last executing test programs: 3.274524655s ago: executing program 4 (id=3027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000075072e08", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000000)={0x2c, 0x4, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @jumbo={0xc2, 0x4, 0x40}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1]}, 0x30) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0x10, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x84d}, 0x40010) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000075072e08", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000000)={0x2c, 0x4, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @jumbo={0xc2, 0x4, 0x40}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1]}, 0x30) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0x10, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x84d}, 0x40010) (async) 2.983024411s ago: executing program 4 (id=3031): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) pwritev(r0, &(0x7f0000000540), 0x100000000000005a, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000440)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x1}, 0x3}], 0x4000169, 0x40000142, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000019, 0x200000006c832, 0xffffffffffffffff, 0x1da98000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) 2.580269275s ago: executing program 1 (id=3034): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa1080}, 0xc, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000520008002bbd7000fcdbdf2500000000001213f104f77e2bf941b4d6e5a99e8c62c60338660f27c4fc5ec6b7934da3705020a77125be7ebe7a30b4c4f8bfc307c7c55e2c83d446b624b4e85ef8177ff9204dae2b96f86655917988c1c171fdf29e8d1785c1fae8f6ebc1b5256038ae0cee923adc2c7b907b6764a70a"], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4014) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYRES8=r4, @ANYRESHEX, @ANYRES16=r4], 0xfce) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80088250}, 0xc, &(0x7f00000000c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="280000001a00040025bd7000ffdbdf251c2080d200030000000600000c000900c600020c", @ANYRES32=r4, @ANYBLOB="c91f8d81febb577bf4c82be2762c34df7bbf287768e2de60228d30fe83f538ccbf454c990e3ea71aa0e8e59d88e2630127c19902587931c8fa0f0912f7c67ad435de4b0105148901dc59fd342a47a8eed1e2789d758ccd9c45a5d1150ae4a425f7977d48b6fb5b6d2c58408de2748bb50a3ce33acda127e1ffda9e32cae69ef629cc8cacef4ffc89372f0f2c88bc93a5"], 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="01600000000000002400128009000100697069028008000100", @ANYRES32=r5, @ANYBLOB="08000300ac1e0001", @ANYRES16], 0x44}}, 0x40848c0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'nr0\x00'}) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x140f, 0xee70877cfbc8a0b9, 0x70bd2d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r10 = socket(0x10, 0x3, 0x0) (async) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r10) (async) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r10, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x10, 0x5, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x17, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.219876368s ago: executing program 3 (id=3038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) syz_emit_ethernet(0x127, &(0x7f0000000700)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @dev, @void, {@ipv4={0x800, @tipc={{0x3e, 0x4, 0x0, 0x3, 0x119, 0x68, 0x0, 0x3, 0x6, 0x0, @multicast1, @empty, {[@generic={0x82, 0x10, "4f687d3e0942e05cf3feffdc3d61"}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x82, 0x1, [{0x5, 0x7, "2aab0b1852"}, {0x6, 0xd, "858deafb320d00fc9a0d26"}, {0x7, 0xd, "7a74eaa95cdafabc893dfb"}, {0x2, 0xe, "6e8d6b2ea96f21070e55eef9"}, {0x6, 0x12, "39225778c3ee63f576fa918740dae385"}, {0x6, 0xc, "22a4feeead52b13cf308"}, {0x7, 0x11, "500353a71ab140949043d770de1c0a"}, {0x0, 0xe, "20fbae4ad6988a1f7b4c0ce3"}, {0x0, 0x10, "6e802cf1258e97f59aeff12c77e0"}]}, @timestamp={0x44, 0x14, 0x60, 0x0, 0xa, [0xffffffff, 0x71, 0xf, 0x4]}, @timestamp_addr={0x44, 0x1c, 0xf5, 0x1, 0x8, [{@rand_addr=0x64010100, 0x1}, {@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @ssrr={0x89, 0x17, 0xb4, [@broadcast, @rand_addr=0x64010101, @private=0xa010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @noop]}}, @payload_direct={{{{0x21, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x2, 0x5be, 0x0, 0x3, 0x7, 0x1, 0x3, 0x9, 0x83a4, 0x2, 0x4e22, 0x4e24}, 0x2, 0x1}}, [0x0]}}}}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000002500010033bd7004fedbdf250900000c20000e801c"], 0x34}, 0x1, 0x0, 0x0, 0x4800d}, 0x20000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r5, 0x25, 0x0, @void}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const={0x7, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30]}}, &(0x7f0000000400)=""/65, 0x27, 0x41}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x7, &(0x7f0000000a40)=@raw=[@jmp={0x5, 0x1, 0xc, 0xa, 0x7, 0x1, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x2, 0x3, 0x6, 0x5, 0x1, 0xffffffffffffffff, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xd}], &(0x7f0000000840)='syzkaller\x00', 0x4, 0x85, &(0x7f0000000880)=""/133, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x4, 0x5, 0xd}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000a00)=[{0x2, 0x4, 0xd, 0x7}, {0x3, 0x3, 0x2, 0x9}, {0x1, 0x4, 0xd, 0x7}, {0x4, 0x5, 0x6, 0x1}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x3, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x56}, @exit, @call={0x85, 0x0, 0x0, 0xc2}], &(0x7f0000000180)='GPL\x00', 0x2, 0x31, &(0x7f0000000240)=""/49, 0x40f00, 0x12, '\x00', r5, 0x0, r8, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x8, 0x5, 0x6}, 0x10, 0x24068, r9, 0x7, 0x0, &(0x7f0000000b00)=[{0x2, 0x2, 0x6, 0x3}, {0x0, 0x3, 0x5, 0xcf4244fda27773c4}, {0x3, 0x4, 0x5, 0x2}, {0x0, 0x4, 0xf, 0x9}, {0x0, 0x3, 0x0, 0x1}, {0x1, 0x5, 0x5}, {0x5, 0x1, 0x2, 0x6}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5eaa00000000000071100600000000009500001700000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000080)={'wg2\x00'}) 2.160422319s ago: executing program 1 (id=3040): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x28) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffd3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}}, 0x4000084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x10000003}}]}}, &(0x7f0000000140)=""/240, 0x32, 0xf0, 0x1}, 0x20) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={r0}) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f5, 0x2, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000700000000000000003000600000000000200000000000000000000000000000002000100000004d300000502000000e0030003"], 0x60}, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180000008f080000000000000010000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.961436362s ago: executing program 0 (id=3043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000f, 0x40010, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) close(r6) (async) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000380)='~', 0x1}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x96, &(0x7f00000015c0)=""/150}, 0x94) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000207010300000000000000000200000814000780080002400000a92508000140000000008b637e96f2ef3a0467151d41da12f17a0abd999f267e2bc4f42fdd909e4865da1dc9ed14317a58b4b859233690e172dabad2879a45f31ee761e097be2e0a50dacb23868aa526bda699b6d2fdb8559c0eb27673201e33dc5163cf3faff56cf8e969e7b7f697fb7cb86e686db027a9130513f39a4107308458ef847b584f448c05f3bef9a82a322e2583ae8fe4aa"], 0x28}, 0x1, 0x0, 0x0, 0x22000005}, 0x4000000) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040028bd7000fcdbdf254500000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000300000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4000) 1.881325125s ago: executing program 3 (id=3044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000)=0xfffffffc, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001100)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x22}, 0x3}}, 0x10, &(0x7f00000010c0)=[{&(0x7f00000000c0)="52ec68ef691df458c362e504e79a84218e7efcd0ab352565c0d32166527931694c945fa3b63d3bd75958ee3a647a151679d30bafd48ea56d77000854d3214b5d14e16aac4b468b1c2b847616a97868d96c3d0539b50e1cfcb8f5ea5bc2b54e9a5ddeaa487117ca02065344b6470d1e2a154a995031c127ba8fe8aaa7d29ce5f9ca912517d4330cfe4f3ccb6de3cf42d7a92bdbd304673dc0a08ddfc85dca5cd270fdfaf1bcf4b4d8c8162920cb8b9fe2fcb5f0cfb0ef773321cc256c28b58f8b3ca65441cea4bacab4377a6285aa7e466c8e37e78af83074b4d2e5d59083f45f4e103de23a191f3885e99f0d1942f6274e08dbc4ce7b5b0dde08eabd0d96bc530083d86a1dcdb2406720087ec29e2cbaf49e361500d5bb55d472b15f88604b62e9d6806c58df44e0cbe9bf9e33a772580707daec63615d956d0674d9b97f43b678c145fd4d7a1f31cd9de62538fd6120bbe679daf8b07ec9df3e024c9292f441f97c75fc9337d0ccfc5cd775fb0c204471179447ac40e46cb3352c022b48abf6674b006fc25a0835819cd38b978010dab4119d2941b08c79a5ee09d317ccf625b4377a1c800b2f23d507c7c996be1fdcc1f219e8a2b9b114e71a015d898a62922dbbf2baed9e265ab05701758ec52c8fcb4f02ddfd75ca25c4d3b4a6c04e6006d1aaf1355d0bfc3378887fc515a2699b7a9eafa8472aa8e539d36d1c18d2932a318c943cac022704e844054f7696c30959aed900d9b706fc8e9311742882561edc33929537e63540a3bf1b0b42648f81d89789cf61ac66401a7f507fffca431aff127476cb27b992fec51e7b67d46180ab7e9e3d2ef96e29ba790d1f56769fb40d24d5e2f7ec09422bc443eae717b482bff54c2131b89d90a01ec32aef2d756dd8d0bb4b85e8173dc4a170917d415f25ca73fad4fe67c87f3589f0a7ade2de25bc1fbee86fccccb8fe1c04b24b7fa56262ba71302b9d08e819c062897fe5597dba6b3a8a006cbcb8682bd0496ba7b477ddc70c247b1558b5435afed31174bef721f166d610097419619040987603250932ac7df59c9bcc9dc05751dc8f7274da98758f6b9dfb0271fc63f338a7b8b590e0215c452b243648d10db12d050621ffb0adf0a7a49381bb3308f6961fa7c9c2ad141a1d8e675bea138894ac8f37c4de921679c3e880e4ec29ba8d6ac1f5f29223dbd642f12735989be8832b122327620484e8bb0ae039d64ac3f7cfbd833093524339d6b8b241ddb4dd23cc4a32799d584061a5017699687960bdf7d161867d74b3bd1eace37e8443387b2911c0f8d7e60f70474e1d99951d1bae29a50e039a0b35fab699ee95abf60168974540c19fdfd8b60467fb6a0544f0365e95a02aca944fb3e7cae4d96fed942efc91169e1cc2dd36cf7e844bd95217e69654214f7308be1aa7869d8319086a6358646d29da40adc9fe00ccbfa2a48721e89bae4e35ccb15d31254e0fea8bfdc07dc2094ae34cd3db4ae4527ee69fd2833ff23296ed4fb28aed1d6fb8468ee8afb7e57fad9b6d9e4978298a9ad372934daa4ef9d23e7d42bec0ed90651ebf97d6a63c5520241eb8188345182c1ddca038f9c2d52c8010dd84c17211ddc86a5b37205214a10dc6e5d871bdedf3e49ccfe86630dab45135e110c25168b6b3e8cadfbcc2157c868fe92a894666757c4a62b4e2fd7241a455854c9f40bd47540e2b3b059f44c310bee118f1a2a230c16f3aeb50aef9c281942cf9e8bd058b0a23071a258c0b0d039b4f9a39cfe2219e115d26ab3ef03b6890bdb134374604816342be937932470c92c6a78a74535582360c1dafd80acf8b94b1ddf49b08b4d8630611a1cef42b09a1073c5d9ee10777155c462b24778127aa58f757603c07c2419ea694b4b129b7dfb6899bf791891ad6ce8026bb0b89e048eb93e613f6275b2bc470dd1dc3d36ab40cae5cbcf0016281b3cf7e5ef2e601457afe43a77b61fd2b8dcd3d00e4d5dc2e00852954f3cc10d161f256c71cd74f22e10367d918d7076d317b789df4b94667afa5f8423655df6e7634a1b1b5a79f61662c1cb07bfe1065cd8ec60525d545283e4057807a94911706fbf988d0d71554f7b7d0a4e480e59e9306368327971bc2f5d1fb5e566d056ae0feec87138882b7586d471c4d6765d68c87376c37c7227801050051d0dc219c116c63a27dcc52428d7d407909fe4c839fa462ef99a9af644ab645ef050ef9c89965a741f8bfc05855ee07417750f40c4459d842c3944405e02875dbab1659d92734fab604243175fa5e10387bab91853a27e593e4e5ca8d11e994b2d299cbe34dad0b8b6bf9a01c113ed3aacbda8d5f42309288a9d532d421c4e295266100d0aecdc06f96d2258fb9eea3980d3a5af98119d8d675b745ed6b592df174eb4a9abbdcca716f33368926709389a8541577441c71f7d2d9c65879ea7135dc99dbb09dc7509c32a6e523adffb2685d43ffed4f274d0e2ade9efb2d6974be98c91cb486fa37113779ccfdd2b82363140a56cf4a9dc1010399186ce1e1b3ad92cab1c78b6f85aaaddb1da7c5a146bd9925ea4dd8170ca8658e8a345a7f20e3a9ca6e866fef525bb21a3edb5e32734a7a103100e3bef1b34ffb5a0ff28ebee96315625233f097c87d2c2501b7155fbcdf2c799c97bbae2cfd10b7f81c84d2638efde19ea2eafff06370797b6b05859d66abfcd2f4ee7b00b7749aa7596edcb4b143f0eaa66d550a09d1808bcb79241f9de8a29f76438272984eb1db1854e634222811297aa8d5e36055ff3080526d2419cf170f0a98f98d45dae74237822c838b0ad6c846c37b64ddd31e4156bd92ed96dac5697edac735720fd4e6a9d654a6346d1461dfa6ee69e5790080fe94428c969f374e30ff972cca7ee07ca2cafb59b8f478cc04eb4e76a9a3fa7f98fd922faba22f7f555175aa7ff3045be71c21c0522a3df148d29fdc7f7be282eb2b2304638f68018ca5727af3cddd34ac5991cab87f7a12ffcf46043bd2b3b37d39aa0c51c8eceed96b5ccf90a0a42706b7672f9801c98b08fb5e2bf9505244755dfddb62da81804305d9989a12d4c432b0f58aab5f7495379b3074c077cdef9660b05405a65035437fb0189e4dd661b34155d036f7c1cad371f98796c9c3ab39288d61e0b4ae4c505f3cb9c92ae31119150440bde4b264bd16246586e5f7f9810a2df85e186a18f9d94b243a0fa740063953b84e96ab74373f495e07979e8dd54c6f62e08f67967ab87d63202a666cda2c85b678e13af22afb70075f010707ec3554a4aecd6bbde976e2214f6ffc736909326fc98653cc46a6eea8506517b15b9a847e0451178d1895e0cabb1e760feb60eabccd8043effbc3b7a9f3bfcbafecd0bca6d40e4fc5afc0d14a9e543e949531e73cd60290775e5e150aaaad4869c84d750055834fa2a215a3c3b98484adc39540a7a5d060f07095618cb3d8ee32f6a6fa6f9add605754294e80701b87bf7e544a136967f88325db472e45c44e8d7612fe35fcaf935986829ef6974dc1df300b8c1b5fc15251364f509f2a42a64e169eb26becbab7a6533817dbda218d51685dbfdf3c4f0211864fe354f5ba9a73b92b58f0a1f13622b7b9b1e1acb872b7e2bc81918bf2b8e13e509bddb9205ae7be47509e858ff1448b2389b6e247443e8919b9dfae8496b28164dac0f46eb15230fbf6c94a8eefd2a70edb60b7254cc088b040b8ec19b2f73307ffc643bb9e75a32eec805c05ce74ee93ef8128d33b6d7ae72a759a4ddb53b1fe377aed98d3d692276192df0681e6c9d30995fdaf093085e90ec72a9274977442f1223f9b076fd8e799a3360ed1ed96e210545a900d9b8c8870b3ef15ef60279b2e8a5223ce05f928609bdc5656d2ee81aad8cee9eb5545de429636c63b9c54e4ad9746ea92373d2ee6eef6e042965610e8eab2fe06d8fe0b295dcb6050ef4283add752a71124b218b1c5858c844691366882a1cc1b4eb50efb8ee763bc0a93b04048ab7063ace0701e6245393e09417a0964079c3174fdc3880d8338f3ae5baf89109cda40c549b71118f8199d908ccc8814cf9caeb78c83b44560f5022612f06ce2f756b2210df712214853af2dafb16a20f1aa2878a129e4646296f7f96f5f9b4f832fdb28a3ce8bd942060bc4ca931f86eae90b3de0c4962a1933d3c88cb77b5afb146064ca0a671218421f8d2d540cad41b6abf3d0c3a367247afdccb14d8c03132540f96b492e45c13edb9e21f8e5ccde90b76336e065379e6cceb531048b55851753b3a3bade97198668deb1f7a8661ccb9755cc7dd68cbe57d0b22bb79c9cc3a031fd7ef97bc43b2bb7a51991041df2da678f78fc2c1b2d7e10a922d864ad47f05a9260b343f83e7bbc438c31a7d8966d5093b86c8c7d23988a7459911a34a7adea4813af2e74c83bde46e7728a6331292ba82308964d68fb2b23df6f207ecf6a0f68e2e47456379618bae0c4d2199b6a0e95de8f899d140034ee7d4b8e24404c92e6c0f1c869f353db821df9157d97c86e64415dae3a5ed9b98c28a45413f49b3c3c39d78ee0b909057ad66717337f47d5e9140bc3542bcb3a53942c1b5069df2c4f21bc43ff6cf2efec60a1cfb4d74f92bae196bec8939c928c9d5872d265b267498a9873453d205297893a9a89048e47d99db181092a8e1ddc20a31ae802233a703d66210c9a904566943c0bf62cd13cbd85efac6ada2a8cde40471b5641c1df60b8d99808718450fe2bccb0339732469f70a3497abe7a17102839c9eec328a48dc29f5b825e662ee084417ccd33ae86e9543c0df9d4182a21ca9449dd0a434eddc1d4ce1bdaec42bc5a48f2c24beab9c577de735bb9f4a0ab6a210c7d89ff17ee05fcf1ced7520a756887b096c072c08faa49ff4ca2e7013632a609b158d88db71b5275a654fb694558b1b924afa353c8bfed1deed6bb30176a434a0f8a3269e3e0272d0ba7dbf8ea04ff4c0cfa9158cd780521a69564ec5f4bfbf052e4b27836896d6f01cf9f615c20bcdf5dbc71ef470e21c28c7810e8de4e0494959e65f312e305c39a4c491c4b312d505b9ead160a33e0ce4587985cf6b4213f1f1b6ccaa706b4356ea9b5c9add72514fae7f82416411e1036743f398103b622364aeae6e95a4f3a63002759c808d1a0e5b95a7e710a982b19da2f185a9821dd406e64ab05e2d00048258cbd43b2ceb23cb771d2c6daedf0fb99ea966495bef639b3a57d1978bad6b2d676372cdd12faa3ebd992cf5b917a156761c6630783bb5843abbbd33ed8bec887812de9a8bd093adb8381b0c0b2a0dea27f1f49b57930888ebf0c35ad33445484ee7510db3d5ce57a98c7477369c4410cdcc9753593248d588c7819bf416f15f971e709586179881a5217b99437a8cdda882b8a0174d0d4f8f9ad291f9c017b957e8abe46663813dc734e071ea659ef65869db1784c7db93bcafc38c777e03b387684bd9783d5166fae27ac3ec57dc90b3c41660649f87aad4e42afaeb4634d57c7d7c2bc9d4026c592c3839bdc5964f11e03796b22b9a209f4cbbbd82ba5c6a91f96ad96a3180a11aa2231f58f3adb73b26bfd8bce25f3fd97d28aa072f5617feae9c13045f28d6cfa45eebcc235952ded875f65a700bdcb9066556eb614d87c96424ba58350ee06ca940f104cd292e0b1a2f87df29b147e296142858ecd7acae43c7a91a73c7b7347848314218ffd48249ae032e8bae6e49187cd4364389c93165232fce629e400191b2263bf8d11fcfba719b06113d160a809330c0adefcc944cd843bba9880774cc1", 0x1000}], 0x1, 0x0, 0x0, 0x10}, 0x4801) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001140)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x5, 0x7c, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x700, 0x0, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001280)={'syztnl1\x00', &(0x7f0000001200)={'ip6_vti0\x00', r4, 0x29, 0xfd, 0xf, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x41, 0x2, 0x7}}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x640, 0x438, 0x0, 0x0, 0x158, 0x158, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, &(0x7f00000012c0), {[{{@ipv6={@remote, @private0, [0xffffff00, 0xffffff00, 0xff, 0x7f], [0x0, 0xffffffff, 0x0, 0xff], 'veth0_vlan\x00', 'gretap0\x00', {0xff}, {}, 0x2b, 0x6, 0x5, 0x8}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "ff64", 0x1}}, @common=@mh={{0x28}, {"e281", 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0x0, 0xffffffff, 0x0, 0xff], 0x4e22, 0x58e4, 0x4e23, 0x4e23, 0xfe1d, 0x2000, 0x3, 0x0, 0x6}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0x0, 0x0, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], 'dummy0\x00', 'batadv0\x00', {0xff}, {0xff}, 0x32, 0xfb, 0x6, 0x60}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@private1, 0x2a, 0x5, 0x3}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x42}, @dev={0xfe, 0x80, '\x00', 0x11}, [0xffffffff, 0x0, 0x0, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xff000000], 'veth1\x00', 'wlan1\x00', {0xff}, {}, 0x84, 0x80, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @empty, [0xff, 0xffffffff, 0xff, 0xff], [0xffffffff, 0x0, 0xff, 0xb6e20e79544ea7b1], 'erspan0\x00', 'ipvlan1\x00', {}, {0xff}, 0x16, 0x2, 0x4}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x100, 0x8, @ipv6=@mcast2, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000001a00)={0x4, 0x0, 0x4, 0x3, 0xf}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x80, r8, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008080}, 0xf5d76fc0f45efcc) getsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001e00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x4c, r10, 0x100, 0x40, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000001e40)) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000001e80)=@generic={0x0, 0x1, 0x1ff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001ec0), &(0x7f0000001f00)}, 0x20) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f0000002140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb2, 0xb2, 0x6, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x67, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc, 0x5}, {0x10, 0x5}, {0x8, 0x3}, {0x8}]}, @float={0xf, 0x0, 0x0, 0x10, 0xc}, @enum={0x4, 0x5, 0x0, 0x6, 0x4, [{0x6, 0x7}, {0xd, 0x4}, {0xc, 0x7}, {0x10, 0xa4b2}, {0xb, 0x5}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x79, 0x0, 0x13, 0x2}, @datasec={0x10, 0x2, 0x0, 0xf, 0x2, [{0x1, 0xf308, 0x63aa}, {0x1, 0x0, 0x1}], '`<'}]}, {0x0, [0x61, 0x0, 0x61, 0x30]}}, &(0x7f0000002240)=""/142, 0xd2, 0x8e, 0x1, 0x400, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002440)={0x11, 0x20, &(0x7f0000001f80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x4, 0x1, 0xd, 0xb, 0x3, 0x8, 0x8}, @ldst={0x2, 0x2, 0x1, 0xb, 0x5, 0x30, 0x1}, @jmp={0x5, 0x1, 0x1, 0x2, 0x2, 0x8, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002080)='syzkaller\x00', 0x1, 0x41, &(0x7f00000020c0)=""/65, 0x40f00, 0x20, '\x00', r4, 0x0, r13, 0x8, &(0x7f0000002340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000002380)={0x1, 0xd, 0x3e, 0x7}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000023c0)=[{0x2, 0x5, 0x5, 0x4}, {0x1, 0x1, 0xd, 0x3}, {0x1, 0x5, 0x2, 0x1}, {0x1, 0x2, 0x9, 0x7}, {0x0, 0x2, 0x2, 0x1}, {0x4, 0x4, 0xb, 0xb}, {0x4, 0x4, 0x1, 0x5}], 0x10, 0x8}, 0x94) r14 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002540)={0x0}, &(0x7f0000002580)=0xc) sendmsg$AUDIT_SET(r14, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x3c, 0x3e9, 0x200, 0x70bd2d, 0x25dfdbfe, {0x40, 0x0, 0x0, r15, 0x2, 0x5, 0xfffffffd, 0x9, 0x0, 0x200, 