last executing test programs: 4.458040504s ago: executing program 1 (id=3898): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x14000801}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x40004) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, @in6={0xa, 0x4e23, 0x2, @mcast1, 0xfffffff9}, @in6={0xa, 0x4e21, 0x30000, @empty}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @rand_addr=0x64010102}], 0xb4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x40, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="4780d8506416"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1030209}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x380}, 0x1, 0x0, 0x0, 0x4010}, 0x801) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 4.145558572s ago: executing program 1 (id=3904): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 3.985786119s ago: executing program 3 (id=3907): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010427da205ac342380c7c89f3a1", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c00028005001100"], 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x20000000, 0xb2, 0xa8}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000001002500000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) sendto$packet(r9, &(0x7f00000001c0)="1e1e7a29258adc009f47842fc5807333359885649666720e7b82fa7424b6b4c425360ba694d67223f81a6da7420da52d7153e9c2e306a58dda1fd3d329332386a1ab9481a5d6e58b119be26170e6870999530c4e908b9dbedba2f992a1d748c8106b6bb5295e34ff6b845f54bd5b46cac94974b8546a2e6d2d4d5d18fac4facaba8ba603103652203b6894523699e56356d6de3448a76dede702b147bd3e30d5f1597d19bfd596eddedff60c1c1282a6226d6b58c6a4f09034cba1c9c6e78cf7d6f5", 0xc2, 0x20000010, &(0x7f0000000300)={0x11, 0x8, r10, 0x1, 0x7, 0x6, @multicast}, 0x14) 3.933729699s ago: executing program 1 (id=3908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @fd=r1}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000003c00)=""/4108, 0x100c}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000002a00)=""/15, 0xf}], 0x4}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a00009d6cc28402"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x80fe, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) recvfrom(r10, &(0x7f00000005c0)=""/65, 0x41, 0x22, &(0x7f0000000640)=@ll={0x11, 0x18, r5, 0x1, 0x2, 0x6, @remote}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) 3.829596609s ago: executing program 1 (id=3909): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000040)=0xfffffffffffffe2c) 3.635828941s ago: executing program 3 (id=3910): syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004c0000440000000000069078ac141400ac1e00018307dfac1414aa440c05030000000600000000860600"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090428b3d"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000000)={0xb, 0x1, 0x2, 0x7, 0x2, 0x1a, 0x14, "087e521dd0364bfa19e99811d776b553c9b15a60", "38fea6f0ba1050fc7070a19574afb33c6748b1d4"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r0}, 0x38) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4, 0x2, 0x10}, &(0x7f0000000240)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1e, 0x16, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00'}, 0x94) 3.578766504s ago: executing program 3 (id=3913): bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x2f, 0x69, 0xa, 0x5, 0x0, @mcast2, @private0, 0x40, 0x80, 0x6, 0x6}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x2, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@sack={0x5, 0x12, [0x2, 0x7f, 0x7, 0xfa73]}]}}}}}}}}, 0x0) 3.515389962s ago: executing program 3 (id=3914): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa", 0x5, 0x48840, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000025c0)={'wg2\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x880) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000100), 0x4) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2004c09c}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x18}, 0xc) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, r4, 0x2, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000180)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x1, 0x2, 0x3, 0x1, 0x5, 0xfffffffffffffff4, 0x4}, @ldst={0x1, 0x0, 0x2, 0x6, 0x0, 0x18, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], &(0x7f0000000240)='GPL\x00', 0x7, 0xc7, &(0x7f0000000340)=""/199, 0x0, 0x4, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xa, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r10, r11, 0xffffffffffffffff], &(0x7f0000000600)=[{0x2, 0x1, 0x7, 0xa}, {0x2, 0x3, 0x10, 0xc}], 0x10, 0x8001}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$inet6(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000880)="413d4a4a4bd97071d4f950cb401c1a47a7ba959f618cef5cc7c771c1781b013681c1844aaf6b179b168433753d8a30569c9530583edf2fb5574cb90fbfb252348558c98639dec8ee754e0556d9a2a4f03023e571e62f3594ffb7b6765b18b28d4461282c672eff0fadcf7659be15b7c1f734d9674cf10a9392833f2bce6f6094035533e718a59fef06433e46f2b28406750e3c68cff0bd7dae2181ee734165339d333a6f735bce2fffd0120429bd23987fe9d298c8d5a127ab62c4fa13a95aa181cd965ea1a784cdbf0f27543d4c7fa45768c34146e8a52a7a8021f86a957ca0afe52b4704d4004fe2bd3eaef3", 0xed}, {&(0x7f0000000280)="808c7d21cc78857dfd679ba129dafa560e3c4f7b4412f1914cb51b9381ab00000000", 0x22}, {&(0x7f0000000780)="acf966c4692c0e2fa17df99bb579e4eaf88011e69bf8e7ca145a86d3e4e986de8b27d1f1ed82c506aed4db8c3c58dc80e742b1a811e4af8dc6641fbb16f0870e3f3a40d16a997b5adbc9cae3d30d8960f092e7a8170c0356a10353188707a4a55089c7fae3e7441e24339ce24033ffbf74f78600a0475bced510801df30e2a78fe210e2471911c10614c61c030662c91dd93bb8517d839811bb4239f8308b95b8f32d14f1dbdfabccadcbc8554dae714d744192559effd0076c53b85e4689e5d42826fc81774c9aaca728a3674c46344c3b2059b451fe6b0b569e40807b6fac3006f89260de49df381dcec458639becf", 0xf0}, {&(0x7f0000000980)="53acd1c919f6e012b3aafcd527685974e8e0b6f9a5e8ce5e3cad179be534c55ed7bc166e891d25139268caf9ab64e0a340871687dc70b097bc8be7032a6b4608d9c1865b92b377a50d5d59668835250ebbd3435fcccb02b042d56e8588232f409c20e5f2613434d62bc4c94a69cb33f0e68288862701c3b640e8b0a622557e77f7707058cd", 0x85}, {&(0x7f0000000b80)="31cbd1a609d07b9009678312dbaa7b21e912165e8a7eb2a928c2248b00387cbb1fc4e5803e1ef89bf1ea8196c3338c485a82ab5bcf2a318bc9d00a2bc5a94b0c55185edbf67a32b5f961d2269550fecca5f964c80f304a1505a8df3cc598c56316c34a4cd38178661889"}, {&(0x7f0000000c00)="0088f4391a435ebb3defded4d9ab3174abb8512a5923c44aaa4d39019a4d3b478e81079382d3d417e5a0771fdb5cbf42d54cb0759777803491924d138cae1e519c6ec5ae2886f6c5e259b77702bffbba7627047d1a484f6563da6ad278f2cda5537b08ffff8b79d32b18f471bdb8ce838fe5fc5595529edda4492ee242f461c58f1ec1c12df20d4b2aaa997f85c06ca62cd29a161faf06f4f44d1679"}, {&(0x7f0000000cc0)="e82d9355f44ff1e438729a743b6e48265362c003fe5ac3ae1a1565b5d494082c65c2bed74dd33b8b8d9b785f24261890529776ec1526845b9ea598b613ec004ac7e68f3d6d894d3506ba447c1ec594c20c17d984f3a6bc1b08f8e0f0375a27563436081e31fbebe512f935d9b758b04ad98c1c2c6fdf9121d61c480d96"}, {&(0x7f0000000d40)="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"}], 0x4, &(0x7f0000000ec0)=[@dstopts_2292={{0x48, 0x29, 0x4, {0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x3, 0x5, [0x6, 0x8]}}, @generic={0x8, 0x0, "3b614b07c211dda0f6dfa600071b0b45f3d0ca235ec46d395d94"}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x32, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0x9, [0x3]}}]}}}], 0x88}, 0x20000000) 3.381704037s ago: executing program 3 (id=3916): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000780)=ANY=[], 0x12) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)={r1, 0x54, "bea56dd7c43a83dc1a6199f8511bc337101435d146ecea4695279f374105262993ff3104993e73799c47c8013b86b2be852038f0215368603b032d2dcacd5722f7b09e3cd31adb7a07d2d6d9f695a0bfc62bdefa"}, &(0x7f0000000340)=0x5c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000840)="a6", 0x1, 0x200000c0, &(0x7f00000001c0)={0xa, 0x2, 0x8001, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x80000001, 0x0, 0xce03d4}, 0x9c) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x21, 0x3, 0x5f0, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x520, 0xffffffff, 0xffffffff, 0x520, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x3, 0x4, 0x60, 0x400, 0x1, 0xf6, 0x7fffffff, 0x20, 0x80}, {0x1}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@uncond, 0x0, 0x258, 0x2c8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x3, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg0\x00', {0x3, 0xd, 0x41, 0x1, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x2, 0x5, 0x1, 0x0, "ea1ee5d1c9601b30deb958a92fe3434d35835e19b49a3ba41abc1c94d6a2fafc10325c60f0f8e407c0ad2bf4a9bcbc2a6c01a85913d84289f09effeb1b724612"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x650) 3.155653952s ago: executing program 3 (id=3919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x101, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xaf4, 0x0) sendmmsg$unix(r3, &(0x7f0000000200)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="eeb4d653ecd579aeed1e5aefe337e3f85173adf9", 0x14}, {&(0x7f00000000c0)="90fe11ca09b83fbc3a4311d35f80d8a80c362718c806d9b12047edb6252444ab9f2a080cd40304b3364838b533ac1f5718a9852dd6564e6537b344f684758ca61ca7a2438bc5b3cfabe118a4c09f8af62747cc28da3247852cfabc1408dcd1f7cde8e600e72fc9903b76", 0x6a}], 0x2, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}], 0x40, 0x40002}}], 0x1, 0x81) 2.963732909s ago: executing program 0 (id=3921): syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x3}]}}}}}}}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r5, 0x1000, 0x2, [0x1, 0x3]}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r5, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f00000001c0)=0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2.832301234s ago: executing program 1 (id=3922): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8907, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000040), 0x4) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) accept4(r1, 0x0, 0x0, 0x800) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r2], 0x0, 0x56}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYRESOCT=r3, @ANYRESOCT, @ANYRES32, @ANYBLOB="ff000000000000000400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000140)={r4, &(0x7f0000000040)='(\x00', 0x200000, &(0x7f0000000080)={@align, {0x401, 0x7, 0x7, 0x152f}}, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x3b1}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}, 0x10}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r4) 2.789913354s ago: executing program 0 (id=3923): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000022000106000200ea6356b50000000000000000000000aa"], 0x1c}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x41}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, 0x4, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008014}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000022000106000200ea6356b50000000000000000000000aa"], 0x1c}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x41}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, 0x4, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008014}, 0x4000000) (async) 2.751717803s ago: executing program 2 (id=3924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x8, 0xed6, 0x4, 0x9, 0x2, 0x9, 0x4, 0x4e1a, 0x2, 0x7, 0x7, 0xde4, 0x7, 0x1, 0x7fff]}, &(0x7f00000006c0)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000700)={r8, 0xf}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4042000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000004b59750140e3ac2cb8f337d7fe75875c4ab50310f8fec73182e02a3bc16e9a8b9c67e71296d84d4255f6b11f72b5bb89fecccc057cd82347c0e22410325c97a2f22f8caf8e39423895d5daf33821e7c6e9f0129b2e334b727a463c4a26136a95e9ce2259cc4dc1c1e010112c1d3d1c62695609ff9357de9a27927dcd23e35decf9edc291cfc6fdee2ae8566407830d38fa9d2042e71c1680ffa4a5cb6cc0004e5fdd76ffa2af270865bd3126f24641b89539589e9db9aae6d80903d75a22e4cff2fd3be34baacd588a244c19742587df24d44e03857c81582348db52abc932f65deb74b2407cd95dd26f973460470214fda5b83d524eac92b36e334310a72debe71c30", @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000851}, 0x80) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.658943259s ago: executing program 1 (id=3925): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x21}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000000ff0f04000700800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2c8d0}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x80, 0x2, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x7, 0x40, 0xb, 0x8000}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'ipvlan1\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x2b8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x2b8}}, 0x20008041) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x2b8, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x2b8}}, 0x20008041) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket(0x2d, 0x2, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) (async) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f00000005c0), 0x10) recvmmsg(r12, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r12], 0x48}}, 0x2404c054) ioctl$SIOCGSTAMPNS(r12, 0x8907, 0x0) (async) ioctl$SIOCGSTAMPNS(r12, 0x8907, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c0) (async) sendmsg$nl_route(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c0) 2.647281113s ago: executing program 4 (id=3926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_CONSUMED={0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES32=r4, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x20040814) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000940)=@assoc_value, &(0x7f0000000980)=0x8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000005fc0)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x7, 0x8000, 0x3f, 0x400, 0x5, 0x18c0012}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2400004000007d4fe84056f40a3b961a7152e283b30758fd655b67c6a16bbb01a31033f1727c53c43817d352fb9e11fe2ab495e4b542f35f489c3ae0c5fc06e18070368b07f0ee17751dad6591acbceb2b1e2dc1c99dbb603a8b2cd3f354805b10f58275bbd11e18a4ee86e2", @ANYRES32=0x0, @ANYBLOB="100001800c00048008000100070000000c0001800500030000000000"], 0x34}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001ac1414aa00000000000000810000000000000000000000000a00080000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050064010102000000000000000000000000000000003c00000002000000ac1414aa000000000000000000000000060000000403"], 0xfc}}, 0x0) r12 = socket(0xa, 0x3, 0xff) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r15, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) sendmsg$inet6(r12, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x87, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="5c040000", @ANYRES16=r16, @ANYBLOB="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"], 0x45c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYRESDEC], 0x54}}, 0x0) 2.618076235s ago: executing program 0 (id=3927): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600000001"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = socket(0x5, 0x2, 0xe9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000000090500000000000000000000000000080005400000000024001400018008000100ac1414aa080002007f0000010c00048008000140000000000900010073797a3000"/88], 0x58}}, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000240)={0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r3, 0x1f4d2000) close(r3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x4048846}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000005004000050001000700"/28], 0x1c}}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f0000000200)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x4, 0x0, 0xfffffffc}, 0x10}, 0x94) r7 = openat$cgroup_ro(r3, &(0x7f0000000380)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x20010, r7, 0x20000) 2.291894854s ago: executing program 2 (id=3928): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd0, &(0x7f0000000600), 0x4) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x85, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6a000000004f1101fe8000000000000000000000000000bbff0200000000000000000000000000014e1d4e20004f90"], 0x0) listen(r0, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x5a, "071b62b2005e76773113674417e8972c1a3b3a254577af673f98022096aaa7b0445ce202d82eb975741d9b8b362dd61042b72b5b323f77e451fd2c74ed52141941ff9ea7115d3be5e985af6f4362b8b97e2ce4eb958b162edf93"}, &(0x7f0000000380)=0x62) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000006b5b82305103493f00426695"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 2.213879433s ago: executing program 0 (id=3929): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x7, 0x2, 0x3, 0x1, 0x4, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)="1877789fd4b9eb97e5c8876cbd1c2c7f", &(0x7f0000001280), 0x3, r1}, 0x38) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}, "ade199ac8e976d00", "0badb2bcc6bddfad3817916b0b4a8cd9", "50a7db21", "2c15245ef6a90077"}, 0x28) ioctl(r2, 0x8b32, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) recvmsg(r3, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000003c0)=""/80, 0x50}, {&(0x7f0000000440)=""/98, 0x62}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000840)=""/159, 0x9f}, {&(0x7f0000000900)=""/159, 0x9f}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/232, 0xe8}, {&(0x7f0000002400)=""/172, 0xac}], 0x8, &(0x7f0000002540)=""/155, 0x9b}, 0x142) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef786dd", 0xe}], 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r7, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000340)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0xb, 0xb, 0x20, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2.161112314s ago: executing program 2 (id=3930): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x67, &(0x7f0000000000), 0x1}, 0x8044) 2.056396367s ago: executing program 4 (id=3931): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2.056129953s ago: executing program 2 (id=3932): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x40, 0x707, 0x1, 0x1, {{0xe, 0x4, 0x0, 0x1, 0x38, 0x67, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@end, @timestamp_prespec={0x44, 0x14, 0x38, 0x3, 0x3, [{@broadcast, 0x5}, {@remote, 0x4}]}, @generic={0x88, 0xc, "158ffdfd12bb8f549e0b"}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv6_newaddrlabel={0x48, 0x48, 0x100, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, r1, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x48}}, 0x0) r2 = socket(0x1d, 0x6, 0x38000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xf1188b5923928497}, 0x8c4) 1.97333994s ago: executing program 2 (id=3933): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x250}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.961186221s ago: executing program 4 (id=3934): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000005c0)={r0, &(0x7f00000004c0)='\x00', 0x200, &(0x7f0000000500)={@_ha_fsid={[0xff, 