last executing test programs: 24.778274327s ago: executing program 3 (id=2681): unshare(0x2020600) unshare(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)}, 0xc000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211d", 0x2c}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) unshare(0x40000200) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x3f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r4, 0x3000}}, 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x40, 0x8, 0xffffffff, 0x2, {{0xa, 0x4, 0x0, 0x30, 0x28, 0x65, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x83, 0x3, '['}, @end, @noop, @end, @timestamp_addr={0x44, 0xc, 0x65, 0x1, 0xc, [{@remote, 0x9}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x7b, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @empty, @broadcast}, &(0x7f0000000680)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c000280"], 0x24}}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) r12 = socket(0x1d, 0x5, 0x40000) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7}]}}]}, 0x44}}, 0x44884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xfff3}, {}, {0xfff1, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x319}]}}]}, 0x3c}}, 0x2000c800) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)=ANY=[@ANYBLOB="68010000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fddbdf25040000001800018014000200697036746e6c3000000000000000000078000180140002000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014000200767863616e3100000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000300000000000c00018008000100", @ANYRES32=r6, @ANYBLOB="2000018008000300010000001400020076657468305f766c616e0000000000000400018004000180840001801400020076657468305f746f5f62726964676500080003000100000008000300020000001400020076657468315f766972745f776966690008000100", @ANYRES32=r6, @ANYBLOB="140002006970365f767469300000000000000000140002006361696630000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08013400", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB], 0x168}, 0x1, 0x0, 0x0, 0x8005}, 0x20048081) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x1}}, 0x10) 14.433066866s ago: executing program 3 (id=2700): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 13.980427903s ago: executing program 3 (id=2701): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r4, 0x6}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020100002c000480280001800a0001006d617463680000001800028008000240000000030800010075333200040003000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0) 5.857194711s ago: executing program 4 (id=2722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendto(r1, &(0x7f0000000000)="c4851766e02f09021e8ef02606a84c8d8f2c5f9ba2c534", 0x17, 0x4000080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000000000009b07000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000480b704000013000096850000001500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.458728853s ago: executing program 1 (id=2723): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffe3b, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESHEX, @ANYBLOB="1e32d7fcd0a7565322df93cfc99c0ed090bd0bfb7f77b7f37202b0f257cbe322da518a45b5e0a14044c9f5fd2ac7cfe41dbb775559c7cb54661dcae71c4ed616857564e50a12047b85f4d4ffde4b6314446b7bf7a9d5a4cd60714af58587256218482d85498ad3b70eb3e8ef092973138fb27fa8cbb95bb5ae5d6b5e9700947dd9010efb48425de4e5ce4e491d7892de93dbbb9af2192e4dbfdd9d33be9ac7ab096dacb5fd099ced66ea17dca5df6a31591bb807e4ba48b2519110c1f6c8ce9ff4d6f03d1bb02afa30f0180a40899b54ef367f3f4414d25905b8", @ANYRESDEC], 0x94}}, 0x4004080) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) 5.437705747s ago: executing program 4 (id=2724): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x40, 0x5, 0x5, 0x9, 0x2, 0x8, 0x0, 0xc6, 0x2, 0x80, 0x8, 0xa, 0x7, 0x3}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) pipe(&(0x7f00000007c0)) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) (async) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) (async) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x40, 0x5, 0x5, 0x9, 0x2, 0x8, 0x0, 0xc6, 0x2, 0x80, 0x8, 0xa, 0x7, 0x3}, 0xe) (async) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (async) 5.177698481s ago: executing program 4 (id=2725): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0xff, 0x1, 0x45, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1, 0x10, 0x6}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0xc, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 4.928924825s ago: executing program 4 (id=2726): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x24000000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008880}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x61cc64db, 0x2, 0x4, 0x4, 0xd, 0x1}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffff0000, 0x1000, 0x8, 0x8}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x100}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240048e5}, 0x20000010) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000240)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x2}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r11, 0x25, 0x8, @val=@tcx={@void, @value=r2}}, 0x1c) 4.816751885s ago: executing program 0 (id=2727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x18}}, 0x18}}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)={0x69c, r2, 0x200, 0x0, 0xf0ffff, {{0x5}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x158, 0x11d, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x36}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x100, 0x3, 0x2, 0x1c, 0x3, 0x80]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x3, 0x6, 0x8001, 0x81, 0x7, 0x9d, 0xa]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0x6}, {0x5}, {0x2}, {0x7, 0x3}, {0x2, 0x3}, {}, {0x3, 0x8}, {0x3, 0x9}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x7}, {0x7, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x6}, {0x2, 0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0x9}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x7}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x5, 0x8}, {0x6, 0x4}, {0x5, 0x1}, {0x6, 0x9}, {0x1, 0x1}, {0x0, 0x7}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x68, 0x16, 0x5, 0x1, 0x3a, 0x24, 0x2c, 0x16, 0x60, 0x30, 0x6, 0x48, 0x30, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x73}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x79}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x110, 0x11d, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xd0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x1, 0x0, 0x5, 0x2, 0xf50b, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x280c, 0x9, 0x8, 0x7, 0xe0e, 0x8000, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x8, 0x5, 0x0, 0xba, 0x5f6e, 0x990c]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x48, 0x3, 0x1, 0x4, 0x9, 0x36, 0x36, 0x5, 0x60, 0x2, 0x1, 0x1b, 0x5]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x8, 0x9, 0x2, 0x5, 0x101, 0x101]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x4, 0xfffd, 0x6, 0x1, 0x0, 0x8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x6c, 0x2, 0x5, 0x36, 0x6c, 0x12, 0x1b, 0x3, 0x1b, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x94}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x410, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa40b}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff01, 0x1, 0x265f, 0x3, 0x9, 0x9, 0x100, 0x5]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x1}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x2, 0x1}, {0x6, 0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x1}, {0x7, 0x2}, {0x2, 0xa}, {0x6, 0x1}, {0x6, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x5}, {0x4, 0x3}, {0x7, 0x7}, {0x1, 0x2}, {0x6}, {0x7, 0x9}, {0x7, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x2, 0x7}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x3}, {0x4, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x3, 0x8}, {0x2, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x5}, {0x4, 0x7}, {0x5, 0x3}, {0x2, 0x3}, {0x6}, {0x4, 0x5}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x9}, {0x4}, {0x2, 0x8}, {0x4, 0xa}, {0x5, 0x5}, {0x4, 0xa}, {0x3, 0xa}, {0x7, 0x4}, {0x5}, {0x2, 0x9}, {0x3, 0x8}, {0x2, 0x6}, {0x0, 0x9}, {0x6, 0xa}, {0x7}, {0x6, 0x7}, {0x6, 0x2}, {0x2, 0x9}, {0x3}, {0x6, 0x7}, {0x3, 0x6}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x6}, {0x3, 0x9}, {0x6}, {0x0, 0x1}, {0x4, 0x2}, {0x6, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x183, 0x81, 0x5, 0x7, 0x81, 0x3, 0x8, 0x9]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x9}, {0x3, 0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x9}, {0x3, 0x7}, {0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x6}, {0x6, 0x7}, {0x3, 0x2}, {0x4, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0x7}, {0x1, 0x4}, {0x4, 0x9}, {0x7, 0x8}, {0x6, 0x4}, {0x4}, {0x3, 0x7}, {0x6, 0x2}, {0x7, 0x7}, {0x5, 0x4}, {0x3, 0x6}, {0x2}, {0x5, 0x6}, {0x7, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x8}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x6, 0x5}, {0x5, 0x5}, {0x0, 0x7}, {0x7, 0x4}, {0x7, 0x5}, {0x7, 0xa}, {0x7, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x2}, {0x6, 0x7}, {0x5, 0x5}, {0x5, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x7, 0x8}, {0x2, 0x9}, {0x2, 0x8}, {}, {0x1, 0x5}, {0x1, 0x1}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xf, 0x9, 0x400, 0xf5, 0x1, 0x2, 0x1]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x1}, {0x3, 0x6}, {0x6, 0x8}, {0x2}, {0x6, 0x7}, {0x7, 0x4}, {0x0, 0x5}, {0x3}, {0x5, 0x8}, {0x1, 0x1}, {0x3, 0xa}, {0x0, 0x8}, {0x3, 0x1}, {0x2, 0x8}, {0x7, 0x3}, {0x2, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x5}, {0x0, 0x2}, {0x2}, {0x7, 0x1}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x9}, {0x7, 0x5}, {0x3, 0xa}, {0x3, 0x8}, {0x7, 0x6}, {0x2, 0x9}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x3}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x4}, {0x6, 0x6}, {0x6, 0x1}, {0x3, 0x7}, {0x7, 0x6}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x7, 0xadfc, 0x9, 0x6, 0x4, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xef}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x15c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x12c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb6e0, 0x4, 0x81, 0x9, 0x10, 0x23, 0x5, 0x100]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x6, 0x0, 0x2, 0x9, 0x8, 0x1]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xe63, 0x8281, 0xb, 0x3, 0x7, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x1, 0x3}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0x6}, {0x4, 0x4}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0xa}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x4}, {0x3, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x2, 0x9}, {0x4, 0xa}, {0x3, 0x8}, {0x6, 0x3}, {0x4, 0x7}, {0x7, 0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0x3}, {0x7}, {0x7, 0x5}, {0x7, 0x6}, {0x0, 0xa}, {0x4, 0x1}, {0x7, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x3, 0x4}, {0x7, 0x1}, {0x0, 0x5}, {0x3}, {0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x5, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x8, 0x8, 0x9, 0x4, 0x4, 0x9, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x78, 0x8, 0x8, 0xf, 0x6, 0x9, 0xad3, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc91, 0x4, 0x5, 0x6, 0x4, 0x3, 0xc3e, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x2, 0xb, 0x9, 0x1000, 0xba, 0x8000]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x1b, 0x30, 0x16, 0x60, 0x3, 0x12, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x8, 0x2, 0x8, 0x1000, 0x2, 0x1, 0xb45]}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdd}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xac}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x17}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3f5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x98}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x24f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x85}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x4}]}]}, 0x69c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 4.811224795s ago: executing program 1 (id=2728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0800030077cc924c22e0b0f3e96f49793e450e04", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES16=r1, @ANYRESDEC=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) r4 = socket$inet6(0xa, 0x5, 0x0) listen(r4, 0x50) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a00)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000001ac1414bb000000000000000000000000000000000000000002e2f1e389f4ee00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000800000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000010000000000000084010500fc020000000000000000000000000001000004d53c00000000000000ffffffff0000000000000000000000000000000000000000040000000000000000000000fe80000000000000000000000000001c000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000fc010000000000000000000000000001000000006c00000000000000ac1414aa000000000000000000000000000000000000800000000000000000000000000000000000000000000000ffffac1414aa000000006c0000000000000000000000000000000000ffffffffffff0300400000008100000000000000000000000000fe880000000000000000000000000001fffffffe6c00000000000000e00000010000000000000000000000000135000000000300000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fc0100000000000000000000000000000000000004000200"/500], 0x23c}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, &(0x7f0000000340), &(0x7f0000000a00)=""/4096}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22, 0x8000}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) 4.754737132s ago: executing program 2 (id=2729): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x90, 0x30, 0x9, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_bpf={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35, 0x0, 0x1, 0x4}, {0x44}, {0x3, 0x3}, {0x0, 0x8}, {}, {}, {0x6, 0x0, 0x0, 0x7}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 4.5403776s ago: executing program 0 (id=2730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r2, &(0x7f00000027c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000300)="89f6a80129", 0x5}], 0x1}}], 0x1, 0x4000) shutdown(r2, 0x1) (async) setsockopt(r2, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = socket(0x1, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 