0x6}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4001) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000002680)='netdevsim0\x00') close(r7) socket$netlink(0x10, 0x3, 0x17) 1.778984048s ago: executing program 4 (id=3045): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0002002000000000004000000000000800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x33) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r1) (async) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="100025bd7000fbdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000008006001100050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000e00000006001100460000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b009c0300000600110001000000080001007063690011020200303030303a30303a31302e3000000000080003000300000008000b00ffffffff0600110002000000"], 0xec}, 0x1, 0x0, 0x0, 0x44180}, 0x440c0) (async) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) (async) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0200e8", @ANYRES16=r4, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0xc0}, 0x800) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002380)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x60008080) 1.778561741s ago: executing program 0 (id=3046): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x80}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000060000000100"], 0x50) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x24058814) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x62040200) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000080) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1.697233018s ago: executing program 4 (id=3047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl(r0, 0xd0, &(0x7f0000000040)="dd93a16f5d54b18dd6801000") r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x1, 0x0, 0x0, 0x9, 0xcb, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.558994676s ago: executing program 0 (id=3049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="3bb57049500e3a4500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.542915259s ago: executing program 2 (id=3050): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe32, &(0x7f0000000d00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "d5e09e", 0xdfc, 0x2f, 0xff, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x29, 0x1b6, '\x00', [@padn, @enc_lim={0x4, 0x1, 0xd}, @jumbo={0xc2, 0x4, 0xc}, @generic={0xe9, 0xd9e, "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"}, @padn, @pad1]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0xe, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0xb}, 0x1, {0xffffffff}}}, {0x8, 0x22eb, 0x1, {{0xf, 0x2, 0x0, 0x3, 0x1, 0x1, 0x0, 0xa}, 0x2, {0x5, 0x200, 0x2, 0x9, 0x0, 0x0, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r6], 0x20}}, 0x0) 1.513123584s ago: executing program 3 (id=3051): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000003c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000003c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00'}, 0x94) 1.386520491s ago: executing program 4 (id=3052): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x155f, 0xa84b, 0x10000000, 0xc0a, 0xfcaeabf6}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0x3b, 0xfd08, &(0x7f0000000180)="5ae02efc442000000000000000c723fa03faf2acdc0f9d5af8015b0abe92772c580d85e0dfa999ceaef773ead243c07350d9156d0ecc6a43edaeaa20fbf448d756e97a49901cf5", &(0x7f0000000140)=""/24, 0x0, 0x0, 0x37, 0x21}, 0x28) setsockopt$packet_fanout(r1, 0x107, 0x18, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x140f, 0x300, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4009051) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x7, @mcast2, 0xae7}, @in6={0xa, 0x4e21, 0x5, @private2, 0x78da}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}], 0x64) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 1.385950558s ago: executing program 0 (id=3053): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x20000070}, 0x40000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async, rerun: 32) socketpair(0x22, 0x2, 0x11, &(0x7f00000001c0)={0xffffffffffffffff}) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f9b7b5acfe1e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000002200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT=r9, @ANYBLOB="0100000000000000000008"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x27, 0x14, 0x0, &(0x7f0000000000)="52e12be89f1a3b7a479dd8bd88a8", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x88) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) sendmsg(r2, &(0x7f00000022c0)={&(0x7f0000000000)=@hci={0x1f, 0x3, 0x4}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000000080)="a50bd44bcda112ede6e380fd8b85d3d5e9be8fd9bd2211f06407547f86bec58c2fba1614ae7858160a06fa3a780aeb47b5c61c35799a858b41fae94b46b6929726c965eac5158c07662eff35c8dd1aba55ffeefb4a32fb564a", 0x59}, {&(0x7f0000000100)="49fae6d0e5c33068f6a123c71830bbfe365428b5092265002693709cf09d5173c61c9700b4abe416288856dfbdd7bdf1b2cb8cce060ee7c48657a0099738bdfe05303375789bba5ac12a03b10144c6076379615ab21f81f65be2423902fab179468f457dca571b6368fa25", 0x6b}, {&(0x7f0000002200)}], 0x5}, 0x4000) 1.269350586s ago: executing program 2 (id=3054): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="d8b615aacdab519d63944f927b201c84b828a3d192acae7969505ba524984372bda8494ded78bcbf1483a8e2e3d4dcacffaa21caf2850d2a170a6a3775b2ef97173848f90f761c4ed9c7e2c775d9ca44b252fd0b9fcb0fe6b4a923ee33f480626f56e0b345882f48b309e3902eec3c4f7ef964ff6dc85466f97c2863bcd42092fd738614832e92d339f6351c87cb292a896bdad41c1cec9e5b5a74d74d042b8df87aae81900dd25ce501e803c066fdf03951c29851ce6bac08c78ea96db84fb80361667bfbd73ad63fa1f963135f6e352322db79a1d4ff0db99f95fdc9a83bb1e2434def49948a6b246c53c0ab5d7f3e5cdcc79faee30788d87cfa0a3881fd679d146b522630cad2840fdf1e05b035013c0a1d96e91daaafe4e354b20f00b0e48a9c1f4f0a661343153d503d080e16db3f4079c83e1f47607dab39794be6310df69f459dadab84e447828f0a3804a8d9018dc8e73ff9b7da902619e99a47d880081a9196f4b5fb52798d5c6a36db0d5383891781b449fc36ab7bdd03be04d542532ab4b3c0dced15b8d6fb44efe4a96a868ed3eb86a7718ccd5226acf4ae1a5f8bff145388959780290f3c1889a356f9a87f3777e420c816782141de4e7ec22b004e8a7388c5a9b2e34067151f0ad211db47f794af59abcd6a9afdf50599905188c861dbe2d4a8e6139cb46f56e267be93d081538f4a681e68f28942f96922f3995d2eddfaed236eb48cf2971021491ac75a71c18f33e1191694ea71ba2355c10ae93f970bbb42e6377eeb48517d7529f8786b93c24f25a75ce1b4ca6f20ccedaa8b2310d8a272fb0190ab6cc78f34f8648d4893825391593ac18387e57d9580901638969391971b6ee0b99409b6cc91a9abeb2443a32f64a3d5328102794dcafbccd605fa700911ba545dc0d79bb0d5ec74f5a639cd07041f220e71f6df7bc1a3ce87e361a2f64a54af199b86bef3cdb2890ab41e987b4b2a4dfe6f0d0905c54f88337dff14697c205cb270ca8acd4025644df83cdc2ba22f0ca323e93f9dd085615c7ac2422de5c49fb684c12ec31abd629c7ef8ce73044088740273827060394252116161a74d1f50f64aa9f6595b455bf67fab65992c3543355f4f60d94d7c2ed66c99c90921ba10f7fed1285879e3e662e06c0bc9fc86cc7bb4f08c2e576c4568b4274dbb4913b0a15f27ee5f29c9712ad1f3e02b4b77fc9be3eec4f6d20dd0e06fc34d2616681adf89381a7fd28aadad22b33d407cffc392c894ba9b572dc8fbf58a56e744a2f3123b9019558c0b7595152542d086bdf4cea9a609a9a6753211a251bdb14e87af2d47769eb87d4f6bb5c7dd197d86716d98b4e35f3ffce74420ff691aebf5d986b7344b1a5d884f670ae7c7fb4b14f8fd5f71749fcc206bda170dd42af2e4792b50930893aa235e594de22133cefa37ea4cab33db8e4f19d1b52513904f9c147da1fda5ca7c18e070b9363229781f6f612e44c86b2259aad0cf7e4454177d6c9d58546a2272b59573c285c6449774bcb706fd97617ae14145c144b515f1dc983b3cd297584bc227ee98f7fe906b243c9cf29ac94ae2f886f74f24bf164edfd86994ab0438dfbe2c7f916fa2a5663caa538c9aac8edc89bbca45b8ddf62478faea0be4460ae493cf995cbd45b0fd432657be825b5c0700172f856db7983dd21668609538db010d34bdc594f6e317ec0f0a3712c40c1f4894870149587434ec662b02a26bb0f0e8a7d26863a2997f8eca0c08baae98e55955256d0558d00d056956bd360c2575b895608150dbdb2e1207879c467284544ef1e53caf85187e23aa5186d36927a841d92486d4be8fdc7aea12edae07aa90cca113eeb84a9ba6997b22d2f8ce96ac48bef8c80c5b70f7478910c1429408f3f716f2ed84c7f42a5b13733cc72b5b7c3744dec3ba13281932650c3db05407b8840479fffa59a5de8b7432e79c9123a628537c77fa8a584284220dc9e30cde855bec02eb2a39acc7204da2515dc20407bf6f1dabb2c3a6f2aa45769efc70756150d9374d830a01f910f3c7b6e670ba85d1714101784de2e4b5ceb14c4e5a2fad0fde142d89e11cfa7f07ef936f2c43deaaf641aab58699f133aff9f3965d06071eb1a2c8f3b989de2182dd4798d30424f0ceea3b92472856cbf937ff643fb6cceaeba703d30e8c2ab6c134ce12e52b02a3baa7ac19c8039eef9143056a32a8239085f923efefa985b501a14638c96433df33abfbb5b496b09e96da9347989ab61722d6069d364d557172d9a4c9d53f2b515164d50fb896ef6246601e6fa2baaa9609fa03d74a63c52db0060ae27ad11f99f5beb03224d2c54deda376af08b37d51f823fbbc4fa2d6af217b6234067e931bcfae88b26fd02083d8539fe8bf3ce64805316261c7b5838be582483554bc37893e722f4b13752536ade661803053b30cc9c166c08f9cc2bc1f625d508739edda8e6f84cf2e4858a4d3938940fd08cc99743bfa88acaa12ec1ebbde3aa1419ad7b70d5f0ea3b6cd0478405fa3f4db043c1f5458f22b85fb6d335acc384041c300a8b03bf9b625793ac1f846931e0473972bbbf0058efdef051a93e5701b2391ca63ee5cc6896e384fc1095bf5d1aebe8905a1b05386c29b1af55411a06c0d534c78a327e179655f5cf90f20164e298d1d378d135b2736b999b3cd3488974bfb83ba8fcfc26627ddb0409db5118d0a9dc1ace377fbceca6b4170bf9b4446b4fb3b49c12f562c47e95fc0e2bdf73cf976aa0dbc334fa79a2c34f6141acb433b742a26c8eb7589e1e7e89822329d3d0d403c023e6c89f1f1009a689483f2a3d77b068840bcf119d220e5cae946692e0c95d9dd7a9abd7cf569a64724f04c4504c83cb720edbe2f9f545762bcb74eaf0291730f04916a109dc6c1cb2f26d05e79ac757e21cda5d50f3ac91e7fa92667ee51a115d53a1d15b0a5802a556773d6fcae6ad9d671779f80319fff0e2a43772341436d2ce2154f6790ba2d09a12ff9f69f8d734034f87cdc8d9551f4b9515638f83ef37b76356ea31b2191c821054150cd47c5e4a7db5ec6264adcb9376631badc817dde7fbe6becdcde5187d67f76c0ead16ca8992c917e69021c030634dffdcc1e11505f65a482b85b3964ac9236684bc70ee3cbebe596fc72951583bd85eed27d242aa036d84f0f98efa305ac6f5da635fbb370905cb73fee3ddf448ba62029742984fc0b93ef8241602d1d4de8c2286487652d0a8d9c7941f9e60db0882b4dcd6d1981b573b22a3ad9abf20c0be78bd0e63f50a5df36d474a72db0572311857637e4e15d4198cc5a2c7bd0306054c8df1199a568656e557913b495657ba39623a6d35e1e21b16d4f5bdd49cb8412faf950cd3b86cc1d6c09fb8cad950afd32bfe1cc335f7d774ac1ef1e2df9931a38a0ef2f752c5be7dddc19d75b400ab5e7f803b5e936d94ecb41ddc22a538ac3853f70d9a4082da33b9ee7ad7ca72d344aef721dfc1fee2d985e562da37242324944c13831d8ca03deb16a597afabbc3858255213ef3229f30af40c99e1b0981728d0cf3ed075eb6ff4f35a4b592b70c1e531972ae3e5bc7f8b0add9248a40a25c733559da29537c4e42231d245a475e6c3621bab4d4a4bad1705514b151ecfc567496598f0b965b9bc35d0c492f194b238e0e52c94297e0d03c082a20532f9e180eb6f3d5fa2f627d974373e5ff3cf52da659ac56215ecf149c9d0400db6a44df4d4494918dbd7609cf0c132cf8cd16850afde2374b2393de3739215c0c0fb773b0e0af72096fb8416841994494e7e4bc4e75294c8add01680731814b313db920c0ce742d89b70aeecb4f0706a276cb06f26c52eff370bd5e68a888dd759dccc2bd30a61679fc7cc3ea530f7ffa", 0xabc}], 0x1, 0x0, 0x10b8}, 0xff00) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000020000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a802000048014000500"], 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000100)="93d90400000300", 0x7}, {&(0x7f0000000140)='Q\r\x00\x00\x00\x00\x00', 0x7}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000305000000800000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000004000001c141ebfd43df42d950012800900010064000000000c193200028008000500815e25ff7f868e3a24"], 0x3c}}, 0x40) 1.246385729s ago: executing program 4 (id=3055): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r0, 0x10}}, 0x20) 1.190245235s ago: executing program 3 (id=3056): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000000)=0x3) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl(r3, 0x7f4, &(0x7f0000000100)="df966976b0e8d0cf9fec24214386d31cb04bf03daa9550c567c383c5a4fa01f90c0c768d387db7933159ab7c9a58f3b15d33e0997d9eb36f2c90a87bb251141ad9ae2aa7515756a703079955dde95b4090a498ea8ca00d63416ad8ab0a25e1236720909483d7eedac26a9aee22a6841e3ba13d4d5944df1b7af54edb89041188654a1c51ecdbe261ebd824e91ea19fac65de8e3f47d8b3a45935a6534ca16cf38ed713ab303a43c0edef714052426689bfdc23df09615cd3e17ca0d5d4eb9f631d4e1816ccccf3fb3e29b8") (async) ioctl(r3, 0x7f4, &(0x7f0000000100)="df966976b0e8d0cf9fec24214386d31cb04bf03daa9550c567c383c5a4fa01f90c0c768d387db7933159ab7c9a58f3b15d33e0997d9eb36f2c90a87bb251141ad9ae2aa7515756a703079955dde95b4090a498ea8ca00d63416ad8ab0a25e1236720909483d7eedac26a9aee22a6841e3ba13d4d5944df1b7af54edb89041188654a1c51ecdbe261ebd824e91ea19fac65de8e3f47d8b3a45935a6534ca16cf38ed713ab303a43c0edef714052426689bfdc23df09615cd3e17ca0d5d4eb9f631d4e1816ccccf3fb3e29b8") 1.155961406s ago: executing program 0 (id=3057): socket$inet6(0xa, 0x5, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0xa0}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x79b2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00$'], 0x50}}], 0x1, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xff0f}], 0x2, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r7}}], 0x20, 0x2400e044}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f0000000540), &(0x7f0000000640)=0x4) close(r10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40050) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x3, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.054545764s ago: executing program 2 (id=3059): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) 1.007402016s ago: executing program 3 (id=3060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x3}, {0xa, 0xfff1}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x0, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000880)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f0000000000)={0x11, 0x1a, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 810.993008ms ago: executing program 1 (id=3061): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @remote}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x4, 0xa, 0x505, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x8044) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x500000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000440)={0x1, &(0x7f0000000000)=[{0x45, 0x3, 0x82, 0x5c6}]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) 801.345893ms ago: executing program 3 (id=3062): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, 0x0) shutdown(r0, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000740)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000010401030000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) 797.401944ms ago: executing program 2 (id=3063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r8, 0x0, 0xf00000000000000}, 0x38) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x21}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x200, 0xfffffffd, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x8080) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x64, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x92, 0xc, "71169ca2d408d92fa5afb88125223ce07321fa4399af9258790b09902c32fae06223e2b0179751114265f341af5aaa09154ad05646722af665cabe9d5ab533b2cf669eceed49fdaaa7498ccac3199ec5b01e394ed9d6282f8927da186768016f9dac99b5752d2952e844d2f8a862b5a66cba9b49204a7484b501034bc018e78b422d4e6e104840a5d1f9179f3883"}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x14c}, 0x1, 0x0, 0x0, 0x80008c1}, 0x4040850) 560.436793ms ago: executing program 1 (id=3064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000689e0000000080e3ff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000ca2b4b398797cde8bc64a562606b1ebfee43aa80efecb93d9250811d52daae36a6dca5e5f17603b82694346d5da005f334ed2f09109a833c4e919ff6b183e043c1d54c35bfd181", @ANYRES16=r1, @ANYBLOB="00042cbd7000fedbdf250200000006000a004e21000008000800ac1e0101050004000300000014000900fc000000000000000000000000000000050003001600000008000b00", @ANYRES32=r2, @ANYBLOB="14000700ff02000000000000000000000000000106000a004e240000"], 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047452, &(0x7f0000001200)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r8, 0x830b318aaeefb05f, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x2040010) sendto$inet(r5, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000000020801040000000000000000070000070900010073797a31000000000760938b7eb4121f5da1ea1429a6656ea09b53eb9aaeb097828191aa5ff85aaa82444e5500b2bebde35ddafb6b54514e40bd8e14eb147e9222697816cbf018578aacd48283033ad30c93e972db1c7962a79dd78f0cb5ac1baccc56ae60ab4110782ba2cc1e60f88d9259d6df3aea214fc4ba25033a34766407c7201b1ef57eb392fb5b883d13621ccfd24883e5237c2255444e84"], 0x20}, 0x1, 0x0, 0x0, 0x20014840}, 0x20044000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091115d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 367.296322ms ago: executing program 2 (id=3065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000680)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x39, '\x00', {0x3, 0x6, "1ce142", 0x2, 0x89, 0x1, @remote, @loopback}}}}}}}, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={0x0}, 0x118, 0x0, 0x0, 0x5010}, 0x51) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x15, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9, 0x9}}, {0x16, 0x2, [0x1, 0x9, 0x9, 0x1, 0x4, 0x4, 0x7, 0x5, 0x7]}}, {{0x1c, 0x1, {0x1, 0x6, 0x4, 0xffffffff, 0x2, 0x78, 0x8, 0x8}}, {0x14, 0x2, [0x9, 0x7, 0x200, 0x6, 0x2, 0x6, 0x5fcd, 0x0]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) 230.392684ms ago: executing program 1 (id=3066): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000100)=r3) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x1022, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 27.396023ms ago: executing program 2 (id=3067): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) unshare(0x24020400) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'ip6gretap0\x00', {0x2, 0x0, @initdev}}) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) pread64(r4, &(0x7f00000000c0)=""/29, 0x1d, 0x4002) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 26.598555ms ago: executing program 1 (id=3068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000867700000000000000000000850000002f000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000000081d5c7f80c857d", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x268, 0x0, 0x5, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x3}, 0x7, 0x1, 0x5, 0x92a, 0x14, 'syz1\x00', "69af98b9651b502387bd470445edb5e5e6f74c0cc1e7825d90343bb7a1e89815", "82a6ac709cf3b8ce2941544b52a43fba97aee3818a3aac4781d5a7d996194821", [{0x0, 0xfffe, {0x2, 0x8}}, {0x8001, 0xf, {0x0, 0x6}}, {0x3a, 0x9, {0x3, 0x7}}, {0x83, 0x6, {0x3, 0x4}}, {0x8, 0x2, {0x3, 0x7}}, {0x4, 0x3ff, {0x2, 0x2}}, {0x6, 0x4, {0x1, 0xff}}, {0x7, 0x9, {0x0, 0x10001}}, {0x3, 0x0, {0x0, 0x1}}, {0xff, 0x800, {0x1}}, {0x70f, 0x3, {0x3, 0x2}}, {0x5, 0x2da6, {0x0, 0x4}}, {0xff, 0x8, {0x3, 0x3}}, {0xd, 0xdb3c, {0x3, 0x3}}, {0x1, 0x7, {0x2, 0x7fffffff}}, {0x8, 0x0, {0x3, 0x8}}, {0x6, 0x0, {0x3, 0xafc3}}, {0x5, 0x1, {0x1, 0xf9}}, {0x400, 0x9cd7, {0x2, 0x5}}, {0x5b9e, 0x3, {0x3, 0x9}}, {0x0, 0x9, {0x3, 0x9}}, {0x3, 0x0, {0x3, 0x9}}, {0x8, 0x1, {0x1, 0xe77}}, {0xa3e, 0x3, {0x3, 0x41}}, {0x5, 0xbc82, {0x3, 0x10001}}, {0x5, 0x5, {0x2, 0x4}}, {0x80, 0x8, {0x0, 0xa}}, {0x9, 0x1, {0x3, 0x7}}, {0x3, 0x0, {0x0, 0x2}}, {0x3, 0x5, {0x1, 0x3}}, {0x6, 0x9e2, {0x1, 0xcc}}, {0xb, 0x7}, {0x0, 0x9494, {0x1, 0x5}}, {0x9, 0x8, {0x0, 0x3}}, {0xffff, 0x5, {0x3, 0xffff}}, {0x3, 0xffff, {0x1, 0x9}}, {0x5, 0x2, {0x2, 0xa}}, {0x7, 0x3, {0x2, 0x5}}, {0x2a6, 0x8d6, {0x2, 0x3}}, {0x4, 0x2, {0x2, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000840) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000000009000300737904000000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 0s ago: executing program 0 (id=3069): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a4c000000060a010400000000000000000a0000050900010073797a310001000100000000000001800a000100696e6e65720000000c00028008000340000000020900020073797a3200000000140000001100010000000000000000000100000a"], 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x80, 0x0, 0x10005}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @mcast2, 0x0, 0x0, 0x0, 0x4007}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x28000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRESDEC, @ANYRES64], 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) recvmmsg(r6, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001400)=""/226, 0xe2}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffe000) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="0c000000010001", 