last executing test programs: 3.737393942s ago: executing program 2 (id=1902): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/1116], 0x45c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24044080}, 0x20000084) 3.664229177s ago: executing program 2 (id=1903): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @void}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={&(0x7f0000000380)="4cc734dc9db213aaf053ddc00c4d14617829daca4e0c86649108fe8c2dbde6d82001f495a94b3e45bed9546fb07cb560378408f3cab029ad93651cae67dbe89138c605f6091e67615d5df5510f029309be3c613853a9c130447490ae7948f3d40fe2d6b82901048f497478fa46af7d4154534e63cdb6983ff2c7e00e3f2bfd", &(0x7f0000000600)=""/104, &(0x7f0000000680)="568cd3eb53571e64c12ef6e23b9b5fd26f694d4674aad375af9115b2a1f5581a917f6ef7932b5b5aaf491dda1083cca374fbc47087c0868b99c7e67e822e43c3b87baada20f0d5bd339bfe6a14daad1f4368d32553c8dc73365711a54665cd6a02fe6e334da941097e5e9124bfc425053fabc37893ef59a7e11bd3f349c0afa393ec6a3889ac810bc910c51749a31b7e96e7f2f336fb03076912eb6a8da155e782133fd090495553eb2e54b1a9ea45817a99045161451b4762d406ad2b3719906337e52dcd092b05871547c1ff2edfe4280d1c74bf1b36db5c17", &(0x7f0000000780)="d7c7144c3ddd90d29e44ddd7bbe3d7ba97285fd12b6e95b096ad10c734d928ed3fbf547351d7de9c34e81b718b0cafaacaff39a0a77f305b19835697782d76cab9be9576921282177f791be38fc7d26ae2c1dd82bcf9bdd3a24b1ca4a195c639af524454eafeb403bb5cc2df52f18c1a25a3a239b0728ce8f1d258bfad7ddbabbfa6228aaa092c6ae78ff276", 0x4, r0, 0x4}, 0x38) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001d80)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x1f2b, @private1, 0x1}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000280)="90d482", 0x3}], 0x1}}, {{&(0x7f0000001580)={0xa, 0x4e22, 0x4, @private1, 0x6}, 0x1c, &(0x7f00000016c0)=[{&(0x7f00000015c0)="d3", 0x1}], 0x1}}], 0x2, 0x44) (async) listen(r2, 0x100101) accept(r2, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003e7dfffff08300008a00000000000000010000000000000049060000000000000400000000000000000000000000000000000000000000000000000000000000b5ca000000ffffff070000000000000000000000000000000700000000000000ff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700"/320]) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x1}) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) (async) socket$inet6(0xa, 0x80000, 0x2) 3.482364889s ago: executing program 2 (id=1905): getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0xcb6f02b47ebb9f92, 0x1, 0x0, r0}, &(0x7f00000000c0)=0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, &(0x7f0000000100)={0x1a, 0xf, 0x1, 0x3, 0x85, 0xf, @broadcast}, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'vlan1\x00', {0x2, 0x0, @multicast2}}) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x8, 0x0, 0xe, 0xe, 0x5, @local}, 0x10) r2 = socket$inet(0x2, 0x80000, 0xfffffffa) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x0, [0x5, 0x5, 0x3]}, &(0x7f0000000240)=0x44) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)={'a', ' *:* ', 'm\x00'}, 0x8) r4 = accept$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @remote}, &(0x7f0000000300)=0x10) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x1, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=0x1000) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, 0x464, 0x300, 0x70bd2c, 0x25dfdbfb, "1bd38d", ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004014}, 0x4008000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$sock(r6, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001480)="349311268ee5a12f3191c23a324b34d610b91b7c42be425e3e84f61eb5b74323bee48679069f5dc47c28f1fdf15b03b2076e6667b96052fc5c8f737eb0809168dc61", 0x42}, {&(0x7f0000001500)="a6546e5409ed8c4718572163aa95436dab0cee7ab67e16f2eaca730acf7b46acad4aaa2f6802f10f821a9d1ab5aaf146685bbe328e7126ca83cf4fc7d563450d862a15da390d7dfbb7e43e2927980c1b90af5cfcbe52af4ebb67ccc2f28634beef9cd10eb582f61e35a038a2453d70cbf7d5a07de364fd5d90f8ecd89af6c0af065db8fd992e79a10b6f0389945e09741c7c9c2852c34e81fe8d6f629c23dbd8211c4c1a0b", 0xa5}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="394d471050fab341b7b3f5562ac46c942d4edb39d8b0905f1913d6df09575177dbe82256cbbd7265c799290369fb2347d02f04349db13d6a28ddf21b9d1d2fa0f62e812d42056dabcb2ac39d91be20b10e3a2552501974c44f1450749d88", 0x5e}, {&(0x7f0000002640)="ec", 0x1}, {&(0x7f0000002680)="37ff1163c985366387e303e0543c87bd", 0x10}], 0x6}}, {{&(0x7f0000002740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x3, 0x1, {0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)="e2607afa64d2cac7d3b9fe1a4df5e2d84af982e8dae64df037839a248489e1228ba2737689b5cf274d20016eb91bbfd9031001dcb6c5aeebc76c15945ed22c179d7769806f9422d195704b65340249dc68ad013d50f30ad6249e910676a23625f7513d954fe5572bd77bbe8f062bb1b3d337741b334c0ac1c41c6e8455cc06706fa877508e33da54c8c6c170aa11bf66d197752b2102a020c84ab146a1454cf89029111c684ded2bd260d1ca0cfe3af6a5966d3b0851df728ab4161ebc580d67080498121ce94e53689281b1cbaf6d8f24", 0xd1}], 0x1, &(0x7f0000002900)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0xa8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x78}}, {{&(0x7f0000002980)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @broadcast}, 0x1, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a00)="2a3284f519e9f02e12d8b4a8589f5dbf380eb636604e8c725378bc937eb075094d3e4f3eeff0953ff92a4f2567990ce03ce6a4ebb7a8f5325d696cf7df0de73ab128dd6cd29e3f22564b362bfb686175116daa8ace00bdd40305ecf2dfe05fd434e4839dbff97d30ed2cbed9d9c216aa165f6a4a97", 0x75}, {&(0x7f0000002a80)="6a64d84cd5c8de925e632dd1c24dc260da6d0f5a0141548604ac85803ce1d4e11b79ae99aa7b9c5d530a7b7577935ac8ba5aac0be2db2fbed5013108020d40311e836cc61e630919966d16025ead3722b076896a9939fe", 0x57}, {&(0x7f0000002b00)="d231a921818d025ec83a6d80bc2da57d9a0d1031c699f2658358ac907c4b0d68d6b3ffe369b0861a85ff51ba55d9fc0ed4dc1a7453fba502b958c493b054ee40983926021bcaa12a138a686742d1481c8079ce55e070fd74a6c33551e8dcfb30f95a572b151970005e455c2eb6dec39d619f4f8a73bc0617688645d4f0bf84aaaac547b9ec3059dae65aaf854a8400b3e1201383d0e42223075aabfaa039d845e6605484a869f85a425337abee2e478ec8eaba2b43f9eddbaf3d81d811bafb0b646a22b558988579ff15d1a4", 0xcc}, {&(0x7f0000002c00)="56e91bcf223900b996373da0d52c4f318b7e97a8c39d1c8dd7c83160aee1a02d7d78829635e795f9e445dc7130226feb2de24223614d58eafb27cf0cde85f625f0deef99f60eac60623092476bbab2d33bead61661113823a67ba215059ee3531201e9d0e831bd19199b37cb0128e5fde2cf64e49c2e9b03e259ede8ad", 0x7d}], 0x4, &(0x7f0000002cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x37a3}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14}}], 0x60}}], 0x3, 0x804) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002e00)="e7fe080e833efa0d448292b7ea426fa0f6235cdeb6850b2104ed772783d551e9c4a193487faaec448b2b14ec797f93af5ea1625ad28e4b", 0x37}, {&(0x7f0000002e40)="e3d878370962d8aee4bba4fa7e321989e828e0b81b8cf63c06a689161e00aa6034b5283e9126f48b484cb0a2f37759f8ff97c80fa3bd8d52f9d1311ba54fc280d219ffa48fe6c228c6f956291060658aa3ab701ad06ed829260efcda0de3c90dbd4fb16169702acc93d0b25e7d44c373e5841a03f71019504185e0ba9ad51abe5214e52e111cbfdf128d4df226e642571e37b4021d1c91f89f35c4b5fa8efe6229b5eea05c875137bf0f62bc8fbcba08ef042ccb394ab657f5e8e7e6ffa1bb91a897", 0xc2}], 0x2, &(0x7f0000002f80)=[{0x70, 0x117, 0xd, "8a42c7c6cb0189291c98eca53dde8d9f1230b9975010f39803a1ecd6f3fe001d7081db00660334a2f28ddcd9a3224fc8768cc90a076b64b8cae118633b27976d8d9ebff1f5923189cb165480c9b71a3cc949f43cec7019600d0135"}], 0x70}, 0x4000000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000031c0)={{r5, &(0x7f0000003040)='\xff\xff\xff\xff\xff\xff', 0x40, &(0x7f0000003080)={@_ha_fsid={[0x0, 0x7]}, {0x5, 0x7, 0x7, 0x80}}, 0x3, &(0x7f00000030c0)={@_ha_fsid}, &(0x7f0000003100)=0x5}, {[0x1, 0x1, 0xdd5b]}, 0xfffffffc, 0x56, &(0x7f0000003140)=""/86}) sendmsg$can_raw(r8, &(0x7f0000003340)={&(0x7f0000003240), 0x10, &(0x7f0000003300)={&(0x7f0000003280)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0xa, 0x1, 0x0, 0x0, "f718af1ac66e4932bab486ddcbbc0b6e1271976abd63e9fa6d2e3df271dcaa9cfda802e25bd27a2c78e9c662e0d142661c3737dabe6f3ee58e29ff6f4479c474"}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004000) connect$llc(r1, &(0x7f0000003380)={0x1a, 0x30e, 0x9, 0x8b, 0x3, 0x1, @multicast}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003400), r8) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000003440)={@remote, @multicast1, 0x0}, &(0x7f0000003480)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003780)={r8, 0xe0, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000034c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000003500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003540)=[0x0, 0x0, 0x0], 0x0, 0x24, &(0x7f0000003580)=[{}, {}], 0x10, 0x10, &(0x7f00000035c0), &(0x7f0000003600), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000003640)}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000003880)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x68, r10, 0x20, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x57}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0xc000) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x6) sendmsg$kcm(r8, &(0x7f0000004c40)={&(0x7f00000038c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003940)="b682ce3d4ca682397e852ad6dd4082c63d3cb210067861a23c4dd72f07ddab0b3ba99225415f47f31895bdab6bc84ea30c34cf6f9b2901b45931f69519170dd9f854012b64154d4df45b0f21e55c3907aa9afd01e3", 0x55}, {&(0x7f00000039c0)="a3a68ea17693e399e62bc4b2e1f0d0b6a23576cc09d20f2462376d9281e81f649edc81de710d648fbcb0cfc34e0f7a6ce24847398e63263c60d0073a38f3a65cd826c03f23f5591f", 0x48}, {&(0x7f0000003a40)="b56698c86fb7055f0333755f79aabb2b7835869de789ec626991a0652abfa1d42467758e5042b612363abf1999f55180b3422350d37b5f3c7a818eb3e78de6c210d0d8b64c9d007e6e33b7ff308a0ecbe2133c4efadfaa47eb5b3df4cd82ba3977b2a42d3929fb05a35bd4", 0x6b}, {&(0x7f0000003ac0)="4bb4de0a44be1646d49ad68687", 0xd}, {&(0x7f0000003b00)="a4c38e343bdd972f6827e5e994def2216e421b3f17607f4d329b369901ccbd31906766d39e6fc142b418085924", 0x2d}], 0x5, &(0x7f0000003bc0)=[{0x30, 0x11, 0xa743, "b3802bb48fd7e632af3d2d0ce684ff4c504555f2f551c55672be43e2b3"}, {0x38, 0x10b, 0x9, "1a83d15812b85f84c57b86788125b24e672541d1330a37afb39b31d5fc418e7f833f8b95ab"}, {0x1010, 0x119, 0x10001, "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"}], 0x1078}, 0x40000) 3.443460606s ago: executing program 2 (id=1907): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) r2 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000040)={r5, @in={{0xa, 0x0, @loopback}}, 0x5, 0xfffe}, 0x90) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0xb1, "6936480ba63e9302a3087d36e3346dd7bd4b31605a37496340ca4264d9dc10e89c49671e11d9232fce839f68a9cbce4481af493791edfef6f9cb123788f28f24f680527b7520d40a8e212e5105501d8b8c3b3e01791e470deeeb32182136db759b742592fc2ab28a29894fc569b529f0176749c3d43d8df33dcebe2c1b4d045c6f5d5c9b4a036bc2c4604865f959e661af8b82fab9dd4605dbd6d45ebdbacb6eb3fc8c43c3eb43969b43256c03b7a59411"}, &(0x7f0000000440)=0xd5) r6 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x583}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES8=r1, @ANYBLOB="210000000000000020001280080001006873720014", @ANYBLOB="55cd46cfe61dc38e4faf498621dd2984a7d9d0e0176091bb9a38f108f8de5a8025344e34e60092db1a5d582d8bf0c08816f1b66e154427e7e8da7a1931031615fc4c6059de0575eba6916962eceb3ccc33c70475b8091b2c0544e1020f820f0ee1ab19478e3a74536e920810ed96aee3f31b49040d9eab5bde1083e8fc057c576505e910f78c432b65e0406c158cc0b5b8e44b95c1497ccb0919eaa1a7ae73d5948b00bb0864509b8be1a8bb705858be3d1e271e4d860e9f9c8e711946e0a4380bd75f21224500015f9d578fb6de0e4f924938942b89745fa3446565441b41e98be9496e325027210e0057f7ec07a101858e7167ca", @ANYBLOB, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 3.237368793s ago: executing program 2 (id=1910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000080000000000700feff850000004f00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bd00000085000000700000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r1], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r2, &(0x7f0000000d40), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001b00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair(0x26, 0x1, 0x81, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffcffff03400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001020010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100582e0000140000001100010000000000000000000300000a73967f52470dde7b0f1fe5d1fe524c73b7694a1360a420df746dfe94ef"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r7, 0x1, 0x10, 0x0, &(0x7f0000000140)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0xa004}, 0x0) r10 = socket(0x10, 0x80003, 0x0) write(r10, &(0x7f0000000400)="240000001e005f0214f9f4e6ff0804000a000000fc0000000000aa0008000f00fd000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) syz_emit_ethernet(0x122, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000006a2ddcf6177a8100190088644507011000680057"], 0x0) ioctl$TUNSETPERSIST(r9, 0x400454cb, 0x0) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg$can_bcm(r3, &(0x7f0000000580)={&(0x7f0000000200)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000400)=""/245, 0xf5}], 0x2, &(0x7f0000000540)=""/49, 0x31}, 0x100) 2.878502655s ago: executing program 0 (id=1915): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x151da000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xba}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/44, 0x2c}], 0x1, 0x1000000000000}}], 0x48}, 0x0) ioctl(r0, 0x4574f538, &(0x7f0000001640)="02542f9759dcb8e7bede0d455b928c3000168915fe58bf795ea6fc260dfc10486527a68683d23d629c79299e7b62660ca7f530d6dcc5236fed4778e731c268a92cbe281ab25a8f01d2a58bae5f1bde90d52218453b3abd078d8a19eb53553659cd7a1fb4fa7b4ac42ab7c8596e0b21912c0a3baabec5e8c69d1ae46e461ac7a33f688f2509ed9956f46ffbb93dfee85dc6a4c92fab57c8edf7a1e42ac7ade4332a0051557a3e15a026f12f08dad0ad1c9f857268ba544e00100d529bd86e4ba361c9a65c8b28f898eb8757caa56b49a19c14a27d7e5a57f5df0d7427913df3819f621ee30ddf3f735855a482e31d02930edb90253a1c0e808668556d98164d0d58ea091450ef8d03afcf5e09a3778a2f99679143fd58f18e193805e8a33782f38aaf93febd433271dfd90a6ff8b158345c065d15eeec562777e1f3d39e5e6af7bc82dc89ec309fb0628bf01350f8242b13e554dbe15f5a4b5d00960c6062e3416272334b6c1e98172503d4a14f1a324c3e62b59aabbf8adac304b75dc5167c4da2a6c1e4a9a5d88265132512035096f35f2bbd4a86ce81e11e1ddee20e2f368f69f8fe1b5fe6f8295d7812e2af474eeba0d08aa8da6a300c7e8ccfcf491a42a306b68081ba8d663961b00eef1e1088dee908ad910c216f47776f1f2f613e2f6642593e615cbd7c6ae50bb76146710fd734113ea699d322a89b3f96d2b37eb1b9d93b84741fcff1fd1e512cb4c02b190164f6fe7774b3451ceba96e5be4994706679ad0cdabcfb6ba7cf01fd7ce90254e0e600b6b0e884e0b77c850b5f8c99666bb56a25015752bf4bd70acb292c6dc94e5a3c8de379f55474ed2ebf21e155c277f437dadb79947182a6a46f19eed93e357ec8832a32c98f6bd2129e29e5f639773e4e8386de9212753eda332bf2c222342d27c9daacd14c6c9ddfb56d56cfac3b188456fa416d05386a9cc3efeedbf0cb2813e39561ced85b477646537e5a01b65c0848523252e5bc447e53ddb6aab6eae42603e47a3530354461e5409e6b3c746782eb77fa67764b772295d2d499cf60a0b88e9b824aa740bc9357e0f2aa53ad88666b8e5af744899ca4870a2609a513f4ca33ec96dd0020a70ec04230ccf7bcb0a528a9f6d4b31a4437414c62d3be31b09184e2803c495c7f117b114c112c4b02c44184a4efba7611c4a33d3fb5da5424c7cdd6d24f6b25c12de45c9dfd3357feeb719cec4a20517addc8e6aa844f68e10877a06a82860512f53ea2921e01d93ebea4575d59d77d0c8912294f694bf9ed1fad624c311990846c041912a24dea61e5c69ce4a7d7752baf14c4ff9970ea9066326cffe612d541cb62ca0e12f227fe5ccab58ee3312888919b3806931df7d1a5b3044aefff25f7ba4ab5357b84e146f260ae41f25b917795822a5a0da12f204c2b485008796819555378c64d905ef0827e7cfb04e07ec1eabe4c55d15450a622e412215bbf2d5689a918be404a007bfcd5dcb2fa731b2185f0b15abebb883789b5fab0fb5c2a1c372d552f5937d3c596b740ca56daaa17e535d23249846d6eed3deec6df797e6f7effeb185b437e0c6c09bac5e21140389c79e71e3e1382b7d662ccc14e18eae8608c128b1afac905ede324abc62a4507006217a4e6fee7e9e56f9cec4e11540207e8aec2a5d50164122104c50b8ce09b5f953086ebe09826ffd94082391cc4a3dad1061ab21165126b31abf16168b989a0e541933c5870e071770d7f0e5f034b26bb713e301a5c46653c81a66d552df03ae64d7767bfb21910dd1d7f8e5ef9612d02d8e9f638b9b387467cb55540e3f4dd353254c708b872d427e04bd36037f5083e2c966797b068fe851665171803abaa675fc3653b2e368fe14001f32fc78d06c69f1c8733231b12f1b0523736c35ca219f1feeec9e89c4432399b6197973d6fd6288c85e70cc3da7b88d60b690622e68915e4bd7f48384058a097c602b84f08eeaab405fac427e07059a174585d1239acfee6394cbb6a9ad07360f522a9668221ae28c13201bc3b7a148ca6b42328b54518549d09f9c921e8f34420214e1e8fac333dca33ef83a88cb58aa28a97a27cc17b9a6a1af27d8a0b9c3e77667baec853776fa515872f94d8d467468b5b8c5d500ada8a39f76be3d788c2b00de99a045408efc5521197efadb1b557037a9875f1f2726ad0c92fe5e43652c83a92af57a7435546fef7154d89a6c37cfbe8c9803044cfb45f79561bf2cff6644d1fbdf66facdb48568210a73e23426d84976d1f31209cbdb6636f466b51b8cb9f5028b02ae04f8f3dba7b1ac13d4e8be06971ebbc2c09e0d69d3fa7fcace49538bf9fcc0f37662ecdfb451e2d1b9b0ae1343e4fba39696f9e325deddb3144fdae74943f9ecc582e1d025211eb9ada4b9f3a9e9c6453f7bd3ea0feea1a30e3f61523a218905d73a80b1665d2ecaee5556059ea8866ba61415cebc5f6754e03a39d72f82e8f4c86852320e060bea76268cc7d8c00dff85e5e8d0f6c9f31b51278aa8d6374fc12b0af8b9e099ce89c844f90a9393f34eae4d06d790171202ffac22ba745797c0ca483dff3245191e5a7cb81c43384a93a8fadb7ef789c4af8a51280371f84f17e84da1095de92ad993d5b823d4aa433e7048afa6f92fdb4bdb1a156f5c46fe82b16c57769eaa5b310b6f9af942d6df27fb75837a08e92fb1d00aeb3d561b0185293a1913f8bb4ce61c3fc98d469f72bc2ac914d048b266e3f1ebad26e4b04eec6b09c82b9554f9e2d788bc10b16ae318dab1216a956845b76fc61d2ccaa64c4f0d9dec9f27b6a72e03c4d0c380a2b3e851af2e03356ce737474f80dbf62c9332ac06c1574cc364016c26bf0afac952d6585d3409dcbb0e42f9c8502330fbdbf08c99060493ae6b3be5bc6abc342a89d50afbaa944cfe2902cbca59dbf28e56272b528cff1219e36bad27569ce1406e50676cf864d8d2ffdd06d0e37308c870c08dfa534e7845160a24f207e1c946f8fcbf8bed18c89a61b60593b352c31aebd23ac66ac925f30af6a04b51bff6bb6626a85f79e975fceec05e8f18c5efbc4a147b6a65f5cee0839ce8a0c977d65a1f4e816e31af75b7e84c4c6010c56cac9a3f71af3136dabb959a0ac93523f7d7c257b8476fff1ffb0a156f917dbe9bb318e711ce8cc81b427c199f2ecdb44b86690ded1b06bf9aa78176775750cac04195294a3e8ee255183da0e8f562c4c0f1cf29c9a6e9e6362a777950460d084ef3b517593a2d592afa74bbe6b2bcfa0df6401a6b5f8315f33451797b470ea4debd30600f8aac10f17ac9175822d0f78378fafd3c4020485e796ec3a5e6fe851fc93537b9ba9f066be4bd76039298bc3416c8f6a676cb4a176b606832ae9bdd1818072307b745ceb1962429fafe9d47e5b7699a20409efbe137f609a3c306c6168e7c316fe55eab2f8f1a483d16ab5cfe3950f30f57e85c7e93900eed11a33a702572089c22788e999f917b210583e56fb0eb0a8821562b65b50670b41f38916af65974c40fbd0eaa7b2d15850a8ac0947adb135d954995b14bf34d248a6c23d04d0c9247072ffe7be78d9db541e5966a32fec0f35f0ed695bbfc2e8c951c46740ede3b3392d17e3b300c4e020c57bf73310c90c97aa4c3c26fb1e48204df87a159464eb857ffaacc9a63553e4b0b8f4691a5820f3e8ee27cd8b11067d8fec62417aba603fd986d0bc37adaea65f1f94e71a08e94edc37bc27926b73f54b5c8b70f06558fac7a5ef882a746259c6bcf07a1ee111eb14b91ccda99f0f454d98fd53bdf94ecac40b015c4a2a331f95fe80785dfe39e684a377e2f6c20192089b4256efaddee62a561a1959eb400f5f36c8169223194893b4029fa55960ed55747005b8325d0f3ea7b1f70aba7bc06df2f4dd01d01d43df8330a993c8ba49dcf797cdf8f567ec28a187634e7dcedee02427ef09b8d0179b7a5b66333dafec606514304726f702596e8922a5506f8c1b9141d37669682a391f17a45457be07fcbf2728c191d5f5542c0053e8951134fb92a0d0a67346abf179a524d10dbac8e16cbd1dcbaf0c09e21e4faba789905c99dbeb8f341744cece4ce97833dcb21f76e3fed0489fac8c246ed7636350d69fc4fc3bff82a71b512c16d9349fc238e3441498d3802fe9ccbc23d0b96f2f213c54b5d08d0381bd50cf49e298388488a307e7eb13dbd989d3d6eb51b3ca570b3b2ddbdcaee64a053b9acbdcc02fdd0639cd20b85888c29e8d957edd74e235095ac1c3dff69f5a4666eefcbb3157a4f6ac3ccf6bdc9028ce633e928c225e179a250facdb3cdd39ead671f09ac0642d5ee91297367f0f837b07a08504447df54df82ac76022e0efa90c750fc9e999b0a253153230b77ac2ba540b13b6ca85bca856a3f606d4da076b2a9ebf30bf98caedc7f7389771a9daf3c99be9281dfebc61c912580fdcf9dae50cf75b69ff6e9052f221011cd962f74061e6b20fea3d23fd878b6e171f99552746d85085d271ab7114983f01c0546e2c9b5bd8e08f79f3a6f99c388da32ba123c2bad3e15bda659cb118b6f75b3763c196d7a0061a45d72ae7b29cdf052cb518661b9312f41f3e5c4697b94cdd043f34dce17a5407449226dce6bdaad749aabdb346a24c7713e17a46f3bf278defde150a71f049056b9ab48c9abd47b9dada0f4316a68572f46fb992c04203cadaac10153c8c19e4aba43cae1feaadc8a228cc1ebba314b9adeed2a37caacd18654dfee7b42706d4a4057100561a1f4287880689e73bcd4a834ff6855e4bc40fca41e393dc26128f2d67a9cdfc2f17913a79e28f43e75f6b4baea8c22e368846f3e0dd3e6b808e0f5fce2c7e8372e49342cb218980fe665441fb2bea36b296e8b17f4a8b72e8b47e7792d07ca7391fb843ab1a2e04f0fdc18d24cc98564946595237bb05e0fa8f98e56ac2368d04463b628c328fd3c11839e707e691cbb16d1794c9414cc4f2f67644f5de1132c3a8cf742f9060f3cabef3c97d756ae17f812af7237769d7175baba6351dcf0cc43c2b1fad3ee45454887189e43dcc7485c1139354bdd63e685a4fd9ff9ae76eacf0ea14efe7aae1095c39b1b1edf9ced843369b30a6518d892806eea739a4775c915c72abb4edd47f685e799aa1addfb1f6af7b55fb352c736e1b621d65062229789139b528558466e676bc8c40bc6522ae2724b5819304583bcd5099a6c3999e697936acfd424e256a17c0022131a0c42a5f55fd2f2c9d47b8ec00ea51cfe03d8760e02ca9e93ab3a85d39555ad7a54ebab9834764b6073d0efc8deeedeee0562640243734a2614af9fe29386ce347a9dda922b2ee2941e3ab555dd48f720fe2d1067cbc00299d5ad57821c61a664044940d3da0baec39d44a28e7707701a37f22bccc1ae6224dc873260142e63685f41f739ed13406846a6ede48a4cbf059438aedd8bbbac969415c797e26363290bb79f52959bcd9253500a0dbe88ec4b769af8cd158e3fd03ca003bf868fe2d53aeea813a97b626de1d74c3f93e174c5b277bc1797a9901eba1e6527b2bb0254835f4534d59ca54e19e4b822ae92a60a702eb404fe0c44d362901d9bc333d236e56a6deb72584b179450a0e1d3102775bc016a1e76c7706685a924c2c076fa01ba44d51b2c3b0760f4d32d5c4e31346f6ccdff53375c6a89d56a85a9b26b11c25789d2a210175a022ef5a59bc45a6f0562c3d1074543c7f17a837ed4089ceb62496cb9275c737830251d94d0b0232c1af6ffce7a847decfdd2795c74db418cd5af9c874e47720d72ccd5") mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x36, 