last executing test programs: 10m25.773610632s ago: executing program 0 (id=3399): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4004011) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf881, 0x1, 0x889f, 0x5, 0x7ff, 0x4, 0x7, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, r1, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x48840}, 0x200640c4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r7], 0x84}}, 0x0) (async) socketpair(0x1, 0x1, 0xffffffbe, &(0x7f0000000180)) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 10m25.439012764s ago: executing program 0 (id=3403): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000002780)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/165, 0xa5}, {&(0x7f0000002240)=""/24, 0x18}, {&(0x7f0000002280)=""/197, 0xc5}, {&(0x7f0000002380)=""/140, 0x8c}, {&(0x7f0000002440)=""/108, 0x6c}, {&(0x7f00000024c0)=""/174, 0xae}, {&(0x7f0000002580)=""/155, 0x9b}, {&(0x7f0000002640)=""/93, 0x5d}, {&(0x7f00000026c0)=""/176, 0xb0}], 0xa, 0x9, 0xffffff01) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="18800300a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x44}}, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x2, 'vlan0\x00', {0x80}, 0x200}) 10m25.264432495s ago: executing program 0 (id=3406): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@typed={0x8, 0x26, 0x0, 0x0, @u32}, @nested={0x4, 0x44}]}, 0x20}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000070100001cfeffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "e4"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000000)=""/48, &(0x7f0000000040)=0x30) 10m25.035766951s ago: executing program 0 (id=3411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x1e10, 0x4, 0x5, 0x30, 0x8, 0x8a}, &(0x7f00000004c0)=0x9c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240)=0xe0, 0x4) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)="0a3654caa054f0b362fcfa360636f0b3d653e8321291c92e7799ee8eaf5cabe7b6ebbe951b5e348dd7ba6ff8ce58346e7cf5f4f53d9b837a91150aa46f6b9a61f889d6695069bc336868f22ebe8f55bcc9e3049d2f9352320409b8708d224c234aba87f7ba3bda932ec057e87b2f8afce3407ae52fff4f60be0bce", 0x7b}, {&(0x7f0000000440)="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", 0x805}], 0x2}}, {{&(0x7f0000001500)={0xa, 0x4e20, 0x591, @mcast1, 0x1}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000001540)="df584c", 0x3}], 0x1}}], 0x2, 0x4c800) 10m24.799314434s ago: executing program 0 (id=3413): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) socket$inet(0x2, 0x800, 0x2) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 10m24.45581192s ago: executing program 0 (id=3415): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x25, 0x109, 0x70bd1f, 0xfffffffc, {0xe}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) r4 = openat$cgroup_procs(r1, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0xffffdffffffffffd) write$cgroup_pid(r4, &(0x7f0000005bc0), 0x12) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0x270}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000280), &(0x7f00000002c0)) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r10 = openat$cgroup_devices(r7, 0x0, 0x2, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000200)=0x4) write$cgroup_devices(r10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4080000000000006110800000000000a60000000000000095000000000000002708bf5d6df57e4036e97f802a67fdc2ee21b92ca9f507707dd754479a8dcf28b7ce595ab47e7a5396f780ee222b42395b5664f0c435febc86e01cd2cf1190b290320885b36f24493454294552dfaa3a17a7462612e5f8980fd439b09ee96e4c0ca8581e36cc8acfdfdd08b7856e8cf498d2d7ff6abd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x4}, 0xfffffe96}, 0x94) 10m9.425573628s ago: executing program 32 (id=3415): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x25, 0x109, 0x70bd1f, 0xfffffffc, {0xe}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) r4 = openat$cgroup_procs(r1, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0xffffdffffffffffd) write$cgroup_pid(r4, &(0x7f0000005bc0), 0x12) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0x270}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000280), &(0x7f00000002c0)) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r10 = openat$cgroup_devices(r7, 0x0, 0x2, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000200)=0x4) write$cgroup_devices(r10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4080000000000006110800000000000a60000000000000095000000000000002708bf5d6df57e4036e97f802a67fdc2ee21b92ca9f507707dd754479a8dcf28b7ce595ab47e7a5396f780ee222b42395b5664f0c435febc86e01cd2cf1190b290320885b36f24493454294552dfaa3a17a7462612e5f8980fd439b09ee96e4c0ca8581e36cc8acfdfdd08b7856e8cf498d2d7ff6abd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x4}, 0xfffffe96}, 0x94) 5.413080125s ago: executing program 5 (id=6858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x2, 0x0, 0xfd3c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 5.27968564s ago: executing program 1 (id=6861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e21, 0x1000, @local}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x68) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000380)={0x10, 0x0, "d5a78d2af54a0ef7e91e4b79cc0e9e2e"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, 0x400}) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0xb}, @loopback, 0x1, "d57eeaca544a179b5af37b36fdb23ef1866ce11f1ef0ed82355195f91a9d7da0", 0x6, 0x7, 0x10ab, 0x4}, 0x3c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) getsockopt$sock_int(r7, 0x1, 0x47, 0x0, &(0x7f0000002100)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x4fc5de1d49e666c3, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3bb, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r9, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40080) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0x3, 0xc}, {0x0, 0xfff1}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4049080) 4.919656009s ago: executing program 5 (id=6866): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xe, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(0x0, r3) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd32", 0xb) socket$nl_route(0x10, 0x3, 0x0) accept4(r1, 0x0, 0x0, 0x800) socket$kcm(0x29, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRESHEX=r4, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r7], 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 4.917713089s ago: executing program 1 (id=6868): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000000000000700000009bd822c716a54abd80000004c000000090a01040000000000000000070000000900020073797a8fad0000000900010073797a30000000000800054003400000004008000f40000000063c003a000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a00"/208], 0xd0}}, 0x0) getpeername$packet(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a000008000b00040000000500050040"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r11, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x5, 0x8000, 0x9aa, 0x8, 0xc84, 0x9, 0xa, r11}, 0x20) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r12, 0x5452, &(0x7f0000000180)=0x401) listen(r12, 0x0) ioctl$sock_SIOCSPGRP(r12, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r12, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000076000d0b005a00000925a885cef1cf00000000030000000000000008000100020000226a6ead08f9471fe604b65a49edcf00f12add652f6232ef185d865fd2b906e224e4bdfc0e18a5d7f119dc6d6a21d882974b49b065052aa579a2380e360aade40dc5a30a9ebbe1874ae92c155f522f59b613f3dbc9330d727d80dbb0bc012db6737e0929024d813a0b90432be314ba330176b2a9a7a7a4018f15be8dec49d78b92e779a201578df8fe74f91cf82fb170a0940f661ead2ee7fd510a3f3a7270e206f48c43cf3a1a0f3a478c90bda775e634c200203b0fa2a560b7ab638b4678ad986420bdf0e78e6536f05d4b073950fb8cd96b"], 0x20}}, 0x0) r13 = socket$igmp6(0xa, 0x3, 0x2) r14 = accept$inet6(r13, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r14, 0x29, 0x12, &(0x7f0000000080)=0x69d302d0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400030540008000ffdbdf250218e4ff", @ANYRES32, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) 4.744666776s ago: executing program 3 (id=6869): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) sendto(r2, &(0x7f0000000180)="5ffd0cf5faedbb769fab3f8663e34d12b0137cc2a7fa39f132b8abb0e5afdd7df65b3ce45eb8b067d9f17ba69a5afdc54cfa8bf9a9aaa1ef39660975626fa0ea3220eb9cf1003618d3541c9fe04d98f40f04f2161d087705112f5739861b82cea9adf897", 0x64, 0x40, &(0x7f0000000280)=@xdp={0x2c, 0x3, r1, 0x1c}, 0x80) 4.595928032s ago: executing program 5 (id=6871): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050003"], 0x24}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691050000000000003ffed00000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket(0x1, 0x803, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x28, 0x68, 0x200, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000540)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x10c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@nested={0xf8, 0x21, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x31, 0x0, 0x0, @str='),$\x00'}, @generic="7b224028c7e9ce1c18f34c7f0fb28f84447cce6a2f1fa5deff2a1e14e3ecb27ba5a7dc15c65c07d81ab100d6f5b572897eb5c5d10ad5fd938f85debc323c151686b8f8d350e52c53a2211943c46aa9d31a557014d80eaa8043808ca1f83efc3ae9d3076582a9afa8", @nested={0x8, 0x124, 0x0, 0x1, [@typed={0x4, 0x8b}]}, @typed={0x8, 0x12b, 0x0, 0x0, @fd=r5}, @typed={0x69, 0x35, 0x0, 0x0, @binary="4c68bd4fe14d466b11c716056e79dd9c41ad80652bf97b2fc25b66b813555f1422961150bbfd0d442018663577b6ba86e6696907cd91eb5bb8843f80ea848e3a26ef5733fd8fe3b8e4b91f51c10f661780e09096f15706a28325d1020e0ad25a66b0fe7856"}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418000000120800040043000000a80016000a0001400600d4c140e99d5a57dfcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8004cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed92d2f52eb233dcb9ef3d93452a", 0xd8}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050000000000000000007300000008000300", @ANYRES32=r13], 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, r10, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x547, 0x14}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x65}, @NL80211_ATTR_PMKID={0x14, 0x55, "dd884efaf540da4c8f72c1629fdb638a"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="144e46729d3f"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000041) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={'ip_vti0\x00', {0x2, 0x4e23, @rand_addr=0x64010100}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000380)={{}, {0xfffffffffffffff8}, 0x81, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)="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", 0x1c3, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000025000000010000000c00000000180000006f568ef4f1d5817118118bd7c9928adc9f114e7ba4a4e2f474000000834654dac592208d71904c92964ad66ed8906c8adf36ad01208a106ea0122203fb1a200dafff8e436c63248a9dd412f13dabae9265e07e4dfaeca4db78fc2a8544b4f1da217b67b0c64290cd11a768d585902358a0b1f60287f0c3af7e9b1109d1076171712b8faa10365ab13b47000000000000"], 0xa5}) 4.541733273s ago: executing program 1 (id=6872): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xb90, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x11e, 0x17, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000f40)=""/4087, 0xff7}, {&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000000)=""/166, 0xa6}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x66, 0x2120, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16], 0x18}, 0x1, 0x0, 0x0, 0x4004098}, 0x810) 4.459186491s ago: executing program 4 (id=6874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x18, 0x80000, 0x6b7c9b0f) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r7, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r7, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 4.043290109s ago: executing program 5 (id=6876): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002340)={&(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000000080)="24550e548dd7f25117730c8c637bb77ea214d2e9fcca89de26aa02c2e26863e5663284dcdb140d1616c6eb47106c2d272a47e2890ac0db64ba45522cb25ef40bfb5ca1978660995b18cc347d84947ca17302f61e9e0dc9dd9d", 0x59}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="7fb8e01a1e7c9a315f5c402a4b54948b5e2d66ecf71f35747b74fb84fb2e9664c5a6f985f26b75928b366e333cb32f0a93742c6e9aa26d9d190846c0d306a94f00cb112ca9b61f6f890c52a653969f29e1ccb95a5dc7bec6bc543148c26b773743ab335f91340b11693f57a001e50ebb6d05e083690206ce3c5c5ea852940e7cf580423accee0433dbb8b0750892e5b0311a3e8565c85762e3e8aef4c1c19f08278faf17db7fc7ba7acb59905325449a7edecbd13198f578574ff123608cb144841e8e2a0287e60b9aee2380bef57772e6169b4dac64dc0990d8ddec60b494e33dbcf1188dc44ae564c73d3fee3e94216c06", 0xf2}, {&(0x7f0000001200)="ffddd0f20966af25a5e30a39305ebfe6484b2cfa06c174a3baf730329c32b834bbf0e9d8b706d8730d545e2af1e9bb90184329a790bc3c9e60173c7de6865f5e7935cd58a08f800cdd4c90f238db2340a13c886c690feb32313359fa9a6e37baf843cb8f440261966efc14ea3965b308dfccd9d1f3f3dc3542688b8bb33088b1651dddecf23c8132fbc7959e7203c2112ebd59a6f1", 0x95}, {&(0x7f00000012c0)="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", 0x1000}], 0x5, 0x0, 0x0, 0x8004}, 0x80014) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009e96b2b08000300", @ANYRES32=r5], 0x20}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002440)={&(0x7f00000024c0)={0x64, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x40, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "d8e94aaa661348c8"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x14}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "b8e781634dfaf7be"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x12}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x11eac000) 3.968666745s ago: executing program 2 (id=6877): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xfffffffffffffe5e, 0x2, {{0x2, [0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000000)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'sed\x00', 0x3, 0x1, 0x5f}, 0x2c) 3.880589294s ago: executing program 3 (id=6878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='vxcan1\x00', 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x303}, "4ce8cb2c4803d056", "bff7e1bfd424a181067b34dc594e7f45", '\x00', "72da34ceb7f00612"}, 0x28) 3.801267122s ago: executing program 2 (id=6879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1f) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1440, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000230001000900000001"], 0x48) (async) r6 = socket(0x10, 0x3, 0x0) getpeername$packet(r6, 0x0, 0x0) write(r6, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) (async, rerun: 32) recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r10, 0x0) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r11, 0x6, 0x3, &(0x7f0000000040)=0x20, 0x4) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0xa) 3.736196814s ago: executing program 3 (id=6880): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3fd}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffd, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xfa}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 3.735930318s ago: executing program 4 (id=6881): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000200000000000008004500001c4000000000119078000890780000000000000000000000004771790c00b10dd8eb059c8bb200e926cddba9853fbd0f3f73f9408909c46d71112ca110df96b3e9ac5fdcbb21f897ca5a8c1e9cf5450f59717d2875f39514c89732108e0a3c031efa3d3efd5c12d7bcc14c100457b2c6f1d15816502125f9b9388726ed0b7fcad1f56c008a81b9b4f61c87fa1c969b9dc7ad68c4b21ca84c299ee4685935f5bc32c00f80af2f676f032b49018374b845a493cf9c936f5f41bfaa54615feac1eff9e6"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(0xffffffffffffffff, 0x0, 0x5c, 0x200028ec, &(0x7f00000004c0)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff4f}]}]}]}, 0x30}}, 0x4000890) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESHEX=r4], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x240088c1) 3.608548007s ago: executing program 1 (id=6882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000200)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x4, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x10000000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES8=r2], 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 3.507797935s ago: executing program 4 (id=6883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r2, 0x2}, 0x20) 3.453483079s ago: executing program 1 (id=6884): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x18000000000002a0, 0xf, 0xfffffffffffffe0d, &(0x7f0000000140)="7c003307000000000008000088471a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x24, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x44c01}, 0x20000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x20000010) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c008735", @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x36) 3.43320957s ago: executing program 3 (id=6885): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x30004001) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011"], 0x20}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011"], 0x20}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x2e) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) recvmsg$unix(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/105, 0x69}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/158, 0x9e}, {&(0x7f0000001600)=""/26, 0x1a}], 0x7, &(0x7f00000016c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x10001) (async) recvmsg$unix(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/105, 0x69}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/158, 0x9e}, {&(0x7f0000001600)=""/26, 0x1a}], 0x7, &(0x7f00000016c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x10001) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="7185ffffffffffff00000000fb0a0000000000000002c800003a000008001e0002000000"], 0x24}}, 0x4004801) 3.351668202s ago: executing program 2 (id=6886): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0xffffffffffffffff, 0x4}, 0x38) (async) r0 = socket(0x10, 0x6, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYBLOB="5e017b"], 0x4) (async, rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async, rerun: 32) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000580)="b261", 0x2}], 0x1) (async) r4 = openat$cgroup_ro(r2, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000ff0200000000000000000000000000010004000000000000071800000000040000d704"], 