last executing test programs: 53.863219892s ago: executing program 1 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x5}, 0x4d) sendmmsg$inet6(r6, &(0x7f0000001840), 0x3b, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="efb62595946ecaf0b76073e61f43460e2a24d8617209011444495ecff4a2843ae51a122d116faf344da63a16f04fc5", @ANYRES16=r7, @ANYBLOB="0f0700000000000000006700000048000e000c"], 0x270}}, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffffffffcd3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x2, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20010010) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r3, 0x29, 0x2, 0x1, 0x7, 0xd19910904a9ab011, @empty, @local, 0x0, 0x7, 0x7}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=r9, @ANYBLOB="03800000000000fc160012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 53.387936578s ago: executing program 1 (id=1969): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="180000000414"], 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x20000844) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x4, {{0x2, 0x4e22, @local}}}, 0x88) r2 = socket$packet(0x11, 0x0, 0x300) socket$inet6(0xa, 0x3, 0x7) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) syz_emit_ethernet(0x1d67, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) 52.877561976s ago: executing program 1 (id=1975): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2d, 0x2, 0x0) (async) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) (async) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000000000000500006118000380080004000000000004000100080005007180bbda180001801400020073797a5f74756e"], 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0xfffffffffffffffd) (async) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002", @ANYRES64, @ANYRES16=r4], 0x0, 0x1a}, 0x28) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000002000000", @ANYRES32, @ANYBLOB="0000010000e700"/16, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000002000000", @ANYRES32, @ANYBLOB="0000010000e700"/16, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0x2248, r6}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0x2248, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.events\x00', 0x275a, 0x0) read$alg(r9, &(0x7f0000000040)=""/12, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r11, @ANYBLOB="0100000000000000000001"], 0x28}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r11, @ANYBLOB="0100000000000000000001"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000009b4ac2461ce4d178edde6ea9a752000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000000000000000000002000000000000001f0d000020010000000000000000000000000001000000002b00000008000000fc0100000000000000000000000000000000000005000000000000000000000000000000b194f072a149b04a1dd1de819d6930aad0cf7ee631525a758029cf6589b6fad07669f8d2c2acc11e8dfdca98987d8cba98f3760e23a1fa9530b0128bf3f2e78c98664c61557a6d75afd8d39d4e96e2ee973c6ad5efe728a2a0c26552d675d5dfb71ddd7686cf7e1b4767a361f413cc910b1145a5cb63880b089dd58a0765704ae5ad61f4232f28426ad6c86e82b93dfbd725aff36089c0810067bae2b20666cb33dd3c9c852d3a28361996cde6133086b568cff499489a15c03da1b295c86ad93f61f179be2247965f9f73f1d76d2b6c57b70c546587e52a5169e62df0646dd7c3c278a0"], 0x13c}}, 0x40800) 51.644149685s ago: executing program 4 (id=1991): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) (async) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x27, 0x1, 0x3) (async) r6 = socket(0x27, 0x1, 0x3) listen(r6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc0100000400000000000000000000000000000004"], 0xfc}}, 0x0) connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) (async) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ppoll(&(0x7f0000000280)=[{r6, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x34}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}]}]}, 0x68}}, 0x140000c0) socket$unix(0x1, 0x2, 0x0) (async) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x11}}) (async) ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x11}}) 51.02365097s ago: executing program 0 (id=1995): r0 = socket$kcm(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=@newlink={0x60, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x60}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001480), 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x1, 0x10044091, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x200, 0x4) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x2000000000003, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x2a}, 0x20048054) 50.880368482s ago: executing program 3 (id=1996): syz_emit_ethernet(0x8a, &(0x7f0000000440)={@broadcast, @local, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, ' \x00', 0x4c, 0x2f, 0x0, @private0, @mcast2, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x67}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff}}]}, 0x40}}, 0x0) 50.791081207s ago: executing program 3 (id=1997): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xf, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8000}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd4}}, @call={0x85, 0x0, 0x0, 0x56}], &(0x7f0000000240)='GPL\x00', 0xfbd, 0x16, &(0x7f0000000280)=""/22, 0x41000, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x0, 0x1, 0xfffffeff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000380)=[{0x0, 0x5, 0x9, 0x4}], 0x10, 0x3}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xf, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8000}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd4}}, @call={0x85, 0x0, 0x0, 0x56}], &(0x7f0000000240)='GPL\x00', 0xfbd, 0x16, &(0x7f0000000280)=""/22, 0x41000, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x0, 0x1, 0xfffffeff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000380)=[{0x0, 0x5, 0x9, 0x4}], 0x10, 0x3}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000080)='./file0\x00', r4}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000080)='./file0\x00', r4}, 0x18) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000007c0)={@val, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x88, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}}}, 0x2e) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 50.643887843s ago: executing program 4 (id=1998): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030427bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="52060900000a0000"], 0x44}, 0x1, 0x0, 0x0, 0x4e44}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=r3, @ANYRESDEC=r5, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40400a0) 50.200833194s ago: executing program 4 (id=2001): syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASTER={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0x4000800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2e68}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x85}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040c0}, 0x20004014) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 50.152725098s ago: executing program 2 (id=2002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd700000100000010000000c0002000200000000000000100007800c00018008000100", @ANYRES32=r1, @ANYBLOB="050028010000f8ffffffffffffff00"/24], 0x48}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000821bd468000300000a580000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d10300000c000440000000002df31ab30c0005400000000000000081"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r4, 0x8, 0x70bd2a, 0xa70, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x68852841c9f63268}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000002}, 0x4008040) 50.149733505s ago: executing program 3 (id=2003): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x1, &(0x7f0000000080)={[0x8]}, 0x8) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100)={0x0, "04b144"}, 0x6) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r2, &(0x7f0000000140)="1ad94bde3551bf72a7b267e8d98e6c13a2d403ed184f295f004227dcef28622f6f63d924abbb", &(0x7f0000000180)=""/123, 0x4}, 0x20) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_queued\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r4) (async) ioctl$OCFS2_IOC_GROUP_ADD64(0xffffffffffffffff, 0x40186f03, &(0x7f00000002c0)={0xe20, 0x6, 0x2, 0x7ff}) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xb}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000084}, 0x50) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x43}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001200)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000600)={0xbb8, 0x0, 0x5, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0xfffffe01}, 0x1, 0xb, 0x5, 0xfff, 0xf, 'syz1\x00', "39b7d6b1bdbd3a69368f6ec12bbf915349bf5d3b7b74d96ac9a1a74f9b8b5b04", "f39c55e8b4c6f0b2bb2ae68707433c6180a8ee8a5ec26b5a1ce7e15d75a8d9e1", [{0xffff, 0x38, {0x2, 0xf}}, {0x1, 0x2, {0x0, 0xfffffffc}}, {0x2, 0x7, {0x1e3ab80ace3262b2, 0x2}}, {0xa, 0xfff, {0x3, 0x1}}, {0x2, 0x5, {0x0, 0xfffffffa}}, {0xa905, 0x3, {0x3, 0x7}}, {0x1000, 0x8, {0x0, 0x7}}, {0x6, 0xba6, {0x3, 0x101}}, {0x7, 0x10, {0x2, 0x5}}, {0xf001, 0x9, {0x0, 0x3}}, {0x101, 0x2, {0x0, 0x2}}, {0x8, 0x5, {0x1, 0x5}}, {0x2946, 0x200, {0x0, 0x1}}, {0x0, 0x64, {0x0, 0x71bc}}, {0x3, 0x7ff, {0x3, 0x6}}, {0x3ff, 0xff, {0x2, 0x4}}, {0x7, 0x4, {0x2, 0x9}}, {0x41, 0x5, {0x3, 0x95}}, {0x15d, 0x6, {0x3, 0x4c}}, {0x2, 0x2, {0x3, 0x8}}, {0xe, 0x3d39, {0x2, 0x5}}, {0x6, 0x2, {0x3, 0xfffffff9}}, {0x1ff, 0x3, {0x3, 0x80}}, {0x1000, 0x8, {0x0, 0x5}}, {0x4, 0x1, {0x1, 0xfffffffe}}, {0x4, 0x9, {0x3, 0x3}}, {0xf, 0x11, {0x2}}, {0x2, 0xc77, {0x3, 0xfff}}, {0x3, 0x3, {0x0, 0xfffffff9}}, {0x0, 0x100, {0x1, 0x7fff}}, {0xada, 0x2c8, {0x3, 0x9}}, {0x1, 0x0, {0x3, 0x3}}, {0xebb, 0x1ff, {0x2, 0x2}}, {0x8, 0xf86c, {0x2}}, {0x9, 0x2, {0x2, 0x7}}, {0x9969, 0x9, {0x2, 0x4}}, {0x2, 0x0, {0x3, 0x200}}, {0x5, 0x3, {0x2, 0xfffffffd}}, {0x100, 0x4, {0x0, 0x8}}, {0x6, 0x5, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x7, 0x5, 0x7, 0x7, 0x2, 'syz1\x00', "06bc7e47ea837ad925a25b40b5928516d1b6b7a17f3fe09564b7e72e8042e58a", "b6978c1725da0859419531a852c7e27dc4a7d787cfa273293d5331072a30e4be", [{0x4, 0x2, {0x1, 0xa2}}, {0x6, 0x5, {0x2, 0x3ff}}, {0x59b, 0x1}, {0x3, 0x4, {0x0, 0x5}}, {0x8, 0x0, {0x1, 0xbf75}}, {0x8000, 0x200, {0x2, 0xcf}}, {0x6, 0x35b0, {0x2, 0xfffffff9}}, {0x0, 0x10, {0x2, 0x2}}, {0x3ff, 0xfff9, {0x2, 0xfffff45e}}, {0x4, 0x5, {0x3, 0x1ff}}, {0xc123, 0x5, {0x2, 0x8}}, {0x7ff, 0x2, {0x1, 0x1}}, {0x7, 0x2, {0x3, 0x1931}}, {0x8, 0x4, {0x2, 0x6fa0}}, {0x1106, 0x0, {0x3, 0x7}}, {0xfbff, 0x6, {0x3, 0x4}}, {0x24cc, 0x0, {0x2}}, {0x400, 0xc88f, {0x3, 0x9}}, {0x9, 0x4, {0x3, 0x7}}, {0x9, 0xe947, {0x1, 0x80}}, {0x77e, 0x7ff, {0x3, 0x3}}, {0x4c, 0x81, {0x0, 0x7}}, {0x0, 0x2, {0x0, 0x62}}, {0x0, 0x401, {0x2, 0xce08}}, {0x8, 0x800, {0x2, 0x9}}, {0x5, 0x4, {0x1, 0x5}}, {0xd0, 0x8, {0x1, 0x81}}, {0x81, 0x6, {0x1, 0x40}}, {0x8, 0x5, {0x3, 0x1}}, {0xdb99, 0x0, {0x3, 0x8}}, {0x0, 0x2, {0x2, 0x4}}, {0x6, 0x1000, {0x0, 0x9}}, {0x3, 0x6, {0x1, 0x1}}, {0x2, 0x6, {0x1, 0xa}}, {0x1, 0x1, {0x2, 0x7}}, {0x3bb, 0xf277, {0x2, 0x72f}}, {0x2, 0x277, {0x2, 0x10000}}, {0x1ff, 0x2, {0x2, 0x9}}, {0x3, 0x7fff, {0x2, 0x7}}, {0x101, 0x80e0, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0xc9}, 0x3, 0x10, 0xb, 0xff, 0x6, 'syz1\x00', "094008ca49691ff5bed6e73cf3fd9d6e30567d3aa7ec99b1a2382f5004334d20", "09cb15e2e1f14a715addb868bae4d1378abd3e543d98f4eb8c329306f1867757", [{0xfa6f, 0xf62b, {0x3, 0x4}}, {0x6, 0x6, {0x1, 0x6}}, {0x2, 0x0, {0x3, 0x6}}, {0xad, 0xfff, {0x2, 0xe7e3}}, {0x4, 0x60, {0x1, 0x200}}, {0x7, 0x400, {0x3, 0x9}}, {0x100, 0xffff, {0x3, 0x2}}, {0x0, 0xf1, {0x0, 0x10e5}}, {0x58c1, 0x6, {0x1, 0xc9}}, {0x3ff, 0x0, {0x2, 0xfff}}, {0x8, 0xfff7, {0x1, 0x80000000}}, {0x1b, 0x7f, {0x2, 0x7}}, {0x8, 0x7, {0x1, 0x7}}, {0x9, 0x4, {0x0, 0x423ddfcf}}, {0x0, 0x0, {0x1, 0x8}}, {0x0, 0xd2ff, {0x1, 0x7}}, {0x8000, 0x8, {0x1, 0x4}}, {0x3332, 0xe, {0x2, 0x6480}}, {0xff, 0xfff7, {0x2, 0xc5}}, {0xfff7, 0x4, {0x3, 0x8001}}, {0x3, 0x40, {0x2, 0x9}}, {0x8, 0xd, {0x1, 0x1575d273}}, {0x6, 0x4, {0x0, 0x1ff}}, {0x1, 0x0, {0x627415009033ce6d, 0x80200000}}, {0x1, 0x7ff, {0x1, 0x68d8b381}}, {0x2, 0x3, {0x2, 0x200}}, {0xc, 0x1, {0x0, 0x5}}, {0x6, 0x8000, {0x3, 0x7}}, {0x71e5, 0xd, {0x3, 0x9}}, {0x8, 0x400, {0x3, 0x401}}, {0x7, 0x7f, {0x3, 0xffffffff}}, {0x2, 0x95a, {0x0, 0xb86e}}, {0x0, 0x80f7, {0x2, 0x9}}, {0x3, 0x400, {0x7035e59d87afa430}}, {0x8001, 0x9, {0x2, 0xf0000000}}, {0x1, 0x5, {0x3, 0x26f}}, {0x8001, 0x6, {0x3, 0x6}}, {0x719f, 0x101, {0x3, 0x8}}, {0xfff5, 0x8, {0x0, 0x8}}, {0xb58, 0x7, {0x3, 0xff}}]}}}, {{0x254, 0x1, {{0x1, 0xffffffff}, 0x3, 0xa7, 0x9, 0x6, 0x7, 'syz0\x00', "9c4caea9b71fccfef328fe3f5320aafcee44ef8ca92d571360ae71ac4c0d8fec", "da63641c79fb596d039e40cff2d42030aec87ad0a3e81d6cc72851a228f4e54b", [{0x40, 0x3a88, {0x2, 0x10}}, {0x15, 0x1, {0x1, 0xfff}}, {0x9, 0x1, {0x0, 0x80}}, {0xffda, 0x4, {0x1, 0x8}}, {0xe75, 0x6, {0x0, 0x1}}, {0xfff8, 0x9}, {0x3, 0x5, {0x2, 0x400}}, {0x1, 0x7a13, {0x1, 0x5}}, {0x7, 0x8000, {0x0, 0x8}}, {0x6, 0x10, {0x3, 0x1e33}}, {0x7, 0x200, {0x3, 0x1ff}}, {0x4, 0x8, {0x1, 0xce7}}, {0x5, 0x401, {0x1, 0x4}}, {0x8, 0x2, {0x1, 0x2}}, {0x8a00, 0xfff, {0x3, 0xfffffff7}}, {0x2, 0x2, {0x1, 0x9031}}, {0x2a86, 0x3, {0x2, 0x4}}, {0x5, 0x7, {0x1, 0xa3}}, {0xfff, 0xf899, {0x0, 0x2}}, {0x3, 0x2, {0x0, 0xc4}}, {0x0, 0x7, {0x2, 0x3}}, {0x6, 0xa, {0x2, 0x4}}, {0x41d, 0x6, {0x0, 0x1c}}, {0x0, 0x8, {0x2, 0x7}}, {0x10, 0x6, {0x2, 0xffffb58f}}, {0x401, 0xfffa, {0x1, 0x7}}, {0x10, 0xfff0, {0x2, 0x7}}, {0x2, 0x0, {0x3, 0x1dba0176}}, {0x9, 0x3, {0x1}}, {0x4, 0x4, {0x3, 0xa}}, {0x9, 0x1, {0x3, 0xfffffff7}}, {0x2, 0x4, {0x3, 0x6}}, {0x881d, 0x7, {0x0, 0x1}}, {0x9, 0xb, {0x1, 0x9}}, {0x73, 0x101, {0x2, 0x1}}, {0x80, 0x10, {0x2, 0x7}}, {0x1, 0x2, {0x0, 0x32}}, {0x9, 0x3, {0x2, 0x5}}, {0x9, 0x1, {0x1, 0x7}}, {0x4, 0x6ab8}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x0, 0x0, 0x80, 0x8, 0x1, 'syz1\x00', "7b2b2a9582533ba7abd6f47fb159b67349fcbc76b83b155a14c5e7b5ba9be81a", "d011ab93384c42592eb9462ff5faf2122d43f7396aeb5201d2ab82e913150c62", [{0x8001, 0xffff, {0x3, 0xfffffff9}}, {0x8, 0xb9b3, {0x3, 0x9}}, {0x80, 0x5, {0xf0c6acd5f62e11b4, 0x8}}, {0xa, 0x87b4, {0x0, 0x1}}, {0x6, 0x8, {0x3, 0x7}}, {0x400, 0xff, {0x0, 0x631}}, {0x1, 0x80, {0x2, 0x6}}, {0xd, 0x3, {0x0, 0x6}}, {0x5, 0x2, {0x3, 0x9bfc}}, {0x9, 0x1000, {0x0, 0x2}}, {0x2b3, 0x2, {0x2, 0x19cf}}, {0x9961, 0x7, {0x1, 0x9}}, {0x5, 0x5, {0x3, 0x7}}, {0x9, 0x81, {0x0, 0x7}}, {0x7, 0x1050, {0x2, 0x38a5}}, {0x3, 0x6, {0x0, 0x6}}, {0xf801, 0x3, {0x1, 0x4}}, {0xffff, 0x7, {0x2, 0x2fd}}, {0xd, 0x2a, {0x1, 0x5}}, {0x1, 0x1, {0x0, 0xff}}, {0x8, 0x5, {0x0, 0x9a98}}, {0x7, 0x81, {0x0, 0x4000000}}, {0xb07, 0x0, {0x0, 0x7}}, {0xb78, 0x89, {0x2, 0x5}}, {0x0, 0x3c45, {0x1, 0x7fffffff}}, {0x6, 0x4, {0x3, 0x7}}, {0x80, 0x819f, {0x1}}, {0x7fff, 0x4, {0x3, 0x3}}, {0x8997, 0x877, {0x2, 0xffffffff}}, {0x1, 0xa, {0x1, 0x4}}, {0xf000, 0x1, {0x3, 0x2}}, {0x2, 0x5, {0x1}}, {0xdc, 0x89, {0x1, 0x95f1}}, {0x40, 0x6, {0x0, 0x8}}, {0x1000, 0x4, {0xade24c783a4b209d, 0x7}}, {0x7, 0x2, {0x0, 0xfffffffc}}, {0x3, 0x7, {0x3, 0x7}}, {0x39, 0xff, {0x2, 0x6}}, {0xe, 0x0, {0x3, 0x7}}, {0xd, 0x9, {0x1, 0xf}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x8000}, 0x8081) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) recvmsg(r1, &(0x7f0000002600)={&(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/107, 0x6b}, {&(0x7f0000002340)=""/248, 0xf8}, {&(0x7f0000002440)=""/73, 0x49}, {&(0x7f00000024c0)=""/186, 0xba}], 0x5}, 0x2062) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002680), r3) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x78, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7ea}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10001}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}]}, 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x0) epoll_create(0x8001) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002800), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002980)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002840)={0xc8, r8, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x6e, 0xa9, @random="ef7927e3ed15fde9de59b0328d801908ce1f288b2a9c9881258d49e31420edfb88736ad7186338421b19c9b005dc4d904b8efbbfe5b4b507e488819fa3ea53f3ece46b67c717738d7daae5c65f39fabba7f33a89641f2b8cdd9bd4c9b0c56f78ee9559c833f268c71e20"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0xd1) (async) connect$netlink(r1, &(0x7f00000029c0)=@unspec, 0xc) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000002a00), 0x2600, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002a40)={'veth1_to_batadv\x00', 0x1}) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x1c, 0xd, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x8000) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000002b80)={0x0, 0x51, "6a0ad9566af68e49af5a9cee4cf6e1245517c9e5f4d3b019242e9ed96a1eb9fec705b0056daf6c4ab223b916ee71d77faf34ad17659cd32b367e7f11881af15ecaa13195590cafb38615ede2d5dfa71fc1"}, &(0x7f0000002c00)=0x59) (async) pread64(r2, &(0x7f0000002c40)=""/89, 0x59, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000002d00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x8050) 50.049012895s ago: executing program 0 (id=2004): r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @empty}}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000050000000002000040"], 0x50) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)="3e34be00cf1a28c86dd018bb08f6bbf58ce7f5c8ae7eca862e90606431bd770396f15bc87cc5673af0d8c455db7343b2e2b6d69e20247c8793dce6a6616666fa43a8a58851fb080c81027765582e43982faf3f531739e6aa5fc98d9c41164bf86ea516d2f3c5727e1531fd47a2290fb9896676cc7f4ee0482c7cb944600c7be9ba523b1e94e5f28ae8be2a46079a91732a8a15312b9890ffcec130d05931aa2e724857ff909bb5477db3128fcbe578966394a2d273d3a9987f2a", &(0x7f00000003c0), 0xe6, r4}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10}, 0x20) (async, rerun: 32) getsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200), &(0x7f0000000340)=0x4) (rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r7}, 0xc) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x40009, 0x5}, {0x2, 0x1}]}]}}, &(0x7f0000001f40)=""/4093, 0x36, 0xffd, 0x7}, 0x28) (async, rerun: 64) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x97) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r11, @ANYBLOB="ac0c3c4f78f6180897e4631de90700000000000000b10ee951e830721cf25fc53ebcaff4eaafc1ba6736793790949d33f8e80a59e4d00716b9a471"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="0280080006005b0000000800050005000000240001800600020033000000060002003200000008000b007369700008000500000000000800050003000000080005007d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) r12 = socket$inet6(0xa, 0x80006, 0x1005) sendmmsg(r12, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r12], 0x108}}], 0x1, 0xc0c0) 50.031865832s ago: executing program 3 (id=2005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x9}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) close(0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000005d40)=[{{&(0x7f0000000400)=@alg, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/45, 0x2d}], 0x1, &(0x7f0000000500)=""/182, 0xb6}, 0x3}, {{&(0x7f00000007c0)=@caif, 0x80, &(0x7f0000001e40)=[{&(0x7f0000006240)=""/4107, 0x100b}, {&(0x7f0000001a80)=""/145, 0x91}, {&(0x7f0000001b40)=""/55, 0x37}, {&(0x7f0000001b80)=""/96, 0x60}, {&(0x7f0000001c00)=""/97, 0x61}, {&(0x7f0000001c80)=""/139, 0x8b}, {&(0x7f0000001d40)=""/210, 0xd2}], 0x7}, 0x2237}, {{&(0x7f0000001ec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000004a40)=""/163, 0xa3}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/100, 0x64}, {&(0x7f0000004900)=""/9, 0x9}, {&(0x7f0000001f40)}, {&(0x7f0000004940)=""/230, 0xe6}, {&(0x7f0000000740)=""/107, 0x6b}, {&(0x7f0000000900)=""/48, 0x30}, {&(0x7f0000000a80)=""/192, 0xc0}, {&(0x7f0000000b40)=""/140, 0x8c}], 0xa, &(0x7f0000004b80)=""/49, 0x31}, 0x81}, {{&(0x7f0000004bc0)=@can, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000005c40)=""/126, 0x7e}], 0x2, &(0x7f0000005d00)=""/53, 0x35}, 0x9}], 0x4, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f00000005c0)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16=r0], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='.