0x0, &(0x7f0000000240)="f80204160000000000007f5386ddb44b501c817ea08344bd8700883df04a3be1e6c808b380f957d8f81905e3d0dd65598770cff05f58", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01030000000000000000010000000900010073797a3100000000080002400000000154000000030a010200000000000000000100ffff0900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310020000038000000050a4f010000000000000000010020000c00024000000000000000010900010073797a31000000000c000480080001400000000514000000110001000000"], 0xdc}}, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000280)=0x4000, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRES16=r9, @ANYRES16=r0, @ANYRES32=r10, @ANYRES8=r9], 0x2c}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12}, 0xc) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 2.304604239s ago: executing program 2 (id=1921): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x800000f3d, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0xfe33) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000002, 0x13, 0xffffffffffffffff, 0xc4701000) getsockopt$sock_timeval(r0, 0x1, 0x48, 0x0, &(0x7f00000014c0)) 2.20544042s ago: executing program 4 (id=1923): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xb, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611885000000000095"], &(0x7f0000000140)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000300)={0x87, @empty, 0x4e21, 0x4, 'sed\x00', 0x1, 0x9, 0x2a}, 0x2c) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="05000000100000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x20008804}, 0x80) 1.92741649s ago: executing program 3 (id=1924): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x101, 0x12) (async) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f00000000000000000200"], 0xd8}}, 0x0) 1.815416688s ago: executing program 3 (id=1925): syz_emit_ethernet(0x82, &(0x7f0000000a00)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)={0x14, r2, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x48, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:inetd_var_run_t:s0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x8001) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x2}]}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000003f00)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000080)="367ccd", 0x3}, {&(0x7f0000000140)="37dff51989c4", 0x6}], 0x2, 0x0, 0x0, 0x40000}], 0x1, 0x4004000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x51}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000090) r9 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$MRT(r6, 0x0, 0xcf, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r9, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 1.814072299s ago: executing program 1 (id=1926): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket(0x8, 0x6, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x40106190, &(0x7f0000000000)={{r1, 0x0, 0x38b040, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0}) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) mmap(&(0x7f00005a6000/0x4000)=nil, 0x4000, 0xb635773f07ebbee7, 0x8031, r4, 0x9c7ab000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000300)=""/185, 0xb9}], 0x1, 0x4f, 0x9) 1.811223965s ago: executing program 0 (id=1927): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fefffffb0000000008000000850000002200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200acd0300008000000b70300000100000085000000060000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xd}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="1c5412b8827c"}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r8, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="270302005902140006000003b96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) openat$cgroup_int(r10, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) 1.569973922s ago: executing program 1 (id=1928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x80000000) listen(r0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0xdf, 0x5f6, {{0x28, 0x4, 0x3, 0x15, 0xa0, 0x66, 0x0, 0x6, 0x29, 0x0, @broadcast, @local, {[@timestamp_addr={0x44, 0x54, 0xf, 0x1, 0xd, [{@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe80}, {@private=0xa010100, 0xc}, {@empty, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x35}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x100}, {@multicast2, 0xcd6}, {@rand_addr=0x64010101, 0x400}, {@multicast2, 0x3}]}, @timestamp={0x44, 0x20, 0x47, 0x0, 0x3, [0xdf, 0x1000, 0x7, 0x5, 0x81, 0x4, 0xd5]}, @generic={0x83, 0x11, "089fba85cecc9678a8baa859d08362"}, @ra={0x94, 0x4}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x10, 0xd, 0xf92, 0x2000, r1, 0x4, '\x00', r2, r3, 0x4, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x20, r7, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa, 0x4f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x10) shutdown(r0, 0x1) 1.029004129s ago: executing program 1 (id=1929): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000000b05000000000000000000030000050800024000000005090001006d61726b00000000080003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601040000000000000000000000000c00078005001400d700000011000300686173683a6e65742c6e6574000000001b0067030a00000005000400000000000900020073797a31000000000500010007000000"], 0x58}}, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @val=@kprobe_multi=@syms={0x0, 0x8, &(0x7f0000000440)=[&(0x7f00000000c0)='wireguard\x00', &(0x7f0000000180)='syz2\x00', &(0x7f0000000240)='syz2\x00', &(0x7f0000000280)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='wireguard\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='wireguard\x00'], 0x0, 0x8}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f00000004c0)=r4, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x1628}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040004) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xd, @remote, 0x8017}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000500)={0x6, 'macvlan0\x00', {0x3}, 0x3}) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000a40)) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'bridge_slave_1\x00'}) 1.014154575s ago: executing program 4 (id=1930): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r0, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r1, r2, 0x0, 0xffffffff000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000700)={0xc753db23, [0x10, 0x9], 0x4}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7800, 0x7, 0x0, 0x7, {{0x5, 0x4, 0x3, 0x3e, 0x14, 0x65, 0x0, 0xf9, 0x29, 0x0, @multicast2, @rand_addr=0x64010100}}}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'tunl0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdb2500000000", @ANYRES32=r6, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0xa911}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x7, 0x0, 0x2, 0x6e, {{0x5, 0x4, 0x2, 0x15, 0x14, 0x67, 0x0, 0x7, 0x4, 0x0, @multicast2, @loopback}}}}) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb10000", 0x13, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000740)={0x0, 0x10000000003f7, 0x0, [0x9, 0x7, 0xd, 0x2, 0xd], [0x10000000000000, 0x5, 0x5f7, 0x5, 0x3, 0x1c6c, 0x0, 0xb56e, 0x6, 0x1, 0x2, 0x8000100000081, 0x0, 0x1, 0x3, 0x2, 0x4000000000000008, 0x4, 0x1000000d1a3, 0x2, 0x1ff, 0xffffffff, 0x8, 0x7, 0x2, 0x9, 0x6, 0xa4d8, 0x7, 0x2, 0x59, 0x8, 0x3, 0x2, 0x5, 0x0, 0x400, 0x80, 0x9, 0x1, 0x4, 0x0, 0x4, 0x2, 0x7, 0xffffffffffffffab, 0xb0, 0x989b, 0x5, 0xaac0, 0x3, 0x4, 0x40, 0x7fffffff, 0x7, 0xfff, 0x0, 0x4, 0x5, 0x6, 0x10001, 0xc, 0x5, 0x401, 0xfffffffffffffffd, 0x1, 0x8, 0x2, 0x8, 0x8, 0x2, 0x5b, 0x69, 0x7f, 0x2, 0x0, 0xfff, 0x1c0, 0xffffffffffffff84, 0x4, 0x401, 0x5f09, 0x80000000, 0x100, 0x7, 0x8, 0xeb43, 0x0, 0x7e4, 0x9, 0x3, 0x8, 0xe, 0xf27e, 0x9, 0x6, 0xffe, 0xb9, 0x7, 0x7, 0xeb, 0x0, 0x0, 0x8000000000000000, 0x5, 0xc7, 0x9, 0x4, 0x0, 0x5, 0xfffffffffffffffe, 0x3, 0x2, 0xffff, 0x1, 0x80, 0x5, 0x1a, 0x8, 0x2, 0x10001]}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001f40)={r9, "ab11aae896c1d9598e2a490eec334bcd"}) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, 0x0, 0x4000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01a944bb74001800000000000000280000002800000003000000000000000000000d0a0000000000000002000006040000000100"], &(0x7f0000000f40)=""/4089, 0x43, 0xff9, 0xb, 0x1}, 0x28) 880.336515ms ago: executing program 4 (id=1931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x4) 875.118358ms ago: executing program 0 (id=1932): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000000)=@generic={&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x28, r5, 0x1, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}}, 0x40000) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ec07ad020001000000000000000e7ea0c543011a00", 0x8001, 0x4, 0x81, 0x81}, 0x3c) (async) socket$kcm(0x10, 0x2, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001540)=ANY=[@ANYBLOB="700000001900010000000000000000001d01"], 0x70}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r6) getsockopt$IPT_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x3]}, &(0x7f0000000200)=0x54) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x580, 0x0) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000240)) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000280)=0x49, 0x4) 874.261875ms ago: executing program 3 (id=1933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "2973d884f88446113e7cd91b379ac93182a07cde43a44bc5368bf26e0cdd1f7f2199380ce7471f5eea3edc8b809d419bb5c9d40cae5f2f1619b45a45dd0250ca1288d5c85ea9ae1ae215ed775eed838d01e32ef7284cf19762f714af62668026eac4e298ecf7701e12cefcb680b4be42e48c586fc4d78117a5f37d476a218c777d4b00053c69394b0d8a8e772cddedc11469d3f11161341bd90516d5da068ca28727e318fbcc0517ec06653d37feee06942414239add17b3b8d927794f8eb3f43b007ad5e8dbe178d842111cfe4cf3db03254993fccb19f4365857b07bd612648bd1180fb632351a1fb709b6e7ade855c546491b4e7859ab81d2c4be7990a84b"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x36}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x80}}, 0x20044001) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000580)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}], 0x20) 634.178033ms ago: executing program 0 (id=1934): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@cgroup, 0xffffffffffffffff, 0x2c, 0x0, 0xffffffffffffffff, @void, @value=r0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2a931f4e5d0566d1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x38, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc}, @NL80211_BAND_6GHZ={0xfffffffffffffe90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 633.505181ms ago: executing program 1 (id=1935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffdff}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x3eb, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x3ea, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 627.019363ms ago: executing program 4 (id=1936): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001100)={0x1, &(0x7f0000000000)="6c76a73754cce2bd1fa38b8bbbda3963419ccd8c545b25c25247b4a9c2e0727888a01bcdc9acb3a400406ceed1ca302da782ba1fba1c85913fb3bef649dacf3d6773d508dffb85b1842fdab0bae7e434bf6c3378401a314e7ed95dfa4e58c5963c5745f21dc4eeb8803483cade14c02f8110476357b669230017db17d06b51b10500525740982f275e2d02707604b6f2559a27570be64e18cfd565b90779a4a73b015590656fcdad27004d0f62b9332e9eeb4add5fcd4052b87d37ba088685415651a6220036c44be6f4dada5369db6929aef07fbea7a29a94f3e36d131c2f252c17c8686f966e462748dc61f5080a08e555335d6c92", &(0x7f0000000100)=""/4096}, 0x20) r0 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000001140)) getsockname$packet(r1, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000011c0)=0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001200), 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x6bdb, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000014c0), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x24, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x545}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001440)='syzkaller\x00', 0x454, 0x0, &(0x7f0000001480), 0x21600, 0x2, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001500)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001540)={0x1, 0xc, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001580)=[{0x5, 0x2, 0x6, 0x3}, {0x3, 0x3, 0x5, 0x6}, {0x2, 0x5, 0x2}, {0x2, 0x1, 0x9, 0xb}, {0x5, 0x3, 0xa, 0x7}, {0x2, 0x1, 0x9, 0x1}], 0x10, 0x8}, 0x94) sendto$netrom(0xffffffffffffffff, &(0x7f00000016c0)="c868aae5c4e6a0c80ddd5f619a1b1d0569b815bb22eff066dcdb98beb5bffb69c54680a9affd6419fca06589f8ace1571da5060818d21f8fd9dd93d6f88babab2c0688da046ccc6cbce8f11e4f8d56e3cc132c949553ac48ecdd56a503a3e5cb5429f56c80ed622d5cfa7385b3ddd3f3ae9d49ebfdb5e417d6572b214cdc7303832468f8c41e4c542186ed33cdf5fa1bbbb77bcb3f", 0x95, 0x4080, &(0x7f0000001780)={{0x3, @null, 0x3}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002900)={r6, 0x0, 0x63, 0x1000, &(0x7f0000001800)="98de82aee33eab8511853763d1fa912f6cf22c526b25965c7889692be2feac06c920975d2c50708b372a6183aca6514101ec680cbd4f14e19e636f921f1d4ce2709de12f939b2efc72aecd1c5ed557780e3fb66eb2a5822e150e5d2a134bcf1474171b", &(0x7f0000001880)=""/4096, 0x9, 0x0, 0xc, 0x36, &(0x7f0000002880)="054c4230b2431f7949d092a7", &(0x7f00000028c0)="c25757204442a2e26dc3d561f7370d22384ddcb6fa98f5dfed09c2dcb944afaca0d1ccf885e455710f3f41639b6c16d50b64a9ca726b", 0x1, 0x0, 0x2c}, 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x80, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd09}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc37}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x24008000}, 0x40044004) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002b00), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x50, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000) openat$ppp(0xffffffffffffff9c, &(0x7f0000002c40), 0x40, 0x0) r9 = accept4$netrom(0xffffffffffffffff, &(0x7f0000002c80)={{}, [@remote, @bcast, @netrom, @null, @default, @default, @null, @null]}, &(0x7f0000002d00)=0x48, 0x80000) r10 = accept4$netrom(r9, 0x0, &(0x7f0000002d40), 0x80800) r11 = epoll_create(0x5) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003080)=@bpf_lsm={0x1d, 0x2b, &(0x7f0000002d80)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x0, 0x4, 0xd, 0x6, 0x20, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000002f00)='syzkaller\x00', 0x38, 0x0, 0x0, 0x41000, 0x4d63aea312be2f8d, '\x00', r2, 0x1b, r5, 0x8, &(0x7f0000002f40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000002f80)={0x2, 0xa, 0x9, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000002fc0)=[{0x0, 0x4, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x4}, {0x4, 0x1, 0x0, 0x6}, {0x0, 0x3, 0xa, 0x5}, {0x5, 0x1, 0x5, 0x4}, {0x5, 0x1, 0x3}, {0x3, 0x4, 0x2, 0x3}, {0x0, 0x2, 0xd, 0xe}, {0x2, 0x4, 0x4, 0x7}, {0x2, 0x1, 0x7, 0x9}], 0x10, 0x5}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000003140)={0x20000000}) ioctl$XFS_IOC_FSGROWFSRT(r10, 0x40105870, &(0x7f0000003180)={0x6, 0x3}) r13 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r14 = socket(0x21, 0x6, 0x81) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000031c0)={0x0, 0x48a3, 0xfff7}, &(0x7f0000003200)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r14, 0x84, 0x1, &(0x7f0000003240)={r15, 0x2, 0xc, 0xda, 0x8, 0x1}, &(0x7f0000003280)=0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r13, 0x10e, 0x4, &(0x7f00000032c0)=0xfffff800, 0x4) sendmsg$rds(r14, &(0x7f0000004b80)={&(0x7f0000003300)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000045c0)=[{&(0x7f0000003340)=""/75, 0x4b}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/148, 0x94}, {&(0x7f0000004480)=""/100, 0x64}, {&(0x7f0000004500)=""/68, 0x44}, {&(0x7f0000004580)=""/3, 0x3}], 0x6, &(0x7f0000004940)=[@fadd={0x58, 0x114, 0x6, {{0x1}, &(0x7f0000004640)=0xfffffffffffffffe, &(0x7f0000004680)=0x7, 0x8, 0xb2c, 0x7, 0x80000001, 0x0, 0xd0}}, @mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x8}, &(0x7f00000046c0)=0x8000, &(0x7f0000004700)=0x7, 0x1, 0x4, 0x7, 0x9, 0x1a, 0x7f}}, @mask_cswp={0x58, 0x114, 0x9, {{0xffffff7f, 0x4}, &(0x7f0000004740)=0x5, &(0x7f0000004780)=0x6, 0x400, 0x9, 0x80000000, 0x81, 0x41, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1c0, 0xfffffffe}, &(0x7f00000047c0)=0x3, &(0x7f0000004800)=0xffffffff, 0x800, 0xe3, 0x2, 0x3, 0x1, 0xffffffffffffffff}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @fadd={0x58, 0x114, 0x6, {{0x800, 0x7ff}, &(0x7f0000004840)=0x9, &(0x7f0000004880), 0x8, 0x3, 0x2246, 0x4, 0x40, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x324e1ebe, 0xfffffff9}, &(0x7f00000048c0)=0x3, &(0x7f0000004900)=0xa, 0x4, 0x45, 0x7, 0x3, 0x1, 0x1}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffffc, 0x2}}], 0x240, 0x1}, 0x4000040) 504.008758ms ago: executing program 3 (id=1937): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x840) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x50}, 0x1, 0x0, 0x0, 0x40c0}, 0x8080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x703}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3155}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf7c3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}]}]}, 0xfc}}, 0x4000000) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)={0x400, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfe00000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcc87}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x68000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x929}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8195}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6238ce52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x73b}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x74ac}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d0f5502}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x42, @remote, 0x80000000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @remote, 0x7}}}}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x1, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xb1d, @loopback, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x400}}, 0x4004004) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000980), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b00)={'tunl0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x700, 0x7, 0xdcc, 0x4, {{0x3b, 0x4, 0x0, 0x4, 0xec, 0x64, 0x0, 0xff, 0x2f, 0x0, @broadcast, @broadcast, {[@timestamp={0x44, 0x10, 0xe6, 0x0, 0x3, [0xff, 0x3, 0x3]}, @timestamp={0x44, 0x20, 0xee, 0x0, 0xd, [0x1, 0x0, 0x3, 0x80, 0xf, 0x55b, 0x5]}, @noop, @generic={0x82, 0x12, "1eb04197e543b606801b9c13ae6f5ecb"}, @timestamp_prespec={0x44, 0xc, 0x55, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @lsrr={0x83, 0x7, 0xd7, [@rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x54, 0x36, 0x3, 0x1, [{@remote, 0xfffff800}, {@loopback, 0x400}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4}, {@rand_addr=0x64010102, 0xff}, {@loopback, 0x7}, {@multicast2, 0x3}, {@empty, 0x10}]}, @timestamp={0x44, 0x14, 0x6b, 0x0, 0x3, [0x5, 0x400, 0x100, 0x200]}, @ssrr={0x89, 0xf, 0xad, [@loopback, @broadcast, @empty]}, @generic={0x86, 0xa, "183665512b8df814"}]}}}}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x70, r4, 0x1, 0x7, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000001040)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000d00)={0x2e0, r6, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10000, 0x1c}}}}, [@NL80211_ATTR_IE={0x10d, 0x2a, [@preq={0x82, 0x8e, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x5, @broadcast, 0x4, @value, 0x9, 0x8b2f, 0xa, [{{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{}, @broadcast, 0x9}, {{0x1}, @device_b, 0xa}, {{0x0, 0x0, 0x1}, @device_a, 0x7ff}, {{0x1, 0x0, 0x1}, @device_a, 0x6}, {{0x1}, @device_a, 0xffffffff}, {{0x1}, @broadcast, 0x10}, {{0x0, 0x0, 0x1}, @device_b, 0x8}]}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @ibss={0x6, 0x2, 0xbbe}, @ht={0x2d, 0x1a, {0x80, 0x3, 0x7, 0x0, {0x400, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x1}, 0xf19, 0x522, 0x7}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x4c, 0xcc, @device_b, 0x4, 0x80000000, 0x200}}, @dsss={0x3, 0x1, 0xa}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x4, [{0x4, 0x1}, {0x6c, 0x1}, {0x9, 0x1}, {0x18}]}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0xb1, 0xb}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x4, 0x0, {0x4, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x8, 0x8f}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x83, 0xfc, "c80a627b2100a4479059c82f0669cd6ebec7ddc63161ba01648cee104f5941c1e5f4d5ca57aee16e966e44aa31090f00ec96af2026bcd46b754c1ffc7b241c845f5986a18c7ee63d6018f30657c04ec07190bf7d5fe37561132bfb9e905132e6b80a596d6dd7e4d5e10e623a4055ee2462ef0e4a60a30a5b99d1ccd6a70370"}, @NL80211_ATTR_FILS_ERP_RRK={0x3d, 0xfc, "752cb26f5515a3588bd525ef03879c69962bc76b11b4d7868928825ade57a2c8f280e2498cfff14917a253ea92d83fff3cb0ed2f56df6cee09"}, @NL80211_ATTR_FILS_ERP_REALM={0xe2, 