4.198877632s ago: executing program 2 (id=2731): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x2e, 0x61, 0x30, 0x61, 0x0, 0x20]}}, 0x0, 0x2c, 0x0, 0x1, 0x108}, 0x28) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket(0x15, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @empty}, 0x208, 0x0, 0x0, 0x0, 0x9, 0x0, 0x753, 0x3, 0x98}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000a40)={0x34, r6, 0x607, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}}, 0x20048840) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x21, &(0x7f0000000500)=@raw=[@cb_func={0x18, 0xa}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, @call={0x85, 0x0, 0x0, 0x3c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000640)='syzkaller\x00', 0x2, 0xcd, &(0x7f0000000680)=""/205, 0x40f00, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x7, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0x1, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x0, 0x2, 0x2, 0x7}, {0x0, 0x3, 0x5, 0x8}, {0x4, 0x5, 0xc}, {0x5, 0x3, 0x9}, {0x2, 0x4, 0x2, 0x4}, {0x5, 0x3, 0x1, 0x3}], 0x10, 0x2}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000bc0)=r7) r8 = socket(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000440)=r9, 0x4) sendmsg$NFT_BATCH(r8, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000004a40)={&(0x7f0000010a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14}}, 0x28}}, 0x20040000) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r10 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r10, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x24, 0x200000b, r11}}], 0x20, 0x2400e044}, 0x0) 4.127144495s ago: executing program 0 (id=2732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a01040000000000000000013f0e3ff9234afc580000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a0102e500000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000008000900010073797a300000000038000000020a01"], 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 4.045178356s ago: executing program 1 (id=2733): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200400095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000004000000040000000c"], 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa010101}]}, @ssrr={0x89, 0x7, 0xce, [@empty]}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x3}}}}}}, 0x0) 3.753779019s ago: executing program 1 (id=2734): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in=@private, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x4}, 0x70bd25, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'streebog256\x00'}}}]}, 0x138}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa440800450000780000000000019078ac1e0001ac1414aa0c019078e00000e0470000000067000000110000ac1414aae0090001830789ffffffff070300443c00030a01012f00000401001414aa00000000ac14142605000000ac1414bb000000007f00000100000000ac14142b00000800e000000200000000000071d06508e3591914144dc406f129373aa321ea3fdf1f1ecea27e6051ee39fd31af3b3d3b841b049ba6d3ffa187dae3cfa821b0"], 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r4, &(0x7f0000003680)=[{{&(0x7f0000000500)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x18, 0x1, 0x24, 0x6}}], 0x18}}], 0x1, 0x8840) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6d4935bd70007effff2a00"/20, @ANYRES32=r3, @ANYBLOB="82490000ca010700140037800b000100677265746170000004000280"], 0x34}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 3.753267789s ago: executing program 3 (id=2735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000003c0)=0x6f, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x53, 0x0, &(0x7f0000000380)="0b00000000000000556c36000033f90b15a865fb2b9722333313e6586226ee64c67107a08d36c7d3515bc9b4054184fe90ff54e5f3f94d7258503d84056a976f424543bc334cb9ff2f5a258c2049a62f20f161", 0x0, 0x7fefffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.12798873s ago: executing program 2 (id=2736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1f9ecbd6b90000000075f94308000000001000000000000062359efb92b530382d277c7378b57fc4aac343ca57170ad4ffc1be47e24ede7a1ebd8d55760555c2ef66428cef94fc878a941ac11e59bcc823e48a2a1be35713fe0ca8452a73309dce2c58e1cb14c471bdd798", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000000), 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) 2.680591166s ago: executing program 0 (id=2737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x870000, 0x80000000, {{0x10, 0x4, 0x1, 0x9, 0x40, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0x6, "a7f87658"}, {0x2, 0xd, "2bb765b645627bde37459d"}, {0x1, 0x10, "130cdfbe4f4e2e91426cd8b71bc2"}]}]}}}}}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "7a0e2d30131889820c661d424fd7871e"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r6, @ANYRES16=r6, @ANYBLOB="33030000ffff0300001615000000"], 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]}) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831", @ANYRES16=r0, @ANYRES32, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x400c811) socket$netlink(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0xfffffcec) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f00000030c0)=[{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000000300)="3934ef55cb2e50efef9de65453fb7813edc527f44e8b8f117daa2eddbcb8e410b9454924e3c4ac51a2d49f0cf37030eb805950c180b4b505d6f2231f6f1b65fdd33e9f485cfe", 0x46}, {&(0x7f0000000400)="6234807e26953772c8a71c3e4818ad2f021e9bd3ee3c12c4dc3cb535f1d46de1a712d616799bb92ed630911e90ed01c27117290fbe5fb208da38c543bcca23a4945cc96da56a97c925e658e66daaaf7286ff3f3592c5a518adf435e597b0d581514773cba3b573c559964a66b7730a285ece48023cd4454ac754", 0x7a}, {&(0x7f0000000480)="a7e13188427b79e73dfeb2d938977186be63379bf2a09d24055551007796ba30654541a12de16769d4ece4710f6ba804a567a4a02f13d25a6fd269d1a3746fe9009e4c3fd68ec5ef9e803166327500e162d60d59bff4ae", 0x57}, {&(0x7f0000000bc0)="f842c2c80c7147df12d520d65c66e0f9d9b8375355cbecce9a5c9636a696c837f9bb37e4d5124a596f32915029f96dfc923fb57e2749e84bc10f4bba5d762c92513721598e9c404bea142b72ecd2b73f86a44cc3d3fe099993a254674ea9d46deb37d057f4069bd6ae5248dd0045812107c6109fae4cb45ce61eb9e5b3a91e831867efa87562393fda9a68009c5fc2fd71485fcc4f56e6217ac479447fcb96c09450405ee87ccb17410f5e4925f8f7cdcbbcb9555dfb83c18d0092890161c569efe69635e2118844dcba5e74c615876612eab51b1bf6e7e9bd2d77d8de1e3469e611325b5e58f3a75d79be773a330c5e00b92d52d6", 0xf5}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000000cc0)="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", 0x124}], 0x6, 0x0, 0x0, 0x80}], 0x1, 0x448a0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0xffffffffffffff0f, &(0x7f0000000780), 0x0, 0x0, 0xff97}, 0x0) unshare(0x2020600) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x4, &(0x7f0000000880)=ANY=[@ANYRES64=r7, @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xa8, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="111200000000010000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) r11 = socket(0x200000000000011, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'tunl0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000580)="2204d79391068b484f102c253460cc1566ff", 0x12, 0xc090, &(0x7f00000000c0)={0x11, 0xeb, r12, 0x1, 0xe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) 2.670100115s ago: executing program 1 (id=2738): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000d, 0x810, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1e33ea720000000000ba00000300000018110000d441104691bc3fe0e47ea8d913f8dee709ac9c012779e0de12cb74bf3820aba454bcc96ba55764a1fc5eb42dfa1497724945329f9e68a82a9130ab6cdb5a5b86228faf85be4cd045cbb87f7da06f356fd5333af0ca772d0e12b2d59d8b9030773cb1e317b01887ef415ead72eb83e7c2cad4520282c210e7695da88ab98c44bb98995693", @ANYRES32, @ANYRESDEC], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, r2, 0x25, 0x1e, @void}, 0x10) sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010026bd7000ffdbdf0500000000", @ANYRES32=0x0, @ANYBLOB="23de00000000"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x2b, 0x80801, 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="05", 0xffe0}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="3000000000000000840000000100000002000000410000000800000002000000ff"], 0x30}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000f00)={0x134, 0x0, 0x2, 0x2, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10d2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1a6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb6f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x38}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9b, 0x3, "2e984aeebf19957db43ac174b9894fe26daee197ce706239d75525936a5cede356e93d631ebcc2587998be8a9741f5d3630f5c9784f4dc203a0a7d2287a88daef5981eaba4c019280598fe11b23044c4b0912c4c37a15a27b99fa21f8f343dba96c7d6ad773d4d8f5b9a370b82e984460d76f960db1370c58d7732d12c47173753f855a0549920eceb31e26267f67662e510f5a214776a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}]}, 0x134}, 0x1, 0x0, 0x0, 0xd0d8}, 0x4048865) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delchain={0x24, 0x26, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xa, 0x9}, {0x3, 0x6}}}, 0x24}}, 0x4000000) sendmsg$nl_generic(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x4000000) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000200)={0x200000c0, 0xfffffffa, 0x101, 0xb}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010029bd700000000000022020000000000000200a"], 0x24}}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000480)={0x1, &(0x7f00000003c0)=[{0x9, 0xf2, &(0x7f00000002c0)="3d9b95bca030969c1b96739667c839475e753f936acb0d673120a126f0196e3d11e4e23c8dc0ef01f344e7f7c922da7fa8e226a38707758b71f475ac89873a097b5fe45c5864f525b6f2a7195007097c23b7f8d10c2b198878cc65493ca79d6aa90f871f3f72d0e71c47bb36a25ae97af911aa2af8c5615694fe7cbdcb2265d67d4470ce0566a3f3fa88177987133057e273d4ec0204d42700fd2e16ebc348829ece599fddd0cc7066fed3581960002230952e0855850c743e4820b27c55fd9da77e62b67af79a45d948834834304f23cfd2cb40638340cfbfce01092911f5a20788e6a76b96b2c26bfe9921429e64974e5a", 0x0, 0x1}]}) 2.597986666s ago: executing program 3 (id=2739): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711, @host}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r5, @ANYBLOB="100030800c00018008000100010000006400308024000300e81c88f916159900d8ca4fdf4659f2cab2071627b78713e9275587f763b2ffb5140004006f91728ba50c4d2640027a0e5c59e4b7140004006c8f815bd2c2cce07aa2c8fffc4dc08e14000400d8f2bec15016d4942ea04a547f92f9090c0006000100000001000000"], 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210227bd7000fddbdf251400000008001d00", @ANYRES32, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="080001000200000008000300", @ANYRES32=r5, @ANYBLOB="08001c00", @ANYRES32=0x0, @ANYBLOB="080001000100000008001c00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08001d00506dc20cbb65e5b5c8307bdd49ec9460590feab77a99d852270d2f218bd166", @ANYRES32, @ANYBLOB="08001c00", @ANYRES32=r7, @ANYBLOB], 0x64}}, 0x90) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="ec000000edcd6cf1bf0b09d80e7ad56955972cb56bab785804f33b198958fab620fefa990a6a2da9b750109597c01e13ba0cca5b8a5a5eb800b409883c9233ca994b3895955cceb7e95a64c545721c616ace784a1075156ff4f2", @ANYRES16=r1, @ANYBLOB="000125bd7000fbdbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="9c00308028000180080001000200000008000100020000000c000500000000000000000008000100020000000500020009000000050002000400000014000400ebaa9dce576ffc2240d6a24996579dd214000400fb7f446c899e950a92777e18320c52790500020085000000300001802000038006000300a3aa00000c0004000203aaaaaaaaaaaa08000200010000000c00050003000000000000000c000600030000000000000008000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="0c00060002000000020000000c0006000100000001000000"], 0xec}, 0x1, 0x0, 0x0, 0x4805}, 0x40090) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r10, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r10, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = socket(0x10, 0x80002, 0x0) r13 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmmsg$alg(r12, &(0x7f00000000c0), 0x492492492492627, 0x9e) bind$alg(r11, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) 2.128675344s ago: executing program 2 (id=2740): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000002c0)=0x5, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0xffffff10, 0x2, 0x1, 0x7, 0x1, 0x9}) syz_emit_ethernet(0x72, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa8eaaaaaa000800450000640000000000019078ac1e0001ac1414aa0b009078030b00004200000000000000008900000a010101ac1414aa862600000002060b5e000000ff00f5870000050404a60010960605390006fff5800000b61a12080b57640101010a010100000000"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc006}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 735.885992ms ago: executing program 1 (id=2741): socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020601010000000000fcffffff37533a0500020073797a31000000000500040001000000140007800500150002000000080012400000009b050005000a000000050001000600001514000300686173683a69702c706f72742c69700007cb788955c6a7a62269133f578b8d52f736f6a166f625ebd64489238bf6f8f3093942194ebd17e625bc79e953816a67c4115bd2b1f6caf51d5e0af3bc11332a7b539e58d565c315a34c7ab7e1f338193e5a6dc1199f8d84749373ee53039b3992fdd5cf72c145d4eefa7bf27091e8e9415809cf66e4d1c4a153c9e1d43eccc25b56ac33f02b9c7f66d2255a53021b7efe0b29cc8ce6cbe6035fc339e4d0d8087ccc664b406800f1af80858bd934da791a4e859e67989ed67f82d27ed8a1e2c19845ee0586498d66d969a58f9bd9981fb4636b00e3eafe91f96f588ecd7e942e8f9d0274479b827137a424283117d9ebdb2112dbafa30120cf763797f93ba5766ef05683cc3e02c832397761ee345885235e8d8c250cb7c29e4c27152a5bff5e7ce0c1f2c0044a28ee45740a040e48f3217e09"], 0x60}}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="520001"], 0x6) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff7, 0x0, 0x7fffffff, 0x6}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r4, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x6f4fef9cab2ede47, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0xff, 0xffdff032}, {0x6, 0x3e}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r8, 0x40107447, &(0x7f0000000180)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) write$cgroup_type(r10, &(0x7f0000000280), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xdb}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 701.863097ms ago: executing program 3 (id=2742): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x4c, r3, 0xe29, 0x70bd29, 