\x00\x00\x00\x00\x00', @ANYBLOB], 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) 49.815479269s ago: executing program 0 (id=2006): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=r0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x30001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 49.727411338s ago: executing program 4 (id=2007): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x10, 0x7800, 0x5, 0xe62, {{0x2a, 0x4, 0x2, 0x2, 0xa8, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @multicast2, {[@cipso={0x86, 0x5f, 0x3, [{0x0, 0xa, "58307adf65ea13c5"}, {0x7, 0x8, "d65dddf92545"}, {0x5, 0x4, "fcee"}, {0x2, 0x11, "7b84bf52fd5f294acef9690a3f5d02"}, {0x5, 0xb, "683e40687e28d9a7d2"}, {0x2, 0x4, "f238"}, {0x7, 0xe, "426e2a9a592d18bc28ea92b1"}, {0x5, 0x10, "2674933fa07662bcc2bdcf22da20"}, {0x7, 0x5, "8c68a1"}]}, @rr={0x7, 0x1f, 0xfa, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x34}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010100, @broadcast]}, @ssrr={0x89, 0xf, 0x48, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0xb2, [@empty]}]}}}}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x9}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@func={0x8, 0x0, 0x0, 0xc, 0x2d0d}, @func={0x1, 0x0, 0x0, 0xc, 0x2}, @union={0x3, 0x6, 0x0, 0x5, 0x0, 0x80, [{0xc, 0x3, 0x5}, {0x4, 0x4}, {0xd, 0x5, 0xf3db}, {0x7, 0x2, 0x9}, {0xa, 0x3, 0xea}, {0x0, 0x4, 0x884}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000480)=""/4096, 0x88, 0x1000, 0x1, 0x1}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x1e, 0x9b6, 0xff, 0xfffffffc, 0x0, r0, 0x9, '\x00', r1, r3, 0x1, 0x5, 0x3, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000005400000083000000bf0900000000000055090100000000009500000000000000d509040001000000bf91000000000000b7020000010000007500000000000010bf0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 49.676503434s ago: executing program 2 (id=2008): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf25010000000800010003000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002700)={{{@in=@empty, @in6=@remote, 0x4e22, 0xfffb, 0x4e21, 0x1, 0x2, 0x20, 0x0, 0x62}, {0x1, 0x7, 0x0, 0x5, 0x7fff, 0x7, 0xfff, 0x70}, {0x8, 0x3, 0x8, 0x2cc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d5, 0x32}, 0x2, @in=@loopback, 0x0, 0x4, 0x0, 0xf8, 0x6, 0x6, 0xaec3}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 49.564651809s ago: executing program 0 (id=2009): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a, 0x29002}, [@IFLA_LINKMODE={0x5, 0x11, 0x7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x4, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 49.564369203s ago: executing program 2 (id=2010): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r0 = socket(0x29, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01020008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES16=r0, @ANYBLOB="15"], 0x44}}, 0x44000) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000540)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000004c0)={{r0, &(0x7f0000000280)='nl80211\x00', 0x8000, &(0x7f00000002c0)={@_ha_fsid={[0x1, 0x1]}, {0x1, 0x2, 0x8, 0x55f8}}, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x937}, 0x1, &(0x7f0000000480)=[{0x1, 0x0, &(0x7f0000000380)='\xff\xff\xff\xff\xff\xff', &(0x7f00000003c0)="60272afaf4bb88ada695d6277d4ceef3767e1623842a420222e0501f8e3b2ffc076d1275099172ead63aa36b5e9c01445536f494c8cb4edc3dd550b0af69cf54f3461b14c25470cda94c6bdc969d0b8d1a4dbdb74aad2f2869682519df9f6dc1fb6e77093a435dd9a687acd72bbad02b5cc544a30c25c34bec0f223d3358a5f8d7468659667b84095c37014c5cc2e57e5ec617e22c6298401c2e27579f3e8d7fb32202861fd83ee710dbc4f3db590ac13d", 0xb1, 0x1a}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 49.509888044s ago: executing program 2 (id=2011): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000240)=""/118, 0x76, 0x0, &(0x7f00000002c0)=""/49, 0x31}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525707cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c5c5b011cf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb53a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc85fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c9800000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0xffffff07, &(0x7f0000000180)="0400d876d5620064d082778c3938adfc73342d7335a2c8807c6b14fcd634fee8b9af4c33956bdf18f076e3e588829d65ddc4825e1d13e9522736f20832e770322fc9addbb11eea2ae8f216ce86e35590b900bf5a7ecd89cbfeb1f2148b8138c4a79d8f8866d037343ae64f2b4f35455364fda4e89c96a72ecee8a784d6f6f03f1d769342ad53ce8fce4e5402d1745ffa69b1edf60fc36226", &(0x7f0000000380)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0xf}, 0x28) 49.290414595s ago: executing program 2 (id=2012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xef, &(0x7f0000000200)=""/239, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000000c0)=0x4, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a01040400000000000100b44e4b729471e680e8fc73797a310000000014000480100001800a00010072656469720000000900020073797a320000000006000740e3430000140000001100010000000004000000000200"], 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fdffffff00000000000000008500000036000000850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) ioctl$int_in(r5, 0x5421, &(0x7f0000000680)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a0101000000000000000003010000030900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800b0001007470726f787900000c00028008000140000000000900010073797a3000000000140000001100010000000005000000000700000a"], 0xbc}, 0x1, 0x0, 0x0, 0x420c4}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000000040)) accept$alg(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000020600000000000000000000050000000c000300686173683a69700005000400010000000c004780050015007d00000016000300686173683a6e65742c706f72742c6e6574000000"], 0x4c}}, 0x845) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) 49.289980071s ago: executing program 4 (id=2013): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x14, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r1 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) 49.097191044s ago: executing program 0 (id=2014): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x0, 0x330, 0x110, 0x330, 0x4, 0x0, {[{{@arp={@multicast1, @remote, 0xff, 0xffffffff, 0x10, 0x2, {@empty, {[0x8d4aec626ac50baa]}}, {}, 0xf001, 0x40, 0x0, 0x8, 0xb, 0xf5f, 'ip6gretap0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1ce}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @rand_addr=0x64010102, @empty, 0x4}}}, {{@arp={@rand_addr=0x64010102, @multicast1, 0xffff00, 0x0, 0x4, 0x2, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0x101]}}, {@mac=@local, {[0xff, 0xff]}}, 0x5, 0x3, 0x9, 0x1, 0x2, 0xc, 'bridge_slave_0\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@remote, @remote, @dev={0xac, 0x14, 0x14, 0x24}, 0xf}}}, {{@arp={@remote, @local, 0xffffff00, 0xffffff00, 0x6, 0xa, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff]}}, 0x8, 0x4, 0x3, 0x2, 0x9, 0x7, 'veth0_to_hsr\x00', 'wlan1\x00', {0xff}, {0xff}, 0x0, 0xd5beb0c695da20aa}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@remote, @empty, @broadcast, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) write$cgroup_int(r4, &(0x7f0000000140), 0xfffffdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000300)={0x0, 0xa1, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r6, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001380)) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007fff"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) close(0x4) 48.834762287s ago: executing program 1 (id=2015): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000003}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x22}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24001090}, 0x44004) 48.753111571s ago: executing program 1 (id=2016): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001d00)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)="9232", 0x2}, {&(0x7f00000006c0)="3051b86969cec8122d6d7c7b7e", 0xd}, {&(0x7f0000000700)="53987ee179941e2d67745974f09cf9a13233924cae00c61c9969d27fcf274622f11353cb29c9284fb7ab350c6834ef39493dc313df1bdba67e8e6e013e580ef4c9aea939a8929bfddcba6b73ddd8791eb5dbc0f2ed08ec2a7ff1ef693005efdea0450bc9d790b20a6e3c507e62f43547e210dfbe94e00fd6d67a5a5f492a0b46515cd0895fcd6e88b7512b41d4d392998f223374a7f5732213d422e9c6bc3c0c2dd5ef7b2e9677af20d821c1789ebcd5b6b76510a63915925e2b693cbc89f27db969135d1eada182971b08fbb8d40898d84c15a6e402625c6782afa72dc1b293a326972028a0231e2ec502a7f4", 0xed}], 0x3, &(0x7f00000009c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xe0, 0x117, 0x2, 0xc7, "e021dc66f39fd16830b8478d610cfbe608af1f4a1ab594b28675148139c6d04f6208dd49e6f97f16cbded2a1a3a7440ab26c8ad30a12a31fd9dd76866bec628a124b032b2741e48c00d1cc884186cfc2671f5c94d85009c0bb831c9a515f40580c0accd4be904fe3d7003ad05699c5dbd4c877fb0fa184ca6136710beaddeb8909e3591f09c9ddd65557e289cf001f093890c38e41193e136d2e6e47f83e9d4554a7468b7dac1e53fa4f341ef8e161c956b92e85870aa147a8d25ea760c296bfbcc5989cf97b46"}, @op={0x18}], 0x110, 0x10000000}, {0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000cc0)="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", 0x1000}], 0x1}], 0x2, 0x815) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x40, 0x0, 0x1, 0x3}, 0x10) sendmmsg$unix(r3, &(0x7f0000000340)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}], 0x20, 0x4044891}}], 0x1, 0x200000c0) sendmsg$can_bcm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYBLOB="000000000100000002000040050104"], 0x48}}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f0000000300), 0x10, &(0x7f00000004c0)={&(0x7f0000000400)={0x6, 0x100, 0x5, {0x0, 0xea60}, {0x77359400}, {0x0, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4}, 0x2f, 0x0, 0x0, 0x0, "78809e1edcbbf263616cfb992387f6d4f7a32d1df581b2cd9f36051a98217c03574c3b3135a069ef7208e31d2aac9f0f56f9444396d221018a437bd9b7eb6332"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'dummy0\x00', &(0x7f0000000540)=@ethtool_drvinfo={0x3, "6ef018b7aebc0e2d11684bb3766ab84b5f0f63acbdeeaa48860ba5717fdb8395", "065ad6ff751dcf8a67e8a00d74d1a9106b3efa62b94934e1d0130826dc11766e", "ccf0f4603bd74bc161c011ea833a6c5634a65a639e43e50b9ba489b8e593ff48", "7b3802a8c10bc50544528c7d0a5e72c8f6ca28254cbb259f762f16178d4c5169", "f722846bde5ee2387877e1051577116e542f7aef4f7a241f1dcc67537145d5bb", "51189b4c1f375b3a2e2fdad7", 0x5, 0x200, 0x7fffffff, 0xa92, 0x7}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x0, 0x10, 0x9, {}, {0x0, 0xea60}, {0x3, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "3a4fd3f98f9bbc4a"}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x4000800) mkdirat$cgroup(r6, &(0x7f0000000080)='syz1\x00', 0x1ff) r7 = openat$cgroup(r6, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000380)='syz1\x00', 0x1ff) 48.400795746s ago: executing program 4 (id=2017): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000000c00010000000000000000000000000a40000000160a050000000000000000000200000009ff010073797a300000000014000380080001400000000008000240000000030900020073797a3000000000140000001100010000000000000000000000000a"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000db80ed52fb1f770601080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001100010000385f7e490000000000000a00"/112], 0x70}}, 0x24040884) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000700), 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000140), 0x4) 48.40027253s ago: executing program 1 (id=2018): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12120, 0x0) getpeername$unix(r0, 0x0, &(0x7f0000000180)) r1 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000100)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001100)={{r2, 0x80, 0x9, 0x107, 0x8, 0x80, 0x0, 0x7, 0x7f, 0xfffffffa, 0xfd, 0x2, 0x0, 0xa4c, 0x5}, 0x10, [0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket(0x14, 0x2, 0x4) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12120, 0x0) (async) getpeername$unix(r0, 0x0, &(0x7f0000000180)) (async) socket(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000100)={0x0, 0x0, "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", "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"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001100)={{r2, 0x80, 0x9, 0x107, 0x8, 0x80, 0x0, 0x7, 0x7f, 0xfffffffa, 0xfd, 0x2, 0x0, 0xa4c, 0x5}, 0x10, [0x0, 0x0]}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) (async) 48.395955863s ago: executing program 3 (id=2019): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x81) close(0x3) (async) close(0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(0x3) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) 47.933727786s ago: executing program 0 (id=2020): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xdd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}]}]}, 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 47.833987885s ago: executing program 3 (id=2021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80000001}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}]}, 0x24}}, 0x0) socket$kcm(0x29, 0xe, 0x0) (async) r2 = socket$kcm(0x29, 0xe, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r2}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_delroute={0x5c, 0x19, 0x10, 0x70bd2b, 0x25dfdbff, {0x2, 0x80, 0x20, 0x2, 0xff, 0x1, 0xfe, 0x7, 0x1100}, [@RTA_SRC={0x8, 0x2, @multicast1}, @RTA_TABLE={0x8, 0xf, 0x3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_MARK={0x8, 0x10, 0x32}, @RTA_IIF={0x8}, @RTA_IIF={0x8, 0x3, r5}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_MARK={0x8, 0x10, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50800}, 0x4030) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000300), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=@raw=[@tail_call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @ldst={0x2, 0x0, 0x3, 0xb, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000003c0)='GPL\x00', 0x31, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xe, 0x80000000, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xdf0}, 0x94) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000580)=0x100) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x1405, 0x400, 0x70bd2b, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4044040) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x1405, 0x400, 0x70bd2b, 0x25dfdbfe, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4044040) socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000006c0)={0x0, 0x20, "1e1edc69a60ce26e438d57ebdd73df6e500eff14b0e9361531a67f572948af46"}, &(0x7f0000000700)=0x28) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000740)={r9, 0x4, 0x4, 0x1}, 0x10) getsockopt$sock_int(r7, 0x1, 0x2d, &(0x7f0000000780), &(0x7f00000007c0)=0x4) (async) getsockopt$sock_int(r7, 0x1, 0x2d, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x7f) (async) ioctl$TUNSETNOCSUM(r10, 0x400454c8, 0x7f) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r5, 0x29, 0x7, 0x4, 0x6, 0x2, @private1, @local, 0x8, 0x40, 0x2, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r5, 0x29, 0x7, 0x4, 0x6, 0x2, @private1, @local, 0x8, 0x40, 0x2, 0x7}}) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x4, r11, 