0xfa, "00153dd6d75c3ee45bf08b86862d29882e2e30c9abd036923c0efd3e7699d9a3bb67143514372b1f7c8db2cf5e6499a1d66bf926e850dd87fac5495eb7ddc0522a8b031fe07612f9fe751b4e5265535da08eadc470a41b98b71e58790ce662b5acacd31ea0dee9513684c91440ce3ec93ef7e1135447f97e64a9ba873d01d77239da5f73b148ed1ab7f44cb77e5963fbf7f9f46a7c07db37be2668e36d4d235813e0d8835df5e716981c3fb561f40450d193328324ce42dfe3ba5d31e22c9fa7af94a9e44d34be59f1f4c699be3654ae85464d7043c899d5d87c27b52aae"}]]}, 0x2e0}, 0x1, 0x0, 0x0, 0x8c0}, 0x40040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001080)={r2}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000010c0)={0x0, 0x1, 0x9, [0x5, 0x9, 0x400, 0x1, 0x7, 0x2, 0x6, 0x8, 0x40]}, &(0x7f0000001100)=0x1a) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000011c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000012c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x44, r9, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8840) getsockopt$inet6_tcp_buf(r8, 0x6, 0x21, &(0x7f0000001400)=""/216, &(0x7f0000001500)=0xd8) r15 = socket$inet6(0xa, 0x5, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)=@newqdisc={0x64, 0x24, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2, 0xffff}, {0xb}, {0xf, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x2, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x1e99aa9d}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$inet(r15, &(0x7f0000001800)={&(0x7f0000001680)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f00000016c0)="86eadc00e8b7311889ebab2d4249da3b6ba47500d9e6d5684e53908920e5743a14e3284ff6384f249e9a86e85171f95a3848332c518a45500e8e43326eb2c6d3ddaa3f0a1b167ed7033eca12e0d16896431700614cef0a9791cd83d087ddc0ed9785fd9635f6f26892657ed14bff1d8a22db71123666ebe58c5f54f174cb046a5ffa5bb4f6442542d10ed8f4d2e6f55f9bab77aa46fec798a1d3a51a68", 0x9d}], 0x1, &(0x7f00000017c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}], 0x18}, 0x800) r16 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r16, 0x29, 0xd2, &(0x7f0000001840)={{0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x101}, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x124f}, 0x0, {[0x8, 0x40, 0x9, 0x7, 0x81, 0x6, 0x3, 0x8]}}, 0x5c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001900)={0x2ec, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x128, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xccd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa195}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7dee}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2ab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8db}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x201}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x63a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe424}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @loopback, 0x71}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4040100}, 0x10) 422.900724ms ago: executing program 1 (id=1938): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}], 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c, 0x2001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) 417.123999ms ago: executing program 4 (id=1939): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000001a80)={0x6, 'tunl0\x00', {0x1}, 0x869}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001ac0)={0x0, 'bridge_slave_1\x00', {0x4}, 0x5}) r2 = socket(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1, &(0x7f0000000d00)=""/67, 0x43}, 0xcce1}], 0x1, 0x20, 0x0) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="b5", 0x1}], 0x1}}], 0x2, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd20e99d26740f3fa}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x230, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x80000001, 0x31}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x4}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "1a9a93812ff7e848"}]}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_PMK={0x2e, 0xfe, "f54141e91d78516a91cd94522ac0386cf10e5aab86877bef6bf98b296e562a59f7d7a53234f2a96fc4db"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK={0x1f, 0xfe, "1bbc6e2d1fd1c779adadc5728e1a9f6c518b2cb09ca9933c686aae"}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x64, 0xf, [@mesh_chsw={0x76, 0x6, {0xe, 0x1, 0xe, 0xf6}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random={0x6, 0x4b, "8732968f00a96579a046d8b975530a8e49ab3f6d6154f78608016ac435fe1d0c05620b1f5f4b318dc41010ba3a9175900afea9e495e05caceb270c3841cf0a981adf35f203253a73e1008b"}, @challenge={0x10, 0x1, 0xee}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe9, 0x80, [@random_vendor={0xdd, 0xbf, "15a15782b3f3611fe59c03a9cd4f09becc46bd7cd7dbe8a84e19a302defb5fb328c23b85a2153c1c17830cca0bbafddc4babd4be2310a368426bb5f36d8f86193f24c576d32780216e9ac05bd62d1e3ecb8177ddbb4fc580f84a8b900412c3b121ff37df463547539264f1185519e3b00e625ecdd3b0faba4d3c31ff343af0f22305c9dca10a77af9a8b345fcb298371e656b4c39fd10bc0168c5a94c17aae0aee8883c06ea6d9a6e66cf65c2a3421dfaaca526fb63c18ef23b071b7a04a53"}, @cf={0x4, 0x6, {0x1, 0x5f, 0x6, 0x9}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x7, 0x0, {0x8, 0x179, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x92, 0x8}}]}]]}, 0x230}, 0x1, 0x0, 0x0, 0x20000044}, 0x2) 416.177385ms ago: executing program 0 (id=1940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, r7, 0x1, 0x8070bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x98}, 0x44810) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x5bfddf52a8fa8e87, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4008040) (async) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x5bfddf52a8fa8e87, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4008040) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800f9e5e5b300001900010000000000fbdb5f250a140000ff040003002c000008001e000100000014000500fe8000"/56], 0x38}, 0x1, 0x0, 0x0, 0x4000090}, 0x50) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800f9e5e5b300001900010000000000fbdb5f250a140000ff040003002c000008001e000100000014000500fe8000"/56], 0x38}, 0x1, 0x0, 0x0, 0x4000090}, 0x50) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdff, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdff, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) 251.608924ms ago: executing program 3 (id=1941): ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000040)={'wlan1\x00', 0x500}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="1a", 0x1}], 0x1}}, {{&(0x7f0000000a80)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0xeb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="94", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x3, 0x10, @private0, 0xb4a9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="9c", 0x1}], 0x1}}], 0x3, 0x20000040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x20}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x20}}, 0x40000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_getlink={0x50, 0x12, 0x1, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r5, 0x40200, 0x66500}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, @IFLA_MAP={0x24, 0xe, {0x1, 0x8, 0x9, 0x9, 0xd, 0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x181}, 0x40000) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r11 = socket$igmp(0x2, 0x3, 0x2) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r12, 0x0, 0x0}, 0x20) (async) setsockopt$inet_int(r11, 0x0, 0x5, &(0x7f0000000000)=0x6, 0x4) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r9, 0x1, 0x0, 0x0, {{}, {}, {0x9, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 196.561159ms ago: executing program 1 (id=1942): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x12, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x36) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) 65.705385ms ago: executing program 4 (id=1943): r0 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x93, "d6e7b88c19b57931066b0bcea1f52db5587284a24c17ed253c7530e11c2c329501aebe09e2df16b18cc27db3dad9ddd871adfbd8ba8ace77cd26da00897aed7bddef2e50941565fd52041484b07687e25108c5814fa570bf758377118a067f3b771ade5a8d88f4e42549ab12ef2b3869a842d1f89955f302254fed88c44f342e884b0ecafafb6ad7a96ec6feecf64e91834b4a"}, &(0x7f0000000280)=0x9b) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}}}, 0x84) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\b\x00', @ANYRES16=r4, @ANYRES16=r3], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$kcm(0x2, 0xa, 0x106) (async) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="8700000000000000d216f4bb134af35ae88d9729e764390a15222945f57ebf7619c4f87737f7c6940d610821e2a59ee0f9d07ca395a98830642cc4219094467ee2f26ac2a97a58c2675f5fb26c6f3a405c57eeba"], 0x8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f80)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x15, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd04, 0x24dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xa}, {}, {0xfff2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = socket(0x10, 0x803, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x8917, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) 2.777315ms ago: executing program 0 (id=1944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) (rerun: 32) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') (async, rerun: 32) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'ip6erspan0\x00', @remote}) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 32) close(0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) 0s ago: executing program 3 (id=1945): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000240)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2, @ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000300)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x84) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101) kernel console output (not intermixed with test programs): ed [ 128.525874][ T7050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.259'. [ 128.543709][ T7052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.258'. [ 128.771751][ T7061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.261'. [ 128.783506][ T7039] bridge_slave_0 (unregistering): left allmulticast mode [ 128.811171][ T7039] bridge_slave_0 (unregistering): left promiscuous mode [ 128.840062][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.855483][ T7061] netlink: 76 bytes leftover after parsing attributes in process `syz.1.261'. [ 129.494673][ T7084] syzkaller1: entered promiscuous mode [ 129.514672][ T7084] syzkaller1: entered allmulticast mode [ 130.021712][ T7114] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.043355][ T7107] wg1 speed is unknown, defaulting to 1000 [ 130.054478][ T7114] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 130.270150][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 130.292672][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'. [ 130.583163][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 131.002591][ T7145] netlink: 312 bytes leftover after parsing attributes in process `syz.4.284'. [ 131.034136][ T7145] netlink: 'syz.4.284': attribute type 1 has an invalid length. [ 131.063214][ T7145] netlink: 'syz.4.284': attribute type 1 has an invalid length. [ 131.145010][ T7145] bond1: entered promiscuous mode [ 131.148504][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'. [ 131.151079][ T7145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.232740][ T7151] netlink: 'syz.1.285': attribute type 2 has an invalid length. [ 131.264090][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 131.274204][ T7152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.284'. [ 131.324656][ T7151] tipc: New replicast peer: 255.255.255.255 [ 131.348814][ T7151] tipc: Enabled bearer , priority 10 [ 131.516484][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.528663][ T7165] Driver unsupported XDP return value 0 on prog (id 92) dev N/A, expect packet loss! [ 131.543002][ T7155] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.582591][ T7155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.845454][ T7179] netlink: 'syz.3.293': attribute type 1 has an invalid length. [ 131.926001][ T7179] bond2: (slave geneve2): making interface the new active one [ 131.936990][ T7179] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 131.953072][ T7177] wg1 speed is unknown, defaulting to 1000 [ 131.958843][ T7179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.976309][ T3577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 132.029634][ T3577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 132.037648][ T7187] netlink: 'syz.3.296': attribute type 10 has an invalid length. [ 132.094620][ T3577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 132.174719][ T7194] netlink: 'syz.3.297': attribute type 4 has an invalid length. [ 132.249014][ T3577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 132.326703][ T5919] IPVS: starting estimator thread 0... [ 132.427613][ T7203] IPVS: using max 26 ests per chain, 62400 per kthread [ 133.210049][ T7230] tipc: Started in network mode [ 133.234224][ T7230] tipc: Node identity 8eac200114f9, cluster identity 4711 [ 133.267056][ T7230] tipc: Enabled bearer , priority 0 [ 133.302294][ T7241] syzkaller0: entered promiscuous mode [ 133.308859][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.334509][ T7241] syzkaller0: entered allmulticast mode [ 133.491350][ T7230] tipc: Resetting bearer [ 133.546629][ T7229] tipc: Resetting bearer [ 133.613929][ T7229] tipc: Disabling bearer [ 133.805114][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.827053][ T7263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.153859][ T7277] syz_tun: entered allmulticast mode [ 134.292691][ T7284] netlink: ct family unspecified [ 134.332522][ T7284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.564594][ T7292] syzkaller1: entered promiscuous mode [ 134.586511][ T7292] syzkaller1: entered allmulticast mode [ 134.671552][ T7298] __nla_validate_parse: 7 callbacks suppressed [ 134.671571][ T7298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.316'. [ 134.705612][ T7295] netlink: 'syz.1.318': attribute type 21 has an invalid length. [ 134.750252][ T7295] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 134.778310][ T7295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.318'. [ 135.193646][ T7276] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 136.370102][ T7349] netlink: 232 bytes leftover after parsing attributes in process `syz.3.327'. [ 136.380226][ T7349] openvswitch: netlink: Flow key attr not present in new flow. [ 136.470493][ T7347] x_tables: duplicate underflow at hook 1 [ 136.621476][ T7358] netlink: 48 bytes leftover after parsing attributes in process `syz.0.329'. [ 136.631805][ T7358] netlink: 245 bytes leftover after parsing attributes in process `syz.0.329'. [ 136.704224][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.331'. [ 136.984441][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 137.057007][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 137.096099][ T7381] tipc: Enabled bearer , priority 0 [ 137.250694][ T7372] tipc: Disabling bearer [ 137.589410][ T7406] netlink: 'syz.0.340': attribute type 10 has an invalid length. [ 137.620535][ T7406] netlink: 224 bytes leftover after parsing attributes in process `syz.0.340'. [ 137.633743][ T7402] bond1: Removing last ns target with arp_interval on [ 137.759050][ T7411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.342'. [ 138.148555][ T7423] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 138.197644][ T7423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.205292][ T7427] lo: Caught tx_queue_len zero misconfig [ 138.232302][ T7429] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 0, id = 0 [ 138.242671][ T7423] netlink: 'syz.1.345': attribute type 8 has an invalid length. [ 138.417755][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 138.586422][ T7445] netlink: 'syz.1.353': attribute type 13 has an invalid length. [ 138.611558][ T7445] netlink: 'syz.1.353': attribute type 12 has an invalid length. [ 139.714599][ T7501] bridge_slave_0: left allmulticast mode [ 139.721016][ T7501] bridge_slave_0: left promiscuous mode [ 139.728981][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.740083][ T7501] bridge_slave_1: left allmulticast mode [ 139.745934][ T7501] bridge_slave_1: left promiscuous mode [ 139.753218][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.768792][ T7501] bond0: (slave 45ÿ): Releasing backup interface [ 139.782815][ T7501] bond0: (slave bond_slave_1): Releasing backup interface [ 139.794404][ T7501] team0: Port device team_slave_0 removed [ 139.802195][ T7501] team0: Port device team_slave_1 removed [ 139.809198][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.817076][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.826261][ T7501] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.000744][ T7510] pim6reg99999991: entered allmulticast mode [ 140.373346][ T7535] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 140.412888][ T7535] __nla_validate_parse: 6 callbacks suppressed [ 140.412909][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 143.302934][ T7526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.721339][ T7549] syzkaller1: entered promiscuous mode [ 148.744571][ T7549] syzkaller1: entered allmulticast mode [ 149.034402][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 149.364029][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 149.714025][ T7598] lo speed is unknown, defaulting to 1000 [ 149.769212][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.393'. [ 149.805198][ T7598] lo speed is unknown, defaulting to 1000 [ 149.919254][ T7602] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.926531][ T7602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.934192][ T7602] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.941596][ T7602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.983687][ T7598] lo speed is unknown, defaulting to 1000 [ 150.027153][ T7613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.397'. [ 150.033391][ T7598] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 150.072578][ T7598] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 150.106017][ T7598] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 150.193662][ T7598] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 150.320216][ T7598] lo speed is unknown, defaulting to 1000 [ 150.351416][ T7598] lo speed is unknown, defaulting to 1000 [ 150.368998][ T7598] lo speed is unknown, defaulting to 1000 [ 150.399560][ T7598] lo speed is unknown, defaulting to 1000 [ 150.422322][ T7626] nbd: must specify a size in bytes for the device [ 150.442395][ T7627] netlink: 'syz.2.399': attribute type 10 has an invalid length. [ 150.445409][ T7598] lo speed is unknown, defaulting to 1000 [ 150.568421][ T7627] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.642711][ T7637] netlink: 'syz.1.403': attribute type 2 has an invalid length. [ 150.651594][ T7627] bond0: (slave team0): Enslaving as an active interface with an up link [ 150.668692][ T7637] netlink: 'syz.1.403': attribute type 2 has an invalid length. [ 150.843882][ T7645] netlink: 'syz.0.405': attribute type 13 has an invalid length. [ 150.864253][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 150.882542][ T7649] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 151.128106][ T5919] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.241925][ T7637] wg1 speed is unknown, defaulting to 1000 [ 151.265399][ T7637] lo speed is unknown, defaulting to 1000 [ 151.425353][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 151.445389][ T7672] netlink: 'syz.0.409': attribute type 13 has an invalid length. [ 151.473081][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 151.647823][ T5919] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.715539][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 151.724622][ T150] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.734612][ T7672] netlink: 'syz.0.409': attribute type 13 has an invalid length. [ 151.743754][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 151.754052][ T150] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.781360][ T150] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.849779][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 151.876052][ T150] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.609995][ T5919] wg1 speed is unknown, defaulting to 1000 [ 153.033292][ T7733] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 153.884621][ T7778] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 154.030912][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.049542][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.083657][ T7789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.154276][ T7794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.252097][ T7801] __nla_validate_parse: 7 callbacks suppressed [ 154.252120][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 154.344943][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 154.483521][ T7817] netlink: 37 bytes leftover after parsing attributes in process `syz.3.444'. [ 154.586104][ T7823] netlink: 'syz.0.446': attribute type 13 has an invalid length. [ 154.619511][ T7823] netlink: 'syz.0.446': attribute type 17 has an invalid length. [ 154.684166][ T7823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.925752][ T7845] sctp: [Deprecated]: syz.2.452 (pid 7845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.925752][ T7845] Use struct sctp_sack_info instead [ 155.013680][ T7843] wg1 speed is unknown, defaulting to 1000 [ 155.047892][ T7851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.453'. [ 155.058814][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.104257][ T7843] lo speed is unknown, defaulting to 1000 [ 155.402195][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 155.681905][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.460'. [ 156.637619][ T7935] syzkaller1: entered promiscuous mode [ 156.661432][ T7935] syzkaller1: entered allmulticast mode [ 156.794236][ T7943] xt_nfacct: accounting object `syz0' does not exist [ 156.950805][ T7949] netlink: 168 bytes leftover after parsing attributes in process `syz.3.470'. [ 157.306189][ T7960] netlink: 'syz.2.472': attribute type 29 has an invalid length. [ 157.341258][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 158.301359][ T8008] netlink: 168 bytes leftover after parsing attributes in process `syz.1.481'. [ 158.592103][ T8022] netlink: 68 bytes leftover after parsing attributes in process `syz.2.487'. [ 160.104627][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.496'. [ 160.296464][ T8067] wg1 speed is unknown, defaulting to 1000 [ 160.329662][ T8067] lo speed is unknown, defaulting to 1000 [ 160.702824][ T8099] netlink: 'syz.0.500': attribute type 1 has an invalid length. [ 160.751746][ T8099] netlink: 'syz.0.500': attribute type 1 has an invalid length. [ 160.992451][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.503'. [ 161.049499][ T5583] hid-generic 0005:0004:0004.