0x0) (async) close(r4) (async, rerun: 64) r5 = socket$kcm(0x2, 0x1, 0x84) (rerun: 64) setsockopt$sock_attach_bpf(r5, 0x84, 0x8, &(0x7f0000000000), 0x8) (async) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85adb9ff1d8e809a65e5", 0xa}, {&(0x7f0000000ac0)="4986e59d3df6b0823023b228123af1af02dddf7368c29b3c419bcf52058cedbf760b8db46d089fe741e912929c1f5f37eb79d4ff10b2a1c1bbfca0dc905871e8ad536eb1760eb73e0f8c2a910da2ac96f053487ebb51d93c2efa4831dcb162f169380935fc5ea4b88312f358dee08c0795a862b7ab704023a0e75fdf84624b857bec96467abe347a45b207f3fc88f551d1c841972ccc5b2cb31a16739cf966ceee81ea8a12eb9c4da26388855527d9998641df9fb49f1b73d86bd23a2c6f868bca8b557e", 0xc4}, {&(0x7f0000000e40)="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", 0x13b}, {&(0x7f0000001d00)="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", 0x3a4}], 0x4}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r7, 0x0, 0x31, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@deltaction={0xc4, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xc4}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 3.33180959s ago: executing program 4 (id=6887): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 3.24698471s ago: executing program 3 (id=6888): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x47, 0x0, &(0x7f0000002100)) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000340)=0x4b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x2800, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000380)={0x0, 0x9, [@random="30daadd40925", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @remote, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40)=0xffffffffffffffff, 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r9, r10, 0x7, 0x0, @val=@tcx={@void, @value=r9}}, 0x1c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x1000, 0x3, 0x7b04, 0x1829, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x6}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1d5e}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x18f}}}, &(0x7f0000000500)='GPL\x00', 0x928, 0x5c, &(0x7f00000009c0)=""/92, 0x41100, 0x4, '\x00', 0x0, 0x19, r6, 0x8, &(0x7f0000000a80)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1d020, r2, 0x4, &(0x7f0000000b40)=[r8, r10, 0xffffffffffffffff, r11], &(0x7f0000000b80)=[{0x2, 0x2, 0xa, 0x1c}, {0x5, 0x5, 0x7, 0x2}, {0x1, 0x5, 0x10, 0x7}, {0x5, 0x4, 0x7, 0x3}], 0x10, 0x200}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) close(r0) 3.195766228s ago: executing program 2 (id=6889): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600780ea8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x40052) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000032501030000000000000000020000000900010073797a30000000000900030073797a320000000014000000115aa1160ef2f8fc06adf66482e12679ab7401948cee7bba666b29be836ab7eab013fe9d1934db3bc7003bffd1214a782551aa27dd106dc1c6830a000000000000"], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a4000000006fc000400000000000000000200000014000480100001800c0001007061796c6f6164000900010073797a30000000000900020077797a3200000000140000001100010000000000000000000300000a"], 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000010000101000000955615b0000500000a40000000060a010400000000000000000a0000010900010073797a31000000006a037044d34f9e1863a9bdb1781400048010000180080001006669620004000280090002000300000000000000140000001100010000000000000000000100000a32c92e754d422d506651a684b5052f7e9ff293fbd4ab5be26898aa161066d3ff9f5f4a94762827db3fb0053a9004540f8ff27e5107043e02c06bbc32053500000000768ab1edc4557f156a0c0481f5337d01cf3f5ed07b71"], 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) r8 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003704000080000000000000000000", @ANYRES32=r9, @ANYBLOB="c304050000000000280000008000010067726574617000525f1dcaf43c3e19f0de4b33f1001800028004001200050009"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r6, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r5}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="800100803d0004aab8a17a1ec525d2251000000008000a00b71f46a463d6f117515a17caaac9037526e27e5ef6bb771a6e7ab76bc344504f0cba75afc678978e21a369447e3c79a8c26b9515ded6c98926b19a48e1adde1d17a7848c0bbe6e1035555d6a0f0800a200", @ANYRES32=r5, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x4004000}, 0x11) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$can_j1939(r7, &(0x7f0000000500)={0x1d, r9, 0x0, {0x1}, 0xfd}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) 3.057556277s ago: executing program 5 (id=6890): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x6}, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x48, r2, 0x1, 0x3, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f0000000000)={r3, 0x0, 0x7, 0x5, 0x6f8677c7, 0x1, [0x2, 0x9348, 0xcf80, 0x9, 0x505, 0xfffffffffffffffe]}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @broadcast, @empty}, 0xc) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) close(0x3) 349.134941ms ago: executing program 2 (id=6891): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="7bb4d5eeb2", 0x5}], 0x1, 0x0, 0x0, 0x8001}], 0x1, 0x20048000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 275.823613ms ago: executing program 4 (id=6892): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c980)={&(0x7f000000c7c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=@label={{0x4f32494e, 0x4, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3d46364ca4000000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000"], 0x3c}}, 0x800) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) writev(r2, &(0x7f0000000540)=[{&(0x7f00000000c0)="02", 0x1}, {&(0x7f0000000140)="1a36c585f338", 0x6}], 0x2) 232.675974ms ago: executing program 5 (id=6893): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) read(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESHEX=r2, @ANYRES64=r1], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 216.311392ms ago: executing program 3 (id=6894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r0, 0x2135b000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000a40)={0x28, 0x0, 0x2711}, 0xffffff37) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r3, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4b39ff, 0x0) listen(r2, 0x0) r4 = accept(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) shutdown(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x47) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000740)={'ip_vti0\x00', 0x0, 0x7, 0x0, 0x6, 0xc5e, {{0x8, 0x4, 0x3, 0x2, 0x20, 0x65, 0x0, 0x81, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@rr={0x7, 0xb, 0xf9, [@remote, @remote]}]}}}}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x1a, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x0, 0x1, 0xb, 0x1, 0xfffffffffffffff0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @generic={0x10, 0x8, 0x0, 0x3, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000640)='syzkaller\x00', 0x9, 0x81, &(0x7f0000000680)=""/129, 0x41000, 0x30, '\x00', r7, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xe, 0x7fffffff, 0x3ff}, 0x10, r9, r1, 0x5, &(0x7f00000008c0)=[r10, r11], &(0x7f0000000900)=[{0x1, 0x1, 0xe, 0x6}, {0x0, 0x3, 0x7, 0x5}, {0x3, 0x1, 0x8, 0x4}, {0x5, 0x4, 0xb, 0xe}, {0x4, 0x9cb9, 0x0, 0x1}], 0x10, 0x8}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x5f5e0ff}, @call]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x26, &(0x7f00000001c0)=""/226}, 0x21) 35.649333ms ago: executing program 4 (id=6895): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c00"], 0x3c}}, 0x0) 7.781294ms ago: executing program 1 (id=6896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000080), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000009500"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket$kcm(0x11, 0x3, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r11, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="55ee4addb0838779ff7a51df6a147ea6d9f4894d", 0x14}], 0x1}, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000060a05000000000000000000020000000900020073797a32000000000900010073ffff30000000000c0003400000000000000002140000001100010000000000000000000500000a"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x60, 0x1, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008004}, 0x40835) 0s ago: executing program 2 (id=6897): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r2, 0x6a, 0x6, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x48080) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): as an active interface with an up link [ 888.723313][T26594] geneve2: entered promiscuous mode [ 888.733316][T26594] geneve2: entered allmulticast mode [ 888.760687][T20903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 888.776748][T20903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 888.796779][T20903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 888.816273][T20903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 888.967242][T26612] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5394'. [ 889.187821][T26614] bond10: entered allmulticast mode [ 889.259409][T26618] bridge3: entered promiscuous mode [ 889.266491][T26618] bridge3: entered allmulticast mode [ 889.279478][T26618] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 889.467556][T26633] netlink: 'syz.2.5399': attribute type 1 has an invalid length. [ 889.480589][T26633] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5399'. [ 889.512361][T26633] netlink: 'syz.2.5399': attribute type 1 has an invalid length. [ 889.522818][T26633] netlink: 'syz.2.5399': attribute type 8 has an invalid length. [ 889.535467][T26645] ip6t_srh: unknown srh invflags 4000 [ 889.819409][T26651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 889.826795][T26651] IPv6: NLM_F_CREATE should be set when creating new route [ 889.834223][T26651] IPv6: NLM_F_CREATE should be set when creating new route [ 889.861730][T26651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 890.899472][T26698] netlink: 'syz.1.5420': attribute type 10 has an invalid length. [ 890.921670][T26698] dummy0: entered promiscuous mode [ 890.935576][T26698] bridge0: port 5(dummy0) entered blocking state [ 890.949530][T26698] bridge0: port 5(dummy0) entered disabled state [ 890.964860][T26698] dummy0: entered allmulticast mode [ 891.201635][T26710] tipc: Enabled bearer , priority 10 [ 891.533897][T26725] netlink: 'syz.1.5430': attribute type 2 has an invalid length. [ 891.931041][T26747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 892.006212][T26754] tipc: Resetting bearer [ 892.164704][T26762] netlink: 'syz.5.5441': attribute type 1 has an invalid length. [ 892.192034][T26751] __nla_validate_parse: 11 callbacks suppressed [ 892.192060][T26751] netlink: 512 bytes leftover after parsing attributes in process `syz.2.5439'. [ 892.224507][T26762] netlink: 'syz.5.5441': attribute type 2 has an invalid length. [ 892.324639][T21679] tipc: Node number set to 3013279310 [ 892.563776][T26783] netlink: 'syz.2.5447': attribute type 39 has an invalid length. [ 892.581262][T26784] tls_set_device_offload_rx: netdev not found [ 892.935037][T26802] netlink: 'syz.2.5453': attribute type 9 has an invalid length. [ 892.966668][T26802] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5453'. [ 893.068729][T26810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5455'. [ 893.079449][T26807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5454'. [ 893.226584][T26805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5454'. [ 893.279039][T26819] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5454'. [ 893.289258][T26819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5454'. [ 893.511714][T26825] tls_set_device_offload_rx: netdev not found [ 893.818000][T26847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5467'. [ 893.888497][T26851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5469'. [ 894.065504][T26859] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 894.084012][T26859] syzkaller1: linktype set to 823 [ 894.745586][T26898] netlink: 'syz.4.5482': attribute type 1 has an invalid length. [ 894.797744][T26898] 8021q: adding VLAN 0 to HW filter on device bond7 [ 894.819819][T26898] bond7: (slave geneve4): making interface the new active one [ 894.831180][T26898] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 894.840841][ T6453] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 894.856159][ T6453] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 894.874931][ T6453] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 894.913391][ T6453] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 894.999875][T26909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5485'. [ 895.058413][T26911] netlink: 'syz.3.5486': attribute type 4 has an invalid length. [ 895.120728][T26912] netlink: 'syz.3.5486': attribute type 1 has an invalid length. [ 897.448228][T26882] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 897.458847][T26898] netlink: 'syz.4.5482': attribute type 1 has an invalid length. [ 897.467382][T26898] netlink: 'syz.4.5482': attribute type 1 has an invalid length. [ 898.315731][T26949] __nla_validate_parse: 1 callbacks suppressed [ 898.315753][T26949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5498'. [ 898.472810][T26956] netlink: 'syz.5.5500': attribute type 7 has an invalid length. [ 898.591753][T26969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5503'. [ 898.595868][T26947] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5497'. [ 898.651908][T26972] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 898.823506][T26979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5505'. [ 899.161899][T21681] page_pool_release_retry() stalled pool shutdown: id 85, 1 inflight 482 sec [ 899.256238][T26999] geneve3: entered promiscuous mode [ 899.494943][T27010] netlink: 'syz.2.5517': attribute type 4 has an invalid length. [ 899.516385][T27012] tipc: Enabling of bearer rejected, media not registered [ 899.524756][T27010] netlink: 'syz.2.5517': attribute type 4 has an invalid length. [ 900.018928][T27038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5527'. [ 900.050486][T27038] netlink: 'syz.2.5527': attribute type 1 has an invalid length. [ 900.071848][T27038] netlink: 'syz.2.5527': attribute type 2 has an invalid length. [ 900.092431][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5529'. [ 900.117018][T27042] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 900.129291][T27042] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 900.149748][T27042] gretap3: entered promiscuous mode [ 900.173759][T27042] gretap3: entered allmulticast mode [ 900.175418][T27046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5529'. [ 900.216325][T27050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5531'. [ 900.249177][T27050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5531'. [ 900.439184][T27046] netlink: 'syz.5.5529': attribute type 23 has an invalid length. [ 900.464468][T27060] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 900.704424][T27071] netlink: 'syz.3.5538': attribute type 2 has an invalid length. [ 900.726113][T27071] netlink: 'syz.3.5538': attribute type 1 has an invalid length. [ 900.810408][T27077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5541'. [ 900.865960][T27075] bond11: entered promiscuous mode [ 900.869362][T27082] Bluetooth: MGMT ver 1.23 [ 900.872357][T27075] 8021q: adding VLAN 0 to HW filter on device bond11 [ 901.012961][T27088] tls_set_device_offload_rx: netdev not found [ 901.129378][T27091] Cannot find add_set index 2 as target [ 901.224393][T27091] tipc: Enabled bearer , priority 0 [ 901.340281][T27091] syzkaller0: entered promiscuous mode [ 901.351643][T27091] syzkaller0: entered allmulticast mode [ 901.374695][T27091] tipc: Resetting bearer [ 901.391880][T27105] team_slave_1: Caught tx_queue_len zero misconfig [ 901.442837][T27090] tipc: Resetting bearer [ 901.726601][T27130] tls_set_device_offload_rx: netdev not found [ 905.973666][T27090] tipc: Disabling bearer [ 905.985568][T27118] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 906.196431][T27148] __nla_validate_parse: 1 callbacks suppressed [ 906.196456][T27148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5559'. [ 906.332280][T27150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5561'. [ 906.394052][T27150] validate_nla: 35 callbacks suppressed [ 906.394073][T27150] netlink: 'syz.4.5561': attribute type 1 has an invalid length. [ 906.637972][T27182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5567'. [ 906.713156][T27182] 8021q: adding VLAN 0 to HW filter on device bond12 [ 906.751640][T27184] bond12: entered promiscuous mode [ 906.774370][T27184] bond12: entered allmulticast mode [ 906.785676][T27184] 8021q: adding VLAN 0 to HW filter on device bond12 [ 906.805108][T27184] team0: Port device bond12 added [ 906.879580][T27190] netlink: 'syz.3.5568': attribute type 3 has an invalid length. [ 906.890489][T27190] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5568'. [ 907.203851][T27200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5574'. [ 907.205253][T27202] netlink: 'syz.4.5573': attribute type 1 has an invalid length. [ 907.258222][T27202] netlink: 'syz.4.5573': attribute type 4 has an invalid length. [ 907.302027][T27202] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5573'. [ 907.425480][ T7214] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 907.452000][T27219] sit0: entered promiscuous mode [ 907.458279][T27219] netlink: 'syz.1.5579': attribute type 1 has an invalid length. [ 907.473134][T27219] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5579'. [ 907.517387][T27219] netlink: 'syz.1.5579': attribute type 10 has an invalid length. [ 907.528735][T27220] netlink: 'syz.1.5579': attribute type 1 has an invalid length. [ 907.528820][T27217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5578'. [ 907.538061][T27220] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5579'. [ 907.601633][T27217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5578'. [ 907.629136][T27219] veth1_macvtap: left promiscuous mode [ 907.664602][T27219] macsec0: left allmulticast mode [ 907.714941][T27219] veth1_macvtap: entered promiscuous mode [ 907.759001][T27219] .