0x5dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "53e0e86d3cdadf198b00"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f3fe0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x0, 0xb71d, {{0x25, 0x4, 0x0, 0x4, 0x94, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x75, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1d}, @local]}, @cipso={0x86, 0x5e, 0xffffffffffffffff, [{0x1, 0x11, "38e55858757d268edec397eb32da87"}, {0x7, 0x11, "7213e89e6ba1ef0c68aba070c3018b"}, {0x5, 0xc, "e41702c1fedc2ce35cfa"}, {0x2, 0x4, "4e8e"}, {0x0, 0x4, 'WD'}, {0x1, 0xd, "30074ef3ae853c397bd393"}, {0x6, 0x4, "7f1f"}, {0x6, 0x11, "90dc8e46283b50802ef1583e1fc64c"}]}, @rr={0x7, 0xf, 0x7c, [@private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}}}}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x38, 0x6c, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x2800}, [@IFLA_PROP_LIST={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000009c0)={0x1, {{0x2, 0x4e24, @private=0xa010102}}, 0x1, 0x2, [{{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x190) 691.228587ms ago: executing program 2 (id=2743): setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r2, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'gretap0\x00', 0x2000}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) connect$pppoe(r4, &(0x7f00000002c0)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'gre0\x00'}}, 0x1e) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000084) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x4000080) syz_genetlink_get_family_id$ethtool(0x0, r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 630.72901ms ago: executing program 0 (id=2744): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x7, 0xd, "090041c20949e0afc65b20"}]}}}], 0x40}, 0x20002800) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000100000a05000100"/28], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x50) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'wg1\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x20, 0x82, "1fb90599a3cffcd018ed70b02a88bf30ec9431a5aab38baba3796e5af4e76f602fb633b5ab2f63880e5c2797f3042342a60b5d3d6ecd19113583460aab0e1a2bbdb24cf04dc81ea4b08b2a7c1dcba6c603d81f33bc2ee87da6f8d28f584c19d9b7e2cf1d476d454c6e5aa56297a59192cddfbbc656ac55a0f6e21911b6c67dade334"}}) 467.836026ms ago: executing program 4 (id=2745): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd0000000000100033000a030000003fff00000000000200000000000200000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa00000000000000000300060080000000123d540313a9be391491487cff7c8d0c1f09b49bc0959b2839a6cbe9e31ea78c802a4dff0a83316578cd9c240c364a36f63817f68a72eccb5b89592b94899272c0e98bb448448891a2b6f0ad1e5e0796cb897c12e1"], 0x80}}, 0x8801) 238.500146ms ago: executing program 0 (id=2746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="b4c0389f00002100005d830c00800e000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r3, 0x29, 0x49, 0x0, 0x15) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x3c, r4, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x4004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r6, 0x4}, &(0x7f0000000180)=0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, r2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c0082000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000bf080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r7, &(0x7f0000000280)="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", 0x145) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "74b64344140bb825ef373a655697108df31fa1e5418e6ff04b3cd463e391ee2a", 0x0, 0xa93bf500, 0xb04, 0xa}, 0x3c) socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_gact={0x60, 0x1, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffff, 0xfffffffc, 0x5, 0x7, 0x8000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x39c, 0x3, 0x9, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008084}, 0x0) 228.150482ms ago: executing program 2 (id=2747): bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0xbc, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4236869a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43219b72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f48e3bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf2cae54}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x438402c3}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000050}, 0x84) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 0s ago: executing program 4 (id=2748): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x84, @loopback, 0x4e23, 0x0, 'fo\x00', 0x20, 0x6d64, 0x6b}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @private}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r2], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000600)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r3, @ANYRESOCT], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000280), 0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="14002d1685bc8e8c1f82eb251dbcf600005e0025d2ec013db9eb639c46de4082170412a72acf3eab49046e4464d75aa983ce67523641c8de55f17e08ca49ff1bc255cca25c3791d8cc2d1b6bb15209e6078f88d005e73af6443faabc"], 0x14}], 0x1}, 0x0) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x84, @local, 0x4e22, 0x1, 'lc\x00', 0x0, 0x80001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0x5, 0x4}}, 0x44) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_freezer_state(r10, &(0x7f0000000140), 0x2, 0x0) sendfile(r11, r11, 0x0, 0x5) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@ll={0x11, 0x17, 0x0, 0x1, 0x31, 0x6, @local}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000010180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8fd00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) kernel console output (not intermixed with test programs): set_ctl: invalid protocol: 59 172.30.1.2:19999 [ 262.760029][ T5733] IPVS: starting estimator thread 0... [ 262.858524][T11100] IPVS: using max 25 ests per chain, 60000 per kthread [ 263.185324][T11116] __nla_validate_parse: 9 callbacks suppressed [ 263.185342][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'. [ 263.300599][T11115] netlink: 'syz.3.1269': attribute type 11 has an invalid length. [ 263.342058][T11118] lo speed is unknown, defaulting to 1000 [ 263.419928][T11118] lo speed is unknown, defaulting to 1000 [ 263.529628][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 263.566443][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 263.747991][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 263.767928][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 264.197734][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'. [ 264.240683][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1273'. [ 264.313334][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1273'. [ 264.362611][T11131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1273'. [ 264.479644][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1273'. [ 264.650624][T11147] netlink: 'syz.2.1276': attribute type 1 has an invalid length. [ 264.690654][T11134] bridge0: entered allmulticast mode [ 264.886763][T11147] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.019838][T11150] vlan3: entered promiscuous mode [ 265.046969][T11150] bond6: entered promiscuous mode [ 265.070168][T11150] vlan3: entered allmulticast mode [ 265.095104][T11150] bond6: entered allmulticast mode [ 265.147891][T11158] syz_tun: entered allmulticast mode [ 265.220768][T11161] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 265.260682][T11161] bond6: (slave batadv1): making interface the new active one [ 265.275781][T11161] batadv1: entered promiscuous mode [ 265.289496][T11161] batadv1: entered allmulticast mode [ 265.309073][T11161] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 265.333340][T11152] syz_tun: left allmulticast mode [ 265.840696][T11171] syzkaller0: entered promiscuous mode [ 265.861869][T11171] syzkaller0: entered allmulticast mode [ 266.059217][T11195] netlink: 'syz.1.1287': attribute type 1 has an invalid length. [ 266.176948][T11195] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.933052][T11199] bond6: (slave veth11): Enslaving as an active interface with a down link [ 267.950393][T11195] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 267.957619][T11195] bond6: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 268.150176][T11210] syzkaller0: left promiscuous mode [ 268.652741][T11241] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 268.693065][T11241] __nla_validate_parse: 4 callbacks suppressed [ 268.693083][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 268.718287][T11241] netlink: 'syz.3.1298': attribute type 2 has an invalid length. [ 268.902725][T11244] lo speed is unknown, defaulting to 1000 [ 268.962049][T11244] lo speed is unknown, defaulting to 1000 [ 269.009780][T11257] netlink: 'syz.2.1304': attribute type 3 has an invalid length. [ 269.171231][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'. [ 269.540711][T11273] syzkaller0: entered promiscuous mode [ 269.569296][T11273] syzkaller0: entered allmulticast mode [ 269.736696][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 269.900065][T11284] 8021q: adding VLAN 0 to HW filter on device bond9 [ 269.909254][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'. [ 269.966459][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 270.007835][T11293] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1312'. [ 270.060976][T11293] netlink: 'syz.1.1312': attribute type 5 has an invalid length. [ 270.372245][T11301] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1314'. [ 270.394744][T11300] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1314'. [ 270.417406][T11300] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1314'. [ 270.436384][T11301] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1314'. [ 270.891008][T11309] syzkaller0: entered promiscuous mode [ 270.906555][T11309] syzkaller0: entered allmulticast mode [ 270.930133][T11307] tipc: Enabled bearer , priority 0 [ 270.972418][T11307] tipc: Resetting bearer [ 271.187938][T11306] tipc: Resetting bearer [ 271.263004][T11306] tipc: Disabling bearer [ 271.635445][T11324] lo speed is unknown, defaulting to 1000 [ 271.675121][T11323] lo speed is unknown, defaulting to 1000 [ 271.681657][T11324] lo speed is unknown, defaulting to 1000 [ 272.698199][T11366] macvlan3: entered promiscuous mode [ 272.709704][T11366] macvlan3: entered allmulticast mode [ 272.732349][T11366] bond7: (slave macvlan3): Opening slave failed [ 272.748454][T11377] netlink: 'syz.1.1332': attribute type 10 has an invalid length. [ 272.830491][T11377] team0: Device veth0_vlan failed to register rx_handler [ 273.073304][T11323] lo speed is unknown, defaulting to 1000 [ 273.109125][T11392] bond8: entered allmulticast mode [ 273.784189][T11429] __nla_validate_parse: 8 callbacks suppressed [ 273.784207][T11429] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1348'. [ 273.806420][T11416] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 274.271290][T11444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1352'. [ 274.610008][T11471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1358'. [ 274.684649][T11460] syzkaller0: entered promiscuous mode [ 274.692308][T11460] syzkaller0: entered allmulticast mode [ 275.683423][T11507] syzkaller0: entered promiscuous mode [ 275.689398][T11507] syzkaller0: entered allmulticast mode [ 275.695838][T11511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1367'. [ 276.448559][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 277.081278][T11556] netlink: 'syz.2.1375': attribute type 1 has an invalid length. [ 277.090386][T11556] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1375'. [ 277.113372][T11556] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1375'. [ 277.261424][T11560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1377'. [ 278.422524][T11583] netlink: 'syz.3.1378': attribute type 3 has an invalid length. [ 278.534461][T11568] syzkaller0: entered promiscuous mode [ 278.565055][T11568] syzkaller0: entered allmulticast mode [ 278.800577][T11608] netlink: 'syz.4.1385': attribute type 1 has an invalid length. [ 280.584020][T11594] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 280.595078][T11594] batman_adv: batadv0: Adding interface: gretap1 [ 280.601631][T11594] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.627798][T11594] batman_adv: batadv0: Interface activated: gretap1 [ 280.770476][T11608] 8021q: adding VLAN 0 to HW filter on device bond7 [ 280.810604][T11613] bond4: (slave veth0_to_bond): Releasing active interface [ 280.862010][T11613] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 281.181235][T11646] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1397'. [ 281.408006][T11661] netlink: 91 bytes leftover after parsing attributes in process `syz.2.1400'. [ 281.439613][T11662] netlink: 'syz.3.1401': attribute type 1 has an invalid length. [ 281.461823][T11662] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1401'. [ 281.483371][ T1183] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.498648][ T1183] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.517823][ T1183] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.574993][ T1183] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.772061][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'. [ 281.823961][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'. [ 282.917875][T11731] dummy0: Caught tx_queue_len zero misconfig [ 282.931309][T11733] pim6reg1: entered promiscuous mode [ 282.956452][T11733] pim6reg1: entered allmulticast mode [ 283.015712][T11739] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1423'. [ 283.026804][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 283.144282][T11742] netlink: 'syz.2.1424': attribute type 4 has an invalid length. [ 283.159245][T11741] netlink: 'syz.2.1424': attribute type 4 has an invalid length. [ 283.177195][T11741] netlink: 'syz.2.1424': attribute type 4 has an invalid length. [ 283.188205][T11742] netlink: 'syz.2.1424': attribute type 4 has an invalid length. [ 283.235220][T11741] netlink: 'syz.2.1424': attribute type 4 has an invalid length. [ 284.312899][ T1623] block nbd0: Possible stuck request ffff888027957000: control (read@0,1024B). Runtime 150 seconds [ 284.323784][ T1623] block nbd0: Possible stuck request ffff8880279571c0: control (read@1024,1024B). Runtime 150 seconds [ 284.335709][ T1623] block nbd0: Possible stuck request ffff888027957380: control (read@2048,1024B). Runtime 