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 161.857590][ T8147] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.872989][ T8147] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.970390][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.508'. [ 162.075751][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 162.205061][ T8161] netlink: 128 bytes leftover after parsing attributes in process `syz.3.510'. [ 162.238292][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.510'. [ 162.610101][ T8186] netlink: 'syz.4.517': attribute type 12 has an invalid length. [ 162.884207][ T8197] –: renamed from vxcan1 (while UP) [ 163.259966][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 163.559129][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 163.974379][ T8254] syzkaller0: entered promiscuous mode [ 163.989047][ T8254] syzkaller0: entered allmulticast mode [ 164.417387][ T8278] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 164.520510][ T8274] bond2 (unregistering): Released all slaves [ 164.928869][ T8307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.550'. [ 164.951077][ T8307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.550'. [ 165.062248][ T8311] netlink: 'syz.3.551': attribute type 4 has an invalid length. [ 165.281571][ T8322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.335611][ T8327] __nla_validate_parse: 2 callbacks suppressed [ 165.335632][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.555'. [ 165.574600][ T8327] bond2: entered promiscuous mode [ 165.594000][ T8327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.608013][ T8327] bond2 (unregistering): Released all slaves [ 165.644646][ T8337] syzkaller1: entered promiscuous mode [ 165.655126][ T8337] syzkaller1: entered allmulticast mode [ 165.705597][ T8347] netlink: 144 bytes leftover after parsing attributes in process `syz.0.559'. [ 165.890366][ T8354] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 166.111010][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 166.610510][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 166.639160][ T8392] ip6tnl1: entered allmulticast mode [ 166.963123][ T8405] netlink: 'syz.4.570': attribute type 13 has an invalid length. [ 167.238509][ T8420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.574'. [ 167.248274][ T8420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.574'. [ 167.387888][ T5583] lo speed is unknown, defaulting to 1000 [ 167.394166][ T5583] syz2: Port: 1 Link DOWN [ 167.579995][ T8432] netlink: 'syz.1.577': attribute type 6 has an invalid length. [ 167.597701][ T8433] netlink: 'syz.1.577': attribute type 6 has an invalid length. [ 167.607357][ T8432] netlink: 128 bytes leftover after parsing attributes in process `syz.1.577'. [ 167.621649][ T8433] netlink: 128 bytes leftover after parsing attributes in process `syz.1.577'. [ 167.826119][ T8443] netlink: 112 bytes leftover after parsing attributes in process `syz.1.579'. [ 168.279816][ T8459] syzkaller0: entered promiscuous mode [ 168.285592][ T8459] syzkaller0: entered allmulticast mode [ 169.858862][ T8407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.191499][ T8475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.587'. [ 170.458468][ T8495] Cannot find set identified by id 0 to match [ 170.712391][ T8503] wg1 speed is unknown, defaulting to 1000 [ 170.729523][ T8503] lo speed is unknown, defaulting to 1000 [ 171.668287][ T8546] atomic_op ffff888057fda998 conn xmit_atomic 0000000000000000 [ 171.925245][ T8565] __nla_validate_parse: 1 callbacks suppressed [ 171.925266][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 173.143954][ T8629] syzkaller1: entered promiscuous mode [ 173.178321][ T8629] syzkaller1: entered allmulticast mode [ 173.260319][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 173.348324][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 173.441378][ T8642] wg1 speed is unknown, defaulting to 1000 [ 173.490800][ T8642] lo speed is unknown, defaulting to 1000 [ 173.521823][ T8663] veth1_macvtap: left promiscuous mode [ 173.535130][ T8663] macsec0: entered promiscuous mode [ 173.561104][ T8663] veth1_macvtap: entered promiscuous mode [ 173.571411][ T8663] macsec0: left promiscuous mode [ 173.726536][ T8672] xt_hashlimit: overflow, try lower: 18446744073709551614/4 [ 174.153882][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.622'. [ 174.177187][ T8689] xt_hashlimit: size too large, truncated to 1048576 [ 174.494343][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 174.674916][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'. [ 174.908160][ T8690] wg1 speed is unknown, defaulting to 1000 [ 174.916272][ T8690] lo speed is unknown, defaulting to 1000 [ 175.084796][ T8715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.359459][ T8729] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 175.544659][ T8733] netlink: 'syz.2.635': attribute type 1 has an invalid length. [ 175.732902][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.637'. [ 175.952012][ T8749] syzkaller0: entered promiscuous mode [ 175.975763][ T8749] syzkaller0: entered allmulticast mode [ 176.483565][ T8753] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 176.492151][ T8761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.641'. [ 176.759605][ T8783] wg1 speed is unknown, defaulting to 1000 [ 176.808400][ T8783] lo speed is unknown, defaulting to 1000 [ 176.836275][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 176.905341][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.652'. [ 176.956239][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 178.663494][ T8843] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 178.698851][ T8843] bond2 (unregistering): Released all slaves [ 178.735402][ T8835] wg1 speed is unknown, defaulting to 1000 [ 178.780272][ T8835] lo speed is unknown, defaulting to 1000 [ 178.868035][ T8854] syzkaller0: entered promiscuous mode [ 178.878354][ T8854] syzkaller0: entered allmulticast mode [ 178.908034][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.665'. [ 179.068531][ T8864] netlink: 52 bytes leftover after parsing attributes in process `syz.1.665'. [ 181.441432][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 181.541923][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.671'. [ 181.552522][ T8896] openvswitch: netlink: Flow actions attr not present in new flow. [ 181.627358][ T8899] Cannot find del_set index 4 as target [ 181.669923][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 181.936331][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 182.165417][ T8914] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 182.215503][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 182.253902][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 182.272956][ T8919] xt_l2tp: v2 doesn't support IP mode [ 182.297317][ T8916] netlink: 14 bytes leftover after parsing attributes in process `syz.3.677'. [ 182.358820][ T8916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.411493][ T8916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.440344][ T8916] bond0 (unregistering): Released all slaves [ 182.483118][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.679'. [ 182.495640][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.679'. [ 182.506497][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.679'. [ 182.949699][ T8949] Cannot find del_set index 1 as target [ 183.029996][ T8954] netlink: 'syz.1.686': attribute type 1 has an invalid length. [ 183.640749][ T8983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.691'. [ 183.862593][ T8956] macvlan2: left promiscuous mode [ 183.867971][ T8956] macvlan2: left allmulticast mode [ 183.921066][ T8949] kthread_run failed with err -4 [ 183.956964][ T1027] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 183.984750][ T1027] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 183.989064][ T8970] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 184.011082][ T1027] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 184.028164][ T8970] netlink: 224 bytes leftover after parsing attributes in process `syz.2.691'. [ 184.051528][ T1027] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 184.279693][ T9002] tipc: New replicast peer: 255.255.255.255 [ 184.290219][ T9002] tipc: Enabled bearer , priority 10 [ 184.589404][ T9015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.701'. [ 184.815278][ T9027] delete_channel: no stack [ 185.233180][ T9040] netlink: 'syz.0.707': attribute type 1 has an invalid length. [ 185.251578][ T9040] netlink: 224 bytes leftover after parsing attributes in process `syz.0.707'. [ 185.420087][ T5926] tipc: Node number set to 2589270017 [ 185.693134][ T9059] bridge_slave_1: left allmulticast mode [ 185.707761][ T9059] bridge_slave_1: left promiscuous mode [ 185.726856][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.770819][ T9059] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 185.854776][ T9059] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 185.876129][ T9059] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 185.897986][ T9059] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 185.957832][ T9059] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 185.980347][ T9071] openvswitch: netlink: Flow key attr not present in new flow. [ 186.010956][ T9059] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 186.117863][ T9059] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 186.463253][ T9094] tipc: Invalid UDP bearer configuration [ 186.463316][ T9094] tipc: Enabling of bearer rejected, failed to enable media [ 187.256126][ T9140] __nla_validate_parse: 12 callbacks suppressed [ 187.256145][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.736'. [ 187.359316][ T9145] bond2: Removing last ns target with arp_interval on [ 187.658328][ T9155] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 187.724874][ T9156] wg1 speed is unknown, defaulting to 1000 [ 187.737205][ T9156] lo speed is unknown, defaulting to 1000 [ 188.337691][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.245373][ T9140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.805135][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 190.913402][ T9209] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 190.913402][ T9209] Please contact the netfilter-devel mailing list or update your nftables rules. [ 190.915675][ T9201] bond3: entered promiscuous mode [ 190.938752][ T9201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.125774][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 191.151017][ T9223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.757'. [ 191.234116][ T8603] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.242807][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 191.258612][ T8603] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.276170][ T8603] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.286816][ T9223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.757'. [ 191.306245][ T8603] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.719051][ T9256] batman_adv: batadv0: Adding interface: dummy0 [ 191.736316][ T9256] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.783251][ T9256] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 192.068387][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 192.091143][ T9269] netlink: 92 bytes leftover after parsing attributes in process `syz.2.769'. [ 192.118603][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 192.551045][ T9306] netlink: 64 bytes leftover after parsing attributes in process `syz.3.780'. [ 192.593125][ T9310] sctp: [Deprecated]: syz.2.782 (pid 9310) Use of int in maxseg socket option. [ 192.593125][ T9310] Use struct sctp_assoc_value instead [ 192.608442][ T9307] netlink: 51 bytes leftover after parsing attributes in process `syz.4.779'. [ 192.746515][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.783'. [ 192.839678][ T9318] wg1 speed is unknown, defaulting to 1000 [ 192.850329][ T9318] lo speed is unknown, defaulting to 1000 [ 192.980942][ T9327] syzkaller1: entered promiscuous mode [ 193.013547][ T9327] syzkaller1: entered allmulticast mode [ 193.054553][ T9334] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 193.157434][ T9334] wg1 speed is unknown, defaulting to 1000 [ 193.180550][ T9334] lo speed is unknown, defaulting to 1000 [ 193.196882][ T9343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.789'. [ 193.389423][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 193.398492][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 193.408754][ T9352] netlink: 'syz.2.792': attribute type 19 has an invalid length. [ 193.416554][ T9352] netlink: 'syz.2.792': attribute type 20 has an invalid length. [ 193.462448][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 193.497831][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 193.528037][ T9352] netlink: 'syz.2.792': attribute type 19 has an invalid length. [ 193.540825][ T9352] netlink: 'syz.2.792': attribute type 20 has an invalid length. [ 193.591108][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 193.602393][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 193.635189][ T9352] netlink: 'syz.2.792': attribute type 19 has an invalid length. [ 193.655210][ T9352] netlink: 'syz.2.792': attribute type 20 has an invalid length. [ 193.701936][ T9352] netlink: 'syz.2.792': attribute type 19 has an invalid length. [ 193.717948][ T9352] netlink: 'syz.2.792': attribute type 20 has an invalid length. [ 193.726765][ T9352] netlink: 'syz.2.792': attribute type 19 has an invalid length. [ 194.070855][ T9370] wg1 speed is unknown, defaulting to 1000 [ 194.149570][ T9370] lo speed is unknown, defaulting to 1000 [ 194.744336][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.903873][ T9404] macvlan3: entered promiscuous mode [ 194.928541][ T9404] macvlan3: entered allmulticast mode [ 194.951874][ T9413] syz_tun: entered allmulticast mode [ 194.978747][ T9412] syz_tun: left allmulticast mode [ 195.090867][ T9411] wg1 speed is unknown, defaulting to 1000 [ 195.120333][ T9411] lo speed is unknown, defaulting to 1000 [ 196.013484][ T5862] block nbd1: Receive control failed (result -1) [ 196.100196][ T9467] xt_socket: unknown flags 0x50 [ 196.512323][ T9480] pimreg9: entered allmulticast mode [ 196.789799][ T5583] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.699874][ T5583] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 197.745723][ T9537] bridge0: port 4(vlan2) entered blocking state [ 197.769233][ T9537] bridge0: port 4(vlan2) entered disabled state [ 197.808299][ T9537] vlan2: entered allmulticast mode [ 197.829195][ T9537] geneve0: entered allmulticast mode [ 197.853907][ T9537] vlan2: entered promiscuous mode [ 197.867591][ T9537] geneve0: entered promiscuous mode [ 197.911497][ T9546] tipc: Started in network mode [ 197.927630][ T9546] tipc: Node identity b279ab614ec7, cluster identity 4711 [ 197.949402][ T9546] tipc: Enabled bearer , priority 0 [ 197.973893][ T9549] syzkaller0: entered promiscuous mode [ 198.005480][ T9549] syzkaller0: entered allmulticast mode [ 198.128287][ T9559] tipc: Can't bind to reserved service type 2 [ 198.261038][ T9526] __nla_validate_parse: 71 callbacks suppressed [ 198.261062][ T9526] netlink: 44 bytes leftover after parsing attributes in process `syz.4.845'. [ 198.270844][ T9561] tipc: Resetting bearer [ 198.384491][ T9545] tipc: Resetting bearer [ 198.438151][ T9545] tipc: Disabling bearer [ 198.813180][ T9583] net_ratelimit: 58 callbacks suppressed [ 198.813201][ T9583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.891497][ T9590] validate_nla: 61 callbacks suppressed [ 198.891519][ T9590] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 198.924652][ T9590] netlink: 'syz.3.856': attribute type 2 has an invalid length. [ 198.962600][ T9590] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 198.985577][ T9590] netlink: 'syz.3.856': attribute type 3 has an invalid length. [ 199.013373][ T9593] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.860'. [ 199.024317][ T9593] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.860'. [ 199.036899][ T9593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.860'. [ 199.929616][ T9615] wg1 speed is unknown, defaulting to 1000 [ 199.940180][ T9615] lo speed is unknown, defaulting to 1000 [ 200.175516][ T9632] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 200.184536][ T9632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.868'. [ 200.240332][ T9607] wg1 speed is unknown, defaulting to 1000 [ 200.268719][ T9607] lo speed is unknown, defaulting to 1000 [ 200.268889][ T9632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.868'. [ 200.333948][ T9638] Bluetooth: MGMT ver 1.23 [ 200.596719][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 200.653268][ T9647] netlink: 'syz.1.871': attribute type 32 has an invalid length. [ 200.663049][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 200.686228][ T9647] netlink: 'syz.1.871': attribute type 32 has an invalid length. [ 201.223578][ T9668] syzkaller1: entered promiscuous mode [ 201.237553][ T9668] syzkaller1: entered allmulticast mode [ 201.346462][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 201.558091][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 201.705599][ T9691] tipc: New replicast peer: 255.255.255.255 [ 201.725758][ T9691] tipc: Enabled bearer , priority 10 [ 202.016965][ T9708] block nbd0: NBD_DISCONNECT [ 202.032788][ T9708] block nbd0: Send disconnect failed -32 [ 202.065383][ T9708] block nbd0: shutting down sockets [ 202.485677][ T9722] syzkaller1: entered promiscuous mode [ 202.520844][ T9722] syzkaller1: entered allmulticast mode [ 202.960018][ T9749] syzkaller1: entered promiscuous mode [ 202.971971][ T9749] syzkaller1: entered allmulticast mode [ 203.050891][ T9758] syzkaller1: entered promiscuous mode [ 203.060785][ T9758] syzkaller1: entered allmulticast mode [ 203.075225][ T9761] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 203.089291][ T9761] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 203.099387][ T9761] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 203.232193][ T9765] bond1: option ad_select: invalid value (34) [ 203.242750][ T9765] bond1 (unregistering): Released all slaves [ 203.612799][ T9797] __nla_validate_parse: 3 callbacks suppressed [ 203.612823][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.914'. [ 203.665794][ T9797] netlink: 54775 bytes leftover after parsing attributes in process `syz.1.914'. [ 203.683446][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 203.692613][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 204.564384][ T9827] wg1 speed is unknown, defaulting to 1000 [ 204.571452][ T9827] lo speed is unknown, defaulting to 1000 [ 204.601957][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.922'. [ 204.611034][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.922'. [ 205.818384][ T9845] syzkaller1: entered promiscuous mode [ 205.823933][ T9845] syzkaller1: entered allmulticast mode [ 206.562681][ T9791] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.797331][ T9850] netlink: 'syz.4.928': attribute type 13 has an invalid length. [ 206.798171][ T9851] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 206.816020][ T9850] netlink: 'syz.4.928': attribute type 17 has an invalid length. [ 