`: (slave macsec0): Enslaving as an active interface with an up link [ 908.056973][T27241] syzkaller0: entered promiscuous mode [ 908.068815][T27241] syzkaller0: entered allmulticast mode [ 908.528734][T27264] nbd: must specify at least one socket [ 909.014565][T27292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.152808][T27299] xt_policy: neither incoming nor outgoing policy selected [ 909.233609][T27304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.247035][T27306] netlink: 'syz.1.5605': attribute type 10 has an invalid length. [ 909.435372][T27309] x_tables: duplicate underflow at hook 1 [ 909.572430][T27316] bridge7: entered promiscuous mode [ 909.597335][T27316] bridge7: entered allmulticast mode [ 909.621606][T27322] netlink: 'syz.4.5611': attribute type 21 has an invalid length. [ 909.632696][T27316] team0: Port device bridge7 added [ 909.653381][T27319] bridge0: port 3(team0) entered blocking state [ 909.675536][T27327] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 909.696775][T27319] bridge0: port 3(team0) entered disabled state [ 909.716463][T27319] team0: entered allmulticast mode [ 909.741253][T27319] team_slave_0: entered allmulticast mode [ 909.770675][T27319] team_slave_1: entered allmulticast mode [ 909.805948][T27319] team0: entered promiscuous mode [ 909.823328][T27319] team_slave_0: entered promiscuous mode [ 909.834961][T27319] team_slave_1: entered promiscuous mode [ 909.857770][T27319] bridge0: port 3(team0) entered blocking state [ 909.866806][T27319] bridge0: port 3(team0) entered forwarding state [ 909.935724][T27322] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 909.963538][T27322] bond8 (unregistering): Released all slaves [ 910.189150][T27345] ip6erspan0: entered allmulticast mode [ 910.611989][T27371] netlink: 'syz.5.5625': attribute type 1 has an invalid length. [ 910.671099][T27375] FAULT_INJECTION: forcing a failure. [ 910.671099][T27375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.700719][T27375] CPU: 1 UID: 0 PID: 27375 Comm: syz.3.5623 Not tainted syzkaller #0 PREEMPT(full) [ 910.700758][T27375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 910.700772][T27375] Call Trace: [ 910.700781][T27375] [ 910.700791][T27375] dump_stack_lvl+0xe8/0x150 [ 910.700822][T27375] should_fail_ex+0x412/0x560 [ 910.700858][T27375] _copy_from_user+0x2d/0xb0 [ 910.700889][T27375] tls_setsockopt+0x678/0x15c0 [ 910.700941][T27375] ? __pfx_tls_setsockopt+0x10/0x10 [ 910.700979][T27375] ? __fget_files+0x2a/0x420 [ 910.701004][T27375] ? aa_sock_opt_perm+0xff/0x1a0 [ 910.701034][T27375] ? sock_common_setsockopt+0x36/0xc0 [ 910.701059][T27375] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 910.701087][T27375] do_sock_setsockopt+0x17c/0x1b0 [ 910.701121][T27375] __x64_sys_setsockopt+0x13d/0x1b0 [ 910.701152][T27375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.701176][T27375] do_syscall_64+0x15f/0xf80 [ 910.701203][T27375] ? trace_irq_disable+0x3b/0x140 [ 910.701233][T27375] ? clear_bhb_loop+0x40/0x90 [ 910.701260][T27375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.701282][T27375] RIP: 0033:0x7f129099cdd9 [ 910.701303][T27375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.701322][T27375] RSP: 002b:00007f1291780028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 910.701345][T27375] RAX: ffffffffffffffda RBX: 00007f1290c15fa0 RCX: 00007f129099cdd9 [ 910.701361][T27375] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 910.701374][T27375] RBP: 00007f1291780090 R08: 0000000000000028 R09: 0000000000000000 [ 910.701388][T27375] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 910.701401][T27375] R13: 00007f1290c16038 R14: 00007f1290c15fa0 R15: 00007fffe0f75418 [ 910.701438][T27375] [ 911.061822][T27389] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 911.198154][T27393] vlan4: entered allmulticast mode [ 911.220146][T27393] bond0: entered allmulticast mode [ 911.253992][T27393] bond_slave_0: entered allmulticast mode [ 911.264459][T27393] bond_slave_1: entered allmulticast mode [ 911.751685][T27403] bridge0: port 4(ipvlan2) entered blocking state [ 911.768540][T27403] bridge0: port 4(ipvlan2) entered disabled state [ 911.785753][T27403] ipvlan2: entered allmulticast mode [ 911.793447][T27403] bridge0: entered allmulticast mode [ 911.813665][T27403] ipvlan2: left allmulticast mode [ 911.840382][T27403] bridge0: left allmulticast mode [ 911.959467][T27416] __nla_validate_parse: 11 callbacks suppressed [ 911.959490][T27416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5637'. [ 912.034937][T27416] validate_nla: 4 callbacks suppressed [ 912.034960][T27416] netlink: 'syz.1.5637': attribute type 25 has an invalid length. [ 912.088028][T27420] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5638'. [ 912.296507][T27433] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5643'. [ 912.319594][T27433] 0·: renamed from hsr0 [ 912.337865][T27433] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 912.371147][T27433] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 912.396106][T27433] 0·: entered allmulticast mode [ 912.415866][T27433] hsr_slave_0: entered allmulticast mode [ 912.434438][T27433] hsr_slave_1: entered allmulticast mode [ 912.455130][T27433] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 912.492380][T27438] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 912.506288][T27440] bond8: option lp_interval: invalid value (0) [ 912.513287][T27440] bond8: option lp_interval: allowed values 1 - 2147483647 [ 912.530783][T27440] bond8 (unregistering): Released all slaves [ 912.575051][T27446] tipc: Enabling of bearer rejected, already enabled [ 912.618427][T27446] tipc: Resetting bearer [ 912.681922][T27454] netlink: 'syz.2.5648': attribute type 1 has an invalid length. [ 912.701085][T27454] netlink: 'syz.2.5648': attribute type 1 has an invalid length. [ 912.718112][T27454] netlink: 'syz.2.5648': attribute type 1 has an invalid length. [ 912.738245][T27454] netlink: 'syz.2.5648': attribute type 1 has an invalid length. [ 912.751353][T27454] netlink: 'syz.2.5648': attribute type 1 has an invalid length. [ 912.769845][T27454] netlink: 'syz.2.5648': attribute type 1 has an invalid length. [ 912.788946][T27454] netlink: 'syz.2.5648': attribute type 1 has an invalid length. [ 913.453160][T27486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5656'. [ 913.590523][T27492] netlink: 'syz.3.5659': attribute type 1 has an invalid length. [ 913.609475][T27491] netlink: 'syz.5.5658': attribute type 6 has an invalid length. [ 913.644913][T27491] bond0: entered promiscuous mode [ 913.650778][T27491] bond_slave_0: entered promiscuous mode [ 913.657374][T27491] bond_slave_1: entered promiscuous mode [ 913.667721][T27496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5658'. [ 913.692231][T27491] bond0: left promiscuous mode [ 913.711101][T27491] bond_slave_0: left promiscuous mode [ 913.745019][T27491] bond_slave_1: left promiscuous mode [ 914.154470][T27517] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5665'. [ 914.404521][T27530] IPVS: Error connecting to the multicast addr [ 914.672186][T27541] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5672'. [ 914.705305][T27541] netlink: 212324 bytes leftover after parsing attributes in process `syz.5.5672'. [ 914.722416][T27543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5673'. [ 914.752004][T27543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5673'. [ 914.779583][T27545] --map-set only usable from mangle table [ 915.129152][T20898] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 915.177135][T20898] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 916.040662][T26145] Bluetooth: hci4: command 0x0405 tx timeout [ 916.658804][T27630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 917.106119][T27644] "syz.3.5699" (27644) uses obsolete ecb(arc4) skcipher [ 917.124744][T27664] __nla_validate_parse: 1 callbacks suppressed [ 917.124765][T27664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5700'. [ 917.177022][T27654] validate_nla: 7 callbacks suppressed [ 917.177046][T27654] netlink: 'syz.3.5699': attribute type 1 has an invalid length. [ 917.369747][T27667] xt_CT: No such helper "snmp" [ 917.680305][T27676] bond8: invalid ARP target 0.0.0.0 specified for addition [ 917.689308][T27676] bond8: option arp_ip_target: invalid value (0) [ 917.700623][T27676] bond8 (unregistering): Released all slaves [ 917.759103][T27691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5707'. [ 917.849270][T27680] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5705'. [ 917.880705][T27680] netlink: 21 bytes leftover after parsing attributes in process `syz.5.5705'. [ 917.890933][T27680] netlink: 21 bytes leftover after parsing attributes in process `syz.5.5705'. [ 918.313721][T27709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5711'. [ 918.350737][T20898] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 918.876712][T27731] netlink: 'syz.4.5720': attribute type 1 has an invalid length. [ 919.054465][T27701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 919.172622][T27734] IPVS: persistence engine module ip_vs_pe_À not found [ 919.527103][T27760] sctp: [Deprecated]: syz.2.5730 (pid 27760) Use of int in max_burst socket option. [ 919.527103][T27760] Use struct sctp_assoc_value instead [ 919.693967][T27767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5734'. [ 919.719205][T27767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5734'. [ 919.793837][T27776] openvswitch: netlink: Unknown key attributes 2 [ 919.827282][T27778] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5735'. [ 919.931887][T27773] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5735'. [ 920.298377][T27790] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 920.328770][T27790] bond8 (unregistering): Released all slaves [ 920.815722][T27820] netlink: 'syz.5.5751': attribute type 1 has an invalid length. [ 921.088569][T27820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 921.118413][T27826] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 921.133695][T27826] bond7: entered allmulticast mode [ 921.316405][T27850] netlink: 'syz.1.5757': attribute type 7 has an invalid length. [ 921.593997][T27866] netlink: 'syz.3.5760': attribute type 1 has an invalid length. [ 921.609523][T27866] netlink: 'syz.3.5760': attribute type 2 has an invalid length. [ 922.002012][T27892] netlink: 'syz.1.5771': attribute type 29 has an invalid length. [ 922.149748][T27900] __nla_validate_parse: 12 callbacks suppressed [ 922.149766][T27900] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5772'. [ 922.168561][T27903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5773'. [ 922.391213][T27911] openvswitch: netlink: IP tunnel dst address not specified [ 922.460749][T27914] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 922.475384][T27914] bond8 (unregistering): Released all slaves [ 922.508091][T27921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 922.586020][T27921] netlink: 'syz.5.5777': attribute type 4 has an invalid length. [ 922.665177][T27930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5782'. [ 922.822158][T27936] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20004 [ 922.862446][T27936] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5783'. [ 923.206475][T27959] IPv6: sit1: Disabled Multicast RS [ 923.233786][T27959] sit1: entered allmulticast mode [ 923.378752][T27964] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5788'. [ 923.412437][T27964] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 467 [ 923.433608][T27962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5787'. [ 924.099991][T28003] Can't find ip_set type hash:ip,poÈ+¾Cp [ 924.323115][T28021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5803'. [ 924.350940][T28021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5803'. [ 924.394298][T28021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5803'. [ 924.465198][T28021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5803'. [ 924.476004][T20904] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.484978][T20904] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.494634][T20904] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.504947][T20904] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.587946][T28033] tls_set_device_offload_rx: netdev not found [ 924.637806][T28035] netlink: 'syz.1.5808': attribute type 2 has an invalid length. [ 924.667084][T28035] netlink: 'syz.1.5808': attribute type 2 has an invalid length. [ 924.707042][T28040] tipc: Enabled bearer , priority 4 [ 925.147288][T28067] netlink: 'syz.2.5816': attribute type 1 has an invalid length. [ 925.175172][T28067] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 925.453897][T28083] netlink: 'syz.5.5821': attribute type 1 has an invalid length. [ 925.634545][T28091] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 927.821075][T28047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 928.077836][T28137] tls_set_device_offload_rx: netdev not found [ 928.206262][T28147] __nla_validate_parse: 7 callbacks suppressed [ 928.206286][T28147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5838'. [ 928.211684][T28148] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5839'. [ 928.379323][T28160] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 928.485983][T28170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5844'. [ 928.548398][T28172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5846'. [ 928.567146][T28172] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5846'. [ 928.599172][T28172] 0·: renamed from hsr0 (while UP) [ 928.629327][T28172] 0·: entered allmulticast mode [ 928.647402][T28172] hsr_slave_0: entered allmulticast mode [ 928.664142][T28172] hsr_slave_1: entered allmulticast mode [ 928.672241][T28172] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 928.874099][T28187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5852'. [ 929.092705][T28201] netlink: 'syz.5.5856': attribute type 1 has an invalid length. [ 929.098665][T28197] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5855'. [ 929.132381][T28197] netlink: ct family unspecified [ 929.132451][T28200] xt_socket: unknown flags 0x50 [ 929.193005][T28200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5858'. [ 929.242807][T28200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5858'. [ 929.784554][T28245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5872'. [ 931.021535][T28308] netlink: 'syz.2.5887': attribute type 1 has an invalid length. [ 931.054724][T28308] openvswitch: netlink: Missing key (keys=40, expected=100) [ 931.219522][T28319] netlink: 'syz.1.5889': attribute type 30 has an invalid length. [ 931.806885][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 931.884464][T28346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 931.903510][T28346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.990483][T28353] sctp: [Deprecated]: syz.2.5902 (pid 28353) Use of int in max_burst socket option. [ 931.990483][T28353] Use struct sctp_assoc_value instead [ 933.097038][T28389] tipc: Enabled bearer , priority 0 [ 933.136797][T28389] syzkaller0: entered promiscuous mode [ 933.155930][T28389] syzkaller0: entered allmulticast mode [ 933.283185][T28402] tipc: Resetting bearer [ 933.299773][T28388] tipc: Resetting bearer [ 933.364252][T28388] tipc: Disabling bearer [ 934.246997][T28447] tap0: tun_chr_ioctl cmd 1074025676 [ 934.268999][T28447] tap0: owner set to 0 [ 934.286428][T28455] __nla_validate_parse: 8 callbacks suppressed [ 934.286461][T28455] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5929'. [ 934.304795][T28453] tipc: Started in network mode [ 934.315389][T28453] tipc: Node identity 5651961f56b8, cluster identity 4711 [ 934.329792][T28453] tipc: Enabled bearer , priority 11 [ 934.673958][T28473] netlink: 'syz.2.5934': attribute type 12 has an invalid length. [ 934.702670][T28473] netlink: 'syz.2.5934': attribute type 29 has an invalid length. [ 934.723291][T28473] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5934'. [ 934.746332][T28473] netlink: 'syz.2.5934': attribute type 3 has an invalid length. [ 934.768835][T28473] netlink: 'syz.2.5934': attribute type 2 has an invalid length. [ 934.777548][T28473] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5934'. [ 935.170856][T28502] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5943'. [ 935.242695][T28505] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 935.266001][T28505] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 935.290967][T28505] team0: Failed to send options change via netlink (err -105) [ 935.321484][T28505] team0: Port device batadv1 added [ 935.391025][T28517] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5948'. [ 935.442239][T21681] tipc: Node number set to 15308319 [ 935.717619][T28527] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5953'. [ 935.748794][T28532] netlink: 'syz.5.5955': attribute type 83 has an invalid length. [ 935.767024][T28532] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5955'. [ 935.875448][T28544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 935.901873][T28545] netlink: 'syz.4.5957': attribute type 32 has an invalid length. [ 935.912173][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5957'. [ 935.970673][T28545] bond8: Setting coupled_control to off (0) [ 936.537498][T28580] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5968'. [ 936.637418][T28585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5969'. [ 936.835523][T28597] openvswitch: netlink: Multiple metadata blocks provided [ 937.893142][T28655] tls_set_device_offload_rx: netdev not found [ 937.954038][T20903] tipc: Subscription rejected, illegal request [ 938.081376][T28663] netlink: 'syz.5.5995': attribute type 1 has an invalid length. [ 938.089519][T28663] netlink: 'syz.5.5995': attribute type 1 has an invalid length. [ 938.105893][T28664] netlink: 'syz.3.5994': attribute type 21 has an invalid length. [ 938.119567][T28663] netlink: 'syz.5.5995': attribute type 8 has an invalid length. [ 938.889733][T28713] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 939.124545][T28726] bridge0: port 4(ipvlan2) entered blocking state [ 939.160903][T28726] bridge0: port 4(ipvlan2) entered disabled state [ 939.178824][T28726] ipvlan2: entered allmulticast mode [ 939.184774][T28726] bridge0: entered allmulticast mode [ 939.205166][T28726] ipvlan2: left allmulticast mode [ 939.217994][T28726] bridge0: left allmulticast mode [ 939.557423][T28744] __nla_validate_parse: 13 callbacks suppressed [ 939.557458][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6016'. [ 939.593021][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6016'. [ 