last executing test programs: 19.608041122s ago: executing program 1 (id=3041): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x8, 0x10, 0x2, 0x9, {{0x1f, 0x4, 0x2, 0x7, 0x7c, 0x66, 0x0, 0xff, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0x19, [@multicast1, @local, @local]}, @generic={0x83, 0xa, "d3af8307c7ab8e7f"}, @cipso={0x86, 0x24, 0x2, [{0x5, 0x5, "f40399"}, {0x0, 0x9, "41c22b383cf5e6"}, {0x2, 0x7, "396eaa94d6"}, {0x2, 0x5, "c3acf4"}, {0x0, 0x4, "8a94"}]}, @noop, @lsrr={0x83, 0x23, 0x13, [@local, @empty, @loopback, @broadcast, @private=0xa010101, @empty, @rand_addr=0x64010100, @empty]}, @noop, @end]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', r4, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x1, 0x8, 0x8}, 0x10, r6, 0x0, 0x7, 0x0, &(0x7f0000000600)=[{0x4, 0x4, 0xc, 0x7}, {0x0, 0x4, 0x8, 0xa}, {0x5, 0x4, 0xe, 0x2}, {0x0, 0x5, 0xd, 0x2}, {0x1, 0x4, 0xd, 0x9}, {0x2, 0x0, 0x0, 0xc}, {0x1, 0x3, 0xd, 0xc}], 0x10, 0x4}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = accept4(r8, &(0x7f0000000780)=@x25={0x9, @remote}, &(0x7f0000000800)=0x80, 0x80000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x40) ioctl$BTRFS_IOC_QUOTA_CTL(r9, 0xc0109428, &(0x7f0000000940)={0x1}) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000980)) mkdirat$cgroup(r8, &(0x7f00000009c0)='syz1\x00', 0x1ff) writev(0xffffffffffffffff, &(0x7f0000000a00), 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x10}, 0x18) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xa0, r11, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000cc0)={r8}) close(r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x9c0) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000e00)=0x10100, 0x4) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000e40), &(0x7f0000000e80)=0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r13, 0x8982, &(0x7f0000000ec0)={0x0, 'dvmrp0\x00', {0x4}, 0xe}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000f00)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x3, 0x81}, &(0x7f0000000fc0)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000001000)={r14, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x8, 0x4, 0x7f, 0x1, 0x54, 0x4}, 0x9c) 19.382792517s ago: executing program 1 (id=3043): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) (async) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) unshare(0x400) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="000000008be31d078ad10112e06d5e78647622000000000000000000dbcdf10a954ca3eca1152f9891a1a64cf310e6fc127a4d81c1a65a3ffe2951f10a7cc4ec6327ea230a10dab1983aefd23baafd609fe9c19b880af9850e0c3f4eba992d29120f88fb1cb7c4d48441de555b132e725047f98e7c855871e79a56bbfd6847132d321391"], 0x34}}, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000000), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, 0x0, 0x0) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) sendto$inet6(r8, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) (async) sendmmsg$inet6(r8, 0x0, 0x0, 0x400c404) sendmmsg$inet6(r8, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) (async) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)}, 0x40040) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 9.995904187s ago: executing program 3 (id=3096): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="64691c9344084299262400ebff020001aeff034000ff330306001240000400ffffffffff79cb7212ba7e3b7c964b1c210e3072533f2c9ef2d63709b8720500000025090559373850965c5c0d78579de3"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4090) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x1b0, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xef1, 0x41}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="015d61fabbd340acedf1618b70421db3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fb6c8d7d2f5692bed174b0732a1e9b91bc3ced4739372ffa"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c16376bbadf9ef5e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a8b171822478f56cc8469d729772cd92"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="32e455143fa3e560d5da3519aed24dbc4796ae9546f3752a5daa0ffd5d82312e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fbc7e48927c5563114122a1cdc8ce66d252fecea871dc2dd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1c8de1a12eb3dd6a"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2bc1161cbc446b5d2bd2c67b14974e5e13b16aa8db150398"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dc8a01885e54f0a6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f9737c595d88a9280d324a8af1c4140cbb142a0717e9f187"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "636a6c5c62c5f4b3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="18d7e192b66f06df0e2e657b00e58e93"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7ba7643e640ba263"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="433c909ad834a127e55a7fb99d01b7f44908b56b394a6d06"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d02bf80523a3bdd6455a2717da4b10ac58e1edf07b01137b66e4449ecd5270c3"}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x48811}, 0x44004) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f00000003c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x9c, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "d84d1ce0a1956e72f2a8ea59bc15a79f6629889c1c9e797445951af9a910e978", "7b2b57f84cdc5231b2f7e7b201da4c4f7c7f6df569801d62e278e0bbc133150935f2510b90ec950f1863167f2772a901", "f25a9bc1f9ca9359fc7a0a43354b61422891f1ab82234e88636f094f", {"320c85a847830800b512a7edc500eb00", "a352e18d36bd51bce88ef76e7c905c6c"}}}}}}}}}, 0xfeac) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="64691c9344084299262400ebff020001aeff034000ff330306001240000400ffffffffff79cb7212ba7e3b7c964b1c210e3072533f2c9ef2d63709b8720500000025090559373850965c5c0d78579de3"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4090) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x1b0, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xef1, 0x41}}}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="015d61fabbd340acedf1618b70421db3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fb6c8d7d2f5692bed174b0732a1e9b91bc3ced4739372ffa"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c16376bbadf9ef5e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a8b171822478f56cc8469d729772cd92"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="32e455143fa3e560d5da3519aed24dbc4796ae9546f3752a5daa0ffd5d82312e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fbc7e48927c5563114122a1cdc8ce66d252fecea871dc2dd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1c8de1a12eb3dd6a"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2bc1161cbc446b5d2bd2c67b14974e5e13b16aa8db150398"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dc8a01885e54f0a6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f9737c595d88a9280d324a8af1c4140cbb142a0717e9f187"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "636a6c5c62c5f4b3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="18d7e192b66f06df0e2e657b00e58e93"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7ba7643e640ba263"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="433c909ad834a127e55a7fb99d01b7f44908b56b394a6d06"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d02bf80523a3bdd6455a2717da4b10ac58e1edf07b01137b66e4449ecd5270c3"}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x48811}, 0x44004) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async) write$tun(r1, &(0x7f00000003c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x9c, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "d84d1ce0a1956e72f2a8ea59bc15a79f6629889c1c9e797445951af9a910e978", "7b2b57f84cdc5231b2f7e7b201da4c4f7c7f6df569801d62e278e0bbc133150935f2510b90ec950f1863167f2772a901", "f25a9bc1f9ca9359fc7a0a43354b61422891f1ab82234e88636f094f", {"320c85a847830800b512a7edc500eb00", "a352e18d36bd51bce88ef76e7c905c6c"}}}}}}}}}, 0xfeac) (async) 8.82934422s ago: executing program 3 (id=3099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x1, @loopback, 0x68}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x1, @loopback, 0x68}], 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) 8.626527774s ago: executing program 3 (id=3100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0xffffffff, @mcast1, 0x8}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @empty}], 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}, 0x5}], 0x4000000000000bd, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x44}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x17, 0x1, "f000dbfa9e7f2487177e867e35ee502723073e"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x38, "ec2ab3294c462a2b6389fba6926f0291739803b12a576b8938437e6218edc00c23ee285cfd0d59413e88105c0d72a707232c20538eaf313d"}, &(0x7f0000000000)=0x40) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000024c0)=ANY=[@ANYRES32=r8], 0x9) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000180)={r8, 0x54e5, 0xd0e6}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}}, 0x20004000) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014e6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000680)=r11, 0x4) sendmsg$inet(r12, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x20000000) 7.610879221s ago: executing program 3 (id=3111): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/308], 0x17c}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) vmsplice(r2, &(0x7f0000000000), 0x3, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x812, r3, 0xffffd000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x7, 0x0, 0xa, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x130, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2801}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x20, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 7.150232132s ago: executing program 3 (id=3113): r0 = socket(0x6, 0x800, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="350a00000000000061198800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, 0x0, 0x25, 0x14, @void}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="2400000016009fb2344655066e4bfdff09000000040000000c000a"], 0x24}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x1, 0x10, 0xffffff80, 0x5, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0xce, 0x29, 0x0, @broadcast, @multicast2, {[@noop, @rr={0x7, 0x13, 0x15, [@multicast1, @private=0xa010101, @multicast1, @broadcast]}, @ssrr={0x89, 0x7, 0xbc, [@loopback]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r5, 0x25, 0xe, @void}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000014c0), 0xc) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000280)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000580)=[{&(0x7f00000002c0)="640cf30cc606100f23acc6e68ac015f5a6f7162608fc4b6750e3f1374afc3e78df8cd2aee066b28bfc2eb274a6cf182af9a1b21bdf0f5fc6168e6480c58ba77dfbcd4f71d1a7af1bb46c3a5fb7795683a46b7765ac25416267e1abdafa763e58b12539187ec09babdaef75274693652743920611bdf5d2d56a5b2780184db44473f513a3cee12974b6df159a974a049d2f1281fc3578", 0x96}, {&(0x7f0000000500)="413aea116f622435838cd3fa4211dfeb7a53767fa2143ef597a725c11462aceed6cfefd027f5ea0ce9992dff0f88291e6e0d945da5662bec832ec67b3fdca6fcdd39a431c75e017f5a351b5171bbc77d333e067db8053fa11d1763bccb3bbed78926bc", 0x63}, {&(0x7f0000000640)="47850ddab765dd905ac0ac48beb0c86814f6c823ada98f52d6bb2b64667b5b564c9509fd2233d4454ecf98d9d6b1fc74d2a8b0f9176f31e7f073e924bc5e8979d79e238797736ca5b66612c723d529525402faf8f40f7ac81bae140aaad9cbef6aab59835928094edf957c11e8cca74bc27315e95a5afdb1bac68eaf5c057ff4ea8b2488310fc03ab0657edffda28e51e94eee2167d2c0450179ad8a", 0x9c}, {&(0x7f0000000700)="6082461d7aacf76435db625d774ded0083d6228547832ab40abbd69b8755346837cfb3e61f006ee279e1831b870b0dcb23b2c57691c3320b5ee9843aacccf1115a60588b7a0c195df1ca04a8b991c33cadf49d173adef625e4ddaafd2dd39eb827cfe2452453522157d4e4a240cd323dca6b61e418ec7c1e5b168dd5a34c7adcca7045d0a3bc45fcd537c4b4e4ae13d5783979d36c645c05946cd95aff95ac8767b35026ec8cb911f5a48e7dca9c902bf9cf6cb007400889429f3253447fbb0cc0b661f507befb2089ebc775fb956befc09562c27f8c5674719ec286b45ce40b202a4f45c4c9c00d88ad", 0xea}, {&(0x7f0000000380)='U+', 0x2}], 0x5}, 0x20008815) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$packet_int(r3, 0x107, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001500)={0x2b, 0x217, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x5}, @generic={0x2, 0x1000, "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"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0xce8}, @ra={0x5, 0x2, 0x8}, @generic={0x8b, 0x93, "7a3599d29962d847be4c57d7d99fa1b4b4917361a1c3db4f15f0e8a2610db82acf572d40adb7caa7093d9080b2c515252043cb4815ac3d9fd5785bc5d60bc79f45bc3f6f7a9c6449c338b40c90c7500d35e11f1f5c19fa8388e7c149e3dcf70624304cf9f2b849131e1ba860908d2f9a5f83b459e8d3361367f9854597c7e6f8d2bb373d937f1dad628a02ee0f30a74c5a3cb5"}]}, 0x10c8) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x40) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xc8, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xc13}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008840}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="be5564c7ad85fe2aa59da8206b925f9d70791475"], 0x38}, 0x1, 0x0, 0x0, 0x1810}, 0x0) 6.611266788s ago: executing program 3 (id=3118): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x10) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000000)="2a2779d052d026bd7867b300a05440750e0bb5914d78cd1fab43a7caf11165418d34a7f3e7450917dc2956c1a2cb1367fc4ddccd8ce31b9b450a33bb1e73a4b68a4bde5c338761f550457dc0fe691912d8d7527abefad8d1901a0b8ec763db74b2bbcbd5cfd2aad9dd0889901a2b302b64f802a1a8ef0878f41610cd") close(r0) 5.854610837s ago: executing program 2 (id=3121): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000000240035b900000008000000000700000006000400", @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}}, 0x0, 0x0, 0x3, 0x0, "0c9e089c1b4a04000bde79f0613be7fa187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd30798c4fa3838bb399ad5bd2ff21907c7988d1300000000000000000000000400"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02200000040000000800e12ae58100000100004080000000646d91fb27346ee7b6e6f0ed96ab6bfc0600fcef1418be2a2281c62f8fb3c27f5780f07995b67f0c29cb0c97adf9f590143727561d8754374b43b5ec6e344194affad0dfc00241905a5e3b7dc41c31460efddb4dd1789c5e377f0e0713ed0a5e2861d2afbd7f833ab5448138d7ebc1665ee4ca3a3d575d8bb34f06d45ea06f88013156ef6742d38c422bde0cbb1ba1a48267a865ca891661c3be7eda2b8fa98ae48dc4e3b3939d982690f9dc5d8610e446fcda6bcb543384c8930e7b6cf0ab", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f00000009c0)=@ethtool_eeprom={0xc, 0x0, 0x90, 0xc4, "0b60f97cf05f98b2df309fcb0d5eba8ce08c695777bb683b0ce35102d817ced49738b226cea1e8ba476e8e0f5052e1b538c097f179c6721170157c9bb5af85e8fb459a1f0ef38f497e3b37afcfa4d48f205f6efaa621f74a0ca09c949c0c1ffe736ed70f7d62b8c2a61e676b6ce990193bc7944a20ada39936535a56419720f194f97f50a8a49d0f05777974e295878367a8f5d1b8ac0c56c5de8a99e135fbe5b5eac2f83f4c09256e35801249e4d32e5025209e592ac777fcb6fb2129d21d82d27daa09"}}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r3], 0x48) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000072e8d586", @ANYRES16=r14, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendto(r12, &(0x7f0000000480)="131281d26a2676ffa06bc3c6afef667fadaa751c00f842562e6e741df778bf544a3e786aff4c9a6760ea59724c44bd3474f3a7557125f4765911bd8a004b6d9e4d18a09906f79c68ec008bcf80c149e3", 0x50, 0x40010, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @multicast1}, 0x4, 0x0, 0x0, 0x4}}, 0x80) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000427bd7000090000005400000008000300", @ANYRES32=r11, @ANYBLOB="0a00060008021100000000000a00060008021100000100000a000600080211000001000030989e4d267dcab9d5dc2df015cf9fe8ac53e82ba93cf48ac1b565b24d952ebd582f35c0c029ad6284e2e174b9a9e5088ac845b903fb946004fb81d2266f8d556d1554239108c04c68b132f347acb0105fcd4fee15ea31161c0a2e74a8027739e731227b74750653a53fc513d900111b191d4c8fd48c97f9b9f86fdc3a2cd1f53b4fb9f2133a39380219f8bf7e7c907ad4"], 0x40}, 0x1, 0x0, 0x0, 0x20000812}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000d0000000000000000100010018110000", @ANYRES32=r9, @ANYRES64=r5, @ANYRESDEC, @ANYBLOB="000000001e7a44f255049c2a09f9b546953200000000b7050000080000004608f0ff76000000bf980000003600003608fffff3ffffff8500000007000000b700"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xda) 5.104418421s ago: executing program 2 (id=3126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000009481ea50080000000000"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x2a, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000100)="0232e6003953b008fefa8ce2d4c1c866321c084bb58c3dd1666a19af3c73704fb3e6436512727a375df73783de35a42869d1e92883480dcb474e02000000", 0x3e}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d6714164", 0x22}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800003000220000181900"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000185500000d0000000000000000000000186b000003000000000000000400000005471800000000001868000010000000000000000001000018190000", @ANYRES32=r0, @ANYBLOB="000000000000000018360000050000000000000000000000851000000100000085200000050000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x4a, &(0x7f0000000200)=""/74, 0x41100, 0x8, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000740)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000780)=[{0x5, 0x2, 0x9, 0x1}, {0x2, 0x3, 0x2, 0x5}, {0x5, 0x3, 0xb, 0xd}, {0x0, 0x5, 0xd, 0x8}, {0x4, 0x2, 0x2, 0x8}, {0x2, 0x3, 0x8, 0x8}, {0x1, 0x5, 0x10, 0x8}], 0x10, 0x23}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="13000000e9000000080000000200000000400000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r6, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f4bdf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bind$inet6(r2, &(0x7f0000000a80)={0xa, 0x4e22, 0x7, @local, 0x3}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000102}, 0xc, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="340042570b60b7933f070000009e", @ANYRES16=r8, @ANYBLOB="010026bd7000fddbdf250b00000008000300", @ANYRES32=r9, @ANYBLOB="0400280005000800020000000900070087a1b5a001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fcdbdf256400000008000308", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x24000000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000009c0)={&(0x7f0000000900), 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@getchain={0x2c, 0x66, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0x19}, {0x9, 0x7}, {0x4, 0x2}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008}, 0x40000) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r12, 0x5c2a7000) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r13, 0xac9d4000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 3.401810161s ago: executing program 2 (id=3130): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x3ffdcf, 0x900}, 0x48) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x143, &(0x7f00000006c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @dccp={{0x41, 0x4, 0x2, 0x1, 0x135, 0x65, 0x0, 0x2, 0x21, 0x0, @multicast1, @private=0xa010100, {[@lsrr={0x83, 0x3, 0x16}, @end, @ssrr={0x89, 0x13, 0xfa, [@rand_addr=0x64010100, @local, @private=0xa010102, @broadcast]}, @ssrr={0x89, 0x17, 0xa9, [@private=0xa010102, @empty, @local, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2]}, @timestamp_addr={0x44, 0x54, 0xdb, 0x1, 0x5, [{@broadcast, 0x401}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x6}, {@local, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x4d}, {@empty, 