207.065082][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 207.065126][ T5165] Bluetooth: hci0: command 0x0406 tx timeout [ 207.072124][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 207.078473][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 207.240583][ T9850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.254241][ T9850] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.266326][ T9850] batman_adv: batadv0: Interface activated: dummy0 [ 207.273494][ T9850] batadv0: mtu less than device minimum [ 207.280211][ T9850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.293251][ T9850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.305578][ T9850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.317612][ T9850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.328983][ T9850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.341009][ T9850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.352265][ T9850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.364403][ T9850] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 207.399096][ T807] lo speed is unknown, defaulting to 1000 [ 207.408846][ T807] syz2: Port: 1 Link ACTIVE [ 208.049950][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 208.643815][ T5926] hsr0: entered promiscuous mode [ 208.650410][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 208.665423][ T9956] netlink: 240 bytes leftover after parsing attributes in process `syz.3.950'. [ 208.682956][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 208.805622][ T9953] netlink: 14 bytes leftover after parsing attributes in process `syz.0.952'. [ 208.808149][ T9959] vlan3: entered allmulticast mode [ 208.867333][ T9959] bond0: entered allmulticast mode [ 208.887526][ T9959] bond_slave_0: entered allmulticast mode [ 208.905611][ T9959] bond_slave_1: entered allmulticast mode [ 209.000461][ T9953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.021048][ T9953] bond_slave_0: left allmulticast mode [ 209.052736][ T9953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.085987][ T9953] bond_slave_1: left allmulticast mode [ 209.116038][ T9953] bond0 (unregistering): Released all slaves [ 209.161465][ T9963] : entered promiscuous mode [ 209.239409][ T9969] bond3: option downdelay: invalid value (18446744073709551371) [ 209.274139][ T9969] bond3: option downdelay: allowed values 0 - 2147483647 [ 209.322432][ T9969] bond3 (unregistering): Released all slaves [ 209.661086][T10000] x_tables: unsorted underflow at hook 3 [ 209.710263][ T9992] bond3: option resend_igmp: invalid value (18446744071562067968) [ 209.719841][ T9992] bond3: option resend_igmp: allowed values 0 - 255 [ 209.731278][ T9992] bond3 (unregistering): Released all slaves [ 210.131535][T10027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.970'. [ 211.033930][T10067] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.981'. [ 211.050835][T10067] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 211.069581][T10067] netlink: 'syz.3.981': attribute type 17 has an invalid length. [ 211.099068][T10071] netlink: 128 bytes leftover after parsing attributes in process `syz.0.982'. [ 211.108631][T10071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.982'. [ 211.123427][T10067] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.361543][T10080] ip6erspan1: entered allmulticast mode [ 211.874900][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'. [ 213.193961][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'. [ 213.393491][T10165] net_ratelimit: 13 callbacks suppressed [ 213.393512][T10165] openvswitch: netlink: Invalid VLAN frame [ 213.432528][T10165] batadv_slave_0: Caught tx_queue_len zero misconfig [ 213.750908][T10172] wg1 speed is unknown, defaulting to 1000 [ 213.818234][T10172] lo speed is unknown, defaulting to 1000 [ 213.866904][T10184] wg1 speed is unknown, defaulting to 1000 [ 213.909093][T10184] lo speed is unknown, defaulting to 1000 [ 214.439073][T10202] pim6reg1: entered allmulticast mode [ 215.022704][T10222] __nla_validate_parse: 1 callbacks suppressed [ 215.022726][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 215.038366][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 215.076770][T10224] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1024'. [ 215.216371][T10218] delete_channel: no stack [ 215.297159][T10228] FAULT_INJECTION: forcing a failure. [ 215.297159][T10228] name failslab, interval 1, probability 0, space 0, times 1 [ 215.329747][T10228] CPU: 1 UID: 0 PID: 10228 Comm: syz.1.1025 Not tainted syzkaller #0 PREEMPT(full) [ 215.329777][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.329788][T10228] Call Trace: [ 215.329797][T10228] [ 215.329805][T10228] dump_stack_lvl+0xe8/0x150 [ 215.329843][T10228] should_fail_ex+0x412/0x560 [ 215.329880][T10228] should_failslab+0xa8/0x100 [ 215.329908][T10228] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 215.329935][T10228] ? __get_vm_area_node+0x13f/0x300 [ 215.329962][T10228] __get_vm_area_node+0x13f/0x300 [ 215.329988][T10228] __vmalloc_node_range_noprof+0x36a/0x1750 [ 215.330010][T10228] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 215.330039][T10228] ? __lock_acquire+0x6b5/0x2cf0 [ 215.330091][T10228] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.330114][T10228] ? __lock_acquire+0x6b5/0x2cf0 [ 215.330146][T10228] ? _parse_integer_limit+0x1ae/0x1f0 [ 215.330179][T10228] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 215.330203][T10228] __vmalloc_noprof+0xd2/0x120 [ 215.330226][T10228] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 215.330255][T10228] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 215.330287][T10228] bpf_prog_alloc+0x3c/0x1a0 [ 215.330317][T10228] bpf_prog_load+0x779/0x1a10 [ 215.330359][T10228] ? __pfx_bpf_prog_load+0x10/0x10 [ 215.330384][T10228] ? __might_fault+0xaf/0x130 [ 215.330423][T10228] ? bpf_lsm_bpf+0x9/0x20 [ 215.330449][T10228] ? security_bpf+0x7e/0x2d0 [ 215.330481][T10228] __sys_bpf+0x618/0x950 [ 215.330509][T10228] ? __pfx___sys_bpf+0x10/0x10 [ 215.330551][T10228] ? ksys_write+0x242/0x270 [ 215.330577][T10228] ? __pfx_ksys_write+0x10/0x10 [ 215.330606][T10228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.330640][T10228] __x64_sys_bpf+0x7c/0x90 [ 215.330664][T10228] do_syscall_64+0x15f/0xf80 [ 215.330691][T10228] ? trace_irq_disable+0x3b/0x140 [ 215.330718][T10228] ? clear_bhb_loop+0x40/0x90 [ 215.330744][T10228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.330764][T10228] RIP: 0033:0x7fcb3419cdd9 [ 215.330785][T10228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.330801][T10228] RSP: 002b:00007fcb35003028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.330824][T10228] RAX: ffffffffffffffda RBX: 00007fcb34415fa0 RCX: 00007fcb3419cdd9 [ 215.330838][T10228] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 215.330850][T10228] RBP: 00007fcb35003090 R08: 0000000000000000 R09: 0000000000000000 [ 215.330862][T10228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.330873][T10228] R13: 00007fcb34416038 R14: 00007fcb34415fa0 R15: 00007ffd3e434f48 [ 215.330907][T10228] [ 215.334791][T10228] syz.1.1025: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 215.434504][T10232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.503524][T10228] ,cpuset=/,mems_allowed=0-1 [ 215.503722][T10228] CPU: 1 UID: 0 PID: 10228 Comm: syz.1.1025 Not tainted syzkaller #0 PREEMPT(full) [ 215.503746][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.503756][T10228] Call Trace: [ 215.503764][T10228] [ 215.503771][T10228] dump_stack_lvl+0xe8/0x150 [ 215.503805][T10228] warn_alloc+0x249/0x340 [ 215.503834][T10228] ? __pfx_warn_alloc+0x10/0x10 [ 215.503858][T10228] ? __get_vm_area_node+0x13f/0x300 [ 215.503883][T10228] ? __get_vm_area_node+0x2b5/0x300 [ 215.503909][T10228] __vmalloc_node_range_noprof+0x38f/0x1750 [ 215.503935][T10228] ? __lock_acquire+0x6b5/0x2cf0 [ 215.503985][T10228] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.504007][T10228] ? __lock_acquire+0x6b5/0x2cf0 [ 215.504036][T10228] ? _parse_integer_limit+0x1ae/0x1f0 [ 215.504067][T10228] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 215.504091][T10228] __vmalloc_noprof+0xd2/0x120 [ 215.504111][T10228] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 215.504138][T10228] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 215.504167][T10228] bpf_prog_alloc+0x3c/0x1a0 [ 215.504194][T10228] bpf_prog_load+0x779/0x1a10 [ 215.504231][T10228] ? __pfx_bpf_prog_load+0x10/0x10 [ 215.504255][T10228] ? __might_fault+0xaf/0x130 [ 215.504290][T10228] ? bpf_lsm_bpf+0x9/0x20 [ 215.504313][T10228] ? security_bpf+0x7e/0x2d0 [ 215.504349][T10228] __sys_bpf+0x618/0x950 [ 215.504375][T10228] ? __pfx___sys_bpf+0x10/0x10 [ 215.504413][T10228] ? ksys_write+0x242/0x270 [ 215.504438][T10228] ? __pfx_ksys_write+0x10/0x10 [ 215.504465][T10228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.504484][T10228] __x64_sys_bpf+0x7c/0x90 [ 215.504507][T10228] do_syscall_64+0x15f/0xf80 [ 215.504530][T10228] ? trace_irq_disable+0x3b/0x140 [ 215.504553][T10228] ? clear_bhb_loop+0x40/0x90 [ 215.504575][T10228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.504593][T10228] RIP: 0033:0x7fcb3419cdd9 [ 215.504611][T10228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.504626][T10228] RSP: 002b:00007fcb35003028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.504645][T10228] RAX: ffffffffffffffda RBX: 00007fcb34415fa0 RCX: 00007fcb3419cdd9 [ 215.504658][T10228] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 215.504669][T10228] RBP: 00007fcb35003090 R08: 0000000000000000 R09: 0000000000000000 [ 215.504680][T10228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.504691][T10228] R13: 00007fcb34416038 R14: 00007fcb34415fa0 R15: 00007ffd3e434f48 [ 215.504720][T10228] [ 215.504728][T10228] Mem-Info: [ 215.516630][T10233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.578816][T10228] active_anon:11197 inactive_anon:0 isolated_anon:0 [ 215.578816][T10228] active_file:3281 inactive_file:40014 isolated_file:0 [ 215.578816][T10228] unevictable:768 dirty:93 writeback:0 [ 215.578816][T10228] slab_reclaimable:11105 slab_unreclaimable:135125 [ 215.578816][T10228] mapped:29413 shmem:1354 pagetables:1242 [ 215.578816][T10228] sec_pagetables:0 bounce:0 [ 215.578816][T10228] kernel_misc_reclaimable:0 [ 215.578816][T10228] free:1278763 free_pcp:13827 free_cma:0 [ 215.852266][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1029'. [ 215.953965][T10228] Node 0 active_anon:47888kB inactive_anon:0kB active_file:13124kB inactive_file:159860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120352kB dirty:372kB writeback:0kB shmem:6480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12836kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 216.008831][T10228] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 216.083655][T10228] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.136849][T10228] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 216.146987][T10228] Node 0 DMA32 free:1148948kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49988kB inactive_anon:0kB active_file:13124kB inactive_file:159860kB unevictable:1536kB writepending:372kB zspages:0kB present:3129332kB managed:2550864kB mlocked:0kB bounce:0kB free_pcp:54576kB local_pcp:31084kB free_cma:0kB [ 216.209065][T10228] lowmem_reserve[]: 0 0 0 0 0 [ 216.224227][T10228] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:588kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.276939][T10228] lowmem_reserve[]: 0 0 0 0 0 [ 216.287542][T10228] Node 1 Normal free:3946348kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.380022][T10228] lowmem_reserve[]: 0 0 0 0 0 [ 216.393820][T10228] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.466025][T10228] Node 0 DMA32: 2350*4kB (UE) 1737*8kB (UME) 1048*16kB (UME) 484*32kB (UME) 90*64kB (UME) 230*128kB (UE) 100*256kB (U) 22*512kB (UE) 8*1024kB (UM) 20*2048kB (UME) 236*4096kB (UM) = 1143424kB [ 216.518748][T10228] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 216.564330][T10228] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 5*16kB (UM) 10*32kB (UM) 7*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 3*2048kB (U) 961*4096kB (M) = 3946348kB [ 216.585134][T10228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.595319][T10228] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.606232][T10228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.616989][T10228] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.627266][T10228] 47492 total pagecache pages [ 216.634040][T10228] 0 pages in swap cache [ 216.638792][T10228] Free swap = 124996kB [ 216.643239][T10228] Total swap = 124996kB [ 216.649340][T10228] 2097051 pages RAM [ 216.653505][T10228] 0 pages HighMem/MovableOnly [ 216.659717][T10228] 427573 pages reserved [ 216.664029][T10228] 0 pages cma reserved [ 216.769571][T10255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1034'. [ 216.897688][T10257] netlink: 'syz.0.1035': attribute type 12 has an invalid length. [ 216.913632][T10257] netlink: 'syz.0.1035': attribute type 29 has an invalid length. [ 216.933142][T10257] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1035'. [ 217.220497][T10268] netlink: 492 bytes leftover after parsing attributes in process `syz.0.1038'. [ 217.375882][T10272] netlink: 'syz.1.1039': attribute type 7 has an invalid length. [ 217.515795][T10278] syzkaller0: entered promiscuous mode [ 217.531114][T10278] syzkaller0: entered allmulticast mode [ 218.212506][T10307] netlink: 'syz.0.1050': attribute type 1 has an invalid length. [ 218.273975][T10309] netlink: 'syz.0.1050': attribute type 11 has an invalid length. [ 218.304538][T10312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1052'. [ 218.319032][T10306] IPv6: sit1: Disabled Multicast RS [ 218.394453][T10307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.524639][T10316] bond0: (slave gretap1): making interface the new active one [ 218.556087][T10316] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 218.612605][T10322] syzkaller0: entered promiscuous mode [ 218.638146][T10322] syzkaller0: entered allmulticast mode [ 218.667241][T10328] syzkaller0: entered promiscuous mode [ 218.676440][T10328] syzkaller0: entered allmulticast mode [ 218.683531][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 218.685568][T10322] batman_adv: batadv0: Adding interface: dummy0 [ 218.701002][T10322] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.730216][T10322] batman_adv: batadv0: Interface activated: dummy0 [ 218.765806][T10333] bond3: entered promiscuous mode [ 218.771540][T10333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.798238][T10326] batadv0: mtu less than device minimum [ 218.807042][T10326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.819302][T10326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.831348][T10326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.843408][T10326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.855481][T10326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.867720][T10326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.879894][T10326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.891852][T10326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.903735][T10326] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.953490][T10336] dvmrp1: entered allmulticast mode [ 218.964945][ T8603] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.985017][ T8603] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.997821][T10337] dvmrp1: left allmulticast mode [ 219.032929][T10345] netlink: 'syz.4.1061': attribute type 13 has an invalid length. [ 219.041266][T10345] netlink: 'syz.4.1061': attribute type 17 has an invalid length. [ 219.090507][T10340] batman_adv: batadv0: Interface deactivated: dummy0 [ 219.155091][T10336] bond1 (unregistering): Released all slaves [ 219.211499][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 219.217967][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 219.256422][T10359] netlink: 'syz.3.1064': attribute type 6 has an invalid length. [ 219.270409][T10359] netlink: 'syz.3.1064': attribute type 6 has an invalid length. [ 219.433129][ T8603] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.453161][ T5919] lo speed is unknown, defaulting to 1000 [ 219.509593][T10345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.520114][T10345] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.528971][T10345] batman_adv: batadv0: Interface activated: dummy0 [ 219.613907][ T5583] lo speed is unknown, defaulting to 1000 [ 219.613930][ T8603] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.029426][T10389] __nla_validate_parse: 3 callbacks suppressed [ 220.029447][T10389] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1069'. [ 220.204724][T10396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1072'. [ 220.430056][T10400] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2730066250/2730066252 [ 220.448340][T10400] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2730066250/2730066251 [ 220.486286][T10400] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2730066250/2730066252 [ 220.543963][T10400] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2730066250/2730066251 [ 220.615416][T10409] netlink: 'syz.1.1077': attribute type 21 has an invalid length. [ 220.624692][T10409] netlink: 'syz.1.1077': attribute type 22 has an invalid length. [ 220.634825][T10409] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1077'. [ 220.793457][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 220.829393][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 220.959595][T10414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1078'. [ 221.150730][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1081'. [ 221.379305][ T1174] wlan1: Trigger new scan to find an IBSS to join [ 221.721886][T10453] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1089'. [ 221.805382][T10436] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 221.876578][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 221.899279][T10461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1091'. [ 222.013491][T10461] bond2: Removing last arp target with arp_interval on [ 222.331968][T10481] validate_nla: 2 callbacks suppressed [ 222.331989][T10481] netlink: 'syz.2.1096': attribute type 1 has an invalid length. [ 223.259391][ T9] lo speed is unknown, defaulting to 1000 [ 223.276896][ T9] syz2: Port: 1 Link DOWN [ 224.020998][T10552] tipc: Enabled bearer , priority 0 [ 224.129024][T10558] net_ratelimit: 35 callbacks suppressed [ 224.129043][T10558] bond_slave_1: mtu less than device minimum [ 224.348183][ T36] wlan1: Trigger new scan to find an IBSS to join [ 224.723619][T10549] tipc: Disabling bearer [ 224.802921][T10578] pim6reg1: entered allmulticast mode [ 224.945551][T10587] tc_dump_action: action bad kind [ 225.053572][T10589] __nla_validate_parse: 10 callbacks suppressed [ 225.053592][T10589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1118'. [ 225.082491][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'. [ 225.099959][T10594] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1120'. [ 225.147097][T10589] syzkaller1: entered promiscuous mode [ 225.165969][T10589] syzkaller1: entered allmulticast mode [ 225.527036][T10615] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1123'. [ 225.595505][T10610] wg1 speed is unknown, defaulting to 1000 [ 225.619366][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 225.622247][T10610] lo speed is unknown, defaulting to 1000 [ 225.786075][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1129'. [ 225.829323][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'. [ 225.861905][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 226.409740][T10657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.458778][T10657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.805579][T10655] syzkaller0: entered promiscuous mode [ 226.820888][T10655] syzkaller0: entered allmulticast mode [ 227.299679][ T1174] wlan1: Trigger new scan to find an IBSS to join [ 227.378292][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 228.220718][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.704851][T10680] wg1 speed is unknown, defaulting to 1000 [ 229.753485][T10680] lo speed is unknown, defaulting to 1000 [ 230.033277][T10713] wg1 speed is unknown, defaulting to 1000 [ 230.053118][ T5945] IPVS: starting estimator thread 0... [ 230.154480][T10724] netlink: 'syz.1.1147': attribute type 10 has an invalid length. [ 230.168786][T10719] IPVS: using max 24 ests per chain, 57600 per kthread [ 230.179466][T10725] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1143'. [ 230.206638][T10726] netlink: 'syz.1.1147': attribute type 10 has an invalid length. [ 230.227367][T10726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1147'. [ 230.237195][T10713] lo speed is unknown, defaulting to 1000 [ 231.031286][T10745] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1151'. [ 231.103742][T10745] syzkaller1: entered promiscuous mode [ 231.130658][T10745] syzkaller1: entered allmulticast mode [ 231.145530][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 231.218788][T10748] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 231.233155][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1155'. [ 