939.807243][T28754] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 939.832561][T28759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6021'. [ 940.236128][ T30] audit: type=1800 audit(1778452135.847:10): pid=28783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6025" name="memory.events" dev="tmpfs" ino=3031 res=0 errno=0 [ 940.243127][T28786] validate_nla: 1 callbacks suppressed [ 940.243148][T28786] netlink: 'syz.4.6026': attribute type 10 has an invalid length. [ 940.283689][T28786] team0: Port device vlan0 added [ 940.821887][T28812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6030'. [ 940.888981][T28813] dvmrp0: left allmulticast mode [ 940.896093][T28812] netlink: 'syz.1.6030': attribute type 15 has an invalid length. [ 940.974159][T28817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.028026][T28812] ipvlan0: entered allmulticast mode [ 941.036917][T28824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6034'. [ 941.062288][T28812] batman_adv: batadv0: Adding interface: ipvlan0 [ 941.071427][T28812] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.140277][T28812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.152909][T28812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.183851][T28812] batman_adv: batadv0: Interface activated: ipvlan0 [ 941.458937][T28839] netlink: 'syz.2.6039': attribute type 11 has an invalid length. [ 941.467428][T28844] sctp: [Deprecated]: syz.1.6040 (pid 28844) Use of int in max_burst socket option. [ 941.467428][T28844] Use struct sctp_assoc_value instead [ 941.480862][T28839] netlink: 'syz.2.6039': attribute type 11 has an invalid length. [ 941.520339][T28839] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6039'. [ 942.072592][T28873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6046'. [ 942.264210][T28873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6046'. [ 942.474815][T28889] netlink: 372 bytes leftover after parsing attributes in process `syz.1.6049'. [ 942.519458][T28881] bond8: option min_links: invalid value (18446744073709551614) [ 942.532243][T28881] bond8: option min_links: allowed values 0 - 2147483647 [ 942.569540][T28881] bond8 (unregistering): Released all slaves [ 942.679412][T28896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6050'. [ 943.940801][T26145] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 943.968061][T28939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 943.979281][T28939] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 944.001589][T28939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 944.018250][T28939] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 944.604446][T28953] __nla_validate_parse: 3 callbacks suppressed [ 944.604469][T28953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6062'. [ 944.953039][T28963] netlink: 'syz.4.6063': attribute type 4 has an invalid length. [ 945.411619][T28973] syzkaller0: entered promiscuous mode [ 945.428204][T28973] syzkaller0: entered allmulticast mode [ 945.657967][T28993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6069'. [ 946.136527][T20181] Bluetooth: hci6: command tx timeout [ 948.202407][T20181] Bluetooth: hci6: command tx timeout [ 950.282123][T20181] Bluetooth: hci6: command tx timeout [ 950.646208][T29013] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20004 [ 950.829608][T29023] 8021q: VLANs not supported on lo [ 950.856328][T29023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6075'. [ 950.879065][T29023] netem: invalid attributes len -5 [ 950.907858][T29023] netem: change failed [ 951.153803][T29040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6079'. [ 951.359745][T29040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6079'. [ 951.587981][T29057] xt_hashlimit: size too large, truncated to 1048576 [ 951.597332][T29055] IPv6: NLM_F_CREATE should be specified when creating new route [ 951.639571][T29055] IPv6: Can't replace route, no match found [ 951.677772][T29051] netlink: 'syz.5.6083': attribute type 16 has an invalid length. [ 951.711683][T29051] netlink: 'syz.5.6083': attribute type 17 has an invalid length. [ 951.724174][T29060] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6085'. [ 951.798598][T29051] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 951.866348][T29066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6087'. [ 951.886221][T29066] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6087'. [ 951.905482][T29066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6087'. [ 952.241114][T29075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6090'. [ 952.262043][T29075] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6090'. [ 952.277098][T29075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6090'. [ 952.360416][T20181] Bluetooth: hci6: command tx timeout [ 952.901621][T29088] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 952.956287][T29088] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 953.102839][T29075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 953.121553][T29075] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 953.336952][T29099] tls_set_device_offload_rx: netdev not found [ 953.368086][T29075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 953.401882][T29075] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 953.436903][T28935] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.445985][T28935] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.453468][T28935] bridge_slave_0: entered allmulticast mode [ 953.462415][T28935] bridge_slave_0: entered promiscuous mode [ 953.472915][T28935] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.481549][T28935] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.489046][T28935] bridge_slave_1: entered allmulticast mode [ 953.510142][T28935] bridge_slave_1: entered promiscuous mode [ 953.567864][T29075] tipc: Resetting bearer [ 953.663057][T29075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 953.693581][T28935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.716424][T29075] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 953.744267][T28935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.818850][T29075] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 953.827194][T29075] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 953.943604][T28935] team0: Port device team_slave_0 added [ 953.986546][T28935] team0: Port device team_slave_1 added [ 954.101428][T29128] netlink: 'syz.1.6101': attribute type 10 has an invalid length. [ 954.167138][T28935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.189431][T28935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.250077][T28935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.284338][T29128] team0 (unregistering): Port device team_slave_0 removed [ 954.299234][T29128] team0 (unregistering): Port device team_slave_1 removed [ 954.343509][T29128] team0 (unregistering): Port device bond12 removed [ 954.403331][T28935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.426379][T28935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.496724][T28935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.554275][T29146] openvswitch: netlink: Flow actions attr not present in new flow. [ 954.578686][T29075] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 954.588184][T29075] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 954.899841][T28935] hsr_slave_0: entered promiscuous mode [ 954.918494][T28935] hsr_slave_1: entered promiscuous mode [ 955.118673][T29171] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 955.568068][T28935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.612784][T28935] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 955.938766][T29189] netlink: 'syz.3.6114': attribute type 1 has an invalid length. [ 956.081626][T28935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.112806][T28935] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 956.265734][T29189] 8021q: adding VLAN 0 to HW filter on device bond8 [ 956.306517][T29191] 8021q: adding VLAN 0 to HW filter on device bond8 [ 956.315746][T29191] bond8: (slave vcan1): The slave device specified does not support setting the MAC address [ 956.341717][T29191] bond8: (slave vcan1): Error -95 calling set_mac_address [ 956.403273][T29209] netlink: 'syz.1.6116': attribute type 11 has an invalid length. [ 956.437316][T29205] __nla_validate_parse: 6 callbacks suppressed [ 956.437339][T29205] netlink: 81 bytes leftover after parsing attributes in process `syz.1.6116'. [ 956.643468][T28935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.665790][T28935] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 956.903106][T29231] netlink: 'syz.3.6120': attribute type 1 has an invalid length. [ 956.926958][T29231] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6120'. [ 959.493692][T21681] page_pool_release_retry() stalled pool shutdown: id 85, 1 inflight 543 sec [ 961.763864][T29231] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6120'. [ 961.773706][T29231] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6120'. [ 961.784939][T29232] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6120'. [ 962.109274][T29272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6130'. [ 962.280814][T29280] netlink: 6036 bytes leftover after parsing attributes in process `syz.1.6131'. [ 962.312293][T29280] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 962.323916][T29285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6133'. [ 962.334050][T29285] team0: left allmulticast mode [ 962.339125][T29285] team_slave_0: left allmulticast mode [ 962.345467][T29285] team_slave_1: left allmulticast mode [ 962.354898][T29285] team0: left promiscuous mode [ 962.359785][T29285] team_slave_0: left promiscuous mode [ 962.365936][T29285] team_slave_1: left promiscuous mode [ 962.374259][T29285] bridge0: port 3(team0) entered disabled state [ 962.385597][T29285] bridge_slave_1: left allmulticast mode [ 962.387216][T29287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6133'. [ 962.392923][T29285] bridge_slave_1: left promiscuous mode [ 962.407546][T29285] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.417900][T29285] ¾x9ÿ: left allmulticast mode [ 962.426429][T29285] ¾x9ÿ: left promiscuous mode [ 962.433097][T29285] bridge0: port 1(1¾x9ÿ) entered disabled state [ 962.713332][T29295] netlink: 'syz.3.6134': attribute type 29 has an invalid length. [ 962.736076][T29295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6134'. [ 962.788229][T28935] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 962.838197][T28935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 962.869706][T28935] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 962.904022][T28935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 962.943141][T28935] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 962.977723][T29310] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6139'. [ 962.991579][T28935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 963.032432][T28935] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 963.046452][T29310] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6139'. [ 963.075480][T28935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 963.124416][T29304] syzkaller0: entered promiscuous mode [ 963.146125][T29304] syzkaller0: entered allmulticast mode [ 963.714858][T28935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.835836][T28935] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.859120][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.866485][ T7216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.923116][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.930401][ T7216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.389095][T29380] xt_HMARK: spi-set and port-set can't be combined [ 964.903818][T29412] ksmbd: Unknown IPC event: 3, ignore. [ 965.517155][T28935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.717481][T28935] veth0_vlan: entered promiscuous mode [ 965.763809][T28935] veth1_vlan: entered promiscuous mode [ 965.866017][T28935] veth0_macvtap: entered promiscuous mode [ 965.886827][T28935] veth1_macvtap: entered promiscuous mode [ 965.954606][T28935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.989786][T28935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.035137][T29426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.050368][T29472] netlink: 'syz.1.6169': attribute type 14 has an invalid length. [ 966.056686][T29426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.090990][T29426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.119561][T29472] netlink: 'syz.1.6169': attribute type 13 has an invalid length. [ 966.127602][T29426] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.405805][T29420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.415559][T29420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.612168][T29429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.660578][T29429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.991187][T29497] __nla_validate_parse: 15 callbacks suppressed [ 966.991210][T29497] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6174'. [ 967.062017][T29497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6174'. [ 967.377428][T29510] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6178'. [ 967.396911][T28939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 967.424848][T28939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 967.435459][T28939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 967.446824][T28939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 967.457033][T28939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 967.620407][T29519] openvswitch: netlink: Missing key (keys=40, expected=100) [ 968.096381][T18086] bridge0: port 4(syz_tun) entered disabled state [ 968.157880][T29539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6184'. [ 968.179016][T29538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6186'. [ 968.179238][T29539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6184'. [ 968.201911][T18086] syz_tun (unregistering): left allmulticast mode [ 968.209437][T18086] syz_tun (unregistering): left promiscuous mode [ 968.224257][T18086] bridge0: port 4(syz_tun) entered disabled state [ 968.436850][T29549] xt_hashlimit: size too large, truncated to 1048576 [ 968.494463][T29550] dvmrp1: entered allmulticast mode [ 968.510728][T29551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6189'. [ 969.072149][T29571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6196'. [ 969.178653][T29570] bond1: option fail_over_mac: invalid value (16) [ 969.189707][T29570] bond1 (unregistering): Released all slaves [ 969.535442][T29577] syzkaller0: entered promiscuous mode [ 969.552461][T29577] syzkaller0: entered allmulticast mode [ 969.560790][T28939] Bluetooth: hci5: command tx timeout [ 969.574828][T29580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6198'. [ 969.600354][T29580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6198'. [ 970.148790][T29596] netlink: 'syz.5.6203': attribute type 1 has an invalid length. [ 970.157407][T29595] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 970.561575][T29616] netlink: 'syz.2.6207': attribute type 4 has an invalid length. [ 970.577678][T29616] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 970.932868][T29631] nbd: nbd1 already in use [ 970.963818][T29631] block nbd1: NBD_DISCONNECT [ 970.985080][T29631] block nbd1: Send disconnect failed -32 [ 971.022847][T29631] block nbd1: shutting down sockets [ 971.349863][T29637] bond9: option all_slaves_active: invalid value (222) [ 971.365368][T29637] bond9 (unregistering): Released all slaves [ 971.566680][T29654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 971.593085][T29654] xt_hl: Unknown TTL match mode: 255 [ 971.604266][T29511] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.633913][T29511] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.641515][T28939] Bluetooth: hci5: command tx timeout [ 971.673040][T29511] bridge_slave_0: entered allmulticast mode [ 971.697278][T29511] bridge_slave_0: entered promiscuous mode [ 971.720768][T29511] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.734422][T29511] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.762450][T29511] bridge_slave_1: entered allmulticast mode [ 971.771425][T29511] bridge_slave_1: entered promiscuous mode [ 971.907821][T29511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.936240][T29675] netlink: 'syz.4.6221': attribute type 29 has an invalid length. [ 971.959216][T29511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.106454][T29511] team0: Port device team_slave_0 added [ 972.137893][T29511] team0: Port device team_slave_1 added [ 972.185454][T29684] __nla_validate_parse: 9 callbacks suppressed [ 972.185477][T29684] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6224'. [ 972.201377][T29511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.211094][T29511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.251774][T29511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.294774][T29511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.313014][T29511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.380727][T29511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.526559][T29511] hsr_slave_0: entered promiscuous mode [ 972.537525][T29511] hsr_slave_1: entered promiscuous mode [ 972.544774][T29511] debugfs: 'hsr0' already exists in 'hsr' [ 972.556965][T29511] Cannot create hsr debugfs directory [ 972.569527][T29699] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6229'. [ 972.580822][T29700] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6229'. [ 972.737277][T29699] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6229'. [ 972.794594][T29705] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6229'. [ 972.955565][T29710] syzkaller0: entered promiscuous mode [ 972.961860][T29710] syzkaller0: entered allmulticast mode [ 973.068849][T29717] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 973.083735][T29717] bond9: option packets_per_slave: allowed values 0 - 65535 [ 973.094510][T29717] bond9 (unregistering): Released all slaves [ 973.494308][T29736] syz.1.6237: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 973.512792][T29736] CPU: 1 UID: 0 PID: 29736 Comm: syz.1.6237 Not tainted syzkaller #0 PREEMPT(full) [ 973.512831][T29736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 973.512843][T29736] Call Trace: [ 973.512852][T29736] [ 