0x4}, {@remote, 0x80}, {@broadcast, 0x2}, {@multicast1, 0xff}, {@multicast2, 0x8}]}, @generic={0x89, 0x3, 'F'}, @generic={0x94, 0x9, "49a7bc19cbcddd"}, @noop, @timestamp_addr={0x44, 0x1c, 0x98, 0x1, 0xd, [{@broadcast, 0xfffffc01}, {@multicast1, 0x2}, {@local, 0x94000000}]}, @timestamp_addr={0x44, 0x44, 0xa2, 0x1, 0xe, [{@loopback, 0x2}, {@remote, 0x2}, {@local, 0x5}, {@multicast1, 0x2}, {@multicast2, 0xff0}, {@rand_addr=0x64010100, 0x3}, {@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff}]}]}}, {{0x4e23, 0x4e21, 0x4, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, "175330", 0x2, "34bda9"}, "5964ebbc1861986d4bb05441205f26e5b5227fa34a97e4507ea12b686ca4b72c83"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$802154_dgram(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x40810, 0x813}, [@IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_CARRIER={0x5, 0x21, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000002) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r4}, 0x18) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x20) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff28bd7000fbdbdf2500000000", @ANYBLOB="c61a0200231a0500140012840b00010062726964676500000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000012"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10, 0x0}, 0xc084) 1.935667192s ago: executing program 2 (id=3138): connect$tipc(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[], 0x14}}, 0x40800) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x7fff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xffffffffffffff86, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000006, 0x4150, r4, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0xffffffffffffffdb, 0x9}) socket(0x40000000015, 0x5, 0x0) 1.606859427s ago: executing program 0 (id=3141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3e, 0x0, &(0x7f0000000000)) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x2e, @empty, 0x5}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 1.273342115s ago: executing program 0 (id=3144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.198823386s ago: executing program 4 (id=3145): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x98}, 0x1, 0x7}, 0x0) 1.13563772s ago: executing program 0 (id=3146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800000000000008002e00feffb0a0"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22433}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x110}}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) 1.036501387s ago: executing program 4 (id=3147): close(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883", 0x5f}, {&(0x7f0000001400)="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", 0xfbd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b6", 0x3}], 0x1}}], 0x3, 0x11) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}], 0x2c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r2, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000880)={'veth1_vlan\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000840)={'pim6reg1\x00', 0x100}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="54010000110001002ab57000ffdbdf2500000007000000000000ffff00000000000004d5020033000c0015"], 0x154}, 0x1, 0x0, 0x0, 0x400}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x8, 0x6, 0x20, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x80, 0xffffff7f, 0x9}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x8, [@func={0xb, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x5}, {0xc, 0x3}, {0xf, 0x4}, {0x2, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x5}}]}, {0x0, [0x2e, 0x2e, 0x0, 0x30, 0x2e, 0x61]}}, &(0x7f0000000b40)=""/88, 0x70, 0x58, 0x0, 0x4}, 0x28) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_tracing={0x1a, 0x2, &(0x7f00000008c0)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], &(0x7f0000000900)='GPL\x00', 0x3ff, 0x90, &(0x7f0000000940)=""/144, 0x40f00, 0x42, '\x00', r7, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x0, 0x8, 0x4, 0x7}, 0x10, 0x2c8d9, r9, 0x6, &(0x7f0000000d40)=[r10, 0xffffffffffffffff], &(0x7f0000000d80)=[{0x2, 0x4, 0x7, 0x7}, {0x0, 0x2, 0xf}, {0x3, 0x3, 0x1, 0x8}, {0x1, 0x4, 0xe}, {0x1, 0x2, 0xc, 0x4}, {0x4, 0x3, 0x9, 0x1}], 0x10, 0xfffffc63}, 0x94) 952.597374ms ago: executing program 2 (id=3148): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRESHEX=0x0, @ANYRES8=r0, @ANYBLOB="7d5a4815b692682a31d47e5a4c17cf6f9e49bb2e3f5be5b45a50fa0196a6b316059f12c1cc881c91b61154799dfe6467a30a723af90346e0c4df8790ae876b208025f25ccec2a23c64e208738242deebd9f3f6eab03c2e7d083fb5eb133dba569bdbe24ec8c06abed3aacb47bc963b4a2232b67c6b236b26f7a7bd4445649ced6ee30d485c0e96a457640f4681117e82f252d086f39bce9b813388c92d4f201a174ec8b1e20575505fd60d94e9f4cce59d5119e99b788875916c55e65c1624df9af1113131826e1c4ff72f", @ANYRESOCT=r0, @ANYRESHEX], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, 0x0, &(0x7f0000000100)=0x9) r8 = socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000050000000f0000000800000000200000", @ANYRES32=0x1, @ANYBLOB="8da900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000002000000030000000600"/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0x2b, 0x80, 0x66b, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x1, 0x6, 0x6}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9f000c00000003000000010000000000000200000000000000"], &(0x7f0000000540)=""/14, 0x27, 0xe, 0x1, 0x9}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB='\t\x00\x00@\x00'/20, @ANYRES32, @ANYRES32=r1, @ANYRES8=r4], 0x50) r9 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r11, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'erspan0\x00', r11, 0x40, 0x700, 0x9, 0x8, {{0x31, 0x4, 0x1, 0x2e, 0xc4, 0x65, 0x0, 0x2, 0xf5c85f6a7fcb1a84, 0x0, @local, @multicast2, {[@noop, @lsrr={0x83, 0x1b, 0xfd, [@rand_addr=0x64010100, @remote, @broadcast, @multicast1, @rand_addr=0x64010100, @broadcast]}, @timestamp={0x44, 0x18, 0xb5, 0x0, 0x1, [0x7ff, 0x4, 0x3, 0x8, 0x4]}, @timestamp={0x44, 0x24, 0x7a, 0x0, 0x5, [0x401, 0xd4d, 0x10001, 0xb0c0, 0x1000, 0x29a, 0x7, 0x6]}, @end, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x0, 0x8, "d2dfe48b9785"}]}, @timestamp={0x44, 0x2c, 0xf2, 0x0, 0x3, [0x9, 0x8, 0x7fff, 0x9, 0xc, 0x7, 0x4, 0xf0000000, 0xf, 0x401]}, @timestamp_prespec={0x44, 0x1c, 0xd4, 0x3, 0xb, [{@multicast1, 0x9}, {@empty, 0x5}, {@private=0xa010101, 0x2}]}]}}}}}) r12 = socket$unix(0x1, 0x2, 0x0) connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r12, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000480)=[{r8, 0xc210}, {r8, 0x4405}], 0x2, 0x0, 0x0, 0x0) close(0x3) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000008030000000000000000000200000906000240600000001c0004800800024000000007080005400000000108000640000000060c00048008000140fffffffa0900010073797a30000000000900010073797a3100000000050003003a4558222ab42044a44090f2000000"], 0x64}, 0x1, 0x0, 0x0, 0x4044090}, 0x24001041) 890.95609ms ago: executing program 0 (id=3149): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x50}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) 649.557607ms ago: executing program 0 (id=3150): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003740)={0x130, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@nested={0x100, 0x14c, 0x0, 0x1, [@nested={0xf9, 0x109, 0x0, 0x1, [@typed={0x8, 0x118, 0x0, 0x0, @str=',\x06\x00\x00'}, @generic="4cc6b0f07cd906882c654e44116687e89b2cb7cc6eb5391f388d8836bea2712f83994d8494b0dfd952975f4da8b9e3ea52cd72349ccb5319c1c9c1b98724e878a17b815e3a449366315a6888506ebabbfc1683ede91aa179844923e112c648a9d1d0229ecf0a8434fb23cd8d328a937e679ddab25f79a855a3b89c95638b5a17eeed259fb5628ed211c29747374a0229c0184f87ac8599926a83a6f66135c51759ffd8425a3fa33d0b9b6420187b37079e820cbeb93ca0c37c8f2abab9d6840c0456df49c8797ec57b5208e10d29999f3ee8657b872a48fa3e837580df7cfcee992f156aa049637e8b3ce80306"]}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x24004894) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="000000000000008100"/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="00000000feffff"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f0000000140)="f9ffffff", 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xc040ff0b, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x360, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x2, 0x1, 0x9, 'pptp\x00', 'syz1\x00', {0x3}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x45}, 0x0, 0x160, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x3b, 0x3, 0x4, 0x80, 0x1000, @mcast1, @local, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffff00, 0xffffff00], [0xff00007f, 0xff000000, 0xff000000], [0xff000000, 0xff, 0xffffff00], 0x924, 0x18}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 588.694214ms ago: executing program 4 (id=3151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x1, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_TUPLE={0x4}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1c}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 540.122255ms ago: executing program 1 (id=3044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000400000002000000000000003f4d7256d92e31103ec9e5c620d65417a2287e39d891f1585bb49abe29f8684f7d6d11830ebcd91eaa2538e8a88f53975f417dcb10f386fb3b932767da534affce816f", @ANYBLOB="a566418e0410484a21e1f80b17325b8158e4bdf1eb006b930589fbc83dbf7780611aba770469d9b027f73a61713bb0a35ec9821ff10f911442d6e98745073b2ecfd4e28d337ea1ac9052bf397b71031024a1251f252b4541c7e587fa2f55075e42b625620cca3b7f4557e084a07caa04e956da7770a71245322fccd08557db5f385a409efef983436b4e502b2e30af557e8aa9e531702fb668bea01b3e3a52138089143cd1f58962affa935d72819fd95c1638ed4a0bf41340d8a1bfdcd7759ce3fa460064841afd0fc84ed1c2", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 438.3524ms ago: executing program 4 (id=3152): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) (async) 436.848928ms ago: executing program 0 (id=3153): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00B\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000a500"/28], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r10}, 0xc) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}, 0x1, 0x0, 0x0, 0x400c880}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r10}, 0xc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0xc004}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf2508000100000000000500540041"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x40c0800) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 400.892986ms ago: executing program 1 (id=3154): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a000000820000", 0x7) unshare(0x26020480) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffdc7, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00', @ANYRES32=0x0, @ANYBLOB="a0000100000000002000128008000100677470001400028008000f00550000000800010029a3f5d677c9409d69685fbae7173b8e094126bf231722945a25db8a977311a7cc79297f57c86ef62489c3d4d1848dae5351bc129b74710333bc21e78314e7c2b0201108e0f8aa1e9f4181b409c9a9aef60da76fc9", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000000) (async) setsockopt$sock_int(r2, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x40) (async) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000a80), 0x0) sendto$inet6(r0, &(0x7f0000000180)="d4", 0x1, 0x48040, &(0x7f0000000200)={0xa, 0x4e23, 0x80000001, @loopback, 0x9}, 0x1c) 234.004763ms ago: executing program 4 (id=3155): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @multicast1, 0x11, 0x3, 'fo\x00', 0xd, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x6, @loopback, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0x81, 0x32}, {@rand_addr=0x64010101, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5d}}, 0x44) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x1, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 138.224598ms ago: executing program 1 (id=3156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9}, 0x38) socket$inet(0x2, 0x3, 0x8d) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) 50.919428ms ago: executing program 1 (id=3157): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002680)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x80000000, 0x426, 0xb, {0x8, 0x0, 0xff00, 0x3, 0x101, 0xa0}, {0x8, 0x1, 0x100, 0x3, 0xa}, 0x8, 0x2, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0xd, 0x5, 0x7, 0xd, 0xf, 0x8, 0xf, 0x8, 0x9, 0x10001, 0x5ff, 0x5, 0x3ffc000, 0x1, 0x80000000, 0x75, 0x7d, 0x5, 0xffff, 0x80000000, 0x3, 0x49, 0x5, 0x4, 0xffff, 0xfada, 0x70000000, 0x80000000, 0x8, 0x4, 0x9, 0x7, 0x2, 0x401, 0xe0, 0x1fd, 0x4, 0x7, 0x3b1, 0x5, 0x9, 0x7, 0x4, 0x4, 0x7, 0x1, 0xfffffffd, 0x101, 0xcc, 0x8, 0xb, 0x8000, 0x9, 0x0, 0x1, 0xfffffffe, 0x8, 0x1, 0x8d3, 0x1, 0x0, 0x3, 0x0, 0x1, 0x5, 0x0, 0x81, 0x5000, 0xffff, 0x3, 0x8, 0x4, 0x40, 0x1ff, 0xd8, 0xfffffffd, 0x6, 0x5, 0x3, 0xffff, 0x4, 0x1f073468, 0x1, 0x7fffffff, 0x8, 0x1000, 0x7, 0x1, 0x7fff, 0x1ff, 0x4, 0x4, 0x4, 0x80000001, 0x3, 0x200, 0xffff, 0x20000, 0x9, 0x9a5, 0x0, 0x9, 0x10000, 0x8001, 0x5, 0x5ea, 0x5, 0x1ff, 0x8e2, 0x101, 0x9, 0x9, 0x14000, 0xffffe6d2, 0x1, 0xe61, 0x11, 0xff, 0x3857, 0x3, 0x69a, 0x11, 0x8, 0x48000000, 0x7, 0x8, 0xfffffff8, 0x7, 0x400, 0x3, 0xc37, 0x2, 0x0, 0x1, 0xfffffff8, 0xb6, 0x9, 0xfffffffd, 0x6, 0x8, 0x6, 0x2, 0x1, 0x55d0, 0x4000004, 0x3, 0x2, 0x6, 0x401, 0xffff, 0x5, 0x4, 0x10, 0x4, 0x7, 0x1000, 0x7a, 0x4, 0xa0, 0x4, 0x10000000, 0x7, 0x0, 0x200, 0x8000, 0x8, 0x87fa, 0x0, 0x3, 0x9, 0x4, 0x4, 0x3, 0x4, 0xb4a, 0xffff17f2, 0x7, 0x71a, 0xfff, 0x4, 0xa, 0x0, 0x9, 0x8, 0x9, 0xf8bb, 0x55, 0x100, 0x9, 0x9, 0x9, 0x9, 0x5, 0x7ff, 0x775, 0x9, 0xff, 0xfffffffd, 0x6, 0x8, 0x0, 0x9, 0xc, 0x100, 0x2, 0x0, 0x5, 0x8, 0x4, 0x1, 0x8, 0x6, 0x7f, 0x3, 0x3, 0x1, 0x4000000, 0x2, 0x0, 0x6, 0x6, 0x1854, 0xaed, 0x5, 0x9, 0x0, 0x4, 0xff, 0x1, 0x4, 0x748, 0xd7a, 0x0, 0x9, 0x5, 0x7, 0xd, 0x6, 0xffff8500, 0x1000, 0x1, 0x101, 0x6, 0x5, 0x5, 0x5, 0x10001, 0x231, 0x3, 0x100004, 0x1ff, 0x194, 0x5, 0x5]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x45}]}}]}, 0x480}}, 0x20004804) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) unshare(0x2c060000) (async, rerun: 64) unshare(0x24020400) (async, rerun: 64) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (rerun: 64) 8.504391ms ago: executing program 4 (id=3158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0xa, 0x801, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3ff, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x10000080) 0s ago: executing program 2 (id=3159): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000001340)={0x454, 0x14, 0x1, 0x70bd2b, 0x25dfdbfe, {0x9, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "90630dfbd6582d13475408e48661f7593faf5d63d7eabb824637f21989e97823aed78af9cedc93411d112058eb243244624bd0462a3d704d2cd5ec7f69c756b6cf060c25c391ebc5179dd9194712cc19e6ad57236ecc08b4f799d22a297025dc6ddc3254ecc1a0e6e02e0a156ff73cd6b52383b4a329c269c203e0aaa3cd4fa356bb6b96ac6cd5e9b92cf8a38ede4acc1a23452b15324e013144025c161f"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "286a11f3dd417759b3ac35a9951c3424ce0d96e50a680d4725e3f964dcce5454626b576f148c3eee3426d155aa1d22cfd0c4226aff4cc1aa47f625cb925ead87188feb25554981bd6f28818260a1268a7c4607382a9a8781b14dc6ceed5d5c723b246810a405ef5513b3860f317f59b9de74f109df894991853105e124f90c3eb23ee218f9653eef81b96c1243b87faa40ace67dd253ba3a8b189a42f6a79dc5bb2b34b28c30d0271b1f649daef3ff90989692f5585e3b95bee12f0da6e24296b5384b091e7e096dee051b63d7b512"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "e650754d7fbebd04f51134aeb848"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "de211d8755938715c5bb662ba97f535ec0fcfc0a72b91a7102f377a02856180eb60c04e0aebdc72b58c85cac6ed02e877333c49ca0d97d94e43a185b40919eea6c4bbb838d28cb8942e1d222e6006fad249e97"}, @INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "dba9f5770f418db6f9ff0dc94d6b2b463f89c5bff6d1c8414c3a318e15df120be5c08ca1e3ce6b114de857e7eb35a3c5e59b1502222f76f3141912c91af015a0836db6945b575ba7ad08c05aebd2906d04d097a55ce303216aeb192bad94c18380f069bd782cae148d7f28ba1c313b27f46ce86cac541ef1bef500bbefd5e8c5aada4a6142c1f6b53b6fbc0445198070ba9240119892566728"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "72f895d92e3e3b9980c32009d43b3c711f0674fd1502dc31a995f023947b5718018bd30404c3c7662bdae3a9619528e77ab7eb1172537f8833937ae11302aa89cc3fa98bb6844026c34ae9e71f547ca7574efd1c3ceb346c3a0fa277ee24d4385f2c9aff1a898e4df7f0b8ba084724d1629b0dedf7d425613ffce43f829875d63d391ccb3c19aa7dfeeae25765b2e3eca8f0ef289a"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "b7ac3c4ea1fa34fa2754f057554748bf373598eab4380b82b9773fa24e807340676de103617c935a19"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "cb8c40b52adbc9bbaa8af13e297974e37add852d5856a3379872d8c1c008a501ef745a75cd4ad9ce896394f2c8f3fb976068c842f8576289b4f77f00194cc2796c82bb0cee8d7befcae89469ca5333c3b9c8a699f767a6d192a5ce3d1efc954643e4232413edabf7e4313f9981a9953881c6ecf74b603283d5691ae04185a4966a30f4cbe16101944e8fdb2bd2c0e4814edff8540335f07f777f8fa53e138d5897f70b75"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "7e6ee84f4af3fb2a7423b826c4da3b364410e2dc6e43dd92fd4ac4ce9e99e68b9c6ba11eb1c2868231e347c827c14c30b938d275fd21f9b7df77c59082cd57e027c39e"}]}, 0x454}, 0x1, 0x0, 0x0, 0x40004}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x3c, r2, 0x801, 0x70bc28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket(0x10, 0xa, 0x6f6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'}) getsockname$l2tp(r4, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='contention_end\x00', r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x1c, r9, 0x300, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}}, 0x4000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r12 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000080)}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r12, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711015000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) kernel console output (not intermixed with test programs): gretap3): Enslaving as an active interface with an up link [ 262.504985][T12241] wg1 speed is unknown, defaulting to 1000 [ 262.531911][T12237] veth3: entered promiscuous mode [ 262.542389][T12237] bond3: (slave veth3): Enslaving as an active interface with a down link [ 262.602287][T12250] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 262.629018][T12250] netlink: 'syz.0.1717': attribute type 4 has an invalid length. [ 262.637930][T12250] netlink: 15538 bytes leftover after parsing attributes in process `syz.0.1717'. [ 262.847858][T12259] batadv_slave_1: entered promiscuous mode [ 262.863057][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1719'. [ 262.978891][T12268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1722'. [ 262.999765][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'. [ 263.116936][T12258] batadv_slave_1: left promiscuous mode [ 263.636386][T12296] wg1 speed is unknown, defaulting to 1000 [ 263.646432][T12303] netlink: 'syz.1.1731': attribute type 2 has an invalid length. [ 263.665459][T12303] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1731'. [ 263.855710][T12308] openvswitch: netlink: Missing valid actions attribute. [ 263.904704][T12308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.080739][T12313] pimreg3: entered allmulticast mode [ 264.762369][ T9720] IPVS: starting estimator thread 0... [ 264.874301][T12328] IPVS: using max 24 ests per chain, 57600 per kthread [ 264.948858][T12337] netlink: 