0xedf}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'syztnl0\x00', r5, 0x2f, 0x2, 0x3, 0x7fff, 0x8, @private2, @rand_addr=' \x01\x00', 0x8000, 0x1, 0x80000, 0x3}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r10) sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x98c66b0eaa3d4275}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r12, 0x8dbe1c51950a76b, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xc457}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xfffffff4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0xc4) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000b40)={0x6, 0xe9, 0x81}, 0xc) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000b40)={0x6, 0xe9, 0x81}, 0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r1, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008808) r13 = getpid() ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000000c80)=0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000cc0)={r13, r14, 0xee01}, 0xc) 47.832853034s ago: executing program 2 (id=2022): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x7c, 0x8) write(r8, &(0x7f0000003300)="ac", 0x1) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x23, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 32 (id=2020): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xdd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}]}]}, 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) kernel console output (not intermixed with test programs): 2000) [ 137.916907][ T7645] Set syz1 is full, maxelem 65536 reached [ 137.941959][ T7773] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.477'. [ 138.014345][ T7773] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 138.039759][ T7773] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.477'. [ 138.058846][ T7773] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 138.078791][ T7773] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.477'. [ 138.099324][ T7790] wg1 speed is unknown, defaulting to 1000 [ 138.107277][ T7773] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 138.126872][ T7773] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.477'. [ 138.137611][ T7773] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 138.146067][ T7773] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.477'. [ 138.155923][ T7773] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 138.165909][ T7773] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.477'. [ 138.229784][ T7795] tipc: Started in network mode [ 138.235966][ T7795] tipc: Node identity 1222ade4264c, cluster identity 4711 [ 138.252586][ T7795] tipc: Enabled bearer , priority 0 [ 138.260033][ T7796] syzkaller0: entered promiscuous mode [ 138.266284][ T7796] syzkaller0: entered allmulticast mode [ 138.330374][ T7795] tipc: Resetting bearer [ 138.395780][ T7794] tipc: Resetting bearer [ 138.436676][ T7794] tipc: Disabling bearer [ 138.599290][ T7781] wg1 speed is unknown, defaulting to 1000 [ 139.935588][ T7852] syzkaller0: entered promiscuous mode [ 139.957878][ T7852] syzkaller0: entered allmulticast mode [ 140.003914][ T7857] wg1 speed is unknown, defaulting to 1000 [ 140.173039][ T6642] IPVS: starting estimator thread 0... [ 140.292289][ T7871] IPVS: using max 28 ests per chain, 67200 per kthread [ 140.309283][ T6642] IPVS: starting estimator thread 0... [ 140.410734][ T7875] IPVS: using max 29 ests per chain, 69600 per kthread [ 140.869522][ T7865] wg1 speed is unknown, defaulting to 1000 [ 141.352405][ T7900] netlink: 'syz.3.506': attribute type 1 has an invalid length. [ 141.447147][ T7900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.459694][ T30] audit: type=1107 audit(1779043710.638:3): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Æ鹋+¬ä«A— s›ãcIµ×æí8+]çmPéCªѺJ½õ³Kò'µy9ù‰P[[¹‚ý÷ûÅIsÆ'ÚöR†ã«¦Vj-š„7¬' [ 141.595141][ T7904] bond2: (slave gretap1): making interface the new active one [ 141.628816][ T7904] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 141.730422][ T7905] bond2 (unregistering): (slave gretap1): Releasing active interface [ 141.774615][ T7905] bond2 (unregistering): Released all slaves [ 141.833684][ T7873] wg1 speed is unknown, defaulting to 1000 [ 141.947376][ T7922] netlink: 'syz.1.511': attribute type 4 has an invalid length. [ 142.798097][ T7939] __nla_validate_parse: 67 callbacks suppressed [ 142.798113][ T7939] netlink: 340 bytes leftover after parsing attributes in process `syz.1.516'. [ 143.686233][ T7961] netlink: 120 bytes leftover after parsing attributes in process `syz.0.521'. [ 143.705449][ T7961] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 143.729736][ T7961] netlink: 64 bytes leftover after parsing attributes in process `syz.0.521'. [ 143.905673][ T7965] bond2 (unregistering): Released all slaves [ 144.232710][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 144.696611][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'. [ 144.890074][ T8025] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 145.026992][ T8028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.537'. [ 145.193552][ T8027] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 145.204703][ T8027] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 145.217634][ T8044] netlink: 'syz.3.539': attribute type 1 has an invalid length. [ 145.240620][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 145.329107][ T8028] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 145.356760][ T7999] syz.0.532 (7999) used greatest stack depth: 17184 bytes left [ 145.411277][ T8039] macvlan2: entered promiscuous mode [ 145.417041][ T8039] macvlan2: entered allmulticast mode [ 145.428705][ T8039] bond3: entered promiscuous mode [ 145.436202][ T8039] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 145.456661][ T8039] bond3: left promiscuous mode [ 145.786565][ T8062] netlink: 64 bytes leftover after parsing attributes in process `syz.1.543'. [ 145.818542][ T8061] netlink: 80 bytes leftover after parsing attributes in process `syz.4.544'. [ 145.943390][ T8077] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 145.962560][ T8062] wg1 speed is unknown, defaulting to 1000 [ 145.992027][ T8065] tipc: Started in network mode [ 146.006351][ T8065] tipc: Node identity , cluster identity 4711 [ 146.043549][ T8065] tipc: Failed to obtain node identity [ 146.079461][ T8065] tipc: Enabling of bearer rejected, failed to enable media [ 146.111785][ T8084] netlink: 27 bytes leftover after parsing attributes in process `syz.2.547'. [ 146.631092][ T8106] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 148.114997][ T8115] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 148.155659][ T8120] __nla_validate_parse: 2 callbacks suppressed [ 148.155679][ T8120] netlink: 2 bytes leftover after parsing attributes in process `syz.2.558'. [ 148.258227][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.559'. [ 148.405845][ T8135] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.422966][ T8132] : renamed from veth0_to_bond (while UP) [ 148.571179][ T8136] netlink: 'syz.3.560': attribute type 30 has an invalid length. [ 151.279371][ T8128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.429466][ T8171] netlink: 'syz.1.569': attribute type 32 has an invalid length. [ 151.584824][ T8182] netlink: 76 bytes leftover after parsing attributes in process `syz.0.572'. [ 151.631327][ T8182] syzkaller0: entered promiscuous mode [ 151.648471][ T8182] syzkaller0: entered allmulticast mode [ 151.838234][ T6637] IPVS: starting estimator thread 0... [ 151.970618][ T8203] IPVS: using max 31 ests per chain, 74400 per kthread [ 152.273187][ T8223] syzkaller0: entered promiscuous mode [ 152.296894][ T8223] syzkaller0: entered allmulticast mode [ 152.538672][ T6647] hid-generic 0005:04F3:0A0E.0001: item fetching failed at offset 0/1 [ 152.562746][ T6647] hid-generic 0005:04F3:0A0E.0001: probe with driver hid-generic failed with error -22 [ 152.589517][ T8242] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 152.609058][ T8242] bond4 (unregistering): Released all slaves [ 152.705004][ T8248] bond0: invalid ARP target 0.0.0.0 specified for addition [ 152.713016][ T8248] bond0: option arp_ip_target: invalid value (0) [ 152.734729][ T8248] bond0 (unregistering): Released all slaves [ 152.805618][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 152.815528][ T8251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.590'. [ 152.950298][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.591'. [ 153.069630][ T8267] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 154.885603][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.600'. [ 154.907336][ T8300] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 154.974947][ T8302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'. [ 155.098233][ T8300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.223666][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 155.248160][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.604'. [ 155.350308][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 155.385518][ T8295] net_ratelimit: 57 callbacks suppressed [ 155.385537][ T8295] openvswitch: netlink: Invalid VLAN frame [ 155.587556][ T8329] netlink: 'syz.4.605': attribute type 49 has an invalid length. [ 155.727073][ T8329] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 155.750131][ T8329] ip6gretap0: entered promiscuous mode [ 155.766532][ T8329] ip6gretap0: entered allmulticast mode [ 156.666327][ T8350] bond4: option lacp_active: invalid value (8) [ 156.693576][ T8350] bond4 (unregistering): Released all slaves [ 156.814232][ T8363] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 156.838520][ T8363] netlink: 224 bytes leftover after parsing attributes in process `syz.3.613'. [ 157.064457][ T8354] team_slave_1: Caught tx_queue_len zero misconfig [ 157.400676][ T8383] netlink: 32 bytes leftover after parsing attributes in process `syz.1.615'. [ 157.485042][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 157.514525][ T8388] netlink: 60 bytes leftover after parsing attributes in process `syz.4.617'. [ 157.552011][ T8388] netlink: 'syz.4.617': attribute type 21 has an invalid length. [ 157.594531][ T8388] netlink: 'syz.4.617': attribute type 21 has an invalid length. [ 157.610094][ T6172] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.631756][ T6172] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.640236][ T8394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.618'. [ 157.660003][ T6172] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.677517][ T6172] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.034452][ T8372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.416314][ T8414] wg1 speed is unknown, defaulting to 1000 [ 160.477434][ T8432] netlink: 'syz.4.629': attribute type 49 has an invalid length. [ 160.515929][ T8432] netlink: 184148 bytes leftover after parsing attributes in process `syz.4.629'. [ 160.736264][ T8436] xt_hashlimit: size too large, truncated to 1048576 [ 160.798475][ T8438] bridge_slave_0 (unregistering): left allmulticast mode [ 160.814460][ T8438] bridge_slave_0 (unregistering): left promiscuous mode [ 160.829734][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.844759][ T8439] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 160.854305][ T8439] netlink: 224 bytes leftover after parsing attributes in process `syz.4.631'. [ 162.016152][ T8467] wg1 speed is unknown, defaulting to 1000 [ 162.084201][ T8490] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.490881][ T8506] netlink: 56 bytes leftover after parsing attributes in process `syz.3.639'. [ 163.168577][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.643'. [ 163.198468][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.643'. [ 163.443608][ T8548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 163.561559][ T8558] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 163.602897][ T8558] netlink: 'syz.1.653': attribute type 15 has an invalid length. [ 163.618982][ T8560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.654'. [ 163.640202][ T8560] nbd: must specify a device to reconfigure [ 164.048905][ T8577] netlink: 312 bytes leftover after parsing attributes in process `syz.3.659'. [ 164.072142][ T8571] wg1 speed is unknown, defaulting to 1000 [ 164.084256][ T8577] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 164.109525][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'. [ 164.215615][ T8586] netlink: 'syz.0.661': attribute type 16 has an invalid length. [ 164.236220][ T8586] netlink: 'syz.0.661': attribute type 17 has an invalid length. [ 164.313582][ T8580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.557878][ T8605] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 164.578839][ T8604] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 164.596539][ T8605] netlink: 'syz.4.664': attribute type 3 has an invalid length. [ 164.608530][ T8586] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 164.627292][ T8604] netlink: 'syz.4.664': attribute type 3 has an invalid length. [ 164.639683][ T6646] wg1 speed is unknown, defaulting to 1000 [ 164.882022][ T8602] wg1 speed is unknown, defaulting to 1000 [ 165.100254][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 165.235366][ T8629] macsec2: entered promiscuous mode [ 165.240739][ T8629] dummy0: entered promiscuous mode [ 165.246848][ T8629] macsec2: entered allmulticast mode [ 165.253059][ T8629] dummy0: entered allmulticast mode [ 165.262479][ T8629] dummy0: left allmulticast mode [ 165.279212][ T8629] dummy0: left promiscuous mode [ 166.033021][ T8640] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 166.047755][ T8640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.203272][ T8649] __nla_validate_parse: 3 callbacks suppressed [ 166.203290][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.676'. [ 166.283877][ T8649] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.774476][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 166.950774][ T8678] bond5: (slave bond_slave_1): Device is not our slave [ 166.958116][ T8678] bond5: option active_slave: invalid value (bond_slave_1) [ 166.974216][ T8678] bond5 (unregistering): Released all slaves [ 166.985611][ T8682] netlink: 210640 bytes leftover after parsing attributes in process `syz.4.681'. [ 167.199596][ T8686] netlink: 36 bytes leftover after parsing attributes in process `syz.0.684'. [ 167.329197][ T8691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.686'. [ 167.544274][ T8707] netlink: 104 bytes leftover after parsing attributes in process `syz.2.690'. [ 167.565719][ T8707] netlink: 104 bytes leftover after parsing attributes in process `syz.2.690'. [ 167.585235][ T8713] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 168.082988][ T8737] validate_nla: 2 callbacks suppressed [ 168.083006][ T8737] netlink: 'syz.2.698': attribute type 13 has an invalid length. [ 168.539581][ T8773] ipt_REJECT: TCP_RESET invalid for non-tcp [ 168.597755][ T8753] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 168.677790][ T8753] bond3 (unregistering): Released all slaves [ 168.713021][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 168.805251][ T8785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.840826][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 168.850965][ T8774] wg1 speed is unknown, defaulting to 1000 [ 168.876113][ T8786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.363810][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 169.758207][ T8831] rdma_op ffff88805734b1f0 conn xmit_rdma 0000000000000000 [ 170.285865][ T8847] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.338895][ T8859] netlink: 'syz.1.720': attribute type 3 has an invalid length. [ 170.358029][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.654291][ T8874] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 170.687999][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.715070][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.803057][ T8847] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 170.845122][ T8847] veth1_vlan: left promiscuous mode [ 170.872435][ T8847] veth0_vlan: left promiscuous mode [ 170.897669][ T8847] veth0_vlan: entered promiscuous mode [ 170.928781][ T8847] veth1_vlan: entered promiscuous mode [ 170.947029][ T8847] veth1_macvtap: left promiscuous mode [ 170.956229][ T8847] veth0_macvtap: left promiscuous mode [ 170.964010][ T8847] veth0_macvtap: entered promiscuous mode [ 170.973724][ T8847] veth1_macvtap: entered promiscuous mode [ 170.989433][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.998546][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.007980][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.017844][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.034987][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 171.043707][ T8847] bond1: left promiscuous mode [ 171.049033][ T8847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.058452][ T8847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.108412][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.115645][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.298710][ T1330] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 171.320300][ T1330] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 171.468286][ T1330] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 171.543083][ T6319] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 172.042231][ T8900] __nla_validate_parse: 6 callbacks suppressed [ 172.042248][ T8900] netlink: 32 bytes leftover after parsing attributes in process `syz.2.729'. [ 172.127715][ T8913] netlink: 'syz.0.733': attribute type 4 has an invalid length. [ 