5325'. [ 648.154363][T27099] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5325'. [ 648.558024][T27109] syzkaller0: entered promiscuous mode [ 648.565758][T27109] syzkaller0: entered allmulticast mode [ 648.809731][T27111] syzkaller0: entered promiscuous mode [ 648.826781][T27111] syzkaller0: entered allmulticast mode [ 649.067514][T27134] tipc: Enabled bearer , priority 0 [ 649.097292][T27134] syzkaller0: entered promiscuous mode [ 649.115010][T27134] syzkaller0: entered allmulticast mode [ 649.242212][T27134] tipc: Resetting bearer [ 649.308990][T27133] tipc: Resetting bearer [ 649.331626][T27133] tipc: Disabling bearer [ 649.749665][T27173] netlink: 'syz.0.5347': attribute type 13 has an invalid length. [ 649.790100][T27173] netlink: 'syz.0.5347': attribute type 17 has an invalid length. [ 649.909923][T27173] sit0: left promiscuous mode [ 649.984214][T27173] syz_tun: left promiscuous mode [ 650.060773][T27173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.071175][T27173] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.087878][T27173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.166508][T27173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.179531][T27173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.217146][T27173] veth1_vlan: left promiscuous mode [ 650.224348][T27173] veth0_vlan: left promiscuous mode [ 650.231495][T27173] veth0_vlan: entered promiscuous mode [ 650.253183][T27173] veth1_vlan: entered promiscuous mode [ 650.277139][T27173] veth1_macvtap: left promiscuous mode [ 650.293346][T27173] veth0_macvtap: left promiscuous mode [ 650.305538][T27173] veth0_macvtap: entered promiscuous mode [ 650.319061][T27173] veth0_macvtap: entered allmulticast mode [ 650.331357][T27173] macvtap0: left promiscuous mode [ 650.374556][T27173] veth1_macvtap: entered promiscuous mode [ 650.412901][T27173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.436009][T27173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.462139][T27173] gre1: left allmulticast mode [ 650.503914][T27173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 650.525894][T27173] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 650.563472][T27173] 8021q: adding VLAN 0 to HW filter on device bond4 [ 650.593321][T27173] 8021q: adding VLAN 0 to HW filter on device bond5 [ 650.618239][T27173] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.634996][T27173] bond7: left promiscuous mode [ 650.646095][T27173] 8021q: adding VLAN 0 to HW filter on device bond7 [ 650.667283][T27173] bond8: left promiscuous mode [ 650.678776][T27173] 8021q: adding VLAN 0 to HW filter on device bond8 [ 650.698151][T27173] 8021q: adding VLAN 0 to HW filter on device bond9 [ 650.720219][T27173] 8021q: adding VLAN 0 to HW filter on device bond10 [ 650.738721][T27173] bond11: left promiscuous mode [ 650.746802][T27173] bridge0: left promiscuous mode [ 650.759189][T27173] 8021q: adding VLAN 0 to HW filter on device bond11 [ 650.778573][T27173] vlan2: left allmulticast mode [ 650.783499][T27173] macvtap0: left allmulticast mode [ 650.799318][T27173] veth0_macvtap: left allmulticast mode [ 650.817030][T27173] geneve2: left promiscuous mode [ 650.882729][T27173] gretap1: left allmulticast mode [ 650.904470][T27173] xfrm1: left allmulticast mode [ 650.924000][T27173] vlan3: left allmulticast mode [ 650.938581][T27173] bond0: left allmulticast mode [ 650.943928][T27173] bond_slave_0: left allmulticast mode [ 650.950546][T27173] bond_slave_1: left allmulticast mode [ 650.957093][T27173] syz_tun: left allmulticast mode [ 650.973589][T27173] 8021q: adding VLAN 0 to HW filter on device eth0 [ 650.997251][T27173] 8021q: adding VLAN 0 to HW filter on device eth1 [ 651.017846][T27173] 8021q: adding VLAN 0 to HW filter on device eth2 [ 651.036079][T27173] 8021q: adding VLAN 0 to HW filter on device eth3 [ 651.054714][T27173] bond12: left promiscuous mode [ 651.122064][T26943] bridge0: port 1(hsr_slave_0) entered blocking state [ 651.129029][T26943] bridge0: port 1(hsr_slave_0) entered listening state [ 651.154115][T26943] bridge0: port 2(team0) entered blocking state [ 651.160537][T26943] bridge0: port 2(team0) entered listening state [ 651.170495][T27142] lo speed is unknown, defaulting to 1000 [ 651.359535][ T6550] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.368369][ T6550] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.380454][ T6574] bond14: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 651.414099][ T6574] bond14: (slave veth0_to_bond): making interface the new active one [ 651.449444][ T6574] bond14: active interface up! [ 651.470686][T27172] lo speed is unknown, defaulting to 1000 [ 651.470718][T26943] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.508536][T26943] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.528976][T26943] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.551045][T26943] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.572236][T26943] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.584981][T26943] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.623352][T26943] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.680020][T26943] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.715307][T26943] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.734552][T27208] syz_tun: entered allmulticast mode [ 651.741814][T27210] IPv6: addrconf: prefix option has invalid lifetime [ 651.752868][T27208] __nla_validate_parse: 7 callbacks suppressed [ 651.752901][T27208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5350'. [ 651.853226][T26943] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.881236][T27204] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5350'. [ 651.894814][T27210] ip6tnl1: entered allmulticast mode [ 652.071483][T27208] syz_tun (unregistering): left allmulticast mode [ 652.088925][T27220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5353'. [ 652.144673][T27218] netlink: 'syz.0.5353': attribute type 29 has an invalid length. [ 652.297056][ T6567] bond13: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 653.115008][T27238] xt_hashlimit: size too large, truncated to 1048576 [ 653.428989][T27271] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5362'. [ 653.438823][T27271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5362'. [ 653.453313][T27271] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5362'. [ 653.463661][T27271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5362'. [ 653.553359][T27278] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5364'. [ 653.804134][T27298] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.5366'. [ 655.567277][T27244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.112296][T27343] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5374'. [ 656.373968][T27328] lo speed is unknown, defaulting to 1000 [ 656.659632][T27368] ipip0: entered promiscuous mode [ 656.672453][T27368] ipip0: entered allmulticast mode [ 656.917276][T27380] __nla_validate_parse: 1 callbacks suppressed [ 656.917295][T27380] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5381'. [ 657.111843][ T5280] veth0_macvtap: left promiscuous mode [ 657.595209][T27401] netlink: 'syz.3.5385': attribute type 4 has an invalid length. [ 657.636540][T27401] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5385'. [ 657.721700][T27411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5388'. [ 658.360529][T27417] bond15: entered promiscuous mode [ 658.373183][T27417] bond15: entered allmulticast mode [ 658.562414][T27431] ieee802154 phy1 wpan1: encryption failed: -22 [ 658.692195][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5394'. [ 658.996212][T27469] netlink: 'syz.3.5399': attribute type 1 has an invalid length. [ 659.036294][T27469] netlink: 'syz.3.5399': attribute type 1 has an invalid length. [ 659.307386][T27471] syzkaller0: entered promiscuous mode [ 659.315353][T27471] syzkaller0: entered allmulticast mode [ 