973.512860][T29736] dump_stack_lvl+0xe8/0x150 [ 973.512890][T29736] warn_alloc+0x249/0x340 [ 973.512918][T29736] ? stack_trace_save+0xa9/0x100 [ 973.512949][T29736] ? __pfx_warn_alloc+0x10/0x10 [ 973.513002][T29736] ? kasan_save_track+0x4f/0x80 [ 973.513026][T29736] ? kasan_save_track+0x3e/0x80 [ 973.513047][T29736] ? __kasan_kmalloc+0x93/0xb0 [ 973.513070][T29736] ? __kmalloc_cache_noprof+0x31c/0x660 [ 973.513095][T29736] ? xskq_create+0x56/0x170 [ 973.513118][T29736] ? xsk_setsockopt+0x54c/0x990 [ 973.513137][T29736] ? do_sock_setsockopt+0x17c/0x1b0 [ 973.513160][T29736] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 973.513183][T29736] ? do_syscall_64+0x15f/0xf80 [ 973.513212][T29736] __vmalloc_node_range_noprof+0x132/0x1750 [ 973.513273][T29736] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 973.513314][T29736] ? __kasan_kmalloc+0x93/0xb0 [ 973.513346][T29736] vmalloc_user_noprof+0xad/0xe0 [ 973.513372][T29736] ? xskq_create+0xbf/0x170 [ 973.513396][T29736] xskq_create+0xbf/0x170 [ 973.513422][T29736] xsk_init_queue+0x8a/0xe0 [ 973.513447][T29736] xsk_setsockopt+0x54c/0x990 [ 973.513472][T29736] ? __pfx_xsk_setsockopt+0x10/0x10 [ 973.513494][T29736] ? __pfx_aa_sk_perm+0x10/0x10 [ 973.513522][T29736] ? aa_sock_opt_perm+0xff/0x1a0 [ 973.513550][T29736] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 973.513575][T29736] ? __pfx_xsk_setsockopt+0x10/0x10 [ 973.513609][T29736] do_sock_setsockopt+0x17c/0x1b0 [ 973.513640][T29736] __x64_sys_setsockopt+0x13d/0x1b0 [ 973.513668][T29736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.513689][T29736] do_syscall_64+0x15f/0xf80 [ 973.513714][T29736] ? trace_irq_disable+0x3b/0x140 [ 973.513742][T29736] ? clear_bhb_loop+0x40/0x90 [ 973.513766][T29736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.513784][T29736] RIP: 0033:0x7f0cae19cdd9 [ 973.513804][T29736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.513820][T29736] RSP: 002b:00007f0caef95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 973.513852][T29736] RAX: ffffffffffffffda RBX: 00007f0cae415fa0 RCX: 00007f0cae19cdd9 [ 973.513866][T29736] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 973.513878][T29736] RBP: 00007f0cae232d69 R08: 0000000000000004 R09: 0000000000000000 [ 973.513890][T29736] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.513901][T29736] R13: 00007f0cae416038 R14: 00007f0cae415fa0 R15: 00007fff24b49f78 [ 973.513936][T29736] [ 973.513944][T29736] Mem-Info: [ 973.740804][T28939] Bluetooth: hci5: command tx timeout [ 973.749485][T29736] active_anon:6763 inactive_anon:0 isolated_anon:0 [ 973.749485][T29736] active_file:3081 inactive_file:40565 isolated_file:0 [ 973.749485][T29736] unevictable:768 dirty:111 writeback:0 [ 973.749485][T29736] slab_reclaimable:13456 slab_unreclaimable:150724 [ 973.749485][T29736] mapped:34676 shmem:1353 pagetables:1543 [ 973.749485][T29736] sec_pagetables:0 bounce:0 [ 973.749485][T29736] kernel_misc_reclaimable:0 [ 973.749485][T29736] free:1240161 free_pcp:20694 free_cma:0 [ 973.847747][T29736] Node 0 active_anon:27052kB inactive_anon:0kB active_file:12324kB inactive_file:162060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105936kB dirty:444kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18048kB pagetables:6044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 973.883344][T29736] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32768kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 973.936076][T29736] Node 0 DMA free:11240kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:16kB free_cma:0kB [ 973.967436][T29736] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 973.973678][T29736] Node 0 DMA32 free:1120084kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27052kB inactive_anon:0kB active_file:12324kB inactive_file:162060kB unevictable:1536kB writepending:444kB zspages:0kB present:3129332kB managed:2552628kB mlocked:0kB bounce:0kB free_pcp:35268kB local_pcp:18580kB free_cma:0kB [ 974.008658][T29736] lowmem_reserve[]: 0 0 0 0 0 [ 974.015278][T29736] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 974.065779][T29736] lowmem_reserve[]: 0 0 0 0 0 [ 974.071333][T29736] Node 1 Normal free:3828808kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:47564kB local_pcp:27084kB free_cma:0kB [ 974.104612][T29736] lowmem_reserve[]: 0 0 0 0 0 [ 974.123403][T29736] Node 0 DMA: 0*4kB 1*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11240kB [ 974.139105][T29736] Node 0 DMA32: 10495*4kB (UME) 7717*8kB (UME) 3742*16kB (UM) 355*32kB (UME) 389*64kB (UME) 321*128kB (UME) 662*256kB (UM) 372*512kB (UME) 261*1024kB (UME) 121*2048kB (UM) 1*4096kB (U) = 1120036kB [ 974.161361][T29736] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 974.191011][T29736] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 18*16kB (UM) 11*32kB (UM) 8*64kB (UM) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 0*2048kB 933*4096kB (UM) = 3829060kB [ 974.226262][T29736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.235970][T29736] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 974.245715][T29736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.255858][T29736] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 974.265284][T29736] 45012 total pagecache pages [ 974.270140][T29736] 0 pages in swap cache [ 974.274328][T29736] Free swap = 124996kB [ 974.278552][T29736] Total swap = 124996kB [ 974.283783][T29736] 2097051 pages RAM [ 974.287682][T29736] 0 pages HighMem/MovableOnly [ 974.292473][T29736] 427111 pages reserved [ 974.296653][T29736] 0 pages cma reserved [ 975.829552][T28939] Bluetooth: hci5: command tx timeout [ 978.666076][T29750] netlink: 'syz.4.6239': attribute type 1 has an invalid length. [ 978.774289][T29753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6240'. [ 978.866658][T29511] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.898915][T29511] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.930974][T29511] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 979.060374][T29750] 8021q: adding VLAN 0 to HW filter on device bond9 [ 979.095873][T29752] bond9: (slave veth0_to_bond): making interface the new active one [ 979.106599][T29752] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 979.147540][T29758] 8021q: adding VLAN 0 to HW filter on device bond10 [ 979.158608][T29758] bond9: (slave bond10): Enslaving as an active interface with a down link [ 979.323145][T29511] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.351749][T29511] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.380670][T29511] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 979.387117][T29782] xt_CT: You must specify a L4 protocol and not use inversions on it [ 979.803569][T29511] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.825216][T29511] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.856622][T29511] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 979.942747][T29807] netlink: 'syz.2.6254': attribute type 29 has an invalid length. [ 979.952529][T29806] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6256'. [ 979.975636][T29804] netlink: 'syz.2.6254': attribute type 29 has an invalid length. [ 979.996636][T29804] netlink: 500 bytes leftover after parsing attributes in process `syz.2.6254'. [ 980.128268][T29511] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.145701][T29511] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.157934][T29511] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 980.232796][T29816] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6258'. [ 980.268755][T29823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6260'. [ 980.293216][T29823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6260'. [ 980.407784][T29830] netlink: 'syz.1.6262': attribute type 21 has an invalid length. [ 980.436313][T29830] netlink: 'syz.1.6262': attribute type 6 has an invalid length. [ 980.465803][T29830] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6262'. [ 980.486580][T29832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6263'. [ 980.740219][T29839] bridge0: port 6(ipvlan1) entered blocking state [ 980.757463][T29839] bridge0: port 6(ipvlan1) entered disabled state [ 980.782241][T29839] ipvlan1: entered allmulticast mode [ 980.810770][T29839] bridge0: entered allmulticast mode [ 980.847805][T29839] ipvlan1: left allmulticast mode [ 980.859845][T29839] bridge0: left allmulticast mode [ 980.879354][T29851] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6267'. [ 980.884942][T29850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6268'. [ 981.161739][T29511] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 981.185596][T29511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 981.196410][T29511] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 981.228116][T29511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 981.246314][T29863] xt_hashlimit: size too large, truncated to 1048576 [ 981.353541][T29511] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 981.369809][T29511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 981.389560][ T30] audit: type=1804 audit(1778452176.997:11): pid=29874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6274" name="/newroot/586/cgroup.controllers" dev="tmpfs" ino=3004 res=1 errno=0 [ 981.391784][T29511] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 981.434986][ T30] audit: type=1800 audit(1778452177.037:12): pid=29874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6274" name="cgroup.controllers" dev="tmpfs" ino=3004 res=0 errno=0 [ 981.476842][T29511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 981.488236][T29869] bond2: entered promiscuous mode [ 981.498433][T29869] bond2: entered allmulticast mode [ 981.824993][T29890] dummy0 (unregistering): left allmulticast mode [ 981.861160][T29890] bridge0: port 3(dummy0) entered disabled state [ 982.264157][T29511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.332897][T29511] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.391357][T29430] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.398649][T29430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.455963][T29434] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.463348][T29434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.505379][T29925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.516527][T29920] can: request_module (can-proto-0) failed. [ 982.726469][T29933] openvswitch: netlink: Missing key (keys=40, expected=80) [ 983.719447][T29982] dummy0: left allmulticast mode [ 983.781781][T29985] __nla_validate_parse: 9 callbacks suppressed [ 983.781805][T29985] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6296'. [ 983.791968][T29982] bridge0: port 5(dummy0) entered disabled state [ 983.888244][T29982] bridge_slave_0: left allmulticast mode [ 983.906102][T29995] Cannot find add_set index 2 as target [ 983.916071][T29982] bridge_slave_0: left promiscuous mode [ 983.941516][T29982] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.969619][T29982] bridge_slave_1: left promiscuous mode [ 983.976311][T29982] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.988456][T29982] .`: (slave bond_slave_0): Releasing backup interface [ 984.002637][T29982] .`: (slave bond_slave_1): Releasing backup interface [ 984.012865][T29982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.020878][T29982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.031284][T29982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.039379][T29982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.049634][T29982] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 984.074792][T29987] ip6gre2: entered allmulticast mode [ 984.081896][T29985] vet: renamed from ip_vti0 (while UP) [ 984.113362][T29996] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 984.174692][T29511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.405070][T30009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6301'. [ 984.434342][T29511] veth0_vlan: entered promiscuous mode [ 984.482530][T29511] veth1_vlan: entered promiscuous mode [ 984.633971][T29511] veth0_macvtap: entered promiscuous mode [ 984.684337][T29511] veth1_macvtap: entered promiscuous mode [ 984.717317][T30022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6304'. [ 984.740648][T30028] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6306'. [ 984.802902][T29511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.845447][T29511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.927051][T29426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.962390][T29426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.007660][T30036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6309'. [ 985.038713][T29426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.076614][T29426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.128470][ T30] audit: type=1804 audit(1778452180.737:13): pid=30042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6311" name="/newroot/38/cgroup.controllers" dev="tmpfs" ino=213 res=1 errno=0 [ 985.179825][ T30] audit: type=1800 audit(1778452180.767:14): pid=30042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6311" name="cgroup.controllers" dev="tmpfs" ino=213 res=0 errno=0 [ 985.450052][T29426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.467884][T29426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.583023][T30050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6314'. [ 985.714809][T29429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.743859][T29429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.845626][T30071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6318'. [ 985.950955][T30073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6319'. [ 985.972160][T30073] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 986.164185][T30087] netlink: 'syz.4.6322': attribute type 1 has an invalid length. [ 986.166240][T30086] netlink: 348 bytes leftover after parsing attributes in process `syz.5.6323'. [ 986.334245][T30087] 8021q: adding VLAN 0 to HW filter on device bond11 [ 986.460307][T30089] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 986.561512][T20181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 986.578845][T20181] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 986.590253][T20181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 986.614699][T20181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 986.628890][T20181] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 986.641455][T30089] bond1 (unregistering): Released all slaves [ 986.851658][T30090] vlan3: entered allmulticast mode [ 986.896661][T30090] bond11: entered allmulticast mode [ 986.965566][T30100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6325'. [ 987.202305][T21679] IPVS: starting estimator thread 0... [ 987.310694][T30111] IPVS: using max 28 ests per chain, 67200 per kthread [ 987.339240][T30115] syzkaller0: entered promiscuous mode [ 987.352770][T30115] syzkaller0: entered allmulticast mode [ 987.404666][T30115] 0: reclassify loop, rule prio 0, protocol 800 [ 987.934443][T29430] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.946563][T29430] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.984764][T30145] netlink: 'syz.3.6336': attribute type 1 has an invalid length. [ 988.163056][T29430] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.176980][T29430] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.585535][T29430] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.624793][T29430] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.758839][T30161] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 988.766727][T20181] Bluetooth: hci1: command tx timeout [ 988.783593][T21679] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 988.876801][T29430] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.905619][T29430] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.440923][T29430] geneve2: left allmulticast mode [ 989.451714][T29430] geneve2: left promiscuous mode [ 989.466956][T29430] bridge0: port 4(geneve2) entered disabled state [ 989.521645][T29430] bond1: left allmulticast mode [ 989.546476][T29430] bond1: left promiscuous mode [ 989.566770][T29430] bridge0: port 3(bond1) entered disabled state [ 989.591852][T30180] --map-set only usable from mangle table [ 989.703256][T30187] __nla_validate_parse: 6 callbacks suppressed [ 989.703278][T30187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6349'. [ 989.989816][T29430] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 990.152484][T29430] bond3 (unregistering): (slave gretap1): Releasing active interface [ 990.247570][T29430] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 990.335269][T29430] bond10 (unregistering): (slave bridge3): Releasing backup interface [ 990.446824][T29430] .` (unregistering): (slave macsec0): Releasing backup interface [ 990.455895][T29430] veth1_macvtap: left promiscuous mode [ 990.462945][T29430] .