172.267545][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 172.323406][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 172.337946][ T8918] netlink: 'syz.4.735': attribute type 18 has an invalid length. [ 172.701401][ T8946] lo speed is unknown, defaulting to 1000 [ 172.709596][ T8946] lo speed is unknown, defaulting to 1000 [ 172.717068][ T8946] lo speed is unknown, defaulting to 1000 [ 172.725564][ T8946] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 172.743175][ T8946] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 172.788223][ T8946] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 172.822790][ T8949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.745'. [ 172.852184][ T8946] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.949573][ T8946] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 172.960152][ T8954] netlink: 'syz.1.746': attribute type 12 has an invalid length. [ 173.047534][ T8946] lo speed is unknown, defaulting to 1000 [ 173.074052][ T8946] lo speed is unknown, defaulting to 1000 [ 173.096792][ T8946] lo speed is unknown, defaulting to 1000 [ 173.115240][ T8946] lo speed is unknown, defaulting to 1000 [ 173.134797][ T8946] lo speed is unknown, defaulting to 1000 [ 173.155119][ T8965] tipc: Failed to remove unknown binding: 66,1,1/0:3554034079/3554034081 [ 173.260140][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 173.444423][ T8973] netlink: zone id is out of range [ 173.488967][ T8973] netlink: zone id is out of range [ 173.514528][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 173.678894][ T8973] netlink: set zone limit has 4 unknown bytes [ 173.713804][ T8978] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 173.767257][ T6632] lo speed is unknown, defaulting to 1000 [ 173.834522][ T8980] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 173.963252][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 174.007222][ T8994] netlink: 71 bytes leftover after parsing attributes in process `syz.3.757'. [ 174.356387][ T9004] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 174.468151][ T9014] netlink: 'syz.1.761': attribute type 10 has an invalid length. [ 174.509515][ T9014] team0: Port device veth1_to_hsr added [ 174.585482][ T9010] smbdirect: ib_dev[syz2] removed [ 174.699198][ T9026] netlink: 32 bytes leftover after parsing attributes in process `syz.2.763'. [ 174.946579][ T9039] netlink: 92 bytes leftover after parsing attributes in process `syz.4.766'. [ 175.511942][ T9063] bond5: entered promiscuous mode [ 175.529755][ T9063] 8021q: adding VLAN 0 to HW filter on device bond5 [ 175.546382][ T9061] veth0: entered promiscuous mode [ 175.899726][ T9059] veth0: left promiscuous mode [ 176.671087][ T9127] hsr0: entered promiscuous mode [ 176.779866][ T9123] hsr0: left promiscuous mode [ 177.931540][ T9178] bond3 (unregistering): Released all slaves [ 177.969962][ T9180] __nla_validate_parse: 3 callbacks suppressed [ 177.969974][ T9180] netlink: 164 bytes leftover after parsing attributes in process `syz.3.800'. [ 178.227210][ T9185] wg1 speed is unknown, defaulting to 1000 [ 178.266841][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 178.276152][ T9187] netlink: 'syz.3.802': attribute type 18 has an invalid length. [ 179.744671][ T9133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.903747][ T9195] netlink: 132 bytes leftover after parsing attributes in process `syz.0.803'. [ 179.947286][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 180.273346][ T9220] vxcan0: tx address claim with different name [ 180.607966][ T9239] netlink: 76 bytes leftover after parsing attributes in process `syz.0.816'. [ 180.650063][ T9251] netlink: 'syz.1.818': attribute type 3 has an invalid length. [ 180.798760][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 180.873035][ T9252] netlink: 128 bytes leftover after parsing attributes in process `syz.1.818'. [ 180.893898][ T9252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.208457][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.824'. [ 181.259886][ T9274] netlink: 'syz.0.825': attribute type 34 has an invalid length. [ 181.664375][ T9288] syzkaller0: entered promiscuous mode [ 181.674436][ T9295] netlink: 168 bytes leftover after parsing attributes in process `syz.2.831'. [ 181.690579][ T9288] syzkaller0: entered allmulticast mode [ 181.712206][ T9295] netlink: 196 bytes leftover after parsing attributes in process `syz.2.831'. [ 181.767304][ T9290] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 183.044122][ T9372] tipc: Enabled bearer , priority 10 [ 183.272437][ T9378] __nla_validate_parse: 1 callbacks suppressed [ 183.272454][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 183.935918][ T9397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.854'. [ 184.036907][ T9397] gretap1: entered promiscuous mode [ 184.162461][ T6648] tipc: Node number set to 3227942048 [ 184.338768][ T9406] bridge0: port 1(vlan2) entered blocking state [ 184.362484][ T9406] bridge0: port 1(vlan2) entered disabled state [ 184.380589][ T9406] vlan2: entered allmulticast mode [ 184.397493][ T9406] geneve0: entered allmulticast mode [ 184.419606][ T9406] vlan2: entered promiscuous mode [ 184.435909][ T9406] geneve0: entered promiscuous mode [ 186.135834][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.866'. [ 186.494541][ T9451] syzkaller1: entered promiscuous mode [ 186.511660][ T9451] syzkaller1: entered allmulticast mode [ 186.583837][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.868'. [ 186.763248][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 186.882510][ T9463] veth1_macvtap: left promiscuous mode [ 186.898375][ T9463] macsec0: entered promiscuous mode [ 186.913767][ T9463] macsec0: entered allmulticast mode [ 187.024004][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.871'. [ 187.062048][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.871'. [ 187.101934][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 187.254842][ T9476] netlink: 'syz.0.874': attribute type 1 has an invalid length. [ 187.435983][ T9488] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 187.593634][ T9488] 8021q: adding VLAN 0 to HW filter on device bond6 [ 187.640685][ T9498] netlink: 14 bytes leftover after parsing attributes in process `syz.4.877'. [ 187.661290][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.878'. [ 187.723008][ T9492] bond6: (slave veth5): Enslaving as an active interface with a down link [ 187.792593][ T9494] bond6: (slave dummy0): making interface the new active one [ 187.839211][ T9494] dummy0: entered promiscuous mode [ 187.851237][ T9494] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 187.923664][ T9498] bond6: (slave dummy0): Releasing active interface [ 187.956100][ T9498] dummy0 (unregistering): left promiscuous mode [ 188.569160][ T9532] __nla_validate_parse: 2 callbacks suppressed [ 188.569175][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 188.609141][ T9532] tipc: Invalid UDP bearer configuration [ 188.609190][ T9532] tipc: Enabling of bearer rejected, failed to enable media [ 188.669833][ T9535] ip6gre1: entered promiscuous mode [ 188.684097][ T9535] ip6gre1: entered allmulticast mode [ 188.826718][ T9544] netlink: 124 bytes leftover after parsing attributes in process `syz.0.892'. [ 189.019047][ T9554] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 189.051521][ T9552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.185671][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.896'. [ 189.217414][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.896'. [ 189.229113][ T9559] netlink: 136 bytes leftover after parsing attributes in process `syz.4.896'. [ 189.238955][ T9559] netlink: 36 bytes leftover after parsing attributes in process `syz.4.896'. [ 189.251579][ T9559] netlink: 'syz.4.896': attribute type 3 has an invalid length. [ 189.265660][ T9559] netlink: 1 bytes leftover after parsing attributes in process `syz.4.896'. [ 189.268605][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 189.284518][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 189.311767][ T9563] netlink: 36 bytes leftover after parsing attributes in process `syz.3.897'. [ 189.331322][ T5641] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.658478][ T9581] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 189.883825][ T9593] tipc: Invalid UDP bearer configuration [ 189.883891][ T9593] tipc: Enabling of bearer rejected, failed to enable media [ 189.931213][ T9593] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 189.984241][ T9593] bond7: entered promiscuous mode [ 189.989447][ T9593] bond7: entered allmulticast mode [ 189.995521][ T9593] 8021q: adding VLAN 0 to HW filter on device bond7 [ 190.114538][ T9603] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 190.191321][ T9603] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.332532][ T9611] xt_TCPMSS: Only works on TCP SYN packets [ 190.846710][ T9629] syzkaller1: entered promiscuous mode [ 190.882642][ T9629] syzkaller1: entered allmulticast mode [ 191.523466][ T9664] ip6tnl2: entered allmulticast mode [ 191.523485][ T9670] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 191.564375][ T9671] tipc: Enabled bearer , priority 0 [ 191.704045][ T9670] bond4: entered promiscuous mode [ 191.716182][ T9670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.725616][ T9671] tipc: Disabling bearer [ 191.953828][ T9688] team0: Cannot enslave team device to itself [ 191.993741][ T9691] team0: Cannot enslave team device to itself [ 192.396112][ T9710] netlink: 'syz.0.936': attribute type 12 has an invalid length. [ 192.773675][ T9732] syzkaller0: entered promiscuous mode [ 192.786873][ T9732] syzkaller0: entered allmulticast mode [ 193.352352][ T9739] wg1 speed is unknown, defaulting to 1000 [ 193.513003][ T9760] netlink: 'syz.4.950': attribute type 1 has an invalid length. [ 193.723844][ T9760] 8021q: adding VLAN 0 to HW filter on device bond8 [ 193.812215][ T9767] netlink: 'syz.4.950': attribute type 1 has an invalid length. [ 193.898131][ T9767] bond8: (slave batadv2): Opening slave failed [ 194.042619][ T9782] __nla_validate_parse: 27 callbacks suppressed [ 194.042638][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 194.119084][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 194.136500][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.147048][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.957'. [ 194.675898][ T9815] netlink: 48 bytes leftover after parsing attributes in process `syz.1.964'. [ 194.885610][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 195.089026][ T9822] bond3: entered promiscuous mode [ 195.106013][ T9822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.237279][ T9824] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.286095][ T9824] bond4: entered promiscuous mode [ 195.292490][ T9824] bond3: (slave bond4): Enslaving as an active interface with an up link [ 195.499095][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 195.590832][ T9848] sock: sock_timestamping_bind_phc: sock not bind to device [ 195.706896][ T9852] netlink: 128 bytes leftover after parsing attributes in process `syz.1.974'. [ 195.835003][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.975'. [ 195.896022][ T9860] netlink: 96 bytes leftover after parsing attributes in process `syz.1.977'. [ 195.994309][ T9858] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 196.102144][ T9858] bond4 (unregistering): Released all slaves [ 196.185488][ T9870] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 196.215391][ T9870] bond5 (unregistering): Released all slaves [ 196.866321][ T9897] syzkaller0: entered promiscuous mode [ 196.880691][ T9897] syzkaller0: entered allmulticast mode [ 197.535139][ T9932] netlink: 'syz.1.991': attribute type 1 has an invalid length. [ 197.616106][ T9936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.991'. [ 197.703656][ T9938] netlink: 'syz.2.997': attribute type 83 has an invalid length. [ 198.711948][ T9981] netlink: 'syz.0.1010': attribute type 1 has an invalid length. [ 198.883271][ T9986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.117547][ T9994] __nla_validate_parse: 8 callbacks suppressed [ 199.117562][ T9994] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1015'. [ 199.184210][ T9992] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 199.397919][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 199.479664][T10007] --map-set only usable from mangle table [ 200.023369][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1019'. [ 200.338339][T10031] wg1 speed is unknown, defaulting to 1000 [ 200.939241][T10061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1031'. [ 201.340749][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 201.348725][ T5648] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.348840][ T5645] Bluetooth: hci3: command 0x0406 tx timeout [ 201.361736][ T5644] Bluetooth: hci2: command 0x0406 tx timeout [ 201.660171][T10083] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1036'. [ 201.722140][T10087] Bluetooth: MGMT ver 1.23 [ 202.150916][T10103] syzkaller1: entered promiscuous mode [ 202.156467][T10103] syzkaller1: entered allmulticast mode [ 202.493582][ T30] audit: type=1800 audit(1779043771.698:4): pid=10091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1037" name="memory.events" dev="tmpfs" ino=1069 res=0 errno=0 [ 202.617486][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 202.630906][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'. [ 202.722867][T10125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.830093][T10188] tipc: Enabled bearer , priority 0 [ 203.857526][T10188] syzkaller0: entered promiscuous mode [ 203.893102][T10188] syzkaller0: entered allmulticast mode [ 203.955958][T10195] syzkaller0: entered promiscuous mode [ 203.968213][T10195] syzkaller0: entered allmulticast mode [ 203.997210][T10188] tipc: Resetting bearer [ 204.021629][T10187] tipc: Resetting bearer [ 204.050196][T10187] tipc: Disabling bearer [ 204.159875][T10213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1067'. [ 204.259951][T10201] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1068'. [ 204.270940][T10201] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1068'. [ 204.283036][T10214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1069'. [ 204.491701][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 204.511082][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 204.560011][T10228] syzkaller0: entered promiscuous mode [ 204.569215][T10228] syzkaller0: entered allmulticast mode [ 204.656124][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 204.915342][T10231] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.923207][T10231] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.937757][T10246] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 204.959144][T10231] batman_adv: batadv0: Interface deactivated: dummy0 [ 205.078776][T10231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.094976][T10231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.308252][ T29] wg1 speed is unknown, defaulting to 1000 [ 205.314873][T10253] netlink: 'syz.4.1078': attribute type 3 has an invalid length. [ 205.327963][ T29] syz0: Port: 1 Link DOWN [ 205.337234][ T1330] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.354706][ T5641] block nbd0: Receive control failed (result -32) [ 205.372663][ T1330] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.437048][ T1330] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.449252][ T29] wg1 speed is unknown, defaulting to 1000 [ 205.476066][ T1330] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.552223][T10262] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1082'. [ 205.605535][T10262] syzkaller0: entered promiscuous mode [ 205.638321][T10262] syzkaller0: entered allmulticast mode [ 205.698280][T10275] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 205.723905][ T6632] IPVS: starting estimator thread 0... [ 205.774990][T10282] netlink: 'syz.4.1085': attribute type 10 has an invalid length. [ 205.810392][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'. [ 205.820711][T10279] IPVS: using max 27 ests per chain, 64800 per kthread [ 205.878715][T10282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.889173][T10282] team0: Port device netdevsim1 added [ 205.921965][T10288] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1087'. [ 205.935824][T10288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.332603][T10305] ipt_rpfilter: unknown options [ 206.416753][T10310] syzkaller0: entered promiscuous mode [ 206.435951][T10310] syzkaller0: entered allmulticast mode [ 206.553885][T10304] wg1 speed is unknown, defaulting to 1000 [ 206.730244][T10327] netlink: 'syz.0.1099': attribute type 10 has an invalid length. [ 206.748099][T10327] veth0_vlan: left promiscuous mode [ 206.772449][T10327] veth0_vlan: entered promiscuous mode [ 206.783353][T10327] team0: Device veth0_vlan failed to register rx_handler [ 206.988399][ T30] audit: type=1800 audit(1779043776.188:5): pid=10333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1101" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1142 res=0 errno=0 [ 207.674251][T10366] netlink: 'syz.0.1111': attribute type 2 has an invalid length. [ 207.809514][T10360] macsec1: entered promiscuous mode [ 207.829815][T10360] virt_wifi0: entered promiscuous mode [ 207.985685][T10373] wg1 speed is unknown, defaulting to 1000 [ 208.139845][T10386] wg2: entered allmulticast mode [ 208.912180][T10421] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 209.528346][T10428] netlink: 'syz.1.1126': attribute type 13 has an invalid length. [ 209.609228][T10428] __nla_validate_parse: 4 