0x5]}, {0x5, 0x1, 0x1, 0xe}}, 0xfffffff9, &(0x7f0000000540), &(0x7f0000000580)=0x6}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000070000000000000000000000c4000000bb7f1a009500000004000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x401, 0x4, 0x0, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x2c, 0xef, &(0x7f0000000080)="3b0f12d269751fb48b6f358410d37967af0d51d97e0fedc792fea70944aaa3e700e74d818fe32866531d0f1a", &(0x7f0000000140)=""/239, 0x10000, 0x0, 0x0, 0x96, &(0x7f0000000240), &(0x7f0000000280)="683fcf3c06695e62a161ef682a958b685f6bf4842104490e347da6ff6422a3d83cf221d290e7d6194ec44bd13ee9684d7d71553012cd02e1a45828443682ac66dc74e42145e8d3080a6cfc7914dd45f116e9ba546fe4acfac897f8ac8ce30e1ed1ac4b7836280811949e46c62747a97d33497b8b24830699508012c735565a7958ccde03c512e2653b923682327255337ead3cdf5517", 0x1, 0x0, 0xdd}, 0x50) write$bt_hci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x6) r4 = socket$l2tp6(0xa, 0x2, 0x73) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) close(r1) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)={[{0x2d, 'blkio'}, {0x6, 'freezer'}, {0x0, 'rdma'}, {0x2b, 'rlimit'}, {0x2b, 'rlimit'}, {0x2b, 'perf_event'}, {0x2d, 'net_cls'}]}, 0x3b) recvfrom$l2tp6(r4, 0x0, 0x0, 0xc0002145, 0x0, 0x2c) sendmmsg$inet6(r4, &(0x7f0000003280)=[{{&(0x7f0000000740)={0xa, 0x4e20, 0x0, @private2, 0xfffffe98}, 0x1c, &(0x7f0000002c40)=[{&(0x7f0000000780)="9cf4d934154d6ad0cf9e3da48d1bd7f7f3ee90dbbc871f33bbb2db2b02af8111c49321652a8483a43b20214b7e2acc3c322f8a3bd7f102b08ffaed7c2deb5d00bb75c156b659efe158985547a459ca4c15029f5e28278e89c8b4c6b6d15f5dbde4ea2072daae86e6e2292e2493170dfded11652faca219281b3c036ac76f087a7173", 0x82}, {&(0x7f0000000840)="ecd2b6f0052a5e821a83fbb39c2a6ef05f291ae7d69f8723ff66b02abfd36b8ab98545aea7eb9e2af8f130f43105de8be38027f713e659b7b80a423cb14bfd8fca171ce4efe4711903d1fb32580a71567b99d39689c7c31a41b979d2", 0x5c}, {&(0x7f00000008c0)="2aed1dfe7fab68d2d456420a41f82f4740fd1d5420ab601500eadfc456cb103eb84770ff4c01f785302b0d1f06f137dc5b4b3e7c", 0x34}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="3296b071", 0x4}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x158}}, {{&(0x7f0000002e40)={0xa, 0xffff, 0x4, @private2, 0x24}, 0x1c, &(0x7f0000003200)=[{&(0x7f0000002e80)="8c45730b8b1e66f420557a358c18b893565870bde2749809111dc1b037d43321b4e16a40b8229e687c03a8278a781a0c9683832d51731bcca63b71ba4b33", 0x3e}, {&(0x7f0000002ec0)="ce7c2ba7f3c0b9f5ac241aff75188fca289f8c50dae8dc75c7ef162e4d4d60d8f944ca0920030530361fa36c956ec2824112e6e74f0d9293c66cc7e72fd20c27d4e4665bc3e319c96f00406b7c25643ea5b94e29236df7e0da1c4a09c71ce3dda66023359fbaec2f1b003ee9a5b534819c73d186b53ab85be6f477e8539fc1be52b43ee0cb4f30015ed5ca7d0904f8079b96e330ea48b96409bcf3c27be4f294a27b093afc39154559d0484115bea07d447229d66a13fde9cc2ddec9cf764c8278ce2736229244292de6e6e6994ca62c3d084e7d881d2830", 0xd8}, {&(0x7f0000002fc0)="2e92a21118c539e6a9ad82462e81040710d53ed1638c33c745eab94fda34ed2ef769b04fa6e27146fc3977f5c8562dd42ed5c6d48003888cb9e12b0d66827412ce0ca2f2380555e76bf9f0b76fdfaddd2aead535eb509601408fd5c2d8617ccaa6a05f72010c8d4a6eaaec5c62f928c44bc731690b77c79b41b890b874", 0x7d}, {&(0x7f0000003040)="5b68c15988cba19257d8657bf3fee90245e920e39f010166a69c0229cf075adebdbcf80e7c32ef3fa342878004162cc9f400aa3dfbc52c10555d8c9a0be9982312be762ab7a4de49da8ddfec40ef84153a5e351685194170c8a24dfd969bcb9cf1ca87e96f7e2170360c161093d85fe3fad0b531956e2591ce62e4e33d7268356386ec4ce9699c169b6b4b5c37115f8805db03362f14b0358e494805637acba24687d02313ad4006f9ce4a6c5146cbf2bd8dc73e346017c8a07b292a1c03de964f0114521af30f14ab1fd54b62e0b7002b87a0f84aa9c2375c030302d5308fe4b25d0c8a1755904e24def851c580890742c1ac", 0xf3}, {&(0x7f0000003140)="3adfbe8a769397d3b374f82bd40a3888a26f8e027285649817316974f88c812858f26d40b5da42e2141850934af9dde3cb0a87a9a1325fefaac6742b7f7b508e19d78eb1d51b4771dd13f9c60cd112df2b88d3387756090b2904a03723b5d071f2076d4784c0c65c3a8edc574112bce63d760f838f7c1996d9b441a6ff0986e350a82571c4", 0x85}], 0x5}}], 0x2, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5f, 0x1, '\x00'}}]}, 0x44}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000400)="a9c1f8d02e008c09d3be350752337808896981cd72a329204745aab94bc93c995b7e4a497cb5f46d7fc9d9156bef0e29f6fe176e05265aeeefe5181b0d0361d3288f068a1f4041a7a63413372f4ab4b98095ec2da125e48b6feb86cfa50585f8781e3b4aacd8adf8efb19d50d3e7ce23e59cd5d9e9ba22de", 0x78) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 1.665805963s ago: executing program 4 (id=3935): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r3, 0xc252d000) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000040)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0x215eb000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr, @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket(0x8, 0x3, 0x3) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 1.024385774s ago: executing program 2 (id=3936): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0x2, 0x2}) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/time_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) shutdown(r0, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff2, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x80, 0x4, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7800, 0x10, 0x7, 0x28000000}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000009c0)={@local, 0x0}, &(0x7f0000000a00)=0x14) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{&(0x7f0000000200)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="a3ea6485897b3b413e13c39f0f78dee060f63387760b35ff6e4a21cc30c5b051656e9ada015b2b1a4bb62c16675bb14bcb56aa11f7029dc2a17f64860daef12f15b8c33469fd17a6f899a3958e191d33c4b84585de455ea83ef9f0ea410952ef3b4645586362d065da6134c876a9b4bf0fb2d8f28c2f707e426d9affe6918314002a6e292e27f63b3d8bea7b8d5aa38102827241f56bb484dd", 0x99}, {&(0x7f0000000300)="2910c3ca72daba66eed932fa32edc9c3d125dbdf87d008", 0x17}], 0x2, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010101, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5eb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010100, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xbf}}], 0xa8}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000580)="a170e869fd06c095746ec4ce31f3f77fe6795dc04ec552626f7d3cf2de9db51093f1f2cbf22b1a88303c85fcbd085b4d6bb592fd77b2b3664fb846aaa8d9a84141c8a01cc28bed2764ab0f9b8d3730732d2a19fb5fca5827ecb958c29516cba7bd05e190f8090d936912", 0x6a}], 0x1}}, {{&(0x7f0000000640)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000bc0)="08816a14f6bb4b9ceb0ff85a97788104fa71a50889bf44862ab5b4af8f740a48b44f0e10fab525d85b509106edf744d373df776e968dd03ccb657ac429f2b0211f76a1e1f702f5f9a0a12e4f9b4ca420b7291e85579bc739d9ddd8f554b60f99ec73cf9ff89d85a9e46710f97c39b9f4fa3182e5746a6e7e7bd40b826287ba3c5191300ef87c68539a09f36e5004b6ecaeb5b995c822c29a3caf9b181b6fd40346f450b8ba09f07031e81526e69613998b16d07e538aa08cdc36c9710ab309cb8993e0cd3dfa10721ddb0f1d4f", 0xcd}, {&(0x7f0000000780)="fd4af6cb9513356283255f092c8b0c125b086ae44653e8730b7e8b110fdf19eb6ce86b35ff0a4d49b5b00dce3946a46b70a25b7965d62ae4dab0747c2caddbe53db878db", 0x44}], 0x2, &(0x7f0000000840)}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="f120eb8d80346b4f96d7accb3a97207a3ae6b1c72966bec15a41fcc9f80d203a049128f06a714d31b1a0d06c7d9552b461c904dc686091eac494b12693f05bddf0acb00ab0b9a8e0963eab89b3cb36888c6fba42478ec4b8f3eb2cef242f5e01bfce125727b469bef48608d80f956f3d3211a998b06ba0b98daa41dba6ccc1fbe2d95cc574f64103aca7cd4b2eaeb8ef639c894cfa67da66b2ad2599166e5def9c88d364c3af892be947c9e26dfe0f8f84d9a03aa34abf7bc7c1980901736af91685c4c326f1616d06fb9f5f8a", 0xcd}], 0x1, &(0x7f0000000a40)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xa2, 0x0, 0x3, [0x171, 0x1, 0x4, 0x4]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x2d, 0x0, 0x5, [0xfffffffe]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast1, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000b40)="4c366080c01eee87d35ff5a721b0b84368251d68613e635baa93d5230a51578979ddcb467d812b1c56459341f2ce964af78f30516d53d3bf61ee53311f399162a2af874ae20af6680d9f039186e4f94edccbe580ab2423", 0x57}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="b3ff7e01d23f0235ad5588391a78995457116dc75f40cd64d2754387b0b0977b40c990352879fee67ccc6f7d45b1ea65648ef05705bc4811006891e3762a6f6dafd7c8c228013028aaeee2da06bd794effb66ddf11cac2e603840f4dafeaa2e28b00e9596b7deae9d5c2339d7ccf1d43002faab533186e", 0x77}, {&(0x7f0000002980)="ba644c727f51fc5487338c5522a33744e8df0ee8d411f493f3b4b67259dfe5f5c52fa1f3c50e02eee97e30f2e19fe52bae8ba44277e3339b65cb5e2cfb57137366c1292f765586894e6198df43395ab2575ca4679a61c45fe193999f2bcc786444a4ae6219e0fad83c266a90b56dd9a7ecfda85379eb2cfb3eeeaa8f9d0d6e50699d1223fb7aa735422fdfb605eec5f6914f8b271511389046e9c74ea50f8e8a2db4c4e09a57b19b8c7f9f37bce1752cc7731fe6708b31", 0xb7}, {&(0x7f0000002a40)="c3d1cc2e6ba27066ba19ade2e873f9951fe0e21aa57e058f88eed7cddadc15ba7ab0494a9c0dad8c749dccdcec5ec34205f9fa47650ee70573202a03191a1b9942bcbcf16ec3935cd9f9c64778fee258aa9cbf716c17018f79c0d173824d7fa039156ee541e4d4da1dfc5df02eff5d7d33ba00dea95cb591348929e65f8e74731538007c714b76a2b19b9f19581a910b02b73526f7621d1e8ef1c7aa8461c8c52a945934efdebd456c4cb0992282eb", 0xaf}], 0x5, &(0x7f0000002b80)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0xd8}}, {{&(0x7f0000002c80)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000002cc0)="2ae3434386246de7f4f0c2dba3c0097db16eb7774fa61a976ffd2c47cbaf295a6edf69658acc58dde8fa7ce6f79f2446c8050ef224ee59252382d35eccbca89597b60b9c6bcda950431240a338bedd41d80ec35f2ad56855e715f2aebfd9fe", 0x5f}, {&(0x7f0000002d40)="e92d804b4a10a7a1693d18d324bedb97974a5ca69bde6f47f5a00463b9aa657bd76bb4e649e7e0f10021d53ea4e8f371cfdfa04803d0c523712af5deb1c76a900d43c4fe0c94551a4c389179d7bdcb2d415da52c1537a10bce2deed72926b9df9244a91f42824c6a5f688c61627315a5cf9ce38f80eeef17b1fed1470bc1b350af1d84d94a94083436b5a3351ab78586e1e553c6a3ec431f28f245480845ff2baa207a770354831a5a23db21e8cd087d5d2e7082635b91848e", 0xb9}, {&(0x7f0000002e00)="29a78fd56a321e84e94a7726031a0dc24179e696f57a9e1b1242a5369f8c7481cdd80ba89f65a3bf7ad9c45b3fb4d4f8831cb57e2697cefecd581314df6f0edb2e44fbf2bba6479dcefe74c8f70d533ede8d826591b6075c61058b58ebb4da2580b13378637436ba6adee469423c06134abf1e85a6da85cf02e2299dadf19098d201c1ed3716579e2b5b7a61e3e2970cdf40402b6281c5127daccd6a89317a764eb1dbc88a318ca489936a5b0cadd74b8cba5a420979a43794b697856adbd9d8d80424b045e8f5fd218cf0a74cd8f534652950a51859a1e6a20fbf9c8e6ba481f25f23d1377b07d6b13d6092280a563c60f51235", 0xf4}], 0x3, &(0x7f0000002f40)=[@ip_ttl={{0x14}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x54, 0x0, 0x1, [0x10, 0xb5c, 0x8, 0xfffffff1, 0x0, 0x5]}, @rr={0x7, 0x17, 0x9, [@loopback, @multicast1, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x20}]}, @end, @lsrr={0x83, 0xf, 0x9d, [@rand_addr=0x64010100, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0x5, "cb1c83"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8c0}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0xcb, 0x1, 0x8, [{@loopback, 0xfe}, {@broadcast, 0x1}, {@rand_addr=0x64010100, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x8}, {@multicast2, 0xdf8}, {@private=0xa010102, 0x428deb4e}, {@rand_addr=0x64010100, 0xcf0}, {@multicast2, 0x101}, {@empty, 0x5}]}, @ssrr={0x89, 0x13, 0x20, [@multicast1, @multicast1, @empty, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0x30, 0x0, 0x4, [0x2]}, @ssrr={0x89, 0x13, 0x24, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @generic={0x83, 0x3, "bd"}]}}}], 0x158}}], 0x6, 0x24000010) sendmsg$nl_netfilter(r5, &(0x7f0000000e40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10c, 0x4, 0x9, 0x201, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x5}, [@typed={0x8, 0x6e, 0x0, 0x0, @fd=r4}, @generic="63e1992289bd8ce060402e15ae7e39eb82c8854f68a2ade74aa2420667611d9c03245a511377dc0d338d62d04811558937d8ec7f82b8ae0ae8845c5348489344694d96e83bfb1ddfadf0d55a4862b43d4f96332e1a861795bb8031b177af55db98626d39be5cde1d1fb38f719865500c8e26c93d5b5735dd530e", @generic="a9b19c2c4810ab5bd7b5e9163e3588a69902de4d95ad5742f91f1d564fd41e449bdc7113862c4f6c0994efe52248abf8a8e16974fb6be4982259af72c6426caab0893a1c85f5a5a03f89d514db8474e9a0d5849885285eb6e908bea261fd2ae1aa8322e5c837b740c31a93d2e01fe2e81f4659"]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c00018006000600894f"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1, 0x1, 0x10}, &(0x7f0000000140)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2195}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x40}}, 0x0) 543.932383ms ago: executing program 0 (id=3937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) 468.358223ms ago: executing program 4 (id=3938): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000180)="79f8b5149cf04a4caca06d14a5bfc0547ea48603a8bfc4c2663425c9b401598f031fa958ba959a924a633bfe94f8676449b3069fa1", &(0x7f0000000680)=""/166}, 0x20) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@getqdisc={0x24, 0x26, 0x1, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x1, 0x6}, {0x3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 246.464894ms ago: executing program 4 (id=3939): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3cc500001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000a00fdffffff"], 0x3c}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r4}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @remote}], 0x20) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000080)) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x410, 0x0, 0x110, 0x240, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@arp={@remote, @loopback, 0xff000000, 0x0, 0xd, 0xb, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4, 0xfffd, 0x8000, 0xc, 0xfffe, 0xff, 'veth1_macvtap\x00', 'gre0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @broadcast, 0xf, 0xfffffffe}}}, {{@arp={@broadcast, @loopback, 0xffffff00, 0xff000000, 0xd, 0xe, {@empty, {[0x7f, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x8000, 0x0, 0x9d3, 0x1, 0x2, 0xf, 'veth1_vlan\x00', 'nicvf0\x00', {0xff}, {0x101}, 0x0, 0x104}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x4, 0x9, 0x0, 0x1, 0x0, "851edcde7f0891219799b5a0a40f363266470aae28ec45cd4389117992b7517ec050d0904789980f314e32f24c00c80768ec040ba268d18598086c599f6636d1"}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x479c, 0x4) accept(r2, &(0x7f0000000280)=@sco, &(0x7f0000000300)=0x80) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) 0s ago: executing program 0 (id=3940): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x10, 0x21e, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1bf, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0xf8, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0xfffffffd, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x1, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x74, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000002, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x10, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x1, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xfffffffc, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x2, 0x2, 0x9, 0x1000, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x8001, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x2, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x3, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x55d81519de704440}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) (async) r11 = socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000006111900000000000c6000000ffff00009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) kernel console output (not intermixed with test programs): N 0 to HW filter on device bond6 [ 343.683969][T14076] 8021q: adding VLAN 0 to HW filter on device bond6 [ 343.719044][T14076] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 343.782622][T14076] bond6: (slave sit2): Error -95 calling set_mac_address [ 344.029995][T14108] bridge_slave_0: invalid flags given to default FDB implementation [ 344.199934][T14115] tipc: New replicast peer: 255.255.255.255 [ 344.215018][T14115] tipc: Enabled bearer , priority 10 [ 344.368172][T14123] netlink: 'syz.1.2292': attribute type 3 has an invalid length. [ 344.423904][T14123] netlink: 'syz.1.2292': attribute type 2 has an invalid length. [ 344.444183][T14124] netlink: 'syz.1.2292': attribute type 3 has an invalid length. [ 344.482633][T14124] netlink: 'syz.1.2292': attribute type 2 has an invalid length. [ 344.804883][T14147] xt_hashlimit: size too large, truncated to 1048576 [ 344.862922][T14152] validate_nla: 1 callbacks suppressed [ 344.862945][T14152] netlink: 'syz.4.2304': attribute type 1 has an invalid length. [ 344.962750][T14155] macvlan0: entered promiscuous mode [ 345.058706][T14166] __nla_validate_parse: 12 callbacks suppressed [ 345.058731][T14166] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2306'. [ 345.380368][T14178] batman_adv: batadv0: Interface deactivated: dummy0 [ 345.387379][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2311'. [ 345.410358][T14178] batman_adv: batadv0: Removing interface: dummy0 [ 345.417915][T14184] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2309'. [ 345.428432][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2309'. [ 346.007151][T14215] geneve4: entered promiscuous mode [ 346.046089][T14215] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2321'. [ 346.222129][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2322'. [ 346.357301][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2324'. [ 346.402052][T14233] netlink: 'syz.4.2326': attribute type 1 has an invalid length. [ 346.464436][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'. [ 346.561042][T14233] 8021q: adding VLAN 0 to HW filter on device bond9 [ 346.635329][T14234] bond9: (slave veth9): Enslaving as an active interface with a down link [ 346.968297][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2328'. [ 347.041569][T14248] ip6gre1: entered allmulticast mode [ 347.051493][T14248] ip6gre1: entered promiscuous mode [ 347.058215][T14248] team0: Device ip6gre1 is of different type [ 347.379837][T14262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2334'. [ 347.810470][T14283] tipc: Started in network mode [ 347.828245][T14283] tipc: Node identity ea02923a9562, cluster identity 4711 [ 347.858739][T14283] tipc: Enabled bearer , priority 0 [ 347.878134][T14284] syzkaller0: entered promiscuous mode [ 347.894572][T14284] syzkaller0: entered allmulticast mode [ 348.034114][T14284] tipc: Resetting bearer [ 348.169489][T14284] tipc: Disabling bearer [ 348.208933][T14311] netlink: 'syz.2.2347': attribute type 12 has an invalid length. [ 348.230765][T14311] sctp: [Deprecated]: syz.2.2347 (pid 14311) Use of int in maxseg socket option. [ 348.230765][T14311] Use struct sctp_assoc_value instead [ 348.543237][T14322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.721574][T14336] netlink: 'syz.4.2358': attribute type 3 has an invalid length. [ 348.846223][T14344] netlink: 'syz.2.2360': attribute type 21 has an invalid length. [ 348.908497][T14344] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 