'syz.1.1743': attribute type 11 has an invalid length. [ 265.343973][ T7550] IPVS: stop unused estimator thread 0... [ 265.410788][T12368] vxcan1: entered allmulticast mode [ 266.205177][T12378] netlink: 'syz.1.1754': attribute type 9 has an invalid length. [ 266.262321][T12378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.493641][T12388] __nla_validate_parse: 5 callbacks suppressed [ 266.493663][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1756'. [ 266.667721][T12386] wg1 speed is unknown, defaulting to 1000 [ 267.208124][T12416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1763'. [ 267.399844][T12424] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 267.571192][T12428] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1764'. [ 268.205092][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 268.858470][T12459] dvmrp1: entered allmulticast mode [ 268.919151][T12468] wg1 speed is unknown, defaulting to 1000 [ 268.936897][T12459] wg1 speed is unknown, defaulting to 1000 [ 268.961037][T12465] wg1 speed is unknown, defaulting to 1000 [ 268.968070][T12468] wg1 speed is unknown, defaulting to 1000 [ 269.009471][T12458] wg1 speed is unknown, defaulting to 1000 [ 269.032265][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1774'. [ 269.072124][T12474] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 269.088385][T12468] wg1 speed is unknown, defaulting to 1000 [ 269.176222][T12468] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 269.772144][T12486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1781'. [ 269.785702][T12460] wg1 speed is unknown, defaulting to 1000 [ 269.792840][T12468] wg1 speed is unknown, defaulting to 1000 [ 269.840395][T12460] wg1 speed is unknown, defaulting to 1000 [ 269.850642][T12468] wg1 speed is unknown, defaulting to 1000 [ 269.868975][T12468] wg1 speed is unknown, defaulting to 1000 [ 269.918056][T12468] wg1 speed is unknown, defaulting to 1000 [ 269.987650][T12468] wg1 speed is unknown, defaulting to 1000 [ 270.043310][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'. [ 270.137412][T12468] wg1 speed is unknown, defaulting to 1000 [ 270.155919][T12468] wg1 speed is unknown, defaulting to 1000 [ 270.175083][T12468] wg1 speed is unknown, defaulting to 1000 [ 270.230578][T12499] openvswitch: netlink: Message has 148 unknown bytes. [ 270.253113][T12499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.761310][T12528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.021866][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 271.049905][T12542] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1793'. [ 271.065893][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 271.258488][T12548] geneve3: entered promiscuous mode [ 271.282221][ T7550] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.302198][ T7550] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.340588][ T7550] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.403257][ T7550] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.582042][T12556] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1797'. [ 272.568457][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 272.704619][T12577] wg1: entered promiscuous mode [ 272.709555][T12577] wg1: entered allmulticast mode [ 272.970841][T12593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1807'. [ 273.668888][T12612] wg1 speed is unknown, defaulting to 1000 [ 273.731821][T12612] wg1 speed is unknown, defaulting to 1000 [ 273.865878][T12620] wg1 speed is unknown, defaulting to 1000 [ 273.874517][T12620] wg1 speed is unknown, defaulting to 1000 [ 273.969385][T12627] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1814'. [ 274.045598][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1814'. [ 274.069751][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 274.089932][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 275.402344][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'. [ 275.411949][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 275.446506][T12661] team0 (unregistering): Port device bridge1 removed [ 275.456494][T12661] team0 (unregistering): Port device batadv1 removed [ 275.483709][T12695] openvswitch: netlink: Flow key attr not present in new flow. [ 275.674279][T12698] netlink: 'syz.4.1829': attribute type 49 has an invalid length. [ 275.698799][T12703] netlink: 'syz.4.1829': attribute type 49 has an invalid length. [ 275.711113][T12702] syzkaller1: entered promiscuous mode [ 275.716898][T12702] syzkaller1: entered allmulticast mode [ 276.104488][T12729] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1840'. [ 277.067527][T12775] nicvf0: entered promiscuous mode [ 277.083331][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 277.092245][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 277.123609][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 277.143276][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 277.177909][T12780] netlink: 'syz.2.1854': attribute type 3 has an invalid length. [ 277.178388][T12781] veth0_to_bridge: entered promiscuous mode [ 277.216564][T12780] __nla_validate_parse: 1 callbacks suppressed [ 277.216587][T12780] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1854'. [ 277.629559][T12799] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1859'. [ 277.659584][T12801] x_tables: duplicate underflow at hook 1 [ 278.235839][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 278.290130][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 278.300620][T12831] wg1 speed is unknown, defaulting to 1000 [ 278.400872][T12831] wg1 speed is unknown, defaulting to 1000 [ 278.415270][T12835] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 278.426899][T12836] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1868'. [ 278.998292][T12856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1873'. [ 279.120620][T12864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1875'. [ 279.131653][T12864] netlink: 'syz.1.1875': attribute type 1 has an invalid length. [ 279.286919][T12866] bond0: (slave ip6gretap4): Enslaving as an active interface with an up link [ 279.917597][T12905] netlink: 'syz.1.1888': attribute type 62 has an invalid length. [ 280.073406][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 280.190342][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 280.967528][T12963] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 281.059956][T12966] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1906'. [ 281.424736][T12966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.470397][T12966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.735570][ T7555] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.758472][ T7555] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.794114][ T7555] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.827693][ T7555] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.141581][T13019] x_tables: duplicate underflow at hook 1 [ 282.415958][T13032] wg1 speed is unknown, defaulting to 1000 [ 282.442069][T13032] wg1 speed is unknown, defaulting to 1000 [ 282.512354][T13035] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:52772 [ 282.914051][T13045] netlink: 'syz.3.1926': attribute type 39 has an invalid length. [ 283.291406][ T30] audit: type=1800 audit(1759950633.895:4): pid=13067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1930" name="memory.events" dev="tmpfs" ino=2144 res=0 errno=0 [ 283.745533][T13088] tipc: Enabling of bearer rejected, failed to enable media [ 283.795112][T13096] openvswitch: netlink: Duplicate key (type 6). [ 284.286108][T13124] netlink: 'syz.1.1948': attribute type 1 has an invalid length. [ 284.310147][T13124] __nla_validate_parse: 165 callbacks suppressed [ 284.310168][T13124] netlink: 600 bytes leftover after parsing attributes in process `syz.1.1948'. [ 284.426749][T13128] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 284.624621][T13137] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 284.666804][T13145] netlink: 'syz.1.1953': attribute type 5 has an invalid length. [ 284.871506][T13156] wg1 speed is unknown, defaulting to 1000 [ 284.903996][T13156] wg1 speed is unknown, defaulting to 1000 [ 284.942475][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'. [ 285.194190][T13181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1964'. [ 285.528593][T13200] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1965'. [ 285.625789][T13202] bond15: option downdelay: invalid value (18446744073709551615) [ 285.635122][T13202] bond15: option downdelay: allowed values 0 - 2147483647 [ 285.649604][T13202] bond15 (unregistering): Released all slaves [ 286.140364][T13224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1974'. [ 286.615974][T13241] netlink: 'syz.4.1982': attribute type 1 has an invalid length. [ 286.633224][T13241] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1982'. [ 286.932037][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 286.956147][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 286.976154][T13265] netlink: 'syz.3.1987': attribute type 10 has an invalid length. [ 286.985768][T13259] wg1 speed is unknown, defaulting to 1000 [ 287.000608][T13265] team0: Failed to send options change via netlink (err -105) [ 287.015861][T13265] team0: Port device netdevsim0 added [ 287.022175][T13267] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1984'. [ 287.054191][T13259] wg1 speed is unknown, defaulting to 1000 [ 287.081871][T13263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 287.149519][T13269] wg1 speed is unknown, defaulting to 1000 [ 287.185127][T13269] wg1 speed is unknown, defaulting to 1000 [ 287.834612][T13286] batadv0: entered promiscuous mode [ 287.840372][T13286] batadv0: entered allmulticast mode [ 287.930389][T13320] netlink: 'syz.4.1997': attribute type 1 has an invalid length. [ 288.080751][T13305] wg1 speed is unknown, defaulting to 1000 [ 288.197233][T13305] wg1 speed is unknown, defaulting to 1000 [ 288.291214][T13330] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 288.386044][T13334] wg1 speed is unknown, defaulting to 1000 [ 288.408837][T13334] wg1 speed is unknown, defaulting to 1000 [ 288.510761][T13346] sctp: [Deprecated]: syz.4.2003 (pid 13346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.510761][T13346] Use struct sctp_sack_info instead [ 288.737198][T13361] netlink: 'syz.0.2007': attribute type 1 has an invalid length. [ 288.901821][T13361] 8021q: adding VLAN 0 to HW filter on device bond9 [ 288.966292][T13363] bond9: (slave geneve2): making interface the new active one [ 288.981115][T13363] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 289.053394][T13368] vlan0: entered promiscuous mode [ 289.270521][T13363] wg1 speed is unknown, defaulting to 1000 [ 289.327133][T13363] wg1 speed is unknown, defaulting to 1000 [ 289.496219][T13395] netlink: 'syz.1.2013': attribute type 10 has an invalid length. [ 289.513195][T13395] __nla_validate_parse: 34 callbacks suppressed [ 289.513218][T13395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2013'. [ 289.597901][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'. [ 289.613235][T13395] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 289.640945][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 289.671349][T13392] Bluetooth: MGMT ver 1.23 [ 289.854561][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'. [ 289.888354][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2017'. [ 289.936700][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2017'. [ 289.946750][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2017'. [ 290.017994][T13408] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2017'. [ 290.044650][T13412] Bluetooth: MGMT ver 1.23 [ 290.064300][T13414] dvmrp0: entered allmulticast mode [ 290.076109][T13416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2021'. [ 290.114912][T13417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2019'. [ 290.803271][ T30] audit: type=1804 audit(1759950641.405:5): pid=13427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2023" name="/newroot/427/cgroup.controllers" dev="tmpfs" ino=2196 res=1 errno=0 [ 290.941031][ T30] audit: type=1800 audit(1759950641.445:6): pid=13427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2023" name="cgroup.controllers" dev="tmpfs" ino=2196 res=0 errno=0 [ 291.052119][T13431] netlink: 'syz.3.2024': attribute type 9 has an invalid length. [ 291.592868][T13435] can: request_module (can-proto-0) failed. [ 291.951491][T13477] gtp1: entered promiscuous mode [ 292.234311][T13483] netlink: 'syz.4.2036': attribute type 1 has an invalid length. [ 292.246829][T13488] netlink: 'syz.2.2038': attribute type 30 has an invalid length. [ 292.266707][T13483] nbd: socks must be embedded in a SOCK_ITEM attr [ 292.274041][T13483] block nbd0: shutting down sockets [ 292.687127][T13504] netlink: 'syz.3.2043': attribute type 1 has an invalid length. [ 292.698219][T13502] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 292.699244][T13503] syzkaller0: entered promiscuous mode [ 292.712264][T13503] syzkaller0: entered allmulticast mode [ 293.217578][T13531] netlink: 'syz.1.2050': attribute type 4 has an invalid length. [ 294.115420][T13561] FAULT_INJECTION: forcing a failure. [ 294.115420][T13561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.133095][T13561] CPU: 0 UID: 0 PID: 13561 Comm: syz.0.2055 Not tainted syzkaller #0 PREEMPT(full) [ 294.133125][T13561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.133137][T13561] Call Trace: [ 294.133144][T13561] [ 294.133152][T13561] dump_stack_lvl+0x189/0x250 [ 294.133176][T13561] ? __pfx____ratelimit+0x10/0x10 [ 294.133203][T13561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.133230][T13561] ? __pfx__printk+0x10/0x10 [ 294.133249][T13561] ? __might_fault+0xb0/0x130 [ 294.133280][T13561] should_fail_ex+0x414/0x560 [ 294.133304][T13561] _copy_from_user+0x2d/0xb0 [ 294.133330][T13561] do_ipv6_setsockopt+0x23e/0x2eb0 [ 294.133357][T13561] ? get_pid_task+0x20/0x1f0 [ 294.133379][T13561] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 294.133402][T13561] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 294.133435][T13561] ? vfs_write+0x956/0xb30 [ 294.133458][T13561] ? __pfx___might_resched+0x10/0x10 [ 294.133496][T13561] ? __lock_acquire+0xab9/0xd20 [ 294.133528][T13561] ? aa_sk_perm+0x81e/0x950 [ 294.133554][T13561] ? __pfx_aa_sk_perm+0x10/0x10 [ 294.133577][T13561] ? aa_sock_opt_perm+0xff/0x1b0 [ 294.133603][T13561] ipv6_setsockopt+0x59/0x170 [ 294.133622][T13561] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 294.133646][T13561] do_sock_setsockopt+0x179/0x1b0 [ 294.133677][T13561] __x64_sys_setsockopt+0x13f/0x1b0 [ 294.133708][T13561] do_syscall_64+0xfa/0xfa0 [ 294.133734][T13561] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.133761][T13561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.133779][T13561] ? clear_bhb_loop+0x60/0xb0 [ 294.133801][T13561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.133818][T13561] RIP: 0033:0x7fb1cb78eec9 [ 294.133836][T13561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.133852][T13561] RSP: 002b:00007fb1cc6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.133873][T13561] RAX: ffffffffffffffda RBX: 00007fb1cb9e6090 RCX: 00007fb1cb78eec9 [ 294.133886][T13561] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000003 [ 294.133897][T13561] RBP: 00007fb1cc6c7090 R08: 0000000000000108 R09: 0000000000000000 [ 294.133909][T13561] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 294.133920][T13561] R13: 00007fb1cb9e6128 R14: 00007fb1cb9e6090 R15: 00007fff26b09598 [ 294.133951][T13561] [ 295.107483][T13545] tipc: Enabled bearer , priority 0 [ 295.190876][T13548] syzkaller0: entered promiscuous mode [ 295.206902][T13548] syzkaller0: entered allmulticast mode [ 295.210559][T13568] netlink: 'syz.3.2057': attribute type 1 has an invalid length. [ 295.249414][T13563] __nla_validate_parse: 18 callbacks suppressed [ 295.249436][T13563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2056'. [ 295.272479][T13572] netlink: 'syz.2.2058': attribute type 10 has an invalid length. [ 295.281743][T13563] tc_dump_action: action bad kind [ 295.317669][T13568] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 295.321642][T13572] team0: Port device dummy0 added [ 295.358081][T13555] tipc: Resetting bearer [ 295.427075][T13555] tipc: Disabling bearer [ 295.528650][T13585] wg1 speed is unknown, defaulting to 1000 [ 295.537107][T13585] wg1 speed is unknown, defaulting to 1000 [ 295.656567][T13586] wg1 speed is unknown, defaulting to 1000 [ 295.688639][T13586] wg1 speed is unknown, defaulting to 1000 [ 295.725111][T13593] wg1 speed is unknown, defaulting to 1000 [ 295.815404][T13603] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2066'. [ 295.833266][T13593] wg1 speed is unknown, defaulting to 1000 [ 295.856110][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'. [ 295.880669][T13603] 0ªX¹¦À: renamed from caif0 [ 295.889037][T13603] 0ªX¹¦À: entered allmulticast mode [ 295.902765][T13603] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 296.075907][T13596] wg1 speed is unknown, defaulting to 1000 [ 296.170173][T13596] wg1 speed is unknown, defaulting to 1000 [ 296.423585][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2069'. [ 296.565357][T13614] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.595137][T13614] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.650835][T13617] wg1 speed is unknown, defaulting to 1000 [ 296.661664][T13617] wg1 speed is unknown, defaulting to 1000 [ 296.689064][T13614] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.708266][T13614] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.789151][T13614] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.801059][T13614] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.972313][T13614] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.983356][T13614] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.094014][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 297.124554][T13631] wg1 speed is unknown, defaulting to 1000 [ 297.279424][T13631] wg1 speed is unknown, defaulting to 1000 [ 297.279774][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 297.325792][T13636] syzkaller1: entered promiscuous mode [ 297.331405][T13636] syzkaller1: entered allmulticast mode [ 297.424253][T13641] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2074'. [ 297.434351][T13641] 0ªX¹¦À: renamed from caif0 [ 297.441379][T13641] 0ªX¹¦À: entered allmulticast mode [ 297.447432][T13641] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 297.465323][T12685] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.475125][T12685] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.561788][T12685] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.572413][T12685] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.621727][ T7550] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.633629][ T7550] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.701523][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.721120][T13649] xt_TPROXY: Can be used only with -p tcp or -p udp [ 297.730916][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.677106][T13663] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.707142][T13663] bond0: (slave bond6): Enslaving as an active interface with an up link [ 299.246943][T13727] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2095'. [ 