callbacks suppressed [ 209.609246][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 209.726102][T10431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1127'. [ 209.943507][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'. [ 210.186280][T10442] xt_policy: output policy not valid in PREROUTING and INPUT [ 210.229502][T10448] netlink: 'syz.0.1134': attribute type 1 has an invalid length. [ 210.355212][T10448] bond6: (slave geneve3): making interface the new active one [ 210.366653][T10448] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 210.395716][ T6320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.430047][ T6320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.462164][T10463] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1134'. [ 210.471053][T10449] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1134'. [ 210.488177][T10467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'. [ 210.544221][ T6320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.595473][T10470] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1141'. [ 210.630087][T10470] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 210.642420][ T6320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.741224][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 210.867321][T10486] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 210.922721][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 211.016169][T10477] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1142'. [ 211.109838][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.312063][T10511] xt_bpf: check failed: parse error [ 211.609451][T10500] bridge_slave_0 (unregistering): left allmulticast mode [ 211.674528][T10500] bridge_slave_0 (unregistering): left promiscuous mode [ 211.690726][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.916729][T10523] netlink: 'syz.2.1154': attribute type 29 has an invalid length. [ 212.272762][T10533] ip6_vti0: entered promiscuous mode [ 212.280422][T10545] FAULT_INJECTION: forcing a failure. [ 212.280422][T10545] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 212.330136][T10545] CPU: 0 UID: 0 PID: 10545 Comm: syz.0.1157 Not tainted syzkaller #0 PREEMPT(full) [ 212.330164][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.330183][T10545] Call Trace: [ 212.330196][T10545] [ 212.330205][T10545] dump_stack_lvl+0xe8/0x150 [ 212.330243][T10545] should_fail_ex+0x412/0x560 [ 212.330277][T10545] prepare_alloc_pages+0x22a/0x650 [ 212.330317][T10545] __alloc_frozen_pages_noprof+0x12f/0x380 [ 212.330353][T10545] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 212.330389][T10545] ? __pfx_policy_nodemask+0x10/0x10 [ 212.330434][T10545] ? __lock_acquire+0x6b5/0x2cf0 [ 212.330464][T10545] alloc_pages_mpol+0x235/0x490 [ 212.330501][T10545] folio_alloc_mpol_noprof+0x39/0x160 [ 212.330535][T10545] vma_alloc_folio_noprof+0xe1/0x1e0 [ 212.330571][T10545] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 212.330608][T10545] ? __pte_offset_map+0x29/0x240 [ 212.330634][T10545] ? __pte_offset_map+0x29/0x240 [ 212.330662][T10545] do_pte_missing+0x159d/0x33f0 [ 212.330705][T10545] ? handle_mm_fault+0xee/0x3170 [ 212.330735][T10545] handle_mm_fault+0x1bd9/0x3170 [ 212.330776][T10545] ? handle_mm_fault+0xee/0x3170 [ 212.330809][T10545] ? __pfx_handle_mm_fault+0x10/0x10 [ 212.330849][T10545] ? __pfx___up_read+0x10/0x10 [ 212.330888][T10545] ? lock_mm_and_find_vma+0xa7/0x340 [ 212.330919][T10545] do_user_addr_fault+0x75b/0x1340 [ 212.330960][T10545] exc_page_fault+0x6a/0xc0 [ 212.330990][T10545] asm_exc_page_fault+0x26/0x30 [ 212.331010][T10545] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 212.331033][T10545] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 212.331049][T10545] RSP: 0018:ffffc90006c8f638 EFLAGS: 00050202 [ 212.331074][T10545] RAX: ffffffff84afa901 RBX: ffff88804f0ee000 RCX: 0000000000000574 [ 212.331089][T10545] RDX: 0000000000000000 RSI: ffff88804f0ee900 RDI: 0000200000006000 [ 212.331102][T10545] RBP: ffffc90006c8f7b0 R08: ffff88804f0eee73 R09: 1ffff11009e1ddce [ 212.331115][T10545] R10: dffffc0000000000 R11: ffffed1009e1ddcf R12: dffffc0000000000 [ 212.331129][T10545] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e74 [ 212.331151][T10545] ? _copy_to_iter+0x371/0x17d0 [ 212.331185][T10545] _copy_to_iter+0x493/0x17d0 [ 212.331229][T10545] ? __pfx__copy_to_iter+0x10/0x10 [ 212.331255][T10545] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 212.331282][T10545] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.331311][T10545] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 212.331338][T10545] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 212.331367][T10545] __skb_datagram_iter+0xf8/0x980 [ 212.331391][T10545] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 212.331422][T10545] skb_copy_datagram_iter+0xb5/0x240 [ 212.331449][T10545] netlink_recvmsg+0x2c3/0xa50 [ 212.331482][T10545] ? __pfx_netlink_recvmsg+0x10/0x10 [ 212.331517][T10545] ? __lock_acquire+0x6b5/0x2cf0 [ 212.331537][T10545] ? aa_sock_msg_perm+0xf1/0x1b0 [ 212.331566][T10545] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 212.331593][T10545] ? security_socket_recvmsg+0x7e/0x2c0 [ 212.331624][T10545] ? __pfx_netlink_recvmsg+0x10/0x10 [ 212.331645][T10545] sock_recvmsg+0x172/0x1b0 [ 212.331674][T10545] ____sys_recvmsg+0x1e6/0x4a0 [ 212.331706][T10545] ? __pfx_____sys_recvmsg+0x10/0x10 [ 212.331745][T10545] ? import_iovec+0x73/0xa0 [ 212.331778][T10545] ___sys_recvmsg+0x215/0x590 [ 212.331797][T10545] ? get_pid_task+0x20/0x1f0 [ 212.331828][T10545] ? __pfx____sys_recvmsg+0x10/0x10 [ 212.331854][T10545] ? __fget_files+0x2a/0x420 [ 212.331905][T10545] ? __fget_files+0x3a0/0x420 [ 212.331941][T10545] __x64_sys_recvmsg+0x1ba/0x2a0 [ 212.331966][T10545] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 212.331998][T10545] ? __pfx_ksys_write+0x10/0x10 [ 212.332036][T10545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.332058][T10545] do_syscall_64+0x15f/0xf80 [ 212.332085][T10545] ? trace_irq_disable+0x3b/0x140 [ 212.332115][T10545] ? clear_bhb_loop+0x40/0x90 [ 212.332141][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.332160][T10545] RIP: 0033:0x7f46f459ce59 [ 212.332188][T10545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.332203][T10545] RSP: 002b:00007f46f546a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 212.332222][T10545] RAX: ffffffffffffffda RBX: 00007f46f4816180 RCX: 00007f46f459ce59 [ 212.332236][T10545] RDX: 0000000000032100 RSI: 0000200000000040 RDI: 0000000000000003 [ 212.332248][T10545] RBP: 00007f46f546a090 R08: 0000000000000000 R09: 0000000000000000 [ 212.332260][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.332271][T10545] R13: 00007f46f4816218 R14: 00007f46f4816180 R15: 00007ffdd7b6a1e8 [ 212.332305][T10545] [ 212.807490][T10544] syzkaller0: entered promiscuous mode [ 212.813284][T10544] syzkaller0: entered allmulticast mode [ 212.846537][T10544] TC_ACT_REPEAT abuse ? [ 213.547378][T10531] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.951084][T10531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.997210][T10531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.291655][ T5642] Bluetooth: hci4: command 0x0405 tx timeout [ 214.311002][T10531] macsec0: left promiscuous mode [ 214.317661][T10531] macsec0: left allmulticast mode [ 214.380989][T10531] geneve2: left promiscuous mode [ 214.665255][T10561] netlink: 'syz.0.1164': attribute type 3 has an invalid length. [ 214.684294][T10576] ip6tnl2: entered allmulticast mode [ 214.692717][ T1330] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.726021][ T1330] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.756086][ T1330] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.914590][ T6335] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.000870][T10593] netlink: 'syz.2.1173': attribute type 1 has an invalid length. [ 215.014873][T10598] netlink: 'syz.1.1175': attribute type 12 has an invalid length. [ 215.047751][T10599] __nla_validate_parse: 11 callbacks suppressed [ 215.047769][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1172'. [ 215.094201][T10593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.113978][T10598] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 215.113978][T10598] 3ìUH†5rºBnœæ [ 215.143418][T10603] vlan3: entered allmulticast mode [ 215.148696][T10603] bond5: entered allmulticast mode [ 215.212715][T10593] bond5: (slave gretap1): making interface the new active one [ 215.220351][T10593] gretap1: entered allmulticast mode [ 215.229725][T10593] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 215.264125][T10607] netlink: 'syz.4.1176': attribute type 1 has an invalid length. [ 215.290674][T10607] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1176'. [ 215.411420][ T6174] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 215.460115][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 215.469292][ T6174] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 215.486684][ T5642] Bluetooth: hci4: link tx timeout [ 215.492606][ T5642] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.503684][ T5642] Bluetooth: hci4: link tx timeout [ 215.509358][ T5642] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.602453][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 215.695841][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 215.725109][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 215.749956][ T6335] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.782926][ T6335] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.814182][ T6335] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.847654][ T6335] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.053431][T10644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1186'. [ 216.209147][T10653] tipc: Enabled bearer , priority 10 [ 216.449573][T10665] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1195'. [ 216.459655][T10665] openvswitch: netlink: Key type 769 is out of range max 32 [ 216.569389][T10669] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 216.702523][T10678] xfrm1: entered allmulticast mode [ 216.863541][T10684] netlink: 'syz.3.1200': attribute type 10 has an invalid length. [ 216.892652][T10689] netlink: 'syz.4.1199': attribute type 3 has an invalid length. [ 216.893045][T10684] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1200'. [ 216.928926][T10689] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1199'. [ 217.259118][T10713] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1206'. [ 217.285094][T10711] x_tables: duplicate underflow at hook 1 [ 217.310291][T10707] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 217.543224][T10720] netlink: 'syz.2.1207': attribute type 34 has an invalid length. [ 217.571959][ T5642] Bluetooth: hci4: command 0x0405 tx timeout [ 217.613975][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'. [ 217.667662][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'. [ 217.770872][T10726] macvtap1: entered promiscuous mode [ 217.794764][T10739] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 217.797920][T10726] dummy0: entered promiscuous mode [ 217.838662][T10726] macvtap1: entered allmulticast mode [ 217.861996][T10726] dummy0: entered allmulticast mode [ 217.898292][T10733] dummy0: left allmulticast mode [ 217.918598][T10733] dummy0: left promiscuous mode [ 218.027410][T10733] macvtap1: left promiscuous mode [ 218.040272][T10733] macvtap1: left allmulticast mode [ 218.063312][T10739] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 218.495919][T10749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.671461][T10769] netlink: 'syz.4.1216': attribute type 3 has an invalid length. [ 218.758847][T10775] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 218.781198][T10782] xt_cgroup: xt_cgroup: no path or classid specified [ 219.706271][T10817] smc: removing ib device syz0 [ 219.747921][T10818] netlink: 'syz.3.1231': attribute type 1 has an invalid length. [ 219.783189][T10817] smbdirect: ib_dev[syz0] removed [ 219.810657][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 219.975208][T10829] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 220.048056][T10818] 8021q: adding VLAN 0 to HW filter on device bond4 [ 220.099490][T10826] bond0: Caught tx_queue_len zero misconfig [ 220.214946][T10838] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 220.299456][T10834] __nla_validate_parse: 15 callbacks suppressed [ 220.299475][T10834] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1235'. [ 220.327859][T10829] bond6: entered promiscuous mode [ 220.339721][T10829] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.458145][T10826] lo: Caught tx_queue_len zero misconfig [ 220.474419][T10846] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1237'. [ 220.954879][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 221.014063][T10860] ip6tnl3: entered allmulticast mode [ 221.406228][T10880] bridge_slave_1: left allmulticast mode [ 221.416562][T10880] bridge_slave_1: left promiscuous mode [ 221.432428][T10880] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.468877][T10880] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 221.739081][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1249'. [ 221.859834][T10887] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 222.180137][T10900] ip6gre1: entered promiscuous mode [ 222.221158][T10900] ip6gre1: entered allmulticast mode [ 222.248733][ T6335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.287528][ T5740] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.299817][ T6335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.401476][T10920] xt_time: unknown flags 0xf4 [ 222.556302][T10923] bridge0: port 3(vlan0) entered blocking state [ 222.582838][T10923] bridge0: port 3(vlan0) entered disabled state [ 222.602224][T10923] vlan0: entered allmulticast mode [ 222.620799][ T6638] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.634194][T10923] geneve0: entered allmulticast mode [ 222.679250][T10923] vlan0: entered promiscuous mode [ 222.691740][T10923] geneve0: entered promiscuous mode [ 222.816658][T10929] bond5: option min_links: invalid value (18446744073709551612) [ 222.832638][T10929] bond5: option min_links: allowed values 0 - 2147483647 [ 222.843591][T10929] bond5 (unregistering): Released all slaves [ 223.117437][T10941] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1263'. [ 223.145531][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 223.174589][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 223.225381][T10951] gre0: Caught tx_queue_len zero misconfig [ 223.250883][ T5740] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.613019][T10974] netlink: 'syz.2.1270': attribute type 1 has an invalid length. [ 223.821516][T10974] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.011736][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 224.540217][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 224.564019][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1281'. [ 224.645694][T11012] syzkaller0: entered promiscuous mode [ 224.667488][T11012] syzkaller0: entered allmulticast mode [ 225.171722][T11031] netlink: 'syz.3.1288': attribute type 6 has an invalid length. [ 225.319592][T11035] __nla_validate_parse: 4 callbacks suppressed [ 225.319612][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 225.890069][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 225.962257][T11066] netlink: 'syz.3.1299': attribute type 1 has an invalid length. [ 225.989197][T11066] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1299'. [ 226.342582][T11086] ipvlan4: entered promiscuous mode [ 226.364768][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1305'. [ 226.380625][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.532356][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 226.901494][T11115] ipvlan2: entered promiscuous mode [ 227.119672][T11130] x_tables: unsorted underflow at hook 2 [ 227.257714][T11130] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1319'. [ 227.538065][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1321'. [ 227.594944][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1321'. [ 227.729005][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1321'. [ 227.777050][T11144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1321'. [ 227.915829][T11165] Bluetooth: MGMT ver 1.23 [ 228.184111][T11178] netlink: 'syz.4.1330': attribute type 1 has an invalid length. [ 228.459957][T11194] syz_tun: entered allmulticast mode [ 228.623570][T11200] vlan4: entered promiscuous mode [ 228.628653][T11200] syz_tun: entered promiscuous mode [ 228.641307][T11200] vlan4: entered allmulticast mode [ 228.651189][T11200] syz_tun: entered allmulticast mode [ 228.690667][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 228.732578][T11204] netlink: 'syz.4.1336': attribute type 30 has an invalid length. [ 229.081658][T11193] syz_tun: left allmulticast mode [ 229.377491][T11227] netlink: 'syz.0.1344': attribute type 14 has an invalid length. [ 229.394052][T11227] x_tables: duplicate underflow at hook 3 [ 229.936876][T11246] netlink: 'syz.0.1351': attribute type 1 has an invalid length. [ 230.034433][T11246] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.447034][T11280] __nla_validate_parse: 16 callbacks suppressed [ 230.447052][T11280] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1357'. [ 230.514555][T11280] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1357'. [ 230.923886][T11298] ±ÿ: renamed from lo (while UP) [ 231.150151][T11313] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1363'. [ 231.181054][T11313] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 