659.448673][T27489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5404'. [ 659.461304][T27491] netlink: 'syz.4.5406': attribute type 10 has an invalid length. [ 659.470962][T27491] team0: left allmulticast mode [ 659.476074][T27491] xfrm0: left allmulticast mode [ 659.484240][T27491] tipc: Resetting bearer [ 659.498660][T27491] tipc: Resetting bearer [ 659.505236][T27491] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.515071][T27491] bond0: (slave team0): Enslaving as an active interface with an up link [ 659.625019][T27495] tap0: tun_chr_ioctl cmd 1074025692 [ 659.659711][T27495] sctp: [Deprecated]: syz.3.5407 (pid 27495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.659711][T27495] Use struct sctp_sack_info instead [ 659.756133][T27508] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5410'. [ 659.774272][T27508] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 659.910890][T27511] syzkaller0: entered promiscuous mode [ 659.925818][T27511] syzkaller0: entered allmulticast mode [ 659.969054][T27513] netlink: 36764 bytes leftover after parsing attributes in process `syz.0.5412'. [ 659.995120][T27520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5411'. [ 660.083988][T27511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5411'. [ 660.119578][T27520] bond17 (unregistering): Released all slaves [ 660.452192][T27557] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5416'. [ 663.281515][T27539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.422836][T27608] __nla_validate_parse: 5 callbacks suppressed [ 663.422856][T27608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5434'. [ 663.447198][T27608] netlink: 'syz.1.5434': attribute type 11 has an invalid length. [ 663.493167][T27608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5434'. [ 663.494138][T26943] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.503069][T27608] netlink: 'syz.1.5434': attribute type 11 has an invalid length. [ 663.521983][T26943] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.530572][T26943] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.542642][T26943] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.565564][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5436'. [ 663.621997][T27620] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 663.727556][T27630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5442'. [ 663.812114][T27635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5443'. [ 663.991897][T27643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5446'. [ 664.453476][T27653] tipc: Enabled bearer , priority 0 [ 664.464312][T27654] syzkaller0: entered promiscuous mode [ 664.480367][T27654] syzkaller0: entered allmulticast mode [ 664.713030][T27647] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 664.987297][T27691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5453'. [ 665.016261][T27653] tipc: Resetting bearer [ 665.241664][T27646] tipc: Resetting bearer [ 665.313388][T27708] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5456'. [ 665.375184][T27712] netlink: 'syz.3.5458': attribute type 30 has an invalid length. [ 665.562573][T27646] tipc: Disabling bearer [ 665.606242][T27719] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5459'. [ 665.615848][T27719] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5459'. [ 665.629415][ T808] tipc: Node number set to 1507685685 [ 665.788807][T27729] bridge0: port 1(vlan5) entered blocking state [ 665.821904][T27729] bridge0: port 1(vlan5) entered disabled state [ 665.855958][T27729] vlan5: entered allmulticast mode [ 665.884645][T27729] geneve0: entered allmulticast mode [ 665.922020][T27729] vlan5: entered promiscuous mode [ 665.948137][T27729] geneve0: entered promiscuous mode [ 666.001447][T27735] netlink: 'syz.0.5464': attribute type 10 has an invalid length. [ 666.061006][T27735] bond14: (slave veth0_to_bond): Releasing active interface [ 666.114456][T27735] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 666.168690][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 666.177965][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 666.185254][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 666.193462][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 666.201291][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.054294][T27741] lo speed is unknown, defaulting to 1000 [ 667.151871][T27783] xt_hashlimit: size too large, truncated to 1048576 [ 667.383977][T27796] nbd: must specify at least one socket [ 667.879029][T27808] batman_adv: batadv0: Interface deactivated: dummy0 [ 668.209338][ T6574] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.220951][ T6574] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.233275][ T6574] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.243435][ T6574] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.263067][ T5622] Bluetooth: hci0: command tx timeout [ 668.293730][ T6574] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.344449][ T6574] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.395805][ T6574] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.424780][ T6574] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.755176][T27741] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.763204][T27741] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.772616][T27741] bridge_slave_0: entered allmulticast mode [ 668.782796][T27741] bridge_slave_0: entered promiscuous mode [ 668.843252][T27862] bond8: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 668.865735][T27862] bond8 (unregistering): Released all slaves [ 668.914578][T27741] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.930225][T27741] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.940744][T27741] bridge_slave_1: entered allmulticast mode [ 668.951443][T27741] bridge_slave_1: entered promiscuous mode [ 669.043771][T27741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.061730][T27741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.174031][T27741] team0: Port device team_slave_0 added [ 669.190838][T27741] team0: Port device team_slave_1 added [ 669.266051][T27741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.290360][T27741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.342073][T27741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.369801][T27741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.379166][T27741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.411437][T27741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.425897][T27883] syzkaller0: entered promiscuous mode [ 669.432550][T27883] syzkaller0: entered allmulticast mode [ 669.517809][T27889] __nla_validate_parse: 10 callbacks suppressed [ 669.517828][T27889] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5501'. [ 669.543015][T27890] netlink: 'syz.2.5501': attribute type 2 has an invalid length. [ 669.551699][T27893] netlink: 'syz.2.5501': attribute type 2 has an invalid length. [ 669.578256][T27892] tipc: Enabled bearer , priority 0 [ 669.605130][T27741] hsr_slave_0: entered promiscuous mode [ 669.615364][T27741] hsr_slave_1: entered promiscuous mode [ 670.193942][T27908] tipc: Resetting bearer [ 670.337228][ T5622] Bluetooth: hci0: command tx timeout [ 670.768496][T27882] tipc: Resetting bearer [ 670.938935][T27882] tipc: Disabling bearer [ 670.975048][ T6567] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.987926][ T6567] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 41904 - 0 [ 670.997606][T24710] tipc: Node number set to 2562652197 [ 671.010211][T27930] ip6gre0: Caught tx_queue_len zero misconfig [ 671.028380][ T6567] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.037351][ T6567] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 41904 - 0 [ 671.050012][ T6567] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.072198][ T6567] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 41904 - 0 [ 671.097358][ T6567] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.127848][ T6567] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 41904 - 0 [ 672.417151][ T5622] Bluetooth: hci0: command tx timeout [ 673.222465][T27741] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.573502][T27741] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.798070][T27741] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.497198][ T5622] Bluetooth: hci0: command tx timeout [ 674.665283][T27741] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.433418][ T5622] block nbd11: Receive control failed (result -32) [ 679.440799][ T5621] block nbd11: Receive control failed (result -32) [ 679.765476][T27952] netlink: 'syz.4.5510': attribute type 4 has an invalid length. [ 679.774302][T27741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 679.823039][T27741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 679.843349][T27953] GUP no longer grows the stack in syz.3.5509 (27953): 200000003000-20000000a000 (200000001000) [ 679.882122][T27741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 679.923451][T27953] CPU: 1 UID: 0 PID: 27953 Comm: syz.3.5509 Not tainted syzkaller #0 PREEMPT(full) [ 679.923482][T27953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 679.923506][T27953] Call Trace: [ 679.923518][T27953] [ 679.923527][T27953] dump_stack_lvl+0xe8/0x150 [ 679.923556][T27953] __get_user_pages+0x238c/0x2720 [ 679.923583][T27953] ? __gup_longterm_locked+0xc3b/0x15c0 [ 679.923619][T27953] ? rcu_is_watching+0x15/0xb0 [ 679.923644][T27953] __gup_longterm_locked+0xd52/0x15c0 [ 679.923669][T27953] ? gup_fast_fallback+0xbc4/0x20d0 [ 679.923695][T27953] ? rcu_is_watching+0x15/0xb0 [ 679.923717][T27953] ? rcu_is_watching+0x15/0xb0 [ 679.923741][T27953] gup_fast_fallback+0x1d82/0x20d0 [ 679.923782][T27953] ? __pfx_gup_fast_fallback+0x10/0x10 [ 679.923808][T27953] ? __fget_files+0x2a/0x420 [ 679.923830][T27953] ? is_valid_gup_args+0x11f/0x200 [ 679.923853][T27953] ? get_user_pages_fast+0x4d/0xb0 [ 679.923877][T27953] __iov_iter_get_pages_alloc+0x378/0xa40 [ 679.923919][T27953] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 679.923951][T27953] iov_iter_get_pages2+0x5e/0xa0 [ 679.923980][T27953] __se_sys_vmsplice+0x7b5/0x1660 [ 679.924018][T27953] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 679.924046][T27953] ? __pfx_futex_wake+0x10/0x10 [ 679.924074][T27953] ? rcu_is_watching+0x15/0xb0 [ 679.924125][T27953] ? rcu_is_watching+0x15/0xb0 [ 679.924148][T27953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.924171][T27953] do_syscall_64+0x174/0x580 [ 679.924198][T27953] ? trace_irq_disable+0x3b/0x140 [ 679.924227][T27953] ? clear_bhb_loop+0x40/0x90 [ 679.924277][T27953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.924299][T27953] RIP: 0033:0x7f7fbfb9ce59 [ 679.924327][T27953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.924345][T27953] RSP: 002b:00007f7fbddd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 679.924369][T27953] RAX: ffffffffffffffda RBX: 00007f7fbfe16090 RCX: 00007f7fbfb9ce59 [ 679.924385][T27953] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000016 [ 679.924399][T27953] RBP: 00007f7fbfc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 679.924412][T27953] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 679.924425][T27953] R13: 00007f7fbfe16128 R14: 00007f7fbfe16090 R15: 00007ffccc5d06f8 [ 679.924454][T27953] [ 680.531151][T27741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 680.544165][T27951] macvlan2: entered promiscuous mode [ 680.550449][T27951] macvlan2: entered allmulticast mode [ 681.457179][ C1] bridge0: port 2(team0) entered learning state [ 681.463615][ C1] bridge0: port 1(hsr_slave_0) entered learning state [ 682.559837][T27741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 682.574459][T27741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.584663][T27741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 682.604538][T27741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 682.743636][T27741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.765174][T27741] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.778624][T26941] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.785810][T26941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.802405][T26941] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.809598][T26941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.767095][T27741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.813538][T27741] veth0_vlan: entered promiscuous mode [ 683.830525][T27741] veth1_vlan: entered promiscuous mode [ 683.885388][T27741] veth0_macvtap: entered promiscuous mode [ 683.899262][T27741] veth1_macvtap: entered promiscuous mode [ 683.919987][T27741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.935270][T27741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.958988][ T6556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.973215][ T6556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.992675][ T6556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.042223][ T6556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.099403][T26943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.121057][T26943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.161839][T26943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.172564][T26943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.938435][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.737053][T27996] bond16: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 696.761370][T27996] bond16: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 696.815802][T27996] bond16: entered allmulticast mode [ 697.032314][T28002] syzkaller0: entered promiscuous mode [ 697.038692][T28002] syzkaller0: entered allmulticast mode [ 697.049750][T28018] netlink: 'syz.0.5520': attribute type 4 has an invalid length. [ 697.102806][T28020] netlink: 'syz.0.5520': attribute type 4 has an invalid length. [ 697.160502][T28025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5522'. [ 698.447823][T28037] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 703.886021][T28056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5526'. [ 703.904867][T28056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5526'. [ 703.925509][T28056] batadv_slave_1: Caught tx_queue_len zero misconfig [ 703.948415][T28056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5526'. [ 704.274926][T28081] netlink: 'syz.3.5533': attribute type 1 has an invalid length. [ 704.322126][T28084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5533'. [ 704.470426][T28080] syzkaller0: entered allmulticast mode [ 704.480687][T28080] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.5534'. [ 704.500558][T28080] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.5534'. [ 704.639942][T28102] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 704.641120][T28101] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 704.797494][T28122] netlink: 660 bytes leftover after parsing attributes in process `syz.0.5542'. [ 704.987772][T28092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5536'. [ 705.093057][T28137] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5549'. [ 705.114529][T28137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5549'. [ 705.362883][T28154] batman_adv: batadv0: Removing interface: dummy0 [ 705.569262][T28164] bridge9: entered promiscuous mode [ 705.582648][T28164] bridge9: entered allmulticast mode [ 705.591570][T28164] team0: Port device bridge9 added [ 705.820314][T28186] netlink: 'syz.0.5559': attribute type 1 has an invalid length. [ 705.855679][T28177] syzkaller0: entered promiscuous mode [ 705.862032][T28177] syzkaller0: entered allmulticast mode [ 706.233606][ T30] audit: type=1800 audit(1782108437.529:57): pid=28200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5565" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2997 res=0 errno=0 [ 707.259501][T28232] lo speed is unknown, defaulting to 1000 [ 