348.926360][T14344] bond8 (unregistering): Released all slaves [ 349.400700][T14372] netlink: 'syz.1.2371': attribute type 1 has an invalid length. [ 349.562638][T14375] bond7: (slave geneve3): making interface the new active one [ 349.602069][T14375] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 349.644378][ T3359] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.683086][ T3359] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.719124][ T3359] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.744833][ T3359] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 349.835784][ T1781] block nbd0: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 120 seconds [ 349.847132][ T1781] block nbd0: Possible stuck request ffff8880274401c0: control (read@1024,1024B). Runtime 120 seconds [ 349.858960][ T1781] block nbd0: Possible stuck request ffff888027440380: control (read@2048,1024B). Runtime 120 seconds [ 349.870705][ T1781] block nbd0: Possible stuck request ffff888027440540: control (read@3072,1024B). Runtime 120 seconds [ 350.084792][T14414] __nla_validate_parse: 15 callbacks suppressed [ 350.084813][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'. [ 350.123666][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'. [ 350.144401][T14416] x_tables: duplicate underflow at hook 2 [ 350.194342][T14421] netlink: 'syz.3.2386': attribute type 9 has an invalid length. [ 350.217885][T14421] netlink: 'syz.3.2386': attribute type 6 has an invalid length. [ 350.722175][T14443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.729539][T14443] IPv6: NLM_F_CREATE should be set when creating new route [ 350.736906][T14443] IPv6: NLM_F_CREATE should be set when creating new route [ 351.193820][T14481] pim6reg: entered allmulticast mode [ 351.210460][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 351.744949][T14514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2411'. [ 351.760866][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'. [ 351.799789][T14509] bridge0: Device is already in use. [ 351.835488][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'. [ 352.233392][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'. [ 352.379667][T14547] tipc: Failed to remove unknown binding: 66,0,0/0:718196358/718196360 [ 352.407745][T14547] tipc: Failed to remove unknown binding: 66,0,0/0:718196358/718196359 [ 352.442653][T14547] tipc: Failed to remove unknown binding: 66,0,0/0:718196358/718196360 [ 352.464803][T14553] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2421'. [ 352.476848][T14547] tipc: Failed to remove unknown binding: 66,0,0/0:718196358/718196359 [ 352.758727][T14561] syzkaller0: entered promiscuous mode [ 352.771196][T14561] syzkaller0: entered allmulticast mode [ 352.796771][T14566] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2424'. [ 352.819455][T14565] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 352.831427][T14567] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2424'. [ 352.884415][T14565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 354.306498][T14630] netlink: 'syz.4.2442': attribute type 1 has an invalid length. [ 354.446036][ T5297] veth0_macvtap: left promiscuous mode [ 354.825501][T14654] syzkaller0: entered promiscuous mode [ 354.841382][T14654] syzkaller0: entered allmulticast mode [ 355.066170][ T30] audit: type=1107 audit(1779943040.965:4): pid=14668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Qßeî…øgÓ„"9tâûY…r ŽO8%%0 ñ¬mæ#¿2rÄþ0Ùê›g‘Tò7®l쨬,ĸLZ@$”¾PZœ•q@Å¢n>' [ 355.249216][T14676] net_ratelimit: 15 callbacks suppressed [ 355.249236][T14676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.591463][T14694] sctp: [Deprecated]: syz.2.2455 (pid 14694) Use of int in maxseg socket option. [ 355.591463][T14694] Use struct sctp_assoc_value instead [ 356.227036][T14722] xt_hashlimit: size too large, truncated to 1048576 [ 356.362239][T14730] __nla_validate_parse: 7 callbacks suppressed [ 356.362261][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2465'. [ 357.166546][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 357.217467][T14765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2472'. [ 357.261853][T14765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2472'. [ 357.483598][T14781] netlink: 'syz.1.2477': attribute type 2 has an invalid length. [ 357.502080][T14781] netlink: 'syz.1.2477': attribute type 2 has an invalid length. [ 357.534178][T14781] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2477'. [ 357.891838][T14802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2482'. [ 357.969942][T14809] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2484'. [ 358.315009][T14831] xt_hashlimit: size too large, truncated to 1048576 [ 358.776248][T14867] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2495'. [ 361.493776][T14849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.523112][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2497'. [ 361.673433][T14899] netlink: 'syz.1.2499': attribute type 1 has an invalid length. [ 361.733130][T14907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2501'. [ 361.813452][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'. [ 361.851345][T14916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2503'. [ 361.888348][T14911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2502'. [ 362.330508][T14942] netlink: 'syz.1.2511': attribute type 11 has an invalid length. [ 362.352310][T14942] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2511'. [ 362.419033][T14944] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 362.611607][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2517'. [ 362.632599][T14963] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 362.649910][T14963] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 362.658156][T14963] netlink: 'syz.4.2517': attribute type 2 has an invalid length. [ 362.667528][T14963] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2517'. [ 363.491464][T15008] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 363.716829][T15014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2532'. [ 364.646172][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 366.029209][T14980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.039899][T15003] netlink: 'syz.2.2528': attribute type 11 has an invalid length. [ 366.453297][T15058] netlink: 'syz.3.2540': attribute type 10 has an invalid length. [ 366.496835][T15051] veth11: entered allmulticast mode [ 366.562996][T15058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.619240][T15058] team0: Port device netdevsim1 added [ 366.811600][T15073] __nla_validate_parse: 3 callbacks suppressed [ 366.811621][T15073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2548'. [ 366.837439][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2549'. [ 366.892719][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2549'. [ 366.914752][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2549'. [ 366.927622][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2549'. [ 367.047524][T15083] atomic_op ffff888024faf198 conn xmit_atomic 0000000000000000 [ 367.202986][T15091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2553'. [ 367.239369][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2555'. [ 367.240840][T15091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2553'. [ 367.783449][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2564'. [ 367.794406][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2564'. [ 367.984921][T15128] ipt_REJECT: TCP_RESET invalid for non-tcp [ 367.993422][T15128] xt_TPROXY: Can be used only with -p tcp or -p udp [ 368.410128][T15114] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 368.630109][T15150] macvtap1: entered promiscuous mode [ 368.635906][T15150] vlan0: entered promiscuous mode [ 368.641574][T15150] macvtap1: entered allmulticast mode [ 368.650169][T15150] vlan0: entered allmulticast mode [ 368.656727][T15150] veth0_vlan: entered allmulticast mode [ 368.690019][T15158] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 368.844642][T15169] netlink: 'syz.2.2581': attribute type 18 has an invalid length. [ 369.013501][T15175] netlink: 'syz.0.2583': attribute type 11 has an invalid length. [ 369.230307][T15189] sctp: [Deprecated]: syz.0.2587 (pid 15189) Use of int in max_burst socket option. [ 369.230307][T15189] Use struct sctp_assoc_value instead [ 370.247140][T15232] sctp: [Deprecated]: syz.3.2597 (pid 15232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.247140][T15232] Use struct sctp_sack_info instead [ 370.308361][T15232] sctp: [Deprecated]: syz.3.2597 (pid 15232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 370.308361][T15232] Use struct sctp_sack_info instead [ 370.551361][T15248] tipc: Cannot configure node identity twice [ 371.220770][T15283] netlink: 'syz.2.2610': attribute type 21 has an invalid length. [ 371.411332][T15293] netlink: 'syz.0.2611': attribute type 1 has an invalid length. [ 371.444387][T15296] netlink: 'syz.3.2612': attribute type 1 has an invalid length. [ 371.570521][T15293] bond11: entered promiscuous mode [ 371.577022][T15293] 8021q: adding VLAN 0 to HW filter on device bond11 [ 371.703713][T15300] 8021q: adding VLAN 0 to HW filter on device bond11 [ 371.715785][T15300] bond11: (slave vti1): The slave device specified does not support setting the MAC address [ 371.726268][T15300] bond11: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 371.780273][T15300] bond11: (slave vti1): making interface the new active one [ 371.786811][T15315] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 371.818689][T15300] vti1: entered promiscuous mode [ 371.854644][T15300] bond11: (slave vti1): Enslaving as an active interface with an up link [ 371.920703][T15298] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 372.044144][T15315] 8021q: adding VLAN 0 to HW filter on device bond10 [ 372.053190][T15319] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 372.080630][T15331] erspan0: entered allmulticast mode [ 373.451741][ T30] audit: type=1800 audit(1779943059.345:5): pid=15356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2623" name="memory.events" dev="tmpfs" ino=2767 res=0 errno=0 [ 374.607016][T15365] __nla_validate_parse: 13 callbacks suppressed [ 374.607047][T15365] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2626'. [ 374.788802][T15377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2629'. [ 374.974046][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2633'. [ 375.071983][T15392] netlink: 'syz.4.2635': attribute type 1 has an invalid length. [ 375.113278][T15392] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2635'. [ 375.118397][T15394] netlink: 'syz.0.2634': attribute type 1 has an invalid length. [ 375.148693][T15392] netlink: 'syz.4.2635': attribute type 1 has an invalid length. [ 375.173471][T15392] netlink: 'syz.4.2635': attribute type 8 has an invalid length. [ 375.204453][T15392] netlink: 582 bytes leftover after parsing attributes in process `syz.4.2635'. [ 375.234126][T15398] netlink: 'syz.1.2637': attribute type 1 has an invalid length. [ 375.266069][T15398] netlink: 'syz.1.2637': attribute type 11 has an invalid length. [ 375.298780][T15401] netlink: 'syz.3.2638': attribute type 2 has an invalid length. [ 375.316108][T15398] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2637'. [ 375.328677][T15401] netlink: 11420 bytes leftover after parsing attributes in process `syz.3.2638'. [ 375.341668][T15401] netlink: 'syz.3.2638': attribute type 2 has an invalid length. [ 375.438432][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2639'. [ 375.468124][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2639'. [ 375.833145][T15418] netlink: 'syz.1.2643': attribute type 1 has an invalid length. [ 375.867614][T15418] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2643'. [ 375.911872][T15425] xt_cgroup: path and classid specified [ 375.923600][T15425] x_tables: duplicate underflow at hook 3 [ 376.128920][T15432] netlink: 'syz.2.2649': attribute type 3 has an invalid length. [ 377.753854][T15515] syzkaller0: entered promiscuous mode [ 377.767643][T15515] syzkaller0: entered allmulticast mode [ 378.138247][T15535] IPVS: ip_vs_edit_dest(): server weight less than zero [ 378.776544][T15558] 8021q: adding VLAN 0 to HW filter on device bond11 [ 378.793671][T15562] bond11: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 378.853290][T15562] bond11: entered allmulticast mode [ 378.898151][T15558] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 379.165003][T15581] macvlan3: entered allmulticast mode [ 379.183052][T15581] dummy0: entered allmulticast mode [ 379.194908][T15581] dummy0: entered promiscuous mode [ 379.678778][T15615] __nla_validate_parse: 10 callbacks suppressed [ 379.678797][T15615] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2696'. [ 379.922770][ T1781] block nbd0: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 150 seconds [ 379.933646][ T1781] block nbd0: Possible stuck request ffff8880274401c0: control (read@1024,1024B). Runtime 150 seconds [ 379.944958][ T1781] block nbd0: Possible stuck request ffff888027440380: control (read@2048,1024B). Runtime 150 seconds [ 379.956539][ T1781] block nbd0: Possible stuck request ffff888027440540: control (read@3072,1024B). Runtime 150 seconds [ 380.306864][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2705'. [ 380.419314][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'. [ 380.958272][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2711'. [ 380.981804][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 381.007866][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2711'. [ 381.211346][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'. [ 381.230666][T15698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2716'. [ 381.282326][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 381.317972][T15696] syzkaller0: entered promiscuous mode [ 381.324342][T15696] syzkaller0: entered allmulticast mode [ 381.508740][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2722'. [ 381.650149][T15730] batadv_slave_1: mtu less than device minimum [ 381.667815][T15729] batadv_slave_1: mtu less than device minimum [ 381.885754][T15736] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 381.897916][T15736] bond12 (unregistering): Released all slaves [ 383.917195][T15753] syzkaller0: entered promiscuous mode [ 383.924678][T15753] syzkaller0: entered allmulticast mode [ 383.934337][T15766] syzkaller0: entered promiscuous mode [ 383.946477][T15766] syzkaller0: entered allmulticast mode [ 384.184991][T15782] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 384.884489][T15822] __nla_validate_parse: 4 callbacks suppressed [ 384.884508][T15822] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2744'. [ 384.935775][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2744'. [ 384.959968][T15823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2744'. [ 384.992209][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'. [ 385.159668][T15835] syzkaller1: entered promiscuous mode [ 385.204842][T15835] syzkaller1: entered allmulticast mode [ 385.254508][T15843] validate_nla: 5 callbacks suppressed [ 385.254527][T15843] netlink: 'syz.3.2751': attribute type 5 has an invalid length. [ 385.612567][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2759'. [ 385.848616][T15885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2765'. [ 385.863789][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2763'. [ 385.900094][T15885] syzkaller1: entered promiscuous mode [ 385.906040][T15885] syzkaller1: entered allmulticast mode [ 386.006286][T15891] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2766'. [ 386.281933][T15873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2760'. [ 386.292353][T15873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2760'. [ 386.418460][T15873] gretap0: entered promiscuous mode [ 386.441660][T15873] gretap0: left promiscuous mode [ 386.921929][T15936] netlink: 'syz.0.2776': attribute type 1 has an invalid length. [ 386.959319][T15936] netlink: 'syz.0.2776': attribute type 1 has an invalid length. [ 387.209237][ T30] audit: type=1107 audit(1779943073.095:6): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='{ò.ÀÌ_äáEA»Åºhš3k¡ˆ¹ý¬NNtãYG³T³ qˆµ¾É~´ÛµÍ|ðÃâ€Do žøƒì¡ %œ“øa+|® [ 387.209237][ T30]  DÀÿÛ25t P?