last executing test programs: 3.503137015s ago: executing program 1 (id=1584): r0 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000340)="7155b506edb24822da43f6c2a0b5ce2b40b0ec718aca10ae53cc28d1450e844eb4ec512f6968cb25f7c89e54f319df5a500000a467048e926b327c99c786d163734c9ded0be5ea02e4fcc7bb7b6bd0fd2fca27a4e17c3ac1a71c19bfd6770cedd6df3172c534213f8afd48cf028b9188dcc2fb1d9abadccdd4e6b964e249507921d2236e34735722ea7130954ee997f67950c1d7477fee42cb0fdb885c8b18258ba79d179eba5279ce1fd01e325e2516af7096b27ed72b6706d973a76622ee87229dee597ca72a5375427806ab1e487a72461a29b59ee5a37dab21e4ba03a7c7e94500"/241, 0x155) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24}, 0x94) 3.25988407s ago: executing program 1 (id=1586): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xac}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r1, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632f77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r2 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x3e, &(0x7f00000003c0)={0x0}, &(0x7f0000000140)=0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, r5, 0x1, 0x300, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="ebda8f0a", @ANYRES16=r5, @ANYBLOB="000827bd7000fbdbdf2510000000700006800400050004000200040005000400020008000100040000004300040067636d28616573290000000000000000000000000000000000000000000000001b000000eb31e15e23c1390cb056dc293d7592a633970605e7a252ea0093170008000100800000000800010080ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000700)={0x0, @dev, @loopback}, &(0x7f0000000740)=0xc) sendmsg$xdp(r2, &(0x7f0000002680)={&(0x7f0000001340)={0x2c, 0x6, r6, 0x14}, 0x10, &(0x7f0000002640)=[{&(0x7f0000001380)="aa0faf2c6dcbed3870feaa289e9a18f1eeef3a551a636632c0fbc8506068a87a60152b1e683a12feaabda9b3967085f0146f52ffe15eecebcac03f54e131ac9efd6a5d6ba44cde1b19c737617195081bbdb78109191cb1208e617b46778ea97ea87aa7296bcc36b8a9329c74a2c33b082cc9e79f469e83454a91072b09b4280c21d2488da733a3857aa630457a740bc18c22c375f036dcee2fb17ffb2da293a2f7daf5401c0ca9aa893f0703ecd0247fae974a7e541cfc3785e1645fd2421832cdcb3a39d34f536a21ef7d9fb255a50be56066583389d3ee3ce468b80a", 0xdd}, {&(0x7f0000001480)="510199b75add6d29d624f9f18db55da7d4612b388cdc1220c61bda9993584092a53f0208ff94f1a7c2df9df0776452ceec82cc328679aa848dda12dea82f8a010ea1a98fcb9e1963d37ea2e02b3958810e7d2a50729f3d1a385dd3fc8e481d71f79c7b91f443a6445e72833f8102eefe5ee75c6cfd0d0d612fbe92f401676e1560a732cc35769f97912ad7c020ce33e4a110bfa45ecaee11062589af86455bf4c94325ee93f5ef12a9c3fb627c7ef00e039be1f58dc84ea79a8f0a6c72d5b4467efb85f5c5ebf6e62a8de33b4d40dde9aa7a0c450c5b4162d0fb955c48806403036069403bf74e2d24ede46505a52892c12be3e37207ccd80532fbbc6be6bdf7118b4078324b41d6e8b4bbdfc3f9bcdd09ad48ab157bd0e801b636cb41fb044a905f48b53ef0b801611ddd604aaa0962c48b34c2ac7acdf06a4f77ad344fdd9fa89d8da968c8126f1271e6a47ddf0025e8f3bbe40640a1660af0e1acf956fe24b5515e991239db3515090f5c3464d70d0fd372b68a870b66a6c57e93f52ddf980e0d13ca37eb467d60dae7318f1a585c049afd4d2f9ca96093597b3829c84993f9cd2e27df71c998ceafd9201f0c366f641b43064d7fe1b9d3e917dc94291ced78600786416ce3686ed2f07b017af172fdff049e12770c8448a5d35bcaf7bf856351a377124213eb956d70371f838990cdea00afdebf3d98bf2b18ee192db24a650ab88a16168d477e3678753077a74a19d40130ae0e39708868afe882579bb3b7ffee65b7be255a2709ba239b657bb2e2dade9cd23a283ee2c67db0a362ddd72efec50711ffe4efdfe8ee2902d95bc3000ff5c1333cb64f537b29f01218c1512681aa15c27469788a04e16f6156fdd285e08aea75245aa250efa3a3b475f77d4c12dc724b7c2ecd4643b5f5f847fbcc1bdb3f9943e26fd35872b89061191b66fead2ac8eb49ff7dde353aa671814a5711241da0c71c8b01f6a2ac67683c7d2d0cdfad3749f4c4402c562899df82287ad4d5cc04934ece132601c7f2e27090511930cb3915b10e9daf2066f42afddb609523f6024200541a111f1cf67d7a7852d4f2d993a5ced1e65cba8e956d093cb5e546ff465365bd28d688a2ea4be4be25459fcac71ca5f564fe6ca4fd295f40462dc344fac0f921f655bd6503a400687e134b1a199420684c2cc72b8256cbf59f0211e1380fded8e921dba45a0fc0d06c4f4087270c74139f030f5aede9cff5cbfe6f2dbf91925c6b2ec1cf226b66a18d31ce95c8db2e25bbbf2e4fee4dbed7bb0881d488ec186d991dbdf0ea45d5e7a469a984a862565182453f163670613f0359ba9231088caf0a6dc0e233fd6fa6ffa96fbd2fdaa252a00b06fee1cb3f498d017e9638be555a6a05aae91dc6be1b3688e7a004efdacc2eed0e32560c3bcc95ec167dfbd6be11a2f72a588fbc7391d52dc44ad5730b9822caea3f3b03b3eadc6e18f927138688a4cf739723be89f7b515eccd41b337cd2cfac704a4653c56bb25493ddc3e292a3d09d1c76ef4e9e5a498d13b573dd4e4b663c6f584872d91366913fbf9d8d1b9277845b545b008165aa9bb9cf84f9c26571f9a50d5d1b70aea415071363646e59c08b2f7dc448583adcbedd4e57eb7ed8474e9e46b88e61983680f6b6703036d08813ddff2512b9605b9ce89e588d0084d810be7f3c3a199e8b35e6bb8e519a5a5fd6e2f294f31b2668503d055a572053a0f4f2f4489fb422be0345a33533444a28fafa9b356c2bd969fdef0e1b4ed23a1aebba0e165c28b3611c881e4e65fae25a0a69e937028a1cb4317de6845d53befd831d1c91107cba3fa4a6511f2fe0d8ec57652a77881e1f7bc1b4f421bd8c6b4faf80d76a5e604cb8ae1f16090814af42dc1b9e714f68d70ecf183528d4dc6d95d70c5f16cd04a7ac78fd47e5791eef5d57fbd72feff80652842a6a0c7aab815e207da234fecbdfca1a901f05d0dc4fce0c2859bba8fdd4f8a0b188edc2babe309acb0203c85cbb17010e794de9fae4241d9ec886cf0642ccf832900886c5099cfacbf35be46ca99179b0698c361ba2a282565f7b3940de8293a86772df9b8a8b4585c19f844fdb1d5b3c361e702dd34fbdf729aab2a8974fa76fd356279f004d1df9df7722e7ec6187467ddfa2186405f9fa5e6b74d66f4e09670e33a38e1f364b7dc0ef4af2cfb85d548e7f5f4e0a9b0ba64cf39b7077512b77a40b4449e1894c4581ee7c10fe27552530e987643cb5fe416d334c11c8cb32be6e13b5daf38025f18c622e18b7a8669ed59119eefbd04b5008265fea5783f12644789efb4b8e015bbc026e9dcee7d216aba27504e8789792a99ac46a1d3e96eebb4272b39bfc4e467ead8104b0299c7e756b70668b5b5d01ba50a21296483ac672569c3561209365e73b6fd26ce3fca7c02d24194c8de85f2703ed5a17454b4945535e9b8d9c478fa36afbe7f4e399a71bcbe1296c15bac35a19f7bf2c99ea9984118d587521ddf4bfa81c4aef18465dd0139cf817141b0d2ef2208333894a159f0ad026e074b47926987513519534b4e56fce0dedf6294e02b40a715b2ff552aee5afa2eeff8dfffeeca7be3e7a96cebcd74f9e72ec73e77aee1a458aec1663308fbbb18f186ffc67c95bff82e54350fcc40e98250dea1f388efc4adce9165d2322f4c8ec7efd67f118a30a1a0c3a4235745967e7a2f33bc334107e0980acd648692ed04498096efd07fb1122cb5dacf7b36721f66807ecc7ce0658137f41c1a75a47ee0c6257bc28875549cf1f3572abeb657b82c92c6a95d7336624f11e66b44ac8a5776cfb9a8415dfcd1421d56a4f162fae6989c4914b5c68c0e095a51294de769f69f6e0ccd71266b2d62d9863e76e1c717c82c0a68b7ebe6f07d75ad65666e8969511e01e69135eca14bd39b3a1d51672c962db13e46fd95395e54d9c37b50b5899237beaed8703e59eb65c3b712f1372e2acf6a7aaa1953efdd5da7a24e4665fdb80e6535eadd5f6a702328442d2a81fc77902be67ec9fbb4d8c4c5184a0522dce707bbafe8371bc033a4da4cc8260ff63e8254a5b8c991a5b3583de5d89be4af133e8751a4f550ea56ea5edbfdfdd5b9642e966a24919c3dc6579bbb0ad8e5aa22c69944ef5d6ce007a0e1762c14933be47b25fd27861bccdb03589eb4ae6b1099414d87cf464f25e0717ba09295fb12e1f0fa525587fecfbab1080bcc1d9cb9ab7d0334ecc5118fa7d142a7e053501eab708ab1d79250cfb00f40aba73937d921ff8a7e1fb411b42f47f2b037a8025248d710712466d661f6ff67f070070941f00f28e8ed057de472f9c596818ee677e53e6c604d546207f895fd04d0e7788a4c0a1a64fb6ec74573423ba8dc1ec8d63f69e15457f21197ff117c18f130998947be23946ecffe150823131c152ae3023f7be8e7f08f4dcdc088cfc8a6c355ffef1e82427034ad784f20430a5ad182137751b63632494dffabbd1d66d7b815c74063f412ffe489ca92fb6767fcf45a3689c3b92133b30b3a716c7313a579a25b2bbbfa37875828bb8f8027afe44b2ce53fccfe81c8d726e82fadd602338099459277e0cad206992b84958084413e3c023a29497f1552464883c4ecb74c5f341644263312272b2f41c3073afe62fff2636be7a8e7f1561761c516b2365cc1ff7922018051ce2038197e4ca459536aeea2dd3a23ddae7a13873ec422137eeb8586e6f10bde87b882c5e07ed373e597ff41b65673d24fe15f44ba21a8a11666871af5404f728a44935c6b9a4c996a595d30b6f9fd699203085d69e2e68f6ccbb47539fd29c1582ee938338340e2badef27fce59992d5bc4248ad6f6c39251bfcf3b22dd86a01392b4bd22d4014b9158b58d576c4a72dbfb98618f5714b16c1fd1413e4473a2594f743edf4bb93b3ab56fe1de7f61b30118fddc14cc65ff4bc9fb3f23c71ea27619c27cd28d89d3ff093afd7328e2045b6e4460831f518b5c27e85fc9d36d38dd81324ee9643a18cbdf9b18916a245b9943f80b451ba6efadcd0f8ca5b86e782d417cf8d341b745cc58d4e16a1c54d5d9cdf0f3ca87577076ef23991fe16f10a3c009bb59806c0367ce0a31f770a3e371d88832d5212a7bad1d70214040d4928661968e8cadd1df4919b8d0f106b274d961a5895cd28bbca1739a4d3fdee1ea6f10e77b572f78681d534399b4a65e7716bb35e1cd308810ca32693e89e9be949b220a98cd119f9fb01a950ea40331de922529b3cf9fecf27c2ae2fd4b7a01b841da10a084a2732adc502110bd262c6331a61d34c7ae1460fe90b45e0060c2d1e8ae914cfc57d7bfd1cddc7291d9fe50ebc3186d39f0f4608c15d07a61673be1e8e439d65bea874e80b75e722283f5a1ece9bca4ba5c78e0916e3bc6d48ca1acb3c2ff878c6cca8a3bd9b24e58a33937505429aba5a943eac5659d66594ae626dc73f974884b0b99afb3f25ec269618462ea098c804538b8629be54e572a83ca0ea0194b3a0f1f8c7a9f81db08e928c6e99ec35ba43fe42ea14993dad171578095117a24d6002bde268f16788863bb8f658297253f7a43f654a2da298bc085e5309880165fa1a46ea7c9741f94fdbb0e76fb67c4b975b3b50538348b4ff476bc232681944d1b39564cd95a98f649e493bb4a387a826b31e0f590c55b0ee7e784921adf50b80790cf3ff00f83b8998d1e950c386743bfe9297fa009ff4f177912e39f803b423b3b85b941a228e6acda17dd8146c92d6f9bf46d51f99cb696254ef161279bf07498b295015019463540a3c5b09e1354f26c15533619d6167745af5012d1fb392f7d43f40063118f3b4e419520d37c94dad767c19812bb3130a23f069438f2f1ba5e0497fdb477b97c861d0e07ac5f67e0fecd5a892c2794776255076596969d5c84b086752afdf72647314e850445ab2e71a2ce4a28365af7735f506e3ef1a6ab7daac55ed4d1992ea3f6bdb9cb56378a1c518b18ebb460698f42700d89f3728b55fccfbd08259101684f1dc9b0de67d8d8dacae7279a77d73453a4a3c58fa9fbd34f34382a7a016c5efd3fc7fcac8040185a02a82f996d762e29419fa40579e25f9a4314aeae0281f60c370d5250da2f2eb8b09b3eeea2e8641bf2ed22cb6ba19978448e62b6c2e2f956f50e95ef4a04d49642495f507a0807285156fd9a6b2cb23de330a8aaaf14c8317369800bec2e8f0a58c47ac578ca1d3726cff72e661b28571f1f0a353e27d28f28c238f34f6a9af072d3c488035b2839df0d8e38cb326a39a60cd885caceafb2aa31113c40e0464a1624dc8347dd4c24a447fa8d90b7c72155c0a9eba0bb7cd64959fbbe36de63e046aaad2cfc1cf9b297d7040565571796f10df4f39e882f79e033692e3256baf7466298d997e982fe6197ed86df93b7ff69e160affd336799d63cc80509edf227f20e61b63b87518f95c0de5c4e25aebf2476c8c4972885a524a8645e7b2c9864d278a0fea2783d1a32b8a2a06b13857a910a333437877b20652a68a5369d818f080ae9709ea9678b71d45e4ef6dad4148752cd18e907269d358abe405a545531dded2ff8c22926abd1f4a4c24628b3484bfbec617153e1fab86c98249e021095a918bbc1cb6475c3f0505e2867e71c30f1c2ec0abe44feeeea7d20e32a3747be70c0e2eefc107effc57b2d4a6bbe243a4a79356bbe951fe24478c48e67681f89b9687cdb1b43fa826b814bec7995e2fbdefa2266a8833a07ba43366ce5642471201d34896b00de37de77ca068bb706406c715f8fffdf1ad08366dd99b5", 0x1000}, {&(0x7f0000002480)="4a9217baa77192b707142d6eb18797b786c6e0fbe5df7d0f48601615e66a773ad80f2b282d266bf5b2ae9cd6ead0286722da9e31ff0bc85be3e396097843ee5061b8a4ab0c6bdb20c32bba12a00aedb6c73384ebddfda6a6536d81df8e0e35d6bcb7ec3a8f1831673dd9903723b9ee99468c9b327ab9355db824447ff174e064e48aea8f49", 0x85}, {&(0x7f0000002540)="e8da3704c6377a54240bcf7da4c4bb6ad1863fa82d3c7e5f7a51136612c56c4f44e8188b0fdd742bee196b9203c442f16945861978fac87cffc43fae35dccc45b13ba72baa90bf3ea8c49dba02eed22345a4759b57148555cfa38326c1d1bc1915487c019e509ecb7df9a3ff571ab38868efb30be7d1011c6548f4a66d4c03bf187ef36e517d728b45f37db7752348db1002d3634d1568dd6234f2dc18de9215e64d667c6dfd016848cc03c9b15da04c291bddcf2da4c76fcabab4351a810929f3d16a769c30435831c168a2de7305b15c8b31", 0xd3}], 0x4, 0x0, 0x0, 0x40840}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000002351a9e7f796286ea89fd221a41ba5079a53e77f32846bff8592a697854bce1e06f112d1e2b6f9205f8e25a46fd307de9c0e572ac34b7f70a30539a809418f6e8764bd3eb6f3d1929098c31642a5f8ec0afb2e4b917380e99a0763e58336cdbd0ecd55da9a81e7683b6d9ddc922621b8940b71532894c8379e391abf11dc9ec2291373416ea0e555edd4ab281b84b91923efd339cb8532ee09654ed5b89c000000007cdbe15f8be05284230c3a7e7b42a4a96c7a51920fb76d9fe8cc9e", @ANYRES16=r10, @ANYBLOB="010027bd7800fbdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002f000b0005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000001280)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x1, 0xfffffffffffffff0, 0xfffffffffffffff7, 0x0, 0x5], 0x1, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) sendmsg$nl_generic(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f00000010c0)={0x1a8, 0x27, 0x400, 0x70bd28, 0x25dfdbfd, {0x3}, [@nested={0xb7, 0x4f, 0x0, 0x1, [@nested={0x4, 0xb3}, @generic="7b9584d2dd78fb15e1f66c9e1839d53e1558b3ea22cd22bbdb09b6233cdd9f88e35b373e5d744d7cb692e78557f83c7931dbdb77d55b29c18366f1969fdef9ffc4224d0d59dbc07d7cc59ab6eb6125ce573fe845d3576b6e249ea6397c6a79747975024b6ef67498ea64ed75a8c6a1196019c206b481393b58b92f8f8a6a51fd2196346e353f8d23d1becf112502d778ae8583562b88b3a898cee4d5f94b8996c32e23daffd3115ea961f36c92f7d2"]}, @generic="671b1ca90853de8fb0efe8f0ba121a4462326c138ca728ad9daca21fdad4ffdcfcab8065b2d240a1f6b5d3d752d42baa447c1096f7f5ac6e50588a23dec8e1d008bc164f632c2a59f814f91f3c8a6a549d210fd8bd835a0bde97546a13348091efe81db2ba547584b6fda1bda617dad9f0d9941d1524533703073ab31553dab2aceb06870b3ef461475873a7c2ff2d20bd52c0e9f20f9168c18214a4cbbca0f5d90d44e97b4a2c5d82e6709c7645da57a43a226744fd345f21da4d7c", @typed={0xb, 0xef, 0x0, 0x0, @binary="f3ae518e647869"}, @typed={0x8, 0x9, 0x0, 0x0, @pid=r3}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x9}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 2.919152734s ago: executing program 1 (id=1589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) (rerun: 32) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x8, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r11, 0x1, 0x34, &(0x7f0000000040)=r10, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x20, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x14, &(0x7f0000000440)=""/20, 0x41100, 0x19, '\x00', r8, @sk_lookup, r9, 0x8, &(0x7f00000004c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xa, 0xd704, 0x4}, 0x10, 0x0, r10, 0x4, &(0x7f0000000540)=[0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x4, 0x10, 0x7}, {0x4, 0x3, 0xc, 0xb}, {0x2, 0x4, 0xb, 0x2}, {0x3, 0x2, 0x8}], 0x10, 0xc8c}, 0x94) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) (async) close(r13) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="00000776aaaaaaaaaaaa"]) ioctl$SIOCSIFHWADDR(r13, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.549697132s ago: executing program 3 (id=1595): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendto$unix(r3, &(0x7f0000000100)="5afdf707929673e729861304b9a19a0e55dad6463992828c8dfaea1634c26d31da9bb00270bdeefdf7637fd3b77b53317d59c9b625f981d242f0019ffae07bc21fe5c6fd25b0f3a7788315d8fa242ce069dd133742de3b9c6576a2ca6932e0fa3b549549f4f582db646a710a596c13643b1e80d63bd2f1af2d814c2376c120dabac01e7f2c1cc385fb67c047c5060c102ded5e816f62959f147a6e5ff772d0e7c1addc09ee050277d0947caf72a48380adcf0a", 0xb3, 0x81, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='=\x00'}]}, 0x1c}}, 0x20000080) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r7, 0x1) (async) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000080), 0x8) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x5, 0x9}) (async) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x5, 0x9}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r10 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000001740)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000001680)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/127, 0x76}, {&(0x7f0000001300)=""/228, 0xe4}, {&(0x7f0000001400)=""/59, 0x3b}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/63, 0x3f}, {&(0x7f0000001500)=""/60, 0x3c}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000001580)=""/205, 0xfb}], 0x9}, 0x40012100) (async) recvmsg$kcm(r0, &(0x7f0000001740)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000001680)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/127, 0x76}, {&(0x7f0000001300)=""/228, 0xe4}, {&(0x7f0000001400)=""/59, 0x3b}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/63, 0x3f}, {&(0x7f0000001500)=""/60, 0x3c}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000001580)=""/205, 0xfb}], 0x9}, 0x40012100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x9, r11}, &(0x7f0000000140)=0x20) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x9, r11}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000001280)={r11, 0x1, 0x30}, &(0x7f00000012c0)=0xc) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r10) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001780)={0x9, 0x3, {0x7, @usage=0x101, 0x0, 0xffffffffffffff37, 0x1e5, 0xffffffffffffffff, 0x8bc, 0xf98274, 0x40, @usage=0x6, 0x9, 0x10001, [0x9, 0x39, 0x3, 0x5, 0x3e, 0xffff]}, {0xfffffffffffffff9, @struct={0x6d, 0x8000}, 0x0, 0x0, 0x4, 0x8, 0x8, 0x4, 0x82, @struct={0xee32, 0x3c}, 0xffff8000, 0x100, [0x5, 0x8, 0x1ff, 0x6, 0x4, 0xa552]}, {0xffffffff, @struct={0x1000, 0x9}, 0x0, 0x7f, 0xffffffffffffff00, 0x81, 0xf, 0x1, 0x0, @usage, 0x10, 0xce53, [0x4, 0x60, 0x6, 0x1, 0x4, 0xf91]}, {0x27ccd3f, 0x5, 0x6}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001780)={0x9, 0x3, {0x7, @usage=0x101, 0x0, 0xffffffffffffff37, 0x1e5, 0xffffffffffffffff, 0x8bc, 0xf98274, 0x40, @usage=0x6, 0x9, 0x10001, [0x9, 0x39, 0x3, 0x5, 0x3e, 0xffff]}, {0xfffffffffffffff9, @struct={0x6d, 0x8000}, 0x0, 0x0, 0x4, 0x8, 0x8, 0x4, 0x82, @struct={0xee32, 0x3c}, 0xffff8000, 0x100, [0x5, 0x8, 0x1ff, 0x6, 0x4, 0xa552]}, {0xffffffff, @struct={0x1000, 0x9}, 0x0, 0x7f, 0xffffffffffffff00, 0x81, 0xf, 0x1, 0x0, @usage, 0x10, 0xce53, [0x4, 0x60, 0x6, 0x1, 0x4, 0xf91]}, {0x27ccd3f, 0x5, 0x6}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001b80)={r12, 0x8, 0x0, [0x2, 0x84, 0x1, 0x6, 0x5], [0x4, 0x4, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xc, 0x2, 0x4, 0xc7, 0x6, 0x6, 0x6, 0x2, 0x2, 0xfffffffffffffff7, 0x4, 0x3, 0xd, 0xfffffffffffffffa, 0xffffffff, 0x1, 0xffffffffffffffff, 0x4, 0x7fffffff, 0x5, 0x7, 0x2, 0x5, 0x2, 0x3, 0x4, 0xb6de, 0x7fffffffffffffff, 0x1e4, 0x8, 0x5, 0x1, 0x6, 0x1, 0x3, 0x0, 0x6, 0x9, 0x5, 0x2, 0xd92a00000, 0xa4d, 0x1, 0xfaeb, 0x10000, 0x5, 0x8000, 0x2549, 0x6, 0x10001, 0x4, 0x5, 0x1, 0x8, 0x8, 0x8, 0x0, 0xffffffff, 0x7, 0x0, 0xff, 0x2, 0x2, 0x1, 0x2, 0xfffffffffffffffd, 0x4dc1, 0x1, 0x0, 0x6, 0x100000000, 0x7, 0x3, 0x9, 0x5, 0xfffffffffffffffa, 0x18, 0x2, 0x5, 0x8, 0x1, 0x3, 0xcc31, 0x7fff, 0x5, 0x1, 0x4, 0x7fff, 0x3, 0x0, 0x0, 0x8, 0xe, 0x8, 0x1, 0xda4, 0x1, 0x70f, 0x7fffffff, 0xffffffff, 0x0, 0x3, 0xa, 0x2000000000000004, 0x0, 0x0, 0x5, 0x2, 0x6, 0x9, 0x7fff, 0x63ca, 0x8, 0x6]}) 2.446279278s ago: executing program 1 (id=1597): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2041) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0xac, 0x2c, 0xf07, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0x0, 0x7}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x101, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x5, 0x100000a, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0xf}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x9, 0xa}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r6 = socket(0x2, 0x80805, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={r7, 0x49}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x1, 0x6}, &(0x7f0000000200)=0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) (async) sendmmsg$sock(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) (async) shutdown(r8, 0x1) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="12000000430001"], 0x1c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r12, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) (async) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300600000040000000060a0104000000000500000008000b400000000018000480140001800b00010074756e6e656c0000040002800900010073797a3000000000140000001100010000000000000000000000000a00000000"], 0xb4}}, 0x0) (async) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES16=r10, @ANYRESDEC=r1, @ANYRES32=r9, @ANYRESHEX=0x0, @ANYBLOB="afe90503ef93cdab4a36c9faf72e8617a71ec04b73bd79247ee8eaa891fc4c513d3709d538fa592a784ec36a161a2074f69ab1f9d16906f446509ad187306770d477917b2db92b30eb253af20ec7fba0ba677213aa4156770e5fb72e96da3c98e83a558c4a16f11ddc42afbbc301cfccb869bfcddc4efe6f9ca83fb8ea3fbd95b83a3041a6da5ff196053934863e277aea63ba01c2a1eca1c4c92a8e27ec456a249cfde2a8c870b59520a74b37ec36cef357d928332e7a7b200a73aa673368de61006be2cccc69eab919ad389e98715e8557b56924033e4b8c", @ANYRESOCT=r10], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 2.125487995s ago: executing program 3 (id=1602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@remote, @dev}, &(0x7f00000000c0)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x200000000000011, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) 