150 seconds [ 284.356572][ T1623] block nbd0: Possible stuck request ffff888027957540: control (read@3072,1024B). Runtime 150 seconds [ 284.641039][T11759] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 284.748764][T11764] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1431'. [ 284.764764][T11765] xt_recent: hitcount (4294967290) is larger than allowed maximum (65535) [ 284.839733][T11759] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.965313][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 284.974577][T11762] bond3: (slave gretap3): making interface the new active one [ 284.984612][T11762] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 285.045827][ T30] audit: type=1800 audit(1785118383.756:4): pid=11770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1432" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072636F6E6E6563742061613A61613A61613A61613A61613A31302030 dev="tmpfs" ino=1602 res=0 errno=0 [ 285.741093][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1441'. [ 285.975355][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 286.099279][T11807] lo speed is unknown, defaulting to 1000 [ 286.163299][T11807] lo speed is unknown, defaulting to 1000 [ 286.264699][T11813] netlink: 'syz.0.1447': attribute type 39 has an invalid length. [ 286.605574][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'. [ 287.144298][T11809] dvmrp0: entered allmulticast mode [ 287.168063][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 287.202300][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 287.244182][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 287.393131][T11850] macvlan0: left promiscuous mode [ 287.420509][T11850] ip6gre1: left promiscuous mode [ 287.435638][T11850] ip6gre1: left allmulticast mode [ 287.448545][T11850] gretap1: left promiscuous mode [ 287.459054][T11850] vlan2: left allmulticast mode [ 287.472659][T11850] gretap0: left allmulticast mode [ 287.490776][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 287.510588][T11850] bridge4: left promiscuous mode [ 287.525195][T11850] bridge4: left allmulticast mode [ 287.614668][T11852] team0: No ports can be present during mode change [ 287.715365][T11863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.768768][T11863] netlink: 'syz.1.1457': attribute type 1 has an invalid length. [ 287.785557][T11863] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1457'. [ 288.066955][ T5638] Bluetooth: hci4: command 0x0405 tx timeout [ 288.192214][T11874] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.206032][T11874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.255553][T11874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.267664][T11874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.279574][T11874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.290187][T11874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.304834][T11874] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 288.323408][ T187] lo speed is unknown, defaulting to 1000 [ 288.334614][ T187] sz1: Port: 1 Link ACTIVE [ 288.350207][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.357547][T10464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.368597][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.375801][T10464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.485357][ T5732] lo speed is unknown, defaulting to 1000 [ 288.680925][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 288.720270][T11892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.736195][T11888] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 288.985064][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1471'. [ 289.737979][T11918] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 289.776022][T11918] tipc: Started in network mode [ 289.792215][T11918] tipc: Node identity , cluster identity 4711 [ 289.806688][T11918] tipc: Failed to obtain node identity [ 289.816590][T11918] tipc: Enabling of bearer rejected, failed to enable media [ 289.998790][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 290.188405][T11937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1481'. [ 290.217705][T11937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.699788][T11963] syzkaller0: entered promiscuous mode [ 290.705626][T11963] syzkaller0: entered allmulticast mode [ 291.168132][T11980] tc action pedit 'at' offset 6 out of bounds [ 291.175105][T11980] tc action pedit 'at' offset 6 out of bounds [ 291.181284][T11980] tc action pedit 'at' offset 6 out of bounds [ 291.187426][T11980] tc action pedit 'at' offset 6 out of bounds [ 291.193514][T11980] tc action pedit 'at' offset 6 out of bounds [ 291.199650][T11980] tc action pedit 'at' offset 6 out of bounds [ 291.205733][T11980] tc action pedit 'at' offset 6 out of bounds [ 291.211831][T11980] tc action pedit 'at' offset 6 out of bounds [ 291.217956][T11980] tc action pedit 'at' offset 6 out of bounds [ 291.224047][T11980] tc action pedit 'at' offset 6 out of bounds [ 291.230166][T11980] 0: reclassify loop, rule prio 0, protocol 800 [ 291.839417][T11997] netlink: del zone limit has 8 unknown bytes [ 291.933915][T12000] __nla_validate_parse: 2 callbacks suppressed [ 291.933928][T12000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1496'. [ 291.991776][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'. [ 293.501908][T11954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.787929][T12020] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 293.927426][T12020] netlink: 'syz.0.1501': attribute type 10 has an invalid length. [ 294.000161][T12020] veth0_to_bond: entered promiscuous mode [ 294.035853][T12020] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 294.112766][T12041] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1504'. [ 294.376158][T12059] netlink: 'syz.0.1505': attribute type 11 has an invalid length. [ 294.397786][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 294.515980][T12062] netlink: 'syz.4.1508': attribute type 1 has an invalid length. [ 294.870955][T12081] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1513'. [ 295.107920][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1515'. [ 295.261212][T12100] bond0: entered promiscuous mode [ 295.281174][T12100] bond_slave_0: entered promiscuous mode [ 295.312285][T12100] bond_slave_1: entered promiscuous mode [ 295.356103][T12100] bond0: left promiscuous mode [ 295.389139][T12100] bond_slave_0: left promiscuous mode [ 295.425712][T12100] bond_slave_1: left promiscuous mode [ 295.585833][T12119] netlink: 'syz.4.1520': attribute type 1 has an invalid length. [ 295.618574][T12119] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1520'. [ 295.682104][T12128] netlink: 'syz.4.1520': attribute type 1 has an invalid length. [ 295.740482][T12128] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1520'. [ 295.813889][T12132] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.827225][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.836599][T12132] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.898817][T12132] bridge_slave_0: entered allmulticast mode [ 295.989678][T12132] bridge_slave_0: entered promiscuous mode [ 296.002229][T12145] x_tables: duplicate underflow at hook 3 [ 296.064941][T12143] sch_tbf: burst 0 is lower than device lo mtu (782) ! [ 296.141553][T12151] veth0_to_batadv: left allmulticast mode [ 296.355686][T12161] bond4: entered allmulticast mode [ 296.361718][T12161] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.370384][T12166] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1528'. [ 296.393448][T12166] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1528'. [ 296.453674][T12170] syzkaller0: entered promiscuous mode [ 296.894709][T12198] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 297.495523][T12224] __nla_validate_parse: 4 callbacks suppressed [ 297.495541][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 297.565302][T12227] netlink: 'syz.4.1545': attribute type 3 has an invalid length. [ 297.592426][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1545'. [ 297.616797][T12227] netlink: 'syz.4.1545': attribute type 1 has an invalid length. [ 297.628704][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 297.637148][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1545'. [ 297.852550][T12232] lo speed is unknown, defaulting to 1000 [ 297.905827][T12232] lo speed is unknown, defaulting to 1000 [ 298.582839][T12278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1556'. [ 298.602579][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1556'. [ 299.268337][T12313] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1564'. [ 299.312650][T12317] netlink: 732 bytes leftover after parsing attributes in process `syz.1.1565'. [ 299.554610][T12323] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 300.114666][T12354] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1572'. [ 300.233836][T12358] netlink: 'syz.4.1573': attribute type 13 has an invalid length. [ 300.703448][T12377] ip6tnl0: Caught tx_queue_len zero misconfig [ 300.718685][T12380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1580'. [ 301.119415][T12401] netlink: 'syz.0.1587': attribute type 18 has an invalid length. [ 301.158615][T12403] netlink: 'syz.4.1589': attribute type 31 has an invalid length. [ 301.181195][T10465] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 301.192027][T10465] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 301.224879][T10465] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 301.261061][T10465] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 301.339776][T12412] Cannot find add_set index 0 as target [ 301.346909][T12412] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 301.359755][ T5732] lo speed is unknown, defaulting to 1000 [ 301.368464][ T5732] syz2: Port: 1 Link ACTIVE [ 301.866077][T12434] netlink: 'syz.0.1597': attribute type 3 has an invalid length. [ 301.896534][T12434] netlink: 'syz.0.1597': attribute type 1 has an invalid length. [ 301.950864][T12437] lo: Caught tx_queue_len zero misconfig [ 301.960062][T12437] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 301.968757][T12436] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 302.079479][T12442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.088544][T12442] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.166697][T12442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.178930][T12442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.198487][T12442] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 302.243597][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.250847][T10469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.291971][T12442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.746037][T12451] bridge0: left allmulticast mode [ 303.789901][T12451] batman_adv: 60X: Interface deactivated: macvtap1 [ 304.006486][T12451] vlan2: left allmulticast mode [ 304.016943][T12451] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 304.104244][T12451] bond8: left allmulticast mode [ 304.114959][T12451] batman_adv: batadv0: Interface deactivated: gretap1 [ 304.140937][T12459] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 304.166464][ T1183] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.172000][T12459] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 304.188149][ T1183] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.206727][ T1183] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.213576][T12459] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 304.240188][ T1183] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.312606][ T1183] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.335207][ T1183] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.352676][T12490] __nla_validate_parse: 11 callbacks suppressed [ 304.352694][T12490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1610'. [ 304.378481][ T1183] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.397126][ T1183] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.419417][T12493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1610'. [ 304.505880][T12497] syzkaller0: entered promiscuous mode [ 304.512547][T12497] syzkaller0: entered allmulticast mode [ 304.557893][T12497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1611'. [ 304.703039][T12509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1615'. [ 304.727689][T12509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1615'. [ 304.752265][T12509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1615'. [ 304.787868][T12509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1615'. [ 304.801112][T12509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1615'. [ 304.835799][T12509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1615'. [ 304.858310][T12509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1615'. [ 305.074715][T12521] netlink: 'syz.3.1619': attribute type 6 has an invalid length. [ 305.084179][T12521] netlink: 'syz.3.1619': attribute type 7 has an invalid length. [ 305.093873][T12521] netlink: 'syz.3.1619': attribute type 8 has an invalid length. [ 305.555024][T12545] bond9: option ad_user_port_key: invalid value (65535) [ 305.571595][T12545] bond9: option ad_user_port_key: allowed values 0 - 1023 [ 305.582260][T12545] bond9 (unregistering): Released all slaves [ 306.033093][T12571] syzkaller0: entered promiscuous mode [ 306.038695][T12571] syzkaller0: entered allmulticast mode [ 306.180564][T12581] ipip0: entered promiscuous mode [ 308.667823][T12601] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 308.677446][T12601] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 308.687095][T12601] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 309.009725][T12647] netlink: 'syz.2.1652': attribute type 2 has an invalid length. [ 309.107621][T12647] : entered promiscuous mode [ 309.455762][T12672] __nla_validate_parse: 62 callbacks suppressed [ 309.455782][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1659'. [ 309.512981][T12675] xt_hashlimit: max too large, truncated to 1048576 [ 309.533420][T12675] xt_ecn: cannot match TCP bits for non-tcp packets [ 309.574414][T12675] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 310.522050][T12711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1670'. [ 310.741059][T12709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.772146][T12709] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.829944][T12709] 8021q: adding VLAN 0 to HW