‘–暯bYÌÉjg¸­Ærø_ |Yþ5X³|¢”HD·x²âbÌ:1:ïnpœâ%h½†få8cgÒÜeåXš°F>ÇH\žÚÍÃeŸC¯¦^¥kgnëß—¿“î(IÀpÇÀѧjœ†:vpеÓ:0à¿pb´”;S©±ŠF*ñ€ëa‚\|jÈL' [ 387.576651][T15930] team0: entered promiscuous mode [ 387.592331][T15930] team0: entered allmulticast mode [ 387.622471][T15962] syzkaller0: entered promiscuous mode [ 387.645807][T15962] syzkaller0: entered allmulticast mode [ 387.903620][T15979] bridge7: entered promiscuous mode [ 387.912981][T15979] bridge7: entered allmulticast mode [ 387.948226][T15979] team0: Port device bridge7 added [ 387.980041][T15982] bridge0: port 1(team0) entered blocking state [ 388.004396][T15982] bridge0: port 1(team0) entered disabled state [ 388.031314][T15982] team0: entered allmulticast mode [ 388.080867][T15982] team0: entered promiscuous mode [ 388.112989][T15994] xt_socket: unknown flags 0x8 [ 388.135355][T15994] bond6: entered allmulticast mode [ 388.300245][T16004] batadv0: entered promiscuous mode [ 388.318268][T16004] macsec0: entered promiscuous mode [ 388.326702][T16004] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 388.364487][T16004] batadv0: left promiscuous mode [ 388.794424][T16035] netlink: 'syz.2.2799': attribute type 1 has an invalid length. [ 388.949201][T15993] bond6: left allmulticast mode [ 389.023258][T16042] tipc: Cannot configure node identity twice [ 389.088242][ T5297] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.167282][T16046] IPv6: NLM_F_CREATE should be specified when creating new route [ 389.361347][T16059] netlink: 'syz.2.2805': attribute type 2 has an invalid length. [ 389.428833][T16070] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 389.496028][T16053] 8021q: adding VLAN 0 to HW filter on device bond12 [ 389.562408][T16057] macvlan3: entered promiscuous mode [ 389.595300][T16057] macvlan3: entered allmulticast mode [ 389.609192][T16057] bond12: entered promiscuous mode [ 389.634910][T16057] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 389.694729][T16057] bond12: left promiscuous mode [ 389.788589][T16068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.086362][T16101] __nla_validate_parse: 16 callbacks suppressed [ 390.086383][T16101] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2812'. [ 390.223588][T16100] xt_CT: No such helper "snmp_trap" [ 390.279026][T16111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2815'. [ 390.463031][T16122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2817'. [ 390.499095][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2817'. [ 390.593910][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2817'. [ 390.659930][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2817'. [ 390.660010][T16122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2817'. [ 390.741098][T16127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2817'. [ 391.218624][T16164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2827'. [ 391.471530][T16180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.948163][T16207] ip6gre1: entered allmulticast mode [ 392.151701][T16220] xt_TPROXY: Can be used only with -p tcp or -p udp [ 392.159245][T16227] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2846'. [ 392.190949][T16220] netlink: 'syz.1.2844': attribute type 11 has an invalid length. [ 392.585132][T16253] netlink: 'syz.0.2854': attribute type 21 has an invalid length. [ 392.619611][T16253] tipc: Invalid UDP bearer configuration [ 392.619684][T16253] tipc: Enabling of bearer rejected, failed to enable media [ 392.844638][T16262] xt_CT: No such helper "snmp_trap" [ 392.889714][T16265] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 393.080857][T16267] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20004 [ 393.393699][ T5656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.409819][ T5656] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.418279][ T5656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.430887][ T5656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.443880][ T5656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 394.441156][T16307] bridge8: port 1(veth15) entered blocking state [ 394.474068][T16307] bridge8: port 1(veth15) entered disabled state [ 394.495396][T16307] veth15: entered allmulticast mode [ 394.503396][T16307] veth15: entered promiscuous mode [ 394.522830][T16311] bridge8: port 2(veth0_to_bond) entered blocking state [ 394.546093][T16311] bridge8: port 2(veth0_to_bond) entered disabled state [ 394.560963][T16311] veth0_to_bond: entered allmulticast mode [ 394.587899][T16311] veth0_to_bond: entered promiscuous mode [ 394.795653][ T5658] Bluetooth: hci3: command 0x0406 tx timeout [ 395.038157][T16340] netlink: 'syz.2.2873': attribute type 1 has an invalid length. [ 395.264785][T16349] netlink: 'syz.3.2876': attribute type 1 has an invalid length. [ 395.281610][T16349] __nla_validate_parse: 7 callbacks suppressed [ 395.281631][T16349] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2876'. [ 395.351684][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2876'. [ 395.508288][T16279] »»»»»» speed is unknown, defaulting to 1000 [ 395.518879][ T5642] Bluetooth: hci5: command tx timeout [ 396.400668][T16409] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 396.426282][T16409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.551962][T16417] netlink: 'syz.3.2891': attribute type 12 has an invalid length. [ 396.590778][T16417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.685661][T16421] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 396.719759][T16425] netlink: 'syz.1.2893': attribute type 2 has an invalid length. [ 396.795551][T16425] netlink: 'syz.1.2893': attribute type 1 has an invalid length. [ 396.838782][T16432] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 396.960998][T16279] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.994819][T16279] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.031371][T16279] bridge_slave_0: entered allmulticast mode [ 397.064424][T16279] bridge_slave_0: entered promiscuous mode [ 397.091260][T16279] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.104595][T16279] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.124417][T16279] bridge_slave_1: entered allmulticast mode [ 397.149184][T16279] bridge_slave_1: entered promiscuous mode [ 397.249181][T16279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.270075][T16279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.339650][T16279] team0: Port device team_slave_0 added [ 397.358861][T16279] team0: Port device team_slave_1 added [ 397.416489][T16457] FAULT_INJECTION: forcing a failure. [ 397.416489][T16457] name failslab, interval 1, probability 0, space 0, times 1 [ 397.431348][T16457] CPU: 0 UID: 0 PID: 16457 Comm: syz.0.2899 Not tainted syzkaller #0 PREEMPT(full) [ 397.431377][T16457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 397.431407][T16457] Call Trace: [ 397.431415][T16457] [ 397.431424][T16457] dump_stack_lvl+0xe8/0x150 [ 397.431453][T16457] should_fail_ex+0x412/0x560 [ 397.431481][T16457] should_failslab+0xa8/0x100 [ 397.431501][T16457] ? skb_clone+0x212/0x3a0 [ 397.431532][T16457] kmem_cache_alloc_noprof+0x87/0x650 [ 397.431569][T16457] skb_clone+0x212/0x3a0 [ 397.431605][T16457] __netlink_deliver_tap+0x404/0x850 [ 397.431646][T16457] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.431678][T16457] netlink_deliver_tap+0x19c/0x1b0 [ 397.431709][T16457] netlink_sendskb+0x68/0x140 [ 397.431738][T16457] tipc_nl_compat_recv+0xa81/0xcf0 [ 397.431770][T16457] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 397.431794][T16457] ? __mutex_trylock_common+0x158/0x260 [ 397.431824][T16457] ? __pfx___mutex_trylock_common+0x10/0x10 [ 397.431849][T16457] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 397.431872][T16457] ? __pfx_tipc_nl_compat_net_set+0x10/0x10 [ 397.431910][T16457] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 397.431944][T16457] genl_family_rcv_msg_doit+0x22a/0x330 [ 397.431975][T16457] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 397.432024][T16457] genl_rcv_msg+0x61c/0x7a0 [ 397.432054][T16457] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.432084][T16457] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 397.432112][T16457] ? __pfx_ref_tracker_free+0x10/0x10 [ 397.432148][T16457] netlink_rcv_skb+0x232/0x4b0 [ 397.432178][T16457] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.432203][T16457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.432252][T16457] ? down_read+0x270/0x2e0 [ 397.432272][T16457] ? genl_rcv+0xd/0x40 [ 397.432294][T16457] genl_rcv+0x28/0x40 [ 397.432314][T16457] netlink_unicast+0x75c/0x8e0 [ 397.432353][T16457] netlink_sendmsg+0x813/0xb40 [ 397.432393][T16457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.432428][T16457] ? aa_sock_msg_perm+0xf1/0x1b0 [ 397.432459][T16457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.432491][T16457] ____sys_sendmsg+0x972/0x9f0 [ 397.432521][T16457] ? __might_fault+0xaf/0x130 [ 397.432555][T16457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.432597][T16457] ? import_iovec+0x73/0xa0 [ 397.432626][T16457] ___sys_sendmsg+0x2a5/0x360 [ 397.432654][T16457] ? __lock_acquire+0x6b5/0x2cf0 [ 397.432682][T16457] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.432752][T16457] ? __fget_files+0x2a/0x420 [ 397.432776][T16457] ? __fget_files+0x3a0/0x420 [ 397.432812][T16457] __x64_sys_sendmsg+0x1bd/0x2a0 [ 397.432846][T16457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.432887][T16457] ? __pfx_ksys_write+0x10/0x10 [ 397.432926][T16457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.432949][T16457] do_syscall_64+0x174/0xf80 [ 397.432978][T16457] ? trace_irq_disable+0x3b/0x140 [ 397.433009][T16457] ? clear_bhb_loop+0x40/0x90 [ 397.433035][T16457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.433056][T16457] RIP: 0033:0x7f1883b9ce59 [ 397.433084][T16457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.433101][T16457] RSP: 002b:00007f1884a9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.433123][T16457] RAX: ffffffffffffffda RBX: 00007f1883e15fa0 RCX: 00007f1883b9ce59 [ 397.433138][T16457] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 397.433150][T16457] RBP: 00007f1884a9b090 R08: 0000000000000000 R09: 0000000000000000 [ 397.433163][T16457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.433175][T16457] R13: 00007f1883e16038 R14: 00007f1883e15fa0 R15: 00007ffe34b5df78 [ 397.433208][T16457] [ 397.529033][T16279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.668587][ T5642] Bluetooth: hci5: command tx timeout [ 397.947052][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.994593][T16470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.020241][T16279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.079784][T16279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.091589][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.156144][T16279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.193553][T16465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2900'. [ 398.301555][T16279] hsr_slave_0: entered promiscuous mode [ 398.321046][T16279] hsr_slave_1: entered promiscuous mode [ 398.354906][T16279] debugfs: 'hsr0' already exists in 'hsr' [ 398.368533][T16279] Cannot create hsr debugfs directory [ 398.490146][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2903'. [ 398.524965][T16489] gre1: entered promiscuous mode [ 398.546109][T16489] gre1: entered allmulticast mode [ 398.755215][T16504] FAULT_INJECTION: forcing a failure. [ 398.755215][T16504] name failslab, interval 1, probability 0, space 0, times 0 [ 398.768494][T16504] CPU: 1 UID: 0 PID: 16504 Comm: syz.2.2910 Not tainted syzkaller #0 PREEMPT(full) [ 398.768522][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 398.768534][T16504] Call Trace: [ 398.768541][T16504] [ 398.768549][T16504] dump_stack_lvl+0xe8/0x150 [ 398.768574][T16504] should_fail_ex+0x412/0x560 [ 398.768597][T16504] should_failslab+0xa8/0x100 [ 398.768617][T16504] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 398.768645][T16504] ? preempt_schedule_thunk+0x16/0x30 [ 398.768673][T16504] ? __alloc_skb+0x1d0/0x7d0 [ 398.768704][T16504] __alloc_skb+0x1d0/0x7d0 [ 398.768736][T16504] tipc_nl_compat_doit+0x1f9/0x650 [ 398.768763][T16504] ? __lock_acquire+0x6b5/0x2cf0 [ 398.768790][T16504] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 398.768831][T16504] ? bpf_lsm_capable+0x9/0x20 [ 398.768851][T16504] ? security_capable+0x7e/0x2c0 [ 398.768885][T16504] tipc_nl_compat_recv+0x8d3/0xcf0 [ 398.768913][T16504] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 398.768937][T16504] ? __mutex_trylock_common+0x158/0x260 [ 398.768967][T16504] ? __pfx___mutex_trylock_common+0x10/0x10 [ 398.768993][T16504] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 398.769016][T16504] ? __pfx_tipc_nl_compat_net_set+0x10/0x10 [ 398.769054][T16504] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 398.769088][T16504] genl_family_rcv_msg_doit+0x22a/0x330 [ 398.769120][T16504] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 398.769155][T16504] ? __lock_acquire+0x6b5/0x2cf0 [ 398.769188][T16504] genl_rcv_msg+0x61c/0x7a0 [ 398.769217][T16504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.769237][T16504] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 398.769280][T16504] netlink_rcv_skb+0x232/0x4b0 [ 398.769310][T16504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.769338][T16504] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.769385][T16504] ? down_read+0x270/0x2e0 [ 398.769404][T16504] ? genl_rcv+0xd/0x40 [ 398.769435][T16504] genl_rcv+0x28/0x40 [ 398.769455][T16504] netlink_unicast+0x75c/0x8e0 [ 398.769492][T16504] netlink_sendmsg+0x813/0xb40 [ 398.769530][T16504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.769564][T16504] ? aa_sock_msg_perm+0xf1/0x1b0 [ 398.769595][T16504] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.769627][T16504] ____sys_sendmsg+0x972/0x9f0 [ 398.769656][T16504] ? __might_fault+0xaf/0x130 [ 398.769690][T16504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.769730][T16504] ? import_iovec+0x73/0xa0 [ 398.769759][T16504] ___sys_sendmsg+0x2a5/0x360 [ 398.769786][T16504] ? __lock_acquire+0x6b5/0x2cf0 [ 398.769812][T16504] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.769881][T16504] ? __fget_files+0x2a/0x420 [ 398.769904][T16504] ? __fget_files+0x3a0/0x420 [ 398.769939][T16504] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.769972][T16504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.770013][T16504] ? __pfx_ksys_write+0x10/0x10 [ 398.770051][T16504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.770073][T16504] do_syscall_64+0x174/0xf80 [ 398.770103][T16504] ? trace_irq_disable+0x3b/0x140 [ 398.770131][T16504] ? clear_bhb_loop+0x40/0x90 [ 398.770156][T16504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.770176][T16504] RIP: 0033:0x7f0efeb9ce59 [ 398.770195][T16504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.770213][T16504] RSP: 002b:00007f0eff9e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.770234][T16504] RAX: ffffffffffffffda RBX: 00007f0efee15fa0 RCX: 00007f0efeb9ce59 [ 398.770249][T16504] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 398.770260][T16504] RBP: 00007f0eff9e8090 R08: 0000000000000000 R09: 0000000000000000 [ 398.770272][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.770284][T16504] R13: 00007f0efee16038 R14: 00007f0efee15fa0 R15: 00007ffc9ff26e08 [ 398.770318][T16504] [ 399.279813][T16509] x_tables: duplicate underflow at hook 2 [ 399.309737][T16279] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.320339][T16279] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 399.330741][T16279] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.341129][T16279] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50154 - 0 [ 399.359190][T16279] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 399.399934][T16502] pim6reg527: entered allmulticast mode [ 399.512803][T16518] openvswitch: netlink: Message has 8 unknown bytes. [ 399.533385][T16279] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.560977][T16279] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 399.585179][T16279] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.609421][T16279] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50154 - 0 [ 399.637269][T16279] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 399.757794][T16279] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 399.803527][T16279] team0: Port device netdevsim1 removed [ 399.814346][T16279] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.827806][T16279] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 399.842168][ T5642] Bluetooth: hci5: command tx timeout [ 399.850589][T16279] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.862018][T16279] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50154 - 0 [ 399.873152][T16279] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 399.922374][T16530] bridge9: entered promiscuous mode [ 399.927942][T16530] bridge9: entered allmulticast mode [ 400.014259][T16279] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.034827][T16279] netdevsim netdevsim4  (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 400.046492][T16279] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.059242][T16279] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 50154 - 0 [ 400.079311][T16279] netdevsim netdevsim4  (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 400.249941][T16538] netlink: 'syz.2.2920': attribute type 1 has an invalid length. [ 400.370668][T16540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2921'. [ 400.431704][T16279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 400.460293][T16279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.476549][T16279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 400.499807][T16279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.516373][T16279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 400.551652][T16279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.568321][T16279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 400.596773][T16279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.807007][T16279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.847924][T16279] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.872688][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.880021][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.929945][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.937188][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.066560][T16567] only policy match revision 0 supported [ 401.066597][T16567] unable to load match [ 401.097627][T16567] netlink: 'syz.0.2927': attribute type 1 has an invalid length. [ 401.135853][T16571] netlink: 'syz.0.2927': attribute type 1 has an invalid length. [ 401.202875][T16567] 8021q: adding VLAN 0 to HW filter on device bond13 [ 401.235687][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2929'. [ 401.304592][T16576] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 401.602363][T16599] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2931'. [ 401.709461][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2933'. [ 401.728481][T16595] syzkaller0: entered promiscuous mode [ 401.747796][T16595] syzkaller0: entered allmulticast mode [ 401.915433][ T5642] Bluetooth: hci5: command tx timeout [ 402.115421][T16622] openvswitch: netlink: IP tunnel dst address not specified [ 402.346541][T16618] syzkaller0: left promiscuous mode [ 402.380637][T16618] syzkaller0: left allmulticast mode [ 402.467556][T16631] ipvlan35: entered allmulticast mode [ 402.495792][T16631] batadv_slave_1: entered allmulticast mode [ 402.528007][T16631] batman_adv: batadv0: Adding interface: ipvlan35 [ 402.546766][T16631] batman_adv: batadv0: The MTU of interface ipvlan35 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.609240][T16631] batman_adv: batadv0: Interface activated: ipvlan35 [ 402.874933][T16279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.300940][T16279] veth0_vlan: entered promiscuous mode [ 403.329772][T16279] veth1_vlan: entered promiscuous mode [ 403.398443][T16279] veth0_macvtap: entered promiscuous mode [ 403.487392][T16279] veth1_macvtap: entered promiscuous mode [ 403.509871][T16677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.554529][T16279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.618216][T16279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.641830][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.660438][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.673789][T16685] xt_bpf: check failed: parse error [ 403.694698][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.717208][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.872582][ T3359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.884167][ T3359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.982123][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.006848][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.359466][T16718] nbd: must specify at least one socket [ 404.769556][ T5658] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 404.783906][ T5658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 404.796657][ T5658] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 404.822609][ T5658] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 404.834818][ T5658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 404.948113][T16735] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2967'. [ 404.987285][T16735] netlink: 320 bytes leftover after parsing attributes in process `syz.1.2967'. [ 