2.026644507s ago: executing program 1 (id=1605): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0xffff, 0x3}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @empty}}}, 0x84) syz_emit_ethernet(0x16d, &(0x7f0000000040)={@remote, @local, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @igmp={{0x19, 0x4, 0x3, 0x7, 0x157, 0x68, 0xfff2, 0x6, 0x2, 0x0, @local, @multicast1, {[@end, @timestamp_prespec={0x44, 0x4c, 0xf, 0x3, 0x5, [{@private=0xa010102, 0x8}, {@broadcast, 0xef3}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x1}, {@multicast1, 0x783}, {@private=0xa010101, 0x753}, {@loopback, 0x5}, {@empty, 0xb0}, {@private=0xa010102, 0x200}]}]}}, {0x14, 0x7, 0x0, @broadcast, "d885b20b11604adcc82ffbf7b91f3def3c5caf09e988bfecf006aa52aa918c23ede2980d46c3b6d99418229b88e16c65bbde45942e81862e3d5f386113535a8dc95304c531b04d17c4fbe590bbb9bf02020d6ef80d538873d5f8f610e2de6e81927ce6cdf17995a3e8488709eda816c07dfa46fecb692ebf11362ff95e6b373545b4c1cdb0dceb0abd693ebb7b4007975b2a7d9edc9bc10dc59128270952c67d1d9d01491cc64d9c9e82a083c3ca86ba28ffaf9a0007e3d5c06cbabed43e51335901f79268af91dd6a439eb2b8f194db45bc4e1e41ed7e93911b6cad74bb90fb4659de3ceda201078f9cdb"}}}}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x138}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r3 = socket$inet6(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x0, 0xfffffffd}, 0x70bd25, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x158}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000000b80)=""/4086, &(0x7f0000000300)=0xff6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 1.924529789s ago: executing program 0 (id=1606): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="710505cd030606018be8a1976e193c27010466dc77f0b1b54773ee6a19222755d2deac4f088f76bf3c93682f07d04b7bdccfa9d3d690cc68a8388ff2dfc30c6b960d016f65f015a1f19d83de68de15d94d698293bddfc4a2c323752cbeabab060ffc700173"], 0x61) 1.306893296s ago: executing program 4 (id=1608): socketpair(0x5, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x1403, 0x8, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14}}]}, 0x88}, 0x1, 0x0, 0x0, 0x801}, 0xbd26434776a17ae6) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x5a4, 0x2, 0xc, 0x200]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3e}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x98}, 0x1, 0x0, 0x0, 0x9080}, 0x804) getpeername$packet(r0, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$inet(r1, &(0x7f0000000a80)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f00000003c0)="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", 0xfd}, {&(0x7f00000004c0)="07edac8ba7e1d6263ec4e68e8a9257254a48c57cebbe7a82c5e14a80f0076db0356a6373715436ba961229b117dc50398550aa5a8194dd9e476baf08165535bfc5c78263474fcd57ab5521e72524b79ad4c6254131886974d8f97fce528b4d8b17f7c8c103651340e6cc30b046cb7ad8b926a7bf9148cddda6d718befbee678a338cde058fac87fd428c67699e9c4c159f6a7db9a7b1fabad8fd7895711b9874cac771625e21b36b69c4ab37a1dd3794283a162d2e00782077f70cb60474236d8121211e6a8f44fb56", 0xc9}, {&(0x7f00000005c0)="5ab09e6ff845c31e8aef43b98e61e88cbef8", 0x12}, {&(0x7f0000000600)="2a556a64859f2a20f3b17887737934204a4347cd8c3cdaa79ba6b5d2e20cd9ec203323029dd40e26d1584bfb9376695635fafa608ec410ff6197256244000f3c0dee0865a285a90fc74ec28a6df345706ba02ef4104cfd9e914eab0ef23cabb302def8e545c51e14", 0x68}, {&(0x7f0000000680)="f991cf749416c1c349aedb6dab6d1e7b05f6210225ac7cd4d71e788bfa4ec8ff18279c0bb7b8dfa6a29167c1f987cd9fc8d179a1cc4de9a454afe73d05", 0x3d}, {&(0x7f00000006c0)="ff79b6db9ad12648a5e44e541dfd26cf2c6f3b96dcf9eaae2b13220dc419d9feeda629504e7a9f54392ab49929a7c574fdfe34f193e33da1bd0ba7ff842613578c1f402bd3a26292431804c9f81bc4badaaf860198bca4d45d3fddbf19d1611fe80f17fa00b0558c7d6ed3c7c4b46bd40199aa0832c24b8fc40c7ae24e86a965c54094bcf05341c084b15d40e2c9", 0x8e}, {&(0x7f0000000780)="4c00bf21c0473ada49bd80359162f5f54ec4caa3dee413547aaf42f2b02ae41ad9d140624665b0a686be5c20755ff80b9e18187114843e6e9c0f7a0fcd40664a625ad76141a269a420d5193291fba80d5d1c6b4aeb28689352a13d6c45cfb90686d8d1761a2c51fad84bfdd32339e47b190a", 0x72}], 0x7, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@rr={0x7, 0x7, 0x75, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0x90, [@multicast1, @broadcast, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}]}, @timestamp_prespec={0x44, 0x4c, 0x7a, 0x3, 0x2, [{@empty, 0xb4}, {@remote, 0x6}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x163}, {@rand_addr=0x64010101, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@empty}, {@remote}, {@multicast1, 0x7}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xe5, 0x3, 0xe, [{@empty, 0x13f2}, {@empty, 0xd}, {@multicast2, 0xf93}, {@rand_addr=0x64010102, 0x800}]}]}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x54, 0x65, 0x3, 0xc, [{@multicast2, 0xc40c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xfffffffd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@rand_addr=0x64010101, 0xffffffff}, {@loopback, 0x684ac6c4}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @generic={0x44, 0xa, "becf9690547963d1"}, @ssrr={0x89, 0x17, 0xc4, [@private=0xa010101, @multicast2, @multicast1, @local, @empty]}, @timestamp_prespec={0x44, 0x14, 0x5c, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x5}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x180}, 0x48801) openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x440000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan0\x00'}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r4) r5 = socket(0x1a, 0x3, 0x7f) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xb0, r7, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x70000, {0x1, 0x8, 0x2, 0x5}}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xfa73, 0x380, 0xd51, 0x9, 0x8, 0x2, 0x9, 0x5, 0x6, 0x9, 0xfff, 0x4, 0x1, 0x10, 0x2938, 0x5]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x2, 0x5, 0x0, {0x9, 0x5, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2}, 0x400, 0x40, 0x9}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2342, 0x2, 0x6, 0x0, {0x6d2, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x5}}, @NL80211_ATTR_SSID={0x23, 0x34, @random="fea5b9dc88711d147a300843961da8c3c18e0bd943f76a05a1faef932d1309"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000841}, 0x20000804) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000d80), r5) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x280c8) (async) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000e80)={{0x73, @rand_addr=0x64010102, 0x4e20, 0x4, 'fo\x00', 0x7b29c2db5015a8b6, 0x440, 0x9}, {@local, 0x4e22, 0x10000, 0x1, 0x0, 0xa2}}, 0x44) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000f40)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000f80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x41000}, 0x4000000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r12, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000001200)={0x1, 'nr0\x00', {}, 0x8}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000012c0)={r6, r9, 0x2, 0x6e, &(0x7f0000001240)="8b8e1d6cfb94c64e642868cc07f5cab0b0990b944fbbd579d9634462c41017e7ffaf1a3395131436a47e15f4cf59a975a313fd0b9b3cd01db21952a07e7dd8af584a262dbe3622fc130f3879f183a09527e89f12ab3d538165014b2d72a2d78160c717423a078e39012d9e7cb21b", 0x0, 0x9, 0x4, 0x401, 0x2, 0x2, 0x80000000, 'syz1\x00'}) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000001380), r0) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000013c0)={'wlan0\x00', {0x2, 0x4e21, @multicast2}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000014c0)={'syztnl1\x00', &(0x7f0000001440)={'gretap0\x00', r3, 0x8, 0x80, 0x9821e1d, 0x24, {{0x9, 0x4, 0x0, 0x9, 0x24, 0x66, 0x0, 0x8, 0x0, 0x0, @multicast1, @multicast1, {[@lsrr={0x83, 0xf, 0xce, [@multicast2, @loopback, @rand_addr=0x64010101]}]}}}}}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, r13, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r14}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.300647081s ago: executing program 1 (id=1609): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'veth0\x00', 0x400}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) socket$inet(0x2, 0x5, 0x9) (async) socket$inet(0x2, 0x5, 0x9) 1.146928885s ago: executing program 4 (id=1610): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff0000070000080900020073797a3200000000050001"], 0x4c}}, 0x0) 1.084043918s ago: executing program 0 (id=1611): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301bb000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}, 0x48) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f00000027c0)=ANY=[@ANYBLOB="000086dd000012"], 0xfd0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000001dc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44031}, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d4800800", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0xaea2}, {{0x0, 0x0, 0x0}, 0xf01}, {{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000680)=""/4103, 0x1007}, {&(0x7f0000002e00)=""/4101, 0x1005}, {&(0x7f0000000500)=""/90, 0x5a}, {&(0x7f0000000000)=""/104, 0x68}, {&(0x7f0000000340)=""/184, 0xb8}], 0x7}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 979.570909ms ago: executing program 3 (id=1613): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000ffdaef862b", 0x48}], 0x1) listen(r2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'team_slave_0\x00', {0x1}, 0x3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 916.121748ms ago: executing program 4 (id=1614): r0 = socket(0x840000000002, 0x3, 0x100) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x18, 0x140e, 0x88d1b80c9581b3cd, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4804) (async) setsockopt$WPAN_SECURITY(r0, 0x0, 0x32, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfe}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x15}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) 859.703129ms ago: executing program 2 (id=1615): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x89}}, {}, [], {{0x4, 0x1, 0xb, 0x8}, {0x4, 0x0, 0xa, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x2, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) bind$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "13c487ffa16fbf22cc4343c15c"}, @NL80211_ATTR_KEY_DATA_WEP104={0x14, 0x7, "158ddf42b7663a4bce5e7c9744"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000043}, 0x4041) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e25}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) 836.441114ms ago: executing program 4 (id=1616): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x2, 0x2}}, 0x14}}, 0x20000090) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f00000000c0), 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108001840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff0800044000000056b1d50b1d04075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c0001801400030020"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x140f, 0x60ceaae1ef55e4c3, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'ip6_vti0\x00'}) 759.848085ms ago: executing program 3 (id=1617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xfcfd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x90) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) listen(r7, 0x0) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async) accept4$vsock_stream(r7, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) (async) shutdown(r8, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) 747.694276ms ago: executing program 0 (id=1618): sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x2b, 0x1, 0x0, 0x25dfdbff}, 0x10}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4004) sendmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="9597775b5d290eba463723d3d43ca5d56a37478a", 0x14}], 0x1}, 0x40020) r5 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000400)={r5}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r5, r1}) ioctl$FIOCLEX(r1, 0x5451) 714.428511ms ago: executing program 2 (id=1619): r0 = socket$kcm(0x21, 0x0, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000140)=@getae={0x4c, 0x1f, 0x101, 0x70bd2a, 0x25dfdbfb, {{@in6=@empty, 0x4d5, 0xa, 0x6c}, @in6=@private2, 0xfffffc01, 0x3504}, [@mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8084}, 0x22008040) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x4) 534.304373ms ago: executing program 2 (id=1620): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f00000006c0)=ANY=[@ANYBLOB="18e9ffff059900d37e000000ff00dd5e349f49f2f2e54859947dac46e5232c529bbf31178e2a", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000077c1000004000000d52980000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000d2683d08ff7f0000180000000100000000000000feffffff0ff5000206000000226a01001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="186b00000b0600000000000005000000"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x5, 0x200, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="18000000040000010000c02000000000017c00000400fc80b1371bdc3ccaeca00e59b4fe3aa7cb7d982a63f7654e64e1a96ebb879925a545bb6ef0960abde4cdf0c22fac677e695710fdb46a41ac5ac67873c4e7b5bfd73ee098f0c540e91d13a917dd3c39e857a32efc45d46407d5bfc7c772ecbe4479a0b41846b54fc3be4552244837b7588a11e10370c185ac55b039dc6749edd839"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x0) vmsplice(r3, &(0x7f0000000640)=[{&(0x7f0000000240)='u', 0x1}], 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='f2fs_issue_reset_zone\x00', r3, 0x0, 0x3}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r4, 0x20, &(0x7f00000005c0)={&(0x7f00000007c0)=""/94, 0x5e, 0x0, &(0x7f0000000480)=""/30, 0x1e}}, 0x10) write(r6, &(0x7f0000000680)="4eded3380304", 0x6) splice(r6, &(0x7f0000000040), r4, 0x0, 0x800000000ff, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r7, 0x7) socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x10, 0x200, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x700, 0x7, 0x8001}}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x258, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfffd, 0x1}, {0xffff, 0xffff}, {0x6, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x339d00ce}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1c, 0xfc, 0x1, 0x3, 0x0, 0xb, 0x7, 0x3}}, {0xa, 0x2, [0x8000, 0xf, 0x4]}}, {{0x1c, 0x1, {0x10, 0x81, 0x2, 0x9, 0x3, 0x438a, 0x2, 0x5}}, {0xe, 0x2, [0x3, 0x7, 0x101, 0x5, 0x8]}}, {{0x1c, 0x1, {0x86, 0x0, 0x9, 0x1, 0x2, 0x401, 0x5, 0x2}}, {0x8, 0x2, [0x0, 0xfff9]}}, {{0x1c, 0x1, {0x2, 0x0, 0xff73, 0xf71, 0x1, 0xcc9, 0x1, 0x7}}, {0x12, 0x2, [0x5, 0xf, 0x8, 0x4, 0xdc9e, 0x5, 0xf]}}, {{0x1c, 0x1, {0x3, 0x9, 0x6, 0x9, 0x1, 0xc5a, 0x100, 0x2}}, {0x8, 0x2, [0x156, 0x8]}}, {{0x1c, 0x1, {0x9, 0x6, 0x6a61, 0x7fffffff, 0x2, 0x800, 0xff, 0x6}}, {0x10, 0x2, [0x1, 0x8, 0xe8, 0xfffb, 0x3d92, 0x4]}}, {{0x1c, 0x1, {0x6, 0x0, 0x8, 0x1, 0x1, 0x9a, 0x8000, 0x9}}, {0x16, 0x2, [0x9, 0xfff8, 0x0, 0x6, 0x5, 0x1, 0x2, 0x3ff, 0x100]}}, {{0x1c, 0x1, {0x5, 0x2, 0x0, 0x2, 0x0, 0xa, 0x5, 0xa}}, {0x18, 0x2, [0x7fff, 0x7, 0x4, 0x7, 0x1, 0x1, 0x5, 0xfff7, 0x8, 0xfff]}}, {{0x1c, 0x1, {0xff, 0x0, 0x6, 0xb0, 0x2, 0x1000, 0x80000000, 0x8}}, {0x14, 0x2, [0xc, 0x400, 0x7, 0x4, 0x5, 0x4, 0x5, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0xa, 0x3}}, @qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x6}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8000}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1000}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x1}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}]}}, @qdisc_kind_options=@q_pie={{0x8}, {0x44, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x1e}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x2}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xfff}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x3}, @TCA_PIE_BETA={0x8, 0x5, 0x4}]}}]}, 0x258}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c92ad6ab8055fe39a5a9615d5ba410de"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "988f88d52ae2aa1e44f0e5686a8da5d9"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=r0, @ANYBLOB="b500"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0100000000000000010000f7647e58090d9600d5f6606ca9fdf8201a02f3cd1c000000800000000000"], 0x50) 533.767087ms ago: executing program 0 (id=1621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r7, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 518.905665ms ago: executing program 3 (id=1622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1c, 0x4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1c, 0x4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async) 419.162192ms ago: executing program 2 (id=1623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001a00010000000001000000008100800000001600a24e0097140002"], 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000012c0)=ANY=[@ANYBLOB="5800000002060101000000000000000000000000050005000a000000050004000000000005000100070000000c00078008001300000000000900020073797a320000000011000300686173683a6970"], 0x58}}, 0x0) 351.371419ms ago: executing program 3 (id=1624): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="e5c326bd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c084) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 310.775671ms ago: executing program 2 (id=1625): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) recvmmsg$unix(r2, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1}}], 0x1, 0x2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) 262.40475ms ago: executing program 0 (id=1626): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="0ed590a0b8b147bd0cafec0198328c6e2dbad4bf14d2b394f5d5243df1147a00"/43, @ANYRES16=r2, @ANYBLOB="01062dbd7000ffdbdf25020000000800010047504c0008000800ac1414aa050001000000000008000800ac1414200800040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="18000000520001000000000000dac2001c00000004000480db53f605da54f38520648fc25334a88da1d5ba96e048e962998ff68c8b4b7bc30c8d9e4d5594f3a8d3aa366c6ecb37eb2f874a4f1d48af98a7aa4521f17b"], 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in=@empty, @in=@initdev}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000007c0), &(0x7f0000000840)=0x14) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000007c0), &(0x7f0000000840)=0x14) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0x12}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0x12}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="050028bd7000fbdbdf25005300c12900000000000000"], 0x1c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r4, &(0x7f0000000500)="55887ae177132ee1096469fc5a593ee33a8754d03143f15b89de4cba1e2cbb3fb3388bb9adb9feed9e321ccf202d43c8ab0c2c6f5b76c236d6c46507d923363be9cb2d8c7e1188724257a8cac009acb636966c4399e1091e55cd8f16d48b6da059", &(0x7f0000000580)=""/143}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r10, 0x116, 0x7f, &(0x7f0000000c80)=0xe3, 0x4) connect$caif(r10, &(0x7f0000000cc0), 0x18) (async) connect$caif(r10, &(0x7f0000000cc0), 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r9}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) 203.737127ms ago: executing program 4 (id=1627): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0, 0x3}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @multicast1}}]}, 0x30}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)={r4, 0x1, 0x3, "cfe3b46867c70db32ef3500b8c8797dbaae451e50977630ce53f35b46f0a553f53ca914cf328be240c80a66ac5f983005d6924add50e9076e2b0f89919e779d08315e27ab157ede99b415697098555d77d6301a21f528f661d6396fa0711efea2316d3cd7fe21783697bfed285a99827d297f091b34ee2511d4cd53528a42dda0ba4d1534633316704389685d7e0d51a4176fc637161f1ba86a90b414c1b9a708b52413f572a1409989e9050c1ce697767a2e66e6e06dee5791532c2d1054ddc2e12fa078b0103a48bb6a711dfdabdf05244aab5612c2a2354e2fdb6108285ab267efc3ed1978c2a99dca47e"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0, 0x3}) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @multicast1}}]}, 0x30}}, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)={r4, 0x1, 0x3, "cfe3b46867c70db32ef3500b8c8797dbaae451e50977630ce53f35b46f0a553f53ca914cf328be240c80a66ac5f983005d6924add50e9076e2b0f89919e779d08315e27ab157ede99b415697098555d77d6301a21f528f661d6396fa0711efea2316d3cd7fe21783697bfed285a99827d297f091b34ee2511d4cd53528a42dda0ba4d1534633316704389685d7e0d51a4176fc637161f1ba86a90b414c1b9a708b52413f572a1409989e9050c1ce697767a2e66e6e06dee5791532c2d1054ddc2e12fa078b0103a48bb6a711dfdabdf05244aab5612c2a2354e2fdb6108285ab267efc3ed1978c2a99dca47e"}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 