707.523953][T28257] netlink: 'syz.0.5581': attribute type 61 has an invalid length. [ 707.535474][T28257] netlink: 'syz.0.5581': attribute type 61 has an invalid length. [ 707.560111][T28257] netlink: 'syz.0.5581': attribute type 61 has an invalid length. [ 707.712150][T28264] openvswitch: netlink: Duplicate or invalid key (type 0). [ 707.735789][T28264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.790246][T28266] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 707.920998][T28276] netlink: 'syz.0.5586': attribute type 1 has an invalid length. [ 708.455158][T28289] netlink: 'syz.4.5589': attribute type 3 has an invalid length. [ 708.514398][T28289] netlink: 'syz.4.5589': attribute type 1 has an invalid length. [ 708.572495][T28289] NCSI netlink: No device for ifindex 0 [ 709.084409][T28307] lo speed is unknown, defaulting to 1000 [ 709.190903][T28326] sock: sock_set_timeout: `syz.4.5601' (pid 28326) tries to set negative timeout [ 709.391403][T28344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.403115][T28334] __nla_validate_parse: 16 callbacks suppressed [ 709.403179][T28334] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5599'. [ 709.431684][T28334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5599'. [ 709.513580][T28334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5599'. [ 710.183021][T28353] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5607'. [ 710.195400][T28353] NCSI netlink: No device for ifindex 566712438 [ 710.242464][T28358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5608'. [ 710.257038][T28358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5608'. [ 710.380150][T28360] block nbd12: server does not support multiple connections per device. [ 710.432976][T28360] block nbd12: shutting down sockets [ 710.552088][T28371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5610'. [ 710.626660][T28378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5610'. [ 710.910450][T28385] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 710.922687][T28394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.946676][T28385] bond1 (unregistering): Released all slaves [ 710.982801][T28363] lo speed is unknown, defaulting to 1000 [ 710.992434][T28390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5616'. [ 711.011831][T28390] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 711.125685][T28398] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5618'. [ 711.179838][T28405] netlink: 'syz.1.5619': attribute type 1 has an invalid length. [ 711.320270][T28405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.537774][ C1] bridge0: port 1(hsr_slave_0) entered forwarding state [ 711.544834][ C1] bridge0: topology change detected, propagating [ 711.551492][ C1] bridge0: port 2(team0) entered forwarding state [ 711.557972][ C1] bridge0: topology change detected, propagating [ 711.676679][T28431] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.691040][T28431] netlink: 'syz.2.5625': attribute type 9 has an invalid length. [ 711.700994][T28431] netlink: 'syz.2.5625': attribute type 6 has an invalid length. [ 711.711824][T28431] netlink: 'syz.2.5625': attribute type 7 has an invalid length. [ 711.768919][T28431] netlink: 'syz.2.5625': attribute type 8 has an invalid length. [ 711.801028][T28435] sctp: [Deprecated]: syz.1.5627 (pid 28435) Use of int in maxseg socket option. [ 711.801028][T28435] Use struct sctp_assoc_value instead [ 712.251382][T28430] syzkaller1: entered promiscuous mode [ 712.261084][T28430] syzkaller1: entered allmulticast mode [ 712.292319][T28442] syzkaller0: entered promiscuous mode [ 712.300784][T28442] syzkaller0: entered allmulticast mode [ 712.975934][T28479] geneve2: entered promiscuous mode [ 713.262603][T28496] netlink: 'syz.2.5636': attribute type 23 has an invalid length. [ 713.374366][T28502] syzkaller1: entered promiscuous mode [ 713.390433][T28502] syzkaller1: entered allmulticast mode [ 714.751958][T28581] netlink: 'syz.4.5662': attribute type 10 has an invalid length. [ 714.991033][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 715.002115][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 715.011884][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 715.024005][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 715.032367][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 715.176723][T28604] __nla_validate_parse: 6 callbacks suppressed [ 715.176767][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5667'. [ 715.193324][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5667'. [ 715.316888][T28610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.363797][T28610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.385786][T28610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.404428][T28610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.423656][T28607] bridge_slave_0: left allmulticast mode [ 715.435524][T28607] bridge_slave_0: left promiscuous mode [ 715.442703][T28610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.456096][T28607] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.464550][T28610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.474687][T28610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.484582][T28610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.497616][T28607] bridge_slave_1: left allmulticast mode [ 715.503733][T28610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.512458][T28607] bridge_slave_1: left promiscuous mode [ 715.514804][T28607] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.522967][T28610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 715.537887][T28607] bond0: (slave bond_slave_0): Releasing backup interface [ 715.552782][T28607] bond0: (slave bond_slave_1): Releasing backup interface [ 715.568691][T28607] team0: Port device team_slave_0 removed [ 715.580788][T28607] team0: Port device team_slave_1 removed [ 715.592310][T28607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.603399][T28607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.618365][T28607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.644167][T28607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.270266][T28592] lo speed is unknown, defaulting to 1000 [ 716.335768][T28649] tipc: Enabling of bearer rejected, failed to enable media [ 716.375307][T28649] tipc: Enabling of bearer rejected, failed to enable media [ 716.624218][T28663] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 716.816479][ T5621] Bluetooth: hci3: command 0x0405 tx timeout [ 716.974222][T28687] bond0: (slave team0): Releasing backup interface [ 717.012606][T28687] tipc: Resetting bearer [ 717.038089][T28687] tipc: Resetting bearer [ 717.044279][T28687] dummy0: left allmulticast mode [ 717.050808][T28687] dummy0: left promiscuous mode [ 717.056562][ T5621] Bluetooth: hci1: command tx timeout [ 717.062902][T28687] bridge29: port 1(dummy0) entered disabled state [ 717.089382][T28687] team0: Port device xfrm0 removed [ 717.113603][T28592] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.135512][T28592] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.144419][T28592] bridge_slave_0: entered allmulticast mode [ 717.154386][T28592] bridge_slave_0: entered promiscuous mode [ 717.166109][T28592] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.174443][T28592] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.182703][T28592] bridge_slave_1: entered allmulticast mode [ 717.191935][T28592] bridge_slave_1: entered promiscuous mode [ 717.382311][T28592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.409076][T28592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.449932][T28699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5690'. [ 717.470810][T28592] team0: Port device team_slave_0 added [ 717.493080][T28592] team0: Port device team_slave_1 added [ 