0x7) kernel console output (not intermixed with test programs): T10285] Cannot find add_set index 0 as target [ 216.887245][T10279] IPVS: using max 31 ests per chain, 74400 per kthread [ 217.315586][T10305] raw_sendmsg: syz.3.1064 forgot to set AF_INET. Fix it! [ 217.390988][T10309] netlink: 'syz.4.1066': attribute type 27 has an invalid length. [ 217.422477][T10307] syzkaller0: entered promiscuous mode [ 217.433957][T10307] syzkaller0: entered allmulticast mode [ 217.801921][T10339] Cannot find add_set index 0 as target [ 217.926743][T10349] Cannot find del_set index 2 as target [ 218.149756][T10363] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 218.249592][T10344] bond3: (slave veth7): Enslaving as an active interface with an up link [ 218.344818][T10363] ip6tnl2: entered allmulticast mode [ 218.383109][T10351] wg1 speed is unknown, defaulting to 1000 [ 218.479889][T10372] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 219.345172][T10429] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 219.507662][T10439] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 219.534840][T10439] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 219.592643][T10448] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 220.186228][T10473] openvswitch: netlink: IPv6 tunnel dst address is zero [ 220.386840][T10484] vlan0: left promiscuous mode [ 220.409993][T10484] vlan0: entered allmulticast mode [ 220.416731][T10484] @ÿ: entered allmulticast mode [ 220.556406][T10454] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 220.699264][T10506] lo: entered allmulticast mode [ 220.941333][T10501] lo: left allmulticast mode [ 221.245805][T10556] __nla_validate_parse: 11 callbacks suppressed [ 221.245825][T10556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1125'. [ 221.284404][T10556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1125'. [ 221.294199][T10556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [ 221.305331][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 221.321847][ T6894] hid-generic 0005:15C2:FFF9.0001: item fetching failed at offset 0/1 [ 221.363421][T10558] wg1 speed is unknown, defaulting to 1000 [ 221.377828][ T6894] hid-generic 0005:15C2:FFF9.0001: probe with driver hid-generic failed with error -22 [ 221.506618][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 221.522415][T10565] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 221.613885][T10565] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.685724][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'. [ 221.737353][T10575] vlan0: entered allmulticast mode [ 221.742647][T10575] veth1: entered allmulticast mode [ 221.750223][T10575] bond4: (slave vlan0): Opening slave failed [ 221.777171][ T5837] Bluetooth: hci0: command 0x0401 tx timeout [ 222.033887][T10584] netlink: 'syz.1.1132': attribute type 3 has an invalid length. [ 222.074656][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1133'. [ 222.117378][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'. [ 222.179481][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 222.179491][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 222.191780][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 222.288289][T10587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.335219][T10587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.575288][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1137'. [ 222.665168][T10606] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.020442][T10619] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1144'. [ 223.070966][T10625] wg1 speed is unknown, defaulting to 1000 [ 223.438227][T10638] wg1 speed is unknown, defaulting to 1000 [ 223.858359][ T5834] Bluetooth: hci0: command 0x0401 tx timeout [ 223.981433][T10654] IPv6: sit1: Disabled Multicast RS [ 224.007825][T10654] sit1: entered allmulticast mode [ 224.225188][T10667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.248484][T10668] netlink: 'syz.4.1156': attribute type 8 has an invalid length. [ 224.574511][T10687] nbd: socks must be embedded in a SOCK_ITEM attr [ 224.659179][T10696] tipc: Started in network mode [ 224.664280][T10696] tipc: Node identity 26f39668f18f, cluster identity 4711 [ 224.683809][T10696] tipc: Enabled bearer , priority 0 [ 224.705090][T10696] syzkaller0: entered promiscuous mode [ 224.711592][T10696] syzkaller0: entered allmulticast mode [ 224.734499][T10694] tipc: Resetting bearer [ 224.861794][T10694] tipc: Disabling bearer [ 225.047434][T10702] wg1 speed is unknown, defaulting to 1000 [ 225.128286][T10712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.340551][T10722] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 225.369914][T10721] vlan2: entered promiscuous mode [ 225.375118][T10721] geneve1: entered promiscuous mode [ 225.390799][T10721] vlan2: entered allmulticast mode [ 225.402059][T10721] geneve1: entered allmulticast mode [ 226.444102][T10760] __nla_validate_parse: 6 callbacks suppressed [ 226.444124][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 226.668085][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1179'. [ 226.755484][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1179'. [ 226.782315][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 226.825065][T10784] netlink: 'syz.0.1183': attribute type 10 has an invalid length. [ 226.851577][T10784] @ÿ: left promiscuous mode [ 226.863271][T10784] @ÿ: entered promiscuous mode [ 226.872263][T10784] team0: Device 4@ÿ failed to register rx_handler [ 226.972957][T10793] netlink: 'syz.1.1181': attribute type 5 has an invalid length. [ 226.986230][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 227.131260][T10798] netlink: 'syz.3.1185': attribute type 10 has an invalid length. [ 227.346833][T10812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1190'. [ 227.356619][T10810] vlan0: entered promiscuous mode [ 227.372165][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1191'. [ 227.383052][T10812] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 227.702351][T10829] syzkaller0: Caught tx_queue_len zero misconfig [ 227.784736][T10831] sctp: [Deprecated]: syz.1.1196 (pid 10831) Use of int in max_burst socket option deprecated. [ 227.784736][T10831] Use struct sctp_assoc_value instead [ 227.825618][T10835] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1198'. [ 227.842925][ T6894] IPVS: starting estimator thread 0... [ 227.915334][T10831] syzkaller1: entered promiscuous mode [ 227.937211][T10840] IPVS: using max 28 ests per chain, 67200 per kthread [ 227.985010][T10831] syzkaller1: entered allmulticast mode [ 228.074895][T10853] netlink: 'syz.0.1202': attribute type 1 has an invalid length. [ 228.146535][T10853] netlink: 'syz.0.1202': attribute type 1 has an invalid length. [ 228.272794][T10864] netlink: 'syz.3.1203': attribute type 1 has an invalid length. [ 228.335005][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1206'. [ 228.393421][T10864] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.416651][T10867] netlink: 'syz.1.1206': attribute type 1 has an invalid length. [ 228.425015][T10867] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1206'. [ 228.530886][T10873] syzkaller0: entered promiscuous mode [ 228.536737][T10873] syzkaller0: entered allmulticast mode [ 228.578580][T10883] bond4 (unregistering): Released all slaves [ 230.683188][T10925] tipc: New replicast peer: 255.255.255.255 [ 230.736777][T10925] tipc: Enabled bearer , priority 10 [ 232.982598][T10949] __nla_validate_parse: 2 callbacks suppressed [ 232.982619][T10949] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1222'. [ 233.019169][ T6894] tipc: Node number set to 3439488763 [ 233.192963][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 233.221315][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 233.556401][T10988] syzkaller0: entered promiscuous mode [ 233.575727][T10988] syzkaller0: entered allmulticast mode [ 234.793067][T11014] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 234.952610][T11014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.962885][T11014] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.982605][T11014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.029083][ T6894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 235.046687][T11028] netlink: 'syz.4.1243': attribute type 10 has an invalid length. [ 235.077925][T11028] team0: Port device team_slave_0 removed [ 235.207227][ T6894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 235.338255][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 235.409179][T11053] tap0: tun_chr_ioctl cmd 2148553947 [ 235.418210][T11053] tap0: tun_chr_ioctl cmd 2147767521 [ 235.426311][T11053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1252'. [ 235.435555][T11053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.448611][T11053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.500030][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 235.756798][T11075] syzkaller0: entered promiscuous mode [ 235.762409][T11075] syzkaller0: entered allmulticast mode [ 235.785749][T11079] netlink: 'syz.0.1255': attribute type 3 has an invalid length. [ 235.806207][T11075] netlink: 'syz.1.1254': attribute type 3 has an invalid length. [ 235.819433][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 235.904028][T11085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1258'. [ 236.134784][T11100] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1262'. [ 236.253136][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 236.290773][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 236.401612][T11114] wg1 speed is unknown, defaulting to 1000 [ 236.413038][T11118] smc: net device hsr0 applied user defined pnetid SYZ2 [ 236.420691][T11120] smc: net device hsr0 erased user defined pnetid SYZ2 [ 236.551599][T11126] netlink: 'syz.0.1268': attribute type 39 has an invalid length. [ 236.599830][ T7480] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 236.617653][T11121] wg1 speed is unknown, defaulting to 1000 [ 236.625096][ T7480] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 236.663442][T11134] netlink: 'syz.3.1267': attribute type 11 has an invalid length. [ 236.686578][T11134] netlink: 'syz.3.1267': attribute type 11 has an invalid length. [ 236.749016][T11124] wg1 speed is unknown, defaulting to 1000 [ 236.805502][T11141] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 236.949770][T11145] x_tables: duplicate underflow at hook 3 [ 237.169952][T11157] netlink: 'syz.4.1275': attribute type 6 has an invalid length. [ 237.354743][T11164] wg1 speed is unknown, defaulting to 1000 [ 237.454415][T11179] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 237.618023][ T6894] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 238.200757][T11205] __nla_validate_parse: 6 callbacks suppressed [ 238.200780][T11205] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1287'. [ 238.225035][T11207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1288'. [ 238.581983][T11212] netlink: 'syz.0.1290': attribute type 20 has an invalid length. [ 238.700264][T11213] wg1 speed is unknown, defaulting to 1000 [ 238.967344][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 239.165399][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 239.312725][T11253] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 239.332770][T11262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.655578][T11275] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1305'. [ 240.446019][T11337] gretap0: entered promiscuous mode [ 240.481616][T11337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.492185][T11337] team0: left allmulticast mode [ 240.497610][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.509831][T11337] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.523730][T11337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.723629][T11356] ieee802154 phy0 wpan0: encryption failed: -90 [ 241.732826][T11357] IPv6: addrconf: prefix option has invalid lifetime [ 241.767544][T11357] IPv6: addrconf: prefix option has invalid lifetime [ 241.785254][T11357] IPv6: addrconf: prefix option has invalid lifetime [ 241.797615][T11357] IPv6: addrconf: prefix option has invalid lifetime [ 241.816412][T11357] IPv6: addrconf: prefix option has invalid lifetime [ 241.831124][T11357] IPv6: addrconf: prefix option has invalid lifetime [ 241.847445][T11357] IPv6: addrconf: prefix option has invalid lifetime [ 241.867477][T11357] IPv6: addrconf: prefix option has invalid lifetime [ 241.888531][T11357] IPv6: addrconf: prefix option has invalid lifetime [ 241.961019][T11372] veth1_to_bond: entered allmulticast mode [ 241.970928][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'. [ 242.071021][T11372] bond0: (slave bond_slave_1): Releasing backup interface [ 242.157604][T11372] veth1_to_bond (unregistering): left allmulticast mode [ 242.372351][T11392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1340'. [ 242.391040][T11397] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1343'. [ 242.468618][T11396] netlink: 'syz.1.1341': attribute type 3 has an invalid length. [ 242.491093][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1341'. [ 242.730228][T11413] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1347'. [ 242.750862][T11412] netlink: 'syz.0.1346': attribute type 41 has an invalid length. [ 243.173830][T11429] wg1 speed is unknown, defaulting to 1000 [ 243.617181][T11440] __nla_validate_parse: 6 callbacks suppressed [ 243.617202][T11440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1354'. [ 243.678694][T11444] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1354'. [ 244.574540][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 244.788119][T11465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.105797][T11475] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1363'. [ 246.206249][T11501] netlink: 'syz.2.1368': attribute type 2 has an invalid length. [ 246.226778][T11501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1368'. [ 246.398022][T11505] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1369'. [ 246.569216][T11509] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1371'. [ 246.644039][T11513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1372'. [ 248.257177][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 248.404425][T11526] wg1 speed is unknown, defaulting to 1000 [ 248.544265][T11535] netlink: 'syz.1.1378': attribute type 30 has an invalid length. [ 248.998838][T11535] netlink: 'syz.1.1378': attribute type 30 has an invalid length. [ 249.081531][T11535] netlink: 'syz.1.1378': attribute type 30 has an invalid length. [ 249.157623][T11535] netlink: 'syz.1.1378': attribute type 30 has an invalid length. [ 249.353185][T11543] netlink: 'syz.4.1379': attribute type 8 has an invalid length. [ 250.089929][T11556] : renamed from bond_slave_0 [ 250.735842][T11566] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 250.866344][T11567] bond6 (unregistering): Released all slaves [ 251.776276][T11602] netlink: 'syz.2.1391': attribute type 66 has an invalid length. [ 252.370659][T11618] wg1 speed is unknown, defaulting to 1000 [ 252.583712][T11624] wg1 speed is unknown, defaulting to 1000 [ 253.117393][T11640] syzkaller0: entered promiscuous mode [ 253.127467][T11640] syzkaller0: entered allmulticast mode [ 253.663682][T11652] net_ratelimit: 24 callbacks suppressed [ 253.663702][T11652] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 253.773673][T11655] netlink: 'syz.0.1405': attribute type 29 has an invalid length. [ 253.787266][T11655] netlink: 'syz.0.1405': attribute type 29 has an invalid length. [ 253.796283][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 253.911828][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 253.921647][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 253.933084][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 253.943006][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 253.952153][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 254.838204][T11671] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 255.846563][T11678] tipc: Enabled bearer , priority 0 [ 256.908596][T11691] netlink: 'syz.2.1417': attribute type 10 has an invalid length. [ 256.957168][ T6895] tipc: Node number set to 983559985 [ 257.056521][T11692] syzkaller0: entered promiscuous mode [ 257.063200][T11692] syzkaller0: entered allmulticast mode [ 257.194799][T11698] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1418'. [ 261.084245][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.273536][T11705] bridge9: entered promiscuous mode [ 261.279135][T11705] bridge9: entered allmulticast mode [ 261.340003][T11726] syzkaller0: entered promiscuous mode [ 261.357147][T11726] syzkaller0: entered allmulticast mode [ 261.549692][T11715] wg1 speed is unknown, defaulting to 1000 [ 261.780597][T11738] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1427'. [ 261.810986][T11738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1427'. [ 261.831898][T11738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1427'. [ 261.847093][T11738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1427'. [ 261.866522][T11747] netlink: 'syz.1.1430': attribute type 5 has an invalid length. [ 261.995130][T11752] netlink: 'syz.2.1431': attribute type 39 has an invalid length. [ 262.027841][T11756] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1432'. [ 262.054886][T11745] wg1 speed is unknown, defaulting to 1000 [ 262.066008][T11755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1429'. [ 262.275650][T11767] netlink: 'syz.1.1435': attribute type 39 has an invalid length. [ 262.520407][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 262.530782][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 262.550503][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 262.818353][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1440'. [ 262.829261][T11786] netlink: 'syz.0.1440': attribute type 19 has an invalid length. [ 262.867229][T11786] netlink: 'syz.0.1440': attribute type 20 has an invalid length. [ 262.977192][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 263.549884][T11808] gre0: entered promiscuous mode [ 263.555526][T11808] gre0: entered allmulticast mode [ 263.855191][T11817] bond7: option packets_per_slave: invalid value (1810975381) [ 263.888340][T11817] bond7: option packets_per_slave: allowed values 0 - 65535 [ 263.915702][T11817] bond7 (unregistering): Released all slaves [ 263.997792][T11827] netlink: 'syz.4.1451': attribute type 21 has an invalid length. [ 264.071221][T11825] team1: entered promiscuous mode [ 264.076334][T11825] team1: entered allmulticast mode [ 264.082262][T11825] 8021q: adding VLAN 0 to HW filter on device team1 [ 264.115789][T11834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.131571][ T7464] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.144233][T11827] netlink: 'syz.4.1451': attribute type 21 has an invalid length. [ 264.169258][ T7464] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.183863][T11812] wg1 speed is unknown, defaulting to 1000 [ 264.190692][ T7464] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.295237][ T7464] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.522396][T11850] netlink: 'syz.2.1457': attribute type 1 has an invalid length. [ 264.619879][T11845] wg1 speed is unknown, defaulting to 1000 [ 265.258497][T11883] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 265.379186][ T6886] IPVS: starting estimator thread 0... [ 265.477280][T11898] IPVS: using max 31 ests per chain, 74400 per kthread [ 265.549468][T11906] veth0_to_team: entered allmulticast mode [ 265.570031][T11904] wg1 speed is unknown, defaulting to 1000 [ 265.946081][ T6003] IPVS: stop unused estimator thread 0... [ 266.360340][T11918] tipc: Enabling of bearer rejected, failed to enable media [ 266.659030][T11952] siw: device registration error -23 [ 266.934145][T11965] __nla_validate_parse: 13 callbacks suppressed [ 266.934169][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1488'. [ 267.036327][T11971] netlink: 'syz.3.1489': attribute type 13 has an invalid length. [ 267.102106][T11972] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1489'. [ 267.297848][T11978] netlink: 'syz.4.1487': attribute