162.653553ms ago: executing program 2 (id=1628): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000040)={0x80}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001840)=@newqdisc={0x470, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x444, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_RTAB={0x404, 0x2, [0x5, 0x9, 0x3, 0x38, 0x8d, 0xffffffe0, 0x8, 0x4, 0x0, 0x1, 0x4, 0xfffff4bf, 0xa, 0x6, 0x6, 0x6, 0x6e5, 0x5, 0x9, 0x4, 0x401, 0x7ff, 0x8, 0x0, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0xf8, 0x3, 0x4, 0x2, 0x9e25, 0x7ed0, 0x2, 0xc, 0x8977, 0x4312, 0x5, 0x80000000, 0xa, 0x1, 0x4, 0xd9, 0x4, 0x1, 0x3, 0x2d, 0x7a8, 0x7, 0x0, 0x1000, 0x0, 0x1, 0xe, 0xfffffffb, 0x8000, 0x27, 0xffffffff, 0xffff, 0x5, 0x9, 0xfffffffe, 0x5, 0xe, 0x101, 0x9677, 0xffffffa2, 0x8000, 0xeeec, 0x60, 0xe35, 0x800009, 0xfee, 0x81, 0x400, 0x81, 0x3, 0x3362, 0x8, 0x9b6, 0x400, 0x5, 0x9, 0x7fffffff, 0x1000, 0xe6d, 0x7fffffff, 0x4, 0x1, 0x7, 0xff, 0x6, 0x5, 0x1, 0x7, 0x2, 0x10000, 0x3ff, 0xe2, 0x1, 0x8, 0x6, 0x0, 0x7fffffff, 0xfffffff9, 0x140, 0x2, 0x7, 0x81, 0x7, 0x5, 0x6, 0x69b, 0x9, 0x7fffffff, 0x7, 0xf, 0xd3bd, 0x453, 0x7, 0x8, 0x4, 0xf, 0x6, 0x400, 0x7, 0x7ff, 0x4, 0x0, 0x9, 0xdf60, 0x7, 0x10000000, 0xd, 0xfffffffc, 0x80000001, 0xfffffff8, 0xf, 0x7ff, 0x6, 0x2c8, 0x40, 0x9, 0xfffffffe, 0x0, 0x3, 0x9603, 0x719b, 0x5, 0x7, 0x10000, 0xfff, 0x5, 0x6, 0x6, 0x20000, 0xfffffff7, 0x49d, 0xf, 0x7fffffff, 0x200, 0x6, 0x0, 0x7, 0x6, 0xa, 0x2f28, 0x10000, 0x400, 0x8001, 0x6, 0x5, 0x5a2, 0x7, 0x800, 0x2, 0xaa, 0x7348fb54, 0x93a8, 0x5, 0x8000, 0x80000001, 0xfff, 0x5, 0x5, 0x3, 0xc, 0xc5, 0x4, 0x4, 0x7, 0x8001, 0x3, 0xfffffff8, 0x3ff, 0xfffffffe, 0x400, 0x8, 0x9, 0x3, 0x8, 0x8, 0x1be, 0xffffa9ab, 0x5868b5c9, 0x401, 0x1, 0x0, 0x3, 0x9, 0x7f, 0x202, 0x4b4975b4, 0xf39, 0x1, 0x101, 0x800, 0x4, 0x1000, 0xc, 0x80, 0x1dff, 0xc, 0x7, 0x8, 0xb390, 0x7f, 0xff, 0x8, 0x0, 0x8001, 0x1, 0x2, 0xddf5, 0xfffffffe, 0x5, 0xfffc0000, 0x6541, 0x5, 0x9, 0x69c, 0x2, 0x2, 0x7, 0x8001, 0x0, 0x8, 0x400, 0xfff, 0x474861a7, 0x8, 0x3, 0xd, 0x5]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x2, 0x9, 0x2, 0x1, 0x8d}, {0x7, 0x0, 0x64, 0x40, 0x424, 0xe}, 0x0, 0x1, 0xdd8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x97bdea2cc2d43cda}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x110, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r8, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r11, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(r12, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000009068300000000000000000000000200"], 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}}, 0x880) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbd3df25020000000900010073797a3000000000090003"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) 87.139473ms ago: executing program 4 (id=1629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0xf12b, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000000}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_b, @device_a, {0x0, 0x1}, @device_b, @void, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, @a_msdu}, 0x22) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB="a08406000802110000001400000000000000ffffffffc02d00"], 0x1e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x180}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x413, 0xffffffff, 0x25dfdbfb, {{@in=@private=0xa010100, @in=@remote, 0x0, 0x0, 0x4e22, 0x10}, {@in6=@mcast2, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x5}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x60, "25cac521"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000001040101000000000000000001000005060006400007000008000440000000020800044000000006089603400000000908000440000003ff0800044000000007080004c000000009"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 0 (id=1630): r0 = socket(0x22, 0x3, 0x1) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x40b, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) (async, rerun: 64) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x48004) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 64.458847][ T5810] cgroup: Unknown subsys name 'net' [ 64.587528][ T5810] cgroup: Unknown subsys name 'cpuset' [ 64.595848][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.028205][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.495791][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.515419][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.521667][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.522884][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.554423][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.564218][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.574826][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.578318][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.589846][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.590160][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.597038][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.604380][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.611092][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.619107][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.633566][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.642062][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.650921][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.670259][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.675797][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.678823][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.692226][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.693085][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.710109][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.717309][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.725538][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.291513][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 69.391856][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.447968][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 69.545739][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 69.618098][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 69.731259][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.738496][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.746308][ T5835] bridge_slave_0: entered allmulticast mode [ 69.753308][ T5835] bridge_slave_0: entered promiscuous mode [ 69.761154][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.768357][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.775937][ T5820] bridge_slave_0: entered allmulticast mode [ 69.782793][ T5820] bridge_slave_0: entered promiscuous mode [ 69.817361][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.824497][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.831622][ T5825] bridge_slave_0: entered allmulticast mode [ 69.838790][ T5825] bridge_slave_0: entered promiscuous mode [ 69.846950][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.854201][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.861302][ T5835] bridge_slave_1: entered allmulticast mode [ 69.869397][ T5835] bridge_slave_1: entered promiscuous mode [ 69.876346][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.883481][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.891310][ T5820] bridge_slave_1: entered allmulticast mode [ 69.898274][ T5820] bridge_slave_1: entered promiscuous mode [ 69.923700][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.930908][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.938067][ T5825] bridge_slave_1: entered allmulticast mode [ 69.945140][ T5825] bridge_slave_1: entered promiscuous mode [ 70.035128][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.042251][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.049867][ T5821] bridge_slave_0: entered allmulticast mode [ 70.057151][ T5821] bridge_slave_0: entered promiscuous mode [ 70.067589][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.079683][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.091156][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.110747][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.117920][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.125475][ T5821] bridge_slave_1: entered allmulticast mode [ 70.132430][ T5821] bridge_slave_1: entered promiscuous mode [ 70.141088][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.166639][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.177974][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.256054][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.263220][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.270698][ T5830] bridge_slave_0: entered allmulticast mode [ 70.277685][ T5830] bridge_slave_0: entered promiscuous mode [ 70.297958][ T5825] team0: Port device team_slave_0 added [ 70.316614][ T5820] team0: Port device team_slave_0 added [ 70.325053][ T5835] team0: Port device team_slave_0 added [ 70.333414][ T5835] team0: Port device team_slave_1 added [ 70.344778][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.351840][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.359349][ T5830] bridge_slave_1: entered allmulticast mode [ 70.366675][ T5830] bridge_slave_1: entered promiscuous mode [ 70.375679][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.386432][ T5825] team0: Port device team_slave_1 added [ 70.394688][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.415716][ T5820] team0: Port device team_slave_1 added [ 70.509915][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.517157][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.543507][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.569342][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.579791][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.588132][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.614564][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.627430][ T5821] team0: Port device team_slave_0 added [ 70.634160][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.641108][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.667168][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.678879][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.685942][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.711888][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.724312][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.731253][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.757213][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.764960][ T5832] Bluetooth: hci1: command tx timeout [ 70.769680][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.773394][ T5147] Bluetooth: hci2: command tx timeout [ 70.780117][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.793910][ T52] Bluetooth: hci4: command tx timeout [ 70.811373][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.829859][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.838977][ T52] Bluetooth: hci0: command tx timeout [ 70.838994][ T5147] Bluetooth: hci3: command tx timeout [ 70.854120][ T5821] team0: Port device team_slave_1 added [ 70.912973][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.919984][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.946192][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.958553][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.965748][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.991673][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.004323][ T5830] team0: Port device team_slave_0 added [ 71.049607][ T5820] hsr_slave_0: entered promiscuous mode [ 71.056006][ T5820] hsr_slave_1: entered promiscuous mode [ 71.064446][ T5830] team0: Port device team_slave_1 added [ 71.184975][ T5825] hsr_slave_0: entered promiscuous mode [ 71.191179][ T5825] hsr_slave_1: entered promiscuous mode [ 71.197418][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 71.203181][ T5825] Cannot create hsr debugfs directory [ 71.214054][ T5835] hsr_slave_0: entered promiscuous mode [ 71.220223][ T5835] hsr_slave_1: entered promiscuous mode [ 71.226524][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 71.232245][ T5835] Cannot create hsr debugfs directory [ 71.249501][ T5821] hsr_slave_0: entered promiscuous mode [ 71.256145][ T5821] hsr_slave_1: entered promiscuous mode [ 71.262634][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 71.268513][ T5821] Cannot create hsr debugfs directory [ 71.274627][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.281562][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.311052][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.311610][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.323510][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.328485][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.335759][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.366988][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.470354][ T5830] hsr_slave_0: entered promiscuous mode [ 71.476882][ T5830] hsr_slave_1: entered promiscuous mode [ 71.482872][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 71.488734][ T5830] Cannot create hsr debugfs directory [ 71.973623][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.985183][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.002815][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.022940][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.067736][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.085668][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.098278][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.109099][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.205072][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.220915][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.231476][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.241597][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.344773][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.355558][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.367905][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.377896][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.476070][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.498643][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.508531][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.519679][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.545943][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.555683][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.588250][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.609370][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.616541][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.637397][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.673765][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.680861][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.690483][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.697714][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.723717][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.749394][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.756611][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.817631][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.834354][ T52] Bluetooth: hci4: command tx timeout [ 72.834787][ T5147] Bluetooth: hci2: command tx timeout [ 72.839762][ T52] Bluetooth: hci1: command tx timeout [ 72.851472][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.877128][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.884281][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.906744][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.908548][ T52] Bluetooth: hci3: command tx timeout [ 72.913356][ T5147] Bluetooth: hci0: command tx timeout [ 72.930797][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.937942][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.988019][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.061544][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.129791][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.136960][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.167566][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.174740][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.211486][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.275548][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.300255][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.323782][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.330994][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.389863][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.397044][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.469674][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.530326][ T5821] veth0_vlan: entered promiscuous mode [ 73.600616][ T5821] veth1_vlan: entered promiscuous mode [ 73.732942][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.743501][ T5821] veth0_macvtap: entered promiscuous mode [ 73.780891][ T5821] veth1_macvtap: entered promiscuous mode [ 73.896072][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.906722][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.930505][ T5825] veth0_vlan: entered promiscuous mode [ 73.964813][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.002377][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.042041][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.051089][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.080951][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.095664][ T5825] veth1_vlan: entered promiscuous mode [ 74.134712][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.180481][ T5835] veth0_vlan: entered promiscuous mode [ 74.212035][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.221951][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.239247][ T5835] veth1_vlan: entered promiscuous mode [ 74.272928][ T5820] veth0_vlan: entered promiscuous mode [ 74.281943][ T5825] veth0_macvtap: entered promiscuous mode [ 74.299278][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.307388][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.312051][ T5825] veth1_macvtap: entered promiscuous mode [ 74.348172][ T5820] veth1_vlan: entered promiscuous mode [ 74.388933][ T5835] veth0_macvtap: entered promiscuous mode [ 74.401319][ T5835] veth1_macvtap: entered promiscuous mode [ 74.401769][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.422547][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.444692][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.465585][ T5830] veth0_vlan: entered promiscuous mode [ 74.486274][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.516571][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.541028][ T5820] veth0_macvtap: entered promiscuous mode [ 74.550344][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.560058][ T5941] batman_adv: batadv0: Adding interface: dummy0 [ 74.566697][ T5941] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.592300][ T5941] batman_adv: batadv0: Interface activated: dummy0 [ 74.604532][ T5942] batadv0: mtu less than device minimum [ 74.610974][ T5942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.622307][ T5942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.633423][ T5942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.644763][ T5942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.656507][ T5942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.668344][ T5942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.680115][ T5942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.691676][ T5942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.702798][ T5942] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.729781][ T5820] veth1_macvtap: entered promiscuous mode [ 74.739481][ T5830] veth1_vlan: entered promiscuous mode [ 