299.269376][T13727] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 299.455978][T13733] vlan0: entered allmulticast mode [ 299.461299][T13733] bridge_slave_0: entered allmulticast mode [ 299.526173][T13737] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2097'. [ 299.536921][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2097'. [ 299.854320][T13759] sock: sock_set_timeout: `syz.4.2102' (pid 13759) tries to set negative timeout [ 299.882252][T13754] wg1 speed is unknown, defaulting to 1000 [ 299.887287][T13762] netlink: 'syz.2.2103': attribute type 1 has an invalid length. [ 299.900906][T13754] wg1 speed is unknown, defaulting to 1000 [ 300.047028][T13769] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 300.059213][T13772] tipc: Enabling of bearer rejected, already enabled [ 300.180392][T13766] syzkaller0: entered promiscuous mode [ 300.186856][T13766] syzkaller0: entered allmulticast mode [ 300.527274][T13794] __nla_validate_parse: 2 callbacks suppressed [ 300.527296][T13794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2115'. [ 300.658876][T13801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2117'. [ 300.729843][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'. [ 300.812633][T13810] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2119'. [ 301.067764][T13818] pim6reg: entered allmulticast mode [ 301.284763][T13837] netlink: 528 bytes leftover after parsing attributes in process `syz.4.2127'. [ 301.295144][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 301.358687][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 301.490627][T13848] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 301.725515][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 301.758064][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 301.872327][T13857] bond7: option resend_igmp: invalid value (2878) [ 301.879412][T13857] bond7: option resend_igmp: allowed values 0 - 255 [ 301.895997][T13857] bond7 (unregistering): Released all slaves [ 302.044710][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 302.338130][T13878] 8021q: adding VLAN 0 to HW filter on device bond7 [ 302.435667][T13884] sctp: [Deprecated]: syz.0.2138 (pid 13884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.435667][T13884] Use struct sctp_sack_info instead [ 302.868919][T13898] tipc: Enabled bearer , priority 10 [ 303.167942][T13908] ip6gre2: entered promiscuous mode [ 303.547113][T13911] netlink: 'syz.1.2146': attribute type 10 has an invalid length. [ 304.641975][T13960] netlink: 'syz.1.2158': attribute type 10 has an invalid length. [ 304.718994][T13958] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 305.015933][T13969] netlink: 'syz.1.2163': attribute type 142 has an invalid length. [ 305.040959][T13972] wg1 speed is unknown, defaulting to 1000 [ 305.057492][T13972] wg1 speed is unknown, defaulting to 1000 [ 305.178497][T13977] netlink: 'syz.1.2164': attribute type 8 has an invalid length. [ 305.937924][T13999] wg1 speed is unknown, defaulting to 1000 [ 305.968927][T13999] wg1 speed is unknown, defaulting to 1000 [ 305.978606][T13996] __nla_validate_parse: 5 callbacks suppressed [ 305.978629][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2168'. [ 306.036306][T13996] macvtap1: entered promiscuous mode [ 306.041999][T13996] macvtap1: entered allmulticast mode [ 306.047594][T13996] dummy0: entered allmulticast mode [ 306.075553][T14001] dummy0: left allmulticast mode [ 306.201940][T14006] wg1 speed is unknown, defaulting to 1000 [ 306.222018][T14006] wg1 speed is unknown, defaulting to 1000 [ 306.841962][T14029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2175'. [ 307.034031][T14037] openvswitch: netlink: Duplicate key (type 6). [ 307.052170][T14037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2178'. [ 307.911306][T14077] bond8: entered promiscuous mode [ 307.919513][T14077] bond8: entered allmulticast mode [ 307.926636][T14077] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.270499][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2198'. [ 308.316922][T14102] 0ªX¹¦À: left allmulticast mode [ 308.333694][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2198'. [ 308.354128][T14102] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 308.677171][T14125] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 308.928772][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2206'. [ 308.945107][T14137] tipc: Enabled bearer , priority 0 [ 309.012023][T14137] tipc: Resetting bearer [ 309.414458][T14167] SET target dimension over the limit! [ 310.004978][ T5890] tipc: Node number set to 1665620943 [ 310.117660][T14185] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2218'. [ 310.291948][T14193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2220'. [ 311.229147][T14197] sctp: [Deprecated]: syz.1.2221 (pid 14197) Use of int in maxseg socket option. [ 311.229147][T14197] Use struct sctp_assoc_value instead [ 311.329363][T14201] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 311.645795][T14223] : left promiscuous mode [ 311.956547][T14232] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 312.545588][T14246] netlink: 'syz.4.2232': attribute type 1 has an invalid length. [ 312.679622][T14255] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2235'. [ 313.048099][T14269] wg1 speed is unknown, defaulting to 1000 [ 313.077215][T14269] wg1 speed is unknown, defaulting to 1000 [ 313.174293][T14278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2242'. [ 313.442362][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2245'. [ 314.459303][T14322] syzkaller0: entered promiscuous mode [ 314.468417][T14322] syzkaller0: entered allmulticast mode [ 314.508875][T14325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2254'. [ 314.521188][T14322] syzkaller0: left allmulticast mode [ 314.527874][T14325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.765092][T14332] bond7: option tlb_dynamic_lb: invalid value (71) [ 314.794730][T14332] bond7 (unregistering): Released all slaves [ 314.814549][T14334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2255'. [ 314.863485][T14334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2255'. [ 314.921930][T14336] netlink: 'syz.1.2256': attribute type 1 has an invalid length. [ 315.031137][T14339] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 315.127888][T14339] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 315.219886][T14336] bond9: (slave bridge5): Enslaving as an active interface with a down link [ 315.416788][T14351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.439861][T14351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 315.655299][T14351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.667877][T14351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 315.782175][T14351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.796414][T14351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 315.823974][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2267'. [ 315.829064][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2269'. [ 315.843313][T14385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2268'. [ 315.921639][T14385] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 315.987889][T14385] bond10 (unregistering): Released all slaves [ 316.315302][T14351] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.328533][T14351] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 316.510013][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 316.519470][ T49] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.561152][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 316.571630][ T49] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.635895][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 316.650964][ T49] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.673439][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 316.740841][ T49] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.792065][T14402] wg1 speed is unknown, defaulting to 1000 [ 316.855642][T14402] wg1 speed is unknown, defaulting to 1000 [ 316.924799][T14416] team0: Port device dummy0 removed [ 316.945387][T14416] team0: Port device team_slave_0 removed [ 316.953993][T14416] team0: Port device team_slave_1 removed [ 316.960257][T14416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 317.004625][T14416] netlink: 'syz.2.2278': attribute type 10 has an invalid length. [ 317.038638][T14423] netlink: 'syz.1.2281': attribute type 4 has an invalid length. [ 317.891054][T14464] wg1 speed is unknown, defaulting to 1000 [ 317.926291][T14473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2292'. [ 317.955737][T14464] wg1 speed is unknown, defaulting to 1000 [ 318.109496][T14475] Cannot find add_set index 65532 as target [ 318.269160][T14475] syzkaller0: entered promiscuous mode [ 318.304701][T14475] syzkaller0: entered allmulticast mode [ 319.496512][T14498] netlink: 'syz.0.2299': attribute type 3 has an invalid length. [ 319.531186][T14498] netlink: 'syz.0.2299': attribute type 1 has an invalid length. [ 319.553079][T14508] syzkaller0: Caught tx_queue_len zero misconfig [ 319.563818][T14498] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2299'. [ 319.679890][T14511] netlink: 'syz.4.2301': attribute type 3 has an invalid length. [ 319.775362][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2305'. [ 319.813685][T14522] vxcan1: entered allmulticast mode [ 319.958109][T14524] netlink: 'syz.3.2307': attribute type 10 has an invalid length. [ 319.975396][T14524] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2307'. [ 320.283946][T14544] syzkaller1: entered promiscuous mode [ 320.300093][T14544] syzkaller1: entered allmulticast mode [ 320.765848][T14571] pim6reg1: entered promiscuous mode [ 320.791551][T14571] pim6reg1: entered allmulticast mode [ 321.266860][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2324'. [ 321.543990][T14606] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2328'. [ 321.712096][T14606] wg1 speed is unknown, defaulting to 1000 [ 321.735577][T14606] wg1 speed is unknown, defaulting to 1000 [ 321.994697][T14617] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 322.025426][T14619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2333'. [ 322.072868][T14616] wg1 speed is unknown, defaulting to 1000 [ 322.095420][T14616] wg1 speed is unknown, defaulting to 1000 [ 322.158493][T14622] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2334'. [ 322.206923][T14624] lo: entered promiscuous mode [ 322.217208][T14624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.791130][T14638] tap0: tun_chr_ioctl cmd 1074025677 [ 322.797399][T14638] tap0: linktype set to 804 [ 322.927315][T14650] tipc: Enabled bearer , priority 0 [ 322.945485][T14647] syzkaller0: entered promiscuous mode [ 322.951031][T14647] syzkaller0: entered allmulticast mode [ 323.026238][T14647] tipc: Resetting bearer [ 323.037419][T14645] tipc: Resetting bearer [ 323.095815][T14645] tipc: Disabling bearer [ 323.815158][T14652] wg1 speed is unknown, defaulting to 1000 [ 323.823770][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'. [ 323.894506][T14652] wg1 speed is unknown, defaulting to 1000 [ 324.044938][T14668] veth0_to_batadv: entered allmulticast mode [ 324.205590][T14671] bridge_slave_1: entered promiscuous mode [ 324.613337][T14690] wg1 speed is unknown, defaulting to 1000 [ 324.636824][T14690] wg1 speed is unknown, defaulting to 1000 [ 324.714703][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 324.802191][T14699] wg1 speed is unknown, defaulting to 1000 [ 324.850254][T14699] wg1 speed is unknown, defaulting to 1000 [ 324.910810][T14706] netlink: 10008 bytes leftover after parsing attributes in process `syz.2.2358'. [ 325.248885][T14718] netlink: 'syz.2.2360': attribute type 21 has an invalid length. [ 325.268267][T14718] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2360'. [ 325.353998][T14721] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2361'. [ 325.360308][T14717] syzkaller0: entered promiscuous mode [ 325.368990][T14717] syzkaller0: entered allmulticast mode [ 325.552261][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'. [ 325.850961][T14744] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 327.288892][T14744] ip6gretap4: entered promiscuous mode [ 327.295372][T14744] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 327.305896][T14744] bond4: (slave macvlan0): making interface the new active one [ 327.316093][T14744] bond4: (slave macvlan0): Enslaving as an active interface with an up link [ 327.405402][T14753] wg1 speed is unknown, defaulting to 1000 [ 327.453181][T14753] wg1 speed is unknown, defaulting to 1000 [ 327.550889][T14770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2375'. [ 327.651898][T14772] wg1 speed is unknown, defaulting to 1000 [ 327.660698][T14772] wg1 speed is unknown, defaulting to 1000 [ 327.756117][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'. [ 328.618927][T14832] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2388'. [ 328.647266][T14833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2388'. [ 328.667291][T14832] netlink: 'syz.0.2388': attribute type 1 has an invalid length. [ 328.697399][T14835] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 329.118960][T14856] vlan3: entered promiscuous mode [ 329.136897][T14856] geneve1: entered promiscuous mode [ 329.150288][T14856] vlan3: entered allmulticast mode [ 329.167588][T14856] geneve1: entered allmulticast mode [ 329.478625][T14881] __nla_validate_parse: 1 callbacks suppressed [ 329.478648][T14881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 329.526305][T14881] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2403'. [ 329.539072][T14881] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 329.571822][T14884] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2404'. [ 329.629085][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2405'. [ 329.694597][T13307] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 329.788785][T14900] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2408'. [ 329.913719][T14908] tipc: Enabled bearer , priority 0 [ 329.921111][T14908] syzkaller0: entered promiscuous mode [ 329.926876][T14908] syzkaller0: entered allmulticast mode [ 329.951729][T14913] netlink: 'syz.0.2409': attribute type 13 has an invalid length. [ 329.959782][T14913] netlink: 'syz.0.2409': attribute type 17 has an invalid length. [ 329.973738][T14913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.006536][T14908] tipc: Resetting bearer [ 330.060530][T14908] tipc: Disabling bearer [ 330.233607][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 330.415291][T14924] wg1 speed is unknown, defaulting to 1000 [ 330.424773][T14924] wg1 speed is unknown, defaulting to 1000 [ 330.532942][ T7555] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.730262][T14939] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 330.742685][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'. [ 330.752100][T14939] netlink: 'syz.2.2419': attribute type 30 has an invalid length. [ 331.174895][T14949] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2423'. [ 331.252007][T14949] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 331.271691][T14949] bond10 (unregistering): Released all slaves [ 331.273744][T14954] netlink: 'syz.1.2425': attribute type 1 has an invalid length. [ 331.313399][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2425'. [ 331.335797][T14960] netlink: 'syz.3.2424': attribute type 3 has an invalid length. [ 331.449055][T14954] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 331.609032][T14967] 0ªX¹¦À: left allmulticast mode [ 331.615700][T14967] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 331.861078][T14982] wg1 speed is unknown, defaulting to 1000 [ 331.936871][T14982] wg1 speed is unknown, defaulting to 1000 [ 331.945200][T14988] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 331.991868][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 332.093502][T14983] bond10: entered promiscuous mode [ 332.108022][T14983] 8021q: adding VLAN 0 to HW filter on device bond10 [ 332.408151][T15006] openvswitch: netlink: Tunnel attr 38 out of range max 16 [ 332.498017][T15001] bond7 (unregistering): Released all slaves [ 332.643274][T15008] veth0_to_bridge: entered promiscuous mode [ 332.774455][T15019] bond15: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 332.811493][T15019] bond15 (unregistering): Released all slaves [ 332.906615][T15000] veth0_to_bridge: left promiscuous mode [ 333.326706][T15049] wg1 speed is unknown, defaulting to 1000 [ 333.341321][T15049] wg1 speed is unknown, defaulting to 1000 [ 333.760989][T15060] wg1 speed is unknown, defaulting to 1000 [ 333.767864][ T68] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 333.797303][ T68] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 333.845121][ T68] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 334.015544][T15060] wg1 speed is unknown, defaulting to 1000 [ 334.015856][ T68] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 334.402732][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 334.506128][T15076] bond10: option min_links: invalid value (18446744073709551612) [ 334.538178][T15076] bond10: option min_links: allowed values 0 - 2147483647 [ 334.580717][T15076] bond10 (unregistering): Released all slaves [ 334.877743][T15080] wg1 speed is unknown, defaulting to 1000 [ 334.887161][T15091] bond0: (slave rose0): Error: Device can not be enslaved while up [ 334.945672][T15090] __nla_validate_parse: 7 callbacks suppressed [ 334.945702][T15090] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2459'. [ 334.991783][T15080] wg1 speed is unknown, defaulting to 1000 [ 335.156207][T15095] netlink: 'syz.0.2460': attribute type 4 has an invalid length. [ 335.235769][T15097] wg1 speed is unknown, defaulting to 1000 [ 335.256522][T15097] wg1 speed is unknown, defaulting to 1000 [ 335.662176][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2465'. [ 335.685019][T15117] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 335.714639][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 335.728730][T15119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2466'. [ 335.763880][T15116] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 335.892931][T15122] netlink: 'syz.2.2467': attribute type 1 has an invalid length. [ 336.881495][T15155] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2477'. [ 337.974080][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2485'. [ 338.612368][T15207] wg1 speed is unknown, defaulting to 1000 [ 338.620857][T15207] wg1 speed is unknown, defaulting to 1000 [ 338.764986][T15212] netlink: 'syz.4.2487': attribute type 4 has an invalid length. [ 339.420258][T15230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2496'. [ 339.852357][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2500'. [ 339.995329][T15256] netlink: 464 bytes leftover after parsing attributes in process `syz.1.2503'. [ 340.006708][T15256] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2503'. [ 340.018557][T15260] netlink: 'syz.4.2500': attribute type 16 has an invalid length. [ 340.026712][T15260] netlink: 'syz.4.2500': attribute type 17 has an invalid length. [ 340.035584][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 340.213589][T15260] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 340.249872][T15255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2502'. [ 