type 20 has an invalid length. [ 268.312038][T11969] tipc: Enabled bearer , priority 0 [ 268.323098][T11976] netlink: 'syz.4.1487': attribute type 1 has an invalid length. [ 268.333128][T11973] syzkaller0: entered promiscuous mode [ 268.339689][T11973] syzkaller0: entered allmulticast mode [ 268.462953][T11976] tipc: Resetting bearer [ 268.478760][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 268.496899][T11976] tipc: Disabling bearer [ 268.500517][T11989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1493'. [ 268.570011][T11992] bond8: entered allmulticast mode [ 268.579084][T11992] 8021q: adding VLAN 0 to HW filter on device bond8 [ 268.606153][T11988] wg1 speed is unknown, defaulting to 1000 [ 268.693633][T11998] netlink: 'syz.4.1494': attribute type 2 has an invalid length. [ 268.729273][T11998] netlink: 'syz.4.1494': attribute type 2 has an invalid length. [ 268.813541][T12003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1496'. [ 268.878828][T12007] netlink: 'syz.1.1497': attribute type 10 has an invalid length. [ 268.937276][T12007] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1497'. [ 269.152216][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 269.180401][T12013] bond7: option ad_user_port_key: invalid value (65532) [ 269.200715][T12018] netlink: 'syz.2.1500': attribute type 13 has an invalid length. [ 269.207756][T12013] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 269.226798][T12013] bond7 (unregistering): Released all slaves [ 269.301264][T12019] geneve2: left promiscuous mode [ 269.326137][T12019] veth3: left promiscuous mode [ 269.336692][T12019] gtp0: left promiscuous mode [ 269.352348][T12019] bridge9: left promiscuous mode [ 269.522325][T12021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1501'. [ 269.531974][T12021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.563832][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 269.584119][ T7476] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.633377][ T7476] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 269.667151][ T6106] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.716902][ T6106] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 269.813825][ T6106] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.824581][ T6106] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 269.862513][T12042] netlink: 'syz.3.1504': attribute type 2 has an invalid length. [ 269.876475][ T6106] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.887222][T12043] netlink: 'syz.3.1504': attribute type 2 has an invalid length. [ 269.912618][ T6106] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 269.964684][T12042] !: entered promiscuous mode [ 270.080867][T12051] netlink: 'syz.4.1507': attribute type 11 has an invalid length. [ 270.425321][T12065] wg1 speed is unknown, defaulting to 1000 [ 270.495152][T12075] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1512'. [ 270.799998][T12087] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 271.131812][T12093] team0 (unregistering): Port device team_slave_1 removed [ 271.522813][T12122] erspan0: entered promiscuous mode [ 271.570085][T12131] bond0: (slave bond_slave_1): Releasing backup interface [ 271.618509][T12133] geneve2: entered promiscuous mode [ 271.629146][ T7476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.678197][ T7476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.687833][ T7476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.707532][T12126] wg1 speed is unknown, defaulting to 1000 [ 271.721241][T12129] tap0: tun_chr_ioctl cmd 1074025673 [ 271.743965][ T7476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.050045][T12152] validate_nla: 1 callbacks suppressed [ 272.050065][T12152] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 272.223825][T12147] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 272.268025][T12160] bond7: (slave geneve3): making interface the new active one [ 272.288550][T12160] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 272.347731][ T7480] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 272.358848][T12147] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 272.366861][ T7480] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 272.400826][T12147] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 272.427968][ T7480] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 272.450129][ T7480] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 272.527473][T12147] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 272.548303][T12147] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 272.559784][T12174] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 272.594450][T12147] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 272.641682][T12147] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 272.704200][T12147] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 272.717872][T12184] netlink: 'syz.2.1542': attribute type 4 has an invalid length. [ 272.755514][T12188] __nla_validate_parse: 3 callbacks suppressed [ 272.755537][T12188] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1544'. [ 272.818430][T12188] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1544'. [ 273.414895][T12219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1548'. [ 273.548527][ T5843] Bluetooth: hci0: command 0x0401 tx timeout [ 273.555477][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 273.689606][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 273.933041][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1556'. [ 274.007798][T12235] bond2: option ad_actor_sys_prio: invalid value (0) [ 274.052498][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1556'. [ 274.075024][T12235] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 274.099611][T12235] bond2 (unregistering): Released all slaves [ 274.998290][T12256] tipc: Enabled bearer , priority 0 [ 275.017543][T12259] syzkaller0: entered promiscuous mode [ 275.023171][T12259] syzkaller0: entered allmulticast mode [ 275.055817][T12256] tipc: Resetting bearer [ 275.121331][T12256] tipc: Disabling bearer [ 275.146502][T12271] syz_tun: entered allmulticast mode [ 275.834451][T12283] syzkaller0: entered promiscuous mode [ 275.840541][T12283] syzkaller0: entered allmulticast mode [ 275.848133][T12269] syz_tun: left allmulticast mode [ 275.861808][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1566'. [ 275.965235][T12286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1566'. [ 276.320501][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 278.280096][T12336] validate_nla: 1 callbacks suppressed [ 278.280116][T12336] netlink: 'syz.2.1578': attribute type 5 has an invalid length. [ 278.307423][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1578'. [ 278.476920][T12353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1583'. [ 278.540304][T12354] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 278.557123][T12355] wg1 speed is unknown, defaulting to 1000 [ 278.593270][T12354] syzkaller0: entered promiscuous mode [ 278.599554][T12354] syzkaller0: entered allmulticast mode [ 278.884319][T12364] wg1 speed is unknown, defaulting to 1000 [ 278.900970][T12369] netlink: 'syz.0.1587': attribute type 1 has an invalid length. [ 279.086534][T12369] bond2: entered promiscuous mode [ 279.095320][T12389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1587'. [ 279.105117][T12369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.134349][T12388] veth0_to_team: entered promiscuous mode [ 279.141023][T12388] veth0_to_team: left allmulticast mode [ 279.161260][T12389] bond2: entered allmulticast mode [ 279.241208][T12397] netlink: 'syz.1.1593': attribute type 11 has an invalid length. [ 279.317432][T12369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1587'. [ 279.444259][T12403] tipc: Enabled bearer , priority 0 [ 279.484574][T12401] syzkaller0: entered promiscuous mode [ 279.490415][T12401] syzkaller0: entered allmulticast mode [ 279.576428][T12401] tipc: Resetting bearer [ 279.749151][T12400] tipc: Resetting bearer [ 279.805216][T12400] tipc: Disabling bearer [ 280.083382][T12421] tipc: Enabling of bearer rejected, failed to enable media [ 280.255209][T12432] netlink: 'syz.4.1603': attribute type 58 has an invalid length. [ 280.288417][T12432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1603'. [ 280.314926][T12437] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1603'. [ 280.549260][T12448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.146729][T12478] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1614'. [ 282.239088][T12482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 282.325785][T12484] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1616'. [ 282.507926][T12500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1622'. [ 282.801322][T12521] netlink: 'syz.1.1625': attribute type 6 has an invalid length. [ 282.984144][T12530] wg1 speed is unknown, defaulting to 1000 [ 283.298925][T12546] netlink: 'syz.3.1632': attribute type 3 has an invalid length. [ 283.354155][T12549] Cannot find set identified by id 0 to match [ 283.829515][T12563] __nla_validate_parse: 1 callbacks suppressed [ 283.829539][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 284.027384][T12576] Bluetooth: MGMT ver 1.23 [ 284.070176][T12578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.070294][T12579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.085907][T12575] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1640'. [ 284.320064][T12593] bond7 (unregistering): Released all slaves [ 284.444191][T12605] openvswitch: netlink: Key 18 has unexpected len 0 expected 2 [ 284.507585][T12608] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 284.580988][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 284.642400][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 284.674101][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 284.697826][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 284.736379][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 284.767615][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 284.785835][T12622] tipc: New replicast peer: 255.255.255.255 [ 284.797408][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 284.817971][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 284.850061][T12622] tipc: Enabled bearer , priority 10 [ 285.249076][T12640] netlink: 'syz.4.1660': attribute type 13 has an invalid length. [ 285.628464][T12651] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 285.838719][T12671] netlink: 'syz.2.1667': attribute type 29 has an invalid length. [ 285.922407][T12673] vcan0: tx drop: invalid sa for name 0x8000000000000000 [ 285.958081][T12682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.077416][T12691] netlink: 'syz.2.1671': attribute type 8 has an invalid length. [ 286.129634][ T6893] tipc: Node number set to 3615266408 [ 286.203854][T12699] netlink: 'syz.0.1673': attribute type 29 has an invalid length. [ 286.256400][T12701] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 286.386259][T12705] netlink: 'syz.2.1675': attribute type 1 has an invalid length. [ 286.410811][T12705] netlink: 'syz.2.1675': attribute type 4 has an invalid length. [ 286.419836][T12705] netlink: 'syz.2.1675': attribute type 1 has an invalid length. [ 286.653401][ T6893] IPVS: starting estimator thread 0... [ 286.676199][ T7480] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.691427][ T7480] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.713085][ T7480] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.741830][ T7480] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.787125][T12723] IPVS: using max 26 ests per chain, 62400 per kthread [ 287.210784][T12757] xt_CONNSECMARK: invalid mode: 0 [ 287.975571][T12768] macvtap1: entered promiscuous mode [ 287.988703][T12768] team0: entered promiscuous mode [ 288.047322][T12768] team_slave_0: entered promiscuous mode [ 288.053265][T12768] team_slave_1: entered promiscuous mode [ 288.089704][T12768] macvtap1: entered allmulticast mode [ 288.095171][T12768] team0: entered allmulticast mode [ 288.117029][T12768] team_slave_0: entered allmulticast mode [ 288.122856][T12768] team_slave_1: entered allmulticast mode [ 288.158366][T12768] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 288.173837][T12769] macvtap1: left promiscuous mode [ 288.180671][T12769] team0: left promiscuous mode [ 288.193155][T12769] team_slave_0: left promiscuous mode [ 288.209183][T12769] team_slave_1: left promiscuous mode [ 288.215236][T12769] macvtap1: left allmulticast mode [ 288.223929][T12769] team0: left allmulticast mode [ 288.229948][T12769] team_slave_0: left allmulticast mode [ 288.236681][T12769] team_slave_1: left allmulticast mode [ 288.784278][T12810] No such timeout policy "syz1" [ 288.807251][T12815] validate_nla: 6 callbacks suppressed [ 288.807272][T12815] netlink: 'syz.0.1701': attribute type 1 has an invalid length. [ 288.909422][T12815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.029274][T12830] netlink: 'syz.1.1705': attribute type 1 has an invalid length. [ 289.071105][T12816] veth7: entered promiscuous mode [ 289.164786][T12830] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 289.189279][T12839] syzkaller0: entered promiscuous mode [ 289.227502][T12839] syzkaller0: entered allmulticast mode [ 289.783620][T12858] netlink: 'syz.1.1711': attribute type 3 has an invalid length. [ 289.817200][T12858] __nla_validate_parse: 41 callbacks suppressed [ 289.817223][T12858] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1711'. [ 290.192377][T12879] vlan2: entered promiscuous mode [ 290.207512][T12879] geneve1: entered promiscuous mode [ 290.220728][T12879] vlan2: entered allmulticast mode [ 290.258175][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 290.267581][T12879] geneve1: entered allmulticast mode [ 290.340882][T12883] veth5: entered allmulticast mode [ 290.426849][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 290.528741][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 290.569531][T12887] wg1 speed is unknown, defaulting to 1000 [ 291.137361][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 291.196713][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1735'. [ 291.210666][T12933] netlink: 'syz.4.1735': attribute type 12 has an invalid length. [ 291.227189][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1735'. [ 291.236333][T12933] netlink: 'syz.4.1735': attribute type 12 has an invalid length. [ 291.254912][T12933] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1735'. [ 291.270985][T12943] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 291.288348][T12939] tipc: Enabled bearer , priority 0 [ 291.295841][T12939] syzkaller0: entered promiscuous mode [ 291.301769][T12939] syzkaller0: entered allmulticast mode [ 291.326208][T12935] gretap2: entered allmulticast mode [ 291.347660][T12946] tipc: Resetting bearer [ 291.386310][T12937] tipc: Resetting bearer [ 291.444240][T12937] tipc: Disabling bearer [ 291.700932][T12962] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1740'. [ 291.714471][T12965] netlink: 'syz.4.1741': attribute type 5 has an invalid length. [ 291.731412][T12962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1740'. [ 291.831689][T12967] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1740'. [ 291.902762][T12973] syzkaller0: entered promiscuous mode [ 291.913663][T12973] syzkaller0: entered allmulticast mode [ 293.549732][T12994] wg1 speed is unknown, defaulting to 1000 [ 293.615406][T13004] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.988476][T13013] bridge_slave_1: left allmulticast mode [ 294.027097][T13013] bridge_slave_1: left promiscuous mode [ 294.033120][T13013] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.048912][T13013] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 294.076023][T13023] netlink: 'syz.1.1753': attribute type 4 has an invalid length. [ 294.161864][T13025] netlink: 'syz.1.1753': attribute type 4 has an invalid length. [ 294.300168][ T5834] Bluetooth: hci2: link tx timeout [ 294.305863][ T5834] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 295.100706][T13047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.570913][T13063] __nla_validate_parse: 4 callbacks suppressed [ 295.570934][T13063] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1767'. [ 295.736006][T13078] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20000 [ 296.146782][T13102] wg1 speed is unknown, defaulting to 1000 [ 296.192855][T13104] tipc: Enabling of bearer rejected, already enabled [ 296.347817][ T5843] Bluetooth: hci2: command 0x0405 tx timeout [ 296.538200][T13122] openvswitch: netlink: Message has 4 unknown bytes. [ 296.736433][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1780'. [ 296.762122][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1780'. [ 296.822636][T13140] netlink: 'syz.4.1783': attribute type 10 has an invalid length. [ 297.066227][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1785'. [ 297.104511][T13153] set match dimension is over the limit! [ 297.323589][T13159] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.357568][T13159] netlink: 'syz.0.1787': attribute type 2 has an invalid length. [ 297.399501][T13159] : entered promiscuous mode [ 297.409710][T13160] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.442879][T13159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1787'. [ 297.630075][T13164] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1789'. [ 297.982725][T13178] x_tables: unsorted entry at hook 3 [ 297.992755][T13176] netlink: 'syz.3.1793': attribute type 9 has an invalid length. [ 298.016197][T13176] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1793'. [ 298.229213][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1797'. [ 298.239502][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 298.259280][T13191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 298.326221][T13192] 8021q: adding VLAN 0 to HW filter on device bond4 [ 298.592710][T13213] tipc: Enabled bearer , priority 0 [ 298.606884][T13213] syzkaller0: entered promiscuous mode [ 298.613482][T13213] syzkaller0: entered allmulticast mode [ 298.625684][T13213] tipc: Resetting bearer [ 298.633655][T13209] tipc: Resetting bearer [ 298.703947][T13209] tipc: Disabling bearer [ 299.054370][T13233] netlink: 'syz.3.1807': attribute type 1 has an invalid length. [ 299.522131][T13259] syz.4.1812 (13259) used obsolete PPPIOCDETACH ioctl [ 299.781654][T13268] wg1 speed is unknown, defaulting to 1000 [ 300.379617][T13290] wg1 speed is unknown, defaulting to 1000 [ 301.105947][T13320] netlink: 'syz.1.1834': attribute type 6 has an invalid length. [ 301.132597][T13320] __nla_validate_parse: 42 callbacks suppressed [ 301.132620][T13320] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1834'. [ 301.247184][T13320] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1834'. [ 301.528232][T13338] siw: device registration error -23 [ 301.715457][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 301.812522][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1843'. [ 302.098490][T13371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1850'. [ 302.182481][T13373] block nbd0: shutting down sockets [ 302.187877][T13376] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1851'. [ 302.215012][T13377] netlink: 'syz.2.1852': attribute type 4 has an invalid length. [ 302.344539][T13388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1854'. [ 302.893889][T13401] wg1 speed is unknown, defaulting to 1000 [ 303.174649][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1861'. [ 303.217337][T13410] netlink: 'syz.3.1861': attribute type 2 has an invalid length. [ 303.229458][T13410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1861'. [ 303.241115][T13419] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.876704][T13460] sctp: [Deprecated]: syz.0.1872 (pid 13460) Use of int in max_burst socket option. [ 303.876704][T13460] Use struct sctp_assoc_value instead [ 304.000634][T13448] team_slave_1: left allmulticast mode [ 304.035944][T13448] team0 (unregistering): Port device team_slave_1 removed [ 304.047356][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1874'. [ 304.293390][T13477] syzkaller0: entered promiscuous mode [ 304.306211][T13477] syzkaller0: entered