74.751218][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.760256][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.777086][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.786226][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.796959][ T5946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.835856][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.865060][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.891846][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.906545][ T5147] Bluetooth: hci1: command tx timeout [ 74.906569][ T52] Bluetooth: hci2: command tx timeout [ 74.911942][ T5147] Bluetooth: hci4: command tx timeout [ 74.927304][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.974639][ T5949] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20002 [ 74.984852][ T5832] Bluetooth: hci3: command tx timeout [ 74.990021][ T5949] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6'. [ 74.990338][ T5147] Bluetooth: hci0: command tx timeout [ 75.020714][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.059951][ T1140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.071221][ T1140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.098946][ T1140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.108042][ T1140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.119866][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.121378][ T5830] veth0_macvtap: entered promiscuous mode [ 75.127728][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.172833][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.184584][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.197989][ T5830] veth1_macvtap: entered promiscuous mode [ 75.233239][ T5952] netlink: 'syz.1.7': attribute type 2 has an invalid length. [ 75.270603][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.282310][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.294549][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.318396][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.329660][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.339267][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.385182][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.404301][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.413177][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.454366][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.496631][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.509683][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.539766][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x8f [ 75.592752][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 75.643393][ T5959] bond1 (unregistering): Released all slaves [ 75.833802][ T5972] netlink: 'syz.0.9': attribute type 39 has an invalid length. [ 76.348333][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.364549][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.486332][ T5977] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10'. [ 76.662286][ T5985] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12'. [ 76.731254][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.774489][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.816502][ T5988] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.861587][ T5988] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.867333][ T5990] delete_channel: no stack [ 76.871662][ T5988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.984341][ T5147] Bluetooth: hci2: command tx timeout [ 76.989840][ T5832] Bluetooth: hci1: command tx timeout [ 76.990183][ T52] Bluetooth: hci4: command tx timeout [ 77.000282][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.012312][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.068551][ T52] Bluetooth: hci0: command tx timeout [ 77.068562][ T5147] Bluetooth: hci3: command tx timeout [ 77.298710][ T6005] netlink: 'syz.4.17': attribute type 1 has an invalid length. [ 77.443346][ T6007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.728857][ T6007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.801107][ T6033] netlink: 144 bytes leftover after parsing attributes in process `syz.2.27'. [ 77.873939][ T6007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.929085][ T6022] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 77.979470][ T6037] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 77.990960][ T6007] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.179175][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.271773][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.319830][ T6050] nftables ruleset with unbound chain [ 78.338896][ T1140] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.349245][ T1140] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.598183][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805740d400: rx timeout, send abort [ 78.607751][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805740d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 78.625234][ T6073] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.639675][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'. [ 78.675380][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 78.872503][ T6085] netlink: 'syz.4.40': attribute type 14 has an invalid length. [ 78.907536][ T6091] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.951356][ T6085] netlink: 'syz.4.40': attribute type 13 has an invalid length. [ 79.106668][ T6100] block nbd2: not configured, cannot reconfigure [ 79.189114][ T6107] syz.1.46 uses obsolete (PF_INET,SOCK_PACKET) [ 79.338708][ T6113] netem: incorrect gi model size [ 79.343787][ T6113] netem: change failed [ 79.645038][ T6131] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 80.080553][ T6170] __nla_validate_parse: 6 callbacks suppressed [ 80.080570][ T6170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'. [ 80.547413][ T6194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.70'. [ 80.690548][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.72'. [ 80.760739][ T6211] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 80.827485][ T6206] net_ratelimit: 14 callbacks suppressed [ 80.827496][ T6206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.016442][ T6220] bond0: Error: Cannot enslave bond to itself. [ 81.079056][ T6226] wg1 speed is unknown, defaulting to 1000 [ 81.094937][ T6226] wg1 speed is unknown, defaulting to 1000 [ 81.108158][ T6226] wg1 speed is unknown, defaulting to 1000 [ 81.154504][ T6226] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.179966][ T6226] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 81.241121][ T6226] wg1 speed is unknown, defaulting to 1000 [ 81.266573][ T6226] wg1 speed is unknown, defaulting to 1000 [ 81.315557][ T6226] wg1 speed is unknown, defaulting to 1000 [ 81.324563][ T6226] wg1 speed is unknown, defaulting to 1000 [ 81.338768][ T6226] wg1 speed is unknown, defaulting to 1000 [ 81.348018][ T6233] Zero length message leads to an empty skb [ 81.467382][ T6239] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 81.481989][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 81.618822][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 81.637299][ T6246] netlink: 'syz.2.87': attribute type 8 has an invalid length. [ 82.063480][ T6271] IPVS: length: 239 != 24 [ 82.169408][ T6283] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 82.449533][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 82.511826][ T6288] netlink: 'syz.3.96': attribute type 5 has an invalid length. [ 82.749231][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 82.776091][ T6312] netlink: 'syz.2.101': attribute type 26 has an invalid length. [ 82.778488][ T6313] netlink: 'syz.3.103': attribute type 2 has an invalid length. [ 82.796273][ T6318] netlink: 'syz.0.104': attribute type 10 has an invalid length. [ 82.807780][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 82.812112][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 82.854624][ T6307] bond2 (unregistering): Released all slaves [ 83.005309][ T6318] team0: Port device geneve0 added [ 83.062342][ T6312] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 83.087419][ T6312] bridge1: entered promiscuous mode [ 83.101603][ T6312] bridge1: entered allmulticast mode [ 83.165123][ T6336] sctp: [Deprecated]: syz.4.106 (pid 6336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.165123][ T6336] Use struct sctp_sack_info instead [ 83.167745][ T6328] syzkaller1: entered promiscuous mode [ 83.216511][ T6328] syzkaller1: entered allmulticast mode [ 83.506663][ T6348] netlink: 224 bytes leftover after parsing attributes in process `syz.0.110'. [ 83.673300][ T6354] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 84.459399][ T6387] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.628345][ T6393] xt_l2tp: wrong L2TP version: 0 [ 84.934485][ T6401] sctp: [Deprecated]: syz.2.130 (pid 6401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.934485][ T6401] Use struct sctp_sack_info instead [ 85.589733][ T6437] __nla_validate_parse: 5 callbacks suppressed [ 85.589749][ T6437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.143'. [ 85.616728][ T6437] netlink: 92 bytes leftover after parsing attributes in process `syz.1.143'. [ 85.650415][ T6432] Bluetooth: MGMT ver 1.23 [ 85.657794][ T6432] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 85.667698][ T6443] Cannot find add_set index 0 as target [ 85.673465][ T6443] Cannot find add_set index 0 as target [ 85.680736][ T6443] Cannot find add_set index 0 as target [ 85.686772][ T6443] Cannot find add_set index 0 as target [ 85.692641][ T6443] Cannot find add_set index 0 as target [ 85.699864][ T6443] Cannot find add_set index 0 as target [ 85.710277][ T6443] Cannot find add_set index 0 as target [ 85.718251][ T6443] Cannot find add_set index 0 as target [ 85.758991][ T6437] dvmrp0: entered allmulticast mode [ 85.801853][ T6447] dvmrp0: left allmulticast mode [ 86.032838][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.149'. [ 86.094059][ T6461] warning: `syz.0.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.601766][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 86.679027][ T24] cfg80211: failed to load regulatory.db [ 86.727164][ T6496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.763400][ T6499] netlink: 'syz.4.158': attribute type 1 has an invalid length. [ 86.885107][ T6499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.892422][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 86.917166][ T6496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.935546][ T6506] netlink: 64 bytes leftover after parsing attributes in process `syz.1.159'. [ 86.971513][ T6499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.984633][ T6499] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 86.995055][ T6510] netlink: 144 bytes leftover after parsing attributes in process `syz.0.160'. [ 86.998752][ T6499] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 87.037239][ T6501] veth3: entered promiscuous mode [ 87.049460][ T6501] bond2: (slave veth3): Enslaving as an active interface with a down link [ 87.095414][ T6496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.137566][ T6512] vlan2: entered allmulticast mode [ 87.142682][ T6512] bond2: entered allmulticast mode [ 87.239241][ T6496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.292068][ T6520] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 87.335114][ T6520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.348606][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 87.428601][ T1140] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.517375][ T1140] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.527042][ T1140] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.546284][ T1140] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.565183][ T6532] netlink: 104 bytes leftover after parsing attributes in process `syz.4.165'. [ 87.732081][ T6539] Cannot find add_set index 0 as target [ 88.187246][ T6566] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.177'. [ 88.333449][ T6575] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 88.658364][ T6593] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 88.708045][ T6593] macvtap1: entered promiscuous mode [ 88.713363][ T6593] macvtap1: entered allmulticast mode [ 88.755683][ T6593] bond_slave_0: entered promiscuous mode [ 88.761494][ T6593] bond_slave_1: entered promiscuous mode [ 88.782384][ T6593] bond0: entered allmulticast mode [ 88.789474][ T6593] bond_slave_0: entered allmulticast mode [ 88.808837][ T6593] bond_slave_1: entered allmulticast mode [ 88.816104][ T6593] bond0: entered promiscuous mode [ 88.823789][ T6593] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 88.831950][ T6593] team0: Device macvtap1 failed to register rx_handler [ 88.843589][ T6593] bond0: left allmulticast mode [ 88.850557][ T6593] bond_slave_0: left allmulticast mode [ 88.857574][ T6593] bond_slave_1: left allmulticast mode [ 88.863461][ T6593] bond0: left promiscuous mode [ 88.870303][ T6593] bond_slave_0: left promiscuous mode [ 88.875807][ T6593] bond_slave_1: left promiscuous mode [ 88.918647][ T6589] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 88.931174][ T6589] bond1 (unregistering): Released all slaves [ 89.103265][ T6611] geneve2: entered promiscuous mode [ 89.135259][ T6611] geneve2: entered allmulticast mode [ 89.237534][ T6615] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 89.277134][ T6615] IPVS: ip_vs_add_dest(): server weight less than zero [ 89.311168][ T10] IPVS: starting estimator thread 0... [ 89.404992][ T6617] IPVS: using max 25 ests per chain, 60000 per kthread [ 89.513770][ T6633] smc: net device gre0 applied user defined pnetid SYZ1 [ 89.558750][ T6634] smc: net device gre0 erased user defined pnetid SYZ1 [ 89.923203][ T6656] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.039377][ T6671] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 90.130170][ T6673] tipc: Started in network mode [ 90.135370][ T6673] tipc: Node identity 86ed33682dfc, cluster identity 4711 [ 90.142795][ T6673] tipc: Enabled bearer , priority 0 [ 90.168637][ T6673] tipc: Resetting bearer [ 90.177750][ T6672] tipc: Disabling bearer [ 90.328952][ T6683] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 90.537832][ T6696] batadv_slave_0: entered promiscuous mode [ 90.600643][ T6695] batadv_slave_0: left promiscuous mode [ 90.667287][ T6700] __nla_validate_parse: 14 callbacks suppressed [ 90.667303][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 90.773315][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 90.987230][ T6716] netlink: 44 bytes leftover after parsing attributes in process `syz.0.226'. [ 91.213049][ T30] audit: type=1107 audit(1760670643.058:2): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='"Yϴ+$$N꯷-A|`ǩlQ s"Sx9A+51Rw, 8,|YI'{׼Ch6U+[(0a6`t6v(n9}萿Dӎt' [ 91.333547][ T6740] netlink: 'syz.2.234': attribute type 2 has an invalid length. [ 91.422737][ T6742] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 91.435454][ T6743] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 91.448094][ T6742] netlink: 104 bytes leftover after parsing attributes in process `syz.2.235'. [ 91.457916][ T6743] netlink: 104 bytes leftover after parsing attributes in process `syz.2.235'. [ 92.196541][ T6786] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 92.232868][ T6786] bond1 (unregistering): Released all slaves [ 92.313295][ T6800] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 92.321180][ T6800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.328660][ T6800] IPv6: NLM_F_CREATE should be set when creating new route [ 92.335927][ T6800] IPv6: NLM_F_CREATE should be set when creating new route [ 92.350876][ T6800] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 92.358732][ T6800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.365991][ T6800] IPv6: NLM_F_CREATE should be set when creating new route [ 92.398419][ T6805] netlink: zone id is out of range [ 92.403547][ T6805] netlink: zone id is out of range [ 92.408881][ T6805] netlink: zone id is out of range [ 92.414169][ T6805] netlink: zone id is out of range [ 92.419378][ T6805] netlink: zone id is out of range [ 92.425654][ T6805] netlink: zone id is out of range [ 92.430816][ T6805] netlink: zone id is out of range [ 92.444268][ T6805] netlink: zone id is out of range [ 92.453808][ T6805] netlink: zone id is out of range [ 92.479838][ T6805] netlink: zone id is out of range [ 92.592806][ T6807] block nbd0: server does not support multiple connections per device. [ 92.612713][ T6807] block nbd0: shutting down sockets [ 92.819339][ T6823] Bluetooth: hci0: invalid length 39, exp 2 for type 29 [ 93.133303][ T6845] netlink: 'syz.1.259': attribute type 2 has an invalid length. [ 93.144923][ T6845] netlink: 'syz.1.259': attribute type 1 has an invalid length. [ 93.506349][ T6854] netlink: 84 bytes leftover after parsing attributes in process `syz.4.260'. [ 94.004565][ T6843] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 94.151659][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 94.235720][ T6859] veth3: entered allmulticast mode [ 94.322051][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 94.469495][ T6880] bond1: Invalid ad_actor_system MAC address. [ 94.501184][ T6880] bond1: option ad_actor_system: invalid value (1) [ 94.511463][ T6880] bond1 (unregistering): Released all slaves [ 94.606427][ T6890] wg1 speed is unknown, defaulting to 1000 [ 94.729528][ T6894] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 94.771776][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.780129][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.916332][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 94.927531][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 94.992067][ T6902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.005092][ T6902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.046340][ T6902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.074833][ T6902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.136082][ T6912] Bluetooth: hci0: unsupported parameter 26540 [ 95.145296][ T6912] Bluetooth: hci0: invalid len left 37, exp >= 123 [ 95.409472][ T6892] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 95.619267][ T6933] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.247059][ T6959] ip6gretap0: entered allmulticast mode [ 96.365189][ T856] IPVS: starting estimator thread 0... [ 96.409720][ T6967] __nla_validate_parse: 1 callbacks suppressed [ 96.409736][ T6967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.289'. [ 96.467262][ T6971] IPVS: using max 29 ests per chain, 69600 per kthread [ 96.519867][ T6979] ipt_ECN: cannot use operation on non-tcp rule [ 97.019730][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 97.165851][ T7009] bond0: (slave bond_slave_1): Releasing backup interface [ 97.225814][ T52] Bluetooth: hci0: command 0x0c20 tx timeout [ 97.374181][ T7014] geneve2: entered promiscuous mode [ 97.393716][ T7014] geneve2: entered allmulticast mode [ 97.511150][ T7022] "syz.1.302" (7022) uses obsolete ecb(arc4) skcipher [ 97.523528][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 97.766257][ T7046] Bluetooth: hci0: unsupported parameter 512 [ 97.772277][ T7046] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 97.868455][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 98.026995][ T7066] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 98.086628][ T7066] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 98.247139][ T7079] syzkaller1: entered promiscuous mode [ 98.279090][ T7079] syzkaller1: entered allmulticast mode [ 98.699364][ T7110] macvlan0: entered promiscuous mode [ 98.708339][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 98.708608][ T7110] batadv0: entered promiscuous mode [ 98.726345][ T7110] hsr1: entered allmulticast mode [ 98.731942][ T7110] macvlan0: entered allmulticast mode [ 98.737395][ T7110] veth1_vlan: entered allmulticast mode [ 98.743014][ T7110] batadv0: entered allmulticast mode [ 98.756414][ T7110] macvlan0: left promiscuous mode [ 98.770641][ T7110] batadv0: left promiscuous mode [ 98.805281][ T7113] netlink: 'syz.0.322': attribute type 12 has an invalid length. [ 98.840591][ T7113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.322'. [ 99.067538][ T7125] nbd: device at index 3 is