filter on device 60X [ 310.974857][T12709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 311.000000][T12709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.039802][T12709] veth1_vlan: left promiscuous mode [ 311.053620][T12709] veth0_vlan: left promiscuous mode [ 311.069647][T12709] veth0_vlan: entered promiscuous mode [ 311.088707][T12709] veth1_vlan: entered promiscuous mode [ 311.122264][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.131914][T12709] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 311.141163][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.159539][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.175973][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.194128][T12709] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 311.262327][T12713] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 311.428046][T10466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.446383][T10466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.472310][T10466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.491395][T10466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.642396][T12759] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1682'. [ 311.720443][T12760] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 312.109462][T12778] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1688'. [ 312.210837][T12778] syzkaller1: entered promiscuous mode [ 312.228390][T12778] syzkaller1: entered allmulticast mode [ 312.422816][T12796] sctp: [Deprecated]: syz.2.1695 (pid 12796) Use of int in maxseg socket option. [ 312.422816][T12796] Use struct sctp_assoc_value instead [ 312.482634][T12798] sctp: [Deprecated]: syz.2.1695 (pid 12798) Use of int in maxseg socket option. [ 312.482634][T12798] Use struct sctp_assoc_value instead [ 312.729096][T12803] openvswitch: netlink: Missing key (keys=40, expected=100) [ 312.749607][T12805] lo speed is unknown, defaulting to 1000 [ 312.781545][T12805] lo speed is unknown, defaulting to 1000 [ 313.418051][T12829] lo speed is unknown, defaulting to 1000 [ 313.490740][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 313.510338][T12837] block nbd0: reconnected socket [ 313.533590][ T5638] block nbd0: Receive control failed (result -32) [ 313.633979][T12841] lo speed is unknown, defaulting to 1000 [ 313.848126][T12852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1705'. [ 313.872734][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'. [ 313.882600][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'. [ 313.903297][T12829] lo speed is unknown, defaulting to 1000 [ 313.930946][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1705'. [ 314.101421][T12857] netlink: 'syz.0.1708': attribute type 1 has an invalid length. [ 314.129425][T12857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1708'. [ 314.203938][T12863] netlink: 'syz.0.1710': attribute type 8 has an invalid length. [ 314.309117][T12864] 8021q: VLANs not supported on vxcan1 [ 314.315540][T12869] netlink: 'syz.0.1711': attribute type 12 has an invalid length. [ 314.389610][ T1623] block nbd0: Connection timed out, retrying (0/1 alive) [ 314.397540][ T1623] block nbd0: Connection timed out, retrying (0/1 alive) [ 314.404655][ T1623] block nbd0: Connection timed out, retrying (0/1 alive) [ 314.412715][ T1623] block nbd0: Connection timed out, retrying (0/1 alive) [ 314.420615][ T1623] block nbd0: Dead connection, failed to find a fallback [ 314.935389][T12891] __nla_validate_parse: 1 callbacks suppressed [ 314.935409][T12891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1716'. [ 315.039821][T12891] bond0: entered promiscuous mode [ 315.079079][T12891] bond0: left promiscuous mode [ 315.181438][T12896] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1719'. [ 315.384982][T12902] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1719'. [ 315.418902][T12896] netlink: 'syz.4.1719': attribute type 1 has an invalid length. [ 315.446670][T12896] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1719'. [ 315.789114][T12916] netlink: 'syz.2.1724': attribute type 2 has an invalid length. [ 317.354553][ T30] audit: type=1804 audit(1785118416.066:5): pid=12993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1733" name="/newroot/323/memory.events" dev="tmpfs" ino=1663 res=1 errno=0 [ 317.380609][T12993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1733'. [ 317.409988][ T30] audit: type=1800 audit(1785118416.096:6): pid=12993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1733" name="memory.events" dev="tmpfs" ino=1663 res=0 errno=0 [ 317.729622][T13014] xt_hashlimit: size too large, truncated to 1048576 [ 317.816006][T13024] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1744'. [ 317.843377][T13026] IPVS: set_ctl: invalid protocol: 255 100.1.1.1:20002 [ 317.851538][T13025] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1744'. [ 318.100589][T13033] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1745'. [ 318.140624][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 318.150367][T13033] netlink: 'syz.3.1745': attribute type 1 has an invalid length. [ 318.184391][T13033] 8021q: adding VLAN 0 to HW filter on device bond10 [ 318.222005][T13037] bond10: (slave bridge0): Enslaving as an active interface with a down link [ 318.250435][T13035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1746'. [ 318.272060][T13033] bond10: entered promiscuous mode [ 318.280752][T13033] bond10: entered allmulticast mode [ 318.313051][T13033] tipc: Enabling of bearer rejected, failed to enable media [ 318.589258][T13054] Cannot find del_set index 17 as target [ 318.882122][T13071] sctp: [Deprecated]: syz.0.1757 (pid 13071) Use of int in maxseg socket option. [ 318.882122][T13071] Use struct sctp_assoc_value instead [ 319.063523][ T30] audit: type=1804 audit(1785118417.776:7): pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1761" name="/newroot/341/cgroup.controllers" dev="tmpfs" ino=1771 res=1 errno=0 [ 319.129703][ T30] audit: type=1800 audit(1785118417.776:8): pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1761" name="cgroup.controllers" dev="tmpfs" ino=1771 res=0 errno=0 [ 319.188858][ T30] audit: type=1800 audit(1785118417.776:9): pid=13083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1761" name="cgroup.controllers" dev="tmpfs" ino=1771 res=0 errno=0 [ 319.288808][T13095] netlink: 'syz.0.1764': attribute type 10 has an invalid length. [ 319.393064][T13095] v: entered promiscuous mode [ 319.407698][T13095] team0: Port device v added [ 319.415165][T13093] syzkaller0: left promiscuous mode [ 319.432777][T13093] syzkaller0: left allmulticast mode [ 319.764888][T13109] netlink: 'syz.3.1769': attribute type 2 has an invalid length. [ 319.800490][T13109] : entered promiscuous mode [ 320.202973][T13126] __nla_validate_parse: 3 callbacks suppressed [ 320.202991][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1773'. [ 320.225400][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 320.478970][T13140] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 320.554583][T13140] bond7: entered promiscuous mode [ 320.562211][T13140] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.570055][T13148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1777'. [ 320.800984][T13157] lo speed is unknown, defaulting to 1000 [ 320.808365][T13157] lo speed is unknown, defaulting to 1000 [ 320.841479][T13159] netlink: 'syz.1.1779': attribute type 1 has an invalid length. [ 320.866396][T13159] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1779'. [ 321.091134][T13137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.304282][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 321.884904][T13184] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1784'. [ 322.093470][T13174] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1783'. [ 322.198348][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1786'. [ 322.501287][T13208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 322.724083][T13216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'. [ 322.756379][T13211] sch_tbf: burst 7 is lower than device batadv0 mtu (1514) ! [ 323.411274][T13237] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20003 [ 323.943142][T13243] geneve3: entered promiscuous mode [ 325.160448][T13188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.912641][T13278] tipc: Enabling of bearer rejected, failed to enable media [ 326.193482][T13284] syzkaller0: entered promiscuous mode [ 326.210376][T13284] syzkaller0: entered allmulticast mode [ 326.260715][T13284] __nla_validate_parse: 4 callbacks suppressed [ 326.260732][T13284] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1804'. [ 326.670920][T13307] bridge8: entered promiscuous mode [ 326.709664][T13307] bridge8: entered allmulticast mode [ 326.724118][T13307] team0: Device bridge8 is of different type [ 326.855070][T13329] netlink: 'syz.2.1812': attribute type 2 has an invalid length. [ 326.898152][T13333] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 326.917401][T13329] : entered promiscuous mode [ 327.013541][T13336] netlink: 'syz.0.1814': attribute type 2 has an invalid length. [ 327.041012][T13304] bridge8: entered promiscuous mode [ 327.047843][T13336] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1814'. [ 327.058695][T13304] bridge8: entered allmulticast mode [ 327.069463][T13336] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1814'. [ 327.088135][T13304] team0: Device bridge8 is of different type [ 327.097638][T13336] netlink: 600 bytes leftover after parsing attributes in process `syz.0.1814'. [ 327.160952][T13336] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.170586][T13336] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 327.240828][T13341] sit0: entered promiscuous mode [ 327.283575][T13346] x_tables: duplicate underflow at hook 2 [ 327.307297][T13341] netlink: 'syz.2.1816': attribute type 1 has an invalid length. [ 327.334857][T13341] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1816'. [ 327.577973][T13362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1821'. [ 327.684533][T13351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.844486][T13371] ip6erspan0: entered allmulticast mode [ 327.953689][T13351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.185265][T13351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.204275][T13389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1831'. [ 328.263191][T13391] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1832'. [ 328.282796][T13391] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 328.386233][T13400] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1834'. [ 328.489690][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 328.555079][T13351] batman_adv: 60X: Removing interface: macvtap1 [ 328.677318][T13351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.753530][T13418] syzkaller0: entered promiscuous mode [ 328.760589][T13418] syzkaller0: entered allmulticast mode [ 329.058357][T13441] netlink: 'syz.4.1842': attribute type 40 has an invalid length. [ 330.749559][ T1183] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.832686][ T1183] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.912499][ T1183] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.943120][ T1183] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.973417][T13467] ip6tnl0: Caught tx_queue_len zero misconfig [ 331.211123][T13479] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 331.278090][T13479] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 331.289419][T13479] bond12 (unregistering): Released all slaves [ 331.357371][T13482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1852'. [ 331.514541][T13484] xt_hashlimit: size too large, truncated to 1048576 [ 331.559849][T13484] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 331.668150][T13491] netlink: 'syz.3.1854': attribute type 58 has an invalid length. [ 331.693728][T13491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1854'. [ 331.825416][T13498] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 332.018524][T13498] 8021q: adding VLAN 0 to HW filter on device bond6 [ 332.298458][T13522] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1862'. [ 332.736133][T13541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1868'. [ 332.774699][T13541] set match dimension is over the limit! [ 333.039131][T13546] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 333.050831][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1870'. [ 333.069323][T13546] bond7 (unregistering): Released all slaves [ 333.084083][T13549] xt_hashlimit: size too large, truncated to 1048576 [ 333.203955][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 333.300102][T13558] syzkaller0: entered promiscuous mode [ 333.327881][T13558] syzkaller0: entered allmulticast mode [ 333.508936][T13567] netlink: 'syz.0.1875': attribute type 1 has an invalid length. [ 333.683277][T13567] 8021q: adding VLAN 0 to HW filter on device bond7 [ 333.726814][T13567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1875'. [ 333.760089][T13567] bond7: entered promiscuous mode [ 334.523619][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 334.542918][T13616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 334.821972][T13631] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1891'. [ 334.982095][T13638] tunl0: Caught tx_queue_len zero misconfig [ 335.154009][T13644] netlink: 'syz.2.1896': attribute type 2 has an invalid length. [ 335.247541][T13644] vlan4: entered promiscuous mode [ 335.252661][T13644] bond0: entered promiscuous mode [ 335.258882][T13644] bond_slave_0: entered promiscuous mode [ 335.264768][T13644] bond_slave_1: entered promiscuous mode [ 335.780113][T13677] netlink: 'syz.3.1906': attribute type 1 has an invalid length. [ 335.799855][T13673] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 335.976150][T13682] bond12: (slave geneve4): making interface the new active one [ 336.008715][T13682] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 336.075843][T13677] 8021q: adding VLAN 0 to HW filter on device bond12 [ 336.090701][T10467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.125854][T10467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.143126][T10467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.243295][T10467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 336.474252][T13717] __nla_validate_parse: 12 callbacks suppressed [ 336.474271][T13717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1915'. [ 