231.247672][T10748] bond4 (unregistering): Released all slaves [ 231.314585][T10752] macvlan0: entered allmulticast mode [ 231.320396][T10752] hsr0: entered allmulticast mode [ 231.325650][T10752] hsr_slave_0: entered allmulticast mode [ 231.347574][T10752] hsr_slave_1: entered allmulticast mode [ 231.357641][T10752] hsr0: entered promiscuous mode [ 231.690272][T10774] veth0_macvtap: Caught tx_queue_len zero misconfig [ 231.832683][T10781] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.045115][T10784] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1163'. [ 232.301426][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 232.409332][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'. [ 232.489230][T10798] team0: Port device team_slave_0 removed [ 232.541833][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 232.712343][T10809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.722830][T10809] IPv6: NLM_F_CREATE should be set when creating new route [ 232.730273][T10809] IPv6: NLM_F_CREATE should be set when creating new route [ 232.737589][T10809] IPv6: NLM_F_CREATE should be set when creating new route [ 232.766544][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 232.966693][T10816] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 233.035463][T10820] veth0_macvtap: Caught tx_queue_len zero misconfig [ 233.612417][T10849] netlink: 'syz.1.1180': attribute type 8 has an invalid length. [ 233.962111][T10861] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 233.987847][T10861] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 234.916742][T10888] lo: Caught tx_queue_len zero misconfig [ 235.424940][T10913] x_tables: duplicate entry at hook 3 [ 235.601316][T10924] __nla_validate_parse: 13 callbacks suppressed [ 235.601340][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 235.664550][T10927] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.674230][T10927] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.682621][T10927] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.690766][T10927] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.698949][T10927] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.707002][T10927] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.715084][T10927] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.723356][T10927] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.731435][T10927] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.739501][T10927] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 236.241019][T10915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.821549][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1210'. [ 236.835250][T10963] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 236.986479][T10963] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.065779][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'. [ 237.103535][T10965] bond4: (slave geneve2): making interface the new active one [ 237.134215][T10965] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 237.165766][ T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.203941][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.243891][ T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.256663][T10977] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1214'. [ 237.274839][ T48] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.296993][T10977] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1214'. [ 237.429208][T10984] netlink: 'syz.2.1215': attribute type 8 has an invalid length. [ 237.686548][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'. [ 237.874296][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 237.883698][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 237.908977][T10999] netlink: 'syz.4.1221': attribute type 4 has an invalid length. [ 237.958909][T11000] netlink: 'syz.4.1221': attribute type 4 has an invalid length. [ 238.002001][ T5926] lo speed is unknown, defaulting to 1000 [ 238.026095][ T5926] syz2: Port: 1 Link ACTIVE [ 238.208721][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1225'. [ 238.439260][T11021] syz_tun: entered promiscuous mode [ 238.462660][T11020] syz_tun: left promiscuous mode [ 238.524526][T11024] netlink: 'syz.3.1230': attribute type 1 has an invalid length. [ 238.609181][T11028] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1232'. [ 238.620644][T11029] netlink: 'syz.3.1230': attribute type 13 has an invalid length. [ 242.071027][T11045] __nla_validate_parse: 3 callbacks suppressed [ 242.071046][T11045] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1236'. [ 242.087261][T11045] ip6tnl0: Caught tx_queue_len zero misconfig [ 242.128720][T11042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1235'. [ 242.586198][T11070] syzkaller0: entered promiscuous mode [ 242.611657][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 242.613664][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'. [ 242.653358][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'. [ 242.713695][T11084] veth5: entered promiscuous mode [ 242.935858][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 245.666031][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 245.752913][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 245.834516][T11136] netlink: 'syz.0.1258': attribute type 2 has an invalid length. [ 245.858422][T11133] team1: entered promiscuous mode [ 245.864413][T11133] team1: entered allmulticast mode [ 245.878741][T11133] 8021q: adding VLAN 0 to HW filter on device team1 [ 245.894158][T11134] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 246.020337][T11134] team2: entered promiscuous mode [ 246.032054][T11134] team2: entered allmulticast mode [ 246.048027][T11134] 8021q: adding VLAN 0 to HW filter on device team2 [ 246.366799][T11176] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1263'. [ 246.410194][T11176] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 247.636668][T11198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.672361][T11229] syzkaller0: entered promiscuous mode [ 247.687636][T11229] syzkaller0: entered allmulticast mode [ 247.851209][T11237] syzkaller1: entered allmulticast mode [ 247.940243][T11234] gre0 speed is unknown, defaulting to 1000 [ 248.031791][T11234] gre0 speed is unknown, defaulting to 1000 [ 248.041190][T11234] gre0 speed is unknown, defaulting to 1000 [ 248.057035][T11249] xt_TCPMSS: Only works on TCP SYN packets [ 248.437677][T11267] sctp: [Deprecated]: syz.0.1288 (pid 11267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.437677][T11267] Use struct sctp_sack_info instead [ 248.468424][T11267] sctp: [Deprecated]: syz.0.1288 (pid 11267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.468424][T11267] Use struct sctp_sack_info instead [ 248.790945][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 248.943748][ T5919] gre0 speed is unknown, defaulting to 1000 [ 248.955575][T11234] infiniband syz1: set active [ 248.968748][T11234] infiniband syz1: added gre0 [ 248.981855][T11288] x_tables: duplicate underflow at hook 1 [ 249.016230][T11234] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 249.031017][T11234] infiniband syz1: Couldn't open port 1 [ 249.031662][T11290] netlink: 'syz.1.1295': attribute type 16 has an invalid length. [ 249.051062][T11234] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 249.087123][T11234] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 249.097074][T11290] ipip1: entered promiscuous mode [ 249.124370][T11234] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 249.261799][T11234] RDS/IB: syz1: added [ 249.272212][T11234] smc: adding ib device syz1 with port count 1 [ 249.295264][T11234] smc: ib device syz1 port 1 has no pnetid [ 249.327349][ T5919] gre0 speed is unknown, defaulting to 1000 [ 249.355558][T11234] gre0 speed is unknown, defaulting to 1000 [ 249.525505][T11303] netlink: 'syz.0.1298': attribute type 15 has an invalid length. [ 249.673233][T11309] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1299'. [ 249.784870][T11309] net_ratelimit: 45 callbacks suppressed [ 249.784892][T11309] netlink: Conntrack attr has 3 unknown bytes [ 250.135953][ T5945] hid-generic 0005:0004:0004.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 250.392847][T11341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1303'. [ 250.482916][T11341] syz_tun: entered promiscuous mode [ 250.628961][T11339] syz_tun: left promiscuous mode [ 250.694243][T11234] gre0 speed is unknown, defaulting to 1000 [ 250.783642][T11353] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 250.821992][T11353] bridge3: entered allmulticast mode [ 250.891720][T11353] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 250.913680][T11353] bridge4: entered allmulticast mode [ 251.005510][T11353] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 251.050717][T11353] bridge5: entered allmulticast mode [ 251.135481][T11353] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 251.180541][T11353] bridge6: entered allmulticast mode [ 251.241326][T11353] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 251.257045][T11353] bridge7: entered allmulticast mode [ 251.306166][T11353] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 251.328742][T11353] bridge8: entered allmulticast mode [ 251.396903][T11353] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 251.426023][T11353] bridge9: entered allmulticast mode [ 251.503651][T11353] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 251.528175][T11353] bridge10: entered allmulticast mode [ 251.656923][T11234] gre0 speed is unknown, defaulting to 1000 [ 251.656995][T11375] wg1 speed is unknown, defaulting to 1000 [ 251.682795][T11366] wg1 speed is unknown, defaulting to 1000 [ 251.691900][T11375] lo speed is unknown, defaulting to 1000 [ 251.704376][T11366] lo speed is unknown, defaulting to 1000 [ 251.715699][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 251.737743][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 251.924399][T11385] wg1 speed is unknown, defaulting to 1000 [ 251.996050][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1314'. [ 252.027999][T11385] lo speed is unknown, defaulting to 1000 [ 252.080377][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1315'. [ 252.153553][T11393] bond4: entered promiscuous mode [ 252.161533][T11393] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.251779][T11375] gre0 speed is unknown, defaulting to 1000 [ 252.329634][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 252.553761][T11366] gre0 speed is unknown, defaulting to 1000 [ 252.907668][T11385] gre0 speed is unknown, defaulting to 1000 [ 253.288109][T11234] gre0 speed is unknown, defaulting to 1000 [ 253.383911][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1318'. [ 253.598819][T11234] gre0 speed is unknown, defaulting to 1000 [ 255.369466][T11443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1325'. [ 255.380031][T11446] wg1 speed is unknown, defaulting to 1000 [ 255.458799][T11446] lo speed is unknown, defaulting to 1000 [ 255.484228][T11446] gre0 speed is unknown, defaulting to 1000 [ 255.503009][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'. [ 255.579815][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'. [ 255.590755][T11451] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 255.929805][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1327'. [ 256.029851][T11472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1327'. [ 256.178109][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.190042][T11479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1335'. [ 256.298613][ T3523] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.436475][T11477] syzkaller0: entered promiscuous mode [ 256.447690][T11477] syzkaller0: entered allmulticast mode [ 256.466048][ T3523] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.681377][T11490] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1337'. [ 256.710507][ T3523] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.736312][T11489] netlink: 'syz.0.1336': attribute type 3 has an invalid length. [ 256.760014][ T3523] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.334329][T11509] netlink: 5168 bytes leftover after parsing attributes in process `syz.2.1344'. [ 257.347006][T11509] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1344'. [ 257.447896][ T30] audit: type=1804 audit(1777172713.617:2): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1346" name="/newroot/267/cgroup.controllers" dev="tmpfs" ino=1379 res=1 errno=0 [ 257.478904][T11513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1346'. [ 257.488550][ T30] audit: type=1800 audit(1777172713.647:3): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1346" name="cgroup.controllers" dev="tmpfs" ino=1379 res=0 errno=0 [ 257.511406][ T30] audit: type=1800 audit(1777172713.647:4): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1346" name="cgroup.controllers" dev="tmpfs" ino=1379 res=0 errno=0 [ 257.698445][T11519] syzkaller0: entered promiscuous mode [ 257.715895][T11519] syzkaller0: entered allmulticast mode [ 258.140439][T11540] veth1_to_team: Caught tx_queue_len zero misconfig [ 258.279664][T11544] wg1 speed is unknown, defaulting to 1000 [ 258.313847][T11550] vlan2: entered promiscuous mode [ 258.326019][T11550] bridge0: entered promiscuous mode [ 258.376562][T11544] lo speed is unknown, defaulting to 1000 [ 258.398209][T11546] wg1 speed is unknown, defaulting to 1000 [ 258.408693][T11544] gre0 speed is unknown, defaulting to 1000 [ 258.454358][T11546] lo speed is unknown, defaulting to 1000 [ 258.891321][T11572] syzkaller0: entered promiscuous mode [ 258.908176][T11572] syzkaller0: entered allmulticast mode [ 259.077060][T11546] gre0 speed is unknown, defaulting to 1000 [ 259.612552][T11597] tap0: tun_chr_ioctl cmd 1074025676 [ 259.626955][T11597] tap0: owner set to 0 [ 259.658401][T11601] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20002 [ 259.753955][T11608] raw_sendmsg: syz.2.1375 forgot to set AF_INET. Fix it! [ 260.173069][T11616] syzkaller0: entered promiscuous mode [ 260.188141][T11616] syzkaller0: entered allmulticast mode [ 260.667911][T11643] __nla_validate_parse: 14 callbacks suppressed [ 260.667933][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 260.700650][T11634] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.720329][T11634] team0: Port device bond5 added [ 260.869655][T11648] FAULT_INJECTION: forcing a failure. [ 260.869655][T11648] name failslab, interval 1, probability 0, space 0, times 0 [ 260.900804][T11648] CPU: 1 UID: 0 PID: 11648 Comm: syz.0.1383 Not tainted syzkaller #0 PREEMPT(full) [ 260.900834][T11648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.900857][T11648] Call Trace: [ 260.900866][T11648] [ 260.900875][T11648] dump_stack_lvl+0xe8/0x150 [ 260.900915][T11648] should_fail_ex+0x412/0x560 [ 260.900954][T11648] should_failslab+0xa8/0x100 [ 260.900981][T11648] ? skb_clone+0x212/0x3a0 [ 260.901005][T11648] kmem_cache_alloc_noprof+0x87/0x650 [ 260.901030][T11648] ? __netlink_lookup+0xc6/0x8b0 [ 260.901059][T11648] skb_clone+0x212/0x3a0 [ 260.901086][T11648] __netlink_deliver_tap+0x404/0x850 [ 260.901121][T11648] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.901144][T11648] netlink_deliver_tap+0x19c/0x1b0 [ 260.901168][T11648] netlink_unicast+0x730/0x8e0 [ 260.901211][T11648] netlink_sendmsg+0x813/0xb40 [ 260.901244][T11648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.901270][T11648] ? aa_sock_msg_perm+0xf1/0x1b0 [ 260.901293][T11648] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.901336][T11648] ____sys_sendmsg+0x972/0x9f0 [ 260.901359][T11648] ? __might_fault+0xaf/0x130 [ 260.901390][T11648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.901432][T11648] ? import_iovec+0x73/0xa0 [ 260.901461][T11648] ___sys_sendmsg+0x2a5/0x360 [ 260.901483][T11648] ? __lock_acquire+0x6b5/0x2cf0 [ 260.901519][T11648] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.901592][T11648] ? __fget_files+0x2a/0x420 [ 260.901613][T11648] ? __fget_files+0x3a0/0x420 [ 260.901646][T11648] __x64_sys_sendmsg+0x1bd/0x2a0 [ 260.901672][T11648] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.901707][T11648] ? __pfx_ksys_write+0x10/0x10 [ 260.901757][T11648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.901780][T11648] do_syscall_64+0x15f/0xf80 [ 260.901815][T11648] ? trace_irq_disable+0x3b/0x140 [ 260.901841][T11648] ? clear_bhb_loop+0x40/0x90 [ 260.901867][T11648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.901887][T11648] RIP: 0033:0x7f02a7f9cdd9 [ 260.901907][T11648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.901925][T11648] RSP: 002b:00007f02a61f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.901956][T11648] RAX: ffffffffffffffda RBX: 00007f02a8215fa0 RCX: 00007f02a7f9cdd9 [ 260.901971][T11648] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000005 [ 260.901985][T11648] RBP: 00007f02a61f6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.901997][T11648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.902010][T11648] R13: 00007f02a8216038 R14: 00007f02a8215fa0 R15: 00007fff86962d28 [ 260.902045][T11648] [ 261.305299][T11655] veth1_macvtap: left promiscuous mode [ 261.312572][T11655] macsec0: entered promiscuous mode [ 261.337781][T11656] netlink: 'syz.3.1386': attribute type 4 has an invalid length. [ 261.393340][T11655] veth1_macvtap: entered promiscuous mode [ 261.406440][T11655] macsec0: left promiscuous mode [ 261.455840][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1384'. [ 261.467545][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1384'. [ 261.506132][T11661] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 261.713086][T11661] bond5: entered promiscuous mode [ 261.729734][T11661] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.743883][T11659] syzkaller0: entered promiscuous mode [ 261.749983][T11659] syzkaller0: entered allmulticast mode [ 262.059631][T11688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1399'. [ 262.089881][T11688] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 262.091696][T11689] wg1 speed is unknown, defaulting to 1000 [ 262.208347][T11689] lo speed is unknown, defaulting to 1000 [ 262.294765][T11693] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 262.343063][T11693] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 262.378818][T11689] gre0 speed is unknown, defaulting to 1000 [ 262.413522][T11711] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1403'. [ 262.485832][T11693] macvlan4: entered promiscuous mode [ 262.491557][T11693] macvlan4: entered allmulticast mode [ 262.506942][T11693] bond6: entered promiscuous mode [ 262.529827][T11693] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 262.538067][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1404'. [ 262.549806][T11693] bond6: left promiscuous mode [ 262.618020][T11714] ipvlan4: entered allmulticast mode [ 262.623441][T11714] syz_tun: entered allmulticast mode [ 263.066238][T11735] netlink: 'syz.4.1409': attribute type 9 has an invalid length. [ 263.203882][T11737] syzkaller0: entered promiscuous mode [ 263.229449][T11737] syzkaller0: entered allmulticast mode [ 264.049649][T11775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1419'. [ 264.183197][ T49] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 264.200222][T11786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1419'. [ 264.246216][T11787] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 264.303539][T11795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1422'. [ 264.475312][T11802] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 264.534460][T11793] xt_TPROXY: Can be used only with -p tcp or -p udp [ 264.711315][T11813] syzkaller0: entered promiscuous mode [ 264.716956][T11813] syzkaller0: entered allmulticast mode [ 264.876433][T11815] wg1 speed is unknown, defaulting to 1000 [ 264.918252][T11815] lo speed is unknown, defaulting to 1000 [ 264.956107][T11815] gre0 speed is unknown, defaulting to 1000 [ 265.550648][T11847] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1435'. [ 265.600435][T11851] SET target dimension over the limit! [ 265.608423][T11847] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 265.891322][T11859] netlink: 712 bytes leftover after parsing attributes in process `syz.0.1440'. [ 265.900867][T11859] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.1440'. [ 265.910288][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1440'. [ 265.926689][T11861] syzkaller0: entered promiscuous mode [ 265.932963][T11861] syzkaller0: entered allmulticast mode [ 266.096210][T11867] netlink: 'syz.0.1443': attribute type 29 has an invalid length. [ 266.150631][T11867] netlink: 'syz.0.1443': attribute type 29 has an invalid length. [ 266.233305][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'. [ 266.590036][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1448'. [ 266.938645][T11878] syzkaller0: entered promiscuous mode [ 266.955571][T11878] syzkaller0: entered allmulticast mode [ 267.084888][T11905] syzkaller0: entered promiscuous mode [ 267.098782][T11905] syzkaller0: entered allmulticast mode [ 267.471449][T11921] netlink: 'syz.1.1458': attribute type 39 has an invalid length. [ 267.535999][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 