340.431905][T15272] netlink: 'syz.0.2509': attribute type 1 has an invalid length. [ 340.449107][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2510'. [ 340.667784][T15284] wg1 speed is unknown, defaulting to 1000 [ 340.677857][T15281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2513'. [ 340.687735][T15284] wg1 speed is unknown, defaulting to 1000 [ 340.688993][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2513'. [ 340.704436][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2513'. [ 340.931479][T15297] syzkaller0: entered allmulticast mode [ 340.958890][T15301] netlink: 'syz.1.2519': attribute type 3 has an invalid length. [ 340.973691][T15301] netlink: 'syz.1.2519': attribute type 1 has an invalid length. [ 341.072323][T15304] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2520'. [ 341.183392][T15310] Can't find ip_set type hash:ip,port,_et [ 341.815698][T15344] netlink: 'syz.2.2529': attribute type 1 has an invalid length. [ 341.908998][T15350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2529'. [ 342.171823][T15344] 8021q: adding VLAN 0 to HW filter on device bond15 [ 342.354770][T15350] veth3: entered promiscuous mode [ 342.402420][T15350] bond15: (slave veth3): Enslaving as an active interface with a down link [ 342.403211][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.468208][T15360] netlink: 'syz.0.2533': attribute type 7 has an invalid length. [ 342.553594][T15360] netlink: 'syz.0.2533': attribute type 3 has an invalid length. [ 343.116749][T15390] wg1 speed is unknown, defaulting to 1000 [ 343.195561][T15390] wg1 speed is unknown, defaulting to 1000 [ 343.213017][T15401] netlink: 'syz.3.2544': attribute type 1 has an invalid length. [ 343.663249][ T30] audit: type=1804 audit(1759950694.265:7): pid=15416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2547" name="/newroot/501/cgroup.controllers" dev="tmpfs" ino=2595 res=1 errno=0 [ 343.745697][ T30] audit: type=1800 audit(1759950694.265:8): pid=15416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2547" name="cgroup.controllers" dev="tmpfs" ino=2595 res=0 errno=0 [ 344.553767][T15449] netlink: 'syz.0.2554': attribute type 2 has an invalid length. [ 344.574111][T15449] netlink: 'syz.0.2554': attribute type 1 has an invalid length. [ 344.609817][T15449] netlink: 'syz.0.2554': attribute type 1 has an invalid length. [ 344.688174][T15458] wg1 speed is unknown, defaulting to 1000 [ 344.707295][T15458] wg1 speed is unknown, defaulting to 1000 [ 345.280799][T15485] wg1 speed is unknown, defaulting to 1000 [ 345.394346][T15489] netlink: 'syz.0.2563': attribute type 13 has an invalid length. [ 345.434016][T15488] wg1 speed is unknown, defaulting to 1000 [ 345.441677][T15488] wg1 speed is unknown, defaulting to 1000 [ 345.909535][T15489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.197406][T15503] validate_nla: 1 callbacks suppressed [ 346.197438][T15503] netlink: 'syz.0.2568': attribute type 1 has an invalid length. [ 346.441689][T15504] gretap2: entered promiscuous mode [ 346.636829][T15516] ip6t_REJECT: ECHOREPLY is not supported [ 346.796471][T15525] __nla_validate_parse: 8 callbacks suppressed [ 346.796492][T15525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2575'. [ 346.806273][T15523] wg1 speed is unknown, defaulting to 1000 [ 346.864578][T15523] wg1 speed is unknown, defaulting to 1000 [ 346.878625][T15528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2576'. [ 346.917103][T15528] openvswitch: netlink: Flow actions attr not present in new flow. [ 346.972134][T15532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2575'. [ 347.619178][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2582'. [ 347.834768][T15563] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2584'. [ 348.126116][T15577] netlink: 'syz.3.2587': attribute type 1 has an invalid length. [ 348.186046][T15579] nbd: must specify at least one socket [ 348.239277][T15577] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 348.264169][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2590'. [ 348.281674][ T30] audit: type=1107 audit(1759950698.885:9): pid=15581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 348.368461][T15577] veth11: entered promiscuous mode [ 348.388553][T15577] bond9: (slave veth11): Enslaving as a backup interface with a down link [ 348.425983][T15591] macvlan4: entered promiscuous mode [ 348.440407][T15591] macvlan4: entered allmulticast mode [ 348.456929][T15591] bond7: (slave macvlan4): Opening slave failed [ 348.480333][T15593] syzkaller0: left promiscuous mode [ 348.486699][T15593] syzkaller0: left allmulticast mode [ 348.848530][T15616] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2600'. [ 349.004921][T15614] wg1 speed is unknown, defaulting to 1000 [ 349.013401][T15614] wg1 speed is unknown, defaulting to 1000 [ 349.060839][T15628] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2602'. [ 349.071088][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2602'. [ 349.415206][T15666] netlink: 'syz.1.2608': attribute type 7 has an invalid length. [ 349.488982][T15670] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2608'. [ 349.508400][T15662] bond10: entered promiscuous mode [ 349.514570][T15662] 8021q: adding VLAN 0 to HW filter on device bond10 [ 349.894224][T15685] netlink: 'syz.2.2613': attribute type 12 has an invalid length. [ 350.629105][T15707] tipc: New replicast peer: 0.0.0.0 [ 350.650255][T15707] tipc: Enabled bearer , priority 10 [ 350.678977][T15710] tipc: New replicast peer: 255.255.255.255 [ 350.707457][T15709] batadv_slave_0: entered promiscuous mode [ 350.865040][T15709] batadv_slave_0: left promiscuous mode [ 350.904885][T15720] netlink: 'syz.4.2625': attribute type 1 has an invalid length. [ 350.948104][T15723] netlink: 'syz.2.2626': attribute type 2 has an invalid length. [ 350.977576][T15727] netlink: 'syz.1.2623': attribute type 39 has an invalid length. [ 350.986973][T15726] netlink: 'syz.1.2623': attribute type 39 has an invalid length. [ 351.769021][ T5890] tipc: Node number set to 4285857792 [ 351.806827][T15776] __nla_validate_parse: 9 callbacks suppressed [ 351.806847][T15776] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2639'. [ 351.825826][T15776] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2639'. [ 351.835265][T15776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2639'. [ 352.269692][T15786] tipc: Failed to remove unknown binding: 66,1,1/1665620943:2659827068/2659827070 [ 352.291735][T15786] tipc: Failed to remove unknown binding: 66,1,1/1665620943:2659827068/2659827070 [ 352.331465][T15786] tipc: Failed to remove unknown binding: 66,1,1/1665620943:2659827068/2659827070 [ 352.923112][T15819] netlink: 'syz.4.2650': attribute type 10 has an invalid length. [ 352.944669][T15819] netlink: 'syz.4.2650': attribute type 10 has an invalid length. [ 352.966599][T15819] netlink: 'syz.4.2650': attribute type 10 has an invalid length. [ 352.983666][T15819] netlink: 'syz.4.2650': attribute type 10 has an invalid length. [ 353.003337][T15819] netlink: 'syz.4.2650': attribute type 10 has an invalid length. [ 353.011532][T15819] netlink: 'syz.4.2650': attribute type 10 has an invalid length. [ 353.043092][T15819] netlink: 'syz.4.2650': attribute type 10 has an invalid length. [ 353.051333][T15819] netlink: 'syz.4.2650': attribute type 10 has an invalid length. [ 353.060030][T15819] netlink: 'syz.4.2650': attribute type 10 has an invalid length. [ 353.082986][T15819] netlink: 'syz.4.2650': attribute type 10 has an invalid length. [ 353.105750][T15829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2653'. [ 353.244420][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2654'. [ 353.901775][T15858] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2660'. [ 354.001957][T15863] 8021q: adding VLAN 0 to HW filter on device bond11 [ 354.020890][T15862] macsec0: entered allmulticast mode [ 354.041623][T15867] bond11: (slave geneve2): making interface the new active one [ 354.052431][T15867] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 354.061672][T15868] veth1_macvtap: entered allmulticast mode [ 354.068675][T15868] macsec0: left allmulticast mode [ 354.077036][T15868] veth1_macvtap: left allmulticast mode [ 354.087077][T15630] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.096245][T15630] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.123579][T15630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.143282][T15630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.263092][T15872] tipc: Enabled bearer , priority 0 [ 354.285431][T15872] syzkaller0: entered promiscuous mode [ 354.290969][T15872] syzkaller0: entered allmulticast mode [ 354.319854][T15872] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.404692][T15879] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 354.414265][T15877] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2664'. [ 354.799829][T15871] tipc: Resetting bearer [ 354.854585][T15871] tipc: Disabling bearer [ 355.022297][T15898] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 355.160578][T15900] xt_CT: No such helper "syz1" [ 355.178033][T15900] tipc: Enabled bearer , priority 0 [ 355.189901][T15900] syzkaller0: entered promiscuous mode [ 355.200132][T15900] syzkaller0: entered allmulticast mode [ 355.276325][T15906] tipc: Resetting bearer [ 355.375180][T15899] tipc: Resetting bearer [ 355.410715][T15899] tipc: Disabling bearer [ 355.446805][T15914] wg1 speed is unknown, defaulting to 1000 [ 355.483568][T15914] wg1 speed is unknown, defaulting to 1000 [ 355.614735][T15928] : entered promiscuous mode [ 355.798158][T15939] xt_HMARK: proto mask must be zero with L3 mode [ 356.045125][T15948] dvmrp3: entered allmulticast mode [ 356.053409][T15948] dvmrp3: left allmulticast mode [ 356.105505][T15950] wg1 speed is unknown, defaulting to 1000 [ 356.116349][T15950] wg1 speed is unknown, defaulting to 1000 [ 356.503050][T15967] netlink: 4324 bytes leftover after parsing attributes in process `syz.1.2689'. [ 356.523570][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'. [ 356.532814][T15967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.568757][T15967] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 357.038344][T15981] netlink: 'syz.3.2691': attribute type 11 has an invalid length. [ 357.448915][T15989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.514188][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2694'. [ 357.660727][T15998] wg1 speed is unknown, defaulting to 1000 [ 357.671978][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2696'. [ 357.674270][T15998] wg1 speed is unknown, defaulting to 1000 [ 357.762772][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.237720][T16031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2701'. [ 358.369725][T16024] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 358.383964][T16024] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 358.396509][T16024] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 358.519540][T16038] syzkaller1: entered promiscuous mode [ 358.565044][T16038] syzkaller1: entered allmulticast mode [ 358.654936][T16049] validate_nla: 28 callbacks suppressed [ 358.654956][T16049] netlink: 'syz.3.2708': attribute type 1 has an invalid length. [ 358.694024][T16048] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 358.924841][T16072] netlink: 'syz.0.2714': attribute type 23 has an invalid length. [ 359.027973][T16073] tipc: Resetting bearer [ 359.247182][T15649] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.263415][T15649] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 359.290531][T15649] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.309545][T15649] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 359.319848][T15649] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.341389][T15649] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 359.376261][T15649] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.386837][T15649] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 359.397956][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 360.837382][T16149] IPv6: Can't replace route, no match found [ 360.859649][T16147] wg1 speed is unknown, defaulting to 1000 [ 360.909769][T16147] wg1 speed is unknown, defaulting to 1000 [ 360.942242][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2737'. [ 361.288887][T16161] wg1 speed is unknown, defaulting to 1000 [ 361.298009][T16161] wg1 speed is unknown, defaulting to 1000 [ 361.455069][T16162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2742'. [ 361.475617][T16162] veth0_macvtap: left promiscuous mode [ 361.574833][T16170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2744'. [ 361.603940][T16170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2744'. [ 361.864770][T16173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2738'. [ 361.869040][T16181] netlink: 'syz.1.2748': attribute type 4 has an invalid length. [ 362.010332][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2748'. [ 362.390789][T16195] tap0: tun_chr_ioctl cmd 1074025676 [ 362.403854][T16195] tap0: owner set to 0 [ 362.908741][T16225] __nla_validate_parse: 2 callbacks suppressed [ 362.908763][T16225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2761'. [ 363.112842][T16234] 8021q: adding VLAN 0 to HW filter on device bond10 [ 363.120991][T16234] bridge0: port 1(bond10) entered blocking state [ 363.138706][T16234] bridge0: port 1(bond10) entered disabled state [ 363.149042][T16234] bond10: entered allmulticast mode [ 363.160592][T16234] bond10: entered promiscuous mode [ 364.071852][T16289] netlink: 'syz.0.2777': attribute type 1 has an invalid length. [ 364.121518][T16289] netlink: 'syz.0.2777': attribute type 1 has an invalid length. [ 364.206996][T16294] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 364.248414][T16294] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 364.366977][T16299] bond11: (slave gretap3): making interface the new active one [ 364.377066][T16299] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 364.410757][T16289] bond11: (slave bridge9): Enslaving as an active interface with a down link [ 364.457856][T16294] macvlan2: entered promiscuous mode [ 364.464630][T16294] macvlan2: entered allmulticast mode [ 364.471111][T16294] bond11: entered promiscuous mode [ 364.479998][T16294] gretap3: entered promiscuous mode [ 364.487286][T16294] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 364.529427][T16294] bond11: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 364.568239][T16294] bond11: left promiscuous mode [ 364.581368][T16294] gretap3: left promiscuous mode [ 364.642062][T16305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2781'. [ 364.760410][T16312] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2784'. [ 365.007657][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'. [ 365.042835][T16321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2785'. [ 365.064176][T16324] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2788'. [ 365.241793][T16337] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2791'. [ 365.320226][T16339] wg1 speed is unknown, defaulting to 1000 [ 365.365644][T16339] wg1 speed is unknown, defaulting to 1000 [ 365.480409][T16349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2795'. [ 365.781183][T16370] netlink: 'syz.0.2802': attribute type 1 has an invalid length. [ 365.884309][T16372] bond12: entered promiscuous mode [ 365.891628][T16372] bond12: entered allmulticast mode [ 365.936304][T16372] 8021q: adding VLAN 0 to HW filter on device bond12 [ 366.135309][T16388] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 366.194941][T16388] bond6: (slave macvlan1): Releasing active interface [ 366.204545][ T9723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.218759][T16388] veth1_vlan: left allmulticast mode [ 366.259075][T16388] bond4: (slave bridge4): Releasing backup interface [ 366.272823][T16388] bridge4: left promiscuous mode [ 366.440633][T16388] bond9: (slave geneve2): Releasing active interface [ 366.464950][T16388] bond11: (slave gretap3): Releasing active interface [ 366.485066][T16388] bond11: (slave bridge9): Releasing active interface [ 366.604390][ T9723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.920890][T16410] wg1 speed is unknown, defaulting to 1000 [ 366.940940][T16410] wg1 speed is unknown, defaulting to 1000 [ 367.073938][T16421] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2815'. [ 367.300898][T16422] tipc: Enabled bearer , priority 0 [ 367.309967][T16422] syzkaller0: entered promiscuous mode [ 367.316524][T16422] syzkaller0: entered allmulticast mode [ 367.623303][T16420] tipc: Resetting bearer [ 367.743924][T16420] tipc: Disabling bearer [ 367.794400][T16442] netlink: 'syz.2.2822': attribute type 13 has an invalid length. [ 367.921977][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.942405][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.952106][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.962373][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.971899][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.064663][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 368.081371][T16446] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 368.143577][T16445] wg1 speed is unknown, defaulting to 1000 [ 368.188787][T16445] wg1 speed is unknown, defaulting to 1000 [ 368.210559][T16447] wg1 speed is unknown, defaulting to 1000 [ 368.254600][T16447] wg1 speed is unknown, defaulting to 1000 [ 368.403065][T15639] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.435875][T15639] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.528254][T15639] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.563467][T15639] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.675895][T15639] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.686647][T16471] FAULT_INJECTION: forcing a failure. [ 368.686647][T16471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.706851][T16471] CPU: 0 UID: 0 PID: 16471 Comm: syz.1.2831 Not tainted syzkaller #0 PREEMPT(full) [ 368.706886][T16471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.706900][T16471] Call Trace: [ 368.706908][T16471] [ 368.706917][T16471] dump_stack_lvl+0x189/0x250 [ 368.706946][T16471] ? __pfx____ratelimit+0x10/0x10 [ 368.706975][T16471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.706996][T16471] ? __pfx__printk+0x10/0x10 [ 368.707030][T16471] should_fail_ex+0x414/0x560 [ 368.707056][T16471] _copy_to_user+0x31/0xb0 [ 368.707088][T16471] bpf_test_finish+0x1ab/0x700 [ 368.707125][T16471] ? __pfx_bpf_test_finish+0x10/0x10 [ 368.707150][T16471] ? rep_movs_alternative+0x4a/0x90 [ 368.707179][T16471] ? bpf_test_init+0x113/0x150 [ 368.707209][T16471] bpf_prog_test_run_xdp+0x893/0x10e0 [ 368.707254][T16471] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 368.707285][T16471] ? __fget_files+0x2a/0x420 [ 368.707316][T16471] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 368.707344][T16471] bpf_prog_test_run+0x2c7/0x340 [ 368.707378][T16471] __sys_bpf+0x562/0x860 [ 368.707408][T16471] ? __pfx___sys_bpf+0x10/0x10 [ 368.707455][T16471] ? ksys_write+0x22a/0x250 [ 368.707480][T16471] ? __pfx_ksys_write+0x10/0x10 [ 368.707507][T16471] __x64_sys_bpf+0x7c/0x90 [ 368.707534][T16471] do_syscall_64+0xfa/0xfa0 [ 368.707573][T16471] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.707605][T16471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.707625][T16471] ? clear_bhb_loop+0x60/0xb0 [ 368.707651][T16471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.707671][T16471] RIP: 0033:0x7fe487b8eec9 [ 368.707690][T16471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.707709][T16471] RSP: 002b:00007fe48896f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.707732][T16471] RAX: ffffffffffffffda RBX: 00007fe487de5fa0 RCX: 00007fe487b8eec9 [ 368.707748][T16471] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 368.707760][T16471] RBP: 00007fe48896f090 R08: 0000000000000000 R09: 0000000000000000 [ 368.707773][T16471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.707786][T16471] R13: 00007fe487de6038 R14: 00007fe487de5fa0 R15: 00007ffe67c9d4e8 [ 368.707823][T16471] [ 368.708958][T15639] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.069351][T15639] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.092070][T15639] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.389682][T15651] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.418703][T15649] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.472124][T15649] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.549711][T12685] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.570905][T16518] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2844'. [ 369.599373][T16447] chnl_net:caif_netlink_parms(): no params data found [ 369.765764][T15639] tipc: Resetting bearer [ 370.082720][ T51] Bluetooth: hci3: command tx timeout [ 370.131943][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2849'. [ 370.302402][T15639] dvmrp1 (unregistering): left allmulticast mode [ 370.619074][T15639] tipc: Disabling bearer [ 371.030216][T15639] bond0 (unregistering): Released all slaves [ 371.125228][T15639] bond1 (unregistering): Released all slaves [ 371.139735][T15639] bond2 (unregistering): Released all slaves [ 371.155137][T15639] bond3 (unregistering): Released all slaves [ 371.256480][T15639] bond4 (unregistering): Released all slaves [ 371.271354][T15639] bond5 (unregistering): Released all slaves [ 371.367153][T15639] bond6 (unregistering): Released all slaves [ 371.381276][T15639] bond7 (unregistering): Released all slaves [ 371.395858][T15639] bond8 (unregistering): Released all slaves [ 371.496750][T15639] bond9 (unregistering): Released all slaves [ 371.594480][T15639] bond10 (unregistering): Released all slaves [ 371.610253][T15639] bond11 (unregistering): Released all slaves [ 371.708423][T15639] bond12 (unregistering): Released all slaves [ 371.722145][T16518] 0ªX¹¦À: renamed from caif0 [ 371.729757][T16518] 0ªX¹¦À: entered allmulticast mode [ 371.735297][T16518] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 371.971649][T16558] netlink: 'syz.1.2851': attribute type 1 has an invalid length. [ 372.056326][T16565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2853'. [ 372.065732][T15639] tipc: Left network mode [ 372.094797][T15639] IPVS: stopping backup sync thread 10925 ... [ 372.115620][T16558] 8021q: adding VLAN 0 to HW filter on device bond12 [ 372.137958][T16566] bond12: (slave geneve3): making interface the new active one [ 372.147163][T16566] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 372.163021][ T51] Bluetooth: hci3: command tx timeout [ 372.341652][T16447] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.356767][T16447] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.364196][T16447] bridge_slave_0: entered allmulticast mode [ 372.372203][T16447] bridge_slave_0: entered promiscuous mode [ 372.422858][T16447] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.430138][T16447] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.451944][T16447] bridge_slave_1: entered allmulticast mode [ 372.469661][T16447] bridge_slave_1: entered promiscuous mode [ 372.671076][T16447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.760351][T16447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.915243][T16447] team0: Port device team_slave_0 added [ 372.954040][T16447] team0: Port device team_slave_1 added [ 373.074931][T16447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.107991][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.160820][T16447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.177003][T16447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.184065][T16447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.230096][T16447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.276013][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2866'. [ 373.279547][T16611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.286353][T16615] netlink: 'syz.1.2866': attribute type 5 has an invalid length. [ 373.301939][T16615] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2866'. [ 373.454998][T16627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.481011][T16629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.494396][T16626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2869'. [ 373.635204][T16447] hsr_slave_0: entered promiscuous mode [ 373.662010][T16647] netlink: 'syz.3.2872': attribute type 1 has an invalid length. [ 373.663765][T16447] hsr_slave_1: entered promiscuous mode [ 373.693065][T16647] netlink: 'syz.3.2872': attribute type 1 has an invalid length. [ 373.708310][T16447] debugfs: 'hsr0' already exists in 'hsr' [ 373.733350][T16447] Cannot create hsr debugfs directory [ 373.902228][T15639] veth1_macvtap: left promiscuous mode [ 373.915715][T15639] veth1_vlan: left promiscuous mode [ 373.917847][T16657] netlink: 'syz.2.2875': attribute type 21 has an invalid length. [ 373.927742][T15639] veth0_vlan: left promiscuous mode [ 373.959922][T16657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2875'. [ 374.100843][T15639] pim6reg (unregistering): left allmulticast mode [ 374.253175][ T51] Bluetooth: hci3: command tx timeout [ 374.913823][T16662] wg1 speed is unknown, defaulting to 1000 [ 374.944300][T16662] wg1 speed is unknown, defaulting to 1000 [ 375.186124][T16680] tc_dump_action: action bad kind [ 375.191254][T16676] wg1 speed is unknown, defaulting to 1000 [ 375.245895][T16447] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.338951][T16677] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2880'. [ 375.481603][T16676] wg1 speed is unknown, defaulting to 1000 [ 375.490792][T16447] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.626642][T16447] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.700269][T15639] IPVS: stop unused estimator thread 0... [ 375.746559][T16678] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2879'. [ 375.747955][T16447] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.998810][T16703] openvswitch: netlink: Missing valid actions attribute. [ 376.018458][T16703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.113365][T16701] netlink: 'syz.3.2884': attribute type 16 has an invalid length. [ 376.121348][T16701] netlink: 'syz.3.2884': attribute type 17 has an invalid length. [ 376.197302][T16701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.205587][T16701] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 376.216324][T16701] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.225296][T16701] dummy0: entered promiscuous mode [ 376.239070][T16701] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 376.281162][T16708] sctp: [Deprecated]: syz.4.2886 (pid 16708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.281162][T16708] Use struct sctp_sack_info instead [ 376.323492][ T5144] Bluetooth: hci3: command tx timeout [ 377.813443][T16447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 377.853775][T16447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 377.906984][T16447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.950438][T16447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.993914][T16723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2890'. [ 378.005248][T16723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2890'. [ 378.159274][T16745] xt_hashlimit: max too large, truncated to 1048576 [ 378.353311][T16745] netlink: 'syz.4.2894': attribute type 4 has an invalid length. [ 378.503111][T16447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.524009][T16745] netlink: 'syz.4.2894': attribute type 4 has an invalid length. [ 378.588258][T16447] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.631889][T15651] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.639168][T15651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.702553][T15651] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.709810][T15651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.300855][T16764] lo: left promiscuous mode [ 379.310140][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2898'. [ 379.392067][T16764] dummy0: left promiscuous mode [ 379.398366][T16764] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 379.413190][T16770] nbd0: detected capacity change from 0 to 127 [ 379.421149][T16764] batadv0: left allmulticast mode [ 379.427325][T16764] wg1: left promiscuous mode [ 379.432103][T16764] wg1: left allmulticast mode [ 379.443294][ T5144] block nbd0: Receive control failed (result -32) [ 379.458961][T16764] macsec1: left promiscuous mode [ 379.468671][T16764] gretap1: left allmulticast mode [ 379.477283][T16764] bond4: left promiscuous mode [ 379.499866][T16764] veth11: left promiscuous mode [ 379.500730][T16778] Cannot find set identified by id 65534 to match [ 379.628493][T16447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.708094][T16447] veth0_vlan: entered promiscuous mode [ 379.724646][T16447] veth1_vlan: entered promiscuous mode [ 379.772288][T16447] veth0_macvtap: entered promiscuous mode [ 379.791023][T16793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2904'. [ 379.805282][T16793] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2904'. [ 379.824432][T16447] veth1_macvtap: entered promiscuous mode [ 379.880853][T16447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.960962][T16447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.008248][T12685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.027068][T12685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.037976][T12685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.054085][T12685] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.071726][T16804] netlink: 'syz.4.2907': attribute type 1 has an invalid length. [ 380.192084][T16804] 8021q: adding VLAN 0 to HW filter on device bond9 [ 380.349212][T16810] 8021q: adding VLAN 0 to HW filter on device bond9 [ 380.366286][T16810] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 380.378689][T16810] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 380.475105][T16804] veth11: entered promiscuous mode [ 380.491183][T16804] bond9: (slave veth11): Enslaving as an active interface with a down link [ 380.574770][T16809] wg1 speed is unknown, defaulting to 1000 [ 380.613345][T16809] wg1 speed is unknown, defaulting to 1000 [ 380.842023][T12685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.869929][T12685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.011094][T15648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.026706][T15648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.228375][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 381.389990][T16826] wg1 speed is unknown, defaulting to 1000 [ 381.477292][T16826] wg1 speed is unknown, defaulting to 1000 [ 381.528155][T15645] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x18 [ 381.574019][T16848] netlink: 'syz.4.2914': attribute type 1 has an invalid length. [ 381.794896][T16852] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 381.809930][T16852] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 381.937319][T16852] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2914'. [ 382.019311][T16848] macvlan4: entered promiscuous mode [ 382.026574][T16848] macvlan4: entered allmulticast mode [ 382.027708][T16861] netlink: 'syz.3.2916': attribute type 13 has an invalid length. [ 382.045413][T16848] bond10: entered promiscuous mode [ 382.051477][T16848] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 382.058762][T16861] netlink: 'syz.3.2916': attribute type 17 has an invalid length. [ 382.072382][T16848] bond10: left promiscuous mode [ 382.347535][T16861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.359665][T16861] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.393435][T16861] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 382.450951][T16862] wg1 speed is unknown, defaulting to 1000 [ 382.511579][T16862] wg1 speed is unknown, defaulting to 1000 [ 382.779223][T16880] wg1 speed is unknown, defaulting to 1000 [ 382.789843][T16888] netlink: 'syz.0.2922': attribute type 25 has an invalid length. [ 382.809620][T16880] wg1 speed is unknown, defaulting to 1000 [ 382.869086][T16889] wg1 speed is unknown, defaulting to 1000 [ 382.976845][T16889] wg1 speed is unknown, defaulting to 1000 [ 383.226307][T16892] wg1 speed is unknown, defaulting to 1000 [ 383.274158][T16892] wg1 speed is unknown, defaulting to 1000 [ 383.339047][T16909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2928'. [ 383.803738][T16932] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2935'. [ 384.338082][T16926] wg1 speed is unknown, defaulting to 1000 [ 384.346962][T16926] wg1 speed is unknown, defaulting to 1000 [ 384.421840][T16932] wg1 speed is unknown, defaulting to 1000 [ 384.483815][T16939] netlink: 'syz.2.2936': attribute type 1 has an invalid length. [ 384.486314][T16932] wg1 speed is unknown, defaulting to 1000 [ 384.499001][T16939] netlink: 'syz.2.2936': attribute type 1 has an invalid length. [ 384.905064][T16949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2940'. [ 384.928588][T16949] bond10: left promiscuous mode [ 385.337487][T16973] wg1 speed is unknown, defaulting to 1000 [ 385.357934][T16974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2946'. [ 385.358916][T16973] wg1 speed is unknown, defaulting to 1000 [ 385.394858][T16974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2946'. [ 385.592123][T16987] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2950'. [ 385.704749][T16984] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 385.749410][T16984] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.758609][T16984] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.037442][T17008] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 386.067466][T17008] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 386.479413][T17025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.546134][T17016] netlink: 'syz.1.2959': attribute type 10 has an invalid length. [ 386.604757][T17029] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2961'. [ 387.068844][T17043] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2966'. [ 387.214176][T17049] netlink: 'syz.1.2967': attribute type 13 has an invalid length. [ 387.253861][T17049] netlink: 'syz.1.2967': attribute type 17 has an invalid length. [ 387.349731][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 387.361837][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 387.375960][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 387.386272][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 387.400945][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 387.490209][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2969'. [ 387.852708][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 388.161250][ T5824] syz_tun (unregistering): left allmulticast mode [ 388.344714][T17049] 0ªX¹¦À: left allmulticast mode [ 388.349691][T17049] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 388.420217][T17068] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2970'. [ 388.436398][T17056] wg1 speed is unknown, defaulting to 1000 [ 388.456504][T17056] wg1 speed is unknown, defaulting to 1000 [ 388.517511][T17068] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2970'. [ 388.528335][T17068] netlink: 'syz.0.2970': attribute type 6 has an invalid length. [ 388.536759][T17068] netlink: 'syz.0.2970': attribute type 5 has an invalid length. [ 388.545791][T17068] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2970'. [ 388.556617][T17076] lo: entered allmulticast mode [ 388.563318][T17076] tunl0: entered allmulticast mode [ 388.570362][T17076] tipc: Resetting bearer [ 388.577002][T17076] gre0: entered allmulticast mode [ 388.587017][T17076] gretap0: entered allmulticast mode [ 388.631974][T17069] netlink: 'syz.0.2970': attribute type 4 has an invalid length. [ 388.687155][T17076] erspan0: entered allmulticast mode [ 388.708010][T17076] ip_vti0: entered allmulticast mode [ 388.716179][T17068] netlink: 'syz.0.2970': attribute type 4 has an invalid length. [ 388.727159][T17076] ip6_vti0: entered allmulticast mode [ 388.738182][T17076] sit0: entered allmulticast mode [ 388.760249][T17076] ip6tnl0: entered allmulticast mode [ 388.770197][T17076] ip6gre0: entered allmulticast mode [ 388.779836][T17087] netlink: 'syz.0.2970': attribute type 16 has an invalid length. [ 388.795177][T17076] syz_tun: entered allmulticast mode [ 388.806039][T17076] ip6gretap0: entered allmulticast mode [ 388.821494][T17076] bridge0: entered allmulticast mode [ 388.829643][T17076] vcan0: entered allmulticast mode [ 388.837768][T17076] ip6gretap4: left promiscuous mode [ 388.846528][T17076] bond0: entered allmulticast mode [ 388.852174][T17076] ip6gretap4: entered allmulticast mode [ 388.858228][T17076] bond6: entered allmulticast mode [ 388.870513][T17076] dummy0: entered allmulticast mode [ 388.882240][T17076] nlmon0: entered allmulticast mode [ 388.890765][T17076] 0ªX¹¦À: entered allmulticast mode [ 388.897095][T17076] batadv0: entered allmulticast mode [ 388.906788][T17076] veth0: entered allmulticast mode [ 388.914099][T17076] veth1: entered allmulticast mode [ 388.920079][T17076] wg1: entered allmulticast mode [ 388.926512][T17076] wg2: entered allmulticast mode [ 388.932212][T17076] veth0_to_bridge: entered allmulticast mode [ 388.939362][T17076] bridge_slave_0: entered allmulticast mode [ 388.947074][T17076] veth1_to_bridge: entered allmulticast mode [ 388.954244][T17076] bridge_slave_1: left promiscuous mode [ 388.959937][T17076] bridge_slave_1: entered allmulticast mode [ 388.967473][T17076] veth0_to_bond: entered allmulticast mode [ 388.976094][T17076] bond_slave_0: entered allmulticast mode [ 388.984575][T17076] veth1_to_bond: entered allmulticast mode [ 388.990755][T17076] bond_slave_1: entered allmulticast mode [ 388.997876][T17076] veth1_to_team: entered allmulticast mode [ 389.004949][T17076] team_slave_1: entered allmulticast mode [ 389.011191][T17076] veth0_to_batadv: entered allmulticast mode [ 389.018178][T17076] batadv_slave_0: entered allmulticast mode [ 389.026383][T17076] veth1_to_batadv: entered allmulticast mode [ 389.033404][T17076] batadv_slave_1: entered allmulticast mode [ 389.039786][T17076] xfrm0: entered allmulticast mode [ 389.046140][T17076] veth0_to_hsr: entered allmulticast mode [ 389.052368][T17076] hsr_slave_0: entered allmulticast mode [ 389.060869][T17076] veth1_to_hsr: entered allmulticast mode [ 389.067973][T17076] hsr_slave_1: entered allmulticast mode [ 389.074643][T17076] hsr0: entered allmulticast mode [ 389.080387][T17076] veth1_virt_wifi: entered allmulticast mode [ 389.089347][T17076] veth0_virt_wifi: entered allmulticast mode [ 389.096628][T17076] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 389.105389][T17076] veth1_macvtap: entered allmulticast mode [ 389.111692][T17076] veth0_macvtap: entered