717.567347][T28592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.585237][T28592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.640176][T28592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.665974][T28592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.677383][T28592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.704928][T28592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.720584][T28705] hmó3)ó: entered promiscuous mode [ 717.892219][T28592] hsr_slave_0: entered promiscuous mode [ 717.903364][T28592] hsr_slave_1: entered promiscuous mode [ 717.917755][T28592] debugfs: 'hsr0' already exists in 'hsr' [ 717.930760][T28592] Cannot create hsr debugfs directory [ 718.449807][T28747] pim6reg1: entered promiscuous mode [ 718.464857][T28747] pim6reg1: entered allmulticast mode [ 718.615127][T28739] lo speed is unknown, defaulting to 1000 [ 718.757388][T28592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 718.771246][T28592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.781140][T28592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 718.791281][T28592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 718.802011][T28592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 718.816238][T28592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 718.826780][T28592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 718.841961][T28592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 718.984168][T28747] dvmrp0: entered allmulticast mode [ 719.113309][T28592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.136967][ T5621] Bluetooth: hci1: command tx timeout [ 719.185210][T28592] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.203604][T28472] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.210796][T28472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.222147][T28764] Bluetooth: MGMT ver 1.23 [ 719.260159][T28468] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.268440][T28468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.192884][T28779] tunl0: left allmulticast mode [ 720.727358][T28795] veth0_to_bridge: entered promiscuous mode [ 720.743306][T28795] macvtap1: entered allmulticast mode [ 720.759986][T28795] veth0_to_bridge: entered allmulticast mode [ 720.792346][T28808] net_ratelimit: 58 callbacks suppressed [ 720.792486][T28808] openvswitch: netlink: Key type 82 is out of range max 32 [ 720.857167][T28795] veth0_to_bridge: left allmulticast mode [ 720.865010][T28795] veth0_to_bridge: left promiscuous mode [ 721.073683][T28592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.187533][T28819] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5717'. [ 721.204688][T28592] veth0_vlan: entered promiscuous mode [ 721.210813][T28819] netlink: 47 bytes leftover after parsing attributes in process `syz.0.5717'. [ 721.222544][T28819] netlink: 'syz.0.5717': attribute type 6 has an invalid length. [ 721.226849][ T5621] Bluetooth: hci1: command tx timeout [ 721.255345][T28592] veth1_vlan: entered promiscuous mode [ 721.264478][T28819] netlink: 'syz.0.5717': attribute type 6 has an invalid length. [ 721.372358][T28829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5720'. [ 721.408031][T28592] veth0_macvtap: entered promiscuous mode [ 721.421365][T28831] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5723'. [ 721.464942][T28592] veth1_macvtap: entered promiscuous mode [ 721.488294][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5722'. [ 721.504539][T28829] netlink: 'syz.1.5720': attribute type 1 has an invalid length. [ 721.522755][T28835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5722'. [ 721.540127][T28592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.575209][T28592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.591992][T28471] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.602741][T28471] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.623867][T28471] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.634759][T28471] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.748259][T28472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.764449][T28472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.812154][T28475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.824986][T28475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.928921][T28849] netlink: 'syz.4.5726': attribute type 10 has an invalid length. [ 721.941238][T28849] tipc: Disabling bearer [ 722.257721][T28860] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5728'. [ 722.273724][T28860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5728'. [ 722.320554][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 722.330585][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 722.340862][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 722.350069][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 722.359043][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 722.395034][T28860] vlan2: entered promiscuous mode [ 722.427376][T28860] gretap0: entered promiscuous mode [ 722.475495][T28869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5730'. [ 722.512960][T28869] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5730'. [ 723.078251][T28471] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.151387][T28471] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.185497][T28471] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.239094][T28471] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.292578][T28882] lo speed is unknown, defaulting to 1000 [ 723.299067][ T5621] Bluetooth: hci1: command tx timeout [ 723.432532][T28912] netlink: 'syz.3.5739': attribute type 1 has an invalid length. [ 723.509385][T28915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.786055][T28475] bond1 (unregistering): (slave vti0): Releasing backup interface [ 723.800976][T28475] vti0 (unregistering): left promiscuous mode [ 723.875285][T28475] bond3 (unregistering): (slave geneve2): Releasing active interface [ 724.034739][T28475] bond5 (unregistering): (slave bridge31): Releasing backup interface [ 724.051212][T28475] bridge31 (unregistering): left promiscuous mode [ 724.068290][T28475] bridge31 (unregistering): left allmulticast mode [ 724.084281][T28475] bond7 (unregistering): (slave bridge33): Releasing backup interface [ 724.093176][T28475] bridge33 (unregistering): left promiscuous mode [ 724.110060][T28475] bond0 (unregistering): Released all slaves [ 724.123585][T28475] bond1 (unregistering): Released all slaves [ 724.137097][T28475] bond2 (unregistering): Released all slaves [ 724.150142][T28475] bond3 (unregistering): Released all slaves [ 724.163526][T28475] bond4 (unregistering): Released all slaves [ 724.182022][T28475] bond5 (unregistering): Released all slaves [ 724.196118][T28475] bond6 (unregistering): Released all slaves [ 724.229551][T28475] bond7 (unregistering): Released all slaves [ 724.261020][T28919] wg1: entered promiscuous mode [ 724.278992][T28919] wg1: entered allmulticast mode [ 724.300480][T28862] lo speed is unknown, defaulting to 1000 [ 724.355985][T28475] : left promiscuous mode [ 724.417572][ T5621] Bluetooth: hci5: command tx timeout [ 724.541301][T28475] tipc: Left network mode [ 724.551145][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 725.117499][T28948] netlink: 'syz.2.5742': attribute type 2 has an invalid length. [ 725.301126][T28961] netlink: 'syz.3.5748': attribute type 12 has an invalid length. [ 725.310443][T28969] netlink: 'syz.1.5749': attribute type 4 has an invalid length. [ 725.548421][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 725.589947][T28977] vlan2: entered promiscuous mode [ 725.595570][T28977] gretap0: entered promiscuous mode [ 725.626945][T28962] block nbd12: server does not support multiple connections per device. [ 725.641481][T28962] block nbd12: shutting down sockets [ 725.896517][T28862] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.914678][T28862] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.926876][T28862] bridge_slave_0: entered allmulticast mode [ 725.938669][T28862] bridge_slave_0: entered promiscuous mode [ 725.949845][T28862] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.958816][T28862] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.967372][T28862] bridge_slave_1: entered allmulticast mode [ 725.975852][T28862] bridge_slave_1: entered promiscuous mode [ 726.062958][T28862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.093928][T28862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.326628][T28862] team0: Port device team_slave_0 added [ 726.370073][T28862] team0: Port device team_slave_1 added [ 726.393700][T29012] __nla_validate_parse: 10 callbacks suppressed [ 726.393722][T29012] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5757'. [ 726.496556][ T5621] Bluetooth: hci5: command tx timeout [ 726.528971][T28862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.537394][T28862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.568322][T28862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.582145][T28862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.591068][T28862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.685901][T28862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.166191][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 727.233895][T28862] hsr_slave_0: entered promiscuous mode [ 727.241449][T28862] hsr_slave_1: entered promiscuous mode [ 727.248121][T28862] debugfs: 'hsr0' already exists in 'hsr' [ 727.254918][T28862] Cannot create hsr debugfs directory [ 727.709732][T29058] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5765'. [ 727.764848][T29060] netlink: 'syz.0.5764': attribute type 1 has an invalid length. [ 727.951764][T29073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5767'. [ 728.015342][T29060] 8021q: adding VLAN 0 to HW filter on device bond17 [ 728.062844][T29065] 8021q: adding VLAN 0 to HW filter on device bond17 [ 728.083010][T29065] bond17: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 728.102728][T29065] bond17: (slave ip_vti0): Error -95 calling set_mac_address [ 728.150045][T29069] bond17: entered promiscuous mode [ 728.187412][T28475] hsr_slave_0: left promiscuous mode [ 728.208140][T28475] hsr_slave_1: left promiscuous mode [ 728.576604][ T5621] Bluetooth: hci5: command tx timeout [ 728.632906][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 728.648262][T29081] macvlan2: entered promiscuous mode [ 728.653672][T29081] macvlan2: entered allmulticast mode [ 728.680450][T28862] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.791319][T28862] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.832861][T29103] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 728.852581][T29105] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5772'. [ 728.870735][T29105] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 728.870735][T29105] Please contact the netfilter-devel mailing list or update your nftables rules. [ 728.920846][T28862] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 728.943061][T29109] netlink: 'syz.0.5771': attribute type 1 has an invalid length. [ 728.958901][T29105] smc: net device wlan0 applied user defined pnetid SYZ0 [ 728.985426][T29109] 8021q: adding VLAN 0 to HW filter on device bond18 [ 729.004685][T28475] IPVS: stop unused estimator thread 0... [ 729.042369][T29113] bond18: (slave veth11): Enslaving as a backup interface with a down link [ 729.095430][T29109] bond13: (slave dummy0): Releasing active interface [ 729.103739][T29109] bond13: (slave veth7): making interface the new active one [ 729.113171][T29113] netlink: 'syz.0.5771': attribute type 10 has an invalid length. [ 729.123023][T29113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5771'. [ 729.138964][T29109] bond18: (slave dummy0): Enslaving as a backup interface with an up link [ 729.160483][T28862] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 729.185228][T29113] dummy0: entered promiscuous mode [ 729.197734][T28468] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 729.212128][T29113] bond18: (slave dummy0): Removing an active aggregator [ 729.227816][T29113] bond18: (slave dummy0): Releasing backup interface [ 729.395895][T28862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 729.427074][T29119] netlink: 'syz.2.5773': attribute type 8 has an invalid length. [ 729.437475][T28862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 729.445386][T28862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 729.454806][T29119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5773'. [ 729.482197][T28862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.501704][T28862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 729.525543][T28862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 729.543482][T28862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 729.577306][T28862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 729.786230][T29135] syzkaller0: entered promiscuous mode [ 729.799525][T29135] syzkaller0: entered allmulticast mode [ 729.884685][T28862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.024229][T29119] veth1_to_team: entered promiscuous mode [ 730.032162][T29119] gretap0: entered promiscuous mode [ 730.042792][T29119] veth1_to_team: left promiscuous mode [ 730.050729][T29119] gretap0: left promiscuous mode [ 730.081841][T29129] lo speed is unknown, defaulting to 1000 [ 730.102395][T28862] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.153526][T28472] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.160775][T28472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.325496][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.332715][ T6570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.700938][ T5621] Bluetooth: hci5: command tx timeout [ 730.845123][T29171] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5781'. [ 730.867317][T29171] netlink: 'syz.1.5781': attribute type 1 has an invalid length. [ 732.506876][T28862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.159772][T29205] lo speed is unknown, defaulting to 1000 [ 733.323703][T29236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5793'. [ 733.584976][T29206] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5787'. [ 733.631885][T28862] veth0_vlan: entered promiscuous mode [ 733.713287][T28862] veth1_vlan: entered promiscuous mode [ 733.890338][T28862] veth0_macvtap: entered promiscuous mode [ 733.949223][T28862] veth1_macvtap: entered promiscuous mode [ 734.039511][T28862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.104310][T28862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.328344][T28472] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.361328][T28472] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.458150][T29263] netlink: 'syz.1.5798': attribute type 29 has an invalid length. [ 734.484037][T28472] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.527350][T28472] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.730154][T29273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 735.054670][T29286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5802'. [ 735.082803][T28471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.102597][T28471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.352897][T28471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.426558][T28471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.766066][T29299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.549679][T29319] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5808'. [ 736.652583][T29322] netlink: 'syz.4.5809': attribute type 2 has an invalid length. [ 737.451844][T29345] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 737.499950][T29345] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 738.145929][T29351] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 738.153725][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 738.459033][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5816'. [ 