allmulticast mode [ 304.319384][T13483] netlink: 'syz.3.1878': attribute type 4 has an invalid length. [ 304.335406][T13483] block nbd0: not configured, cannot reconfigure [ 304.383027][T13485] veth0_to_team: left promiscuous mode [ 304.395034][T13485] gtp0: left allmulticast mode [ 304.401106][T13485] sit1: left allmulticast mode [ 304.406256][T13485] bridge9: left allmulticast mode [ 304.603490][T13493] vlan0: entered promiscuous mode [ 304.609921][T13493] bond0: entered promiscuous mode [ 304.909229][T13507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.988154][T13513] netlink: 'syz.0.1890': attribute type 2 has an invalid length. [ 305.601717][T13548] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 305.647452][T13548] syzkaller0: entered promiscuous mode [ 305.667789][T13548] syzkaller0: entered allmulticast mode [ 305.812860][T13556] x_tables: duplicate underflow at hook 1 [ 306.571824][T13599] __nla_validate_parse: 4 callbacks suppressed [ 306.571846][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1909'. [ 306.620478][T13599] veth7: entered promiscuous mode [ 306.634778][T13601] team0: No ports can be present during mode change [ 306.669549][T13603] tipc: Enabling of bearer rejected, already enabled [ 307.231388][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 307.291898][T13651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1924'. [ 307.384472][T13651] geneve3: entered promiscuous mode [ 307.406660][T13651] geneve3: entered allmulticast mode [ 307.443000][T13360] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.469572][T13360] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.491588][T13360] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.522674][T13360] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.655112][T13682] macvlan2: left promiscuous mode [ 307.663049][T13682] team1: left promiscuous mode [ 307.678084][ T6893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.710731][T13682] geneve2: left promiscuous mode [ 307.717997][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1931'. [ 307.732721][T13692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1933'. [ 307.749190][T13682] vlan2: left promiscuous mode [ 307.754358][T13682] geneve1: left promiscuous mode [ 307.830636][T13689] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.956167][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1932'. [ 307.966012][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1932'. [ 308.018676][T13689] bond4 (unregistering): Released all slaves [ 308.061426][T13666] wg1 speed is unknown, defaulting to 1000 [ 308.081583][ T6893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 308.135884][T13704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 308.396269][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'. [ 308.438507][T13726] netlink: 'syz.2.1941': attribute type 26 has an invalid length. [ 308.441646][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'. [ 308.495773][T13715] wg1 speed is unknown, defaulting to 1000 [ 308.653666][T13729] tipc: Enabled bearer , priority 0 [ 308.761985][T13729] syzkaller0: entered promiscuous mode [ 308.768985][T13729] syzkaller0: entered allmulticast mode [ 308.797897][T13742] netlink: 'syz.0.1945': attribute type 1 has an invalid length. [ 308.807966][T13741] openvswitch: netlink: Flow actions attr not present in new flow. [ 308.902600][T13727] tipc: Resetting bearer [ 308.980857][T13727] tipc: Disabling bearer [ 309.206033][T13754] tipc: Enabling of bearer rejected, already enabled [ 309.258638][T13754] netlink: 'syz.2.1949': attribute type 11 has an invalid length. [ 309.266549][T13754] netlink: 'syz.2.1949': attribute type 11 has an invalid length. [ 309.560765][T13782] ieee802154 phy0 wpan0: encryption failed: -90 [ 309.575130][T13779] vlan0: entered promiscuous mode [ 309.585376][T13779] vlan0: left allmulticast mode [ 309.598288][T13779] @ÿ: left allmulticast mode [ 310.388602][T13841] bridge0: port 3(erspan0) entered blocking state [ 310.395855][T13841] bridge0: port 3(erspan0) entered disabled state [ 310.408683][T13841] erspan0: entered allmulticast mode [ 310.416537][T13841] erspan0: entered promiscuous mode [ 310.422917][T13841] bridge0: port 3(erspan0) entered blocking state [ 310.429934][T13841] bridge0: port 3(erspan0) entered forwarding state [ 310.451023][T13842] erspan0: left allmulticast mode [ 310.456433][T13842] erspan0: left promiscuous mode [ 310.464381][T13842] bridge0: port 3(erspan0) entered disabled state [ 310.719818][T13867] rdma_op ffff88805d2641f0 conn xmit_rdma 0000000000000000 [ 310.827840][T13870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.178596][T13887] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 311.333474][T13902] wg1 speed is unknown, defaulting to 1000 [ 311.632397][T13923] __nla_validate_parse: 16 callbacks suppressed [ 311.632413][T13923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1990'. [ 311.715389][T13919] wg1: entered promiscuous mode [ 311.720918][T13919] wg1: entered allmulticast mode [ 311.751031][T13922] wg1 speed is unknown, defaulting to 1000 [ 311.994698][T13933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1992'. [ 311.996310][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'. [ 312.025506][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'. [ 312.111972][T13937] IPVS: Error connecting to the multicast addr [ 312.404085][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 312.861644][T13963] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2004'. [ 312.888553][T13963] sctp: [Deprecated]: syz.2.2004 (pid 13963) Use of int in max_burst socket option. [ 312.888553][T13963] Use struct sctp_assoc_value instead [ 313.292006][T13985] syzkaller1: entered promiscuous mode [ 313.298232][T13985] syzkaller1: entered allmulticast mode [ 313.486712][T13989] wg1 speed is unknown, defaulting to 1000 [ 313.508460][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2014'. [ 313.790023][T14001] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.818420][T14005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2016'. [ 313.929101][T14001] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.025472][T14001] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.312422][T14001] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.454430][ T7471] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.509825][ T7471] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.678114][T14026] tipc: New replicast peer: 255.255.255.255 [ 314.684750][T14026] tipc: Enabled bearer , priority 10 [ 314.727184][T13357] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.740697][T13357] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.884097][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 314.974292][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2029'. [ 315.080420][T14053] openvswitch: netlink: Message has 4 unknown bytes. [ 315.300016][T14074] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 315.458513][ T5843] Bluetooth: hci2: command 0x0405 tx timeout [ 315.728539][T14098] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 316.136687][T14115] ip6gre1: entered promiscuous mode [ 316.293700][T14123] netlink: 'syz.4.2046': attribute type 11 has an invalid length. [ 316.304384][T14123] netlink: 'syz.4.2046': attribute type 11 has an invalid length. [ 316.326018][T14122] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 316.801988][T14108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.021163][T14161] __nla_validate_parse: 5 callbacks suppressed [ 317.021185][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 317.036722][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2058'. [ 317.058432][T14161] netlink: 'syz.1.2058': attribute type 1 has an invalid length. [ 317.167581][T14165] netlink: 'syz.0.2060': attribute type 10 has an invalid length. [ 317.175889][T14165] veth1_macvtap: left promiscuous mode [ 317.182774][T14165] team0: Device veth1_macvtap failed to register rx_handler [ 317.643274][T14175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2064'. [ 317.980509][T14201] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 317.990757][T14201] syzkaller0: entered promiscuous mode [ 317.996284][T14201] syzkaller0: entered allmulticast mode [ 318.051864][T14203] gre0: left promiscuous mode [ 318.056661][T14203] gre0: left allmulticast mode [ 318.066238][T14203] erspan0: left promiscuous mode [ 318.102144][T14203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.269415][T14213] wg1 speed is unknown, defaulting to 1000 [ 318.658837][T14223] wg1 speed is unknown, defaulting to 1000 [ 318.665951][T14228] veth1_to_batadv: entered promiscuous mode [ 318.676552][T14228] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 318.688161][T14228] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2076'. [ 318.721496][T14229] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1550) ! [ 318.865211][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2078'. [ 319.161887][T14239] syzkaller0: entered promiscuous mode [ 319.167515][T14239] syzkaller0: entered allmulticast mode [ 319.186816][T14248] tipc: Enabling of bearer rejected, already enabled [ 319.201770][T14248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.282209][T14277] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2087'. [ 321.501807][T14294] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2091'. [ 321.899833][T14305] bond5: option all_slaves_active: invalid value (13) [ 321.921194][T14305] bond5 (unregistering): Released all slaves [ 321.949431][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2097'. [ 322.028053][T14310] vlan0: entered allmulticast mode [ 322.034953][T14310] bridge0: entered allmulticast mode [ 322.079870][T14311] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 322.508048][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.677502][T14345] netlink: 1740 bytes leftover after parsing attributes in process `syz.3.2107'. [ 322.701248][T14345] openvswitch: netlink: Flow key attr not present in new flow. [ 322.848810][T14358] netlink: 'syz.4.2113': attribute type 1 has an invalid length. [ 322.904725][T14358] tipc: Enabled bearer , priority 0 [ 322.923457][T14358] tipc: Resetting bearer [ 322.951652][T14366] xt_connbytes: Forcing CT accounting to be enabled [ 322.992476][T14357] tipc: Disabling bearer [ 323.027969][T14372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.197770][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'. [ 323.229755][T14382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2119'. [ 323.553370][T14386] netlink: 'syz.3.2118': attribute type 4 has an invalid length. [ 323.733662][T14397] x_tables: duplicate entry at hook 2 [ 323.777251][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 323.788167][ T5834] Bluetooth: hci0: command 0x0401 tx timeout [ 324.914291][T14379] wg1 speed is unknown, defaulting to 1000 [ 325.241646][T14412] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2125'. [ 325.708935][T14440] wg1 speed is unknown, defaulting to 1000 [ 325.845157][T14447] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 325.874827][T14449] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 325.909345][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 325.961543][T14447] 8021q: adding VLAN 0 to HW filter on device bond10 [ 326.140785][T14463] netlink: 'syz.4.2139': attribute type 1 has an invalid length. [ 326.202205][T14464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2139'. [ 326.226418][T14452] vxcan4: entered promiscuous mode [ 326.231725][T14452] vxcan4: entered allmulticast mode [ 326.268996][T14447] veth11: entered promiscuous mode [ 326.285601][T14466] x_tables: duplicate underflow at hook 2 [ 326.293674][T14447] bond10: (slave veth11): Enslaving as an active interface with a down link [ 326.339796][T14463] 8021q: adding VLAN 0 to HW filter on device bond4 [ 326.400680][T14465] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 326.411573][T14465] bond4: (slave wlan0): Opening slave failed [ 326.419248][T14455] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 326.433654][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.445998][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.469428][T14471] syzkaller0: entered promiscuous mode [ 326.477879][T14471] syzkaller0: entered allmulticast mode [ 326.489731][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2141'. [ 326.924217][T14504] netlink: 'syz.1.2147': attribute type 12 has an invalid length. [ 327.341895][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 327.374230][T14519] delete_channel: no stack [ 327.381064][T14519] delete_channel: no stack [ 327.837222][T14539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2160'. [ 327.878804][T14538] netlink: 'syz.1.2160': attribute type 5 has an invalid length. [ 327.890331][T14531] netlink: 'syz.0.2157': attribute type 11 has an invalid length. [ 327.898930][T14531] netlink: 'syz.0.2157': attribute type 11 has an invalid length. [ 327.906784][T14531] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2157'. [ 327.922290][T14538] ip6erspan0: entered promiscuous mode [ 327.948289][T14531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.987827][T14541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2162'. [ 328.026394][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 328.182012][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2162'. [ 328.402676][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 329.172799][T14608] netlink: 'syz.4.2177': attribute type 4 has an invalid length. [ 329.227653][T14613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2180'. [ 329.471395][T14632] syz_tun: entered allmulticast mode [ 329.605064][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2187'. [ 329.628499][T14623] syz_tun: left allmulticast mode [ 329.841077][T14652] syzkaller0: entered promiscuous mode [ 329.856892][T14652] syzkaller0: entered allmulticast mode [ 330.102879][T14663] bond8: option all_slaves_active: invalid value (13) [ 330.119418][T14663] bond8 (unregistering): Released all slaves [ 330.180065][T14671] syzkaller0: entered promiscuous mode [ 330.203422][T14671] syzkaller0: entered allmulticast mode [ 330.335286][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 330.535156][T14686] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 330.792937][T14697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2205'. [ 331.300072][T14735] netlink: 'syz.2.2215': attribute type 12 has an invalid length. [ 332.598562][T14714] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 332.637443][T14714] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 332.664565][T14714] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 332.820270][T14752] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 332.888477][T14752] __nla_validate_parse: 4 callbacks suppressed [ 332.888498][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'. [ 333.050069][T14768] openvswitch: netlink: Actions may not be safe on all matching packets [ 333.239708][T14783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2225'. [ 333.477714][T14797] team0: entered promiscuous mode [ 333.482912][T14797] team_slave_0: entered promiscuous mode [ 333.490160][T14797] team_slave_1: entered promiscuous mode [ 333.496085][T14797] team0: entered allmulticast mode [ 333.502639][T14797] team_slave_0: entered allmulticast mode [ 333.516049][T14797] team_slave_1: entered allmulticast mode [ 333.522091][T14801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2229'. [ 333.532841][T14797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2229'. [ 333.543798][T14797] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 333.562575][T14800] : renamed from bond_slave_0 [ 333.846107][T14805] x_tables: duplicate underflow at hook 3 [ 334.107711][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2233'. [ 334.161343][T14825] wg1 speed is unknown, defaulting to 1000 [ 334.673804][T14852] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2240'. [ 334.736486][T14852] .70·: renamed from hsr0 [ 334.756700][T14852] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.776903][T14852] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.827191][T14852] .70·: entered allmulticast mode [ 334.832533][T14852] hsr_slave_0: entered allmulticast mode [ 334.847217][T14852] hsr_slave_1: entered allmulticast mode [ 334.868576][T14852] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 335.132105][T14868] netlink: 'syz.2.2245': attribute type 1 has an invalid length. [ 335.146733][T14868] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2245'. [ 335.162826][T14868] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2245'. [ 335.173978][T14868] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2245'. [ 335.352896][T14888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2249'. [ 335.419812][T14892] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 335.475771][T14892] bond8 (unregistering): Released all slaves [ 335.581853][T14898] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 335.620608][T14898] bond8 (unregistering): Released all slaves [ 335.856708][T14915] netlink: 'syz.3.2255': attribute type 21 has an invalid length. [ 335.896734][T14915] netlink: 'syz.3.2255': attribute type 1 has an invalid length. [ 337.321819][T14962] bond12: entered promiscuous mode [ 337.332769][T14962] bond12: entered allmulticast mode [ 337.340318][T14962] 8021q: adding VLAN 0 to HW filter on device bond12 [ 337.359531][T14958] wg1 speed is unknown, defaulting to 1000 [ 337.711517][T14977] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 337.728470][T14977] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 338.021085][T14989] syzkaller0: entered promiscuous mode [ 338.026726][T14989] syzkaller0: entered allmulticast mode [ 338.125212][T15001] __nla_validate_parse: 11 callbacks suppressed [ 338.125234][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'. [ 338.163527][T15004] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2278'. [ 338.543958][T15009] tipc: Enabled bearer , priority 0 [ 340.221615][T15011] tipc: Disabling bearer [ 340.372027][T15031] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2286'. [ 340.410669][T15033] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2288'. [ 340.420474][T15033] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2288'. [ 340.448513][T15031] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2286'. [ 340.467002][T15031] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 340.477120][ T5939] IPVS: starting estimator thread 0... [ 340.489962][T15036] netlink: 'syz.0.2289': attribute type 21 has an invalid length. [ 340.502539][T15037] netlink: 'syz.3.2287': attribute type 1 has an invalid length. [ 340.517516][T15036] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2289'. [ 340.563792][T15043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2287'. [ 340.611965][T15038] IPVS: using max 27 ests per chain, 64800 per kthread [ 340.620145][T15043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2287'. [ 340.643211][T15037] bond8: entered promiscuous mode [ 340.664585][T15037] bond8: entered allmulticast mode [ 340.670649][T15037] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.679652][T15033] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2288'. [ 340.854603][T15057] wg1 speed is unknown, defaulting to 1000 [ 340.909042][T15056] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 341.434786][T15085] wg1 speed is unknown, defaulting to 1000 [ 341.460782][T15097] siw: device registration error -23 [ 341.513402][T15094] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 341.555878][T15094] syzkaller0: entered promiscuous mode [ 341.562371][T15094] syzkaller0: entered allmulticast mode [ 341.890216][T15114] syzkaller0: entered promiscuous mode [ 341.895855][T15114] syzkaller0: entered allmulticast mode [ 341.978527][T15114] tipc: Enabled bearer , priority 0 [ 342.023136][T15113] tipc: Resetting bearer [ 342.078187][T15113] tipc: Disabling bearer [ 342.221423][T15132] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.237275][ T5938] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 342.277208][T15132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.598709][T15150] syzkaller0: entered promiscuous mode [ 342.604500][T15150] syzkaller0: entered allmulticast mode [ 342.800013][T15162] netlink: 'syz.4.2323': attribute type 10 has an invalid length. [ 342.837352][ T5938] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.176041][T15162] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 344.198410][T15167] tipc: Enabled bearer , priority 0 [ 344.315588][T15171] syzkaller0: entered promiscuous mode [ 344.322332][T15171] syzkaller0: entered allmulticast mode [ 344.494261][T15194] __nla_validate_parse: 5 callbacks suppressed [ 344.494283][T15194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2326'. [ 344.598638][T15196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2326'. [ 344.861874][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 345.910931][T15179] tipc: Resetting bearer [ 345.920171][T15181] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2325'. [ 345.936872][T15186] sit0: entered promiscuous mode [ 345.949254][T15186] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2327'. [ 345.980710][T15202] macsec2: entered promiscuous mode [ 345.986135][T15202] macsec2: entered allmulticast mode [ 346.076326][T15179] tipc: Resetting bearer [ 346.105879][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 346.115777][T15179] tipc: Disabling bearer [ 346.228683][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2331'. [ 346.267438][T15211] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2331'. [ 346.267830][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2331'. [ 346.368068][T15221] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 346.368270][T15207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2331'. [ 346.426237][T15235] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 346.496740][ T7471] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 346.519062][ T5938] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 346.531888][ T7471] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 346.600730][ T5938] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 346.705195][T15249] netlink: 'syz.1.2340': attribute type 1 has an invalid length. [ 346.707980][ T5938] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 346.822183][T15249] 8021q: adding VLAN 0 to HW filter on device bond13 [ 346.980996][T15254] wg1 speed is unknown, defaulting to 1000 [ 347.016706][T15249] wg1 speed is unknown, defaulting to 1000 [ 347.123781][T15269] netlink: 'syz.4.2345': attribute type 1 has an invalid length. [ 347.213272][ T5938] hid (null): invalid report_count 64419 [ 347.220749][ T5938] hid (null): invalid report_size 63633 [ 347.251090][ T5938] hid (null): global environment stack underflow [ 347.271374][ T5938] hid (null): unknown global tag 0xd [ 347.276784][ T5938] hid (null): report_id 54055 is invalid [ 347.314866][ T5938] hid (null): global environment stack underflow [ 347.336642][ T5938] hid (null): global environment stack underflow [ 347.352642][ T5938] hid (null): unknown global tag 0xc [ 347.386299][ T5938] hid-generic 0005:0006:5508.0002: collection stack underflow [ 347.412744][ T5938] hid-generic 0005:0006:5508.0002: item 0 1 0 12 parsing failed [ 347.442051][ T5938] hid-generic 0005:0006:5508.0002: probe with driver hid-generic failed with error -22 [ 347.488701][T15279] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 348.007395][T15301] netlink: 'syz.2.2353': attribute type 12 has an invalid length. [ 348.035417][T15298] erspan0: entered promiscuous mode [ 348.078185][T15301] netlink: 'syz.2.2353': attribute type 4 has an invalid length. [ 349.742107][T15332] sctp: [Deprecated]: syz.3.2361 (pid 15332) Use of int in max_burst socket option. [ 349.742107][T15332] Use struct sctp_assoc_value instead [ 349.867876][T15340] __nla_validate_parse: 6 callbacks suppressed [ 349.867897][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 350.128659][T15359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2366'. [ 350.427339][T15383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2370'. [ 350.449184][T15375] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2370'. [ 350.577203][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 351.259164][T15432] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.2385'. [ 351.275586][T15433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2385'. [ 351.382538][T15441] wg1 speed is unknown, defaulting to 1000 [ 351.453087][T15446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2376'. [ 351.748444][T15456] netlink: 'syz.2.2387': attribute type 39 has an invalid length. [ 351.888723][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2389'. [ 351.921127][T15460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2389'. [ 351.948718][T15463] Cannot find map_set index 135 as target [ 351.986120][T15468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2391'. [ 352.215386][T15479] wg1 speed is unknown, defaulting to 1000 [ 352.380902][T15484] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 352.402121][T15480] wg1 speed is unknown, defaulting to 1000 [ 352.826512][T15501] sit0: left promiscuous mode [ 352.869096][T15501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.889444][T15501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.907161][T15500] netem: incorrect gi model size [ 353.201183][T15524] netlink: 'syz.1.2405': attribute type 15 has an invalid length. [ 353.217541][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 353.536119][T15536] wg1 speed is unknown, defaulting to 1000 [ 353.880314][T15559] netlink: 'syz.3.2413': attribute type 12 has an invalid length. [ 354.013022][T15563] netlink: 'syz.4.2416': attribute type 7 has an invalid length. [ 354.193749][T15576] netlink: 'syz.0.2420': attribute type 1 has an invalid length. [ 354.364477][T15586] netlink: 'syz.1.2424': attribute type 10 has an invalid length. [ 354.378970][T15586] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 354.389974][T15586] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 354.884362][T15616] __nla_validate_parse: 7 callbacks suppressed [ 354.884385][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2430'. [ 355.109553][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2433'. [ 355.277335][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2436'. [ 355.436453][T15621] netlink: 'syz.2.2432': attribute type 11 has an invalid length. [ 355.450500][T15621] netlink: 'syz.2.2432': attribute type 11 has an invalid length. [ 355.459595][T15621] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2432'. [ 355.470372][T15637] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 355.486490][T15621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.647995][T15644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2440'. [ 355.797055][T15652] netlink: 'syz.1.2442': attribute type 9 has an invalid length. [ 355.815069][T15652] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2442'. [ 355.854655][T15663] erspan0: left promiscuous mode [ 355.879964][T15663] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 355.978297][T15665] wg1 speed is unknown, defaulting to 1000 [ 356.024038][T15670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.246299][T15679] bridge0: port 2(macvtap1) entered blocking state [ 356.262631][T15679] bridge0: port 2(macvtap1) entered disabled state [ 356.284604][T15679] macvtap1: entered allmulticast mode [ 356.319629][T15679] macvtap1: left allmulticast mode [ 356.336806][T15684] netlink: 'syz.1.2449': attribute type 11 has an invalid length. [ 356.361841][T15676] xt_CT: No such helper "snmp_trap" [ 356.394535][T15676] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 356.403185][T15676] syzkaller1: linktype set to 260 [ 356.826452][T15693] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2452'. [ 356.848775][T15693] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 356.873351][T15693] 0ªî{X¹¦: entered allmulticast mode [ 356.903464][T15693] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 356.951780][T15690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2452'. [ 357.315391][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2460'. [ 357.431063][T15724] 8021q: adding VLAN 0 to HW filter on device bond9 [ 357.453720][T15731] syzkaller0: entered promiscuous mode [ 357.468259][T15731] syzkaller0: entered allmulticast mode [ 357.603294][T15724] wg1 speed is unknown, defaulting to 1000 [ 358.340482][T15744] netlink: 'syz.1.2463': attribute type 2 has an invalid length. [ 358.356103][T15744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2463'. [ 358.393691][T15753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.859879][T15777] wg1 speed is unknown, defaulting to 1000 [ 358.987161][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 359.007380][T15788] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 359.233810][T15805] netlink: 'syz.4.2476': attribute type 1 has an invalid length. [ 359.521283][T15806] wg1 speed is unknown, defaulting to 1000 [ 359.829362][T15835] wg1 speed is unknown, defaulting to 1000 [ 359.891906][T15842] __nla_validate_parse: 70 callbacks suppressed [ 359.891930][T15842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2486'. [ 360.054789][T15852] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2489'. [ 360.124709][T15853] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 360.141729][ T6893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 360.225300][T15858] : entered promiscuous mode [ 360.382091][T15868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2492'. [ 360.483689][T15871] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2495'. [ 360.519800][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'. [ 360.545247][T15874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2496'. [ 360.579554][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 360.688536][T15874] bond6: (slave veth9): Enslaving as an active interface with an up link [ 360.739531][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2497'. [ 360.781747][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2497'. [ 360.883685][T15878] syzkaller0: entered promiscuous mode [ 360.889337][T15878] syzkaller0: entered allmulticast mode [ 360.900234][T15892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2501'. [ 360.987699][ T6897] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 361.712969][T15900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.725799][T15900] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 361.842836][T15900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 361.848910][T15900] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 361.915366][T15900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.921736][T15900] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 361.955255][T15900] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.961930][T15900] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 361.995736][T15900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.003038][T15900] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 363.459114][T15935] netlink: 'syz.2.2509': attribute type 29 has an invalid length. [ 363.483706][ T6106] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.503776][ T6106] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.581647][ T6106] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.593931][T15938] netlink: 'syz.4.2512': attribute type 2 has an invalid length. [ 363.602018][ T6106] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.670470][T15942] netlink: 'syz.2.2513': attribute type 2 has an invalid length. [ 363.716512][T15942] : entered promiscuous mode [ 363.779063][T15942] netlink: 'syz.2.2513': attribute type 2 has an invalid length. [ 363.797851][T15942] : left promiscuous mode [ 364.035750][T15964] netlink: 'syz.2.2518': attribute type 1 has an invalid length. [ 364.115005][T15964] bond8: (slave geneve2): making interface the new active one [ 364.123577][T15964] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 364.132661][ T7467] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 364.163218][ T7467] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 364.189838][ T7467] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 364.217540][ T7467] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 364.228349][T15973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.235753][T15973] IPv6: NLM_F_CREATE should be set when creating new route [ 364.243170][T15973] IPv6: NLM_F_CREATE should be set when creating new route [ 364.288395][T15973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.296135][T15975] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 364.315406][T15975] syzkaller1: linktype set to 768 [ 364.711453][T15964] wg1 speed is unknown, defaulting to 1000 [ 364.942242][T15996] wg1 speed is unknown, defaulting to 1000 [ 364.983730][T16002] xt_TPROXY: Can be used only with -p tcp or -p udp [ 365.773183][T16030] __nla_validate_parse: 11 callbacks suppressed [ 365.773204][T16030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'. [ 365.831249][T16029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'. [ 365.896679][T16045] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 365.942595][T16045] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 365.957984][T16052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 365.991840][T16052] netlink: 'syz.3.2539': attribute type 21 has an invalid length. [ 366.002401][T16052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2539'. [ 366.129389][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2543'. [ 366.253151][T16060] ip6gretap2: entered promiscuous mode [ 366.273896][T16060] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 367.086245][T16120] netlink: 'syz.0.2554': attribute type 21 has an invalid length. [ 367.110142][T16120] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2554'. [ 367.142943][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2554'. [ 367.153066][T16120] 8021q: VLANs not supported on ip6gre0 [ 367.250888][T16123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2552'. [ 367.349879][T16128] cpu.stat: option xmit_hash_policy: invalid value (9) [ 367.359513][T16128] cpu.stat (unregistering): Released all slaves [ 367.375108][T16125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2556'. [ 367.594909][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 367.610223][T16148] wg1 speed is unknown, defaulting to 1000 [ 367.669320][T16140] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 369.000828][ T30] audit: type=1804 audit(1767521998.921:2): pid=16219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2580" name="/newroot/495/cgroup.controllers" dev="tmpfs" ino=2546 res=1 errno=0 [ 369.047395][ T30] audit: type=1800 audit(1767521998.921:3): pid=16219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2580" name="cgroup.controllers" dev="tmpfs" ino=2546 res=0 errno=0 [ 369.097110][ T30] audit: type=1800 audit(1767521998.961:4): pid=16219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2580" name="cgroup.controllers" dev="tmpfs" ino=2546 res=0 errno=0 [ 369.311396][T16227] pim6reg1: entered promiscuous mode [ 369.321935][T16227] pim6reg1: entered allmulticast mode [ 369.426207][T16221] delete_channel: no stack [ 370.052559][T16271] netlink: 'syz.0.2592': attribute type 1 has an invalid length. [ 370.106005][T16271] netlink: 'syz.0.2592': attribute type 2 has an invalid length. [ 370.347216][T16286] siw: device registration error -23 [ 370.355063][T16286] wg1 speed is unknown, defaulting to 1000 [ 370.829511][T16312] __nla_validate_parse: 4 callbacks suppressed [ 370.829533][T16312] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2607'. [ 371.214905][T16333] tipc: Enabled bearer , priority 0 [ 371.223140][T16333] syzkaller0: entered promiscuous mode [ 371.237044][T16333] syzkaller0: entered allmulticast mode [ 371.261409][T16333] tipc: Resetting bearer [ 371.302640][T16332] tipc: Resetting bearer [ 371.342481][T16332] tipc: Disabling bearer [ 371.537952][T16352] sctp: [Deprecated]: syz.3.2620 (pid 16352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.537952][T16352] Use struct sctp_sack_info instead [ 371.623358][T16352] sctp: [Deprecated]: syz.3.2620 (pid 16352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.623358][T16352] Use struct sctp_sack_info instead [ 371.818335][T16359] wg1 speed is unknown, defaulting to 1000 [ 372.263858][T16396] wg1 speed is unknown, defaulting to 1000 [ 372.326431][T16398] wg1 speed is unknown, defaulting to 1000 [ 372.440361][T16411] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 372.546374][T16411] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.577690][T16411] syzkaller0: entered promiscuous mode [ 372.583572][T16411] syzkaller0: entered allmulticast mode [ 372.631577][T16424] geneve3: entered promiscuous mode [ 372.638422][T16423] bridge: RTM_NEWNEIGH with invalid ether address [ 372.956168][T16440] netlink: 'syz.4.2640': attribute type 1 has an invalid length. [ 374.222962][T16440] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 374.243979][T16455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2641'. [ 374.351319][T16443] syzkaller0: entered promiscuous mode [ 374.368285][T16443] syzkaller0: entered allmulticast mode [ 374.477802][T16462] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2641'. [ 375.414635][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'. [ 375.476829][T16484] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 375.627147][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 377.073519][T16505] netlink: 'syz.2.2653': attribute type 9 has an invalid length. [ 377.107020][T16505] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2653'. [ 377.142011][T16507] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2654'. [ 377.173216][T16515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2653'. [ 377.204217][T16513] wg1 speed is unknown, defaulting to 1000 [ 377.717805][T16526] wg1 speed is unknown, defaulting to 1000 [ 378.027241][T16534] tun0: tun_chr_ioctl cmd 1074025681 [ 378.069405][T16534] tun0: tun_chr_ioctl cmd 35108 [ 378.086342][T16534] netlink: 'syz.4.2659': attribute type 1 has an invalid length. [ 378.403241][T16554] wg1 speed is unknown, defaulting to 1000 [ 378.759896][T16563] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2666'. [ 379.551974][T16601] bond11: option ad_select: invalid value (34) [ 379.562685][T16601] bond11 (unregistering): Released all slaves [ 379.985607][T16619] tipc: Enabled bearer , priority 0 [ 380.004436][T16620] syzkaller0: entered promiscuous mode [ 380.018726][T16620] syzkaller0: entered allmulticast mode [ 380.050593][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'. [ 380.065650][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'. [ 380.092575][T16619] tipc: Resetting bearer [ 380.120729][T16618] tipc: Resetting bearer [ 380.158960][T16618] tipc: Disabling bearer [ 380.262473][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 380.289171][T16636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2686'. [ 380.307781][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2686'. [ 380.323062][T16636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2686'. [ 380.429360][T16643] netlink: 'syz.4.2688': attribute type 29 has an invalid length. [ 380.441423][T16643] netlink: 'syz.4.2688': attribute type 29 has an invalid length. [ 380.469465][T16658] gtp2: entered promiscuous mode [ 380.474539][T16658] gtp2: entered allmulticast mode [ 380.572878][T16650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.598322][T16651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.618500][T16661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.191483][T16701] wg1 speed is unknown, defaulting to 1000 [ 381.732899][T16723] wg1 speed is unknown, defaulting to 1000 [ 382.149997][T16738] __nla_validate_parse: 14 callbacks suppressed [ 382.150020][T16738] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2711'. [ 382.297996][T16743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.305471][T16743] IPv6: NLM_F_CREATE should be set when creating new route [ 382.312792][T16743] IPv6: NLM_F_CREATE should be set when creating new route [ 382.320099][T16743] IPv6: NLM_F_CREATE should be set when creating new route [ 382.565036][T16756] veth7: entered promiscuous mode [ 382.575160][T16749] netlink: 'syz.1.2716': attribute type 11 has an invalid