231.183526][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 231.229141][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 231.377869][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1370'. [ 231.397861][T11325] ip6gre3: entered promiscuous mode [ 231.418660][T11325] ip6gre3: entered allmulticast mode [ 231.438783][T11325] batadv0: Caught tx_queue_len zero misconfig [ 231.764573][T11338] netlink: 'syz.2.1375': attribute type 9 has an invalid length. [ 231.805342][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1375'. [ 231.955599][T11357] netlink: 'syz.2.1379': attribute type 3 has an invalid length. [ 232.048075][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 232.058072][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 232.068744][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 232.207255][T11371] netlink: 'syz.2.1382': attribute type 1 has an invalid length. [ 232.241381][T11371] 8021q: adding VLAN 0 to HW filter on device bond8 [ 232.456981][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.502963][T11380] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004 [ 232.817836][T11382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.966532][T11382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.085157][T11382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.121799][T11406] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 233.183247][T11382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.508815][ T48] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.606492][ T1330] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.650100][ T1330] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.749221][ T48] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.985717][T11432] batman_adv: batadv0: Adding interface: ipvlan5 [ 233.993013][T11432] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.029398][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.044399][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.071561][T11432] batman_adv: batadv0: Not using interface ipvlan5 (retrying later): interface not active [ 234.165057][T11451] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 234.191438][T11451] netlink: 'syz.0.1403': attribute type 2 has an invalid length. [ 234.199419][T11451] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 234.328563][T11450] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 234.450601][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.908944][T11490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.190907][T11504] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 235.277720][T11504] 8021q: adding VLAN 0 to HW filter on device bond9 [ 235.421906][T11507] bond9: (slave gretap2): making interface the new active one [ 235.433158][T11507] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 235.934864][T11551] __nla_validate_parse: 75 callbacks suppressed [ 235.934897][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1428'. [ 236.570405][T11565] syzkaller0: entered promiscuous mode [ 236.596131][T11565] syzkaller0: entered allmulticast mode [ 236.806478][T11576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1436'. [ 236.862136][T11576] bond0: entered promiscuous mode [ 236.892288][T11576] bond_slave_0: entered promiscuous mode [ 236.926338][T11576] bond_slave_1: entered promiscuous mode [ 236.963057][T11581] netlink: 'syz.0.1440': attribute type 1 has an invalid length. [ 236.971005][T11576] bond0: left promiscuous mode [ 236.980021][T11576] bond_slave_0: left promiscuous mode [ 236.996812][T11576] bond_slave_1: left promiscuous mode [ 237.102640][T11588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1441'. [ 237.128001][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'. [ 237.152626][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'. [ 237.230829][T11595] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1442'. [ 237.486456][T11608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1445'. [ 237.497722][T11591] ip6gretap0: left promiscuous mode [ 237.637774][T11614] netlink: 'syz.1.1447': attribute type 30 has an invalid length. [ 237.699012][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'. [ 237.774444][T11585] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 238.092477][T11637] xt_ipcomp: unknown flags 1D [ 238.387944][T11643] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1452'. [ 238.516666][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1453'. [ 238.537387][T11652] netlink: 'syz.1.1453': attribute type 30 has an invalid length. [ 239.105340][T11652] netlink: 'syz.1.1453': attribute type 30 has an invalid length. [ 239.214381][T11664] openvswitch: netlink: Actions may not be safe on all matching packets [ 239.233635][T11657] tipc: Started in network mode [ 239.242755][T11657] tipc: Node identity 46795bade3e8, cluster identity 4711 [ 239.276101][T11657] tipc: Enabled bearer , priority 0 [ 239.306348][T11657] tipc: Disabling bearer [ 239.331427][T11668] netlink: 'syz.2.1458': attribute type 1 has an invalid length. [ 239.504459][T11668] 8021q: adding VLAN 0 to HW filter on device bond9 [ 239.558243][T11683] netlink: 'syz.4.1459': attribute type 1 has an invalid length. [ 239.715043][T11676] bond9: (slave geneve2): making interface the new active one [ 239.743145][T11676] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 239.768443][ T6336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.805634][ T6336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.813479][T11686] openvswitch: netlink: Message has 161 unknown bytes. [ 239.822516][ T6336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.845504][ T6336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.332210][T11722] netlink: 'syz.4.1467': attribute type 11 has an invalid length. [ 240.532609][ T6320] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.557330][ T6320] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.590116][ T6320] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.697683][ T6174] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.006206][T11744] ipip0: entered promiscuous mode [ 241.815133][T11814] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 241.907507][T11812] __nla_validate_parse: 10 callbacks suppressed [ 241.907522][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1486'. [ 241.951390][T11812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1486'. [ 241.964376][T11805] netlink: 'syz.0.1485': attribute type 1 has an invalid length. [ 242.261804][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 242.577707][T11848] xfrm0: entered allmulticast mode [ 242.686868][T11845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1495'. [ 242.799704][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1497'. [ 243.033996][T11871] netlink: 'syz.0.1500': attribute type 1 has an invalid length. [ 243.043035][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 243.427780][T11885] netlink: 'syz.4.1506': attribute type 1 has an invalid length. [ 243.462047][T11885] openvswitch: netlink: Missing valid actions attribute. [ 243.493611][T11885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.733661][T11895] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1509'. [ 243.778471][T11895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1509'. [ 243.933806][T11904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.958198][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1509'. [ 244.378832][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'. [ 244.424317][T11925] netlink: 'syz.2.1519': attribute type 20 has an invalid length. [ 244.442142][T11925] netlink: 'syz.2.1519': attribute type 21 has an invalid length. [ 244.453105][T11927] netlink: 'syz.2.1519': attribute type 20 has an invalid length. [ 244.481460][T11927] netlink: 'syz.2.1519': attribute type 21 has an invalid length. [ 244.595452][T11931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.616068][T11931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.697706][T11936] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 244.791944][T11936] bond5: entered promiscuous mode [ 244.814051][T11936] 8021q: adding VLAN 0 to HW filter on device bond5 [ 244.864481][T11944] netlink: 'syz.4.1523': attribute type 1 has an invalid length. [ 245.784333][T11980] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 245.862609][T11980] bond10 (unregistering): Released all slaves [ 245.970657][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 246.260244][T12002] netlink: 'syz.2.1541': attribute type 15 has an invalid length. [ 246.327040][T12007] netlink: 'syz.2.1544': attribute type 163 has an invalid length. [ 247.556253][T12064] __nla_validate_parse: 5 callbacks suppressed [ 247.556270][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1554'. [ 247.720320][T12080] bridge4: entered allmulticast mode [ 248.777799][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 248.894260][T12112] syzkaller0: entered promiscuous mode [ 248.900065][T12112] syzkaller0: entered allmulticast mode [ 249.375575][T12140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1572'. [ 250.460896][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.191292][T12154] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 251.273083][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1576'. [ 251.641899][T12179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.711752][T12182] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1583'. [ 251.772487][T12182] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 252.890364][T12228] netlink: 'syz.0.1599': attribute type 6 has an invalid length. [ 253.009729][T12232] bond5: entered promiscuous mode [ 253.015943][T12232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 253.031696][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'. [ 253.257733][T12243] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1600'. [ 253.455430][T12255] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1607'. [ 254.242156][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1606'. [ 254.601880][T12299] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1615'. [ 254.665294][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 255.657364][T12346] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1631'. [ 255.855522][T12360] netlink: 'syz.0.1632': attribute type 2 has an invalid length. [ 255.916462][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'. [ 256.095676][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 256.145964][T12354] bond1: entered promiscuous mode [ 256.169369][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1636'. [ 256.251944][T12354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.292163][T12364] bond1: (slave vti0): refused to change device type [ 256.521580][T12387] netlink: 'syz.2.1638': attribute type 1 has an invalid length. [ 257.577693][T12413] IPv6: sit2: Disabled Multicast RS [ 258.232111][T12442] netlink: 'syz.4.1650': attribute type 21 has an invalid length. [ 258.296604][T12442] netlink: 'syz.4.1650': attribute type 22 has an invalid length. [ 258.335994][T12442] netlink: 'syz.4.1650': attribute type 23 has an invalid length. [ 258.370913][T12453] __nla_validate_parse: 2 callbacks suppressed [ 258.370932][T12453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1652'. [ 258.392763][T12442] netlink: 'syz.4.1650': attribute type 25 has an invalid length. [ 258.424814][T12442] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1650'. [ 259.688472][T12525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.932138][T12539] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1668'. [ 260.085457][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'. [ 260.712313][T12543] lo speed is unknown, defaulting to 1000 [ 260.837900][T12559] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 261.119724][T12559] bond6: option updelay: invalid value (18446744073709518847) [ 261.132410][T12559] bond6: option updelay: allowed values 0 - 2147483647 [ 261.194389][T12559] bond6 (unregistering): Released all slaves [ 261.297881][T12543] lo speed is unknown, defaulting to 1000 [ 261.314157][T12574] openvswitch: netlink: IP tunnel TTL not specified. [ 261.379522][T12543] lo speed is unknown, defaulting to 1000 [ 261.530872][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'. [ 261.604922][T12579] vlan3: entered allmulticast mode [ 261.637872][T12579] bond0: entered allmulticast mode [ 261.661539][T12579] bond_slave_0: entered allmulticast mode [ 261.687674][T12579] bond_slave_1: entered allmulticast mode [ 261.924308][T12590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1680'. [ 261.985632][T12590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1680'. [ 262.225538][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'. [ 262.243138][T12543] infiniband sqz0: set down [ 262.249040][ T6638] lo speed is unknown, defaulting to 1000 [ 262.265533][T12543] infiniband sqz0: added lo [ 262.294840][T12543] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 262.315579][T12543] infiniband sqz0: Couldn't open port 1 [ 262.336934][T12543] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 262.353766][T12543] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 262.373190][T12543] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 262.483948][T12543] RDS/IB: sqz0: added [ 262.505370][T12543] smc: adding ib device sqz0 with port count 1 [ 262.526428][T12543] smc: ib device sqz0 port 1 has no pnetid [ 262.566516][ T6638] lo speed is unknown, defaulting to 1000 [ 262.579144][T12543] lo speed is unknown, defaulting to 1000 [ 262.932023][T12633] smc: net device wlan0 applied user defined pnetid SYZ0 [ 263.178590][T12543] lo speed is unknown, defaulting to 1000 [ 263.571856][T12657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1700'. [ 263.592662][T12657] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1700'. [ 263.604030][T12660] netlink: 'syz.4.1699': attribute type 16 has an invalid length. [ 263.619659][T12660] netlink: 'syz.4.1699': attribute type 17 has an invalid length. [ 263.648026][T12660] netlink: 'syz.4.1699': attribute type 27 has an invalid length. [ 263.726561][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 263.793913][T12660] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.801169][T12660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.856892][T12670] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1702'. [ 263.871863][T12667] IPVS: set_ctl: invalid protocol: 29 172.20.20.10:20002 [ 263.953808][T12543] lo speed is unknown, defaulting to 1000 [ 264.229357][T12686] xt_hashlimit: overflow, rate too high: 0 [ 264.273926][T12694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1707'. [ 264.273931][T12692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1707'. [ 264.328559][T12698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.598046][T12715] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 264.640192][T12717] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1712'. [ 264.797779][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 264.816306][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 264.825869][T12543] lo speed is unknown, defaulting to 1000 [ 264.832537][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 264.868258][T12729] syzkaller0: entered promiscuous mode [ 264.884583][T12729] syzkaller0: entered allmulticast mode [ 265.075882][T12732] tipc: Started in network mode [ 265.099080][T12732] tipc: Node identity d6d63d813072, cluster identity 4711 [ 265.126323][T12732] tipc: Enabled bearer , priority 0 [ 265.172726][T12738] syzkaller0: entered promiscuous mode [ 265.187332][T12738] syzkaller0: entered allmulticast mode [ 265.218992][T12732] tipc: Resetting bearer [ 265.322589][T12543] lo speed is unknown, defaulting to 1000 [ 265.353888][T12730] tipc: Resetting bearer [ 265.396878][T12730] tipc: Disabling bearer [ 265.490665][ T5641] Bluetooth: hci4: command 0x0405 tx timeout [ 265.680334][T12767] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 265.888164][T12768] bond10 (unregistering): Released all slaves [ 266.144160][T12793] tipc: Enabled bearer , priority 10 [ 266.316302][T12798] lo speed is unknown, defaulting to 1000 [ 266.811297][T12819] netlink: 'syz.2.1739': attribute type 1 has an invalid length. [ 267.022799][T12825] bond10 (unregistering): Released all slaves [ 267.177678][ T6657] tipc: Node number set to 3869523329 [ 267.345341][T12847] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 267.356093][T12847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.372921][T12847] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 268.172948][T12885] dvmrp0: entered allmulticast mode [ 268.608978][T12916] syzkaller0: entered promiscuous mode [ 268.675435][T12916] syzkaller0: entered allmulticast mode [ 269.213197][T12948] xt_hashlimit: size too large, truncated to 1048576 [ 269.434644][T12968] netlink: 'syz.3.1781': attribute type 1 has an invalid length. [ 269.558464][T12968] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.585540][T12973] __nla_validate_parse: 17 callbacks suppressed [ 269.585558][T12973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1782'. [ 269.644886][T12970] netlink: 'syz.0.1782': attribute type 30 has an invalid length. [ 269.653650][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1782'. [ 269.667259][ T6638] IPVS: starting estimator thread 0... [ 269.674908][T12979] netlink: 'syz.2.1783': attribute type 11 has an invalid length. [ 269.683026][T12972] bond6: (slave veth5): Enslaving as an active interface with a down link [ 269.694002][T12983] netlink: 'syz.1.1784': attribute type 1 has an invalid length. [ 269.706110][T12983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.717371][T12968] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 