405.819070][T16761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2973'. [ 405.852770][T16761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2973'. [ 405.984844][ T165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 406.122091][T16768] netlink: 'syz.3.2975': attribute type 16 has an invalid length. [ 406.146563][T16768] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2975'. [ 406.376303][ T165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 406.577030][T16798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2980'. [ 406.810112][ T165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 406.877490][ T5658] Bluetooth: hci2: command tx timeout [ 406.893786][T16804] ip6gre1: entered allmulticast mode [ 406.916542][T16798] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2980'. [ 407.003402][T16730] »»»»»» speed is unknown, defaulting to 1000 [ 407.178259][T16816] syzkaller1: entered promiscuous mode [ 407.197826][T16816] syzkaller1: entered allmulticast mode [ 407.465618][T16832] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.2988'. [ 407.477680][T16832] netlink: zone id is out of range [ 407.498675][T16832] netlink: zone id is out of range [ 407.508763][T16832] netlink: zone id is out of range [ 407.520658][T16832] netlink: zone id is out of range [ 407.548686][T16832] netlink: zone id is out of range [ 407.596725][T16832] netlink: zone id is out of range [ 407.632177][T16832] netlink: zone id is out of range [ 407.658939][T16832] netlink: zone id is out of range [ 407.699530][T16832] netlink: zone id is out of range [ 407.716632][T16832] netlink: zone id is out of range [ 407.814330][ T165] team0: left allmulticast mode [ 407.829259][ T165] team0: left promiscuous mode [ 407.846330][ T165] bridge0: port 1(team0) entered disabled state [ 407.908380][ T165] veth0_to_bond: left allmulticast mode [ 407.914237][ T165] veth0_to_bond: left promiscuous mode [ 407.923151][ T165] bridge8: port 2(veth0_to_bond) entered disabled state [ 407.934879][ T165] veth15: left allmulticast mode [ 407.940022][ T165] veth15: left promiscuous mode [ 407.946496][ T165] bridge8: port 1(veth15) entered disabled state [ 408.138421][ T165] erspan0 (unregistering): left promiscuous mode [ 408.164649][ T165] gretap0 (unregistering): left promiscuous mode [ 408.461266][ T165] bond4 (unregistering): (slave bridge0): Releasing active interface [ 408.469659][ T165] bridge0 (unregistering): left promiscuous mode [ 408.477802][ T165] bridge0 (unregistering): left allmulticast mode [ 408.611074][ T165] team0: Port device bridge7 removed [ 408.757791][ T165] bond0 (unregistering): Released all slaves [ 408.769341][ T165] bond1 (unregistering): Released all slaves [ 408.789455][ T165] bond2 (unregistering): Released all slaves [ 408.818831][ T165] bond3 (unregistering): Released all slaves [ 408.841057][ T165] bond4 (unregistering): Released all slaves [ 408.870774][ T165] bond5 (unregistering): Released all slaves [ 408.890120][ T165] bond6 (unregistering): Released all slaves [ 408.906873][ T165] bond7 (unregistering): Released all slaves [ 408.955249][ T5658] Bluetooth: hci2: command tx timeout [ 408.999947][T16856] macsec1: entered promiscuous mode [ 409.159553][ T165] tipc: Left network mode [ 409.171093][T16860] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2995'. [ 409.276785][ T165] IPVS: stopping backup sync thread 13080 ... [ 409.434324][T16879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2997'. [ 409.999720][ T1781] block nbd0: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 180 seconds [ 410.013384][ T1781] block nbd0: Possible stuck request ffff8880274401c0: control (read@1024,1024B). Runtime 180 seconds [ 410.025992][ T1781] block nbd0: Possible stuck request ffff888027440380: control (read@2048,1024B). Runtime 180 seconds [ 410.037359][ T1781] block nbd0: Possible stuck request ffff888027440540: control (read@3072,1024B). Runtime 180 seconds [ 410.313815][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3005'. [ 410.436155][T16914] team1: entered promiscuous mode [ 410.455911][T16914] team1: entered allmulticast mode [ 410.707773][T16929] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3007'. [ 410.792036][T16730] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.839388][T16730] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.861047][T16940] __nla_validate_parse: 1 callbacks suppressed [ 410.861067][T16940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3007'. [ 410.886477][T16939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3009'. [ 410.906547][T16730] bridge_slave_0: entered allmulticast mode [ 410.920962][T16730] bridge_slave_0: entered promiscuous mode [ 410.944318][T16730] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.957569][T16730] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.971273][T16730] bridge_slave_1: entered allmulticast mode [ 410.992897][T16730] bridge_slave_1: entered promiscuous mode [ 411.035940][ T5658] Bluetooth: hci2: command tx timeout [ 411.042298][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 411.224004][T16730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.285915][T16730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.588184][T16730] team0: Port device team_slave_0 added [ 411.620396][T16730] team0: Port device team_slave_1 added [ 411.909833][T16730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.934503][T16730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.975288][T16730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.073295][ T165] dummy0: left allmulticast mode [ 412.560606][T16730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.567877][T16730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.594845][T16730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.115311][ T5658] Bluetooth: hci2: command tx timeout [ 414.919053][T16730] hsr_slave_0: entered promiscuous mode [ 414.952551][T16730] hsr_slave_1: entered promiscuous mode [ 414.987088][T16730] debugfs: 'hsr0' already exists in 'hsr' [ 414.997236][T16730] Cannot create hsr debugfs directory [ 415.351191][ T165] IPVS: stop unused estimator thread 0... [ 415.549375][T17039] net_ratelimit: 51 callbacks suppressed [ 415.549404][T17039] openvswitch: netlink: Missing valid actions attribute. [ 415.579602][T17039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.593910][T17039] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3028'. [ 415.822574][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3031'. [ 416.004399][T17056] netlink: 'syz.0.3033': attribute type 11 has an invalid length. [ 416.019598][T17056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3033'. [ 416.440105][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 416.449379][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3039'. [ 416.460185][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 416.526247][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3039'. [ 416.535666][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3039'. [ 416.544741][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 416.604518][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3040'. [ 416.732652][T16730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.775554][T16730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.792627][T16730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.810515][T16730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.820075][T16730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.835346][T16730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.857973][T16730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.881254][T16730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.040456][T17107] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3045'. [ 417.261724][T16730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.307788][T17119] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3048'. [ 417.429926][T16730] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.511848][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.519099][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.592590][T10207] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.599844][T10207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.949564][T17206] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 418.979650][T17207] netlink: 'syz.3.3068': attribute type 8 has an invalid length. [ 419.202663][T16730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.255869][T17218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.534028][T16730] veth0_vlan: entered promiscuous mode [ 419.591974][T16730] veth1_vlan: entered promiscuous mode [ 419.653456][T17235] : renamed from bond0 (while UP) [ 419.718445][T16730] veth0_macvtap: entered promiscuous mode [ 419.810340][T16730] veth1_macvtap: entered promiscuous mode [ 419.897077][T16730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.968570][T16730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.050428][T17246] syzkaller0: entered promiscuous mode [ 420.069906][T17246] syzkaller0: entered allmulticast mode [ 420.093110][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.095366][T17251] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 420.118627][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.146265][T17249] tipc: Invalid UDP bearer configuration [ 420.146315][T17249] tipc: Enabling of bearer rejected, failed to enable media [ 420.217023][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.258962][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.617454][T10207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.646531][T10207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.771308][T17268] pim6reg1: entered promiscuous mode [ 420.790307][T17268] pim6reg1: entered allmulticast mode [ 420.810510][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.836451][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.843809][T17281] openvswitch: netlink: VLAN attribute unexpected. [ 421.273561][T17306] __nla_validate_parse: 8 callbacks suppressed [ 421.273581][T17306] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3093'. [ 421.401426][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3095'. [ 421.553493][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3098'. [ 421.626379][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 421.639150][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 421.647894][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.658711][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.670157][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.681982][T17322] 8021q: adding VLAN 0 to HW filter on device bond7 [ 421.726825][T17319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3096'. [ 422.116018][T17351] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3103'. [ 422.610722][T17371] netlink: 'syz.3.3109': attribute type 1 has an invalid length. [ 422.653215][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'. [ 422.699458][T17375] ip6gretap2: entered promiscuous mode [ 422.710137][T17375] ip6gretap2: entered allmulticast mode [ 422.727310][T17375] bond8: (slave ip6gretap2): making interface the new active one [ 422.737979][T17375] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 422.747770][T17375] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 422.755983][T17375] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 422.780974][T17371] tipc: Enabling of bearer rejected, already enabled [ 423.007790][T17389] netlink: 'syz.3.3114': attribute type 1 has an invalid length. [ 423.026099][T17389] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3114'. [ 423.047178][T17389] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3114'. [ 423.060163][T17389] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3114'. [ 423.118811][T17398] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3115'. [ 423.259694][T17403] netlink: 'syz.4.3117': attribute type 1 has an invalid length. [ 423.297370][T17403] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 423.444399][T17416] netlink: 'syz.2.3121': attribute type 9 has an invalid length. [ 423.581601][T17324] »»»»»» speed is unknown, defaulting to 1000 [ 423.756446][ T5658] Bluetooth: hci3: command tx timeout [ 423.927984][T17444] netlink: 'syz.3.3129': attribute type 1 has an invalid length. [ 424.034606][T17444] 8021q: adding VLAN 0 to HW filter on device bond9 [ 424.410081][T17476] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 424.421496][T17324] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.443316][T17324] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.457439][T17324] bridge_slave_0: entered allmulticast mode [ 424.483802][T17324] bridge_slave_0: entered promiscuous mode [ 424.504332][T17324] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.524990][T17324] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.543448][T17324] bridge_slave_1: entered allmulticast mode [ 424.564379][T17324] bridge_slave_1: entered promiscuous mode [ 424.675000][T17324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.704420][T17324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.964117][T17324] team0: Port device team_slave_0 added [ 425.026299][T17324] team0: Port device team_slave_1 added [ 425.164716][T17324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.189160][T17324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.236848][T17324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.287277][T17513] netlink: 'syz.4.3142': attribute type 1 has an invalid length. [ 425.296010][T17505] netlink: 'syz.0.3140': attribute type 5 has an invalid length. [ 425.308162][T17324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.335988][T17324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.399158][T17324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.546591][T17517] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 425.621454][T17324] hsr_slave_0: entered promiscuous mode [ 425.637660][T17324] hsr_slave_1: entered promiscuous mode [ 425.644322][T17324] debugfs: 'hsr0' already exists in 'hsr' [ 425.650306][T17324] Cannot create hsr debugfs directory [ 425.668707][T17522] syzkaller0: entered promiscuous mode [ 425.674562][T17522] syzkaller0: entered allmulticast mode [ 425.837619][ T5658] Bluetooth: hci3: command tx timeout [ 426.252026][T17545] netlink: 'syz.0.3151': attribute type 1 has an invalid length. [ 426.273495][T17545] netlink: 'syz.0.3151': attribute type 2 has an invalid length. [ 426.309591][T17545] netlink: 'syz.0.3151': attribute type 1 has an invalid length. [ 426.397600][T17548] __nla_validate_parse: 11 callbacks suppressed [ 426.397621][T17548] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3152'. [ 426.431208][T17551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3153'. [ 426.442015][T17548] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3152'. [ 426.626102][T17324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.654180][T17324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.665781][T17324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 426.739380][T17557] syzkaller0: entered promiscuous mode [ 426.758176][T17557] syzkaller0: entered allmulticast mode [ 426.829788][T17557] tipc: Enabled bearer , priority 0 [ 426.854043][T17557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3155'. [ 426.918965][T17324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.948267][T17324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.964686][T17324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 426.982818][T17572] netlink: zone id is out of range [ 426.992676][T17572] netlink: zone id is out of range [ 427.005221][T17572] netlink: zone id is out of range [ 427.014755][T17572] netlink: zone id is out of range [ 427.021910][T17572] netlink: zone id is out of range [ 427.030524][T17572] netlink: zone id is out of range [ 427.057653][T17572] netlink: zone id is out of range [ 427.064706][T17572] netlink: zone id is out of range [ 427.098059][T17572] netlink: zone id is out of range [ 427.115305][T17572] netlink: zone id is out of range [ 427.139299][T17324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.160507][T17324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.181119][T17324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 427.223002][T17555] tipc: Resetting bearer [ 427.281666][T17555] tipc: Disabling bearer [ 427.366641][T17324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.402386][T17324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.427388][T17324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 427.465460][T17562] »»»»»» speed is unknown, defaulting to 1000 [ 427.703027][T17597] sctp: [Deprecated]: syz.0.3169 (pid 17597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.703027][T17597] Use struct sctp_sack_info instead [ 427.918942][ T5658] Bluetooth: hci3: command tx timeout [ 428.072219][T17324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.119186][T17324] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.140640][T17324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.180930][T17324] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.215447][T17324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.259137][T17324] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.278131][T17324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.290746][T17324] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.453669][T17324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.480527][T17324] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.498138][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.505410][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.539080][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.546343][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.793691][T17633] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.818727][T17630] syzkaller0: entered promiscuous mode [ 428.826959][T17630] syzkaller0: entered allmulticast mode [ 428.846349][T17633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3177'. [ 428.882854][T17633] validate_nla: 4 callbacks suppressed [ 428.882873][T17633] netlink: 'syz.2.3177': attribute type 7 has an invalid length. [ 428.897391][T17633] netlink: 'syz.2.3177': attribute type 8 has an invalid length. [ 428.952520][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3177'. [ 429.002996][T17633] gretap0: entered promiscuous mode [ 429.031671][T17633] gretap0: left promiscuous mode [ 429.043282][T17636] sctp: [Deprecated]: syz.3.3178 (pid 17636) Use of int in maxseg socket option. [ 429.043282][T17636] Use struct sctp_assoc_value instead [ 429.654551][T17675] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3186'. [ 429.716758][T17678] syzkaller0: entered promiscuous mode [ 429.740227][T17678] syzkaller0: entered allmulticast mode [ 429.927331][T17686] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3189'. [ 429.991614][T17324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.995838][ T5658] Bluetooth: hci3: command tx timeout [ 430.210273][T17324] veth0_vlan: entered promiscuous mode [ 430.282376][T17324] veth1_vlan: entered promiscuous mode [ 430.477034][T17324] veth0_macvtap: entered promiscuous mode [ 430.521595][T17324] veth1_macvtap: entered promiscuous mode [ 430.532380][T17711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3197'. [ 430.549437][T17711] netlink: 'syz.2.3197': attribute type 7 has an invalid length. [ 430.564559][T17711] netlink: 'syz.2.3197': attribute type 8 has an invalid length. [ 430.583445][T17714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3198'. [ 430.763406][T17717] batman_adv: batadv0: Interface deactivated: ipvlan35 [ 430.790515][T17717] batman_adv: batadv0: Removing interface: ipvlan35 [ 430.854313][T17324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.921251][T17324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.974733][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.003892][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.032142][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.054645][T17726] netlink: 'syz.3.3203': attribute type 21 has an invalid length. [ 431.065149][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.202549][T17726] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 431.216869][T17726] bond10 (unregistering): Released all slaves [ 431.508816][T17746] __nla_validate_parse: 3 callbacks suppressed [ 431.508835][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3207'. [ 431.541044][T17745] xt_TCPMSS: Only works on TCP SYN packets [ 431.555682][ T3359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.574315][ T3359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.599470][T17746] bridge_slave_1: left allmulticast mode [ 431.621621][T17746] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.642531][T17746] bridge_slave_0: left allmulticast mode [ 431.651309][T17746] bridge_slave_0: left promiscuous mode [ 431.660093][T17746] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.014584][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.023221][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.289396][T17777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3216'. [ 432.460310][T17784] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3215'. [ 432.706130][T17794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3220'. [ 432.788058][T17798] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3219'. [ 432.836339][T17794] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3220'. [ 432.866969][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.882328][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.890212][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.901877][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.908247][T17794] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3220'. [ 432.928051][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 432.972326][T17794] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3220'. [ 433.355969][ T5658] Bluetooth: hci3: command tx timeout [ 433.498870][ T57] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 433.862950][T17802] »»»»»» speed is unknown, defaulting to 1000 [ 434.212650][T17838] »»»»»» speed is unknown, defaulting to 1000 [ 434.219343][T17846] netlink: 'syz.1.3230': attribute type 21 has an invalid length. [ 434.228069][T17846] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.236686][T17846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.243947][T17846] IPv6: NLM_F_CREATE should be set when creating new route [ 434.251274][T17846] IPv6: NLM_F_CREATE should be set when creating new route [ 434.258563][T17846] IPv6: NLM_F_CREATE should be set when creating new route [ 434.332601][T17846] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3230'. [ 434.399792][T17802] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.408613][T17802] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.415995][T17802] bridge_slave_0: entered allmulticast mode [ 434.423781][T17802] bridge_slave_0: entered promiscuous mode [ 434.432943][T17802] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.440334][T17802] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.447819][T17802] bridge_slave_1: entered allmulticast mode [ 434.462834][T17802] bridge_slave_1: entered promiscuous mode [ 434.612992][T17802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.643077][T17802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.793384][T17802] team0: Port device team_slave_0 added [ 434.812201][T17802] team0: Port device team_slave_1 added [ 434.844644][T17857] net_ratelimit: 6 callbacks suppressed [ 434.844658][T17857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.865619][T17802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.872671][T17802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.900969][T17802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.915688][T17802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.922798][T17802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.949073][T17802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.972464][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 435.036388][ T5658] Bluetooth: hci4: command tx timeout [ 435.042537][T17802] hsr_slave_0: entered promiscuous mode [ 435.049142][T17802] hsr_slave_1: entered promiscuous mode [ 435.057174][T17802] debugfs: 'hsr0' already exists in 'hsr' [ 435.062962][T17802] Cannot create hsr debugfs directory [ 435.128856][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3234'. [ 435.271930][T17802] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.282772][T17802] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.358868][T17802] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.369217][T17802] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.414945][T17802] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.425235][T17802] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.483338][T17802] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.493360][T17802] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.397324][T17821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.453800][T17802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 436.520242][T17802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.566805][T17802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 436.602261][T17802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.622152][T17876] __nla_validate_parse: 33 callbacks suppressed [ 436.622172][T17876] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3237'. [ 436.654277][T17802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 436.678098][T17881] netlink: 'syz.3.3239': attribute type 62 has an invalid length. [ 436.699445][T17802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.738648][T17802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 436.787886][T17802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.074439][T17907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3241'. [ 437.116740][ T5658] Bluetooth: hci4: command tx timeout [ 437.180416][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3244'. [ 437.192140][T17914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3245'. [ 437.226142][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3244'. [ 437.236525][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3241'. [ 437.263917][T17915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.350804][T17915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.391990][T17920] netlink: 'syz.4.3246': attribute type 7 has an invalid length. [ 437.503946][T17920] netlink: 'syz.4.3246': attribute type 7 has an invalid length. [ 437.566487][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.602018][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.741115][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.759474][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.003864][T17947] netlink: 'syz.3.3252': attribute type 62 has an invalid length. [ 438.051781][T17917] syz.2.3241 (17917) used greatest stack depth: 16992 bytes left [ 438.094570][T17802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.152099][T17950] netlink: 'syz.3.3253': attribute type 1 has an invalid length. [ 438.214532][T17955] IPVS: length: 139 != 8 [ 438.254556][T17802] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.300759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.309560][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.359029][ T3291] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.366347][ T3291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.910218][T17982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3263'. [ 438.941756][T17982] openvswitch: netlink: IP tunnel dst address not specified [ 439.196355][ T5658] Bluetooth: hci4: command tx timeout [ 439.252281][T17994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3265'. [ 439.284837][T17994] netlink: 'syz.1.3265': attribute type 7 has an invalid length. [ 439.293330][T17994] netlink: 'syz.1.3265': attribute type 8 has an invalid length. [ 439.311305][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3265'. [ 439.489036][T18001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3266'. [ 439.603318][T18010] raw_sendmsg: syz.1.3267 forgot to set AF_INET. Fix it! [ 439.946810][T17802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.079226][ T1781] block nbd0: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 210 seconds [ 440.090096][ T1781] block nbd0: Possible stuck request ffff8880274401c0: control (read@1024,1024B). Runtime 210 seconds [ 440.101636][ T1781] block nbd0: Possible stuck request ffff888027440380: control (read@2048,1024B). Runtime 210 seconds [ 440.114121][ T1781] block nbd0: Possible stuck request ffff888027440540: control (read@3072,1024B). Runtime 210 seconds [ 440.302307][T18054] netlink: 'syz.2.3273': attribute type 2 has an invalid length. [ 440.374205][T18047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.443977][T18046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 440.457593][T18046] bond1: (slave bond2): Enslaving as an active interface with an up link [ 440.603457][T17802] veth0_vlan: entered promiscuous mode [ 440.636214][T17802] veth1_vlan: entered promiscuous mode [ 440.784373][T17802] veth0_macvtap: entered promiscuous mode [ 440.804532][T18071] syzkaller0: entered promiscuous mode [ 440.835185][T18071] syzkaller0: entered allmulticast mode [ 440.853120][T18071] netlink: 'syz.2.3280': attribute type 3 has an invalid length. [ 440.892919][T17802] veth1_macvtap: entered promiscuous mode [ 440.930415][ T5755] IPVS: starting estimator thread 0... [ 440.961806][T18089] syzkaller0: entered promiscuous mode [ 440.980679][T18089] syzkaller0: entered allmulticast mode [ 441.025478][T18084] IPVS: using max 28 ests per chain, 67200 per kthread [ 441.099871][T17802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.187040][T17802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.211359][T18094] €: renamed from veth0_to_bond (while UP) [ 441.239458][ T1108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.261221][ T1108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.276745][ T5658] Bluetooth: hci4: command tx timeout [ 441.292490][ T1108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.311192][ T1108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.397219][T18109] netlink: 'syz.3.3290': attribute type 1 has an invalid length. [ 441.492536][T18110] syzkaller1: entered promiscuous mode [ 441.499358][T18110] syzkaller1: entered allmulticast mode [ 441.512133][ T3359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.523210][ T3359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.544857][T18113] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 441.560669][T18113] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 441.570524][T18113] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 441.581387][T18113] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 441.594177][T18113] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 441.603622][T18113] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 441.631780][T18113] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 441.646147][T18113] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 441.668318][T18113] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 441.680142][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.689545][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.696440][T18113] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 441.772547][T18116] __nla_validate_parse: 10 callbacks suppressed [ 441.772568][T18116] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3293'. [ 441.973872][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 441.990949][T18130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3296'. [ 442.572818][T18151] tipc: Enabling of bearer rejected, failed to enable media [ 442.654121][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 442.667152][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.678332][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.692508][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.693395][T18153] syzkaller0: entered promiscuous mode [ 442.707420][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.758364][T18153] syzkaller0: entered allmulticast mode [ 442.949884][T18167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'. [ 443.668199][ T3291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.680634][ T3291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 443.692654][ T3291] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 443.710486][T18162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 443.796636][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'. [ 443.941898][T18201] bond1: option xmit_hash_policy: invalid value (64) [ 443.977381][T18201] bond1 (unregistering): Released all slaves [ 444.135571][ T3291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.161801][ T3291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.182770][ T3291] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 444.343642][ T3291] team0: Port device netdevsim1 removed [ 444.384348][ T3291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.418566][ T3291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.444925][ T3291] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 444.562398][T18244] netlink: 'syz.0.3326': attribute type 1 has an invalid length. [ 444.633005][T18250] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3327'. [ 444.654721][ T3291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.683791][ T3291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 444.704046][ T3291] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 444.795265][ T5658] Bluetooth: hci0: command tx timeout [ 444.896770][T18262] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.3331'. [ 445.113501][T18268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3332'. [ 445.194000][T18155] »»»»»» speed is unknown, defaulting to 1000 [ 445.370618][T18282] netlink: 'syz.1.3338': attribute type 1 has an invalid length. [ 445.623556][T18293] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3341'. [ 446.115647][ T3291] bond8 (unregistering): (slave ip6gretap2): Releasing active interface [ 446.293761][ T3291] bond4 (unregistering): (slave gretap1): Releasing active interface [ 446.379212][ T3291] bond3 (unregistering): (slave geneve3): Releasing active interface [ 446.562978][ T3291] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 446.741301][ T3291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.753772][ T3291] bond0 (unregistering): Released all slaves [ 446.767898][ T3291] bond1 (unregistering): (slave lo): Releasing backup interface [ 446.780860][ T3291] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 446.792424][ T3291] bond1 (unregistering): Released all slaves [ 446.808830][ T3291] bond2 (unregistering): Released all slaves [ 446.824606][ T3291] bond3 (unregistering): Released all slaves [ 446.840659][ T3291] bond4 (unregistering): Released all slaves [ 446.858401][ T3291] bond5 (unregistering): Released all slaves [ 446.875781][ T5658] Bluetooth: hci0: command 0x041b tx timeout [ 446.899427][ T3291] bond6 (unregistering): Released all slaves [ 446.915567][ T3291] bond7 (unregistering): Released all slaves [ 446.931208][ T3291] bond8 (unregistering): Released all slaves [ 446.947656][ T3291] bond9 (unregistering): Released all slaves [ 446.974078][T18294] tipc: Started in network mode [ 446.982854][T18294] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 446.990602][T18294] tipc: Enabled bearer , priority 24 [ 447.267462][ T3291] : left promiscuous mode [ 447.303125][T18343] netlink: 'syz.4.3354': attribute type 9 has an invalid length. [ 447.562617][ T3291] tipc: Disabling bearer [ 447.582873][ T3291] tipc: Left network mode [ 447.950671][T18372] netlink: 'syz.1.3360': attribute type 1 has an invalid length. [ 448.126595][ T29] tipc: Node number set to 10005162 [ 448.403241][T18385] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 448.865638][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 448.956717][ T5658] Bluetooth: hci0: command 0x041b tx timeout [ 448.998131][T18155] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.012177][T18414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3371'. [ 449.024095][T18155] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.046800][T18155] bridge_slave_0: entered allmulticast mode [ 449.054544][T18414] netlink: 'syz.0.3371': attribute type 7 has an invalid length. [ 449.076700][T18414] netlink: 'syz.0.3371': attribute type 8 has an invalid length. [ 449.099692][T18155] bridge_slave_0: entered promiscuous mode [ 449.100461][T18414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3371'. [ 449.141777][T18155] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.170395][T18155] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.203163][T18155] bridge_slave_1: entered allmulticast mode [ 449.251043][T18155] bridge_slave_1: entered promiscuous mode [ 449.290449][T18424] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3374'. [ 449.593621][ T3291] veth1_macvtap: left promiscuous mode [ 449.620455][ T3291] veth1_vlan: left promiscuous mode [ 449.637074][ T3291] veth0_vlan: left promiscuous mode [ 449.677131][ C1] net_ratelimit: 26 callbacks suppressed [ 449.677152][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.896953][ T3291] pim6reg (unregistering): left allmulticast mode [ 449.992167][ T3291] team0 (unregistering): Port device batadv0 removed [ 450.353810][ T3291] team0 (unregistering): Port device team_slave_1 removed [ 450.384036][ T3291] team0 (unregistering): Port device team_slave_0 removed [ 450.652514][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 