336.702062][T13731] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 336.747374][T13730] lo: Caught tx_queue_len zero misconfig [ 336.778564][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 336.809251][T13734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1917'. [ 336.829877][T13737] netlink: 'syz.2.1920': attribute type 30 has an invalid length. [ 336.987074][T13743] netlink: 'syz.3.1923': attribute type 5 has an invalid length. [ 337.262207][T13759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1924'. [ 337.273501][T13753] veth1_vlan: left promiscuous mode [ 337.317326][T13762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1927'. [ 337.325453][T13753] veth0_vlan: left promiscuous mode [ 337.355085][T13753] veth0_vlan: entered promiscuous mode [ 337.398062][T13753] veth1_vlan: entered promiscuous mode [ 337.427165][T13753] veth1_macvtap: left promiscuous mode [ 337.444595][T13753] veth0_macvtap: left promiscuous mode [ 337.451334][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1926'. [ 337.478553][T13753] veth1_macvtap: entered promiscuous mode [ 337.496442][T13755] openvswitch: netlink: Flow key attr not present in new flow. [ 337.533682][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.543255][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.554943][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.567306][T13753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.579640][T13753] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 337.603884][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.611187][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.698977][T10466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.715156][T10466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.734162][T10466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.759373][T10466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.988436][T13787] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1933'. [ 338.980504][T13816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1939'. [ 339.125995][T13827] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 339.207700][T13832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.238039][T13827] 8021q: adding VLAN 0 to HW filter on device bond9 [ 339.357112][T13832] tipc: Enabled bearer , priority 0 [ 339.385301][T13832] syzkaller0: entered promiscuous mode [ 339.414448][T13832] syzkaller0: entered allmulticast mode [ 339.511355][T13832] tipc: Resetting bearer [ 339.537169][T13829] tipc: Resetting bearer [ 339.597922][T13829] tipc: Disabling bearer [ 339.654563][T13859] netlink: 'syz.3.1953': attribute type 4 has an invalid length. [ 339.679256][T13859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1953'. [ 340.037737][T13874] syzkaller0: entered promiscuous mode [ 340.054059][T13885] netlink: 'syz.0.1958': attribute type 1 has an invalid length. [ 340.074625][T13874] syzkaller0: entered allmulticast mode [ 340.149672][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'. [ 341.594587][T13952] pim6reg: entered allmulticast mode [ 341.607611][T13952] pim6reg: left allmulticast mode [ 341.634173][T13954] __nla_validate_parse: 5 callbacks suppressed [ 341.634189][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1974'. [ 341.650885][T13954] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 341.674674][T13952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1975'. [ 341.846474][T10468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.855708][T10468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.868900][T10468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.890078][T10468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.304823][T13986] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1985'. [ 342.337922][T13990] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1985'. [ 342.648528][T14006] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1991'. [ 342.684776][T14003] tipc: Enabled bearer , priority 0 [ 342.714224][T14003] syzkaller0: entered promiscuous mode [ 342.730718][T14003] syzkaller0: entered allmulticast mode [ 342.782599][T14003] tipc: Resetting bearer [ 342.904987][T14013] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1992'. [ 342.952309][T14001] tipc: Resetting bearer [ 342.973562][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1995'. [ 343.006934][T14001] tipc: Disabling bearer [ 343.087364][T14023] syzkaller0: entered promiscuous mode [ 343.103628][T14023] syzkaller0: entered allmulticast mode [ 343.139157][T14025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1997'. [ 343.193080][T14023] tipc: Started in network mode [ 343.200394][T14023] tipc: Node identity , cluster identity 4711 [ 343.206744][T14023] tipc: Failed to obtain node identity [ 343.212449][T14023] tipc: Enabling of bearer rejected, failed to enable media [ 343.222040][T14032] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1999'. [ 343.233828][T14027] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1998'. [ 343.258469][T14029] netlink: 'syz.1.1998': attribute type 1 has an invalid length. [ 343.315510][T14029] bond10: entered promiscuous mode [ 343.324805][T14029] 8021q: adding VLAN 0 to HW filter on device bond10 [ 344.472930][T14089] batadv0: entered promiscuous mode [ 344.502850][T14089] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 344.526842][T14089] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 344.725651][T14103] netlink: 'syz.3.2013': attribute type 1 has an invalid length. [ 345.008611][T14124] netlink: 'syz.4.2020': attribute type 5 has an invalid length. [ 345.610084][T14154] pim6reg1: entered promiscuous mode [ 345.629303][T14154] pim6reg1: entered allmulticast mode [ 345.755171][T14164] openvswitch: netlink: IP tunnel dst address not specified [ 345.840669][T14168] ipvlan0: Caught tx_queue_len zero misconfig [ 346.221790][T14187] netlink: 'syz.0.2029': attribute type 3 has an invalid length. [ 346.256104][T14189] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 347.344989][T14229] __nla_validate_parse: 6 callbacks suppressed [ 347.345005][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2040'. [ 347.519720][T14238] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2043'. [ 347.559871][T14238] vlan1: entered allmulticast mode [ 347.565019][T14238] erspan0: entered allmulticast mode [ 347.843766][T14253] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 347.869997][T14253] 8021q: adding VLAN 0 to HW filter on device bond9 [ 347.988484][T14259] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2047'. [ 347.999851][T14259] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20003 [ 349.408684][T14200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.660847][T14271] bridge6: entered promiscuous mode [ 349.677720][T14271] bridge6: entered allmulticast mode [ 349.704278][T14271] team0: Port device bridge6 added [ 349.767100][T14271] bridge7: entered promiscuous mode [ 349.784676][T14271] bridge7: entered allmulticast mode [ 349.812995][T14271] team0: Port device bridge7 added [ 349.861750][T14282] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2054'. [ 349.897170][T14284] netlink: 'syz.2.2055': attribute type 12 has an invalid length. [ 349.914275][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 350.009144][T14291] 8021q: VLANs not supported on lo [ 350.454585][T14304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2059'. [ 350.491903][T10468] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 350.956717][T14324] syzkaller0: entered promiscuous mode [ 350.962222][T14324] syzkaller0: entered allmulticast mode [ 351.170329][T14329] gtp1: entered promiscuous mode [ 351.176713][T14329] gtp1: entered allmulticast mode [ 351.184930][T14329] team0: Port device gtp1 added [ 351.218967][T14333] bond_slave_1: Caught tx_queue_len zero misconfig [ 353.417541][T14313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.665786][T14351] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.673452][T14351] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.751596][T14351] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.758947][T14351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.766548][T14351] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.773754][T14351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.841333][T14351] bridge0: entered promiscuous mode [ 353.859203][T14351] team0: Port device bridge0 added [ 353.866856][T14356] macvlan0: left allmulticast mode [ 353.872295][T14356] netlink: 'syz.4.2071': attribute type 1 has an invalid length. [ 353.907681][T14356] netlink: 'syz.4.2071': attribute type 2 has an invalid length. [ 353.922963][T14360] siw: device registration error -23 [ 353.954588][T14353] lo speed is unknown, defaulting to 1000 [ 353.965007][T14353] lo speed is unknown, defaulting to 1000 [ 354.063032][T14368] sctp: [Deprecated]: syz.3.2072 (pid 14368) Use of int in max_burst socket option. [ 354.063032][T14368] Use struct sctp_assoc_value instead [ 354.223793][T14370] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20000 [ 354.745818][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2078'. [ 354.767446][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 355.032354][T14400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'. [ 355.227793][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'. [ 355.259655][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2084'. [ 355.704670][T14429] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2089'. [ 355.812807][T14429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2089'. [ 355.832324][T14440] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 356.015481][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2088'. [ 356.066566][T14431] bond0: left allmulticast mode [ 356.148261][T14453] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 356.364614][T14457] netlink: 'syz.0.2098': attribute type 1 has an invalid length. [ 356.392963][T14457] netlink: 'syz.0.2098': attribute type 4 has an invalid length. [ 356.421446][T14457] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2098'. [ 356.476019][T14467] netlink: 'syz.0.2098': attribute type 1 has an invalid length. [ 356.519686][T14467] netlink: 'syz.0.2098': attribute type 4 has an invalid length. [ 356.576119][T14467] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2098'. [ 356.759175][T14481] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2101'. [ 357.134200][T14499] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 357.167720][T14499] 8021q: adding VLAN 0 to HW filter on device bond11 [ 357.233082][T14499] bond11: (slave veth15): Enslaving as an active interface with a down link [ 357.242562][ T1183] bond0: (slave bond_slave_0): interface is now down [ 357.262781][ T1183] bond0: (slave bond_slave_1): interface is now down [ 357.280180][ T1183] bond0: (slave veth0_to_bond): interface is now down [ 357.280927][T14500] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 357.296126][T14500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.318245][T14500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 357.326156][T14500] 8021q: adding VLAN 0 to HW filter on device bond3 [ 357.334199][ T57] bond0: (slave bond_slave_0): interface is now down [ 357.349153][ T57] bond0: (slave bond_slave_1): interface is now down [ 357.368780][ T57] bond0: (slave veth0_to_bond): interface is now down [ 357.380800][T14500] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 357.397709][ T57] bond0: (slave bond_slave_0): interface is now down [ 357.410159][ T57] bond0: (slave bond_slave_1): interface is now down [ 357.418325][ T57] bond0: (slave veth0_to_bond): interface is now down [ 357.425867][T14500] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 357.442872][T14500] A link change request failed with some changes committed already. Interface syzcaller0 may have been left with an inconsistent configuration, please check. [ 357.448370][T10469] bond0: (slave bond_slave_0): interface is now down [ 357.467434][T10469] bond0: (slave bond_slave_1): interface is now down [ 357.474402][T10469] bond0: (slave veth0_to_bond): interface is now down [ 357.487448][T14499] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 357.498237][T14499] bond11: (slave batadv2): making interface the new active one [ 357.508484][T14499] batadv2: entered promiscuous mode [ 357.514346][T14499] bond11: (slave batadv2): Enslaving as an active interface with an up link [ 357.523504][T10469] bond0: (slave bond_slave_0): interface is now down [ 357.536062][T10469] bond0: (slave bond_slave_1): interface is now down [ 357.549902][T10469] bond0: (slave veth0_to_bond): interface is now down [ 357.558370][ T1183] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 357.576139][ T1183] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 357.588649][T12481] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 357.616604][T10469] bond0: (slave bond_slave_0): interface is now down [ 357.630495][T10469] bond0: (slave bond_slave_1): interface is now down [ 357.646368][T10469] bond0: (slave veth0_to_bond): interface is now down [ 357.691037][ T3361] bond0: (slave bond_slave_0): interface is now down [ 357.701029][T12481] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 357.723432][ T3361] bond0: (slave bond_slave_1): interface is now down [ 357.745584][ T3361] bond0: (slave veth0_to_bond): interface is now down [ 357.777577][ T3361] bond0: (slave bond_slave_0): interface is now down [ 357.798714][ T3361] bond0: (slave bond_slave_1): interface is now down [ 357.821785][ T3361] bond0: (slave veth0_to_bond): interface is now down [ 357.866109][ T3361] bond0: (slave bond_slave_0): interface is now down [ 357.889284][ T3361] bond0: (slave bond_slave_1): interface is now down [ 357.897857][ T3361] bond0: (slave veth0_to_bond): interface is now down [ 357.917846][ T3361] bond0: (slave bond_slave_0): interface is now down [ 357.924744][ T3361] bond0: (slave bond_slave_1): interface is now down [ 357.932567][ T3361] bond0: (slave veth0_to_bond): interface is now down [ 357.958436][ T3361] bond0: (slave bond_slave_0): interface is now down [ 357.965909][ T3361] bond0: (slave bond_slave_1): interface is now down [ 357.973517][ T3361] bond0: (slave veth0_to_bond): interface is now down [ 357.992628][ T36] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 358.000751][ T3361] bond0: (slave bond_slave_0): interface is now down [ 358.019830][ T3361] bond0: (slave