length. [ 382.595761][T16749] netlink: 'syz.1.2716': attribute type 11 has an invalid length. [ 382.615015][T16749] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2716'. [ 382.746137][T16766] syzkaller0: entered promiscuous mode [ 382.752532][T16766] syzkaller0: entered allmulticast mode [ 383.116702][T16793] xt_connbytes: Forcing CT accounting to be enabled [ 383.208769][T16798] netlink: 'syz.1.2729': attribute type 1 has an invalid length. [ 383.303832][T16804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.314767][T16798] 8021q: adding VLAN 0 to HW filter on device bond14 [ 383.403826][T16806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2732'. [ 383.414291][T16797] veth15: entered promiscuous mode [ 383.449049][T16797] bond14: (slave veth15): Enslaving as an active interface with an up link [ 383.468356][T16809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2733'. [ 383.483812][T16806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2732'. [ 383.575120][T16813] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2734'. [ 383.612116][T16812] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2734'. [ 383.623408][T16810] 8021q: adding VLAN 0 to HW filter on device bond11 [ 383.634171][T16810] bridge0: port 2(bond11) entered blocking state [ 383.679520][T16810] bridge0: port 2(bond11) entered disabled state [ 383.686429][T16810] bond11: entered allmulticast mode [ 383.704784][T16810] bond11: entered promiscuous mode [ 383.711810][T16810] bridge0: port 2(bond11) entered blocking state [ 383.718379][T16810] bridge0: port 2(bond11) entered forwarding state [ 383.756526][ T6383] bridge0: port 2(bond11) entered disabled state [ 383.770465][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 383.793136][T16823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2736'. [ 383.817650][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 383.950050][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.516794][T16877] netlink: 'syz.4.2747': attribute type 1 has an invalid length. [ 384.754632][T16886] ip6t_srh: unknown srh match flags 4000 [ 384.865498][T16891] sctp: [Deprecated]: syz.3.2750 (pid 16891) Use of int in maxseg socket option. [ 384.865498][T16891] Use struct sctp_assoc_value instead [ 384.951682][T16889] netlink: 'syz.2.2751': attribute type 1 has an invalid length. [ 385.040139][T16889] 8021q: adding VLAN 0 to HW filter on device bond9 [ 385.189707][T16889] veth11: entered promiscuous mode [ 385.249758][T16889] bond9: (slave veth11): Enslaving as an active interface with a down link [ 385.305854][ T7467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.320692][ T7467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.721555][T16939] dvmrp0: entered allmulticast mode [ 386.500398][T16980] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 386.594992][T16990] netlink: 'syz.3.2778': attribute type 1 has an invalid length. [ 386.607587][T16992] block nbd0: not configured, cannot reconfigure [ 386.721016][T16990] 8021q: adding VLAN 0 to HW filter on device bond12 [ 386.779676][T16998] bond12: (slave geneve4): making interface the new active one [ 386.795874][T16998] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 386.806300][ T6106] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 386.836174][ T6106] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 386.868960][ T6106] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 386.897285][ T6106] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 386.903425][T17007] xt_CT: No such helper "snmp_trap" [ 387.775435][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.786500][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.796224][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.807545][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.827246][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.838880][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.846479][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.855197][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.873463][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.882073][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.894642][T17059] __nla_validate_parse: 13 callbacks suppressed [ 387.894664][T17059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2795'. [ 387.931745][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'. [ 387.940991][T17061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2796'. [ 388.080387][T17054] wg1 speed is unknown, defaulting to 1000 [ 388.576320][T17054] chnl_net:caif_netlink_parms(): no params data found [ 388.795440][T17054] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.803449][T17054] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.811027][T17054] bridge_slave_0: entered allmulticast mode [ 388.819042][T17054] bridge_slave_0: entered promiscuous mode [ 388.827663][T17054] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.834899][T17054] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.842714][T17054] bridge_slave_1: entered allmulticast mode [ 388.850130][T17054] bridge_slave_1: entered promiscuous mode [ 388.882520][T17054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.894746][T17054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.932025][T17054] team0: Port device team_slave_0 added [ 388.940228][T17054] team0: Port device team_slave_1 added [ 388.974403][T17054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.981967][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.008623][T17054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.021684][T17054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.029026][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.056029][T17054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.105758][T17054] hsr_slave_0: entered promiscuous mode [ 389.112483][T17054] hsr_slave_1: entered promiscuous mode [ 389.227946][T17054] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.239167][T17054] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.295521][T17054] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.305881][T17054] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.353846][T17054] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.364010][T17054] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.413016][T17054] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.424228][T17054] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.519316][T17054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.537917][T17054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.548263][T17054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 389.558946][T17054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.640600][T17054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.664152][T17054] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.677591][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.684719][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.702174][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.709346][ T6383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.902162][T17054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.941533][ T5834] Bluetooth: hci5: command tx timeout [ 389.951697][T17054] veth0_vlan: entered promiscuous mode [ 389.969294][T17054] veth1_vlan: entered promiscuous mode [ 389.998148][T17054] veth0_macvtap: entered promiscuous mode [ 390.008922][T17054] veth1_macvtap: entered promiscuous mode [ 390.031066][T17054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.046969][T17054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.061107][ T7467] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.072337][ T7467] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.081847][ T7467] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.092525][ T7467] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.168755][ T7467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.176638][ T7467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.211173][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.220207][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.017596][ T5834] Bluetooth: hci5: command tx timeout [ 394.098004][ T5834] Bluetooth: hci5: command tx timeout [ 396.177624][ T5834] Bluetooth: hci5: command tx timeout [ 408.257202][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 445.381263][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 476.097248][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 506.822490][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.017016][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 534.140348][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2811'. [ 534.149541][T17145] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2810'. [ 534.159988][T17145] netlink: 'syz.0.2810': attribute type 2 has an invalid length. [ 534.168711][T17145] netlink: 'syz.0.2810': attribute type 9 has an invalid length. [ 534.176492][T17145] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2810'. [ 534.211052][T17142] wg1 speed is unknown, defaulting to 1000 [ 534.259136][T17147] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2814'. [ 534.703056][T17167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2817'. [ 534.954554][T17169] syzkaller1: entered promiscuous mode [ 534.980402][T17169] syzkaller1: entered allmulticast mode [ 535.229353][T17176] wg1 speed is unknown, defaulting to 1000 [ 535.229500][T17180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2820'. [ 535.340351][T17180] "syz.0.2820" (17180) uses obsolete ecb(arc4) skcipher [ 535.450250][T17192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2823'. [ 535.492994][T17194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 535.506117][T17195] No such timeout policy "syz1" [ 535.733626][T17199] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2825'. [ 535.893752][T17205] 0ªî{X¹¦: left allmulticast mode [ 535.942591][T17205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.973501][T17205] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.033873][T17205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.521059][T17219] bond5: option lp_interval: invalid value (0) [ 536.547059][T17219] bond5: option lp_interval: allowed values 1 - 2147483647 [ 536.587536][T17219] bond5 (unregistering): Released all slaves [ 536.759250][T17226] netlink: 'syz.1.2830': attribute type 10 has an invalid length. [ 536.781791][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2830'. [ 537.085577][T17236] IPVS: set_ctl: invalid protocol: 46 10.1.1.1:20004 [ 537.246723][T17245] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 537.295612][T17245] CPU: 1 UID: 0 PID: 17245 Comm: syz.1.2835 Not tainted syzkaller #0 PREEMPT(full) [ 537.295646][T17245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.295668][T17245] Call Trace: [ 537.295678][T17245] [ 537.295688][T17245] dump_stack_lvl+0xe8/0x150 [ 537.295726][T17245] sysfs_warn_dup+0x8e/0xa0 [ 537.295753][T17245] sysfs_do_create_link_sd+0xc0/0x110 [ 537.295781][T17245] device_add_class_symlinks+0x1cf/0x240 [ 537.295810][T17245] device_add+0x475/0xb80 [ 537.295838][T17245] wiphy_register+0x1d2e/0x2d20 [ 537.295899][T17245] ? __pfx_wiphy_register+0x10/0x10 [ 537.295938][T17245] ? __pfx_netdev_run_todo+0x10/0x10 [ 537.295971][T17245] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 537.296007][T17245] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 537.296039][T17245] ieee80211_register_hw+0x34a7/0x4110 [ 537.296066][T17245] ? __lock_acquire+0x6b6/0x2cf0 [ 537.296105][T17245] ? ieee80211_register_hw+0x1411/0x4110 [ 537.296144][T17245] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 537.296192][T17245] ? __hrtimer_setup+0x181/0x200 [ 537.296220][T17245] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 537.296252][T17245] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 537.296313][T17245] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 537.296335][T17245] ? kstrndup+0xbf/0x160 [ 537.296374][T17245] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 537.296406][T17245] ? __pfx___nla_validate_parse+0x10/0x10 [ 537.296450][T17245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.296482][T17245] ? rcu_is_watching+0x15/0xb0 [ 537.296516][T17245] ? __nla_parse+0x40/0x60 [ 537.296545][T17245] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 537.296579][T17245] genl_family_rcv_msg_doit+0x215/0x300 [ 537.296611][T17245] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 537.296649][T17245] ? bpf_lsm_capable+0x9/0x20 [ 537.296677][T17245] ? security_capable+0x7e/0x2e0 [ 537.296713][T17245] genl_rcv_msg+0x60e/0x790 [ 537.296743][T17245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.296764][T17245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.296806][T17245] netlink_rcv_skb+0x208/0x470 [ 537.296840][T17245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.296862][T17245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.296886][T17245] ? genl_rcv+0x19/0x40 [ 537.296948][T17245] ? down_read+0x274/0x2e0 [ 537.296971][T17245] ? genl_rcv+0xd/0x40 [ 537.297007][T17245] genl_rcv+0x28/0x40 [ 537.297040][T17245] netlink_unicast+0x82f/0x9e0 [ 537.297075][T17245] ? __pfx_netlink_unicast+0x10/0x10 [ 537.297099][T17245] ? __alloc_skb+0x198/0x3a0 [ 537.297123][T17245] ? netlink_sendmsg+0x642/0xb30 [ 537.297150][T17245] ? skb_put+0x11b/0x210 [ 537.297179][T17245] netlink_sendmsg+0x805/0xb30 [ 537.297221][T17245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.297256][T17245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 537.297289][T17245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.297310][T17245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.297341][T17245] __sock_sendmsg+0x21c/0x270 [ 537.297379][T17245] ____sys_sendmsg+0x505/0x820 [ 537.297413][T17245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.297453][T17245] ? import_iovec+0x74/0xa0 [ 537.297486][T17245] ___sys_sendmsg+0x21f/0x2a0 [ 537.297517][T17245] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.297553][T17245] ? futex_wait+0x285/0x360 [ 537.297617][T17245] ? __fget_files+0x2a/0x420 [ 537.297646][T17245] ? __fget_files+0x3a0/0x420 [ 537.297689][T17245] __x64_sys_sendmsg+0x19b/0x260 [ 537.297721][T17245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.297763][T17245] ? rcu_is_watching+0x15/0xb0 [ 537.297807][T17245] do_syscall_64+0xec/0xf80 [ 537.297831][T17245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.297853][T17245] ? trace_irq_disable+0x37/0x100 [ 537.297884][T17245] ? clear_bhb_loop+0x60/0xb0 [ 537.297919][T17245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.297950][T17245] RIP: 0033:0x7f7e03d8f749 [ 537.297971][T17245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.297993][T17245] RSP: 002b:00007f7e04bb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.298021][T17245] RAX: ffffffffffffffda RBX: 00007f7e03fe5fa0 RCX: 00007f7e03d8f749 [ 537.298039][T17245] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 537.298053][T17245] RBP: 00007f7e03e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.298068][T17245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.298081][T17245] R13: 00007f7e03fe6038 R14: 00007f7e03fe5fa0 R15: 00007fff68a0d398 [ 537.298122][T17245] [ 538.445890][T17268] netlink: 'syz.1.2843': attribute type 1 has an invalid length. [ 538.525052][T17268] erspan1: entered allmulticast mode [ 539.163981][T17287] __nla_validate_parse: 6 callbacks suppressed [ 539.164004][T17287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2848'. [ 539.238547][T17298] netlink: 'syz.1.2847': attribute type 21 has an invalid length. [ 539.470603][T17309] pimreg3: entered allmulticast mode [ 539.528942][T17312] netlink: 'syz.0.2854': attribute type 1 has an invalid length. [ 539.612743][T17312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 539.702157][T17317] bond8: (slave dummy0): making interface the new active one [ 539.743720][T17317] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 539.932364][T17328] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 539.942760][T17328] syzkaller0: entered promiscuous mode [ 539.948426][T17328] syzkaller0: entered allmulticast mode [ 540.460888][T17342] syzkaller0: entered promiscuous mode [ 540.487386][T17342] syzkaller0: entered allmulticast mode [ 542.545489][T17361] IPVS: Error connecting to the multicast addr [ 542.773982][T17399] wg1 speed is unknown, defaulting to 1000 [ 542.827908][T17404] netlink: 'syz.0.2870': attribute type 1 has an invalid length. [ 542.873744][T17398] wg1 speed is unknown, defaulting to 1000 [ 542.958532][T17410] 8021q: VLANs not supported on syzkaller1 [ 543.011251][T17410] 8021q: VLANs not supported on syzkaller1 [ 543.778633][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2883'. [ 543.907059][T17447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2885'. [ 543.942731][T17448] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 543.967838][T17452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2886'. [ 543.994951][T17452] vlan2: entered allmulticast mode [ 544.034332][T17452] dummy0: entered allmulticast mode [ 544.206815][T17462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2888'. [ 544.276887][T17469] delete_channel: no stack [ 544.321449][T17470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2893'. [ 544.463504][T17475] vlan0: entered promiscuous mode [ 544.469274][T17475] vlan0: entered allmulticast mode [ 544.474646][T17475] bond0: entered allmulticast mode [ 544.611658][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2897'. [ 544.624897][T17485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2898'. [ 544.778749][T17489] batadv0: entered promiscuous mode [ 544.854449][T17495] netlink: 'syz.2.2900': attribute type 21 has an invalid length. [ 545.315296][T17524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2908'. [ 545.389826][T17527] netlink: 'syz.4.2909': attribute type 1 has an invalid length. [ 545.428311][T17527] netlink: 'syz.4.2909': attribute type 4 has an invalid length. [ 545.436131][T17527] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2909'. [ 545.501787][T17529] netlink: 'syz.4.2909': attribute type 1 has an invalid length. [ 545.544536][T17529] netlink: 'syz.4.2909': attribute type 4 has an invalid length. [ 545.591927][T17529] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2909'. [ 546.120506][T17549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2914'. [ 546.222857][T17555] netlink: 'syz.4.2916': attribute type 12 has an invalid length. [ 546.247166][T17555] netlink: 'syz.4.2916': attribute type 29 has an invalid length. [ 546.267145][T17555] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2916'. [ 546.735390][T17577] netlink: 'syz.2.2919': attribute type 4 has an invalid length. [ 546.787462][T17577] netlink: 'syz.2.2919': attribute type 4 has an invalid length. [ 546.827145][T17577] veth0: entered promiscuous mode [ 546.860324][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2919'. [ 547.425332][T17605] wg1 speed is unknown, defaulting to 1000 [ 547.520157][T17606] wg1 speed is unknown, defaulting to 1000 [ 547.986655][T17628] wg1 speed is unknown, defaulting to 1000 [ 549.660955][T17690] __nla_validate_parse: 13 callbacks suppressed [ 549.660976][T17690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2948'. [ 550.505944][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 550.516387][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 550.540142][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 550.548425][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 550.556208][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 550.694872][T17718] wg1 speed is unknown, defaulting to 1000 [ 550.843786][T17737] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2956'. [ 550.855383][T17737] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2956'. [ 550.870939][T17725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.883659][T17730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.116051][T17744] sctp: [Deprecated]: syz.1.2959 (pid 17744) Use of int in max_burst socket option deprecated. [ 551.116051][T17744] Use struct sctp_assoc_value instead [ 551.272160][T17751] sctp: [Deprecated]: syz.1.2960 (pid 17751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.272160][T17751] Use