going down [ 99.078746][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.327'. [ 99.133997][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.327'. [ 99.175718][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 99.228446][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 99.347468][ T1140] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.397205][ T1140] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.429816][ T5874] udevd[5874]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 99.469507][ T1140] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.479976][ T1140] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.684613][ T7161] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 99.696290][ T7161] bond3 (unregistering): Released all slaves [ 99.770433][ T7163] netlink: 'syz.0.335': attribute type 39 has an invalid length. [ 102.468328][ T7260] tipc: Enabling of bearer rejected, failed to enable media [ 102.544993][ T7270] Bluetooth: hci0: invalid length 39, exp 2 for type 23 [ 102.740690][ T7282] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 102.758191][ T7282] __nla_validate_parse: 10 callbacks suppressed [ 102.758207][ T7282] netlink: 144 bytes leftover after parsing attributes in process `syz.0.363'. [ 102.774469][ T7282] netlink: 'syz.0.363': attribute type 1 has an invalid length. [ 102.796970][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 102.825405][ T7282] netlink: 'syz.0.363': attribute type 2 has an invalid length. [ 102.864791][ T7282] netlink: 64 bytes leftover after parsing attributes in process `syz.0.363'. [ 102.975689][ T7284] hsr_slave_0 (unregistering): left promiscuous mode [ 102.976239][ T7296] xt_TCPMSS: Only works on TCP SYN packets [ 103.225951][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.242778][ T7306] net_ratelimit: 16 callbacks suppressed [ 103.242798][ T7306] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 103.247055][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.291798][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.340810][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.435043][ T7317] netlink: 'syz.2.372': attribute type 2 has an invalid length. [ 103.456740][ T7317] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.372'. [ 103.485094][ T7317] nbd: must specify a device to reconfigure [ 103.505462][ T7320] netlink: 'syz.2.372': attribute type 2 has an invalid length. [ 103.543989][ T7320] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.372'. [ 103.554010][ T7320] nbd: must specify a device to reconfigure [ 103.603330][ T7331] openvswitch: netlink: Tunnel attr 20 out of range max 16 [ 103.865273][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'. [ 103.913541][ T7350] netlink: 96 bytes leftover after parsing attributes in process `syz.2.383'. [ 103.935412][ T7348] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 103.971499][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 104.003503][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 104.139389][ T7357] bond1: Removing last ns target with arp_interval on [ 104.403987][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.392'. [ 104.728260][ T7404] team0: Device ip6gre1 is of different type [ 105.058822][ T7420] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 105.739093][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.867737][ T7505] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 106.914324][ T7516] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20004 [ 106.919141][ T7505] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.951951][ T7516] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 106.996940][ T30] audit: type=1800 audit(1760670658.838:3): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.431" name="memory.events" dev="tmpfs" ino=476 res=0 errno=0 [ 107.049070][ T7505] tipc: Started in network mode [ 107.073580][ T30] audit: type=1804 audit(1760670658.868:4): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.431" name="/newroot/90/memory.events" dev="tmpfs" ino=476 res=1 errno=0 [ 107.105194][ T7505] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 107.137184][ T7505] tipc: Enabled bearer , priority 2 [ 107.610764][ T7552] netlink: del zone limit has 4 unknown bytes [ 107.632057][ T7552] Bluetooth: MGMT ver 1.23 [ 107.925177][ T7576] trusted_key: syz.1.449 sent an empty control message without MSG_MORE. [ 107.958478][ T7576] __nla_validate_parse: 5 callbacks suppressed [ 107.958493][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 107.974268][ T7569] netlink: 'syz.3.448': attribute type 4 has an invalid length. [ 108.015597][ T7581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'. [ 108.032906][ T7569] netlink: 'syz.3.448': attribute type 4 has an invalid length. [ 108.256653][ T24] tipc: Node number set to 10463914 [ 108.319173][ T7597] xt_CT: No such helper "snmp_trap" [ 108.522252][ T7607] bond2: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 108.601408][ T7616] syzkaller1: entered promiscuous mode [ 108.623909][ T7616] syzkaller1: entered allmulticast mode [ 108.724461][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 108.825327][ T7619] bond3: entered promiscuous mode [ 108.830922][ T7619] bond3: entered allmulticast mode [ 108.846824][ T7619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.886520][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.464'. [ 109.207539][ T7621] wg1 speed is unknown, defaulting to 1000 [ 109.428400][ T7650] tipc: Invalid UDP bearer configuration [ 109.428454][ T7650] tipc: Enabling of bearer rejected, failed to enable media [ 110.200712][ T7686] wg1 speed is unknown, defaulting to 1000 [ 110.849733][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 110.894057][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'. [ 110.932818][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 110.962803][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'. [ 111.017502][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 111.281078][ T7741] sctp: [Deprecated]: syz.1.493 (pid 7741) Use of int in maxseg socket option. [ 111.281078][ T7741] Use struct sctp_assoc_value instead [ 111.961386][ T7771] netlink: 176 bytes leftover after parsing attributes in process `syz.1.500'. [ 112.118555][ T7783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.157469][ T7784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.405191][ T7800] netlink: 'syz.4.510': attribute type 83 has an invalid length. [ 112.628493][ T7808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.677176][ T7808] bond0: (slave rose0): Enslaving as an active interface with an up link [ 113.004955][ T7839] __nla_validate_parse: 5 callbacks suppressed [ 113.004973][ T7839] netlink: 36 bytes leftover after parsing attributes in process `syz.3.518'. [ 113.162713][ T7850] netlink: 'syz.0.523': attribute type 1 has an invalid length. [ 113.179030][ T7850] netlink: 232 bytes leftover after parsing attributes in process `syz.0.523'. [ 113.188624][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 113.548345][ T7870] sctp: [Deprecated]: syz.4.528 (pid 7870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.548345][ T7870] Use struct sctp_sack_info instead [ 113.945369][ T7894] netlink: 144 bytes leftover after parsing attributes in process `syz.0.534'. [ 114.233635][ T7909] netlink: 'syz.3.540': attribute type 2 has an invalid length. [ 114.455061][ T7922] netlink: 'syz.4.543': attribute type 21 has an invalid length. [ 114.490650][ T7929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.542'. [ 114.508143][ T7921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.542'. [ 114.753179][ T7948] netlink: 'syz.2.549': attribute type 1 has an invalid length. [ 114.971800][ T7953] bond3: (slave geneve3): making interface the new active one [ 114.986782][ T7953] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 115.014899][ T1002] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 115.054011][ T1002] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 115.083098][ T1002] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 115.141185][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 115.200102][ T7968] veth1_macvtap: left promiscuous mode [ 115.207247][ T7968] macsec0: entered promiscuous mode [ 115.212472][ T7968] macsec0: entered allmulticast mode [ 115.249835][ T7968] veth1_macvtap: entered promiscuous mode [ 115.262101][ T7968] veth1_macvtap: entered allmulticast mode [ 115.270781][ T7968] macsec0: left promiscuous mode [ 115.278915][ T7968] macsec0: left allmulticast mode [ 115.284277][ T7968] veth1_macvtap: left allmulticast mode [ 115.455118][ T7984] netlink: 104 bytes leftover after parsing attributes in process `syz.3.557'. [ 115.455667][ T7983] xt_cgroup: invalid path, errno=-2 [ 115.621984][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 115.671167][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 115.949391][ T8018] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 115.975614][ T8015] tipc: Enabled bearer , priority 0 [ 115.982344][ T8018] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 115.993184][ T8015] syzkaller0: entered promiscuous mode [ 116.013367][ T8015] syzkaller0: entered allmulticast mode [ 116.096874][ T8017] netlink: 84 bytes leftover after parsing attributes in process `syz.0.564'. [ 116.111743][ T8015] tipc: Resetting bearer [ 116.145467][ T8011] tipc: Resetting bearer [ 116.213810][ T8011] tipc: Disabling bearer [ 116.519082][ T8047] delete_channel: no stack [ 116.625245][ T8053] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.828630][ T8065] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.853937][ T8065] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.968339][ T8078] pim6reg527: entered allmulticast mode [ 117.158936][ T8065] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.197565][ T8065] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.294801][ T8065] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.305395][ T8065] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.413240][ T8065] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.424237][ T8065] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.608441][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.627018][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.691903][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.733909][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.762283][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.783532][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.832576][ T1002] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.851647][ T1002] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.873466][ T8113] netlink: 'syz.0.594': attribute type 1 has an invalid length. [ 118.043714][ T8128] openvswitch: netlink: Message has -2 unknown bytes. [ 118.060125][ T8129] __nla_validate_parse: 12 callbacks suppressed [ 118.060141][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.594'. [ 118.070997][ T8113] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.159680][ T8116] bond3: (slave veth7): Enslaving as an active interface with a down link [ 118.192710][ T8125] veth9: entered promiscuous mode [ 118.203748][ T8125] bond3: (slave veth9): Enslaving as an active interface with a down link [ 118.223403][ T8129] vlan2: entered allmulticast mode [ 118.229131][ T8129] bond3: entered allmulticast mode [ 118.237499][ T8129] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 118.289731][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 118.434448][ T8144] Cannot find add_set index 0 as target [ 118.587618][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 118.612384][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 118.707098][ T8161] netlink: 'syz.3.606': attribute type 10 has an invalid length. [ 119.027514][ T8161] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 119.149934][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'. [ 119.275243][ T8187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.615'. [ 119.303785][ T8186] delete_channel: no stack [ 119.317088][ T8185] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.329636][ T8189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.616'. [ 119.574239][ T8207] xt_TCPMSS: Only works on TCP SYN packets [ 119.805528][ T8211] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 120.269521][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 120.296682][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'. [ 120.605776][ T8265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.708785][ T8271] block nbd1: NBD_DISCONNECT [ 120.745149][ T8271] nbd: device at index 1 is going down [ 120.963214][ T8282] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 121.072652][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 121.582265][ T8323] netlink: 'syz.3.655': attribute type 58 has an invalid length. [ 121.993724][ T8339] veth0: entered promiscuous mode [ 122.226969][ T8347] : entered promiscuous mode [ 122.787515][ T8375] Bluetooth: hci0: invalid len left 70, exp >= 222 [ 122.815294][ T8339] veth0: left promiscuous mode [ 123.101125][ T8397] __nla_validate_parse: 6 callbacks suppressed [ 123.101141][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 123.157470][ T8397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.678'. [ 123.316898][ T8411] netlink: 44 bytes leftover after parsing attributes in process `syz.3.681'. [ 123.388577][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 123.525892][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.686'. [ 123.603928][ T8424] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 123.640478][ T8422] openvswitch: netlink: Missing valid actions attribute. [ 123.648216][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.827783][ T8439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'. [ 123.865115][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 124.039003][ T8461] Bluetooth: MGMT ver 1.23 [ 124.043772][ T8451] netlink: 108 bytes leftover after parsing attributes in process `syz.1.693'. [ 124.109313][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 124.285806][ T8479] netlink: 348 bytes leftover after parsing attributes in process `syz.1.703'. [ 124.712900][ T8508] raw_sendmsg: syz.3.711 forgot to set AF_INET. Fix it! [ 124.797831][ T8515] netlink: 'syz.4.714': attribute type 58 has an invalid length. [ 124.946810][ T8521] netlink: 'syz.4.714': attribute type 11 has an invalid length. [ 125.856617][ T8599] xt_l2tp: v2 doesn't support IP mode [ 125.914345][ T8607] tipc: Enabling not permitted [ 125.919948][ T8607] tipc: Enabling of bearer rejected, failed to enable media [ 126.070264][ T8614] netlink: 'syz.1.741': attribute type 21 has an invalid length. [ 126.096423][ T8619] tipc: Started in network mode [ 126.101404][ T8619] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 126.111185][ T8619] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 126.119787][ T8619] tipc: Enabled bearer , priority 10 [ 126.248291][ T8631] nbd: couldn't find device at index 3 [ 126.912823][ T8666] syzkaller0: entered promiscuous mode [ 126.945334][ T8666] syzkaller0: entered allmulticast mode [ 127.235608][ T10] tipc: Node number set to 1 [ 127.619973][ T8715] tipc: Enabled bearer , priority 0 [ 127.620637][ T8721] netlink: 'syz.4.769': attribute type 1 has an invalid length. [ 127.629679][ T8715] syzkaller0: entered promiscuous mode [ 127.654711][ T8715] syzkaller0: entered allmulticast mode [ 127.818567][ T8715] tipc: Resetting bearer [ 127.855427][ T8711] tipc: Resetting bearer [ 127.892874][ T8711] tipc: Disabling bearer [ 129.953250][ T8774] netlink: 'syz.2.780': attribute type 4 has an invalid length. [ 130.371143][ T8800] __nla_validate_parse: 16 callbacks suppressed [ 130.371159][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 130.546286][ T8808] netlink: 'syz.4.791': attribute type 7 has an invalid length. [ 130.744257][ T8814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.833253][ T8820] 8021q: VLANs not supported on lo [ 131.111197][ T8832] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 131.126873][ T10] IPVS: starting estimator thread 0... [ 131.224274][ T8835] IPVS: using max 28 ests per chain, 67200 per kthread [ 131.325270][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.802'. [ 131.414084][ T8845] netlink: 'syz.4.804': attribute type 1 has an invalid length. [ 131.427656][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.803'. [ 131.442845][ T8845] vlan1: entered promiscuous mode [ 131.452466][ T8845] bridge0: entered promiscuous mode [ 131.467519][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 131.495892][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 131.540298][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 131.577802][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 131.604388][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 131.643790][ T8818] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 131.777141][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 132.041523][ T8877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.813'. [ 132.252412][ T8884] netlink: 'syz.3.816': attribute type 10 has an invalid length. [ 132.264548][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.275743][ T8884] bridge_slave_1: left allmulticast mode [ 132.281647][ T8884] bridge_slave_1: left promiscuous mode [ 132.288142][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.304502][ T8884] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 132.754561][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.760888][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.807083][ T9] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 132.827448][ T52] Bluetooth: hci0: command 0x0c20 tx timeout [ 132.886815][ T9] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 132.940543][ T8912] tipc: Enabling of bearer rejected, failed to enable media [ 133.141799][ T8911] fido_id[8911]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 133.168383][ T8922] tipc: Enabled bearer , priority 0 [ 133.184772][ T8922] syzkaller0: entered promiscuous mode [ 133.204212][ T8922] syzkaller0: entered allmulticast mode [ 133.253059][ T8922] tipc: Resetting bearer [ 133.279555][ T8921] tipc: Resetting bearer [ 133.329190][ T8921] tipc: Disabling bearer [ 133.954159][ T8954] veth0: entered promiscuous mode [ 133.991429][ T8951] veth0: left promiscuous mode [ 134.259203][ T8965] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 134.305110][ T8965] bond4: option packets_per_slave: allowed values 0 - 65535 [ 134.336342][ T8965] bond4 (unregistering): Released all slaves [ 134.669472][ T8992] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 134.801675][ T9003] netlink: 'syz.4.843': attribute type 28 has an invalid length. [ 134.818097][ T9003] netlink: 'syz.4.843': attribute type 3 has an invalid length. [ 134.860769][ T9008] tipc: Enabling of bearer rejected, failed to enable media [ 135.662179][ T9027] netlink: 'syz.3.849': attribute type 11 has an invalid length. [ 135.670205][ T9027] __nla_validate_parse: 10 callbacks suppressed [ 135.670220][ T9027] netlink: 228 bytes leftover after parsing attributes in process `syz.3.849'. [ 136.298379][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 136.359005][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 136.378717][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.869'. [ 136.492873][ T9105] tipc: Enabling of bearer rejected, failed to enable media [ 136.866062][ T9133] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 137.015689][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 137.475798][ T9177] syzkaller0: entered promiscuous mode [ 137.481294][ T9177] syzkaller0: entered allmulticast mode [ 137.487187][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 137.746382][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.891'. [ 137.759071][ T9198] netlink: 64 bytes leftover after parsing attributes in process `syz.2.889'. [ 137.789642][ T9201] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001 [ 137.814947][ T9196] tipc: Enabled bearer , priority 0 [ 137.848703][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.4.891'. [ 137.858350][ T9196] syzkaller0: entered