bond_slave_1): interface is now down [ 358.040372][ T3361] bond0: (slave veth0_to_bond): interface is now down [ 358.081875][ T3361] bond0: now running without any active interface! [ 358.375998][T14540] openvswitch: netlink: Duplicate or invalid key (type 0). [ 358.390788][T12481] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 358.422361][T14540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.439957][T12481] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.549627][T12481] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 358.583759][T14544] syzkaller0: entered promiscuous mode [ 358.601262][T14544] syzkaller0: entered allmulticast mode [ 358.933432][T14547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.004907][T14547] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.174788][ T3326] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 359.194155][ T3326] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 359.360103][T14547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.381459][T14547] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.499230][T14547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.526593][T14547] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.799724][T14547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.849170][T14547] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.248752][T14608] __nla_validate_parse: 2 callbacks suppressed [ 360.248772][T14608] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2124'. [ 360.315035][T14608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2124'. [ 360.382137][T14608] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 360.400899][ T1154] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.409536][ T1154] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.460251][ T1154] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.470497][ T1154] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.512935][ T1154] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.523940][ T1154] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.581784][ T1154] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.604290][ T1154] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.740895][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'. [ 360.757880][T14546] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.782015][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2128'. [ 360.787023][T14546] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.795362][T14614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2128'. [ 360.839196][T14616] : renamed from vlan0 (while UP) [ 360.881621][T14546] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.898177][T14546] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.991786][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'. [ 361.045786][T14546] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.083304][T14546] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.113324][T14626] tc_dump_action: action bad kind [ 361.119216][T14628] tc_dump_action: action bad kind [ 361.161727][T14546] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.193389][T14546] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.465197][T14644] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 361.560902][T14650] bond8: option resend_igmp: invalid value (2878) [ 361.569016][T14650] bond8: option resend_igmp: allowed values 0 - 255 [ 361.593841][T14650] bond8 (unregistering): Released all slaves [ 361.781174][T14652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2138'. [ 361.823260][T14660] bridge8: entered promiscuous mode [ 361.849295][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 361.960100][T14660] bond12: (slave macvlan1): Enslaving as an active interface with an up link [ 361.980107][T14660] bond12 (unregistering): (slave macvlan1): Releasing backup interface [ 362.005707][T14660] bond12 (unregistering): Released all slaves [ 362.017502][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2142'. [ 362.026960][T14671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2142'. [ 362.128021][T14675] lo speed is unknown, defaulting to 1000 [ 362.135893][T14675] lo speed is unknown, defaulting to 1000 [ 362.526802][T10468] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.544968][T10468] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.617265][ T3361] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.641526][ T3361] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.701564][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.717116][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.759222][T14696] syzkaller0: entered promiscuous mode [ 362.776632][T14696] syzkaller0: entered allmulticast mode [ 362.809445][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.820034][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.165152][T14714] netlink: 'syz.1.2150': attribute type 2 has an invalid length. [ 363.266753][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 363.266774][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 363.773712][T14736] lo speed is unknown, defaulting to 1000 [ 363.783799][T14737] syzkaller0: entered promiscuous mode [ 363.791510][T14737] syzkaller0: entered allmulticast mode [ 363.804156][T14736] lo speed is unknown, defaulting to 1000 [ 364.223934][T14751] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 364.269627][T14751] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 364.630409][T14769] openvswitch: netlink: IP tunnel dst address not specified [ 364.647620][T14769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.994836][T14738] dvmrp0: entered allmulticast mode [ 365.005739][T14789] netlink: 'syz.2.2173': attribute type 1 has an invalid length. [ 365.067357][T14789] bond10: option mode: invalid value (7) [ 365.080872][T14789] bond10 (unregistering): Released all slaves [ 365.390659][T14804] __nla_validate_parse: 8 callbacks suppressed [ 365.390678][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 365.447843][T14804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2175'. [ 365.486789][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 365.517571][T14807] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2178'. [ 365.741060][T14811] lo speed is unknown, defaulting to 1000 [ 365.894042][T14811] lo speed is unknown, defaulting to 1000 [ 366.611371][T14815] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2179'. [ 366.801924][T14847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2186'. [ 367.336097][T14864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2191'. [ 367.458801][T14853] netlink: 'syz.2.2188': attribute type 4 has an invalid length. [ 367.493573][T14853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2188'. [ 367.531194][T14853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2188'. [ 367.549614][T14853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2188'. [ 367.781773][T14878] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 368.009209][T14885] xt_hashlimit: size too large, truncated to 1048576 [ 368.568828][ T1154] batadv2: left promiscuous mode [ 368.639556][T14914] pimreg: entered allmulticast mode [ 368.955934][T14924] sit0: left promiscuous mode [ 369.235977][T14924] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 369.262682][T14924] veth1_vlan: left promiscuous mode [ 369.282238][T14924] veth1_vlan: entered promiscuous mode [ 369.320621][T14924] bond1: left promiscuous mode [ 369.326213][T14924] bridge1: left promiscuous mode [ 369.333183][T14924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.344852][T14924] syzkaller0: left promiscuous mode [ 369.352271][T14924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 369.366321][T14924] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 369.375811][T14924] ipip0: left promiscuous mode [ 369.382615][T14924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 369.394637][T14924] bond4: left promiscuous mode [ 369.399734][T14924] bridge0: left promiscuous mode [ 369.415460][T14924] gre2: left promiscuous mode [ 369.422121][T14924] vlan3: left promiscuous mode [ 369.429863][T14924] bond6: left promiscuous mode [ 369.434718][T14924] batadv1: left promiscuous mode [ 369.446214][T14924] bond7: left promiscuous mode [ 369.455275][T14924] vlan4: left promiscuous mode [ 369.460564][T14924] bond0: left promiscuous mode [ 369.465696][T14924] bond_slave_0: left promiscuous mode [ 369.473377][T14924] bond_slave_1: left promiscuous mode [ 369.481117][T14924] 8021q: adding VLAN 0 to HW filter on device bond8 [ 369.499714][T14924] 8021q: adding VLAN 0 to HW filter on device eth0 [ 369.509842][T14924] 8021q: adding VLAN 0 to HW filter on device eth1 [ 369.522440][T14924] 8021q: adding VLAN 0 to HW filter on device eth2 [ 369.535108][T14924] 8021q: adding VLAN 0 to HW filter on device eth3 [ 369.555978][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.066490][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 371.108964][T14892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.346679][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 371.361992][T14969] __nla_validate_parse: 3 callbacks suppressed [ 371.362024][T14969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2209'. [ 371.385454][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2211'. [ 371.438767][T14969] sctp: [Deprecated]: syz.0.2209 (pid 14969) Use of int in max_burst socket option deprecated. [ 371.438767][T14969] Use struct sctp_assoc_value instead [ 371.909798][T14997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2218'. [ 372.197891][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2220'. [ 372.491375][T15023] netlink: 'syz.0.2222': attribute type 1 has an invalid length. [ 373.129806][T15027] syzkaller1: entered promiscuous mode [ 373.146496][T15027] syzkaller1: entered allmulticast mode [ 373.525056][T15062] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 373.614016][T15062] netlink: 200484 bytes leftover after parsing attributes in process `syz.2.2232'. [ 373.663461][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'. [ 373.705205][T15070] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 373.732016][T15070] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 373.774242][T15070] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 373.866452][T15070] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 373.889127][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2235'. [ 373.901279][T15070] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 373.920343][T15077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2235'. [ 373.943602][T15086] netlink: 'syz.2.2237': attribute type 10 has an invalid length. [ 373.956827][T15070] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 373.976827][T15070] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 373.997992][T15070] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 374.073859][T15082] macsec0: left allmulticast mode [ 374.655528][T15120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2245'. [ 374.731998][T15120] ip6tnl2: entered allmulticast mode [ 374.858661][T15129] mac80211_hwsim hwsim10 syzkaller1: entered promiscuous mode [ 374.916522][T15129] mac80211_hwsim hwsim10 syzkaller1: entered allmulticast mode [ 375.004615][T15139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2251'. [ 375.140581][T15144] syzkaller1: entered allmulticast mode [ 375.164603][T15144] 8021q: VLANs not supported on lo [ 376.418721][T15177] __nla_validate_parse: 8 callbacks suppressed [ 376.418747][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2254'. [ 376.617185][T15187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2258'. [ 376.669181][T15188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2258'. [ 376.705694][T15187] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 377.133312][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2261'. [ 377.169290][T15201] veth5: entered promiscuous mode [ 377.466586][T15207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2262'. [ 377.640554][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2267'. [ 377.937138][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2270'. [ 378.583344][T15250] syzkaller0: entered promiscuous mode [ 378.617755][T15250] syzkaller0: entered allmulticast mode [ 379.040459][T15274] validate_nla: 37 callbacks suppressed [ 379.040499][T15274] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 379.290859][T15274] bond10: entered promiscuous mode [ 379.322716][T15274] bond10: entered allmulticast mode [ 379.333364][T15274] 8021q: adding VLAN 0 to HW filter on device bond10 [ 379.426877][ T5638] Bluetooth: hci4: command 0x0405 tx timeout [ 380.222094][T15318] syzkaller1: entered promiscuous mode [ 380.249450][T15318] syzkaller1: entered allmulticast mode [ 380.384075][T15340] batman_adv: batadv0: Adding interface: macvlan0 [ 380.410830][T15340] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.452647][T15340] batman_adv: batadv0: Interface activated: macvlan0 [ 380.786077][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 380.830773][T15353] tipc: MTU too low for tipc bearer [ 380.893066][T15349] syzkaller0: entered promiscuous mode [ 380.915892][T15349] syzkaller0: entered allmulticast mode [ 380.942010][T15353] 0-24|fp0-: renamed from bridge_slave_0 [ 381.014432][T15360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2296'. [ 381.103481][T15359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2296'. [ 381.972453][T15401] __nla_validate_parse: 3 callbacks suppressed [ 381.972473][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 382.165796][T15401] bond0: (slave bond_slave_1): Releasing backup interface [ 382.410975][T15416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2310'. [ 382.456567][T15412] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 382.475692][T15411] : renamed from bond_slave_0 [ 382.527109][T15422] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 382.849617][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 382.869228][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2312'. [ 382.909004][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 382.978191][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2312'. [ 383.158988][T15446] netlink: 'syz.4.2315': attribute type 4 has an invalid length. [ 383.177295][T15446] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2315'. [ 383.197251][T15446] .