allmulticast mode [ 389.118532][T17076] macvtap0: entered allmulticast mode [ 389.127250][T17076] macsec0: entered allmulticast mode [ 389.137376][T17076] geneve0: entered allmulticast mode [ 389.143785][T17076] geneve1: entered allmulticast mode [ 389.150803][T17076] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 389.158794][T17076] ieee802154 phy1 wpan1: entered allmulticast mode [ 389.168361][T17076] nicvf0: entered allmulticast mode [ 389.175231][T17076] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 389.183573][T17076] bond1: entered allmulticast mode [ 389.188867][T17076] gretap1: entered allmulticast mode [ 389.196868][T17076] ipvlan2: entered allmulticast mode [ 389.205609][T17076] macvlan2: entered allmulticast mode [ 389.211417][T17076] vlan2: entered allmulticast mode [ 389.217754][T17076] ip6gre1: entered allmulticast mode [ 389.224347][T17076] ip6gretap1: entered allmulticast mode [ 389.230261][T17076] ip6gretap2: entered allmulticast mode [ 389.237066][T17076] gtp0: entered allmulticast mode [ 389.242427][T17076] bond2: entered allmulticast mode [ 389.250627][T17076] gre1: entered allmulticast mode [ 389.256930][T17076] mac80211_hwsim hwsim22 wlan3: entered allmulticast mode [ 389.265374][T17076] bridge1: entered allmulticast mode [ 389.271020][T17076] batadv1: entered allmulticast mode [ 389.277487][T17076] ip6tnl1: entered allmulticast mode [ 389.285189][T17076] gre2: entered allmulticast mode [ 389.293385][T17076] gre3: entered allmulticast mode [ 389.299705][T17076] mac80211_hwsim hwsim26 wlan4: entered allmulticast mode [ 389.308077][T17076] mac80211_hwsim hwsim27 wlan5: entered allmulticast mode [ 389.316039][T17076] mac80211_hwsim hwsim28 wlan6: entered allmulticast mode [ 389.323990][T17076] mac80211_hwsim hwsim29 wlan7: entered allmulticast mode [ 389.331261][T17076] mac80211_hwsim hwsim30 wlan8: entered allmulticast mode [ 389.339043][T17076] mac80211_hwsim hwsim31 wlan9: entered allmulticast mode [ 389.347249][T17076] mac80211_hwsim hwsim32 wlan10: entered allmulticast mode [ 389.355668][T17076] mac80211_hwsim hwsim33 wlan11: entered allmulticast mode [ 389.363668][T17076] mac80211_hwsim hwsim34 wlan12: entered allmulticast mode [ 389.371028][T17076] vlan3: entered allmulticast mode [ 389.380030][T17076] bond3: entered allmulticast mode [ 389.385936][T17076] ip6gretap3: entered allmulticast mode [ 389.395455][T17076] veth2: entered allmulticast mode [ 389.401045][T17076] veth3: left promiscuous mode [ 389.406646][T17076] veth3: entered allmulticast mode [ 389.414181][T17076] bond4: entered allmulticast mode [ 389.419327][T17076] macvlan0: entered allmulticast mode [ 389.427583][T17076] vlan4: entered allmulticast mode [ 389.433547][T17076] sit1: entered allmulticast mode [ 389.440153][T17076] bond5: entered allmulticast mode [ 389.447782][T17076] batadv2: entered allmulticast mode [ 389.453505][ T51] Bluetooth: hci1: command tx timeout [ 389.461152][T17076] gretap0.3: entered allmulticast mode [ 389.467971][T17076] bridge2: entered allmulticast mode [ 389.475306][T17076] bridge3: entered allmulticast mode [ 389.481245][T17076] bridge4: entered allmulticast mode [ 389.490313][T17076] bond7: entered allmulticast mode [ 389.498782][T17076] ip6gre2: left promiscuous mode [ 389.503817][T17076] ip6gre2: entered allmulticast mode [ 389.511687][T17076] gre4: entered allmulticast mode [ 389.525452][T17076] macvtap1: left promiscuous mode [ 389.531316][T17076] bond8: left promiscuous mode [ 389.537924][T17076] bond9: entered allmulticast mode [ 389.544427][T17076] bridge5: entered allmulticast mode [ 389.553771][T17076] netdevsim netdevsim1 eth0: entered allmulticast mode [ 389.561062][T17076] netdevsim netdevsim1 eth1: entered allmulticast mode [ 389.568457][T17076] netdevsim netdevsim1 eth2: entered allmulticast mode [ 389.576596][T17076] netdevsim netdevsim1 eth3: entered allmulticast mode [ 389.585116][T17076] bond10: left promiscuous mode [ 389.589999][T17076] bond10: entered allmulticast mode [ 389.600152][T17076] bond11: entered allmulticast mode [ 389.606091][T17076] geneve2: entered allmulticast mode [ 389.618567][T17076] bond12: entered allmulticast mode [ 389.624102][T17076] geneve3: entered allmulticast mode [ 389.635728][T17076] bridge6: entered allmulticast mode [ 389.645405][T17076] sit2: entered allmulticast mode [ 389.671303][T17074] wg1 speed is unknown, defaulting to 1000 [ 389.673314][T17081] bridge0: entered allmulticast mode [ 389.699805][T17084] pim6reg: entered allmulticast mode [ 389.746034][T17085] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 389.780200][T17087] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.787459][T17087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.795985][T17087] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.803201][T17087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.818231][T17087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.835119][T12685] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.844729][T12685] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.857964][T17074] wg1 speed is unknown, defaulting to 1000 [ 389.888035][T17094] wg1: entered promiscuous mode [ 389.893541][T17094] wg1: entered allmulticast mode [ 389.900107][T12685] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.909130][T12685] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.076349][T17101] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 390.272021][T17056] chnl_net:caif_netlink_parms(): no params data found [ 390.282416][T17115] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.2981'. [ 390.299456][T17115] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2981'. [ 390.313176][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2981'. [ 390.497889][T17056] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.505560][T17056] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.512942][T17056] bridge_slave_0: entered allmulticast mode [ 390.520937][T17056] bridge_slave_0: entered promiscuous mode [ 390.534550][T17056] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.541798][T17056] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.552586][T17056] bridge_slave_1: entered allmulticast mode [ 390.560654][T17056] bridge_slave_1: entered promiscuous mode [ 390.649490][T17056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.666196][T17056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.757617][T17140] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2986'. [ 390.764296][T17056] team0: Port device team_slave_0 added [ 390.786388][T17056] team0: Port device team_slave_1 added [ 390.851849][T17056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.873792][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.931204][T17056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.956520][T17056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.964324][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.992019][T17056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.081930][T17156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2989'. [ 391.137155][T17156] vlan0: entered promiscuous mode [ 391.155699][T17156] bond0: entered promiscuous mode [ 391.170400][T17156] bond_slave_0: entered promiscuous mode [ 391.176610][T17156] bond_slave_1: entered promiscuous mode [ 391.182708][T17156] syz_tun: entered promiscuous mode [ 391.205049][T17056] hsr_slave_0: entered promiscuous mode [ 391.223300][T17056] hsr_slave_1: entered promiscuous mode [ 391.234115][T17056] debugfs: 'hsr0' already exists in 'hsr' [ 391.246240][T17056] Cannot create hsr debugfs directory [ 391.523601][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 391.674098][T17186] IPVS: length: 209 != 24 [ 391.680275][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'. [ 391.704332][T17188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2997'. [ 391.799223][T17056] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 391.847186][T17056] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 391.990128][T17206] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3002'. [ 392.008833][T17056] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 392.022158][T17056] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.074305][T17203] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 392.087219][T17203] validate_nla: 1 callbacks suppressed [ 392.087242][T17203] netlink: 'syz.0.3001': attribute type 4 has an invalid length. [ 392.126355][T17056] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 392.149836][T17056] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.180271][T17211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3003'. [ 392.211144][T17213] openvswitch: netlink: Tunnel attr 16381 out of range max 16 [ 392.250391][T17209] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.258203][T17209] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.385893][T17209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.404203][T17209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.620015][T17056] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 392.656161][T17056] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.693331][T15648] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.712078][T15648] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.731502][T15648] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.751224][T15648] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.806416][T17226] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3006'. [ 393.063900][T17056] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.089304][T17056] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.116505][T17056] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.171468][T17246] wg1 speed is unknown, defaulting to 1000 [ 393.178624][T17056] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.214616][T17246] wg1 speed is unknown, defaulting to 1000 [ 393.484105][T17056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.514669][T17056] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.529768][T15630] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.537945][T15630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.603849][ T5144] Bluetooth: hci1: command 0x041b tx timeout [ 393.697010][T15639] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.704262][T15639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.991163][T17289] netlink: 'syz.3.3023': attribute type 1 has an invalid length. [ 394.245191][T17293] netlink: 'syz.3.3024': attribute type 13 has an invalid length. [ 394.265420][T17293] netlink: 'syz.3.3024': attribute type 17 has an invalid length. [ 394.313940][T17293] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 394.411307][T17056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.484516][T17293] wg1 speed is unknown, defaulting to 1000 [ 394.509876][T17293] wg1 speed is unknown, defaulting to 1000 [ 395.002315][T17316] wg1 speed is unknown, defaulting to 1000 [ 395.024957][T17316] wg1 speed is unknown, defaulting to 1000 [ 395.371559][T17056] veth0_vlan: entered promiscuous mode [ 395.412138][T17056] veth1_vlan: entered promiscuous mode [ 395.658673][T17056] veth0_macvtap: entered promiscuous mode [ 395.677481][T17056] veth1_macvtap: entered promiscuous mode [ 395.683817][ T5144] Bluetooth: hci1: command 0x041b tx timeout [ 395.763138][T17056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.869173][T17056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.929984][T17339] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 395.945007][T17339] bond11 (unregistering): Released all slaves [ 396.021181][T15650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.034037][T15650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.088995][T15650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.144593][T17350] __nla_validate_parse: 5 callbacks suppressed [ 396.144610][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3035'. [ 396.144983][T15650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.570360][T17362] netlink: 'syz.0.3038': attribute type 8 has an invalid length. [ 396.579849][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3038'. [ 396.580055][T15651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.612916][T15651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.733905][T17362] bond0: entered promiscuous mode [ 396.753261][T17362] bond_slave_0: entered promiscuous mode [ 396.769434][T17362] bond_slave_1: entered promiscuous mode [ 396.792223][T17362] bond0: left promiscuous mode [ 396.803599][T17362] bond_slave_0: left promiscuous mode [ 396.818596][T17362] bond_slave_1: left promiscuous mode [ 397.015474][T15650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.053972][T15650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.186045][T17384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3043'. [ 397.361224][T17392] x_tables: duplicate underflow at hook 3 [ 397.654686][T17401] bridge0: port 2(erspan0) entered blocking state [ 397.666506][T17401] bridge0: port 2(erspan0) entered disabled state [ 397.681460][T17401] erspan0: entered allmulticast mode [ 397.702422][T17401] erspan0: left allmulticast mode [ 397.763682][ T5144] Bluetooth: hci1: command 0x041b tx timeout [ 397.804355][T17405] xt_HMARK: spi-set and port-set can't be combined [ 397.845098][T17407] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 398.118906][T17413] wg1 speed is unknown, defaulting to 1000 [ 398.153402][T17413] wg1 speed is unknown, defaulting to 1000 [ 398.229643][T17418] macsec1: entered promiscuous mode [ 398.241118][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 398.241839][T17418] ip6gretap0: entered promiscuous mode [ 398.253621][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 398.264520][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 398.275215][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 398.283996][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 398.299177][T17418] ip6gretap0: left promiscuous mode [ 398.581901][T17430] syzkaller1: entered promiscuous mode [ 398.588655][T17430] syzkaller1: entered allmulticast mode [ 398.706055][T17433] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3057'. [ 398.736533][T17435] tipc: Enabled bearer , priority 0 [ 398.745253][T17435] syzkaller0: entered promiscuous mode [ 398.750760][T17435] syzkaller0: entered allmulticast mode [ 398.851229][T17420] wg1 speed is unknown, defaulting to 1000 [ 398.877210][T17420] wg1 speed is unknown, defaulting to 1000 [ 398.886413][T17435] tipc: Resetting bearer [ 398.909152][T17441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3061'. [ 398.943851][T17434] tipc: Resetting bearer [ 399.005615][T17434] tipc: Disabling bearer [ 399.073436][T17447] wg1 speed is unknown, defaulting to 1000 [ 399.115828][T17447] wg1 speed is unknown, defaulting to 1000 [ 399.401804][T15639] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.588301][T15630] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.597724][T15630] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.655437][T17420] chnl_net:caif_netlink_parms(): no params data found [ 399.674687][T15639] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.798358][T15645] batman_adv: batadv0: Removing interface: ip6gretap2 [ 399.826713][T15645] bond3 (unregistering): (slave ip6gretap3): Releasing active interface [ 399.837338][T15645] bond3 (unregistering): (slave ip6gretap3): the permanent HWaddr of slave - ce:87:01:cb:bc:a8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 399.880439][T15645] bond0 (unregistering): (slave ip6gretap4): Releasing backup interface [ 399.889595][T15645] bond0 (unregistering): (slave ip6gretap4): the permanent HWaddr of slave - aa:37:96:33:93:77 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 400.224980][T15645] bond1 (unregistering): (slave gretap1): Releasing active interface [ 400.264988][T15645] tipc: Disabling bearer [ 400.317059][T15645] bond2 (unregistering): (slave gre1): Releasing backup interface [ 400.323542][ T5144] Bluetooth: hci5: command tx timeout [ 400.430684][T15645] bond12 (unregistering): (slave geneve3): Releasing active interface [ 400.459704][T15645] bond11 (unregistering): (slave geneve2): Releasing active interface [ 400.801651][T15645] bond9 (unregistering): (slave bridge5): Releasing active interface [ 401.079061][T15645] bond4 (unregistering): (slave macvlan0): Releasing backup interface [ 401.099419][T15645] bond0 (unregistering): (slave bond6): Releasing backup interface [ 401.110038][T15645] bond0 (unregistering): Released all slaves [ 401.270465][T15645] bond1 (unregistering): Released all slaves [ 401.414404][T15645] bond2 (unregistering): Released all slaves [ 401.551782][T15645] bond3 (unregistering): (slave veth3): Releasing active interface [ 401.561843][T15645] bond3 (unregistering): Released all slaves [ 401.709299][T15645] bond4 (unregistering): Released all slaves [ 401.732097][T15645] bond5 (unregistering): Released all slaves [ 401.880128][T15645] bond6 (unregistering): Released all slaves [ 402.023246][T15645] bond7 (unregistering): Released all slaves [ 402.161707][T15645] bond8 (unregistering): Released all slaves [ 402.183946][T15645] bond9 (unregistering): Released all slaves [ 402.335573][T15645] bond10 (unregistering): Released all slaves [ 402.410064][ T5144] Bluetooth: hci5: command tx timeout [ 402.482190][T15645] bond11 (unregistering): Released all slaves [ 402.625573][T15645] bond12 (unregistering): Released all slaves [ 402.656869][T17464] netlink: 336 bytes leftover after parsing attributes in process `syz.0.3064'. [ 402.889617][T17475] netlink: 'syz.0.3068': attribute type 3 has an invalid length. [ 402.915414][T17475] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3068'. [ 402.925933][T15645] tipc: Disabling bearer [ 402.954318][T15645] tipc: Left network mode [ 403.098984][T17480] netlink: 'syz.3.3069': attribute type 4 has an invalid length. [ 403.212429][T17420] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.220228][T17420] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.248448][T17420] bridge_slave_0: entered allmulticast mode [ 403.264806][T17420] bridge_slave_0: entered promiscuous mode [ 403.275776][T17420] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.303374][T17420] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.310713][T17420] bridge_slave_1: entered allmulticast mode [ 403.342303][T17420] bridge_slave_1: entered promiscuous mode [ 403.425283][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'. [ 403.453844][T17496] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3075'. [ 403.534495][T17499] netlink: 'syz.2.3074': attribute type 3 has an invalid length. [ 403.542383][T17499] netlink: 'syz.2.3074': attribute type 1 has an invalid length. [ 403.550910][T17499] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3074'. [ 403.565427][T17496] team0: Port device team_slave_0 removed [ 403.580129][T17420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.615343][T17498] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3073'. [ 403.625688][T17420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.753853][T17420] team0: Port device team_slave_0 added [ 403.778474][T17504] IPv6: sit3: Disabled Multicast RS [ 403.785115][T17504] sit3: entered allmulticast mode [ 403.797230][T17420] team0: Port device team_slave_1 added [ 403.914152][T17508] netlink: 'syz.0.3077': attribute type 58 has an invalid length. [ 