269.726930][T12968] bond6: (slave batadv1): making interface the new active one [ 269.737076][T12968] batadv1: entered promiscuous mode [ 269.742896][T12968] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 269.756987][T12978] Cannot find set identified by id 0 to match [ 269.768754][T12975] bond6 (unregistering): (slave veth5): Releasing active interface [ 269.780667][T12982] IPVS: using max 39 ests per chain, 93600 per kthread [ 269.805663][T12975] bond6 (unregistering): (slave batadv1): Releasing active interface [ 269.818414][T12975] bond6 (unregistering): Released all slaves [ 269.880295][T12970] bond8: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 269.913626][T12970] bond8 (unregistering): Released all slaves [ 270.779245][T13037] veth8: entered allmulticast mode [ 270.839110][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 270.868365][T13040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.884045][T13040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.939222][T13040] batman_adv: batadv0: Removing interface: ipvlan5 [ 271.114416][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 271.136040][T13059] IPVS: set_ctl: invalid protocol: 44 172.30.1.2:20003 [ 271.156463][T13057] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1802'. [ 271.191226][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 271.594119][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 271.613231][T13085] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 271.720196][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 271.809603][T13102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.220813][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1815'. [ 272.243401][T13120] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1815'. [ 272.741934][T13151] x_tables: unsorted entry at hook 2 [ 272.774604][T13159] netlink: 'syz.0.1823': attribute type 10 has an invalid length. [ 272.806159][T13159] batman_adv: batadv0: Removing interface: dummy0 [ 272.837896][T13159] team0: Device dummy0 failed to register rx_handler [ 272.863903][T13163] netlink: 'syz.0.1823': attribute type 10 has an invalid length. [ 273.050295][T13173] bridge0: port 1(batadv2) entered blocking state [ 273.074905][T13173] bridge0: port 1(batadv2) entered disabled state [ 273.099348][T13173] batadv2: entered allmulticast mode [ 273.113738][T13173] batadv2: entered promiscuous mode [ 273.296721][T13182] netlink: 'syz.3.1829': attribute type 39 has an invalid length. [ 273.541775][ T6172] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 273.551874][ T6172] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 273.646896][T13206] gtp2: entered promiscuous mode [ 273.657315][T13206] gtp2: entered allmulticast mode [ 273.906792][T13210] netlink: 'syz.3.1836': attribute type 7 has an invalid length. [ 274.624442][T13238] netlink: 'syz.3.1844': attribute type 1 has an invalid length. [ 274.657716][T13239] x_tables: duplicate underflow at hook 1 [ 274.691390][T13233] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 274.721132][T13243] netlink: 'syz.3.1844': attribute type 1 has an invalid length. [ 274.948527][T13252] macvtap0: entered promiscuous mode [ 275.238330][T13263] netlink: 'syz.3.1846': attribute type 2 has an invalid length. [ 275.301860][T13271] lo speed is unknown, defaulting to 1000 [ 275.534026][T13279] netlink: 'syz.0.1853': attribute type 10 has an invalid length. [ 275.552620][T13279] team0: Port device veth1_to_hsr added [ 275.568001][T13279] __nla_validate_parse: 23 callbacks suppressed [ 275.568017][T13279] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1853'. [ 275.938386][T13286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 275.952912][T13286] xt_CONNSECMARK: invalid mode: 254 [ 276.096614][T13288] IPv6: sit2: Disabled Multicast RS [ 276.692549][T13316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1863'. [ 276.727145][T13316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1863'. [ 276.975826][T13329] bridge_slave_1: Caught tx_queue_len zero misconfig [ 276.992673][T13329] sch_fq: defrate 8 ignored. [ 277.025428][T13334] tipc: Enabling of bearer rejected, failed to enable media [ 277.070746][T13335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1869'. [ 277.406321][T13351] netlink: 'syz.2.1873': attribute type 1 has an invalid length. [ 277.443720][T13351] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1873'. [ 277.539639][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'. [ 277.553654][T13358] netlink: 'syz.4.1876': attribute type 4 has an invalid length. [ 277.587664][T13346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.596656][T13346] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.634943][T13346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.829193][T13346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.847045][T13346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.858573][T13346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.882991][T13346] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 277.968124][T13355] xfrm1: entered allmulticast mode [ 277.994659][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.001855][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.055676][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.062857][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.144357][T13380] netlink: 'syz.4.1880': attribute type 83 has an invalid length. [ 278.167620][T13380] sock: sock_set_timeout: `syz.4.1880' (pid 13380) tries to set negative timeout [ 278.217186][T13377] netlink: 'syz.3.1879': attribute type 9 has an invalid length. [ 278.248998][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1880'. [ 278.266103][T13377] netlink: 'syz.3.1879': attribute type 11 has an invalid length. [ 278.306915][T13377] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.1879'. [ 278.428396][T13397] netlink: 'syz.1.1883': attribute type 1 has an invalid length. [ 278.688905][T13397] 8021q: adding VLAN 0 to HW filter on device bond6 [ 278.792720][T13400] bond6: (slave geneve2): making interface the new active one [ 278.807419][T13400] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 278.844501][T13421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1886'. [ 278.999435][T13414] 8021q: adding VLAN 0 to HW filter on device bond7 [ 279.019878][T13414] bond6: (slave bond7): making interface the new active one [ 279.034349][T13414] bond6: (slave bond7): Enslaving as an active interface with an up link [ 279.114670][T13418] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 279.139213][ T6162] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.179884][T13421] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.213096][ T6162] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.282260][ T6162] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.300760][ T6162] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.613006][T13445] bond7: (slave geneve3): making interface the new active one [ 279.639510][T13445] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 279.663740][T13454] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 279.825732][T13461] ip6gretap0: left promiscuous mode [ 279.843051][T13461] ip6gretap0: left allmulticast mode [ 279.865214][ T1326] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 279.905510][ T1326] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 280.037582][ T1326] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 280.072121][ T1326] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 280.366213][T13511] tipc: Enabled bearer , priority 0 [ 280.393816][T13511] syzkaller0: entered promiscuous mode [ 280.409585][T13511] syzkaller0: entered allmulticast mode [ 280.423827][T13513] syzkaller0: entered promiscuous mode [ 280.441498][T13513] syzkaller0: entered allmulticast mode [ 280.607438][T13511] tipc: Resetting bearer [ 280.628778][T13510] tipc: Resetting bearer [ 280.701760][T13510] tipc: Disabling bearer [ 280.782637][T13523] lo speed is unknown, defaulting to 1000 [ 280.841299][T13528] __nla_validate_parse: 7 callbacks suppressed [ 280.841316][T13528] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1910'. [ 280.894477][T13531] block nbd1: Unsupported socket: should be TCP or UNIX. [ 281.095942][T13528] block nbd4: not configured, cannot reconfigure [ 281.619765][T13549] lo speed is unknown, defaulting to 1000 [ 281.810769][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 281.917075][T13564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1918'. [ 282.343630][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 282.377146][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 282.415153][T13583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1921'. [ 282.450594][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.536105][T13581] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 282.614123][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 282.639049][T13592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1924'. [ 282.866155][T13610] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1925'. [ 282.962746][T13610] validate_nla: 2 callbacks suppressed [ 282.962763][T13610] netlink: 'syz.2.1925': attribute type 9 has an invalid length. [ 283.192948][T13625] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1929'. [ 283.444299][T13631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1930'. [ 283.722349][T13654] netlink: 'syz.4.1936': attribute type 21 has an invalid length. [ 283.735084][ T6314] wlan1: Trigger new scan to find an IBSS to join [ 284.438555][T13677] lo speed is unknown, defaulting to 1000 [ 284.463243][T13689] netlink: 'syz.0.1944': attribute type 1 has an invalid length. [ 284.493322][T13689] NCSI netlink: No device for ifindex 0 [ 284.980645][T13712] netlink: 'syz.4.1948': attribute type 1 has an invalid length. [ 285.019735][T13712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.466423][T13730] netlink: 'syz.1.1952': attribute type 9 has an invalid length. [ 285.486246][T13730] netlink: 'syz.1.1952': attribute type 3 has an invalid length. [ 285.494974][T13730] netlink: 'syz.1.1952': attribute type 3 has an invalid length. [ 285.718739][ T6319] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.727789][ T6319] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.779778][ T6319] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.816228][ T6319] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.174715][T13762] __nla_validate_parse: 17 callbacks suppressed [ 286.174732][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1962'. [ 286.201870][T13762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1962'. [ 286.308682][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1962'. [ 286.363492][T13771] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1962'. [ 286.542429][T13782] bond8: option lacp_active: invalid value (8) [ 286.585636][T13782] bond8 (unregistering): Released all slaves [ 286.596421][T13792] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1968'. [ 286.664746][T13770] syzkaller0: entered promiscuous mode [ 286.678973][T13770] syzkaller0: entered allmulticast mode [ 286.757400][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1971'. [ 286.894423][T13807] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 286.904806][T13806] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 287.116465][T13820] lo speed is unknown, defaulting to 1000 [ 287.486269][T13839] bridge0: port 3(veth1_to_bridge) entered blocking state [ 287.518124][T13839] bridge0: port 3(veth1_to_bridge) entered disabled state [ 287.534462][T13839] veth1_to_bridge: entered allmulticast mode [ 287.562561][T13839] veth1_to_bridge: entered promiscuous mode [ 287.582512][T13839] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 287.606044][T13841] netlink: 'syz.4.1983': attribute type 4 has an invalid length. [ 287.625736][T13843] netlink: 'syz.4.1983': attribute type 4 has an invalid length. [ 287.634657][T13839] bridge0: port 3(veth1_to_bridge) entered blocking state [ 287.643082][T13839] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 287.874083][T13854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1986'. [ 288.007808][T13862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1986'. [ 288.026897][T13854] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.143698][T13819] lo speed is unknown, defaulting to 1000 [ 288.296549][T13874] netlink: 'syz.3.1990': attribute type 61 has an invalid length. [ 288.327080][T13875] netlink: 'syz.0.1989': attribute type 3 has an invalid length. [ 288.700050][T13878] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 289.297976][T13907] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 289.341111][T13909] netlink: 'syz.4.1998': attribute type 1 has an invalid length. [ 289.396452][T13911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1998'. [ 289.447518][T13912] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1998'. [ 289.512545][T13909] bond11: entered promiscuous mode [ 289.525483][T13909] 8021q: adding VLAN 0 to HW filter on device bond11 [ 289.606533][T13911] bond11: entered allmulticast mode [ 290.188348][ T5642] block nbd1: Receive control failed (result -32) [ 290.415343][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.428202][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.441120][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.453450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.465835][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.478074][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.490506][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.502742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.515100][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.527490][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 291.385509][T13965] __nla_validate_parse: 9 callbacks suppressed [ 291.385530][T13965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2012'. [ 291.657374][T13974] netlink: 'syz.3.2019': attribute type 1 has an invalid length. [ 291.677997][T13977] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2017'. [ 291.695290][T13974] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2019'. [ 295.278733][ C1] sched: DL replenish lagged too much [ 295.420536][ C0] net_ratelimit: 17159 callbacks suppressed [ 295.420556][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.420570][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.421435][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.429317][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.439289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.451204][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.474938][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.487082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.499049][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.511107][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 300.430573][ C1] net_ratelimit: 22474 callbacks suppressed [ 300.430595][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.430779][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 300.437372][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.449240][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.461345][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.474864][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.485362][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.497211][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.509354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.521075][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.440481][ C0] net_ratelimit: 23280 callbacks suppressed [ 305.440502][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.440869][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.449184][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.459138][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.471149][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.483210][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.494934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.506867][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.519013][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 305.530864][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.450592][ C1] net_ratelimit: 20840 callbacks suppressed [ 310.450612][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.452596][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.457214][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.469235][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.481173][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.493005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.505150][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.517072][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 310.528903][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.540797][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.460465][ C0] net_ratelimit: 22024 callbacks suppressed [ 315.460487][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.461014][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.467270][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.479088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.495628][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.503270][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.515483][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 315.527232][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.538992][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.551002][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.470677][ C1] net_ratelimit: 22137 callbacks suppressed [ 320.470698][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.473059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.477596][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.489369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.501347][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.513362][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.525287][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.537367][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 320.549079][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.560923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.480616][ C1] net_ratelimit: 21270 callbacks suppressed [ 325.480638][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.487167][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.499361][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.511208][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.523183][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.535294][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.547294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.559378][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 325.571154][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.583073][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.098506][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.490485][ C0] net_ratelimit: 21477 callbacks suppressed [ 330.490502][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.490505][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.491307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.497223][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.509261][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.521135][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.533336][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 330.545018][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.557015][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.568853][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.500587][ C1] net_ratelimit: 21389 callbacks suppressed [ 335.500608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.503078][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.507486][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.520275][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 335.531383][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.544729][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.555314][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.567145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.579267][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.593500][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.510586][ C1] net_ratelimit: 20913 callbacks suppressed [ 340.510606][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.510941][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.517314][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.529404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.541333][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.555606][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.565136][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.577096][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.589015][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.600953][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.520409][ C1] net_ratelimit: 21568 callbacks suppressed [ 345.520429][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.521057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 345.527015][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.540828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.551147][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.562930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.574848][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.589723][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.598799][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.610803][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 347.734262][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.530711][ C1] net_ratelimit: 22319 callbacks suppressed [ 350.530795][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.530828][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 350.537622][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.549616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.561521][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.573448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.585405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.603393][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.609419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.621243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.864594][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 355.540595][ C1] net_ratelimit: 21740 callbacks suppressed [ 355.540626][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.541424][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.547343][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.559243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.571200][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.583101][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.595168][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.607179][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 355.619021][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.630778][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.550463][ C1] net_ratelimit: 21849 callbacks suppressed [ 360.550491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.551223][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.557393][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.569172][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.581158][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.592997][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.604932][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.616966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 360.628860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.640735][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.560706][ C0] net_ratelimit: 21268 callbacks suppressed [ 365.560727][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.560730][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.561786][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.567648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.579622][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.591419][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 365.603403][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.615290][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.627218][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.639226][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 368.303968][ T1326] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 370.570426][ C0] net_ratelimit: 21823 callbacks suppressed [ 370.570447][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.570651][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.578698][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 370.589695][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.603134][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 370.613528][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.625689][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.637698][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.649594][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.661493][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.580685][ C1] net_ratelimit: 22002 callbacks suppressed [ 375.580707][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.582765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.587504][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.599312][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.611357][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.623221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.635257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.647413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 375.659204][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.671022][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.590727][ C1] net_ratelimit: 22761 callbacks suppressed [ 380.590750][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 380.591711][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.597486][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 380.609487][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.621456][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 380.634348][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 380.645372][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 380.659200][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 380.669222][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 380.681150][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.600671][ C0] net_ratelimit: 22445 callbacks suppressed [ 385.600693][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.600728][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 385.608790][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 385.619431][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 385.633324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 385.643327][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 385.655391][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.667344][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 385.679426][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.691173][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.610617][ C1] net_ratelimit: 21880 callbacks suppressed [ 390.610638][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.612923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.617458][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.629283][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.641279][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.653130][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.665221][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.677257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.688959][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 390.700915][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 395.620639][ C1] net_ratelimit: 21934 callbacks suppressed [ 395.620661][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.621479][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 395.627454][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.641078][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 395.651199][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.663145][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.675045][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.687134][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.698962][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 395.715505][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.630763][ C1] net_ratelimit: 20977 callbacks suppressed [ 400.630782][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.631703][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.637700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.649342][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.661565][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.673155][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.685523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.697089][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.709340][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 400.721044][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:fa:6b:a5:c2:d8:82, vlan:0) [ 401.045945][ T48] ------------[ cut here ]------------ [ 401.081979][ T48] !bss [ 401.082019][ T48] WARNING: net/wireless/ibss.c:37 at __cfg80211_ibss_joined+0x3da/0x450, CPU#1: kworker/u8:3/48 [ 401.126849][ T48] Modules linked in: [ 401.162666][ T48] CPU: 1 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 401.203069][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.245404][ T48] Workqueue: cfg80211 cfg80211_event_work [ 401.283985][ T48] RIP: 0010:__cfg80211_ibss_joined+0x3da/0x450 [ 401.290214][ T48] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 e9 a9 00 cc e8 c2 74 c2 f6 90 0f 0b 90 eb b5 e8 b7 74 c2 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb a5 e8 a7 74 c2 f6 90 0f 0b 90 e9 d6 fd [ 401.342558][ T48] RSP: 0018:ffffc90000b87940 EFLAGS: 00010293 [ 401.348676][ T48] RAX: ffffffff8b034fa9 RBX: dffffc0000000000 RCX: ffff88801b363d80 [ 401.387520][ T48] RDX: 0000000000000000 RSI: ffffffff8dfafc66 RDI: ffffffff8c28afe0 [ 401.426832][ T48] RBP: ffffc90000b87a10 R08: ffffffff90311bf7 R09: 1ffffffff206237e [ 401.466903][ T48] R10: dffffc0000000000 R11: fffffbfff206237f R12: ffff88807bd24e50 [ 401.506009][ T48] R13: 1ffff92000170f30 R14: ffff888056bb34b8 R15: 0000000000000006 [ 401.545771][ T48] FS: 0000000000000000(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000 [ 401.586941][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.624930][ T48] CR2: 00005555613d3a38 CR3: 000000007cecc000 CR4: 00000000003526f0 [ 401.665029][ T48] Call Trace: [ 401.668451][ T48] [ 401.703484][ T48] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 401.709445][ T48] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 401.747223][ T48] cfg80211_process_wdev_events+0x398/0x5a0 [ 401.783857][ T48] cfg80211_process_rdev_events+0xa1/0x110 [ 401.789726][ T48] cfg80211_event_work+0x2c/0x60 [ 401.825594][ T48] ? process_scheduled_works+0xa70/0x1860 [ 401.862377][ T48] process_scheduled_works+0xb5d/0x1860 [ 401.868018][ T48] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.906447][ T48] ? assign_work+0x3d5/0x5e0 [ 401.942489][ T48] worker_thread+0xa53/0xfc0 [ 401.947170][ T48] kthread+0x389/0x470 [ 401.982097][ T48] ? __pfx_worker_thread+0x10/0x10 [ 401.987272][ T48] ? __pfx_kthread+0x10/0x10 [ 402.022636][ T48] ret_from_fork+0x514/0xb70 [ 402.027290][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 402.063628][ T48] ? __switch_to+0xc79/0x1410 [ 402.068398][ T48] ? __pfx_kthread+0x10/0x10 [ 402.103830][ T48] ret_from_fork_asm+0x1a/0x30 [ 402.108707][ T48] [ 402.143147][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 402.150483][ T48] CPU: 1 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 402.159794][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 402.169876][ T48] Workqueue: cfg80211 cfg80211_event_work [ 402.175633][ T48] Call Trace: [ 402.178932][ T48] [ 402.181896][ T48] vpanic+0x56c/0xa60 [ 402.185914][ T48] ? __pfx__printk+0x10/0x10 [ 402.190543][ T48] ? __pfx_vpanic+0x10/0x10 [ 402.195072][ T48] ? is_bpf_text_address+0x292/0x2b0 [ 402.200382][ T48] ? is_bpf_text_address+0x26/0x2b0 [ 402.205629][ T48] panic+0xc5/0xd0 [ 402.209406][ T48] ? __pfx_panic+0x10/0x10 [ 402.213859][ T48] ? ret_from_fork_asm+0x1a/0x30 [ 402.218832][ T48] __warn+0x315/0x4c0 [ 402.222843][ T48] ? __cfg80211_ibss_joined+0x3da/0x450 [ 402.228424][ T48] ? __cfg80211_ibss_joined+0x3da/0x450 [ 402.234012][ T48] __report_bug+0x29a/0x540 [ 402.238563][ T48] ? __cfg80211_ibss_joined+0x3da/0x450 [ 402.244151][ T48] ? __pfx___report_bug+0x10/0x10 [ 402.249217][ T48] ? preempt_schedule_thunk+0x16/0x30 [ 402.254625][ T48] ? __cfg80211_ibss_joined+0x3da/0x450 [ 402.260200][ T48] report_bug+0x16a/0x220 [ 402.264563][ T48] ? __cfg80211_ibss_joined+0x3da/0x450 [ 402.270160][ T48] ? __cfg80211_ibss_joined+0x3dc/0x450 [ 402.275739][ T48] handle_bug+0x9c/0x200 [ 402.280009][ T48] exc_invalid_op+0x1a/0x50 [ 402.284540][ T48] asm_exc_invalid_op+0x1a/0x20 [ 402.289416][ T48] RIP: 0010:__cfg80211_ibss_joined+0x3da/0x450 [ 402.295610][ T48] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 08 e9 a9 00 cc e8 c2 74 c2 f6 90 0f 0b 90 eb b5 e8 b7 74 c2 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb a5 e8 a7 74 c2 f6 90 0f 0b 90 e9 d6 fd [ 402.315239][ T48] RSP: 0018:ffffc90000b87940 EFLAGS: 00010293 [ 402.321333][ T48] RAX: ffffffff8b034fa9 RBX: dffffc0000000000 RCX: ffff88801b363d80 [ 402.329320][ T48] RDX: 0000000000000000 RSI: ffffffff8dfafc66 RDI: ffffffff8c28afe0 [ 402.337308][ T48] RBP: ffffc90000b87a10 R08: ffffffff90311bf7 R09: 1ffffffff206237e [ 402.345320][ T48] R10: dffffc0000000000 R11: fffffbfff206237f R12: ffff88807bd24e50 [ 402.353306][ T48] R13: 1ffff92000170f30 R14: ffff888056bb34b8 R15: 0000000000000006 [ 402.361314][ T48] ? __cfg80211_ibss_joined+0x3d9/0x450 [ 402.366920][ T48] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 402.372854][ T48] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 402.378693][ T48] cfg80211_process_wdev_events+0x398/0x5a0 [ 402.384662][ T48] cfg80211_process_rdev_events+0xa1/0x110 [ 402.390496][ T48] cfg80211_event_work+0x2c/0x60 [ 402.395473][ T48] ? process_scheduled_works+0xa70/0x1860 [ 402.401218][ T48] process_scheduled_works+0xb5d/0x1860 [ 402.406810][ T48] ? __pfx_process_scheduled_works+0x10/0x10 [ 402.412818][ T48] ? assign_work+0x3d5/0x5e0 [ 402.417437][ T48] worker_thread+0xa53/0xfc0 [ 402.422078][ T48] kthread+0x389/0x470 [ 402.426186][ T48] ? __pfx_worker_thread+0x10/0x10 [ 402.431326][ T48] ? __pfx_kthread+0x10/0x10 [ 402.435952][ T48] ret_from_fork+0x514/0xb70 [ 402.440574][ T48] ? __pfx_ret_from_fork+0x10/0x10 [ 402.445722][ T48] ? __switch_to+0xc79/0x1410 [ 402.450434][ T48] ? __pfx_kthread+0x10/0x10 [ 402.455061][ T48] ret_from_fork_asm+0x1a/0x30 [ 402.459869][ T48] [ 402.463591][ T48] Kernel Offset: disabled [ 402.467932][ T48] Rebooting in 86400 seconds..