` (unregistering): Released all slaves [ 990.475035][T29430] bond1 (unregistering): Released all slaves [ 990.500093][T29430] bond0 (unregistering): Released all slaves [ 990.515325][T29430] bond2 (unregistering): Released all slaves [ 990.532494][T29430] bond3 (unregistering): Released all slaves [ 990.554086][T29430] bond4 (unregistering): Released all slaves [ 990.570131][T29430] bond5 (unregistering): Released all slaves [ 990.585281][T29430] bond6 (unregistering): Released all slaves [ 990.612173][T29430] bond7 (unregistering): Released all slaves [ 990.627216][T29430] bond8 (unregistering): Released all slaves [ 990.646768][T29430] bond9 (unregistering): Released all slaves [ 990.662069][T29430] bond10 (unregistering): Released all slaves [ 990.678428][T29430] bond11 (unregistering): Released all slaves [ 990.710510][T29430] bond12 (unregistering): Released all slaves [ 990.727632][T29430] bond13 (unregistering): Released all slaves [ 990.844632][T20181] Bluetooth: hci1: command tx timeout [ 990.883412][T30196] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 990.933692][T30196] bond1: option packets_per_slave: allowed values 0 - 65535 [ 990.976467][T30196] bond1 (unregistering): Released all slaves [ 990.984523][T30201] netlink: 'syz.4.6353': attribute type 1 has an invalid length. [ 991.107791][T30207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6353'. [ 991.247588][T29430] tipc: Disabling bearer [ 991.267700][T29430] tipc: Left network mode [ 991.296915][T30209] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000 [ 991.367973][T29430] IPVS: stopping backup sync thread 26029 ... [ 991.543467][T30206] bond12: (slave geneve5): making interface the new active one [ 991.553533][T30206] bond12: (slave geneve5): Enslaving as an active interface with an up link [ 991.583181][T30207] 8021q: adding VLAN 0 to HW filter on device bond12 [ 991.642915][T30212] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 991.669406][T30212] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 991.722476][T29432] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 991.734510][T29432] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 991.794838][T29432] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 991.829767][T29432] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 991.992557][T30232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6358'. [ 992.004936][T30235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6359'. [ 992.096347][T30235] macsec1: entered promiscuous mode [ 992.108859][T30235] bridge0: entered promiscuous mode [ 992.119071][T30235] macsec1: entered allmulticast mode [ 992.132888][T30235] bridge0: entered allmulticast mode [ 992.155816][T30235] bridge0: port 3(macsec1) entered blocking state [ 992.176896][T30235] bridge0: port 3(macsec1) entered disabled state [ 992.191940][T30235] bridge0: left allmulticast mode [ 992.397887][T26701] bridge0: left promiscuous mode [ 992.508311][T30254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6364'. [ 992.765092][T30258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6366'. [ 992.786232][T30258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6366'. [ 992.921583][T20181] Bluetooth: hci1: command tx timeout [ 993.067522][T30266] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 993.215622][T30286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6370'. [ 993.252481][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 993.397629][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 994.133511][T30095] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.148779][T30095] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.157889][T30303] netlink: zone id is out of range [ 994.166975][T30095] bridge_slave_0: entered allmulticast mode [ 994.180388][T30303] netlink: zone id is out of range [ 994.190971][T30303] netlink: zone id is out of range [ 994.204148][T30095] bridge_slave_0: entered promiscuous mode [ 994.213630][T30303] netlink: zone id is out of range [ 994.244047][T30303] netlink: zone id is out of range [ 994.263314][T30095] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.278861][T30303] netlink: zone id is out of range [ 994.304430][T30095] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.311756][T30303] netlink: zone id is out of range [ 994.311775][T30303] netlink: zone id is out of range [ 994.350724][T30095] bridge_slave_1: entered allmulticast mode [ 994.379200][T30095] bridge_slave_1: entered promiscuous mode [ 994.655013][T30319] Bluetooth: MGMT ver 1.23 [ 994.665194][T30095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.807919][T30095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.878245][T30322] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6376'. [ 994.900653][T30322] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6376'. [ 995.011758][T20181] Bluetooth: hci1: command tx timeout [ 995.113604][T30095] team0: Port device team_slave_0 added [ 995.139016][T30095] team0: Port device team_slave_1 added [ 995.383550][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 995.412893][T30095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.432763][T30095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.466544][T30095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.521996][T30095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.543278][T30095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.627863][T30095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.730606][T30349] netlink: 'syz.2.6383': attribute type 83 has an invalid length. [ 995.874401][T30095] hsr_slave_0: entered promiscuous mode [ 995.900676][T30095] hsr_slave_1: entered promiscuous mode [ 995.926204][T30095] debugfs: 'hsr0' already exists in 'hsr' [ 995.949934][T30095] Cannot create hsr debugfs directory [ 996.745716][T30369] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6388'. [ 996.804407][T30379] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6390'. [ 997.315316][T30389] lo: entered allmulticast mode [ 997.329284][T30389] lo: left allmulticast mode [ 997.616744][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 997.675463][T30394] tipc: Enabling of bearer rejected, failed to enable media [ 997.954473][T29430] hsr_slave_0: left promiscuous mode [ 997.996656][T29430] hsr_slave_1: left promiscuous mode [ 998.018975][T29430] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 998.026448][T30405] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6395'. [ 998.054348][T29430] batman_adv: batadv0: Removing interface: ipvlan0 [ 998.094453][T29430] veth0_macvtap: left promiscuous mode [ 998.246651][T30414] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6398'. [ 998.424013][T30416] xt_NFQUEUE: number of total queues is 0 [ 998.657022][T29430] pim6reg (unregistering): left allmulticast mode [ 999.534581][T30428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6402'. [ 999.568301][T30428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6402'. [ 999.968009][T30444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6406'. [ 1000.047551][T30448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6408'. [ 1000.165795][T30451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1000.235513][T30451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1000.579767][T30459] syzkaller0: entered promiscuous mode [ 1000.593933][T30459] syzkaller0: entered allmulticast mode [ 1000.651949][T29430] IPVS: stop unused estimator thread 0... [ 1001.184017][T30503] Unsupported ieee802154 address type: 0 [ 1001.713773][T30520] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6420'. [ 1001.868668][T30524] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1001.925191][T30524] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 1001.981891][T30524] team0: Failed to send options change via netlink (err -105) [ 1002.003811][T30524] team0: Port device batadv1 added [ 1002.011225][ T30] audit: type=1800 audit(1778452197.617:15): pid=30533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6423" name="memory.events" dev="tmpfs" ino=413 res=0 errno=0 [ 1002.045741][ T30] audit: type=1804 audit(1778452197.627:16): pid=30533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6423" name="/newroot/77/memory.events" dev="tmpfs" ino=413 res=1 errno=0 [ 1002.236959][T30545] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6426'. [ 1002.295050][T30546] netlink: 'syz.3.6426': attribute type 6 has an invalid length. [ 1002.371756][T30095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1002.418734][T30095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1002.435558][T30095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1002.483377][T30095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1002.498904][T30095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1002.515263][T30095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1002.527494][T30095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1002.543554][T30095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1002.556881][T30555] tipc: Started in network mode [ 1002.565251][T30555] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1002.576549][T30555] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1002.594794][T30555] tipc: Enabled bearer , priority 10 [ 1003.037089][T30095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.121583][T30095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.186365][T29443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.193715][T29443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.285031][T29443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.292443][T29443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.315125][T30589] netlink: 'syz.3.6434': attribute type 10 has an invalid length. [ 1003.367921][T30589] team0 (unregistering): Port device team_slave_0 removed [ 1003.410344][T30589] team0 (unregistering): Port device team_slave_1 removed [ 1003.439321][T30589] team0 (unregistering): Port device batadv1 removed [ 1003.443256][T30600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6436'. [ 1003.602984][T30592] syzkaller0: entered promiscuous mode [ 1003.624305][T30592] syzkaller0: entered allmulticast mode [ 1003.789146][ T1220] tipc: Node number set to 1 [ 1004.447988][T30636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6442'. [ 1004.537807][T30647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6444'. [ 1004.695201][T30636] can: request_module (can-proto-0) failed. [ 1004.738050][T30647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6444'. [ 1004.795221][T30647] net_ratelimit: 2 callbacks suppressed [ 1004.795245][T30647] openvswitch: netlink: Flow actions attr not present in new flow. [ 1005.118639][T30668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6447'. [ 1005.867921][T30704] netlink: 'syz.4.6455': attribute type 23 has an invalid length. [ 1005.913494][T30704] netlink: 8904 bytes leftover after parsing attributes in process `syz.4.6455'. [ 1005.975217][T30095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.017751][T30708] netlink: 'syz.3.6457': attribute type 11 has an invalid length. [ 1006.031352][T30708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1006.169770][T30095] veth0_vlan: entered promiscuous mode [ 1006.229368][T30095] veth1_vlan: entered promiscuous mode [ 1006.349048][T30719] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6460'. [ 1006.402885][T30095] veth0_macvtap: entered promiscuous mode [ 1006.421496][T30719] nbd0: detected capacity change from 0 to 4294967296 [ 1006.447467][T29749] block nbd0: Dead connection, failed to find a fallback [ 1006.450182][T30095] veth1_macvtap: entered promiscuous mode [ 1006.499761][T29749] block nbd0: shutting down sockets [ 1006.535701][T29749] blk_print_req_error: 138 callbacks suppressed [ 1006.535727][T29749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.540677][T30095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.557915][T29749] buffer_io_error: 138 callbacks suppressed [ 1006.557936][T29749] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1006.627029][T29749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.662800][T30095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.690197][T29749] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1006.698085][T30732] netlink: 'syz.3.6463': attribute type 2 has an invalid length. [ 1006.701771][T29749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.724648][T29445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.738663][T30732] netlink: 'syz.3.6463': attribute type 8 has an invalid length. [ 1006.756638][T29749] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1006.757222][T29445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.786303][T30732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6463'. [ 1006.806573][T29749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.830181][T30734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6463'. [ 1006.839349][T29445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.845277][T29749] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1006.870600][T29445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.888677][T29749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.916025][T29749] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1006.935894][T29749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1006.976408][T29749] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1007.009306][T29749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1007.039609][T29749] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1007.067851][T29749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1007.096090][T29749] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1007.130302][T29749] ldm_validate_partition_table(): Disk read failed. [ 1007.146941][T29749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1007.171162][T29749] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1007.190457][T29749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1007.219960][T29749] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1007.241033][T29749] Dev nbd0: unable to read RDB block 0 [ 1007.247323][T29749] nbd0: unable to read partition table [ 1007.265792][T29749] ldm_validate_partition_table(): Disk read failed. [ 1007.280687][T29749] Dev nbd0: unable to read RDB block 0 [ 1007.364442][T29749] nbd0: unable to read partition table [ 1007.675541][T29430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.694043][T29430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.126828][T29445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.172413][T29445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.392757][T30770] netlink: 'syz.3.6469': attribute type 1 has an invalid length. [ 1008.399482][T30771] netlink: 'syz.5.6470': attribute type 30 has an invalid length. [ 1008.630267][T30775] bond1: (slave bridge2): making interface the new active one [ 1008.639606][T30775] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1008.712736][T30781] macvlan2: entered promiscuous mode [ 1008.725287][T30781] macvlan2: entered allmulticast mode [ 1008.737817][T30781] bond1: entered promiscuous mode [ 1008.758293][T30781] bridge2: entered promiscuous mode [ 1008.780610][T30781] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1008.811793][T30781] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1008.872598][T30781] bond1: left promiscuous mode [ 1008.897670][T30781] bridge2: left promiscuous mode [ 1009.079061][T30786] netlink: 'syz.1.6472': attribute type 1 has an invalid length. [ 1009.109062][T30794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6471'. [ 1009.214713][T28939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.237571][T28939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.253114][T28939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.265932][T28939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.274609][T28939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1009.861555][T30811] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6477'. [ 1010.080222][T30816] netlink: 'syz.5.6478': attribute type 1 has an invalid length. [ 1010.127227][T30816] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6478'. [ 1010.144932][T30820] netlink: 'syz.1.6480': attribute type 1 has an invalid length. [ 1010.163772][T30820] netlink: 'syz.1.6480': attribute type 1 has an invalid length. [ 1011.304921][T30844] syzkaller0: entered promiscuous mode [ 1011.320222][T28939] Bluetooth: hci0: command tx timeout [ 1011.333938][T30844] syzkaller0: entered allmulticast mode [ 1011.747366][T30866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6491'. [ 1013.414596][T28939] Bluetooth: hci0: command tx timeout [ 1015.503967][T28939] Bluetooth: hci0: command tx timeout [ 1016.853757][T30890] netlink: 'syz.3.6495': attribute type 8 has an invalid length. [ 1016.875628][T30890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6495'. [ 1016.949004][T30890] bond0: entered promiscuous mode [ 1016.961918][T30890] bond_slave_0: entered promiscuous mode [ 1016.975791][T30890] bond_slave_1: entered promiscuous mode [ 1016.994335][T30890] gretap0: entered promiscuous mode [ 1017.012907][T30890] hsr1: entered promiscuous mode [ 1017.144295][T30903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1017.180959][T30899] ip6gre2: entered allmulticast mode [ 1017.206509][T30904] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1017.563331][T28939] Bluetooth: hci0: command tx timeout [ 1017.604854][T30917] netlink: 'syz.2.6501': attribute type 39 has an invalid length. [ 1017.663388][T30917] hsr_slave_0: left promiscuous mode [ 1017.725047][T30917] hsr_slave_1: left promiscuous mode [ 1018.537703][T30964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6517'. [ 1018.572846][T30964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6517'. [ 1018.646240][T30964] gre0: entered promiscuous mode [ 1018.683206][T30970] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6518'. [ 1018.869579][T30977] x_tables: unsorted entry at hook 1 [ 1018.876649][T30977] xt_socket: unknown flags 0x50 [ 1018.890750][T30977] netlink: 'syz.5.6523': attribute type 5 has an invalid length. [ 1019.196445][T30993] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6525'. [ 1019.200968][T30996] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6526'. [ 1019.230147][T30998] netlink: 'syz.2.6527': attribute type 1 has an invalid length. [ 1019.243542][T30998] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6527'. [ 1019.267228][T30998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6527'. [ 1019.412781][T31007] netlink: 'syz.5.6530': attribute type 10 has an invalid length. [ 1020.027458][T30796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.043357][T30746] page_pool_release_retry() stalled pool shutdown: id 85, 1 inflight 603 sec [ 1020.047792][T30796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.097274][T30796] bridge_slave_0: entered allmulticast mode [ 1020.119478][T30796] bridge_slave_0: entered promiscuous mode [ 1020.144873][T30796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.183270][T30796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.212242][T30796] bridge_slave_1: entered allmulticast mode [ 1020.236342][T30796] bridge_slave_1: entered promiscuous mode [ 1020.437701][T30796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.492549][T31035] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1020.861149][T30796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.063834][T30796] team0: Port device team_slave_0 added [ 1021.096994][T30796] team0: Port device team_slave_1 added [ 1021.207409][T31074] sctp: [Deprecated]: syz.1.6542 (pid 31074) Use of int in max_burst socket option. [ 1021.207409][T31074] Use struct sctp_assoc_value instead [ 1021.230483][T31072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1021.364598][T31080] team0: entered promiscuous mode [ 1021.392103][T31080] team_slave_0: entered promiscuous mode [ 1021.424972][T31080] team_slave_1: entered promiscuous mode [ 