267.546304][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 268.336488][T11925] delete_channel: no stack [ 269.754409][T11926] wg1 speed is unknown, defaulting to 1000 [ 269.809776][T11926] lo speed is unknown, defaulting to 1000 [ 269.824867][T11926] gre0 speed is unknown, defaulting to 1000 [ 270.127828][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 270.167538][T11950] macvtap0: entered promiscuous mode [ 270.178923][T11950] erspan0: entered promiscuous mode [ 270.188143][T11950] macvtap0: entered allmulticast mode [ 270.205782][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'. [ 270.220234][T11950] erspan0: entered allmulticast mode [ 270.365477][T11954] sctp: [Deprecated]: syz.2.1460 (pid 11954) Use of int in max_burst socket option. [ 270.365477][T11954] Use struct sctp_assoc_value instead [ 270.704186][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 272.842086][T11943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.857841][T11965] __nla_validate_parse: 1 callbacks suppressed [ 272.857860][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 273.138457][T11973] syzkaller0: entered promiscuous mode [ 273.151163][T11973] syzkaller0: entered allmulticast mode [ 273.498209][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1480'. [ 273.869691][T12018] block nbd0: server does not support multiple connections per device. [ 273.937242][T12018] block nbd0: shutting down sockets [ 274.271408][T12018] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.281116][T12018] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.539348][T12018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.558966][T12018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.090394][T12018] hsr0: left allmulticast mode [ 275.097475][T12018] hsr_slave_0: left allmulticast mode [ 275.103122][T12018] hsr_slave_1: left allmulticast mode [ 275.139298][ T3523] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.150465][ T3523] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.161190][ T3523] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.173509][ T3523] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.196725][T12055] syzkaller0: entered promiscuous mode [ 275.215659][T12055] syzkaller0: entered allmulticast mode [ 275.242615][ T3523] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.261804][ T3523] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.334490][T12079] x_tables: duplicate underflow at hook 1 [ 275.359710][ T3523] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.376977][T12079] netlink: 'syz.2.1493': attribute type 10 has an invalid length. [ 275.378053][ T3523] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.576149][T12099] netlink: 'syz.0.1497': attribute type 21 has an invalid length. [ 275.613556][T12097] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1498'. [ 275.992878][T12129] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1504'. [ 276.335935][T12143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1508'. [ 276.394403][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 276.486975][T12145] syzkaller0: entered promiscuous mode [ 276.510727][T12145] syzkaller0: entered allmulticast mode [ 276.613555][T12162] tipc: Enabled bearer , priority 0 [ 276.642988][T12162] syzkaller0: entered promiscuous mode [ 276.660627][T12162] syzkaller0: entered allmulticast mode [ 276.747955][T12168] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 276.777146][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 277.015197][T12179] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1517'. [ 277.323075][T12185] netlink: 'syz.1.1518': attribute type 1 has an invalid length. [ 277.494819][T12188] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1518'. [ 279.432525][T12164] tipc: Resetting bearer [ 279.439502][T12185] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 279.453313][T12160] tipc: Resetting bearer [ 279.539812][T12160] tipc: Disabling bearer [ 279.587744][T12193] netlink: 'syz.2.1520': attribute type 2 has an invalid length. [ 279.605215][T12193] netlink: 'syz.2.1520': attribute type 2 has an invalid length. [ 279.714423][ T5583] tipc: Node number set to 4240354145 [ 279.752158][T12180] wg1 speed is unknown, defaulting to 1000 [ 279.783787][T12180] lo speed is unknown, defaulting to 1000 [ 279.800618][T12180] gre0 speed is unknown, defaulting to 1000 [ 279.903054][T12208] netlink: 'syz.2.1524': attribute type 2 has an invalid length. [ 280.076783][T12219] sctp: [Deprecated]: syz.2.1527 (pid 12219) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.076783][T12219] Use struct sctp_sack_info instead [ 280.810790][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 280.854379][T12248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 281.068473][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 281.080855][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1535'. [ 281.577116][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1544'. [ 281.646053][T12281] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 281.673113][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1545'. [ 281.708022][T12281] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1544'. [ 281.923970][T12289] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1547'. [ 281.953677][T12297] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1546'. [ 282.014156][T12298] syzkaller0: entered promiscuous mode [ 282.031294][T12298] syzkaller0: entered allmulticast mode [ 282.959504][T12344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1560'. [ 283.049928][T12348] batman_adv: batadv0: Interface deactivated: dummy0 [ 283.086131][T12348] batman_adv: batadv0: Removing interface: dummy0 [ 283.125021][T12348] team0: Port device team_slave_0 removed [ 283.150222][T12348] team0: Port device team_slave_1 removed [ 283.158307][T12348] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 283.182389][ T5926] gre0 speed is unknown, defaulting to 1000 [ 283.426814][T12365] xt_hashlimit: size too large, truncated to 1048576 [ 283.471408][T12366] xt_hashlimit: size too large, truncated to 1048576 [ 283.493779][T12366] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 283.800620][T12374] wg1 speed is unknown, defaulting to 1000 [ 283.826039][T12374] lo speed is unknown, defaulting to 1000 [ 283.835188][T12374] gre0 speed is unknown, defaulting to 1000 [ 284.621827][T12418] netlink: 'syz.2.1580': attribute type 1 has an invalid length. [ 284.804023][T12418] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 284.885901][T12422] bond4: (slave bridge3): Enslaving as a backup interface with a down link [ 284.965941][T12435] sctp: [Deprecated]: syz.4.1582 (pid 12435) Use of int in max_burst socket option. [ 284.965941][T12435] Use struct sctp_assoc_value instead [ 285.054502][T12437] sctp: [Deprecated]: syz.4.1582 (pid 12437) Use of int in max_burst socket option deprecated. [ 285.054502][T12437] Use struct sctp_assoc_value instead [ 285.772696][T12474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.780164][T12474] IPv6: NLM_F_CREATE should be set when creating new route [ 285.787691][T12474] IPv6: NLM_F_CREATE should be set when creating new route [ 286.015816][T12483] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 286.043090][T12479] netlink: 'syz.0.1598': attribute type 4 has an invalid length. [ 286.073731][T12479] __nla_validate_parse: 7 callbacks suppressed [ 286.073751][T12479] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1598'. [ 286.145504][T12483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.264312][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1601'. [ 286.360340][T12494] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.1602'. [ 286.370029][T12494] openvswitch: netlink: Message has 16 unknown bytes. [ 286.980393][T12527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1610'. [ 287.141119][T12539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1607'. [ 287.174944][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1607'. [ 287.266567][T12547] openvswitch: netlink: IP tunnel dst address not specified [ 287.461152][T12554] syz_tun: entered promiscuous mode [ 287.482844][T12557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1617'. [ 287.499380][T12554] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1616'. [ 287.596660][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 287.643386][T12566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1620'. [ 287.671975][T12564] sctp: [Deprecated]: syz.1.1618 (pid 12564) Use of int in maxseg socket option. [ 287.671975][T12564] Use struct sctp_assoc_value instead [ 287.723820][T12569] veth1_macvtap: left promiscuous mode [ 287.817139][T12569] veth1_macvtap: renamed from macsec0 [ 289.423219][ T5509] veth1_macvtap: entered promiscuous mode [ 289.706275][T12665] wg1 speed is unknown, defaulting to 1000 [ 289.725113][T12665] lo speed is unknown, defaulting to 1000 [ 289.743065][T12665] gre0 speed is unknown, defaulting to 1000 [ 289.978206][T12675] syzkaller0: entered promiscuous mode [ 289.984111][T12675] syzkaller0: entered allmulticast mode [ 293.577946][T12729] __nla_validate_parse: 17 callbacks suppressed [ 293.577970][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'. [ 296.004940][T12731] syzkaller1: tun_chr_ioctl cmd 35111 [ 296.264842][T12739] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1653'. [ 296.288130][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'. [ 296.354494][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 296.367911][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 296.414114][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 296.463033][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 296.683257][T12757] netlink: 'syz.2.1658': attribute type 21 has an invalid length. [ 296.694229][T12758] siw: device registration error -23 [ 296.713219][T12757] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 296.722133][T12761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1656'. [ 296.733750][T12757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1658'. [ 296.745678][T12760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1656'. [ 297.002107][T12772] tipc: Enabled bearer , priority 0 [ 297.012970][T12772] syzkaller0: entered promiscuous mode [ 297.020390][T12772] syzkaller0: entered allmulticast mode [ 297.058218][T12772] tipc: Resetting bearer [ 297.070033][T12771] tipc: Resetting bearer [ 297.146242][T12771] tipc: Disabling bearer [ 297.337290][T12795] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 297.403662][T12796] netlink: 'syz.0.1669': attribute type 10 has an invalid length. [ 297.529853][T12808] netlink: 'syz.3.1670': attribute type 8 has an invalid length. [ 297.773922][T12812] wg1 speed is unknown, defaulting to 1000 [ 297.819337][T12812] lo speed is unknown, defaulting to 1000 [ 297.869908][T12812] gre0 speed is unknown, defaulting to 1000 [ 298.640905][T12873] bridge_slave_1: left allmulticast mode [ 298.687518][T12873] bridge_slave_1: left promiscuous mode [ 298.747123][T12873] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.910660][T12884] netlink: 'syz.0.1688': attribute type 1 has an invalid length. [ 299.022043][T12884] __nla_validate_parse: 6 callbacks suppressed [ 299.022063][T12884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1688'. [ 299.032884][T12887] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 299.094207][T12887] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 299.172358][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1692'. [ 299.188576][T12884] bond3: (slave bridge11): Enslaving as an active interface with a down link [ 299.211295][T12892] macvlan2: entered promiscuous mode [ 299.216980][T12892] macvlan2: entered allmulticast mode [ 299.225211][T12892] bond3: entered promiscuous mode [ 299.231465][T12892] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 299.240684][T12892] bond3: left promiscuous mode [ 299.453928][T12902] erspan0: left allmulticast mode [ 299.461581][T12902] erspan0: left promiscuous mode [ 299.581677][ T36] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.595349][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.616533][ T36] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.634335][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.672482][T12917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1697'. [ 299.717521][ T36] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.728528][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.750220][ T36] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.762631][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.457824][T12943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1703'. [ 300.559967][T12946] wg1 speed is unknown, defaulting to 1000 [ 300.600036][T12946] lo speed is unknown, defaulting to 1000 [ 300.630803][T12946] gre0 speed is unknown, defaulting to 1000 [ 300.653909][T12952] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1705'. [ 301.113460][T12972] netlink: 'syz.4.1711': attribute type 21 has an invalid length. [ 301.136729][T12972] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1711'. [ 301.164292][T12972] netlink: 'syz.4.1711': attribute type 5 has an invalid length. [ 301.188856][T12972] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1711'. [ 301.369662][T12975] xt_hashlimit: size too large, truncated to 1048576 [ 301.428017][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 301.922699][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'. [ 302.051152][T12986] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 302.586129][T13008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1715'. [ 302.634088][T13014] ip6gre0: Caught tx_queue_len zero misconfig [ 303.156139][T13037] SET target dimension over the limit! [ 303.207596][T13037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.232591][T13037] netlink: 'syz.2.1724': attribute type 3 has an invalid length. [ 303.247687][T13039] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 303.658026][T13045] SET target dimension over the limit! [ 304.246257][T13076] wg1 speed is unknown, defaulting to 1000 [ 304.257971][T13076] lo speed is unknown, defaulting to 1000 [ 304.270628][T13076] gre0 speed is unknown, defaulting to 1000 [ 304.578571][T13079] clip:clip_setentry: non-CLIP VCC [ 304.603850][T13081] wg1 speed is unknown, defaulting to 1000 [ 304.648688][T13081] lo speed is unknown, defaulting to 1000 [ 304.799675][T13081] gre0 speed is unknown, defaulting to 1000 [ 305.262242][T13095] __nla_validate_parse: 13 callbacks suppressed [ 305.262266][T13095] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1741'. [ 306.862003][T13137] syzkaller0: entered promiscuous mode [ 306.877438][T13137] syzkaller0: entered allmulticast mode [ 307.325587][T13159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1754'. [ 307.373128][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1754'. [ 307.411760][T13160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1754'. [ 307.670466][T13170] veth0_to_batadv: entered promiscuous mode [ 307.683146][T13170] veth0_to_batadv: entered allmulticast mode [ 307.830898][T13182] openvswitch: netlink: IPv4 tun info is not correct [ 308.252556][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 308.255603][T13200] nbd4: detected capacity change from 0 to 63 [ 308.290164][T13206] block nbd4: NBD_DISCONNECT [ 308.350550][T13206] block nbd4: Disconnected due to user request. [ 308.360949][T13206] block nbd4: shutting down sockets [ 308.407118][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.416532][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 308.425904][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.435140][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 308.447837][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.457082][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 308.465182][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.474420][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 308.486613][ T7581] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.499354][ T7581] Buffer I/O error on dev nbd4, logical block 0, async page read [ 308.510360][ T7581] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.520670][ T7581] Buffer I/O error on dev nbd4, logical block 1, async page read [ 308.530016][ T7581] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.541522][ T7581] Buffer I/O error on dev nbd4, logical block 2, async page read [ 308.552625][ T7581] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.565178][ T7581] Buffer I/O error on dev nbd4, logical block 3, async page read [ 308.573817][ T7581] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.584059][ T7581] Buffer I/O error on dev nbd4, logical block 0, async page read [ 308.593032][ T7581] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 308.602791][ T7581] Buffer I/O error on dev nbd4, logical block 1, async page read [ 308.615120][ T7581] ldm_validate_partition_table(): Disk read failed. [ 308.625080][ T7581] Dev nbd4: unable to read RDB block 0 [ 308.634205][ T7581] nbd4: unable to read partition table [ 308.661247][ T7581] ldm_validate_partition_table(): Disk read failed. [ 308.684678][ T7581] Dev nbd4: unable to read RDB block 0 [ 308.701041][ T7581] nbd4: unable to read partition table [ 308.831073][T13237] syzkaller0: entered promiscuous mode [ 308.842697][T13237] syzkaller0: entered allmulticast mode [ 308.981483][T13243] ÿ: renamed from bond_slave_0 [ 309.061746][T13245] netlink: 'syz.2.1772': attribute type 4 has an invalid length. [ 309.096106][T13246] netlink: 'syz.2.1772': attribute type 4 has an invalid length. [ 309.098916][T13249] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1773'. [ 309.682544][T13263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1776'. [ 309.689368][T13269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.921872][T13277] wg1 speed is unknown, defaulting to 1000 [ 309.965062][T13277] lo speed is unknown, defaulting to 1000 [ 309.982856][T13281] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 309.997283][T13277] gre0 speed is unknown, defaulting to 1000 [ 310.056889][T13286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1780'. [ 310.328434][T13300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1783'. [ 310.420632][T13304] netlink: 'syz.3.1783': attribute type 11 has an invalid length. [ 310.451636][T13304] netlink: 'syz.3.1783': attribute type 23 has an invalid length. [ 310.487182][T13304] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1783'. [ 310.827279][T13323] nbd: must specify at least one socket [ 310.907179][T13321] netlink: 212332 bytes leftover after parsing attributes in process `syz.2.1789'. [ 310.922900][T13322] syzkaller0: entered promiscuous mode [ 310.928222][T13321] openvswitch: netlink: Duplicate key (type 2). [ 310.933347][T13322] syzkaller0: entered allmulticast mode [ 311.383785][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'. [ 311.626937][T13337] ip6gretap1: entered allmulticast mode [ 312.017962][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 312.611194][T13346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'. [ 312.669026][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 312.953537][T13354] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1799'. [ 312.985414][T13354] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1799'. [ 313.364415][T13360] syzkaller1: entered promiscuous mode [ 313.396752][T13360] syzkaller1: entered allmulticast mode [ 313.757972][T13391] netlink: 'syz.2.1806': attribute type 50 has an invalid length. [ 313.994912][T13397] erspan0: entered promiscuous mode [ 314.047778][T13397] macsec0: entered promiscuous mode [ 314.096109][T13397] erspan0: left promiscuous mode [ 314.428068][T13424] pim6reg1: entered promiscuous mode [ 314.439900][T13424] pim6reg1: entered allmulticast mode [ 314.970780][ T30] audit: type=1804 audit(1777172771.147:5): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1821" name="/newroot/343/cgroup.controllers" dev="tmpfs" ino=1774 res=1 errno=0 [ 315.060142][ T30] audit: type=1800 audit(1777172771.147:6): pid=13449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1821" name="cgroup.controllers" dev="tmpfs" ino=1774 res=0 errno=0 [ 315.545013][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1827'. [ 316.187299][T13493] bond6: Unable to set up delay as MII monitoring is disabled [ 316.244580][T13493] bond6 (unregistering): Released all slaves [ 316.394959][T13471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1826'. [ 317.171292][T13530] syzkaller0: entered promiscuous mode [ 317.182649][T13530] syzkaller0: entered allmulticast mode [ 317.230875][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1835'. [ 317.320504][T13530] team1: entered promiscuous mode [ 317.325911][T13530] team1: entered allmulticast mode [ 317.336741][T13530] 8021q: adding VLAN 0 to HW filter on device team1 [ 317.384105][T13548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1844'. [ 317.396480][T13548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1844'. [ 317.640116][T13553] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1846'. [ 317.701987][T13566] syzkaller0: entered promiscuous mode [ 317.722591][T13566] syzkaller0: entered