struct sctp_sack_info instead [ 551.379653][T17718] chnl_net:caif_netlink_parms(): no params data found [ 551.611971][T17718] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.637173][T17718] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.650464][T17718] bridge_slave_0: entered allmulticast mode [ 551.665096][T17718] bridge_slave_0: entered promiscuous mode [ 551.678438][T17757] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 551.697443][T17757] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2961'. [ 551.708706][T17757] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2961'. [ 551.727144][T17718] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.744738][T17718] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.757214][T17718] bridge_slave_1: entered allmulticast mode [ 551.778412][T17718] bridge_slave_1: entered promiscuous mode [ 551.898966][T17718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.966671][T17718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.089788][ T6003] bridge_slave_1: left allmulticast mode [ 552.099880][ T6003] bridge_slave_1: left promiscuous mode [ 552.107735][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.123151][ T6003] ¾x9ÿ: left allmulticast mode [ 552.137011][ T6003] ¾x9ÿ: left promiscuous mode [ 552.143723][ T6003] bridge0: port 1(1¾x9ÿ) entered disabled state [ 552.175308][T17770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 552.203383][ T6003] ip6gretap3: left allmulticast mode [ 552.222747][ T6003] ip6gretap3: left promiscuous mode [ 552.237455][ T6003] bridge5: port 1(ip6gretap3) entered disabled state [ 552.495752][ T6003] bond0 (unregistering): (slave ip6gretap2): Releasing backup interface [ 552.662805][ T5843] Bluetooth: hci4: command tx timeout [ 552.805537][ T6003] batman_adv: batadv0: Removing interface: gretap1 [ 553.855922][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.865950][ T6003] bond0 (unregistering): Released all slaves [ 553.970363][ T6003] bond1 (unregistering): Released all slaves [ 554.069136][ T6003] bond2 (unregistering): Released all slaves [ 554.165583][ T6003] bond3 (unregistering): Released all slaves [ 554.265784][ T6003] bond4 (unregistering): Released all slaves [ 554.280099][ T6003] bond5 (unregistering): Released all slaves [ 554.296236][ T6003] bond6 (unregistering): (slave veth9): Releasing backup interface [ 554.306643][ T6003] bond6 (unregistering): Released all slaves [ 554.326287][ T6003] bond7 (unregistering): Released all slaves [ 554.439552][ T6003] bond8 (unregistering): (slave dummy0): Releasing active interface [ 554.452738][ T6003] bond8 (unregistering): Released all slaves [ 554.468312][T17718] team0: Port device team_slave_0 added [ 554.673566][T17718] team0: Port device team_slave_1 added [ 554.680089][ T6003] : left promiscuous mode [ 554.738574][ T5843] Bluetooth: hci4: command tx timeout [ 554.838489][ T6003] tipc: Left network mode [ 554.840420][T17718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.861003][T17718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.915101][T17718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.929969][T17718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.937287][T17718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.966572][T17718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.278226][T17718] hsr_slave_0: entered promiscuous mode [ 555.285138][T17718] hsr_slave_1: entered promiscuous mode [ 555.311166][T17718] debugfs: 'hsr0' already exists in 'hsr' [ 555.326556][T17718] Cannot create hsr debugfs directory [ 555.358731][T17810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2973'. [ 555.369640][T17810] Bluetooth: MGMT ver 1.23 [ 555.921841][T17832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2978'. [ 556.003177][ T6003] hsr_slave_0: left promiscuous mode [ 556.018432][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.032607][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.326569][T17851] netlink: 79 bytes leftover after parsing attributes in process `syz.3.2980'. [ 556.688863][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 556.741732][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 556.819086][ T5843] Bluetooth: hci4: command tx timeout [ 557.363119][T17862] netlink: 'syz.1.2983': attribute type 4 has an invalid length. [ 557.408912][T17869] af_packet: tpacket_rcv: packet too big, clamped from 316 to 4294967272. macoff=96 [ 557.515551][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 557.539565][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 557.577087][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 557.586012][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 557.614519][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 557.631102][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 557.646403][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 557.701022][ T6003] IPVS: stop unused estimator thread 0... [ 557.749523][T17879] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 557.760456][T17879] syzkaller0: entered promiscuous mode [ 557.766159][T17879] syzkaller0: entered allmulticast mode [ 557.822224][T17879] syzkaller0: mtu greater than device maximum [ 558.030281][T17718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 558.084189][T17718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 558.162905][T17718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 558.319429][T17718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 558.771019][T17718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.848263][T17718] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.897386][ T5843] Bluetooth: hci4: command tx timeout [ 558.914607][T17935] tipc: Started in network mode [ 558.923275][T17935] tipc: Node identity 6e746bea0f28, cluster identity 4711 [ 558.943446][T17935] tipc: Enabled bearer , priority 0 [ 558.959402][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.966619][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.016523][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.023791][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.088679][T17935] syzkaller0: entered promiscuous mode [ 559.095071][T17935] syzkaller0: entered allmulticast mode [ 559.189748][T17935] gtp0: entered promiscuous mode [ 559.203002][T17935] gtp0: entered allmulticast mode [ 559.249712][T17950] tipc: Resetting bearer [ 559.288098][T17933] tipc: Resetting bearer [ 559.332151][T17933] tipc: Disabling bearer [ 559.670717][T17718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.773591][T17718] veth0_vlan: entered promiscuous mode [ 559.819636][T17718] veth1_vlan: entered promiscuous mode [ 559.905041][T17718] veth0_macvtap: entered promiscuous mode [ 559.953819][T17718] veth1_macvtap: entered promiscuous mode [ 560.028654][T17718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.074705][T17718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.458017][T13359] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.781781][T13359] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.864570][T13359] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.961887][T13359] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.221976][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.256519][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.405359][T13359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.460630][T13359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.809021][T18034] __nla_validate_parse: 62 callbacks suppressed [ 561.809045][T18034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2953'. [ 562.348893][T18051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3018'. [ 562.501729][T18058] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3023'. [ 562.544970][T18061] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 562.590198][T18062] bridge10: entered allmulticast mode [ 562.674586][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3024'. [ 562.692825][T18067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3024'. [ 563.293206][T18084] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3028'. [ 563.683822][T18102] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3033'. [ 563.826745][T18106] syzkaller1: entered promiscuous mode [ 563.841607][T18108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3034'. [ 563.857836][T18106] syzkaller1: entered allmulticast mode [ 563.973791][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3036'. [ 564.470200][T18140] x_tables: duplicate underflow at hook 1 [ 564.707702][T18156] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 564.929797][T18165] bond13 (unregistering): Released all slaves [ 564.930938][T18126] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3040'. [ 564.994664][T18175] delete_channel: no stack [ 565.009855][T18174] bond0: (slave rose0): Releasing backup interface [ 565.027486][T18175] delete_channel: no stack [ 565.323881][T18191] netlink: 'syz.2.3059': attribute type 9 has an invalid length. [ 565.403369][T18197] syzkaller0: entered promiscuous mode [ 565.409112][T18197] syzkaller0: entered allmulticast mode [ 565.694346][T18206] veth1_to_hsr: entered promiscuous mode [ 565.722539][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 565.733769][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 565.743480][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 565.752116][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 565.759902][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 565.771426][T18206] macvtap1: entered promiscuous mode [ 565.782006][T18206] macvtap1: entered allmulticast mode [ 565.809067][T18206] veth1_to_hsr: entered allmulticast mode [ 565.909141][T18208] wg1 speed is unknown, defaulting to 1000 [ 566.317486][T18222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.376022][ T6003] ================================================================== [ 566.384146][ T6003] BUG: KASAN: slab-use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 566.392179][ T6003] Read of size 8 at addr ffff88805a764108 by task kworker/u8:13/6003 [ 566.400304][ T6003] [ 566.402666][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 566.402695][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.402711][ T6003] Workqueue: netns cleanup_net [ 566.402739][ T6003] Call Trace: [ 566.402748][ T6003] [ 566.402757][ T6003] dump_stack_lvl+0xe8/0x150 [ 566.402788][ T6003] print_report+0xca/0x240 [ 566.402811][ T6003] ? nf_hook_entry_head+0x1f1/0x2c0 [ 566.402841][ T6003] kasan_report+0x118/0x150 [ 566.402869][ T6003] ? nf_hook_entry_head+0x1f1/0x2c0 [ 566.402905][ T6003] nf_hook_entry_head+0x1f1/0x2c0 [ 566.402936][ T6003] __nf_unregister_net_hook+0x74/0x6f0 [ 566.402971][ T6003] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 566.403004][ T6003] __nft_release_hook+0x180/0x350 [ 566.403045][ T6003] nf_tables_pre_exit_net+0xa7/0x110 [ 566.403080][ T6003] ops_undo_list+0x187/0x990 [ 566.403107][ T6003] ? __pfx_ops_undo_list+0x10/0x10 [ 566.403133][ T6003] ? do_raw_spin_unlock+0x122/0x240 [ 566.403167][ T6003] cleanup_net+0x4d8/0x7a0 [ 566.403191][ T6003] ? __pfx_cleanup_net+0x10/0x10 [ 566.403216][ T6003] ? process_scheduled_works+0x9ef/0x1770 [ 566.403238][ T6003] ? process_scheduled_works+0x9ef/0x1770 [ 566.403261][ T6003] process_scheduled_works+0xad1/0x1770 [ 566.403307][ T6003] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.403328][ T6003] ? do_raw_spin_lock+0x121/0x290 [ 566.403368][ T6003] worker_thread+0x8a0/0xda0 [ 566.403408][ T6003] kthread+0x711/0x8a0 [ 566.403438][ T6003] ? __pfx_worker_thread+0x10/0x10 [ 566.403460][ T6003] ? __pfx_kthread+0x10/0x10 [ 566.403490][ T6003] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.403523][ T6003] ? __pfx_kthread+0x10/0x10 [ 566.403551][ T6003] ret_from_fork+0x510/0xa50 [ 566.403574][ T6003] ? __pfx_ret_from_fork+0x10/0x10 [ 566.403592][ T6003] ? __switch_to+0xc9e/0x1480 [ 566.403623][ T6003] ? __pfx_kthread+0x10/0x10 [ 566.403651][ T6003] ret_from_fork_asm+0x1a/0x30 [ 566.403693][ T6003] [ 566.403700][ T6003] [ 566.595520][ T6003] Allocated by task 9825: [ 566.599879][ T6003] kasan_save_track+0x3e/0x80 [ 566.604628][ T6003] __kasan_kmalloc+0x93/0xb0 [ 566.609269][ T6003] __kmalloc_cache_noprof+0x3e2/0x700 [ 566.614678][ T6003] ipv6_add_dev+0x6aa/0x13a0 [ 566.619304][ T6003] addrconf_notify+0x771/0x1050 [ 566.624194][ T6003] notifier_call_chain+0x19d/0x3a0 [ 566.629371][ T6003] register_netdevice+0x15bd/0x1a70 [ 566.634619][ T6003] ip6gre_newlink_common+0x3dd/0x590 [ 566.639952][ T6003] ip6gre_newlink+0x228/0x360 [ 566.644681][ T6003] rtnl_newlink_create+0x310/0xb00 [ 566.649846][ T6003] rtnl_newlink+0x16e7/0x1c90 [ 566.654550][ T6003] rtnetlink_rcv_msg+0x7cf/0xb70 [ 566.659544][ T6003] netlink_rcv_skb+0x208/0x470 [ 566.664369][ T6003] netlink_unicast+0x82f/0x9e0 [ 566.669185][ T6003] netlink_sendmsg+0x805/0xb30 [ 566.674007][ T6003] __sock_sendmsg+0x21c/0x270 [ 566.678736][ T6003] ____sys_sendmsg+0x505/0x820 [ 566.683551][ T6003] ___sys_sendmsg+0x21f/0x2a0 [ 566.688276][ T6003] __x64_sys_sendmsg+0x19b/0x260 [ 566.693268][ T6003] do_syscall_64+0xec/0xf80 [ 566.697822][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.703759][ T6003] [ 566.706119][ T6003] Freed by task 15: [ 566.709984][ T6003] kasan_save_track+0x3e/0x80 [ 566.714710][ T6003] kasan_save_free_info+0x46/0x50 [ 566.719798][ T6003] __kasan_slab_free+0x5c/0x80 [ 566.724619][ T6003] kfree+0x1c0/0x660 [ 566.728567][ T6003] in6_dev_finish_destroy_rcu+0x3b/0xa0 [ 566.734160][ T6003] rcu_core+0xc8e/0x1720 [ 566.738455][ T6003] handle_softirqs+0x22b/0x7c0 [ 566.743290][ T6003] run_ksoftirqd+0x36/0x60 [ 566.747761][ T6003] smpboot_thread_fn+0x542/0xa60 [ 566.752750][ T6003] kthread+0x711/0x8a0 [ 566.756868][ T6003] ret_from_fork+0x510/0xa50 [ 566.761510][ T6003] ret_from_fork_asm+0x1a/0x30 [ 566.766421][ T6003] [ 566.768793][ T6003] The buggy address belongs to the object at ffff88805a764000 [ 566.768793][ T6003] which belongs to the cache kmalloc-cg-4k of size 4096 [ 566.783254][ T6003] The buggy address is located 264 bytes inside of [ 566.783254][ T6003] freed 4096-byte region [ffff88805a764000, ffff88805a765000) [ 566.797370][ T6003] [ 566.799731][ T6003] The buggy address belongs to the physical page: [ 566.806186][ T6003] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a760 [ 566.814985][ T6003] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 566.823610][ T6003] memcg:ffff88805a318801 [ 566.827919][ T6003] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 566.835517][ T6003] page_type: f5(slab) [ 566.839546][ T6003] raw: 00fff00000000040 ffff88813ffb0500 ffffea0000cfe200 dead000000000002 [ 566.843376][T18227] vlan3: entered promiscuous mode [ 566.848178][ T6003] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff88805a318801 [ 566.848203][ T6003] head: 00fff00000000040 ffff88813ffb0500 ffffea0000cfe200 dead000000000002 [ 566.848222][ T6003] head: 0000000000000000 0000000000040004 00000000f5000000 ffff88805a318801 [ 566.848241][ T6003] head: 00fff00000000003 ffffea000169d801 00000000ffffffff 00000000ffffffff [ 566.848261][ T6003] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 566.853729][T18227] vlan0: entered promiscuous mode [ 566.861913][ T6003] page dumped because: kasan: bad access detected [ 566.861943][ T6003] page_owner tracks the page as allocated SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 566.861952][ T6003] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9040, tgid 9038 (syz.2.734), ts 189201818880, free_ts 188808042323 [ 566.861997][ T6003] post_alloc_hook+0x234/0x290 [ 566.862019][ T6003] get_page_from_freelist+0x24e0/0x2580 [ 566.862041][ T6003] __alloc_frozen_pages_noprof+0x181/0x370 [ 566.862062][ T6003] alloc_pages_mpol+0x232/0x4a0 [ 566.862086][ T6003] allocate_slab+0x86/0x3b0 [ 566.862117][ T6003] ___slab_alloc+0xe53/0x1820 [ 566.862141][ T6003] __slab_alloc+0x65/0x100 [ 566.862163][ T6003] __kmalloc_noprof+0x47d/0x800 [ 566.862179][ T6003] __register_sysctl_table+0x72/0x1340 [ 566.862211][ T6003] __addrconf_sysctl_register+0x328/0x4c0 [ 566.862236][ T6003] addrconf_init_net+0x4f9/0x790 [ 566.862257][ T6003] ops_init+0x35c/0x5c0 [ 566.862277][ T6003] setup_net+0x110/0x330 [ 566.862294][ T6003] copy_net_ns+0x3e3/0x570 [ 566.862311][ T6003] create_new_namespaces+0x3e7/0x6a0 [ 566.862329][ T6003] unshare_nsproxy_namespaces+0x11c/0x170 [ 566.874364][T18227] vlan3: entered allmulticast mode [ 566.879780][ T6003] page last free pid 9031 tgid 9030 stack trace: [ 566.879798][ T6003] __free_frozen_pages+0xbc8/0xd30 [ 566.879821][ T6003] __put_partials+0x146/0x170 [ 566.879845][ T6003] __slab_free+0x294/0x320 [ 566.879879][ T6003] qlist_free_all+0x97/0x100 [ 566.879896][ T6003] kasan_quarantine_reduce+0x148/0x160 [ 566.879916][ T6003] __kasan_slab_alloc+0x22/0x80 [ 566.879937][ T6003] __kmalloc_noprof+0x3cf/0x800 [ 566.879954][ T6003] tomoyo_realpath_from_path+0xe3/0x5d0 [ 566.879982][ T6003] tomoyo_path_number_perm+0x1e8/0x5a0 [ 566.880002][ T6003] security_file_ioctl+0xcb/0x2d0 [ 566.880020][ T6003] __se_sys_ioctl+0x47/0x170 [ 566.889493][T18227] vlan0: entered allmulticast mode [ 566.897386][ T6003] do_syscall_64+0xec/0xf80 [ 566.897412][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.897433][ T6003] [ 566.897439][ T6003] Memory state around the buggy address: [ 566.897452][ T6003] ffff88805a764000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 566.897468][ T6003] ffff88805a764080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 566.903020][T18227] veth0_vlan: entered allmulticast mode [ 566.908950][ T6003] >ffff88805a764100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 566.908964][ T6003] ^ [ 566.908977][ T6003] ffff88805a764180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 566.908992][ T6003] ffff88805a764200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 566.909009][ T6003] ================================================================== [ 566.953089][T18227] team0: Port device vlan3 added [ 567.310581][ T6003] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 567.317861][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 567.327444][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 567.337542][ T6003] Workqueue: netns cleanup_net [ 567.342350][ T6003] Call Trace: [ 567.345648][ T6003] [ 567.348596][ T6003] vpanic+0x1e0/0x670 [ 567.352611][ T6003] panic+0xb9/0xc0 [ 567.356349][ T6003] ? __pfx_panic+0x10/0x10 [ 567.360805][ T6003] ? preempt_schedule_thunk+0x16/0x30 [ 567.366226][ T6003] ? preempt_schedule_thunk+0x16/0x30 [ 567.371619][ T6003] ? nf_hook_entry_head+0x1f1/0x2c0 [ 567.376854][ T6003] check_panic_on_warn+0x89/0xb0 [ 567.381824][ T6003] ? nf_hook_entry_head+0x1f1/0x2c0 [ 567.387054][ T6003] end_report+0x6f/0x140 [ 567.391330][ T6003] kasan_report+0x129/0x150 [ 567.395858][ T6003] ? nf_hook_entry_head+0x1f1/0x2c0 [ 567.401082][ T6003] nf_hook_entry_head+0x1f1/0x2c0 [ 567.406137][ T6003] __nf_unregister_net_hook+0x74/0x6f0 [ 567.411633][ T6003] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 567.417989][ T6003] __nft_release_hook+0x180/0x350 [ 567.423048][ T6003] nf_tables_pre_exit_net+0xa7/0x110 [ 567.428369][ T6003] ops_undo_list+0x187/0x990 [ 567.432997][ T6003] ? __pfx_ops_undo_list+0x10/0x10 [ 567.438130][ T6003] ? do_raw_spin_unlock+0x122/0x240 [ 567.443450][ T6003] cleanup_net+0x4d8/0x7a0 [ 567.447884][ T6003] ? __pfx_cleanup_net+0x10/0x10 [ 567.452836][ T6003] ? process_scheduled_works+0x9ef/0x1770 [ 567.458570][ T6003] ? process_scheduled_works+0x9ef/0x1770 [ 567.464311][ T6003] process_scheduled_works+0xad1/0x1770 [ 567.469888][ T6003] ? __pfx_process_scheduled_works+0x10/0x10 [ 567.475887][ T6003] ? do_raw_spin_lock+0x121/0x290 [ 567.480953][ T6003] worker_thread+0x8a0/0xda0 [ 567.485577][ T6003] kthread+0x711/0x8a0 [ 567.489672][ T6003] ? __pfx_worker_thread+0x10/0x10 [ 567.494799][ T6003] ? __pfx_kthread+0x10/0x10 [ 567.499411][ T6003] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.504633][ T6003] ? __pfx_kthread+0x10/0x10 [ 567.509244][ T6003] ret_from_fork+0x510/0xa50 [ 567.513855][ T6003] ? __pfx_ret_from_fork+0x10/0x10 [ 567.518981][ T6003] ? __switch_to+0xc9e/0x1480 [ 567.523770][ T6003] ? __pfx_kthread+0x10/0x10 [ 567.528386][ T6003] ret_from_fork_asm+0x1a/0x30 [ 567.533195][ T6003] [ 567.536860][ T6003] Kernel Offset: disabled [ 567.541533][ T6003] Rebooting in 86400 seconds..