1021.466925][T30796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.495076][T30796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.527871][T31095] netlink: 'syz.3.6544': attribute type 49 has an invalid length. [ 1021.538685][T30796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.595517][T30796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.623180][T30796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.721920][T30796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.848342][T30796] hsr_slave_0: entered promiscuous mode [ 1021.858533][T30796] hsr_slave_1: entered promiscuous mode [ 1021.873172][T31106] syzkaller0: entered promiscuous mode [ 1021.882743][T31110] __nla_validate_parse: 8 callbacks suppressed [ 1021.882758][T31110] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6548'. [ 1021.903660][T31106] syzkaller0: entered allmulticast mode [ 1022.414791][T31134] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6553'. [ 1022.434805][T31134] No such timeout policy "syz1" [ 1022.472132][T30796] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.483405][T30796] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.495363][T30796] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1022.506938][T30796] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1022.577991][T30796] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.588034][T30796] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.598155][T30796] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1022.608680][T30796] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1022.678584][T30796] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.692078][T30796] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.702316][T30796] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1022.714567][T30796] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1022.791487][T30796] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.801688][T30796] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.811726][T30796] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1022.824360][T30796] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1024.071809][T31064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1024.095669][T30796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1024.144535][T30796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1024.176892][T30796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1024.222714][T30796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1024.260832][T30796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1024.307020][T30796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1024.318123][T30796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1024.331489][T30796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1024.406468][T31139] tipc: Enabled bearer , priority 0 [ 1024.456373][T31141] syzkaller0: entered promiscuous mode [ 1024.468060][T31153] tls_set_device_offload_rx: netdev not found [ 1024.470025][T31141] syzkaller0: entered allmulticast mode [ 1024.494322][T31154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6555'. [ 1024.503437][T31141] netlink: 'syz.5.6556': attribute type 10 has an invalid length. [ 1024.572417][T31139] syzkaller0: entered promiscuous mode [ 1024.578101][T31139] syzkaller0: entered allmulticast mode [ 1024.584770][T31139] tipc: Resetting bearer [ 1024.593495][T31141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.602429][T31141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.628356][T31155] netlink: 'syz.1.6558': attribute type 29 has an invalid length. [ 1024.637341][T31155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6558'. [ 1024.653844][T31136] tipc: Resetting bearer [ 1024.735497][T31162] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6561'. [ 1024.752427][T31162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6561'. [ 1029.404708][T31136] tipc: Disabling bearer [ 1029.803704][T30796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.868186][T30796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.957544][T29430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.964871][T29430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.013826][T20902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.021245][T20902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.094412][T31193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6570'. [ 1030.112709][T31193] netlink: 'syz.5.6570': attribute type 5 has an invalid length. [ 1030.176389][T31193] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6570'. [ 1030.231906][T31193] geneve0: entered promiscuous mode [ 1030.243622][T31193] geneve0: entered allmulticast mode [ 1030.274843][T20902] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1030.294684][T20902] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1030.334469][T20902] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1030.358497][T20902] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1030.806578][T31230] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6577'. [ 1030.899165][T31232] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6578'. [ 1030.931364][T31232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6578'. [ 1031.191268][T31255] netlink: 'syz.2.6584': attribute type 1 has an invalid length. [ 1031.227396][T31258] netlink: 'syz.5.6585': attribute type 1 has an invalid length. [ 1031.394374][T31258] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1031.504213][T31268] tls_set_device_offload_rx: netdev not found [ 1031.648558][T30796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.725751][T31275] netlink: 'syz.3.6589': attribute type 83 has an invalid length. [ 1032.007469][T31289] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1032.383951][T31307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6596'. [ 1032.394855][T31306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1032.427110][T31307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6596'. [ 1032.568746][T30796] veth0_vlan: entered promiscuous mode [ 1032.614133][T30796] veth1_vlan: entered promiscuous mode [ 1032.711692][T30796] veth0_macvtap: entered promiscuous mode [ 1032.776593][T30796] veth1_macvtap: entered promiscuous mode [ 1032.798253][T31320] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6601'. [ 1032.899654][T30796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.998094][T31324] sock: sock_set_timeout: `syz.3.6604' (pid 31324) tries to set negative timeout [ 1033.046728][T30796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.204879][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.247193][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.281470][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.306538][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.634667][T31350] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1033.667933][T31349] tls_set_device_offload_rx: netdev not found [ 1033.748846][T20902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.796084][T20902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.921157][T29433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.944667][T29433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.175111][T31383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6620'. [ 1034.265105][T31374] bond3 (unregistering): Released all slaves [ 1034.468507][T31386] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6621'. [ 1034.542442][T31397] tls_set_device_offload_rx: netdev not found [ 1035.659704][T20181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1035.693293][T20181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1035.706811][T20181] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1035.719764][T20181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1035.747246][T20181] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1035.815044][ T47] tipc: Subscription rejected, illegal request [ 1035.858338][T31455] __nla_validate_parse: 3 callbacks suppressed [ 1035.858360][T31455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6642'. [ 1036.156893][T31472] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6647'. [ 1036.203842][T31472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6647'. [ 1036.229071][T31477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6649'. [ 1036.356823][T31486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6651'. [ 1036.667968][T31495] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6653'. [ 1036.715837][T29416] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.728409][T29416] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.741145][T29416] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1036.852464][T31497] bridge4: entered promiscuous mode [ 1036.866831][T31497] bridge4: entered allmulticast mode [ 1036.955565][T31495] netlink: 'syz.1.6653': attribute type 12 has an invalid length. [ 1036.991255][T31495] netlink: 'syz.1.6653': attribute type 29 has an invalid length. [ 1037.008172][T31495] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6653'. [ 1037.068018][T31506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 1037.169318][T29416] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.237144][T29416] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.254072][T29416] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1037.294045][T31518] Unsupported ieee802154 address type: 0 [ 1037.383612][T31518] netlink: 'syz.1.6659': attribute type 14 has an invalid length. [ 1037.397570][T31518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6659'. [ 1037.546150][T29416] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1037.562546][T29416] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.573946][T29416] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1037.600375][T31518] netlink: 'syz.1.6659': attribute type 14 has an invalid length. [ 1037.608803][T31518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6659'. [ 1037.800421][T20181] Bluetooth: hci3: command tx timeout [ 1038.050720][T29416] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1038.063849][T29416] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.075365][T29416] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1038.166406][T31546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1038.173859][T31546] IPv6: NLM_F_CREATE should be set when creating new route [ 1038.237914][T31546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6665'. [ 1038.784370][T31567] x_tables: duplicate underflow at hook 4 [ 1039.881363][T20181] Bluetooth: hci3: command tx timeout [ 1040.969597][T29416] bond4 (unregistering): (slave gretap2): Releasing active interface [ 1041.117125][T29416] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1041.136876][T29416] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1041.457481][T29416] team0: Port device bridge7 removed [ 1041.660417][T29416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.669579][T29416] bond_slave_0: left allmulticast mode [ 1041.678336][T29416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.688721][T29416] bond_slave_1: left allmulticast mode [ 1041.696045][T29416] bond0 (unregistering): Released all slaves [ 1041.707623][T29416] bond1 (unregistering): Released all slaves [ 1041.725780][T29416] bond2 (unregistering): Released all slaves [ 1041.742572][T29416] bond3 (unregistering): Released all slaves [ 1041.763840][T29416] bond4 (unregistering): Released all slaves [ 1041.785589][T29416] bond5 (unregistering): Released all slaves [ 1041.801853][T29416] bond6 (unregistering): Released all slaves [ 1041.818982][T29416] bond7 (unregistering): Released all slaves [ 1041.844176][T29416] bond8 (unregistering): Released all slaves [ 1041.893592][T31592] syzkaller0: entered promiscuous mode [ 1041.899231][T31592] syzkaller0: entered allmulticast mode [ 1041.960420][T20181] Bluetooth: hci3: command tx timeout [ 1042.387468][T31637] Cannot find add_set index 0 as target [ 1044.041243][T20181] Bluetooth: hci3: command tx timeout [ 1046.924889][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1046.949378][T29416] tipc: Left network mode [ 1047.411742][T31660] __nla_validate_parse: 2 callbacks suppressed [ 1047.411762][T31660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6690'. [ 1047.432680][T31659] netlink: 'syz.4.6689': attribute type 1 has an invalid length. [ 1047.512300][T31664] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 1047.540996][T31645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6689'. [ 1047.570889][T31645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6689'. [ 1048.508536][T31707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6698'. [ 1048.723816][T31718] netlink: 'syz.2.6699': attribute type 4 has an invalid length. [ 1048.816299][T31707] bridge1: port 1(veth3) entered blocking state [ 1048.826839][T31707] bridge1: port 1(veth3) entered disabled state [ 1048.837564][T31707] veth3: entered allmulticast mode [ 1048.851998][T31707] veth3: entered promiscuous mode [ 1048.905523][T31709] bridge1: port 2(veth0_to_bond) entered blocking state [ 1048.923632][T31709] bridge1: port 2(veth0_to_bond) entered disabled state [ 1048.932437][T31709] veth0_to_bond: entered allmulticast mode [ 1048.941019][T31709] veth0_to_bond: entered promiscuous mode [ 1048.948890][T31709] bridge1: port 2(veth0_to_bond) entered blocking state [ 1048.956120][T31709] bridge1: port 2(veth0_to_bond) entered forwarding state [ 1048.972268][T31727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6701'. [ 1048.992284][T31727] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.001992][T31727] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.047410][T31449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.072173][T31449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.091588][T31449] bridge_slave_0: entered allmulticast mode [ 1049.104631][T31449] bridge_slave_0: entered promiscuous mode [ 1049.186610][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1049.218779][T31449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.237270][T31449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.250915][T31449] bridge_slave_1: entered allmulticast mode [ 1049.272623][T31449] bridge_slave_1: entered promiscuous mode [ 1049.339603][T31737] ip6gre1: entered allmulticast mode [ 1049.472563][T31449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.502487][T31749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6707'. [ 1049.557424][T31449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.629228][T31755] netlink: 'syz.4.6709': attribute type 1 has an invalid length. [ 1049.923168][T31753] veth0: entered promiscuous mode [ 1050.058114][T31752] veth0: left promiscuous mode [ 1050.086061][T31449] team0: Port device team_slave_0 added [ 1050.142211][T31449] team0: Port device team_slave_1 added [ 1050.491098][T31449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.547175][T31449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.664098][T31449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.771403][T31449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.797220][T31449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.868440][T31807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6720'. [ 1050.916074][T31449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.091844][T31806] syzkaller0: entered promiscuous mode [ 1051.117995][T31806] syzkaller0: entered allmulticast mode [ 1051.512091][T29416] hsr_slave_0: left promiscuous mode [ 1051.545909][T29416] hsr_slave_1: left promiscuous mode [ 1051.655933][T29416] veth1_macvtap: left promiscuous mode [ 1051.700260][T29416] veth0_macvtap: left promiscuous mode [ 1051.857237][T31839] netlink: 640 bytes leftover after parsing attributes in process `syz.4.6728'. [ 1051.900732][T31839] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1051.942296][T31842] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6729'. [ 1051.952144][T31842] xt_policy: neither incoming nor outgoing policy selected [ 1051.964380][T31842] netlink: 'syz.1.6729': attribute type 11 has an invalid length. [ 1051.976743][T31842] netlink: 170812 bytes leftover after parsing attributes in process `syz.1.6729'. [ 1052.013090][T31842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1052.239002][T29416] team_slave_1 (unregistering): left promiscuous mode [ 1052.247255][T29416] team0 (unregistering): Port device team_slave_1 removed [ 1052.264723][T29416] team_slave_0 (unregistering): left promiscuous mode [ 1052.272386][T29416] team0 (unregistering): Port device team_slave_0 removed [ 1052.426840][T31449] hsr_slave_0: entered promiscuous mode [ 1052.434625][T31449] hsr_slave_1: entered promiscuous mode [ 1052.443765][T31449] debugfs: 'hsr0' already exists in 'hsr' [ 1052.449648][T31449] Cannot create hsr debugfs directory [ 1052.466465][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1052.831552][T31367] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1053.102280][T29416] IPVS: stop unused estimator thread 0... [ 1053.202715][T31877] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1053.252301][T31877] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1053.283677][T31877] gretap1: entered promiscuous mode [ 1053.311641][T31877] gretap1: entered allmulticast mode [ 1054.217186][T31918] l2tp_ppp: sess 2/0: no socket in recv [ 1054.219559][T31921] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1054.650923][T31933] netlink: 'syz.1.6749': attribute type 1 has an invalid length. [ 1054.684169][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1054.739413][T31941] netlink: 'syz.3.6750': attribute type 1 has an invalid length. [ 1054.834090][T31939] bond1: (slave gretap2): making interface the new active one [ 1054.843763][T31939] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 1055.004117][T31943] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1055.177145][T31963] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1055.547698][T31973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6755'. [ 1055.740251][T31982] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6757'. [ 1056.157770][T31449] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1056.286421][T31449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1056.346330][T31449] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1056.387959][T31449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.428808][T31449] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1056.463887][T31449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1056.489344][T31449] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1056.553794][T31449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1056.919595][T32030] tipc: Started in network mode [ 1056.943925][T32030] tipc: Node identity d613143f5478, cluster identity 4711 [ 1056.976595][T32030] tipc: Enabled bearer , priority 0 [ 1057.033594][T32032] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6768'. [ 1057.199480][T32050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6771'. [ 1057.230511][T32037] syzkaller0: entered promiscuous mode [ 1057.250453][T32037] syzkaller0: entered allmulticast mode [ 1057.261493][T32037] tipc: Resetting bearer [ 1057.334777][T32030] veth1_macvtap: left promiscuous mode [ 1057.349800][T32059] openvswitch: netlink: Message has 8 unknown bytes. [ 1057.363361][T32030] macsec0: entered promiscuous mode [ 1057.374815][T32030] macsec0: entered allmulticast mode [ 1057.409246][T32049] veth1_macvtap: entered promiscuous mode [ 1057.447626][T32049] veth1_macvtap: entered allmulticast mode [ 1057.471336][T32049] macsec0: left promiscuous mode [ 1057.490382][T32049] macsec0: left allmulticast mode [ 1057.505295][T32049] veth1_macvtap: left allmulticast mode [ 1057.521411][T32050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6771'. [ 1057.541638][T32029] tipc: Resetting bearer [ 1057.735193][T32076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6774'. [ 1058.076536][T32088] netlink: 'syz.4.6776': attribute type 24 has an invalid length. [ 1062.624357][T32029] tipc: Disabling bearer [ 1062.639636][T31449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.647189][T18781] tipc: Node number set to 2188055615 [ 1062.656562][T32085] netlink: 'syz.2.6775': attribute type 1 has an invalid length. [ 1062.672772][T32085] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6775'. [ 1062.705140][T32085] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6775'. [ 1062.735440][T32085] netlink: 'syz.2.6775': attribute type 1 has an invalid length. [ 1062.765220][T32085] netlink: 634 bytes leftover after parsing attributes in process `syz.2.6775'. [ 1062.846408][T31449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.885232][T29435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.892611][T29435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.939749][T29435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.947065][T29435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.537361][T32140] lo: entered promiscuous mode [ 1063.543299][T32140] netlink: 'syz.3.6786': attribute type 2 has an invalid length. [ 1063.554812][T32140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1064.324352][T31449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.875204][T31449] veth0_vlan: entered promiscuous mode [ 1064.899093][T31449] veth1_vlan: entered promiscuous mode [ 1064.955432][T31449] veth0_macvtap: entered promiscuous mode [ 1064.977319][T31449] veth1_macvtap: entered promiscuous mode [ 1065.020166][T31449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.044635][T31449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.067005][T29435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.100020][T29435] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.122533][T29435] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.143280][T29435] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.389062][T32208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6791'. [ 1066.213397][T32132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1066.448182][T32230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6796'. [ 1066.468772][T32230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6796'. [ 1066.480852][T29435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.489036][T29435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.497314][T32230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6796'. [ 1066.515299][T32239] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6796'. [ 1066.624341][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.644949][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.742437][T32245] x_tables: duplicate underflow at hook 3 [ 1067.018156][T32263] tls_set_device_offload_rx: netdev not found [ 1067.377946][T32289] netlink: 'syz.1.6811': attribute type 4 has an invalid length. [ 1067.732205][T32309] tls_set_device_offload_rx: netdev not found [ 1067.766046][ T30] audit: type=1800 audit(1778452263.367:17): pid=32306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6815" name="memory.events" dev="tmpfs" ino=33 res=0 errno=0 [ 1067.791221][T32306] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6815'. [ 1067.824394][T32314] netlink: 'syz.1.6818': attribute type 1 has an invalid length. [ 1067.955685][T32323] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6821'. [ 1067.975548][T32323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.983084][T32323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.384495][T32339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6820'. [ 1068.625257][T32351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6826'. [ 1070.600185][T20181] Bluetooth: hci3: command tx timeout [ 1070.738911][T32314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1071.023440][T32365] tls_set_device_offload_rx: netdev not found [ 1071.047008][T32371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6833'. [ 1071.087048][T32371] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1071.467993][T32391] erspan0: entered promiscuous mode [ 1071.625840][T32380] ip6tnl1: entered allmulticast mode [ 1072.023966][T32410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1072.033028][T32410] bridge0: port 3(bond2) entered blocking state [ 1072.036388][T32422] tls_set_device_offload_rx: netdev not found [ 1072.039594][T32410] bridge0: port 3(bond2) entered disabled state [ 1072.054557][T32410] bond2: entered allmulticast mode [ 1072.064013][T32410] bond2: entered promiscuous mode [ 1072.070099][T32410] bridge0: port 3(bond2) entered blocking state [ 1072.076595][T32410] bridge0: port 3(bond2) entered forwarding state [ 1072.472553][T32444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6853'. [ 1072.497427][T31368] bridge0: port 3(bond2) entered disabled state [ 1072.554738][T32450] syzkaller1: entered promiscuous mode [ 1072.577504][T32450] syzkaller1: entered allmulticast mode [ 1072.856224][T32467] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6859'. [ 1072.957928][T32474] tls_set_device_offload_rx: netdev not found [ 1073.204652][T32485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6868'. [ 1073.226608][T32485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6868'. [ 1073.263645][T32487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6866'. [ 1073.290291][T32482] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6866'. [ 1073.355381][T32485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6868'. [ 1073.355487][T32488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6868'. [ 1073.462547][T32490] wireguard0: entered promiscuous mode [ 1073.496198][T32490] wireguard0: entered allmulticast mode [ 1073.680603][T32507] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6871'. [ 1073.858500][T32502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1074.178434][T32522] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6877'. [ 1074.186303][T32524] tls_set_device_offload_rx: netdev not found [ 1074.225139][T32525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6876'. [ 1074.887672][T32562] netlink: 'syz.2.6889': attribute type 21 has an invalid length. [ 1075.198337][T32574] netlink: 'syz.2.6889': attribute type 1 has an invalid length. [ 1077.636250][T32550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1078.081048][T32589] ------------[ cut here ]------------ [ 1078.089305][T32589] 1 [ 1078.089326][T32589] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#0: syz.4.6895/32589 [ 1078.101263][T32589] Modules linked in: [ 1078.106158][T32589] CPU: 0 UID: 0 PID: 32589 Comm: syz.4.6895 Not tainted syzkaller #0 PREEMPT(full) [ 1078.115641][T32589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.125787][T32589] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 1078.130853][T32589] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5a eb b8 f7 66 90 e8 53 eb b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 44 72 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 1078.150709][T32589] RSP: 0018:ffffc9000f90f1c0 EFLAGS: 00010286 [ 1078.156927][T32589] RAX: 9410598bbd241700 RBX: ffff888095372000 RCX: 0000000000000401 [ 1078.165096][T32589] RDX: 0000000000000002 RSI: ffffffff8dfa6800 RDI: ffffffff8c28ade0 [ 1078.173169][T32589] RBP: ffffc9000f90f4c0 R08: ffffffff9030aff7 R09: 1ffffffff20615fe [ 1078.181858][T32589] R10: dffffc0000000000 R11: fffffbfff20615ff R12: dffffc0000000000 [ 1078.190096][T32589] R13: 0000000000000000 R14: ffff888095372000 R15: dffffc0000000000 [ 1078.198685][T32589] FS: 00007f8f6eb3a6c0(0000) GS:ffff88812528f000(0000) knlGS:0000000000000000 [ 1078.207842][T32589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1078.214605][T32589] CR2: 000000110c24bc8f CR3: 000000002b708000 CR4: 00000000003526f0 [ 1078.222685][T32589] Call Trace: [ 1078.226015][T32589] [ 1078.228989][T32589] ip_push_pending_frames+0x8b/0x110 [ 1078.234468][T32589] __icmp_send+0x11e4/0x1690 [ 1078.239291][T32589] ? __icmp_send+0x22b/0x1690 [ 1078.244090][T32589] ? __pfx___icmp_send+0x10/0x10 [ 1078.249156][T32589] ? ip_route_input_noref+0xad/0x270 [ 1078.254617][T32589] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1078.260455][T32589] ? tcp_v4_early_demux+0x465/0x9c0 [ 1078.265893][T32589] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 1078.271296][T32589] ip_options_compile+0x80/0xb0 [ 1078.276308][T32589] ip_rcv_finish_core+0xaa2/0x1c00 [ 1078.281568][T32589] ip_rcv_finish+0x14c/0x2a0 [ 1078.282591][T32595] netlink: 'syz.4.6895': attribute type 1 has an invalid length. [ 1078.286212][T32589] NF_HOOK+0x336/0x3c0 [ 1078.298152][T32589] ? sock_wfree+0x26e/0x750 [ 1078.302764][T32589] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1078.308073][T32589] ? NF_HOOK+0x9e/0x3c0 [ 1078.312496][T32589] ? __pfx_NF_HOOK+0x10/0x10 [ 1078.317156][T32589] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1078.322556][T32589] ? netif_receive_skb+0x102/0xbf0 [ 1078.327725][T32589] ? __pfx_ip_rcv+0x10/0x10 [ 1078.332353][T32589] netif_receive_skb+0x45b/0xbf0 [ 1078.337638][T32589] ? __pfx_netif_receive_skb+0x10/0x10 [ 1078.343300][T32589] ? tun_rx_batched+0x185/0x790 [ 1078.348517][T32589] tun_rx_batched+0x1de/0x790 [ 1078.353391][T32589] ? __build_skb+0x62/0x440 [ 1078.357961][T32589] ? __pfx_tun_rx_batched+0x10/0x10 [ 1078.363263][T32589] ? tun_get_user+0x2787/0x43e0 [ 1078.368221][T32589] ? tun_get_user+0x2787/0x43e0 [ 1078.373172][T32589] ? tun_get_user+0x2394/0x43e0 [ 1078.378351][T32589] ? tun_get_user+0x2394/0x43e0 [ 1078.383327][T32589] ? __local_bh_enable_ip+0xd0/0x130 [ 1078.388898][T32589] tun_get_user+0x2bbc/0x43e0 [ 1078.393739][T32589] ? tun_get_user+0x2787/0x43e0 [ 1078.398700][T32589] ? aa_file_perm+0x50e/0x15e0 [ 1078.403788][T32589] ? __pfx_tun_get_user+0x10/0x10 [ 1078.409139][T32589] ? __lock_acquire+0x6b5/0x2cf0 [ 1078.414286][T32589] ? ref_tracker_alloc+0x35c/0x4c0 [ 1078.419509][T32589] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1078.425520][T32589] ? tun_get+0x1c/0x2f0 [ 1078.429764][T32589] ? tun_get+0x1c/0x2f0 [ 1078.434035][T32589] ? tun_get+0x1c/0x2f0 [ 1078.438340][T32589] ? tun_get+0x1c/0x2f0 [ 1078.442684][T32589] tun_chr_write_iter+0x113/0x200 [ 1078.447953][T32589] vfs_write+0x61d/0xb90 [ 1078.452321][T32589] ? __pfx_vfs_write+0x10/0x10 [ 1078.457266][T32589] ? __fget_files+0x2a/0x420 [ 1078.462431][T32589] ksys_write+0x150/0x270 [ 1078.466858][T32589] ? __pfx_ksys_write+0x10/0x10 [ 1078.471827][T32589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.478125][T32589] do_syscall_64+0x15f/0xf80 [ 1078.482815][T32589] ? trace_irq_disable+0x3b/0x140 [ 1078.487988][T32589] ? clear_bhb_loop+0x40/0x90 [ 1078.492784][T32589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.498762][T32589] RIP: 0033:0x7f8f6db5d60e [ 1078.503533][T32589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1078.523417][T32589] RSP: 002b:00007f8f6eb39fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1078.531931][T32589] RAX: ffffffffffffffda RBX: 00007f8f6eb3a6c0 RCX: 00007f8f6db5d60e [ 1078.540430][T32589] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 1078.548597][T32589] RBP: 00007f8f6dc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1078.556760][T32589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1078.564830][T32589] R13: 00007f8f6de16038 R14: 00007f8f6de15fa0 R15: 00007ffd22935818 [ 1078.573294][T32589] [ 1078.576389][T32589] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1078.583807][T32589] CPU: 0 UID: 0 PID: 32589 Comm: syz.4.6895 Not tainted syzkaller #0 PREEMPT(full) [ 1078.593398][T32589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.603790][T32589] Call Trace: [ 1078.607123][T32589] [ 1078.610100][T32589] vpanic+0x56c/0xa60 [ 1078.614133][T32589] ? __pfx__printk+0x10/0x10 [ 1078.618897][T32589] ? __pfx_vpanic+0x10/0x10 [ 1078.623448][T32589] ? is_bpf_text_address+0x292/0x2b0 [ 1078.628879][T32589] ? is_bpf_text_address+0x26/0x2b0 [ 1078.634569][T32589] panic+0xc5/0xd0 [ 1078.638433][T32589] ? __pfx_panic+0x10/0x10 [ 1078.642937][T32589] __warn+0x315/0x4c0 [ 1078.646977][T32589] ? ip_rt_bug+0x2d/0x140 [ 1078.651358][T32589] ? ip_rt_bug+0x2d/0x140 [ 1078.655840][T32589] __report_bug+0x29a/0x540 [ 1078.660666][T32589] ? NF_HOOK+0x336/0x3c0 [ 1078.664966][T32589] ? netif_receive_skb+0x45b/0xbf0 [ 1078.670127][T32589] ? tun_rx_batched+0x1de/0x790 [ 1078.675052][T32589] ? ip_rt_bug+0x2d/0x140 [ 1078.679450][T32589] ? __pfx___report_bug+0x10/0x10 [ 1078.684665][T32589] ? ip_rt_bug+0x2d/0x140 [ 1078.689226][T32589] report_bug+0x16a/0x220 [ 1078.693623][T32589] ? ip_rt_bug+0x2d/0x140 [ 1078.698034][T32589] ? ip_rt_bug+0x2f/0x140 [ 1078.702655][T32589] handle_bug+0x9c/0x200 [ 1078.707261][T32589] exc_invalid_op+0x1a/0x50 [ 1078.712193][T32589] asm_exc_invalid_op+0x1a/0x20 [ 1078.717182][T32589] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 1078.722190][T32589] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5a eb b8 f7 66 90 e8 53 eb b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 44 72 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 1078.742380][T32589] RSP: 0018:ffffc9000f90f1c0 EFLAGS: 00010286 [ 1078.748634][T32589] RAX: 9410598bbd241700 RBX: ffff888095372000 RCX: 0000000000000401 [ 1078.756832][T32589] RDX: 0000000000000002 RSI: ffffffff8dfa6800 RDI: ffffffff8c28ade0 [ 1078.765028][T32589] RBP: ffffc9000f90f4c0 R08: ffffffff9030aff7 R09: 1ffffffff20615fe [ 1078.773215][T32589] R10: dffffc0000000000 R11: fffffbfff20615ff R12: dffffc0000000000 [ 1078.781315][T32589] R13: 0000000000000000 R14: ffff888095372000 R15: dffffc0000000000 [ 1078.789346][T32589] ip_push_pending_frames+0x8b/0x110 [ 1078.794684][T32589] __icmp_send+0x11e4/0x1690 [ 1078.799390][T32589] ? __icmp_send+0x22b/0x1690 [ 1078.804106][T32589] ? __pfx___icmp_send+0x10/0x10 [ 1078.809107][T32589] ? ip_route_input_noref+0xad/0x270 [ 1078.814440][T32589] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1078.820195][T32589] ? tcp_v4_early_demux+0x465/0x9c0 [ 1078.825412][T32589] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 1078.830734][T32589] ip_options_compile+0x80/0xb0 [ 1078.835649][T32589] ip_rcv_finish_core+0xaa2/0x1c00 [ 1078.840962][T32589] ip_rcv_finish+0x14c/0x2a0 [ 1078.845617][T32589] NF_HOOK+0x336/0x3c0 [ 1078.850272][T32589] ? sock_wfree+0x26e/0x750 [ 1078.854911][T32589] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1078.860241][T32589] ? NF_HOOK+0x9e/0x3c0 [ 1078.864608][T32589] ? __pfx_NF_HOOK+0x10/0x10 [ 1078.869228][T32589] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1078.874542][T32589] ? netif_receive_skb+0x102/0xbf0 [ 1078.879683][T32589] ? __pfx_ip_rcv+0x10/0x10 [ 1078.884209][T32589] netif_receive_skb+0x45b/0xbf0 [ 1078.889343][T32589] ? __pfx_netif_receive_skb+0x10/0x10 [ 1078.894817][T32589] ? tun_rx_batched+0x185/0x790 [ 1078.899686][T32589] tun_rx_batched+0x1de/0x790 [ 1078.904384][T32589] ? __build_skb+0x62/0x440 [ 1078.908912][T32589] ? __pfx_tun_rx_batched+0x10/0x10 [ 1078.914131][T32589] ? tun_get_user+0x2787/0x43e0 [ 1078.919003][T32589] ? tun_get_user+0x2787/0x43e0 [ 1078.924046][T32589] ? tun_get_user+0x2394/0x43e0 [ 1078.928916][T32589] ? tun_get_user+0x2394/0x43e0 [ 1078.933874][T32589] ? __local_bh_enable_ip+0xd0/0x130 [ 1078.939184][T32589] tun_get_user+0x2bbc/0x43e0 [ 1078.943970][T32589] ? tun_get_user+0x2787/0x43e0 [ 1078.948941][T32589] ? aa_file_perm+0x50e/0x15e0 [ 1078.953723][T32589] ? __pfx_tun_get_user+0x10/0x10 [ 1078.958858][T32589] ? __lock_acquire+0x6b5/0x2cf0 [ 1078.963910][T32589] ? ref_tracker_alloc+0x35c/0x4c0 [ 1078.969063][T32589] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1078.974581][T32589] ? tun_get+0x1c/0x2f0 [ 1078.978855][T32589] ? tun_get+0x1c/0x2f0 [ 1078.983035][T32589] ? tun_get+0x1c/0x2f0 [ 1078.987214][T32589] ? tun_get+0x1c/0x2f0 [ 1078.991387][T32589] tun_chr_write_iter+0x113/0x200 [ 1078.996435][T32589] vfs_write+0x61d/0xb90 [ 1079.000732][T32589] ? __pfx_vfs_write+0x10/0x10 [ 1079.005553][T32589] ? __fget_files+0x2a/0x420 [ 1079.010182][T32589] ksys_write+0x150/0x270 [ 1079.014836][T32589] ? __pfx_ksys_write+0x10/0x10 [ 1079.019720][T32589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.025826][T32589] do_syscall_64+0x15f/0xf80 [ 1079.030763][T32589] ? trace_irq_disable+0x3b/0x140 [ 1079.035921][T32589] ? clear_bhb_loop+0x40/0x90 [ 1079.040621][T32589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.046532][T32589] RIP: 0033:0x7f8f6db5d60e [ 1079.050966][T32589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1079.070599][T32589] RSP: 002b:00007f8f6eb39fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1079.079223][T32589] RAX: ffffffffffffffda RBX: 00007f8f6eb3a6c0 RCX: 00007f8f6db5d60e [ 1079.087215][T32589] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 1079.095296][T32589] RBP: 00007f8f6dc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1079.103303][T32589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.111386][T32589] R13: 00007f8f6de16038 R14: 00007f8f6de15fa0 R15: 00007ffd22935818 [ 1079.119503][T32589] [ 1079.123294][T32589] Kernel Offset: disabled [ 1079.127624][T32589] Rebooting in 86400 seconds..