738.560977][T29375] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 738.879862][T29385] syzkaller1: entered promiscuous mode [ 738.885501][T29385] syzkaller1: entered allmulticast mode [ 739.051915][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 739.062958][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 739.071522][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 739.079612][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 739.501095][T29361] lo speed is unknown, defaulting to 1000 [ 739.952167][T29361] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.959873][T29361] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.970827][T29361] bridge_slave_0: entered allmulticast mode [ 739.979275][T29361] bridge_slave_0: entered promiscuous mode [ 739.988803][T29361] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.996136][T29361] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.004812][T29361] bridge_slave_1: entered allmulticast mode [ 740.013147][T29361] bridge_slave_1: entered promiscuous mode [ 740.048289][T29361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.075937][T29361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.110620][T29361] team0: Port device team_slave_0 added [ 740.120177][T29361] team0: Port device team_slave_1 added [ 740.149255][T29361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.161975][T29361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.191401][T29361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.228637][T29361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.235891][T29361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.267731][T29361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.318583][T29361] hsr_slave_0: entered promiscuous mode [ 740.325507][T29361] hsr_slave_1: entered promiscuous mode [ 740.332707][T29361] debugfs: 'hsr0' already exists in 'hsr' [ 740.342850][T29361] Cannot create hsr debugfs directory [ 740.509590][T29361] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.520360][T29361] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.883855][T29361] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.898091][T29361] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.137112][ T5621] Bluetooth: hci2: command tx timeout [ 741.267494][T29369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 741.323232][T29361] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.366188][T29361] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.550525][T29422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.572853][T29419] syzkaller0: entered promiscuous mode [ 741.583928][T29422] netlink: 'syz.4.5824': attribute type 3 has an invalid length. [ 741.596113][T29419] syzkaller0: entered allmulticast mode [ 741.764963][T29361] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.777377][T29361] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.110049][T29444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.217422][ T5621] Bluetooth: hci2: command tx timeout [ 744.442524][T17920] bond0: (slave syz_tun): Releasing backup interface [ 744.973684][T29473] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 745.307141][ T5621] Bluetooth: hci2: command tx timeout [ 745.930855][T29361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 746.002586][T29361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.013435][T29361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 746.100920][T29496] Cannot find del_set index 1 as target [ 746.184293][T29500] netlink: 'syz.4.5842': attribute type 2 has an invalid length. [ 746.222544][T29500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5842'. [ 746.491009][T29503] netlink: 'syz.3.5843': attribute type 25 has an invalid length. [ 746.785879][T29361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.862365][T29505] syzkaller1: entered promiscuous mode [ 746.872815][T29511] netlink: 'syz.3.5843': attribute type 29 has an invalid length. [ 746.891071][T29361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 746.937325][T29361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 747.065946][T29361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 747.137772][T29361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 747.389113][ T5621] Bluetooth: hci2: command tx timeout [ 747.395168][T29523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5847'. [ 747.682488][T29361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.762584][T29361] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.821935][T28475] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.829692][T28475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.910240][T28475] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.918013][T28475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.610369][T29568] syzkaller0: entered promiscuous mode [ 750.674495][T29568] syzkaller0: entered allmulticast mode [ 750.789580][T29568] tipc: Started in network mode [ 750.808720][T29568] tipc: Node identity 6e389297592f, cluster identity 4711 [ 750.903076][T29568] tipc: Enabled bearer , priority 0 [ 751.046791][T29567] tipc: Resetting bearer [ 751.135299][T29580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5845'. [ 751.190345][T29567] tipc: Disabling bearer [ 751.319166][T29361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.698088][T29600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5865'. [ 751.844439][T29361] veth0_vlan: entered promiscuous mode [ 751.891324][T29361] veth1_vlan: entered promiscuous mode [ 752.005603][T29361] veth0_macvtap: entered promiscuous mode [ 752.029809][T29361] veth1_macvtap: entered promiscuous mode [ 752.095417][T29361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.148213][T29361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.201103][T28474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.219088][T28474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.250419][T28474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.315907][T28474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.485706][ T6570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.520129][ T6570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.628680][T28471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.665869][T28471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.780985][T29620] syzkaller0: entered promiscuous mode [ 752.823270][T29620] syzkaller0: entered allmulticast mode [ 753.113622][T29630] veth5: entered allmulticast mode [ 753.409133][T29654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5876'. [ 754.021051][T29674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5878'. [ 754.060311][T29674] netlink: 47 bytes leftover after parsing attributes in process `syz.1.5878'. [ 754.090945][T29674] netlink: 'syz.1.5878': attribute type 6 has an invalid length. [ 754.135048][T29674] netlink: 'syz.1.5878': attribute type 6 has an invalid length. [ 754.653139][T29688] netlink: 'syz.4.5884': attribute type 1 has an invalid length. [ 754.695990][T29688] bond1: (slave gretap1): making interface the new active one [ 754.708031][T29688] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 754.723264][T29688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.095397][T29633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.283058][T29699] veth1_to_batadv: entered promiscuous mode [ 756.370597][T29699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5888'. [ 756.720242][T29714] xt_hashlimit: size too large, truncated to 1048576 [ 756.807840][T29711] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5891'. [ 757.390782][T24714] IPVS: starting estimator thread 0... [ 757.514871][T29736] netlink: 'syz.0.5897': attribute type 1 has an invalid length. [ 757.532609][T29739] IPVS: using max 37 ests per chain, 88800 per kthread [ 757.571166][T29736] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5897'. [ 757.654122][T29736] netlink: 'syz.0.5897': attribute type 1 has an invalid