promiscuous mode [ 137.867471][ T9196] syzkaller0: entered allmulticast mode [ 137.904211][ T9196] tipc: Resetting bearer [ 137.912334][ T9196] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 137.931082][ T9208] netlink: 'syz.1.894': attribute type 15 has an invalid length. [ 137.974612][ T9208] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.364314][ T9195] tipc: Resetting bearer [ 138.436452][ T9195] tipc: Disabling bearer [ 138.556588][ T9248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.903'. [ 138.972363][ T9268] tipc: Started in network mode [ 138.989576][ T9268] tipc: Node identity 3efe103dbf46, cluster identity 4711 [ 139.008296][ T9268] tipc: Enabled bearer , priority 0 [ 139.044586][ T9271] netlink: 'syz.1.909': attribute type 2 has an invalid length. [ 139.053305][ T9268] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 139.072539][ T9268] tipc: Disabling bearer [ 139.078903][ T9273] netlink: 'syz.0.910': attribute type 7 has an invalid length. [ 139.107538][ T9273] netlink: 'syz.0.910': attribute type 8 has an invalid length. [ 139.162977][ T9271] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 139.177892][ T9271] bond2 (unregistering): Released all slaves [ 139.209415][ T9273] syzkaller0: entered promiscuous mode [ 139.217277][ T9273] syzkaller0: entered allmulticast mode [ 139.546273][ T9295] tipc: Enabled bearer , priority 0 [ 139.570609][ T9295] syzkaller0: entered promiscuous mode [ 139.590184][ T9295] syzkaller0: entered allmulticast mode [ 139.727854][ T9295] tipc: Resetting bearer [ 139.748624][ T9293] tipc: Resetting bearer [ 139.819535][ T9293] tipc: Disabling bearer [ 141.010574][ T9382] netlink: 'syz.2.940': attribute type 16 has an invalid length. [ 141.017485][ T9388] wg1 speed is unknown, defaulting to 1000 [ 141.025998][ T9382] netlink: 'syz.2.940': attribute type 17 has an invalid length. [ 141.044939][ T9392] __nla_validate_parse: 13 callbacks suppressed [ 141.044953][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 141.060444][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 141.079978][ T9392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.942'. [ 141.140958][ T9382] ip6gretap0: left allmulticast mode [ 141.185023][ T856] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 141.202043][ T9382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.229761][ T9400] netlink: 6 bytes leftover after parsing attributes in process `syz.1.944'. [ 141.239187][ T9400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.264291][ T856] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 141.280678][ T9405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.945'. [ 141.541077][ T9422] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 141.549062][ T9422] netlink: 232 bytes leftover after parsing attributes in process `syz.1.947'. [ 141.615368][ T9419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.642939][ T9423] tipc: Enabled bearer , priority 10 [ 141.642975][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 141.776370][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 141.865169][ T9440] netlink: 'syz.2.952': attribute type 3 has an invalid length. [ 141.873226][ T9440] netlink: 'syz.2.952': attribute type 3 has an invalid length. [ 141.970096][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'. [ 142.044878][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 142.081120][ T9451] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 142.105987][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 142.119965][ T9451] netlink: 15 bytes leftover after parsing attributes in process `syz.0.958'. [ 142.166121][ T9456] tipc: Enabled bearer , priority 0 [ 142.199593][ T9456] tipc: Disabling bearer [ 142.342367][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 142.561715][ T9484] netlink: 44 bytes leftover after parsing attributes in process `syz.1.966'. [ 142.577457][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 143.071328][ T9514] validate_nla: 1 callbacks suppressed [ 143.071347][ T9514] netlink: 'syz.3.977': attribute type 10 has an invalid length. [ 143.094617][ T9514] dummy0: entered promiscuous mode [ 143.100517][ T9514] bridge0: port 2(dummy0) entered blocking state [ 143.135230][ T9514] bridge0: port 2(dummy0) entered disabled state [ 143.141762][ T9514] dummy0: entered allmulticast mode [ 143.158565][ T9525] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 143.206617][ T9514] bridge0: port 2(dummy0) entered blocking state [ 143.213082][ T9514] bridge0: port 2(dummy0) entered forwarding state [ 143.235439][ T66] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 143.243626][ T66] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 143.625664][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 143.804417][ T5902] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 143.885115][ T9552] netlink: 'syz.4.989': attribute type 2 has an invalid length. [ 143.901879][ T9548] xt_cgroup: xt_cgroup: no path or classid specified [ 144.263728][ T9583] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 144.366677][ T9587] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.380425][ T9587] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 144.392318][ T9587] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 144.597686][ T9600] Cannot find del_set index 49151 as target [ 144.629880][ T9597] veth1_vlan (unregistering): left allmulticast mode [ 144.641094][ T52] Bluetooth: hci4: link tx timeout [ 144.647095][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.660108][ T52] Bluetooth: hci4: link tx timeout [ 144.667541][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.676231][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 144.826454][ T9614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.501806][ T9622] IPv6: NLM_F_REPLACE set, but no existing node found! [ 145.704384][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 146.102935][ T9659] __nla_validate_parse: 6 callbacks suppressed [ 146.102952][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1013'. [ 146.193663][ T9665] x_tables: duplicate underflow at hook 1 [ 146.225401][ T9666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1009'. [ 146.253726][ T9666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1009'. [ 146.265536][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 146.279803][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1009'. [ 146.293523][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1009'. [ 146.658472][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 146.750136][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 146.761131][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 146.880051][ T9718] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 146.889646][ T9702] bond4 (unregistering): Released all slaves [ 146.950301][ T9712] tipc: Enabled bearer , priority 13 [ 146.991260][ T9712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1028'. [ 147.047939][ T9712] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1028'. [ 147.064118][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 147.083010][ T9716] veth7: entered promiscuous mode [ 147.116485][ T9733] netlink: 'syz.2.1033': attribute type 11 has an invalid length. [ 147.156273][ T9735] openvswitch: netlink: Flow key attr not present in new flow. [ 147.438623][ T9755] netlink: 'syz.1.1040': attribute type 10 has an invalid length. [ 147.451606][ T9755] veth0_virt_wifi: entered allmulticast mode [ 147.483466][ T9755] team0: Port device veth0_virt_wifi added [ 147.511480][ T9760] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 147.622559][ T9759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.728043][ T9773] x_tables: duplicate entry at hook 2 [ 147.753143][ T9773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1046'. [ 147.785156][ T9776] netlink: 'syz.4.1047': attribute type 11 has an invalid length. [ 147.786620][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 147.807842][ T9780] x_tables: duplicate entry at hook 2 [ 148.412498][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058e96400: rx timeout, send abort [ 148.420838][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806eed4000: rx timeout, send abort [ 148.429321][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058e96400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 148.443678][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806eed4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 148.448749][ T9805] bond4: option min_links: invalid value (18446744073709551614) [ 148.466199][ T9805] bond4: option min_links: allowed values 0 - 2147483647 [ 148.483818][ T9805] bond4 (unregistering): Released all slaves [ 148.705084][ T9816] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 148.736882][ T9818] netlink: 'syz.3.1059': attribute type 1 has an invalid length. [ 148.824485][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 148.904158][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 149.493272][ T9867] bond6: Invalid ad_actor_system MAC address. [ 149.500072][ T9867] bond6: option ad_actor_system: invalid value (1) [ 149.511558][ T9867] bond6 (unregistering): Released all slaves [ 149.522503][ T9871] xt_hashlimit: max too large, truncated to 1048576 [ 149.602626][ T9871] vlan0: entered promiscuous mode [ 149.615161][ T9871] bond0: entered promiscuous mode [ 149.620776][ T9871] bond_slave_0: entered promiscuous mode [ 149.629230][ T9871] bond_slave_1: entered promiscuous mode [ 149.636120][ T9871] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 149.646098][ T9871] bridge_slave_1: entered promiscuous mode [ 149.724031][ T9882] netlink: 'syz.2.1078': attribute type 3 has an invalid length. [ 149.745984][ T9882] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 149.753730][ T9882] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 149.782102][ T9883] tipc: Enabled bearer , priority 0 [ 149.802130][ T9883] syzkaller0: entered promiscuous mode [ 149.841306][ T9883] syzkaller0: entered allmulticast mode [ 149.867083][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 150.164103][ T9881] tipc: Resetting bearer [ 150.205475][ T9881] tipc: Disabling bearer [ 150.343699][ T9915] openvswitch: netlink: IP tunnel dst address not specified [ 150.570485][ T9921] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 150.583410][ T9921] bond6 (unregistering): Released all slaves [ 150.833118][ T9941] 8021q: VLANs not supported on gre0 [ 150.911181][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 150.947566][ T9941] tipc: Enabling of bearer rejected, failed to enable media [ 151.227508][ T9971] netlink: 'syz.4.1104': attribute type 10 has an invalid length. [ 151.239009][ T9969] netlink: 'syz.3.1103': attribute type 1 has an invalid length. [ 151.255775][ T9971] __nla_validate_parse: 18 callbacks suppressed [ 151.255790][ T9971] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1104'. [ 151.258538][ T9977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1106'. [ 151.321010][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1107'. [ 151.363288][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1107'. [ 151.467489][ T9987] netlink: 'syz.4.1109': attribute type 4 has an invalid length. [ 151.545880][ T9995] netlink: 'syz.4.1109': attribute type 4 has an invalid length. [ 151.583053][ T9998] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.1111'. [ 151.945296][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 151.985301][T10019] syzkaller1: entered promiscuous mode [ 151.994172][T10019] syzkaller1: entered allmulticast mode [ 152.136193][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1117'. [ 152.201458][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 152.236060][T10031] netlink: 'syz.0.1120': attribute type 11 has an invalid length. [ 152.242932][T10028] dummy0: left allmulticast mode [ 152.249721][T10031] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1120'. [ 152.256327][T10028] bridge0: port 2(dummy0) entered disabled state [ 152.263113][T10033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1121'. [ 152.287894][T10028] bridge_slave_0: left allmulticast mode [ 152.293648][T10028] bridge_slave_0: left promiscuous mode [ 152.301093][T10028] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.305345][T10041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1122'. [ 152.402144][T10033] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 152.416225][T10033] bond3 (unregistering): Released all slaves [ 152.446378][T10039] netlink: 'syz.4.1123': attribute type 4 has an invalid length. [ 152.984280][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 153.158294][T10089] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 153.535436][T10109] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.902479][T10128] wg1 speed is unknown, defaulting to 1000 [ 153.925417][T10136] xt_hashlimit: max too large, truncated to 1048576 [ 154.025053][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 154.259013][T10150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.426097][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 154.469746][T10166] netlink: 'syz.4.1155': attribute type 11 has an invalid length. [ 154.496109][T10164] veth5: entered allmulticast mode [ 154.695633][T10174] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 154.795349][T10173] validate_nla: 1 callbacks suppressed [ 154.795366][T10173] netlink: 'syz.4.1156': attribute type 1 has an invalid length. [ 154.856079][T10184] netlink: 'syz.0.1157': attribute type 7 has an invalid length. [ 154.908115][T10184] netlink: 'syz.0.1157': attribute type 8 has an invalid length. [ 155.070579][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 155.144015][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 155.374807][T10210] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 155.412213][T10210] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 155.832514][T10232] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 155.847617][T10232] bond3 (unregistering): Released all slaves [ 155.859386][T10238] netlink: 'syz.0.1167': attribute type 13 has an invalid length. [ 155.872509][T10238] netlink: 'syz.0.1167': attribute type 17 has an invalid length. [ 155.908036][T10238] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.915235][T10238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.922845][T10238] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.930022][T10238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.959082][T10238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.104155][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 156.392582][T10267] __nla_validate_parse: 20 callbacks suppressed [ 156.392599][T10267] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1181'. [ 156.653018][T10279] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 156.906646][T10293] netlink: 'syz.0.1188': attribute type 64 has an invalid length. [ 156.938087][T10293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1188'. [ 156.991963][T10290] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1187'. [ 157.024078][T10298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.154751][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 157.172902][T10309] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1191'. [ 157.354475][T10318] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1194'. [ 157.527735][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1195'. [ 157.757137][T10346] : renamed from bridge_slave_1 (while UP) [ 158.112859][T10363] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1204'. [ 158.125392][T10365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1202'. [ 158.125583][T10362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1203'. [ 158.135246][T10365] netlink: 'syz.0.1202': attribute type 8 has an invalid length. [ 158.154598][T10363] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 158.174422][T10363] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.182059][T10363] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.191066][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 158.259812][T10362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1203'. [ 158.305477][ T30] audit: type=1800 audit(1760670710.148:5): pid=10371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1206" name="memory.events" dev="tmpfs" ino=1262 res=0 errno=0 [ 158.413271][ T30] audit: type=1804 audit(1760670710.158:6): pid=10371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1206" name="/newroot/244/memory.events" dev="tmpfs" ino=1262 res=1 errno=0 [ 158.504412][T10383] netlink: 'syz.0.1207': attribute type 21 has an invalid length. [ 158.512803][ T30] audit: type=1804 audit(1760670710.158:7): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1206" name="/newroot/244/memory.events" dev="tmpfs" ino=1262 res=1 errno=0 [ 158.548118][ T30] audit: type=1800 audit(1760670710.158:8): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1206" name="memory.events" dev="tmpfs" ino=1262 res=0 errno=0 [ 159.061554][T10416] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 159.224311][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 159.926571][T10468] bond6: option mode: invalid value (133) [ 159.937089][T10468] bond6 (unregistering): Released all slaves [ 160.265878][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 160.715457][T10509] hsr_slave_1 (unregistering): left promiscuous mode [ 160.987951][T10539] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 161.023284][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.146797][T10524] bridge_slave_0: left allmulticast mode [ 161.161974][T10524] bridge_slave_0: left promiscuous mode [ 161.168503][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.207129][T10524] bridge_slave_1: left allmulticast mode [ 161.212783][T10524] bridge_slave_1: left promiscuous mode [ 161.228587][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.253130][T10524] bond0: (slave bond_slave_0): Releasing backup interface [ 161.277400][T10524] team0: Port device team_slave_0 removed [ 161.299778][T10524] team0: Port device team_slave_1 removed [ 161.305984][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 161.331173][T10524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.342910][T10524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.360529][T10524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.374407][T10524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.406619][T10524] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 161.562348][T10558] validate_nla: 5 callbacks suppressed [ 161.562363][T10558] netlink: 'syz.1.1250': attribute type 2 has an invalid length. [ 161.701031][T10570] __nla_validate_parse: 9 callbacks suppressed [ 161.701046][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1254'. [ 161.769866][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1256'. [ 161.792435][T10578] netlink: 'syz.1.1256': attribute type 7 has an invalid length. [ 161.814483][T10578] netlink: 'syz.1.1256': attribute type 8 has an invalid length. [ 161.840503][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 161.862296][T10578] erspan0: entered promiscuous mode [ 161.886816][T10578] batadv_slave_1: entered promiscuous mode [ 161.904701][T10578] batadv_slave_1: left promiscuous mode [ 161.911267][T10578] erspan0: left promiscuous mode [ 162.227710][T10597] delete_channel: no stack [ 162.229282][T10604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1265'. [ 162.275012][T10604] netlink: 'syz.2.1265': attribute type 7 has an invalid length. [ 162.290728][T10604] netlink: 'syz.2.1265': attribute type 8 has an invalid length. [ 162.344672][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 162.364989][T10609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.366663][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 162.577315][T10618] netlink: 'syz.4.1272': attribute type 2 has an invalid length. [ 162.615915][T10622] bridge0: port 2() entered disabled state [ 162.622447][T10622] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.948301][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.977348][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.011085][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.049231][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.093703][T10661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1283'. [ 