450.678603][T18155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.731103][T18155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.893654][T18467] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3380'. [ 450.913626][T18467] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3380'. [ 450.942178][T18155] team0: Port device team_slave_0 added [ 450.950781][T18467] netlink: zone id is out of range [ 450.972957][T18467] netlink: zone id is out of range [ 450.988256][T18155] team0: Port device team_slave_1 added [ 450.996477][T18467] netlink: zone id is out of range [ 451.011331][T18467] netlink: zone id is out of range [ 451.030112][T18467] netlink: zone id is out of range [ 451.035496][ T5658] Bluetooth: hci0: command 0x041b tx timeout [ 451.050786][T18462] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3379'. [ 451.060453][T18467] netlink: zone id is out of range [ 451.078842][T18467] netlink: zone id is out of range [ 451.092046][T18467] netlink: zone id is out of range [ 451.106304][T18467] netlink: zone id is out of range [ 451.111775][T18155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.120447][T18155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.152363][T18155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.179480][T18155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.220976][T18155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.305493][T18155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.592704][T18155] hsr_slave_0: entered promiscuous mode [ 451.629345][T18155] hsr_slave_1: entered promiscuous mode [ 451.647985][T18155] debugfs: 'hsr0' already exists in 'hsr' [ 451.666983][T18155] Cannot create hsr debugfs directory [ 452.596491][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 452.657858][T18521] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 452.659202][T18524] Cannot find set identified by id 0 to match [ 452.716405][T18521] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 452.774308][T18521] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 453.118073][ T5658] Bluetooth: hci0: command 0x041b tx timeout [ 453.415905][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'. [ 453.564675][T18155] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.597145][T18155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 453.621030][T18155] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 453.677435][T18155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.709989][T18155] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 453.750151][T18155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.773486][T18155] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 453.809849][T18155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.937798][ T12] tipc: Subscription rejected, illegal request [ 454.124416][T18578] netlink: 'syz.4.3405': attribute type 1 has an invalid length. [ 454.168656][T18155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.186629][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3405'. [ 454.226951][T18155] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.277455][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.284766][ T3359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.338515][ T3359] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.345755][ T3359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.544812][T18597] netlink: 'syz.0.3409': attribute type 16 has an invalid length. [ 454.573655][T18597] netlink: 'syz.0.3409': attribute type 3 has an invalid length. [ 454.587277][T18603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3410'. [ 454.607616][T18597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3409'. [ 454.694117][T18608] netlink: 'syz.0.3409': attribute type 10 has an invalid length. [ 454.738058][T18608] veth1_macvtap: left promiscuous mode [ 454.797287][T18608] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 455.148088][T18584] »»»»»» speed is unknown, defaulting to 1000 [ 455.742260][T18644] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3415'. [ 455.873173][T18634] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 455.921306][T18634] bond3 (unregistering): Released all slaves [ 456.187082][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3416'. [ 456.340840][T18155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.530281][T18155] veth0_vlan: entered promiscuous mode [ 456.591234][T18155] veth1_vlan: entered promiscuous mode [ 457.019982][T18155] veth0_macvtap: entered promiscuous mode [ 457.046061][T18155] veth1_macvtap: entered promiscuous mode [ 457.098591][T18155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.130783][T18695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3424'. [ 457.149231][T18155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.239966][T18701] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 457.314310][ T3359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.327197][ T3359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.338714][ T3359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.368986][ T3359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.642038][T18722] netlink: 'syz.0.3431': attribute type 1 has an invalid length. [ 457.911219][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807e2c6800: rx timeout, send abort [ 457.959227][T18729] bond1: (slave geneve2): making interface the new active one [ 457.977449][T18729] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 458.002980][ T3359] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 458.028937][ T3359] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 458.048354][ T3359] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 458.061577][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.082072][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.113264][ T3359] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 458.230474][ T3359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.239952][ T3359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.327819][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3436'. [ 458.369513][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3436'. [ 458.411386][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807e2c7400: rx timeout, send abort [ 458.419888][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807e2c6800: abort rx timeout. Force session deactivation [ 458.492903][T18761] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.3437'. [ 458.540288][T18761] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 458.594814][T18761] 0ªX¹¦Dö»: entered allmulticast mode [ 458.649934][T18764] Cannot find set identified by id 0 to match [ 458.704390][T18761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3437'. [ 458.881000][T18782] lo: entered allmulticast mode [ 458.897728][T18782] lo: left allmulticast mode [ 458.919794][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807e2c7400: abort rx timeout. Force session deactivation [ 459.431427][T18803] __nla_validate_parse: 1 callbacks suppressed [ 459.431448][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'. [ 459.697996][T18813] net_ratelimit: 51 callbacks suppressed [ 459.698014][T18813] openvswitch: netlink: Flow actions attr not present in new flow. [ 459.743270][T18817] openvswitch: netlink: Flow actions attr not present in new flow. [ 459.758888][T18754] »»»»»» speed is unknown, defaulting to 1000 [ 460.072830][T18832] netlink: 'syz.0.3456': attribute type 10 has an invalid length. [ 460.089196][T18832] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3456'. [ 460.129088][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3454'. [ 460.160610][T18837] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3454'. [ 460.246100][T18846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3457'. [ 460.589309][T18852] vlan2: entered allmulticast mode [ 460.614437][T18852] bond0: entered allmulticast mode [ 460.642990][T18852] bond_slave_0: entered allmulticast mode [ 460.674938][T18852] bond_slave_1: entered allmulticast mode [ 461.091753][T18878] openvswitch: netlink: Multiple metadata blocks provided [ 461.448350][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'. [ 461.653721][T18914] netlink: 'syz.0.3469': attribute type 1 has an invalid length. [ 461.724834][T18914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.044436][T18937] xt_ipcomp: unknown flags 1D [ 462.242602][T18949] syz_tun: entered allmulticast mode [ 462.250844][T18943] x_tables: duplicate underflow at hook 3 [ 462.339115][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805d994c00: rx timeout, send abort [ 462.342576][T18955] syz_tun: left allmulticast mode [ 462.678758][T18977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3483'. [ 462.838913][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805d997400: rx timeout, send abort [ 462.848349][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805d994c00: abort rx timeout. Force session deactivation [ 463.154229][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3489'. [ 463.190396][T19006] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3491'. [ 463.312956][T19009] tap0: tun_chr_ioctl cmd 2148553947 [ 463.318685][T19011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3493'. [ 463.347604][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805d997400: abort rx timeout. Force session deactivation [ 464.493527][T19077] Bluetooth: MGMT ver 1.23 [ 464.579793][T19089] __nla_validate_parse: 3 callbacks suppressed [ 464.579810][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3513'. [ 464.606874][T19088] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3514'. [ 464.652793][T19093] tipc: Enabling of bearer rejected, failed to enable media [ 464.759038][T19099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3515'. [ 465.061805][T19116] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3520'. [ 465.523626][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3528'. [ 465.668392][T19156] x_tables: duplicate underflow at hook 2 [ 465.808692][T19163] syzkaller0: entered promiscuous mode [ 465.828741][T19163] syzkaller0: entered allmulticast mode [ 466.286618][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3535'. [ 466.334580][T19166] netlink: 'syz.4.3532': attribute type 12 has an invalid length. [ 466.464842][T19189] Bluetooth: MGMT ver 1.23 [ 466.521869][T19186] netlink: 'syz.0.3535': attribute type 1 has an invalid length. [ 466.583557][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3537'. [ 466.871254][T19212] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 466.909226][ T5002] udevd[5002]: worker [5896] /devices/virtual/block/nbd0 timeout; kill it [ 466.932340][T19213] veth0: entered promiscuous mode [ 466.951940][ T5002] udevd[5002]: seq 15738 '/devices/virtual/block/nbd0' killed [ 467.039123][T19213] veth0: left promiscuous mode [ 467.241850][T19239] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3547'. [ 467.298827][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3546'. [ 467.332999][T19241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3548'. [ 467.421329][T19234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.514699][T19244] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 467.543805][T19244] bond1 (unregistering): Released all slaves [ 468.044468][T19279] erspan0: entered promiscuous mode [ 468.074284][T19279] vlan1: entered promiscuous mode [ 468.304698][T19293] netlink: 'syz.3.3561': attribute type 1 has an invalid length. [ 468.505761][T19293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.575320][T19304] vlan2: entered promiscuous mode [ 468.601258][T19304] bond1: entered promiscuous mode [ 468.624914][T19304] vlan2: entered allmulticast mode [ 468.645063][T19304] bond1: entered allmulticast mode [ 468.707906][T19309] sit1: entered promiscuous mode [ 468.719434][T19309] sit1: entered allmulticast mode [ 468.742169][T19292] syzkaller1: entered promiscuous mode [ 468.758006][T19292] syzkaller1: entered allmulticast mode [ 468.915889][T19326] netlink: 'syz.1.3569': attribute type 1 has an invalid length. [ 468.999797][T19326] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.110003][T19334] bond3: (slave gretap0): making interface the new active one [ 469.145888][T19341] netlink: 'syz.2.3571': attribute type 1 has an invalid length. [ 469.154811][T19334] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 469.187058][T19341] netlink: 'syz.2.3571': attribute type 2 has an invalid length. [ 469.581969][T19365] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 469.697598][T19365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.749858][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.784257][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.828466][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.877715][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.961958][T19383] syzkaller1: entered promiscuous mode [ 469.975949][T19383] syzkaller1: entered allmulticast mode [ 470.161199][ T1781] block nbd0: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 240 seconds [ 470.172141][ T1781] block nbd0: Possible stuck request ffff8880274401c0: control (read@1024,1024B). Runtime 240 seconds [ 470.183288][ T1781] block nbd0: Possible stuck request ffff888027440380: control (read@2048,1024B). Runtime 240 seconds [ 470.195178][ T1781] block nbd0: Possible stuck request ffff888027440540: control (read@3072,1024B). Runtime 240 seconds [ 470.482944][T19411] __nla_validate_parse: 9 callbacks suppressed [ 470.482965][T19411] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3588'. [ 470.515523][T19411] unsupported nla_type 7424 [ 470.606297][T19428] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 [ 470.744947][T19439] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3594'. [ 470.803893][T19439] netlink: Unknown conntrack attr (0) [ 470.937901][T19448] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3596'. [ 471.114038][T19454] netlink: 'syz.4.3599': attribute type 83 has an invalid length. [ 471.238487][T19452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3598'. [ 471.378900][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3603'. [ 471.629390][T19474] netlink: 'syz.1.3604': attribute type 6 has an invalid length. [ 471.641844][T19477] netlink: 'syz.2.3606': attribute type 1 has an invalid length. [ 471.802266][T19477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.861699][T19481] bond1: (slave veth3): Enslaving as an active interface with a down link [ 471.950889][T19483] bond1: (slave veth0_to_bond): making interface the new active one [ 471.984141][T19483] veth0_to_bond: entered promiscuous mode [ 472.007949][T19483] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 472.141624][T19498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.301497][T19510] xt_ecn: cannot match TCP bits for non-tcp packets [ 472.513633][T19517] bond0: entered promiscuous mode [ 472.532390][T19517] bond_slave_0: entered promiscuous mode [ 472.570548][T19517] bond_slave_1: entered promiscuous mode [ 472.605915][T19522] netlink: 81 bytes leftover after parsing attributes in process `syz.3.3616'. [ 472.630157][T19522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3616'. [ 472.902304][T19536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3619'. [ 472.932951][T19536] nbd: must specify a size in bytes for the device [ 472.983860][T19546] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3622'. [ 473.047546][T19546] lo: entered promiscuous mode [ 473.065517][T19546] netlink: 'syz.2.3622': attribute type 2 has an invalid length. [ 473.078946][T19546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.137001][T19553] vlan2: entered allmulticast mode [ 473.389716][T19568] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3628'. [ 473.532219][T19577] macvtap1: entered promiscuous mode [ 473.540883][T19577] macvtap1: entered allmulticast mode [ 473.554348][T19577] veth1_vlan: entered allmulticast mode [ 473.663746][T19581] macvtap2: entered promiscuous mode [ 473.670046][T19583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.725655][T19581] macvtap2: entered allmulticast mode [ 474.132795][T19583] tipc: Started in network mode [ 474.146682][T19583] tipc: Node identity ac14140f, cluster identity 4711 [ 474.163417][T19583] tipc: New replicast peer: 255.255.255.255 [ 474.171323][T19583] tipc: Enabled bearer , priority 10 [ 474.307280][T19605] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 474.353791][T19605] bond4 (unregistering): Released all slaves [ 474.672138][T19635] netlink: 'syz.2.3639': attribute type 12 has an invalid length. [ 475.030218][T19654] netlink: 'syz.0.3641': attribute type 1 has an invalid length. [ 475.224321][T19665] netlink: 'syz.3.3646': attribute type 5 has an invalid length. [ 475.320901][T19665] geneve2: entered promiscuous mode [ 475.335609][T19665] geneve2: entered allmulticast mode [ 475.371509][ T10] tipc: Node number set to 2886997007 [ 475.413209][ T57] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 475.457155][ T57] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 475.499696][T19674] bridge_slave_1: left allmulticast mode [ 475.519062][T19674] bridge_slave_1: left promiscuous mode [ 475.545593][T19674] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.571483][T19674] bridge_slave_0: left allmulticast mode [ 475.577521][T19674] bridge_slave_0: left promiscuous mode [ 475.583500][T19674] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.675914][ T57] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 475.688920][ T57] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 475.735968][T19693] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 475.783227][T19693] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 475.842553][T19699] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 475.863876][T19699] bond0: (slave lo): Error: Device can not be enslaved while up [ 475.874785][T19702] sctp: [Deprecated]: syz.3.3656 (pid 19702) Use of int in maxseg socket option. [ 475.874785][T19702] Use struct sctp_assoc_value instead [ 475.909358][T19705] netlink: 'syz.1.3657': attribute type 27 has an invalid length. [ 475.924838][T19708] sctp: [Deprecated]: syz.3.3656 (pid 19708) Use of int in maxseg socket option. [ 475.924838][T19708] Use struct sctp_assoc_value instead [ 475.958168][T19705] __nla_validate_parse: 12 callbacks suppressed [ 475.958201][T19705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 475.974301][T19704] netlink: 'syz.1.3657': attribute type 27 has an invalid length. [ 475.982595][T19704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3657'. [ 476.000567][T19706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3657'. [ 476.011943][T19706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3657'. [ 476.101588][T19716] netlink: 'syz.4.3659': attribute type 1 has an invalid length. [ 476.138883][T19716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.177945][T19716] ip_vti0: entered promiscuous mode [ 476.210583][T19723] xt_hashlimit: size too large, truncated to 1048576 [ 