length. [ 757.695273][T29736] netlink: 'syz.0.5897': attribute type 8 has an invalid length. [ 757.731279][T29736] netlink: 606 bytes leftover after parsing attributes in process `syz.0.5897'. [ 757.765079][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5899'. [ 757.797683][T29736] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5897'. [ 757.819005][T29744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5899'. [ 757.935480][T29747] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 759.896075][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d596400: rx timeout, send abort [ 760.404518][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d596400: abort rx timeout. Force session deactivation [ 767.415650][T29762] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.097515][T28466] ------------[ cut here ]------------ [ 771.103082][T28466] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 771.116900][T28466] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xbd5/0x1760, CPU#1: kworker/u8:7/28466 [ 771.128049][T28466] Modules linked in: [ 771.131985][T28466] CPU: 1 UID: 0 PID: 28466 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 771.141681][T28466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 771.151830][T28466] Workqueue: events_unbound cfg80211_wiphy_work [ 771.158275][T28466] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 771.164818][T28466] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 771.184576][T28466] RSP: 0018:ffffc900054bf4a0 EFLAGS: 00010293 [ 771.190803][T28466] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 771.198849][T28466] RDX: ffff888034827784 RSI: ffff888073f89998 RDI: ffffffff90430cd0 [ 771.206916][T28466] RBP: ffffc900054bf610 R08: ffff8880af342abf R09: 1ffff11015e68557 [ 771.214935][T28466] R10: dffffc0000000000 R11: ffffed1015e68558 R12: ffff888034827784 [ 771.222990][T28466] R13: 0000000000000001 R14: ffff888073f89998 R15: dffffc0000000000 [ 771.231028][T28466] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 771.240032][T28466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.246686][T28466] CR2: 000055557bb9e4e8 CR3: 000000005d5a2000 CR4: 00000000003526f0 [ 771.254699][T28466] Call Trace: [ 771.258080][T28466] [ 771.261138][T28466] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 771.267377][T28466] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 771.273652][T28466] invoke_tx_handlers_late+0xb5/0x1830 [ 771.279287][T28466] ? sta_info_get+0x2ec/0x300 [ 771.284140][T28466] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 771.290040][T28466] ieee80211_tx+0x2d7/0x4b0 [ 771.294615][T28466] ? __pfx_ieee80211_tx+0x10/0x10 [ 771.299718][T28466] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 771.305310][T28466] ? ieee80211_xmit+0x2e5/0x3c0 [ 771.310265][T28466] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 771.316354][T28466] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 771.322218][T28466] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 771.328731][T28466] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 771.334947][T28466] ieee80211_scan_work+0x488/0x1ab0 [ 771.340231][T28466] cfg80211_wiphy_work+0x29e/0x420 [ 771.345389][T28466] ? process_scheduled_works+0xa20/0x14e0 [ 771.351342][T28466] process_scheduled_works+0xa8e/0x14e0 [ 771.356997][T28466] ? __pfx_process_scheduled_works+0x10/0x10 [ 771.363022][T28466] ? do_raw_spin_lock+0x12b/0x2f0 [ 771.368165][T28466] ? assign_work+0x3cf/0x5d0 [ 771.372796][T28466] worker_thread+0xa47/0xfb0 [ 771.377474][T28466] kthread+0x388/0x470 [ 771.381593][T28466] ? __pfx_worker_thread+0x10/0x10 [ 771.386771][T28466] ? __pfx_kthread+0x10/0x10 [ 771.391395][T28466] ret_from_fork+0x514/0xb70 [ 771.396074][T28466] ? __pfx_ret_from_fork+0x10/0x10 [ 771.401261][T28466] ? __switch_to+0xc89/0x1420 [ 771.405990][T28466] ? __pfx_kthread+0x10/0x10 [ 771.410662][T28466] ret_from_fork_asm+0x1a/0x30 [ 771.415520][T28466] [ 771.418616][T28466] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 771.425927][T28466] CPU: 1 UID: 0 PID: 28466 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 771.435502][T28466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 771.445591][T28466] Workqueue: events_unbound cfg80211_wiphy_work [ 771.451883][T28466] Call Trace: [ 771.455190][T28466] [ 771.458156][T28466] vpanic+0x56c/0xa60 [ 771.462209][T28466] ? __pfx__printk+0x10/0x10 [ 771.466843][T28466] ? __pfx_vpanic+0x10/0x10 [ 771.471402][T28466] ? is_bpf_text_address+0x292/0x2b0 [ 771.476778][T28466] ? is_bpf_text_address+0x26/0x2b0 [ 771.482027][T28466] panic+0xc5/0xd0 [ 771.485811][T28466] ? __pfx_panic+0x10/0x10 [ 771.490264][T28466] ? ret_from_fork_asm+0x1a/0x30 [ 771.495290][T28466] __warn+0x315/0x4c0 [ 771.499308][T28466] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 771.505162][T28466] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 771.511016][T28466] __report_bug+0x331/0x530 [ 771.515676][T28466] ? arch_stack_walk+0x11b/0x150 [ 771.520654][T28466] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 771.526504][T28466] ? __pfx___report_bug+0x10/0x10 [ 771.531574][T28466] ? stack_depot_save_flags+0x33/0x800 [ 771.537211][T28466] report_bug_entry+0x19a/0x290 [ 771.542116][T28466] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 771.547959][T28466] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 771.553894][T28466] handle_bug+0xce/0x200 [ 771.558305][T28466] exc_invalid_op+0x1a/0x50 [ 771.562852][T28466] asm_exc_invalid_op+0x1a/0x20 [ 771.567781][T28466] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 771.574243][T28466] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 771.593892][T28466] RSP: 0018:ffffc900054bf4a0 EFLAGS: 00010293 [ 771.600003][T28466] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 771.608010][T28466] RDX: ffff888034827784 RSI: ffff888073f89998 RDI: ffffffff90430cd0 [ 771.616022][T28466] RBP: ffffc900054bf610 R08: ffff8880af342abf R09: 1ffff11015e68557 [ 771.624033][T28466] R10: dffffc0000000000 R11: ffffed1015e68558 R12: ffff888034827784 [ 771.632039][T28466] R13: 0000000000000001 R14: ffff888073f89998 R15: dffffc0000000000 [ 771.640053][T28466] ? ieee80211_tx_h_rate_ctrl+0xc38/0x1760 [ 771.645920][T28466] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 771.652033][T28466] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 771.658243][T28466] invoke_tx_handlers_late+0xb5/0x1830 [ 771.663756][T28466] ? sta_info_get+0x2ec/0x300 [ 771.668542][T28466] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 771.674405][T28466] ieee80211_tx+0x2d7/0x4b0 [ 771.678951][T28466] ? __pfx_ieee80211_tx+0x10/0x10 [ 771.684021][T28466] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 771.689525][T28466] ? ieee80211_xmit+0x2e5/0x3c0 [ 771.694419][T28466] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 771.700442][T28466] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 771.706304][T28466] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 771.712680][T28466] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 771.718892][T28466] ieee80211_scan_work+0x488/0x1ab0 [ 771.724162][T28466] cfg80211_wiphy_work+0x29e/0x420 [ 771.729316][T28466] ? process_scheduled_works+0xa20/0x14e0 [ 771.735075][T28466] process_scheduled_works+0xa8e/0x14e0 [ 771.740734][T28466] ? __pfx_process_scheduled_works+0x10/0x10 [ 771.746758][T28466] ? do_raw_spin_lock+0x12b/0x2f0 [ 771.751831][T28466] ? assign_work+0x3cf/0x5d0 [ 771.756466][T28466] worker_thread+0xa47/0xfb0 [ 771.761112][T28466] kthread+0x388/0x470 [ 771.765212][T28466] ? __pfx_worker_thread+0x10/0x10 [ 771.770363][T28466] ? __pfx_kthread+0x10/0x10 [ 771.774982][T28466] ret_from_fork+0x514/0xb70 [ 771.779610][T28466] ? __pfx_ret_from_fork+0x10/0x10 [ 771.784762][T28466] ? __switch_to+0xc89/0x1420 [ 771.789577][T28466] ? __pfx_kthread+0x10/0x10 [ 771.794207][T28466] ret_from_fork_asm+0x1a/0x30 [ 771.799027][T28466] [ 771.802714][T28466] Kernel Offset: disabled [ 771.807062][T28466] Rebooting in 86400 seconds..