403.968527][T17508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3077'. [ 404.015624][T17420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.023980][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.104465][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3079'. [ 404.105987][T17420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.130010][T17420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.150271][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.177296][T17420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.402272][T17526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3081'. [ 404.464673][T17528] netlink: 'syz.3.3082': attribute type 1 has an invalid length. [ 404.477603][T17528] netlink: 'syz.3.3082': attribute type 3 has an invalid length. [ 404.484529][ T5144] Bluetooth: hci5: command tx timeout [ 404.491686][T17528] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3082'. [ 404.610565][T17420] hsr_slave_0: entered promiscuous mode [ 404.619898][T17420] hsr_slave_1: entered promiscuous mode [ 404.626694][T17420] debugfs: 'hsr0' already exists in 'hsr' [ 404.632658][T17420] Cannot create hsr debugfs directory [ 404.901532][T17543] netdevsim netdevsim2: Direct firmware load for ./bus failed with error -2 [ 404.920520][T17543] netdevsim netdevsim2: Falling back to sysfs fallback for: ./bus [ 405.136873][T17420] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.252849][T17420] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.389445][T17420] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.525071][T15645] hsr_slave_0: left promiscuous mode [ 405.533234][T15645] hsr_slave_1: left promiscuous mode [ 405.791147][T17575] netlink: 'syz.2.3094': attribute type 21 has an invalid length. [ 406.566788][ T5144] Bluetooth: hci5: command tx timeout [ 407.426280][T17420] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.773564][T17607] __nla_validate_parse: 7 callbacks suppressed [ 407.773582][T17607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3098'. [ 407.825886][T17607] netlink: 'syz.2.3098': attribute type 7 has an invalid length. [ 407.865120][T17607] netlink: 'syz.2.3098': attribute type 8 has an invalid length. [ 407.916524][T17608] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 407.955629][T17607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3098'. [ 407.983315][T17608] bridge2: entered allmulticast mode [ 408.072003][T17420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.139396][T17420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.184445][T17420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.283168][T17621] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 408.326476][T17420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 408.379387][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 408.405641][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 408.436708][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 408.464730][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 408.488257][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 408.510388][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 408.535832][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 408.572059][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'. [ 408.618211][T17623] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.642428][T17623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.707336][T15645] IPVS: stop unused estimator thread 0... [ 408.999355][T17646] netlink: 'syz.4.3110': attribute type 1 has an invalid length. [ 409.024570][T17646] netlink: 'syz.4.3110': attribute type 2 has an invalid length. [ 409.416125][ T5828] cgroup: fork rejected by pids controller in /syz3 [ 409.441729][T17653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.528629][T17420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.662292][T17420] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.772010][ T5828] bond0: (slave syz_tun): Releasing backup interface [ 409.788124][ T5828] syz_tun (unregistering): left promiscuous mode [ 409.835200][T15649] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.842399][T15649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.867563][T17662] syzkaller0: entered promiscuous mode [ 409.881924][T17662] syzkaller0: entered allmulticast mode [ 409.957211][T15649] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.964482][T15649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.654277][T15650] team0: Port device netdevsim0 removed [ 410.860410][T17420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.947538][T15645] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.985447][T17682] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 411.084522][T15651] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.174408][T15651] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.225511][T12685] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.311944][T17420] veth0_vlan: entered promiscuous mode [ 411.323720][T15650] bond10: left allmulticast mode [ 411.330526][T15650] bridge0: port 1(bond10) entered disabled state [ 411.415964][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.435114][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.444692][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.457413][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.471357][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.741455][T15650] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface [ 411.760342][T15650] bond9 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 72:21:9f:eb:08:1c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 412.144359][T15650] bond2 (unregistering): (slave gretap1): Releasing active interface [ 412.211850][T15650] dvmrp8 (unregistering): left allmulticast mode [ 412.234662][T15650] dvmrp0 (unregistering): left allmulticast mode [ 412.299402][T15650] bridge0 (unregistering): left allmulticast mode [ 412.456206][T15650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.467209][T15650] bond_slave_0: left promiscuous mode [ 412.474635][T15650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.485376][T15650] bond_slave_1: left promiscuous mode [ 412.491762][T15650] bond0 (unregistering): Released all slaves [ 412.519098][T15650] bond1 (unregistering): Released all slaves [ 412.532610][T15650] bond2 (unregistering): Released all slaves [ 412.548703][T15650] bond3 (unregistering): Released all slaves [ 412.650899][T15650] bond4 (unregistering): Released all slaves [ 412.744853][T15650] bond5 (unregistering): Released all slaves [ 412.760711][T15650] bond6 (unregistering): Released all slaves [ 412.775275][T15650] bond7 (unregistering): Released all slaves [ 412.789605][T15650] bond8 (unregistering): Released all slaves [ 412.808947][T15650] bond9 (unregistering): (slave veth11): Releasing backup interface [ 412.819495][T15650] bond9 (unregistering): Released all slaves [ 412.924891][T15650] bond10 (unregistering): Released all slaves [ 412.956876][T17711] IPv6: sit1: Disabled Multicast RS [ 412.964496][T17711] sit1: entered allmulticast mode [ 413.018129][T17420] veth1_vlan: entered promiscuous mode [ 413.091856][T17694] wg1 speed is unknown, defaulting to 1000 [ 413.119498][T15650] tipc: Left network mode [ 413.207110][T17420] veth0_macvtap: entered promiscuous mode [ 413.296826][T17723] __nla_validate_parse: 14 callbacks suppressed [ 413.296846][T17723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3129'. [ 413.493952][T17420] veth1_macvtap: entered promiscuous mode [ 413.523730][T15650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.526552][ T51] Bluetooth: hci0: command tx timeout [ 413.548964][T15650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.656199][T15650] pim6reg (unregistering): left allmulticast mode [ 414.196295][T15650] team0 (unregistering): Port device team_slave_1 removed [ 414.268098][T17747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3136'. [ 414.487385][T15650] team0 (unregistering): Port device dummy0 removed [ 414.561054][T17719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3130'. [ 414.655616][T17755] netlink: 'syz.4.3139': attribute type 1 has an invalid length. [ 414.758737][T17420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.825380][T17760] : entered promiscuous mode [ 414.885119][T17420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.951948][T15651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.956618][T17757] wg1 speed is unknown, defaulting to 1000 [ 414.961972][T15651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.045664][T15651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.059527][T15651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.160300][T17694] chnl_net:caif_netlink_parms(): no params data found [ 415.217175][T15650] IPVS: stop unused estimator thread 0... [ 415.421702][T15650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.422665][T17694] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.435446][T15650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.459325][T17694] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.460823][T17788] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3146'. [ 415.470240][T17694] bridge_slave_0: entered allmulticast mode [ 415.486682][T17694] bridge_slave_0: entered promiscuous mode [ 415.545411][T17694] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.563631][T17694] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.574586][T17694] bridge_slave_1: entered allmulticast mode [ 415.591509][T17694] bridge_slave_1: entered promiscuous mode [ 415.603776][ T51] Bluetooth: hci0: command tx timeout [ 415.673877][T17792] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3147'. [ 415.703660][T17694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.724231][T12685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.732242][T12685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.823146][T17694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.950342][T17805] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 415.967991][T17805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.973987][T17694] team0: Port device team_slave_0 added [ 415.999275][T17694] team0: Port device team_slave_1 added [ 416.006569][T17808] netlink: 'syz.4.3151': attribute type 2 has an invalid length. [ 416.103448][T17694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.110483][T17694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.149296][T17694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.166326][T17694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.174109][T17694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.204974][T17694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.216062][T17813] netlink: 'syz.4.3152': attribute type 16 has an invalid length. [ 416.229370][T17814] lo speed is unknown, defaulting to 1000 [ 416.244962][T17814] lo speed is unknown, defaulting to 1000 [ 416.253992][T17814] lo speed is unknown, defaulting to 1000 [ 416.281737][T17814] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 416.371649][T17814] lo speed is unknown, defaulting to 1000 [ 416.386289][ T5956] IPVS: starting estimator thread 0... [ 416.390684][T17694] hsr_slave_0: entered promiscuous mode [ 416.399615][T17824] IPVS: fo: FWM 3 0x00000003 - no destination available [ 416.399847][T17694] hsr_slave_1: entered promiscuous mode [ 416.415645][T17814] lo speed is unknown, defaulting to 1000 [ 416.480612][T17814] lo speed is unknown, defaulting to 1000 [ 416.505016][T17825] IPVS: using max 24 ests per chain, 57600 per kthread [ 416.568207][T17814] lo speed is unknown, defaulting to 1000 [ 416.610742][T17814] lo speed is unknown, defaulting to 1000 [ 416.633479][T17836] ------------[ cut here ]------------ [ 416.639059][T17836] ida_free called for id=1047 which is not allocated. [ 416.675954][T17814] lo speed is unknown, defaulting to 1000 [ 416.688314][T17836] WARNING: CPU: 0 PID: 17836 at lib/idr.c:592 ida_free+0x280/0x310 [ 416.696421][T17836] Modules linked in: [ 416.700428][T17836] CPU: 0 UID: 0 PID: 17836 Comm: syz.1.3157 Not tainted syzkaller #0 PREEMPT(full) [ 416.710392][T17836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 416.721726][T17836] RIP: 0010:ida_free+0x280/0x310 [ 416.727393][T17836] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 21 50 0c 00 90 48 c7 c7 40 ce 94 8c 44 89 fe e8 11 30 47 f6 90 <0f> 0b 90 90 eb 34 e8 65 13 84 f6 49 bd 00 00 00 00 00 fc ff df eb [ 416.747689][T17836] RSP: 0018:ffffc9000acd7880 EFLAGS: 00010246 [ 416.754382][T17836] RAX: 3bafb9ffc3b02700 RBX: 0000000000000a06 RCX: ffff888025e05ac0 [ 416.763395][T17836] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 416.771411][T17836] RBP: ffffc9000acd7968 R08: 0000000000000003 R09: 0000000000000004 [ 416.780067][T17836] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: 1ffff9200159af14 [ 416.788557][T17836] R13: dffffc0000000000 R14: ffff888031ee5c00 R15: 0000000000000417 [ 416.796903][T17836] FS: 0000000000000000(0000) GS:ffff888125d3b000(0000) knlGS:0000000000000000 [ 416.806064][T17836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 416.812775][T17836] CR2: 00007ff30ffacf98 CR3: 0000000026dfc000 CR4: 00000000003526f0 [ 416.820797][T17836] Call Trace: [ 416.824173][T17836] [ 416.827146][T17836] ? __pfx_ida_free+0x10/0x10 [ 416.831933][T17836] ? namespace_unlock+0x486/0x760 [ 416.837070][T17836] free_mnt_ns+0x52/0xe0 [ 416.841463][T17836] namespace_unlock+0x529/0x760 [ 416.846458][T17836] ? __pfx_namespace_unlock+0x10/0x10 [ 416.851891][T17836] ? free_nsproxy+0x3e/0x350 [ 416.856597][T17836] free_nsproxy+0x3e/0x350 [ 416.861103][T17836] do_exit+0x6b0/0x2300 [ 416.867105][T17836] ? cgroup_freezing+0x20/0x350 [ 416.872064][T17836] ? __pfx_do_exit+0x10/0x10 [ 416.876758][T17836] ? cgroup_freezing+0x20/0x350 [ 416.881654][T17836] ? cgroup_freezing+0x20/0x350 [ 416.886846][T17836] do_group_exit+0x21c/0x2d0 [ 416.891488][T17836] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.897334][T17836] get_signal+0x1285/0x1340 [ 416.901925][T17836] arch_do_signal_or_restart+0xa0/0x790 [ 416.907555][T17836] ? unshare_nsproxy_namespaces+0x145/0x170 [ 416.913570][T17836] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 416.919860][T17836] ? ksys_unshare+0x7b7/0x8c0 [ 416.925006][T17836] ? exit_to_user_mode_loop+0x40/0x110 [ 416.930620][T17836] exit_to_user_mode_loop+0x72/0x110 [ 416.936014][T17836] do_syscall_64+0x2bd/0xfa0 [ 416.940663][T17836] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.946145][T17836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.952262][T17836] ? clear_bhb_loop+0x60/0xb0 [ 416.957405][T17836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.963508][T17836] RIP: 0033:0x7f2d8ab8eec9 [ 416.967968][T17836] Code: Unable to access opcode bytes at 0x7f2d8ab8ee9f. [ 416.975181][T17836] RSP: 002b:00007f2d8b9e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 416.984345][T17836] RAX: fffffffffffffff4 RBX: 00007f2d8ade6180 RCX: 00007f2d8ab8eec9 [ 416.992394][T17836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 417.000688][T17836] RBP: 00007f2d8ac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.008756][T17836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.017195][T17836] R13: 00007f2d8ade6218 R14: 00007f2d8ade6180 R15: 00007fff495a9f78 [ 417.025314][T17836] [ 417.028391][T17836] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 417.035704][T17836] CPU: 0 UID: 0 PID: 17836 Comm: syz.1.3157 Not tainted syzkaller #0 PREEMPT(full) [ 417.045104][T17836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.055188][T17836] Call Trace: [ 417.058576][T17836] [ 417.061521][T17836] dump_stack_lvl+0x99/0x250 [ 417.066146][T17836] ? __asan_memcpy+0x40/0x70 [ 417.070778][T17836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.076014][T17836] ? __pfx__printk+0x10/0x10 [ 417.080639][T17836] vpanic+0x281/0x750 [ 417.084740][T17836] ? __pfx__printk+0x10/0x10 [ 417.089353][T17836] ? __pfx_vpanic+0x10/0x10 [ 417.093883][T17836] ? is_bpf_text_address+0x26/0x2b0 [ 417.099121][T17836] panic+0xb9/0xc0 [ 417.102876][T17836] ? __pfx_panic+0x10/0x10 [ 417.107359][T17836] __warn+0x31b/0x4b0 [ 417.111417][T17836] ? ida_free+0x280/0x310 [ 417.115800][T17836] ? ida_free+0x280/0x310 [ 417.120213][T17836] report_bug+0x2be/0x4f0 [ 417.124580][T17836] ? ida_free+0x280/0x310 [ 417.129035][T17836] ? ida_free+0x280/0x310 [ 417.133439][T17836] ? ida_free+0x282/0x310 [ 417.137799][T17836] handle_bug+0x84/0x160 [ 417.142062][T17836] exc_invalid_op+0x1a/0x50 [ 417.146599][T17836] asm_exc_invalid_op+0x1a/0x20 [ 417.151464][T17836] RIP: 0010:ida_free+0x280/0x310 [ 417.156423][T17836] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 21 50 0c 00 90 48 c7 c7 40 ce 94 8c 44 89 fe e8 11 30 47 f6 90 <0f> 0b 90 90 eb 34 e8 65 13 84 f6 49 bd 00 00 00 00 00 fc ff df eb [ 417.176048][T17836] RSP: 0018:ffffc9000acd7880 EFLAGS: 00010246 [ 417.182137][T17836] RAX: 3bafb9ffc3b02700 RBX: 0000000000000a06 RCX: ffff888025e05ac0 [ 417.190124][T17836] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 417.198202][T17836] RBP: ffffc9000acd7968 R08: 0000000000000003 R09: 0000000000000004 [ 417.206193][T17836] R10: dffffc0000000000 R11: fffffbfff1bfa138 R12: 1ffff9200159af14 [ 417.214192][T17836] R13: dffffc0000000000 R14: ffff888031ee5c00 R15: 0000000000000417 [ 417.222210][T17836] ? __pfx_ida_free+0x10/0x10 [ 417.226924][T17836] ? namespace_unlock+0x486/0x760 [ 417.231982][T17836] free_mnt_ns+0x52/0xe0 [ 417.236313][T17836] namespace_unlock+0x529/0x760 [ 417.241194][T17836] ? __pfx_namespace_unlock+0x10/0x10 [ 417.246588][T17836] ? free_nsproxy+0x3e/0x350 [ 417.251296][T17836] free_nsproxy+0x3e/0x350 [ 417.255750][T17836] do_exit+0x6b0/0x2300 [ 417.260065][T17836] ? cgroup_freezing+0x20/0x350 [ 417.264945][T17836] ? __pfx_do_exit+0x10/0x10 [ 417.269645][T17836] ? cgroup_freezing+0x20/0x350 [ 417.274512][T17836] ? cgroup_freezing+0x20/0x350 [ 417.279393][T17836] do_group_exit+0x21c/0x2d0 [ 417.284018][T17836] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.289254][T17836] get_signal+0x1285/0x1340 [ 417.293807][T17836] arch_do_signal_or_restart+0xa0/0x790 [ 417.299380][T17836] ? unshare_nsproxy_namespaces+0x145/0x170 [ 417.305296][T17836] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 417.311469][T17836] ? ksys_unshare+0x7b7/0x8c0 [ 417.316227][T17836] ? exit_to_user_mode_loop+0x40/0x110 [ 417.321740][T17836] exit_to_user_mode_loop+0x72/0x110 [ 417.327080][T17836] do_syscall_64+0x2bd/0xfa0 [ 417.331694][T17836] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.336912][T17836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.342995][T17836] ? clear_bhb_loop+0x60/0xb0 [ 417.347706][T17836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.353634][T17836] RIP: 0033:0x7f2d8ab8eec9 [ 417.358072][T17836] Code: Unable to access opcode bytes at 0x7f2d8ab8ee9f. [ 417.365194][T17836] RSP: 002b:00007f2d8b9e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 417.373807][T17836] RAX: fffffffffffffff4 RBX: 00007f2d8ade6180 RCX: 00007f2d8ab8eec9 [ 417.381928][T17836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 417.389966][T17836] RBP: 00007f2d8ac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.398064][T17836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.406068][T17836] R13: 00007f2d8ade6218 R14: 00007f2d8ade6180 R15: 00007fff495a9f78 [ 417.414177][T17836] [ 417.417594][T17836] Kernel Offset: disabled [ 417.421978][T17836] Rebooting in 86400 seconds..