476.235576][T19724] netlink: 'syz.3.3662': attribute type 3 has an invalid length. [ 476.344214][T19724] vlan3: entered promiscuous mode [ 476.352780][T19724] dummy0: entered promiscuous mode [ 476.523545][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 476.532838][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 477.126085][T19764] xt_hashlimit: size too large, truncated to 1048576 [ 477.147674][T19764] netlink: 'syz.4.3671': attribute type 4 has an invalid length. [ 477.233997][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3672'. [ 477.271959][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3672'. [ 477.309464][T19766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3672'. [ 477.325997][T19766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3672'. [ 477.746214][T19796] macvlan4: entered promiscuous mode [ 477.759477][T19796] macvlan4: entered allmulticast mode [ 478.044515][T19817] netlink: 'syz.0.3687': attribute type 10 has an invalid length. [ 478.398165][T19842] netlink: 'syz.2.3695': attribute type 1 has an invalid length. [ 478.438963][T19842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.522869][T19847] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 478.702417][T19858] veth0: entered promiscuous mode [ 478.743334][T19858] openvswitch: netlink: IPv4 tun info is not correct [ 478.763972][T19858] xt_nfacct: accounting object `syz1' does not exist [ 479.087101][T19855] syzkaller1: entered promiscuous mode [ 479.109543][T19855] syzkaller1: entered allmulticast mode [ 479.341067][T19888] netlink: 'syz.1.3711': attribute type 1 has an invalid length. [ 479.374705][T19892] IPVS: length: 8 != 1152 [ 479.411848][T19892] vlan4: entered allmulticast mode [ 479.428264][T19892] erspan0: entered allmulticast mode [ 479.608742][T19897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.672213][T19903] xt_hashlimit: size too large, truncated to 1048576 [ 480.879544][T19976] sctp: [Deprecated]: syz.4.3738 (pid 19976) Use of int in max_burst socket option deprecated. [ 480.879544][T19976] Use struct sctp_assoc_value instead [ 480.968642][T19976] __nla_validate_parse: 13 callbacks suppressed [ 480.968664][T19976] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3738'. [ 480.986461][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3738'. [ 482.532705][T19895] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.544079][T19959] netlink: 'syz.2.3732': attribute type 2 has an invalid length. [ 482.557067][T19959] netlink: 'syz.2.3732': attribute type 2 has an invalid length. [ 483.128536][T20005] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3746'. [ 483.241705][ T1108] veth0_to_bond: left promiscuous mode [ 483.769951][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3755'. [ 484.061266][T20050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3759'. [ 484.299326][T20065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 484.309358][T20065] netlink: 'syz.2.3764': attribute type 1 has an invalid length. [ 484.488685][T20081] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3767'. [ 484.511418][T20076] netlink: 'syz.2.3766': attribute type 1 has an invalid length. [ 484.538893][T20081] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3767'. [ 484.620959][T20076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.637726][T20081] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3767'. [ 484.648636][T20083] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 484.693563][T20081] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3767'. [ 484.745604][T20095] Cannot find add_set index 65532 as target [ 484.763783][T20076] bond4: (slave ip6gretap1): making interface the new active one [ 484.792805][T20076] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 485.141557][T20106] ip6gre1: entered allmulticast mode [ 485.580901][T20125] netlink: 'syz.1.3780': attribute type 16 has an invalid length. [ 485.615165][T20125] netlink: 'syz.1.3780': attribute type 3 has an invalid length. [ 485.912783][T20130] syzkaller0: entered promiscuous mode [ 485.925337][T20130] syzkaller0: entered allmulticast mode [ 485.943635][T20139] netlink: 'syz.4.3784': attribute type 21 has an invalid length. [ 485.960140][T20139] IPv6: NLM_F_CREATE should be specified when creating new route [ 485.973942][T20142] netlink: 'syz.4.3784': attribute type 21 has an invalid length. [ 486.350165][T20149] netlink: 'syz.0.3787': attribute type 1 has an invalid length. [ 486.359727][T20149] __nla_validate_parse: 66 callbacks suppressed [ 486.359746][T20149] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3787'. [ 486.376698][T20149] NCSI netlink: No device for ifindex 0 [ 486.392440][T20149] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.468497][T20149] netlink: 'syz.0.3787': attribute type 1 has an invalid length. [ 486.477514][T20149] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3787'. [ 486.799490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.407112][T20155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3789'. [ 488.428542][T20155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.499662][T20162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3788'. [ 488.638250][T20152] netlink: 'syz.0.3787': attribute type 1 has an invalid length. [ 488.649982][T20162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3788'. [ 488.666842][T20152] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3787'. [ 488.752416][T20172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3792'. [ 488.778598][T20175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3792'. [ 489.159979][T20208] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3801'. [ 489.228717][T20212] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3802'. [ 489.718047][T20245] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 490.007874][ T30] audit: type=1804 audit(1779943175.905:7): pid=20265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3819" name="/newroot/130/cgroup.controllers" dev="tmpfs" ino=681 res=1 errno=0 [ 490.050838][ T30] audit: type=1800 audit(1779943175.905:8): pid=20265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3819" name="cgroup.controllers" dev="tmpfs" ino=681 res=0 errno=0 [ 490.128957][T20269] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 490.159205][T20269] bond3 (unregistering): Released all slaves [ 490.348561][T20282] netlink: 'syz.4.3825': attribute type 1 has an invalid length. [ 490.424357][T20288] netlink: 'syz.3.3827': attribute type 4 has an invalid length. [ 490.461754][T20282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 490.513965][T20291] bond4: (slave erspan0): Device is not bonding slave [ 490.524788][T20291] bond4: option active_slave: invalid value (erspan0) [ 490.535234][T20291] bond4 (unregistering): Released all slaves [ 490.614386][T20289] macvlan3: entered promiscuous mode [ 490.640643][T20289] macvlan3: entered allmulticast mode [ 490.657261][T20297] netlink: 'syz.0.3828': attribute type 8 has an invalid length. [ 490.672703][T20289] bond2: entered promiscuous mode [ 490.691174][T20289] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 490.740669][T20289] bond2: left promiscuous mode [ 490.829692][T20301] xt_hashlimit: size too large, truncated to 1048576 [ 491.431722][T20283] »»»»»» speed is unknown, defaulting to 1000 [ 491.568489][T20332] __nla_validate_parse: 16 callbacks suppressed [ 491.568509][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3838'. [ 491.585548][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3838'. [ 492.148276][T20350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3844'. [ 492.672017][T20381] tipc: Enabled bearer , priority 0 [ 492.771698][T20381] syzkaller0: entered promiscuous mode [ 492.778956][T20381] syzkaller0: entered allmulticast mode [ 492.786316][T20381] tipc: Resetting bearer [ 492.820141][T20379] tipc: Resetting bearer [ 492.961488][T20403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.994066][T20406] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3856'. [ 493.061653][T20408] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3856'. [ 493.266991][T20413] netlink: 'syz.1.3859': attribute type 2 has an invalid length. [ 493.560706][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3860'. [ 495.450995][T20379] tipc: Disabling bearer [ 495.462976][T20407] tipc: Enabled bearer , priority 14 [ 495.501539][T20420] macsec1: entered promiscuous mode [ 495.519414][T20420] bridge0: entered promiscuous mode [ 495.541507][T20420] macsec1: entered allmulticast mode [ 495.557023][T20420] bridge0: entered allmulticast mode [ 495.578220][T20420] bridge0: port 3(macsec1) entered blocking state [ 495.584986][T20420] bridge0: port 3(macsec1) entered disabled state [ 495.615987][T20420] bridge0: left allmulticast mode [ 495.660560][ T10] bridge0: left promiscuous mode [ 495.691728][T20424] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3861'. [ 495.835897][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 495.972495][T20443] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3866'. [ 496.030993][T20438] netlink: 'syz.4.3866': attribute type 5 has an invalid length. [ 496.051587][T20437] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3867'. [ 496.069170][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3870'. [ 496.258614][T20459] netlink: 'syz.1.3872': attribute type 3 has an invalid length. [ 496.661875][T20493] __nla_validate_parse: 1 callbacks suppressed [ 496.661898][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3877'. [ 496.808854][T20501] dvmrp0: entered allmulticast mode [ 496.835327][T20503] netlink: 412 bytes leftover after parsing attributes in process `syz.0.3882'. [ 496.844615][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'. [ 496.879402][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 496.889511][T20500] 8021q: VLANs not supported on wg0 [ 496.927431][T20508] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3887'. [ 497.179164][T20523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3892'. [ 497.188887][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3889'. [ 497.212405][T20520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3889'. [ 497.443082][T20538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.477949][T20538] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.485785][T20538] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.743901][T20557] Cannot find add_set index 0 as target [ 497.808131][T20560] tunl0: entered promiscuous mode [ 497.827889][T20560] netlink: 'syz.3.3902': attribute type 3 has an invalid length. [ 497.838289][T20560] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3902'. [ 497.916351][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 497.962938][T20573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3906'. [ 498.040867][T20574] syzkaller0: entered promiscuous mode [ 498.047327][T20574] syzkaller0: entered allmulticast mode [ 498.104204][T20573] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3906'. [ 498.959801][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 499.156449][T20636] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 499.198963][T20638] netlink: 'syz.0.3923': attribute type 2 has an invalid length. [ 499.222897][T20638] netlink: 'syz.0.3923': attribute type 2 has an invalid length. [ 499.329519][T20640] : entered promiscuous mode [ 499.351904][T20640] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 499.996011][ C0] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 500.244204][ T1781] block nbd0: Possible stuck request ffff888027440000: control (read@0,1024B). Runtime 270 seconds [ 500.256052][ T1781] block nbd0: Possible stuck request ffff8880274401c0: control (read@1024,1024B). Runtime 270 seconds [ 500.267570][ T1781] block nbd0: Possible stuck request ffff888027440380: control (read@2048,1024B). Runtime 270 seconds [ 500.278579][ T1781] block nbd0: Possible stuck request ffff888027440540: control (read@3072,1024B). Runtime 270 seconds [ 501.099118][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 501.368956][T20689] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 501.926426][ T57] ------------[ cut here ]------------ [ 501.932414][ T57] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 501.938909][T20703] vcan0: entered allmulticast mode [ 501.946297][ T57] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xd82/0x1760, CPU#0: kworker/u8:4/57 [ 501.946399][ T57] Modules linked in: [ 501.966622][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 501.975989][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.986128][ T57] Workqueue: events_unbound cfg80211_wiphy_work [ 501.992459][ T57] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 501.998956][ T57] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 a1 69 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 3e 65 a3 f6 e9 [ 502.274495][ T57] RSP: 0018:ffffc900015e7420 EFLAGS: 00010293 [ 502.275668][ C1] tipc: Duplicate 98aaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 502.280615][ T57] RAX: ffffffff8b22613f RBX: ffffffff9041a9f0 RCX: 0000000000000005 [ 502.280636][ T57] RDX: ffff8880a5911d84 RSI: ffff888096c75888 RDI: ffffffff9041a9f0 [ 502.305389][ T57] RBP: ffffc900015e7588 R08: ffff888072ad2a8f R09: 1ffff1100e55a551 [ 502.313491][ T57] R10: dffffc0000000000 R11: ffffed100e55a552 R12: dffffc0000000000 [ 502.321502][ T57] R13: 0000000000000001 R14: ffff888096c75888 R15: ffff8880a5911d84 [ 502.329601][ T57] FS: 0000000000000000(0000) GS:ffff8881252a1000(0000) knlGS:0000000000000000 [ 502.338582][ T57] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.345211][ T57] CR2: 00002000006dd030 CR3: 000000007b6b2000 CR4: 00000000003526f0 [ 502.353234][ T57] Call Trace: [ 502.356555][ T57] [ 502.359553][ T57] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 502.365678][ T57] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 502.371897][ T57] invoke_tx_handlers_late+0xba/0x18a0 [ 502.590166][ T57] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 502.596080][ T57] ieee80211_tx+0x2d7/0x4b0 [ 502.600646][ T57] ? __pfx_ieee80211_tx+0x10/0x10 [ 502.605749][ T57] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 502.611794][ T57] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 502.617686][ T57] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 502.624069][ T57] ieee80211_scan_state_send_probe+0x594/0xa00 [ 502.630290][ T57] ieee80211_scan_work+0x64d/0x1c60 [ 502.635576][ T57] cfg80211_wiphy_work+0x2cf/0x460 [ 502.640771][ T57] ? process_scheduled_works+0xa70/0x1860 [ 502.646551][ T57] process_scheduled_works+0xb5d/0x1860 [ 502.652183][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 502.658233][ T57] ? assign_work+0x3d5/0x5e0 [ 502.662880][ T57] worker_thread+0xa53/0xfc0 [ 502.667559][ T57] kthread+0x389/0x470 [ 502.671686][ T57] ? __pfx_worker_thread+0x10/0x10 [ 502.676837][ T57] ? __pfx_kthread+0x10/0x10 [ 502.681484][ T57] ret_from_fork+0x514/0xb70 [ 502.686149][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 502.912874][ T57] ? __switch_to+0xc79/0x1410 [ 502.917655][ T57] ? __pfx_kthread+0x10/0x10 [ 502.922304][ T57] ret_from_fork_asm+0x1a/0x30 [ 502.927212][ T57] [ 502.930288][ T57] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 502.937607][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 502.946936][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.957043][ T57] Workqueue: events_unbound cfg80211_wiphy_work [ 502.963358][ T57] Call Trace: [ 502.966675][ T57] [ 502.969631][ T57] vpanic+0x56c/0xa60 [ 502.973641][ T57] ? __pfx__printk+0x10/0x10 [ 502.978259][ T57] ? __pfx_vpanic+0x10/0x10 [ 502.982779][ T57] ? is_bpf_text_address+0x292/0x2b0 [ 502.988081][ T57] ? is_bpf_text_address+0x26/0x2b0 [ 502.993315][ T57] panic+0xc5/0xd0 [ 502.997064][ T57] ? __pfx_panic+0x10/0x10 [ 503.001512][ T57] ? ret_from_fork_asm+0x1a/0x30 [ 503.006480][ T57] __warn+0x315/0x4c0 [ 503.010498][ T57] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 503.016343][ T57] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 503.022189][ T57] __report_bug+0x29a/0x540 [ 503.026724][ T57] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 503.032573][ T57] ? __pfx___report_bug+0x10/0x10 [ 503.037637][ T57] ? stack_trace_save+0xa9/0x100 [ 503.042630][ T57] ? kasan_save_track+0x4f/0x80 [ 503.047523][ T57] ? kasan_save_track+0x3e/0x80 [ 503.052406][ T57] ? __kasan_slab_alloc+0x6c/0x80 [ 503.057459][ T57] report_bug_entry+0x19a/0x290 [ 503.062345][ T57] ? ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 503.068185][ T57] ? ieee80211_tx_h_rate_ctrl+0xdf2/0x1760 [ 503.074022][ T57] handle_bug+0xce/0x200 [ 503.078287][ T57] exc_invalid_op+0x1a/0x50 [ 503.082812][ T57] asm_exc_invalid_op+0x1a/0x20 [ 503.087681][ T57] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 503.094229][ T57] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 a1 69 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 3e 65 a3 f6 e9 [ 503.113858][ T57] RSP: 0018:ffffc900015e7420 EFLAGS: 00010293 [ 503.119998][ T57] RAX: ffffffff8b22613f RBX: ffffffff9041a9f0 RCX: 0000000000000005 [ 503.127992][ T57] RDX: ffff8880a5911d84 RSI: ffff888096c75888 RDI: ffffffff9041a9f0 [ 503.135988][ T57] RBP: ffffc900015e7588 R08: ffff888072ad2a8f R09: 1ffff1100e55a551 [ 503.143989][ T57] R10: dffffc0000000000 R11: ffffed100e55a552 R12: dffffc0000000000 [ 503.151984][ T57] R13: 0000000000000001 R14: ffff888096c75888 R15: ffff8880a5911d84 [ 503.159984][ T57] ? ieee80211_tx_h_rate_ctrl+0xddf/0x1760 [ 503.165864][ T57] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 503.171986][ T57] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 503.178173][ T57] invoke_tx_handlers_late+0xba/0x18a0 [ 503.183668][ T57] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 503.189506][ T57] ieee80211_tx+0x2d7/0x4b0 [ 503.194043][ T57] ? __pfx_ieee80211_tx+0x10/0x10 [ 503.199133][ T57] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 503.205139][ T57] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 503.210985][ T57] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 503.217340][ T57] ieee80211_scan_state_send_probe+0x594/0xa00 [ 503.223576][ T57] ieee80211_scan_work+0x64d/0x1c60 [ 503.228847][ T57] cfg80211_wiphy_work+0x2cf/0x460 [ 503.234002][ T57] ? process_scheduled_works+0xa70/0x1860 [ 503.239753][ T57] process_scheduled_works+0xb5d/0x1860 [ 503.245374][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 503.251400][ T57] ? assign_work+0x3d5/0x5e0 [ 503.256020][ T57] worker_thread+0xa53/0xfc0 [ 503.260664][ T57] kthread+0x389/0x470 [ 503.264761][ T57] ? __pfx_worker_thread+0x10/0x10 [ 503.269904][ T57] ? __pfx_kthread+0x10/0x10 [ 503.274523][ T57] ret_from_fork+0x514/0xb70 [ 503.279139][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 503.284354][ T57] ? __switch_to+0xc79/0x1410 [ 503.289081][ T57] ? __pfx_kthread+0x10/0x10 [ 503.293700][ T57] ret_from_fork_asm+0x1a/0x30 [ 503.298500][ T57] [ 503.302011][ T57] Kernel Offset: disabled [ 503.306371][ T57] Rebooting in 86400 seconds..