allmulticast mode [ 317.743489][T13562] wg1 speed is unknown, defaulting to 1000 [ 317.758615][T13562] lo speed is unknown, defaulting to 1000 [ 317.838600][T13569] syzkaller0: entered promiscuous mode [ 317.844243][T13569] syzkaller0: entered allmulticast mode [ 317.912310][T13562] gre0 speed is unknown, defaulting to 1000 [ 318.105766][T13580] netlink: 'syz.4.1851': attribute type 1 has an invalid length. [ 318.126515][T13580] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1851'. [ 320.967675][T13592] bridge2: entered promiscuous mode [ 321.017176][T13602] netlink: 'syz.0.1855': attribute type 2 has an invalid length. [ 321.140100][T13598] syz_tun: left allmulticast mode [ 321.146790][T13598] syz_tun: left promiscuous mode [ 321.178904][T13598] bridge0: port 3(syz_tun) entered disabled state [ 321.278313][T13598] bridge_slave_0: left allmulticast mode [ 321.289196][T13598] bridge_slave_0: left promiscuous mode [ 321.289393][T13615] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 321.295876][T13598] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.306315][T13613] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 321.331333][T13598] bridge_slave_1: left promiscuous mode [ 321.337395][T13598] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.352283][T13598] team0: Port device team_slave_0 removed [ 321.364505][T13598] team0: Port device team_slave_1 removed [ 321.372273][T13598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.380343][T13598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.390379][T13598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.398391][T13598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.415127][T13598] vlan2: left allmulticast mode [ 321.421259][T13598] geneve0: left allmulticast mode [ 321.426352][T13598] vlan2: left promiscuous mode [ 321.432380][T13598] geneve0: left promiscuous mode [ 321.439528][ T5583] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 321.452466][T13598] bridge0: port 4(vlan2) entered disabled state [ 321.467125][T13598] bond0: (slave gretap1): Releasing active interface [ 321.482557][T13598] bond3: (slave bridge11): Releasing active interface [ 321.524221][T13601] bond6: entered allmulticast mode [ 321.756928][T13613] bond7: entered promiscuous mode [ 321.784875][T13613] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.790526][ T5945] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 321.794067][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 321.874859][T13621] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.882155][T13621] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 321.907631][T13621] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 321.922892][T13621] bond7: (slave ip6gre1): making interface the new active one [ 321.930633][T13621] ip6gre1: entered promiscuous mode [ 321.937300][T13621] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 322.128427][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 322.190356][T13639] syzkaller0: entered promiscuous mode [ 322.201862][T13639] syzkaller0: entered allmulticast mode [ 322.529580][T13654] wg1 speed is unknown, defaulting to 1000 [ 322.659933][T13650] xt_CT: No such helper "syz1" [ 322.672881][T13661] IPv6: sit2: Disabled Multicast RS [ 322.703064][T13654] lo speed is unknown, defaulting to 1000 [ 322.741067][T13654] gre0 speed is unknown, defaulting to 1000 [ 322.759224][T13669] netlink: 'syz.4.1871': attribute type 7 has an invalid length. [ 323.071221][T13680] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.276993][T13680] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.385118][T13680] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.529694][T13696] syzkaller1: entered promiscuous mode [ 323.537712][T13696] syzkaller1: entered allmulticast mode [ 323.538980][T13702] netlink: 'syz.0.1879': attribute type 10 has an invalid length. [ 323.553918][T13702] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1879'. [ 323.569437][T13680] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.645444][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 323.673079][T13702] syzkaller0: entered promiscuous mode [ 323.679434][T13702] syzkaller0: entered allmulticast mode [ 323.834742][T13709] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 323.864089][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.969757][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.027075][T13715] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1883'. [ 324.072675][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.190370][T13719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1884'. [ 324.214071][T13719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1884'. [ 324.247443][T13719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1884'. [ 324.291031][T13719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1884'. [ 324.317885][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.456754][T13729] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1887'. [ 324.518710][T13734] sctp: [Deprecated]: syz.3.1889 (pid 13734) Use of int in max_burst socket option. [ 324.518710][T13734] Use struct sctp_assoc_value instead [ 324.544337][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.552355][T13734] sctp: [Deprecated]: syz.3.1889 (pid 13734) Use of int in max_burst socket option. [ 324.552355][T13734] Use struct sctp_assoc_value instead [ 324.575976][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.585805][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.595133][T13734] sctp: [Deprecated]: syz.3.1889 (pid 13734) Use of int in max_burst socket option. [ 324.595133][T13734] Use struct sctp_assoc_value instead [ 324.625785][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.636354][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.644423][T13734] sctp: [Deprecated]: syz.3.1889 (pid 13734) Use of int in max_burst socket option. [ 324.644423][T13734] Use struct sctp_assoc_value instead [ 324.660887][T13734] sctp: [Deprecated]: syz.3.1889 (pid 13734) Use of int in max_burst socket option. [ 324.660887][T13734] Use struct sctp_assoc_value instead [ 324.663167][T13739] netlink: 'syz.0.1890': attribute type 4 has an invalid length. [ 324.717573][T13734] sctp: [Deprecated]: syz.3.1889 (pid 13734) Use of int in max_burst socket option. [ 324.717573][T13734] Use struct sctp_assoc_value instead [ 324.746256][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.757952][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.764530][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.771280][T13734] sctp: [Deprecated]: syz.3.1889 (pid 13734) Use of int in max_burst socket option. [ 324.771280][T13734] Use struct sctp_assoc_value instead [ 324.803110][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.819392][T13734] sctp: [Deprecated]: syz.3.1889 (pid 13734) Use of int in max_burst socket option. [ 324.819392][T13734] Use struct sctp_assoc_value instead [ 324.874972][T13734] sctp: [Deprecated]: syz.3.1889 (pid 13734) Use of int in max_burst socket option. [ 324.874972][T13734] Use struct sctp_assoc_value instead [ 324.923953][T13734] sctp: [Deprecated]: syz.3.1889 (pid 13734) Use of int in max_burst socket option. [ 324.923953][T13734] Use struct sctp_assoc_value instead [ 324.943264][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.957192][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.979161][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 324.992187][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.007305][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.039863][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.046547][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.064948][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.086326][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.101810][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.121101][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.128443][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.135148][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.149169][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.162163][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.172577][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.197941][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.213299][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.222348][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.232020][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.243032][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.252354][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.259926][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.266686][T13735] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 325.434170][T13773] netlink: 'syz.1.1900': attribute type 10 has an invalid length. [ 325.452757][T13773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.482591][T13773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.498472][T13773] hsr0: entered promiscuous mode [ 325.505218][T13773] bridge0: port 2(hsr0) entered blocking state [ 325.517246][T13773] bridge0: port 2(hsr0) entered disabled state [ 325.525154][T13773] hsr0: entered allmulticast mode [ 325.530795][T13773] hsr_slave_0: entered allmulticast mode [ 325.540712][T13773] hsr_slave_1: entered allmulticast mode [ 325.735196][T13790] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 325.795270][T13794] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 325.808180][T13792] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig [ 326.183165][T13811] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 326.972181][T13847] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20001 [ 326.980222][T13847] netlink: 'syz.4.1923': attribute type 27 has an invalid length. [ 327.483236][T13847] batman_adv: batadv0: Interface deactivated: dummy0 [ 327.524030][T13847] bond1: left promiscuous mode [ 327.549373][T13847] bond3: left promiscuous mode [ 327.580653][T13847] veth5: left promiscuous mode [ 327.622867][T13847] bond4: left promiscuous mode [ 327.783594][T13847] bond6: left allmulticast mode [ 327.816228][ T5926] lo speed is unknown, defaulting to 1000 [ 327.910014][T13884] netlink: 'syz.0.1927': attribute type 2 has an invalid length. [ 327.919984][T13849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.931998][T13849] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.945252][T13849] batman_adv: batadv0: Interface activated: dummy0 [ 327.953235][T13849] batadv0: mtu less than device minimum [ 327.960142][T13849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.971549][T13849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.983004][T13849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.994614][T13849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.006029][T13849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.017954][T13849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.029236][T13849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.040689][T13849] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.068817][ T8603] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.079517][ T24] lo speed is unknown, defaulting to 1000 [ 328.106621][ T8603] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.128433][ T8603] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.166178][ T8603] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.220919][T13891] __nla_validate_parse: 9 callbacks suppressed [ 328.220944][T13891] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1929'. [ 328.613880][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'. [ 328.751436][T13921] netlink: 'syz.1.1938': attribute type 9 has an invalid length. [ 328.952574][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1941'. [ 329.022618][T13935] hsr0: entered promiscuous mode [ 329.097980][T13934] hsr0: left promiscuous mode [ 329.385659][T13960] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.1947'. [ 329.418223][T13960] netlink: 'syz.1.1947': attribute type 1 has an invalid length. [ 329.446516][T13960] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.479120][T13960] bond6: (slave geneve3): making interface the new active one [ 329.488726][T13960] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 329.502068][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.518910][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.590891][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.599603][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.145608][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1953'. [ 330.331510][T13988] wg1 speed is unknown, defaulting to 1000 [ 330.346353][T13988] lo speed is unknown, defaulting to 1000 [ 330.352723][T13986] sctp: [Deprecated]: syz.3.1954 (pid 13986) Use of int in maxseg socket option. [ 330.352723][T13986] Use struct sctp_assoc_value instead [ 330.354381][T13988] gre0 speed is unknown, defaulting to 1000 [ 332.372213][T13963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.098985][ C0] ------------[ cut here ]------------ [ 338.104683][ C0] ODEBUG: free active (active state 0) object: ffff888058ff4490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 338.118943][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: swapper/0/0 [ 338.129258][ C0] Modules linked in: [ 338.133386][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 338.142361][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 338.152480][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 338.158872][ C0] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 338.179069][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 338.185423][ C0] RAX: ffffffff8a9f6db0 RBX: ffffffff9a741448 RCX: 0000000000000000 [ 338.193487][ C0] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 338.201530][ C0] RBP: ffffffff8bcf39a0 R08: ffff888058ff4490 R09: ffffffff8bcf4d00 [ 338.209660][ C0] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff888058ff4600 [ 338.218069][ C0] R13: ffffffff903e6a40 R14: ffff888058ff4000 R15: ffff888058ff4490 [ 338.226128][ C0] FS: 0000000000000000(0000) GS:ffff888125213000(0000) knlGS:0000000000000000 [ 338.235235][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.242053][ C0] CR2: 000055c784c17a38 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 338.250334][ C0] Call Trace: [ 338.253638][ C0] [ 338.256495][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 338.262198][ C0] kfree+0x13e/0x640 [ 338.266311][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 338.271493][ C0] rose_timer_expiry+0x4cb/0x600 [ 338.276456][ C0] ? call_timer_fn+0x178/0x5e0 [ 338.281272][ C0] call_timer_fn+0x192/0x5e0 [ 338.285883][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 338.291474][ C0] ? call_timer_fn+0xd4/0x5e0 [ 338.296186][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 338.301489][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.306725][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 338.312265][ C0] __run_timer_base+0x652/0x8b0 [ 338.317642][ C0] ? ktime_get+0x45/0x220 [ 338.322016][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 338.327591][ C0] run_timer_softirq+0xb7/0x170 [ 338.332583][ C0] handle_softirqs+0x22a/0x840 [ 338.337534][ C0] ? __irq_exit_rcu+0xca/0x220 [ 338.342348][ C0] __irq_exit_rcu+0xca/0x220 [ 338.346949][ C0] irq_exit_rcu+0x9/0x30 [ 338.351239][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 338.357002][ C0] [ 338.360015][ C0] [ 338.363246][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.369391][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 338.375062][ C0] Code: db 70 02 e9 53 f4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 81 10 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 338.394921][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 338.401261][ C0] RAX: 000000000013620b RBX: ffffffff819aae9a RCX: 0000000080000001 [ 338.409488][ C0] RDX: 0000000000000001 RSI: ffffffff8dfd8f45 RDI: ffffffff8c289f60 [ 338.418251][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 338.426344][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 338.434632][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 338.442667][ C0] ? do_idle+0x36a/0x5f0 [ 338.446922][ C0] default_idle+0x9/0x20 [ 338.451201][ C0] default_idle_call+0x72/0xb0 [ 338.456007][ C0] do_idle+0x36a/0x5f0 [ 338.460127][ C0] ? __pfx_do_idle+0x10/0x10 [ 338.464944][ C0] cpu_startup_entry+0x43/0x60 [ 338.469753][ C0] rest_init+0x2de/0x300 [ 338.474050][ C0] start_kernel+0x38a/0x3e0 [ 338.478603][ C0] x86_64_start_reservations+0x24/0x30 [ 338.484111][ C0] x86_64_start_kernel+0x143/0x1c0 [ 338.489356][ C0] common_startup_64+0x13e/0x147 [ 338.494600][ C0] [ 338.497681][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 338.505074][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 338.514185][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 338.524249][ C0] Call Trace: [ 338.527542][ C0] [ 338.530410][ C0] vpanic+0x56c/0xa60 [ 338.534416][ C0] ? __pfx__printk+0x10/0x10 [ 338.539019][ C0] ? __pfx_vpanic+0x10/0x10 [ 338.543572][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 338.548882][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 338.554097][ C0] panic+0xc5/0xd0 [ 338.557825][ C0] ? __pfx_panic+0x10/0x10 [ 338.562272][ C0] ? common_startup_64+0x13e/0x147 [ 338.567432][ C0] __warn+0x315/0x4c0 [ 338.571505][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 338.577566][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 338.583475][ C0] __report_bug+0x29a/0x540 [ 338.588201][ C0] ? check_path+0x21/0x40 [ 338.592628][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 338.598349][ C0] ? __pfx___report_bug+0x10/0x10 [ 338.603400][ C0] report_bug_entry+0x19a/0x290 [ 338.608289][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 338.614219][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 338.620052][ C0] handle_bug+0xce/0x200 [ 338.624327][ C0] exc_invalid_op+0x1a/0x50 [ 338.628923][ C0] asm_exc_invalid_op+0x1a/0x20 [ 338.633791][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 338.640116][ C0] Code: 89 44 24 20 e8 f7 bf 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 a0 a5 28 8c 48 c7 c2 20 ab 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 338.659724][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00010246 [ 338.666156][ C0] RAX: ffffffff8a9f6db0 RBX: ffffffff9a741448 RCX: 0000000000000000 [ 338.674140][ C0] RDX: ffffffff8c28ab20 RSI: ffffffff8c28a5a0 RDI: ffffffff903e6a40 [ 338.682109][ C0] RBP: ffffffff8bcf39a0 R08: ffff888058ff4490 R09: ffffffff8bcf4d00 [ 338.690077][ C0] R10: dffffc0000000000 R11: ffffffff81b236d0 R12: ffff888058ff4600 [ 338.698049][ C0] R13: ffffffff903e6a40 R14: ffff888058ff4000 R15: ffff888058ff4490 [ 338.706022][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 338.711399][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 338.717083][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 338.722735][ C0] kfree+0x13e/0x640 [ 338.726635][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 338.731745][ C0] rose_timer_expiry+0x4cb/0x600 [ 338.736687][ C0] ? call_timer_fn+0x178/0x5e0 [ 338.741665][ C0] call_timer_fn+0x192/0x5e0 [ 338.746264][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 338.751819][ C0] ? call_timer_fn+0xd4/0x5e0 [ 338.756488][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 338.761602][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.766801][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 338.772440][ C0] __run_timer_base+0x652/0x8b0 [ 338.777303][ C0] ? ktime_get+0x45/0x220 [ 338.781674][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 338.787058][ C0] run_timer_softirq+0xb7/0x170 [ 338.792862][ C0] handle_softirqs+0x22a/0x840 [ 338.797630][ C0] ? __irq_exit_rcu+0xca/0x220 [ 338.802746][ C0] __irq_exit_rcu+0xca/0x220 [ 338.807393][ C0] irq_exit_rcu+0x9/0x30 [ 338.811661][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 338.817298][ C0] [ 338.820227][ C0] [ 338.823158][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.829411][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 338.835352][ C0] Code: db 70 02 e9 53 f4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 81 10 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 338.855128][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 338.861214][ C0] RAX: 000000000013620b RBX: ffffffff819aae9a RCX: 0000000080000001 [ 338.870039][ C0] RDX: 0000000000000001 RSI: ffffffff8dfd8f45 RDI: ffffffff8c289f60 [ 338.878018][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 338.886002][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 338.893992][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 338.901972][ C0] ? do_idle+0x36a/0x5f0 [ 338.906240][ C0] default_idle+0x9/0x20 [ 338.910665][ C0] default_idle_call+0x72/0xb0 [ 338.915479][ C0] do_idle+0x36a/0x5f0 [ 338.919657][ C0] ? __pfx_do_idle+0x10/0x10 [ 338.924256][ C0] cpu_startup_entry+0x43/0x60 [ 338.929015][ C0] rest_init+0x2de/0x300 [ 338.933377][ C0] start_kernel+0x38a/0x3e0 [ 338.937925][ C0] x86_64_start_reservations+0x24/0x30 [ 338.943415][ C0] x86_64_start_kernel+0x143/0x1c0 [ 338.948534][ C0] common_startup_64+0x13e/0x147 [ 338.953491][ C0] [ 338.956985][ C0] Kernel Offset: disabled [ 338.961430][ C0] Rebooting in 86400 seconds..