163.144286][T10659] tipc: Started in network mode [ 163.150352][T10659] tipc: Node identity 52d16bf39dd3, cluster identity 4711 [ 163.166019][T10659] tipc: Enabled bearer , priority 0 [ 163.176081][T10659] syzkaller0: entered promiscuous mode [ 163.181642][T10659] syzkaller0: entered allmulticast mode [ 163.239146][T10659] tipc: Resetting bearer [ 163.272375][T10666] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1285'. [ 163.296337][T10666] netlink: 'syz.4.1285': attribute type 33 has an invalid length. [ 163.329668][T10656] tipc: Resetting bearer [ 163.330972][T10666] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1285'. [ 163.384703][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 163.391605][T10656] tipc: Disabling bearer [ 163.487610][T10676] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 163.496383][T10676] ksmbd: Unknown IPC event: 3, ignore. [ 163.616141][T10683] netlink: 'syz.3.1292': attribute type 1 has an invalid length. [ 163.633620][T10683] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1292'. [ 163.668756][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 163.771599][T10691] netlink: 'syz.3.1292': attribute type 1 has an invalid length. [ 163.800081][T10697] syzkaller0: entered promiscuous mode [ 163.809617][T10697] syzkaller0: entered allmulticast mode [ 163.825062][T10699] dvmrp0: entered allmulticast mode [ 163.838116][T10697] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 163.991352][T10706] syzkaller1: entered promiscuous mode [ 164.006251][T10706] syzkaller1: entered allmulticast mode [ 164.019881][T10706] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 164.427797][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 164.620217][T10740] xt_CT: No such helper "syz1" [ 164.637022][T10744] xt_l2tp: v2 sid > 0xffff: 1114112 [ 164.843030][T10756] x_tables: duplicate underflow at hook 3 [ 165.076321][T10771] tipc: Enabled bearer , priority 0 [ 165.085061][T10771] syzkaller0: entered promiscuous mode [ 165.090535][T10771] syzkaller0: entered allmulticast mode [ 165.102914][T10771] tipc: Resetting bearer [ 165.139021][T10770] tipc: Resetting bearer [ 165.183669][T10770] tipc: Disabling bearer [ 165.299745][T10779] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 165.378335][T10779] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 165.436541][T10779] gretap1: entered promiscuous mode [ 165.453965][T10779] gretap1: entered allmulticast mode [ 165.468540][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 166.185296][T10850] nbd: must specify at least one socket [ 166.508028][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 166.850988][T10882] validate_nla: 5 callbacks suppressed [ 166.851004][T10882] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 166.867087][T10885] sctp: [Deprecated]: syz.2.1350 (pid 10885) Use of int in max_burst socket option deprecated. [ 166.867087][T10885] Use struct sctp_assoc_value instead [ 166.886457][T10882] tipc: Enabled bearer , priority 0 [ 166.887503][T10881] __nla_validate_parse: 8 callbacks suppressed [ 166.887516][T10881] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1351'. [ 166.944209][T10882] syzkaller0: entered promiscuous mode [ 166.950468][T10882] syzkaller0: entered allmulticast mode [ 166.980963][T10894] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 167.100773][T10894] tipc: Resetting bearer [ 167.125024][T10878] tipc: Resetting bearer [ 167.157740][T10878] tipc: Disabling bearer [ 167.182090][T10898] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1356'. [ 167.288364][T10909] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 167.547193][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 167.615363][T10920] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1360'. [ 167.699958][T10920] netlink: 151680 bytes leftover after parsing attributes in process `syz.1.1360'. [ 167.713514][T10938] ip6t_rpfilter: unknown options [ 167.749519][T10920] openvswitch: netlink: Message has 512 unknown bytes. [ 167.867664][T10940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1363'. [ 167.922025][T10944] x_tables: duplicate underflow at hook 1 [ 167.966944][T10947] x_tables: duplicate underflow at hook 1 [ 168.169261][T10967] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1370'. [ 168.202165][T10963] bond6: entered allmulticast mode [ 168.208995][T10963] 8021q: adding VLAN 0 to HW filter on device bond6 [ 168.316191][T10967] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 168.336388][T10967] bond5 (unregistering): Released all slaves [ 168.589012][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 168.636822][T10994] bond7: Unable to set up delay as MII monitoring is disabled [ 168.646888][T10994] bond7 (unregistering): Released all slaves [ 168.923570][ T5197] udevd[5197]: worker [5874] terminated by signal 33 (Unknown signal 33) [ 168.972436][ T5197] udevd[5197]: worker [5874] failed while handling '/devices/virtual/block/loop4' [ 169.362074][T11041] sctp: [Deprecated]: syz.4.1388 (pid 11041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.362074][T11041] Use struct sctp_sack_info instead [ 169.480202][T11044] macvtap1: entered promiscuous mode [ 169.487800][T11044] macvtap1: entered allmulticast mode [ 169.493585][T11044] bond_slave_0: entered promiscuous mode [ 169.499387][T11044] bond_slave_1: entered promiscuous mode [ 169.505144][T11044] bond0: entered allmulticast mode [ 169.510257][T11044] bond_slave_0: entered allmulticast mode [ 169.516502][T11044] bond_slave_1: entered allmulticast mode [ 169.523103][T11044] bond0: entered promiscuous mode [ 169.557337][T11044] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 169.578854][T11044] team0: Device macvtap1 failed to register rx_handler [ 169.593719][T11044] bond0: left allmulticast mode [ 169.600577][T11044] bond_slave_0: left allmulticast mode [ 169.607966][T11044] bond_slave_1: left allmulticast mode [ 169.613739][T11044] bond0: left promiscuous mode [ 169.620797][T11044] bond_slave_0: left promiscuous mode [ 169.626285][T11044] bond_slave_1: left promiscuous mode [ 169.632231][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 169.644343][T11049] netlink: 'syz.1.1391': attribute type 83 has an invalid length. [ 169.792487][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1394'. [ 169.821359][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1394'. [ 169.866943][T11055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1394'. [ 169.897729][T11055] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1394'. [ 169.959849][T11055] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 169.978038][T11055] bond3 (unregistering): Released all slaves [ 170.227118][T11082] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 170.256921][T11082] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 170.262394][T11085] netlink: 'syz.4.1402': attribute type 3 has an invalid length. [ 170.271386][T11082] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 170.271485][T11082] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 170.271574][T11082] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 170.271651][T11082] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 170.389988][T11082] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 170.404872][T11082] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 170.419701][T11082] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 170.502597][T11096] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 170.597908][T11098] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 170.665843][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 170.722422][T11106] netlink: 'syz.1.1410': attribute type 1 has an invalid length. [ 170.759291][T11106] netlink: 'syz.1.1410': attribute type 4 has an invalid length. [ 171.686119][T11154] pim6reg: entered allmulticast mode [ 171.705865][T11154] pim6reg: left allmulticast mode [ 171.707130][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 171.902097][T11130] infiniband syz1: set down [ 171.907041][T11130] infiniband syz1: added bond0 [ 171.992194][T11130] RDS/IB: syz1: added [ 172.007987][T11130] smc: adding ib device syz1 with port count 1 [ 172.015979][T11130] smc: ib device syz1 port 1 has no pnetid [ 172.291001][T11174] __nla_validate_parse: 13 callbacks suppressed [ 172.291017][T11174] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1430'. [ 172.615557][T11195] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1436'. [ 172.721090][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 172.744527][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 172.843912][T11200] netlink: 'syz.0.1439': attribute type 27 has an invalid length. [ 172.870428][T11200] netlink: 'syz.0.1439': attribute type 4 has an invalid length. [ 172.884644][T11200] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1439'. [ 173.268899][T11218] batadv_slave_1: entered promiscuous mode [ 173.296402][T11218] batadv_slave_1: entered allmulticast mode [ 173.429060][T11227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1448'. [ 173.451251][T11229] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1449'. [ 173.460996][T11227] netlink: 'syz.1.1448': attribute type 83 has an invalid length. [ 173.612965][T11239] netlink: 'syz.4.1452': attribute type 18 has an invalid length. [ 173.788349][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 174.209468][T11271] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1462'. [ 174.332574][T11276] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1463'. [ 174.377520][T11278] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1465'. [ 174.606864][T11296] netlink: 'syz.1.1468': attribute type 6 has an invalid length. [ 174.630388][T11296] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1468'. [ 174.828512][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 175.203591][T11331] wg1 speed is unknown, defaulting to 1000 [ 175.440226][T11338] wg2: entered promiscuous mode [ 175.447434][T11338] wg2: entered allmulticast mode [ 175.864482][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 176.185128][T11378] nbd: couldn't find a device at index -373156329 [ 176.267357][T11380] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 176.322329][T11368] bridge4: entered promiscuous mode [ 176.330258][T11368] bridge4: entered allmulticast mode [ 176.341371][T11380] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 176.369630][T11380] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 176.526070][T11380] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 176.534710][T11394] gretap0: entered promiscuous mode [ 176.542926][T11380] netlink: 'syz.0.1493': attribute type 10 has an invalid length. [ 176.886550][T11414] Bluetooth: MGMT ver 1.23 [ 176.904765][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 176.934191][T11419] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.118971][T11424] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.142870][T11425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 177.149818][T11425] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 177.161636][T11425] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 177.196932][T11426] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 177.207514][T11426] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 177.309951][T11434] syzkaller1: entered promiscuous mode [ 177.315809][T11434] syzkaller1: entered allmulticast mode [ 177.423927][T11451] __nla_validate_parse: 10 callbacks suppressed [ 177.423943][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 177.500779][T11453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1514'. [ 177.509451][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1515'. [ 177.527986][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1515'. [ 177.609716][T11458] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1517'. [ 177.682759][T11465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1518'. [ 177.693507][T11470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1518'. [ 177.754620][T11470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1518'. [ 177.834466][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1520'. [ 177.871470][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1520'. [ 177.944748][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 178.021995][T11488] net_ratelimit: 246 callbacks suppressed [ 178.022012][T11488] openvswitch: netlink: IP tunnel TTL not specified. [ 178.051371][T11486] tipc: Enabled bearer , priority 0 [ 178.067518][T11486] syzkaller0: entered promiscuous mode [ 178.073006][T11486] syzkaller0: entered allmulticast mode [ 178.153103][T11495] validate_nla: 30 callbacks suppressed [ 178.153118][T11495] netlink: 'syz.0.1527': attribute type 21 has an invalid length. [ 178.189926][T11486] tipc: Resetting bearer [ 178.217601][ T30] audit: type=1800 audit(1760670730.068:9): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1525" name="memory.events" dev="tmpfs" ino=1676 res=0 errno=0 [ 178.247888][T11483] tipc: Resetting bearer [ 178.252886][ T30] audit: type=1804 audit(1760670730.068:10): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1525" name="/newroot/327/memory.events" dev="tmpfs" ino=1676 res=1 errno=0 [ 178.294966][T11483] tipc: Disabling bearer [ 178.304760][T11495] netlink: 'syz.0.1527': attribute type 6 has an invalid length. [ 178.312747][T11499] netlink: 'syz.2.1531': attribute type 4 has an invalid length. [ 178.515034][T11519] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 178.537087][T11519] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 178.561633][T11519] netlink: 'syz.0.1535': attribute type 2 has an invalid length. [ 178.984908][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 179.283201][T11567] netlink: 'syz.2.1550': attribute type 1 has an invalid length. [ 179.422464][T11576] netlink: 'syz.1.1552': attribute type 7 has an invalid length. [ 179.422924][T11577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.577664][T11583] sctp: [Deprecated]: syz.4.1554 (pid 11583) Use of int in maxseg socket option. [ 179.577664][T11583] Use struct sctp_assoc_value instead [ 179.709265][T11586] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.024185][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 181.064389][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 181.134148][T11632] veth0_virt_wifi: entered promiscuous mode [ 181.140472][T11632] veth0_virt_wifi: left allmulticast mode [ 181.550616][T11656] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 181.557233][T11656] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.613565][T11657] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 181.630210][T11657] bond5 (unregistering): Released all slaves [ 181.899685][T11679] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.078673][T11685] netlink: 'syz.3.1585': attribute type 1 has an invalid length. [ 182.104219][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 182.135772][T11688] tipc: Enabling of bearer rejected, failed to enable media [ 182.218750][T11691] FAULT_INJECTION: forcing a failure. [ 182.218750][T11691] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 182.260785][T11691] CPU: 1 UID: 0 PID: 11691 Comm: syz.0.1587 Not tainted syzkaller #0 PREEMPT(full) [ 182.260807][T11691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.260824][T11691] Call Trace: [ 182.260831][T11691] [ 182.260839][T11691] dump_stack_lvl+0x189/0x250 [ 182.260872][T11691] ? __pfx____ratelimit+0x10/0x10 [ 182.260898][T11691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.260916][T11691] ? __pfx__printk+0x10/0x10 [ 182.260934][T11691] ? __might_fault+0xb0/0x130 [ 182.260964][T11691] should_fail_ex+0x414/0x560 [ 182.261001][T11691] _copy_from_iter+0x1de/0x1790 [ 182.261027][T11691] ? rcu_is_watching+0x15/0xb0 [ 182.261055][T11691] ? kmalloc_reserve+0xbd/0x290 [ 182.261079][T11691] ? __pfx__copy_from_iter+0x10/0x10 [ 182.261101][T11691] ? __build_skb_around+0x262/0x3f0 [ 182.261127][T11691] ? netlink_sendmsg+0x642/0xb30 [ 182.261149][T11691] ? skb_put+0x11b/0x210 [ 182.261175][T11691] netlink_sendmsg+0x6b2/0xb30 [ 182.261207][T11691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.261234][T11691] ? aa_sock_msg_perm+0xf1/0x1d0 [ 182.261255][T11691] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.261275][T11691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.261299][T11691] __sock_sendmsg+0x21c/0x270 [ 182.261323][T11691] ____sys_sendmsg+0x505/0x830 [ 182.261353][T11691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.261387][T11691] ? import_iovec+0x74/0xa0 [ 182.261413][T11691] ___sys_sendmsg+0x21f/0x2a0 [ 182.261431][T11691] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.261492][T11691] ? __fget_files+0x2a/0x420 [ 182.261511][T11691] ? __fget_files+0x3a0/0x420 [ 182.261541][T11691] __x64_sys_sendmsg+0x19b/0x260 [ 182.261561][T11691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.261587][T11691] ? __pfx_ksys_write+0x10/0x10 [ 182.261610][T11691] ? do_syscall_64+0xbe/0xfa0 [ 182.261631][T11691] do_syscall_64+0xfa/0xfa0 [ 182.261646][T11691] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.261663][T11691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.261680][T11691] ? clear_bhb_loop+0x60/0xb0 [ 182.261702][T11691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.261718][T11691] RIP: 0033:0x7fc6d518eec9 [ 182.261741][T11691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.261755][T11691] RSP: 002b:00007fc6d60de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.261784][T11691] RAX: ffffffffffffffda RBX: 00007fc6d53e5fa0 RCX: 00007fc6d518eec9 [ 182.261797][T11691] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 182.261808][T11691] RBP: 00007fc6d60de090 R08: 0000000000000000 R09: 0000000000000000 [ 182.261818][T11691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.261828][T11691] R13: 00007fc6d53e6038 R14: 00007fc6d53e5fa0 R15: 00007ffe5750daf8 [ 182.261859][T11691] [ 182.668262][T11700] __nla_validate_parse: 18 callbacks suppressed [ 182.668280][T11700] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1590'. [ 182.759599][T11709] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1592'. [ 182.838887][T11718] netlink: 'syz.4.1592': attribute type 1 has an invalid length. [ 182.870416][T11718] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1592'. [ 182.953073][T11718] TCP: TCP_TX_DELAY enabled [ 183.011826][T11709] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 183.044701][T11709] bond7 (unregistering): Released all slaves [ 183.145704][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 183.450391][T11752] FAULT_INJECTION: forcing a failure. [ 183.450391][T11752] name failslab, interval 1, probability 0, space 0, times 1 [ 183.484947][T11756] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1603'. [ 183.522669][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1602'. [ 183.559218][T11752] CPU: 0 UID: 0 PID: 11752 Comm: syz.2.1601 Not tainted syzkaller #0 PREEMPT(full) [ 183.559241][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.559251][T11752] Call Trace: [ 183.559258][T11752] [ 183.559266][T11752] dump_stack_lvl+0x189/0x250 [ 183.559290][T11752] ? __pfx____ratelimit+0x10/0x10 [ 183.559315][T11752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.559333][T11752] ? __pfx__printk+0x10/0x10 [ 183.559354][T11752] ? __pfx___might_resched+0x10/0x10 [ 183.559377][T11752] ? fs_reclaim_acquire+0x7d/0x100 [ 183.559402][T11752] should_fail_ex+0x414/0x560 [ 183.559433][T11752] should_failslab+0xa8/0x100 [ 183.559456][T11752] __kmalloc_cache_noprof+0x6f/0x6f0 [ 183.559476][T11752] ? rtnl_newlink+0xfb/0x1c80 [ 183.559504][T11752] rtnl_newlink+0xfb/0x1c80 [ 183.559539][T11752] ? __pfx_rtnl_newlink+0x10/0x10 [ 183.559566][T11752] ? is_bpf_text_address+0x26/0x2b0 [ 183.559592][T11752] ? is_bpf_text_address+0x292/0x2b0 [ 183.559622][T11752] ? is_bpf_text_address+0x26/0x2b0 [ 183.559649][T11752] ? __lock_acquire+0xab9/0xd20 [ 183.559683][T11752] ? __lock_acquire+0xab9/0xd20 [ 183.559724][T11752] ? is_bpf_text_address+0x26/0x2b0 [ 183.559751][T11752] ? is_bpf_text_address+0x292/0x2b0 [ 183.559771][T11752] ? is_bpf_text_address+0x26/0x2b0 [ 183.559802][T11752] ? __lock_acquire+0xab9/0xd20 [ 183.559847][T11752] ? __pfx_rtnl_newlink+0x10/0x10 [ 183.559869][T11752] rtnetlink_rcv_msg+0x7cf/0xb70 [ 183.559890][T11752] ? __lock_acquire+0xab9/0xd20 [ 183.559913][T11752] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 183.559934][T11752] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 183.559973][T11752] netlink_rcv_skb+0x208/0x470 [ 183.559994][T11752] ? __lock_acquire+0xab9/0xd20 [ 183.560021][T11752] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 183.560044][T11752] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.560076][T11752] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.560106][T11752] netlink_unicast+0x82f/0x9e0 [ 183.560136][T11752] ? __pfx_netlink_unicast+0x10/0x10 [ 183.560160][T11752] ? netlink_sendmsg+0x642/0xb30 [ 183.560181][T11752] ? skb_put+0x11b/0x210 [ 183.560208][T11752] netlink_sendmsg+0x805/0xb30 [ 183.560241][T11752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.560268][T11752] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.560290][T11752] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.560311][T11752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.560334][T11752] __sock_sendmsg+0x21c/0x270 [ 183.560358][T11752] ____sys_sendmsg+0x505/0x830 [ 183.560388][T11752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.560423][T11752] ? import_iovec+0x74/0xa0 [ 183.560448][T11752] ___sys_sendmsg+0x21f/0x2a0 [ 183.560466][T11752] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.560526][T11752] ? __fget_files+0x2a/0x420 [ 183.560546][T11752] ? __fget_files+0x3a0/0x420 [ 183.560577][T11752] __x64_sys_sendmsg+0x19b/0x260 [ 183.560597][T11752] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.560624][T11752] ? __pfx_ksys_write+0x10/0x10 [ 183.560646][T11752] ? do_syscall_64+0xbe/0xfa0 [ 183.560667][T11752] do_syscall_64+0xfa/0xfa0 [ 183.560683][T11752] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.560699][T11752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.560717][T11752] ? clear_bhb_loop+0x60/0xb0 [ 183.560738][T11752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.560754][T11752] RIP: 0033:0x7fde6af8eec9 [ 183.560770][T11752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.560784][T11752] RSP: 002b:00007fde6bec0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.560803][T11752] RAX: ffffffffffffffda RBX: 00007fde6b1e5fa0 RCX: 00007fde6af8eec9 [ 183.560816][T11752] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 183.560827][T11752] RBP: 00007fde6bec0090 R08: 0000000000000000 R09: 0000000000000000 [ 183.560837][T11752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.560846][T11752] R13: 00007fde6b1e6038 R14: 00007fde6b1e5fa0 R15: 00007ffed169d488 [ 183.560877][T11752] [ 183.981598][T11753] bridge0: port 1(batadv1) entered blocking state [ 183.989122][T11753] bridge0: port 1(batadv1) entered disabled state [ 183.996168][T11753] batadv1: entered allmulticast mode [ 184.009325][T11753] batadv1: entered promiscuous mode [ 184.090339][ T1140] batman_adv: batadv1: IGMP Querier appeared [ 184.096845][ T1140] batman_adv: batadv1: MLD Querier appeared [ 184.184395][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 184.314585][T11773] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.1607'. [ 184.369450][T11784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1610'. [ 184.406544][T11783] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.437023][T11783] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.550708][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 184.638360][T11783] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.659156][T11783] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.786072][T11783] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.799169][T11783] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.882071][T11783] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.911870][T11783] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.989080][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1622'. [ 185.135667][ T66] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.153308][ T66] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.172578][ T66] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.183247][ T66] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.226150][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 185.258629][ T1140] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.277374][ T1140] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.330079][T11838] dvmrp0: entered allmulticast mode [ 185.340367][ T1140] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.351819][ T1140] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.395126][T11785] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.426155][T11785] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.433003][T11851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.449935][T11851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.473490][ T1140] ================================================================== [ 185.481570][ T1140] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 185.489122][ T1140] Read of size 8 at addr ffff8880305e36b0 by task kworker/u8:6/1140 [ 185.497095][ T1140] [ 185.499421][ T1140] CPU: 0 UID: 0 PID: 1140 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 185.499442][ T1140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 185.499454][ T1140] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 185.499482][ T1140] Call Trace: [ 185.499490][ T1140] [ 185.499497][ T1140] dump_stack_lvl+0x189/0x250 [ 185.499517][ T1140] ? __kasan_check_byte+0x12/0x40 [ 185.499539][ T1140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.499556][ T1140] ? lock_release+0x4b/0x3e0 [ 185.499590][ T1140] ? __virt_addr_valid+0x4a5/0x5c0 [ 185.499609][ T1140] print_report+0xca/0x240 [ 185.499629][ T1140] ? __mutex_lock+0x147/0x1350 [ 185.499645][ T1140] kasan_report+0x118/0x150 [ 185.499664][ T1140] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 185.499689][ T1140] ? __mutex_lock+0x147/0x1350 [ 185.499709][ T1140] __mutex_lock+0x147/0x1350 [ 185.499728][ T1140] ? __mutex_lock+0x5bb/0x1350 [ 185.499746][ T1140] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 185.499771][ T1140] ? __pfx___mutex_lock+0x10/0x10 [ 185.499791][ T1140] ? __lock_acquire+0xab9/0xd20 [ 185.499816][ T1140] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 185.499843][ T1140] ? process_scheduled_works+0x9ef/0x17b0 [ 185.499865][ T1140] ? process_scheduled_works+0x9ef/0x17b0 [ 185.499887][ T1140] process_scheduled_works+0xae1/0x17b0 [ 185.499922][ T1140] ? __pfx_process_scheduled_works+0x10/0x10 [ 185.499951][ T1140] worker_thread+0x8a0/0xda0 [ 185.499984][ T1140] kthread+0x711/0x8a0 [ 185.500002][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 185.500024][ T1140] ? __pfx_kthread+0x10/0x10 [ 185.500040][ T1140] ? _raw_spin_unlock_irq+0x23/0x50 [ 185.500062][ T1140] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.500078][ T1140] ? __pfx_kthread+0x10/0x10 [ 185.500094][ T1140] ret_from_fork+0x4bc/0x870 [ 185.500117][ T1140] ? __pfx_ret_from_fork+0x10/0x10 [ 185.500142][ T1140] ? __switch_to_asm+0x39/0x70 [ 185.500161][ T1140] ? __switch_to_asm+0x33/0x70 [ 185.500179][ T1140] ? __pfx_kthread+0x10/0x10 [ 185.500196][ T1140] ret_from_fork_asm+0x1a/0x30 [ 185.500222][ T1140] [ 185.500229][ T1140] [ 185.574800][T11858] x_tables: unsorted entry at hook 2 [ 185.576953][ T1140] Allocated by task 11783: [ 185.576966][ T1140] kasan_save_track+0x3e/0x80 [ 185.576986][ T1140] __kasan_kmalloc+0x93/0xb0 [ 185.721540][ T1140] __kmalloc_noprof+0x411/0x7f0 [ 185.726382][ T1140] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 185.732538][ T1140] notifier_call_chain+0x1b6/0x3e0 [ 185.737637][ T1140] register_netdevice+0x1608/0x1ae0 [ 185.742814][ T1140] nsim_create+0xae8/0xf10 [ 185.747217][ T1140] __nsim_dev_port_add+0x6b6/0xb10 [ 185.752305][ T1140] nsim_dev_port_add_all+0x37/0xf0 [ 185.757398][ T1140] nsim_dev_reload_up+0x451/0x780 [ 185.762416][ T1140] devlink_reload+0x4ec/0x8d0 [ 185.767074][ T1140] devlink_nl_reload_doit+0xb35/0xd50 [ 185.772428][ T1140] genl_family_rcv_msg_doit+0x215/0x300 [ 185.777982][ T1140] genl_rcv_msg+0x60e/0x790 [ 185.782464][ T1140] netlink_rcv_skb+0x208/0x470 [ 185.787208][ T1140] genl_rcv+0x28/0x40 [ 185.791171][ T1140] netlink_unicast+0x82f/0x9e0 [ 185.795913][ T1140] netlink_sendmsg+0x805/0xb30 [ 185.800662][ T1140] __sock_sendmsg+0x21c/0x270 [ 185.805315][ T1140] ____sys_sendmsg+0x505/0x830 [ 185.810060][ T1140] ___sys_sendmsg+0x21f/0x2a0 [ 185.814719][ T1140] __x64_sys_sendmsg+0x19b/0x260 [ 185.819646][ T1140] do_syscall_64+0xfa/0xfa0 [ 185.824129][ T1140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.829998][ T1140] [ 185.832301][ T1140] Freed by task 11785: [ 185.836342][ T1140] kasan_save_track+0x3e/0x80 [ 185.840998][ T1140] __kasan_save_free_info+0x46/0x50 [ 185.846176][ T1140] __kasan_slab_free+0x5c/0x80 [ 185.850923][ T1140] kfree+0x19a/0x6d0 [ 185.854811][ T1140] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 185.861034][ T1140] notifier_call_chain+0x1b6/0x3e0 [ 185.866127][ T1140] unregister_netdevice_many_notify+0x1860/0x2390 [ 185.872524][ T1140] unregister_netdevice_queue+0x33c/0x380 [ 185.878310][ T1140] nsim_destroy+0x1dd/0x670 [ 185.882792][ T1140] __nsim_dev_port_del+0x14d/0x1b0 [ 185.887880][ T1140] nsim_dev_reload_destroy+0x288/0x490 [ 185.893331][ T1140] nsim_dev_reload_down+0x8a/0xc0 [ 185.898332][ T1140] devlink_reload+0x1b6/0x8d0 [ 185.902987][ T1140] devlink_nl_reload_doit+0xb35/0xd50 [ 185.908341][ T1140] genl_family_rcv_msg_doit+0x215/0x300 [ 185.913869][ T1140] genl_rcv_msg+0x60e/0x790 [ 185.918363][ T1140] netlink_rcv_skb+0x208/0x470 [ 185.923110][ T1140] genl_rcv+0x28/0x40 [ 185.927070][ T1140] netlink_unicast+0x82f/0x9e0 [ 185.931812][ T1140] netlink_sendmsg+0x805/0xb30 [ 185.936555][ T1140] __sock_sendmsg+0x21c/0x270 [ 185.941208][ T1140] ____sys_sendmsg+0x505/0x830 [ 185.945952][ T1140] ___sys_sendmsg+0x21f/0x2a0 [ 185.950606][ T1140] __x64_sys_sendmsg+0x19b/0x260 [ 185.955536][ T1140] do_syscall_64+0xfa/0xfa0 [ 185.960017][ T1140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.965895][ T1140] [ 185.968201][ T1140] Last potentially related work creation: [ 185.973895][ T1140] kasan_save_stack+0x3e/0x60 [ 185.978566][ T1140] kasan_record_aux_stack+0xbd/0xd0 [ 185.983750][ T1140] insert_work+0x3d/0x330 [ 185.988059][ T1140] __queue_work+0xbaf/0xfb0 [ 185.992543][ T1140] queue_work_on+0x181/0x270 [ 185.997122][ T1140] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 186.002752][ T1140] udp_tunnel_push_rx_port+0x180/0x200 [ 186.008195][ T1140] geneve_offload_rx_ports+0xd7/0x160 [ 186.013557][ T1140] geneve_netdevice_event+0x6a/0x80 [ 186.018731][ T1140] notifier_call_chain+0x1b6/0x3e0 [ 186.023822][ T1140] call_netdevice_notifiers+0x88/0xc0 [ 186.029190][ T1140] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 186.035325][ T1140] notifier_call_chain+0x1b6/0x3e0 [ 186.040416][ T1140] register_netdevice+0x1608/0x1ae0 [ 186.045589][ T1140] nsim_create+0xae8/0xf10 [ 186.049983][ T1140] __nsim_dev_port_add+0x6b6/0xb10 [ 186.055072][ T1140] nsim_dev_port_add_all+0x37/0xf0 [ 186.060156][ T1140] nsim_dev_reload_up+0x451/0x780 [ 186.065158][ T1140] devlink_reload+0x4ec/0x8d0 [ 186.069815][ T1140] devlink_nl_reload_doit+0xb35/0xd50 [ 186.075164][ T1140] genl_family_rcv_msg_doit+0x215/0x300 [ 186.080703][ T1140] genl_rcv_msg+0x60e/0x790 [ 186.085197][ T1140] netlink_rcv_skb+0x208/0x470 [ 186.089939][ T1140] genl_rcv+0x28/0x40 [ 186.093901][ T1140] netlink_unicast+0x82f/0x9e0 [ 186.098657][ T1140] netlink_sendmsg+0x805/0xb30 [ 186.103400][ T1140] __sock_sendmsg+0x21c/0x270 [ 186.108053][ T1140] ____sys_sendmsg+0x505/0x830 [ 186.112816][ T1140] ___sys_sendmsg+0x21f/0x2a0 [ 186.117473][ T1140] __x64_sys_sendmsg+0x19b/0x260 [ 186.122405][ T1140] do_syscall_64+0xfa/0xfa0 [ 186.126884][ T1140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.132752][ T1140] [ 186.135056][ T1140] Second to last potentially related work creation: [ 186.141614][ T1140] kasan_save_stack+0x3e/0x60 [ 186.146267][ T1140] kasan_record_aux_stack+0xbd/0xd0 [ 186.151443][ T1140] insert_work+0x3d/0x330 [ 186.155750][ T1140] __queue_work+0xcd2/0xfb0 [ 186.160233][ T1140] queue_work_on+0x181/0x270 [ 186.164800][ T1140] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 186.170411][ T1140] udp_tunnel_push_rx_port+0x180/0x200 [ 186.175870][ T1140] vxlan_offload_rx_ports+0x139/0x200 [ 186.181219][ T1140] vxlan_netdevice_event+0x111/0x470 [ 186.186482][ T1140] notifier_call_chain+0x1b6/0x3e0 [ 186.191596][ T1140] call_netdevice_notifiers+0x88/0xc0 [ 186.196951][ T1140] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 186.203106][ T1140] notifier_call_chain+0x1b6/0x3e0 [ 186.208208][ T1140] register_netdevice+0x1608/0x1ae0 [ 186.213384][ T1140] nsim_create+0xae8/0xf10 [ 186.217784][ T1140] __nsim_dev_port_add+0x6b6/0xb10 [ 186.222879][ T1140] nsim_dev_port_add_all+0x37/0xf0 [ 186.227978][ T1140] nsim_dev_reload_up+0x451/0x780 [ 186.232976][ T1140] devlink_reload+0x4ec/0x8d0 [ 186.237637][ T1140] devlink_nl_reload_doit+0xb35/0xd50 [ 186.242990][ T1140] genl_family_rcv_msg_doit+0x215/0x300 [ 186.248525][ T1140] genl_rcv_msg+0x60e/0x790 [ 186.253002][ T1140] netlink_rcv_skb+0x208/0x470 [ 186.257746][ T1140] genl_rcv+0x28/0x40 [ 186.261706][ T1140] netlink_unicast+0x82f/0x9e0 [ 186.264297][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 186.266445][ T1140] netlink_sendmsg+0x805/0xb30 [ 186.266470][ T1140] __sock_sendmsg+0x21c/0x270 [ 186.284594][ T1140] ____sys_sendmsg+0x505/0x830 [ 186.289359][ T1140] ___sys_sendmsg+0x21f/0x2a0 [ 186.294030][ T1140] __x64_sys_sendmsg+0x19b/0x260 [ 186.298960][ T1140] do_syscall_64+0xfa/0xfa0 [ 186.303437][ T1140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.309311][ T1140] [ 186.311613][ T1140] The buggy address belongs to the object at ffff8880305e3600 [ 186.311613][ T1140] which belongs to the cache kmalloc-256 of size 256 [ 186.325638][ T1140] The buggy address is located 176 bytes inside of [ 186.325638][ T1140] freed 256-byte region [ffff8880305e3600, ffff8880305e3700) [ 186.339406][ T1140] [ 186.341707][ T1140] The buggy address belongs to the physical page: [ 186.348114][ T1140] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x305e2 [ 186.356858][ T1140] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 186.365344][ T1140] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 186.373301][ T1140] page_type: f5(slab) [ 186.377262][ T1140] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0001016300 dead000000000005 [ 186.385819][ T1140] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 186.394375][ T1140] head: 00fff00000000040 ffff88813ffa6b40 ffffea0001016300 dead000000000005 [ 186.403019][ T1140] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 186.411666][ T1140] head: 00fff00000000001 ffffea0000c17881 00000000ffffffff 00000000ffffffff [ 186.420310][ T1140] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 186.428951][ T1140] page dumped because: kasan: bad access detected [ 186.435348][ T1140] page_owner tracks the page as allocated [ 186.441039][ T1140] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 74162451241, free_ts 73998241588 [ 186.462376][ T1140] post_alloc_hook+0x240/0x2a0 [ 186.467122][ T1140] get_page_from_freelist+0x2365/0x2440 [ 186.472655][ T1140] __alloc_frozen_pages_noprof+0x181/0x370 [ 186.478457][ T1140] alloc_pages_mpol+0x232/0x4a0 [ 186.483291][ T1140] allocate_slab+0x96/0x3a0 [ 186.487776][ T1140] ___slab_alloc+0xe94/0x18a0 [ 186.492429][ T1140] __slab_alloc+0x65/0x100 [ 186.496824][ T1140] __kmalloc_cache_noprof+0x411/0x6f0 [ 186.502172][ T1140] ____ip_mc_inc_group+0x528/0xde0 [ 186.507263][ T1140] ip_mc_up+0x125/0x300 [ 186.511396][ T1140] inetdev_event+0xfb3/0x15b0 [ 186.516050][ T1140] notifier_call_chain+0x1b6/0x3e0 [ 186.521139][ T1140] __dev_notify_flags+0x18d/0x2e0 [ 186.526141][ T1140] netif_change_flags+0xe8/0x1a0 [ 186.531057][ T1140] do_setlink+0xc55/0x41c0 [ 186.535452][ T1140] rtnl_newlink+0x1619/0x1c80 [ 186.540112][ T1140] page last free pid 5937 tgid 5937 stack trace: [ 186.546408][ T1140] __free_frozen_pages+0xbc4/0xd30 [ 186.551494][ T1140] __slab_free+0x2e7/0x390 [ 186.555889][ T1140] qlist_free_all+0x97/0x140 [ 186.560456][ T1140] kasan_quarantine_reduce+0x148/0x160 [ 186.565894][ T1140] __kasan_slab_alloc+0x22/0x80 [ 186.570723][ T1140] kmem_cache_alloc_noprof+0x367/0x6e0 [ 186.576170][ T1140] vm_area_dup+0x2b/0x680 [ 186.580484][ T1140] __split_vma+0x1a9/0xa00 [ 186.584881][ T1140] vms_gather_munmap_vmas+0x2e2/0x12e0 [ 186.590318][ T1140] mmap_region+0x722/0x2110 [ 186.594808][ T1140] do_mmap+0xc45/0x10d0 [ 186.598937][ T1140] vm_mmap_pgoff+0x2a6/0x4d0 [ 186.603514][ T1140] ksys_mmap_pgoff+0x51f/0x760 [ 186.608254][ T1140] do_syscall_64+0xfa/0xfa0 [ 186.612736][ T1140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.618608][ T1140] [ 186.620922][ T1140] Memory state around the buggy address: [ 186.626525][ T1140] ffff8880305e3580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.634564][ T1140] ffff8880305e3600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.642600][ T1140] >ffff8880305e3680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.650633][ T1140] ^ [ 186.656238][ T1140] ffff8880305e3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.664284][ T1140] ffff8880305e3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.672316][ T1140] ================================================================== [ 186.685812][ T1140] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.693006][ T1140] CPU: 0 UID: 0 PID: 1140 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 186.702443][ T1140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.712496][ T1140] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 186.719777][ T1140] Call Trace: [ 186.723039][ T1140] [ 186.725952][ T1140] dump_stack_lvl+0x99/0x250 [ 186.730527][ T1140] ? __asan_memcpy+0x40/0x70 [ 186.735101][ T1140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.740288][ T1140] ? __pfx__printk+0x10/0x10 [ 186.744864][ T1140] vpanic+0x237/0x6d0 [ 186.748830][ T1140] ? __pfx_vpanic+0x10/0x10 [ 186.753314][ T1140] ? preempt_schedule+0xae/0xc0 [ 186.758152][ T1140] ? __pfx_preempt_schedule+0x10/0x10 [ 186.763517][ T1140] panic+0xb9/0xc0 [ 186.767227][ T1140] ? __pfx_panic+0x10/0x10 [ 186.771631][ T1140] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 186.777512][ T1140] ? __mutex_lock+0x147/0x1350 [ 186.782256][ T1140] check_panic_on_warn+0x89/0xb0 [ 186.787180][ T1140] ? __mutex_lock+0x147/0x1350 [ 186.791925][ T1140] end_report+0x78/0x160 [ 186.796152][ T1140] kasan_report+0x129/0x150 [ 186.800637][ T1140] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 186.806521][ T1140] ? __mutex_lock+0x147/0x1350 [ 186.811265][ T1140] __mutex_lock+0x147/0x1350 [ 186.815835][ T1140] ? __mutex_lock+0x5bb/0x1350 [ 186.820671][ T1140] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 186.826900][ T1140] ? __pfx___mutex_lock+0x10/0x10 [ 186.831906][ T1140] ? __lock_acquire+0xab9/0xd20 [ 186.836742][ T1140] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 186.842797][ T1140] ? process_scheduled_works+0x9ef/0x17b0 [ 186.848501][ T1140] ? process_scheduled_works+0x9ef/0x17b0 [ 186.854206][ T1140] process_scheduled_works+0xae1/0x17b0 [ 186.859744][ T1140] ? __pfx_process_scheduled_works+0x10/0x10 [ 186.865715][ T1140] worker_thread+0x8a0/0xda0 [ 186.870301][ T1140] kthread+0x711/0x8a0 [ 186.874352][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 186.879460][ T1140] ? __pfx_kthread+0x10/0x10 [ 186.884035][ T1140] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.889230][ T1140] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.894408][ T1140] ? __pfx_kthread+0x10/0x10 [ 186.898982][ T1140] ret_from_fork+0x4bc/0x870 [ 186.903556][ T1140] ? __pfx_ret_from_fork+0x10/0x10 [ 186.908654][ T1140] ? __switch_to_asm+0x39/0x70 [ 186.913403][ T1140] ? __switch_to_asm+0x33/0x70 [ 186.918146][ T1140] ? __pfx_kthread+0x10/0x10 [ 186.922725][ T1140] ret_from_fork_asm+0x1a/0x30 [ 186.927479][ T1140] [ 186.930720][ T1140] Kernel Offset: disabled [ 186.935022][ T1140] Rebooting in 86400 seconds..