`: renamed from bond0 [ 383.670587][T15462] tipc: Enabling of bearer rejected, failed to enable media [ 384.316651][T15483] openvswitch: netlink: Message has -2 unknown bytes. [ 384.375955][T15483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.474927][ T5287] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 386.706484][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 386.715882][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 388.059397][T15528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.475472][T15585] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2344'. [ 388.516554][T15585] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2344'. [ 388.938693][T15604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2347'. [ 389.074376][T15598] bond10 (unregistering): Released all slaves [ 389.224440][T15605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2348'. [ 389.359198][T15619] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 389.409620][T15619] bond0 (unregistering): Released all slaves [ 389.849993][T15636] lo speed is unknown, defaulting to 1000 [ 389.875013][T15636] lo speed is unknown, defaulting to 1000 [ 390.221114][T15652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2357'. [ 390.257097][T15652] openvswitch: netlink: Missing key (keys=40, expected=80) [ 391.327814][T15667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2362'. [ 391.395288][T15667] netlink: 'syz.0.2362': attribute type 1 has an invalid length. [ 391.408893][T15667] netlink: 'syz.0.2362': attribute type 2 has an invalid length. [ 391.741522][T15682] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2366'. [ 391.767200][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'. [ 392.470163][T15699] syzkaller0: entered promiscuous mode [ 392.488782][T15699] syzkaller0: entered allmulticast mode [ 393.043406][T15731] netlink: 'syz.3.2377': attribute type 46 has an invalid length. [ 394.651964][T15710] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.802883][T15710] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.940264][T15710] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.003991][T15747] netlink: 'syz.2.2381': attribute type 4 has an invalid length. [ 395.070056][T15710] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.237848][T15760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2384'. [ 395.263890][T10469] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.824841][T15760] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 395.862269][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.935223][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.972235][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.192635][T15781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2388'. [ 396.246090][T15785] openvswitch: netlink: Key type 29 is not supported [ 396.274876][T15781] syzkaller0: entered promiscuous mode [ 396.289074][T15787] netlink: 'syz.2.2390': attribute type 4 has an invalid length. [ 396.299686][T15781] syzkaller0: entered allmulticast mode [ 396.333725][T15787] netlink: 'syz.2.2390': attribute type 8 has an invalid length. [ 396.365860][T15787] netlink: 'syz.2.2390': attribute type 1 has an invalid length. [ 396.393444][T15787] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2390'. [ 396.415626][T15793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.434623][T15787] NCSI netlink: No device for ifindex 0 [ 396.514895][T15798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.723996][T15812] mac80211_hwsim hwsim10 syzkaller1: left promiscuous mode [ 396.751055][T15812] mac80211_hwsim hwsim10 syzkaller1: left allmulticast mode [ 396.873010][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2399'. [ 396.936178][T15819] macsec0: entered promiscuous mode [ 396.948209][T15819] batadv0: entered promiscuous mode [ 396.959992][T15819] macsec0: entered allmulticast mode [ 396.973515][T15819] batadv0: entered allmulticast mode [ 396.981894][T15819] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 396.991228][T15819] batadv0: left allmulticast mode [ 396.999336][T15819] batadv0: left promiscuous mode [ 397.513832][T15842] openvswitch: netlink: IP tunnel dst address not specified [ 397.704416][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2408'. [ 397.715747][T15852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2408'. [ 397.835627][T15847] syzkaller0: entered promiscuous mode [ 398.008297][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2410'. [ 398.023470][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 398.047858][T15860] netlink: 'syz.3.2409': attribute type 30 has an invalid length. [ 398.158861][T15865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2411'. [ 398.187347][T15863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2410'. [ 398.594417][T15886] tipc: Enabling of bearer rejected, media not registered [ 398.800437][T15904] dvmrp0: entered allmulticast mode [ 398.897256][T15902] lo speed is unknown, defaulting to 1000 [ 398.944658][T15902] lo speed is unknown, defaulting to 1000 [ 399.109675][T15920] syz.2.2424: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 399.217028][T15920] CPU: 0 UID: 0 PID: 15920 Comm: syz.2.2424 Not tainted syzkaller #0 PREEMPT(full) [ 399.217073][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 399.217097][T15920] Call Trace: [ 399.217106][T15920] [ 399.217115][T15920] dump_stack_lvl+0xe8/0x150 [ 399.217153][T15920] warn_alloc+0x24c/0x270 [ 399.217183][T15920] ? stack_depot_save_flags+0x33/0x800 [ 399.217214][T15920] ? __pfx_warn_alloc+0x10/0x10 [ 399.217243][T15920] ? kasan_save_track+0x3e/0x80 [ 399.217270][T15920] ? __kasan_kmalloc+0x93/0xb0 [ 399.217300][T15920] ? xsk_setsockopt+0x52a/0x960 [ 399.217324][T15920] ? do_sock_setsockopt+0x17c/0x1b0 [ 399.217345][T15920] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 399.217367][T15920] ? do_syscall_64+0x174/0x580 [ 399.217392][T15920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.217425][T15920] __vmalloc_node_range_noprof+0x12c/0x1730 [ 399.217483][T15920] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 399.217516][T15920] ? __kasan_kmalloc+0x93/0xb0 [ 399.217547][T15920] ? __kmalloc_cache_noprof+0x32d/0x660 [ 399.217576][T15920] ? __kmalloc_cache_noprof+0x150/0x660 [ 399.217607][T15920] vmalloc_user_noprof+0xad/0xe0 [ 399.217634][T15920] ? xskq_create+0xbf/0x170 [ 399.217658][T15920] xskq_create+0xbf/0x170 [ 399.217685][T15920] xsk_init_queue+0x8a/0xe0 [ 399.217711][T15920] xsk_setsockopt+0x52a/0x960 [ 399.217731][T15920] ? __fget_files+0x2a/0x420 [ 399.217763][T15920] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.217785][T15920] ? __pfx_aa_sk_perm+0x10/0x10 [ 399.217811][T15920] ? aa_sock_opt_perm+0xff/0x1a0 [ 399.217838][T15920] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 399.217861][T15920] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.217885][T15920] do_sock_setsockopt+0x17c/0x1b0 [ 399.217914][T15920] __x64_sys_setsockopt+0x13d/0x1b0 [ 399.217940][T15920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.217970][T15920] do_syscall_64+0x174/0x580 [ 399.217994][T15920] ? trace_irq_disable+0x3b/0x140 [ 399.218023][T15920] ? clear_bhb_loop+0x40/0x90 [ 399.218049][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.218071][T15920] RIP: 0033:0x7f3baeb9de99 [ 399.218095][T15920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.218118][T15920] RSP: 002b:00007f3bafaa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 399.218141][T15920] RAX: ffffffffffffffda RBX: 00007f3baee25fa0 RCX: 00007f3baeb9de99 [ 399.218156][T15920] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 399.218169][T15920] RBP: 00007f3baec33eaf R08: 0000000000000004 R09: 0000000000000000 [ 399.218181][T15920] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.218195][T15920] R13: 00007f3baee26038 R14: 00007f3baee25fa0 R15: 00007ffdfa4feac8 [ 399.218229][T15920] [ 399.220384][T15920] Mem-Info: [ 399.576375][T15920] active_anon:8596 inactive_anon:0 isolated_anon:0 [ 399.576375][T15920] active_file:0 inactive_file:43223 isolated_file:0 [ 399.576375][T15920] unevictable:768 dirty:183 writeback:0 [ 399.576375][T15920] slab_reclaimable:11088 slab_unreclaimable:114226 [ 399.576375][T15920] mapped:31154 shmem:2843 pagetables:1324 [ 399.576375][T15920] sec_pagetables:0 bounce:0 [ 399.576375][T15920] kernel_misc_reclaimable:0 [ 399.576375][T15920] free:1308889 free_pcp:8080 free_cma:0 [ 399.656504][T15920] Node 0 active_anon:35284kB inactive_anon:0kB active_file:0kB inactive_file:172684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125416kB dirty:732kB writeback:0kB shmem:10636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14724kB pagetables:5156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 399.734497][T15920] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 399.809649][T15920] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 399.885885][T15920] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 399.892481][T15920] Node 0 DMA32 free:1282428kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37800kB inactive_anon:0kB active_file:0kB inactive_file:172684kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2548616kB mlocked:0kB bounce:0kB free_pcp:29792kB local_pcp:21672kB free_cma:0kB [ 399.938725][T15920] lowmem_reserve[]: 0 0 0 0 0 [ 399.958936][T15920] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 399.995163][T15920] lowmem_reserve[]: 0 0 0 0 0 [ 400.000388][T15920] Node 1 Normal free:3936876kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.108993][T15920] lowmem_reserve[]: 0 0 0 0 0 [ 400.119494][T15920] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 400.146628][T15943] RDS: rds_bind could not find a transport for ::ffff:172.20.20.57, load rds_tcp or rds_rdma? [ 400.176076][T15920] Node 0 DMA32: 2363*4kB (UE) 618*8kB (UME) 148*16kB (UME) 157*32kB (UME) 109*64kB (UME) 54*128kB (UME) 16*256kB (UM) 10*512kB (UM) 3*1024kB (UME) 4*2048kB (UME) 299*4096kB (UM) = 1280860kB [ 400.219385][T15920] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 400.245259][T15920] Node 1 Normal: 1*4kB (M) 1*8kB (M) 8*16kB [ 400.245641][T15943] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 400.268597][T15920] (UM) 9*32kB (UM) 9*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3936876kB [ 400.296607][T15920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.317706][T15920] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.336738][T15920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.364807][T15920] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.410300][T15920] 47388 total pagecache pages [ 400.421422][T15920] 0 pages in swap cache [ 400.437391][T15920] Free swap = 124996kB [ 400.462809][T15920] Total swap = 124996kB [ 400.476454][T15920] 2097051 pages RAM [ 400.488226][T15920] 0 pages HighMem/MovableOnly [ 400.503165][T15920] 428217 pages reserved [ 400.521132][T15920] 0 pages cma reserved [ 400.615169][T15953] lo speed is unknown, defaulting to 1000 [ 400.668954][T15953] lo speed is unknown, defaulting to 1000 [ 400.961239][T15962] __nla_validate_parse: 5 callbacks suppressed [ 400.961258][T15962] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2433'. [ 400.995132][T15962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2433'. [ 401.212685][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2434'. [ 401.783552][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 402.023412][T15988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 402.365385][T16004] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2441'. [ 403.123465][T16032] netlink: 'syz.1.2448': attribute type 1 has an invalid length. [ 403.234321][T16032] 8021q: adding VLAN 0 to HW filter on device bond12 [ 403.268028][T16030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2446'. [ 403.314407][T16035] pim6reg1: entered promiscuous mode [ 403.343018][T16035] pim6reg1: entered allmulticast mode [ 403.421154][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2452'. [ 403.486147][T16038] : renamed from lo [ 403.529643][T16050] bond13: (slave bridge12): Enslaving as an active interface with an up link [ 403.582420][T16050] macvlan4: entered promiscuous mode [ 403.589123][T16050] macvlan4: entered allmulticast mode [ 403.595371][T16050] bond13: (slave macvlan4): Error -98 calling set_mac_address [ 403.731258][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2453'. [ 404.375510][T16093] syzkaller1: entered promiscuous mode [ 404.401706][T16093] syzkaller1: entered allmulticast mode [ 404.765484][T16112] RDS: rds_bind could not find a transport for ::e50b:0:8000:0:20:0, load rds_tcp or rds_rdma? [ 404.792665][T16111] syzkaller0: entered promiscuous mode [ 404.822394][T16111] syzkaller0: entered allmulticast mode [ 404.883201][T16111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'. [ 404.930497][T16121] tipc: Started in network mode [ 404.947808][T16121] tipc: Node identity , cluster identity 4711 [ 404.969334][T16121] tipc: Failed to obtain node identity [ 404.987658][T16121] tipc: Enabling of bearer rejected, failed to enable media [ 405.285572][T16141] netlink: zone id is out of range [ 405.574334][T16148] xt_hashlimit: size too large, truncated to 1048576 [ 408.243714][T16150] block nbd2: shutting down sockets [ 408.521849][T16193] __nla_validate_parse: 2 callbacks suppressed [ 408.521868][T16193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2476'. [ 408.609457][T16201] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2480'. [ 408.807143][T16201] team0 (unregistering): Port device xfrm0 removed [ 408.871361][T16201] team0 (unregistering): Port device gtp1 removed [ 409.011005][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 409.201470][T16226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.352688][T16233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2488'. [ 409.549598][T16240] virt_wifi0 speed is unknown, defaulting to 1000 [ 409.556670][T16240] virt_wifi0 speed is unknown, defaulting to 1000 [ 409.569402][T16240] virt_wifi0 speed is unknown, defaulting to 1000 [ 409.579375][T16240] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 409.596153][T16240] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 409.629473][T16240] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 409.706082][T16245] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2492'. [ 409.740587][T16240] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 409.886136][T16240] virt_wifi0 speed is unknown, defaulting to 1000 [ 409.921938][T16240] virt_wifi0 speed is unknown, defaulting to 1000 [ 409.949190][T16240] virt_wifi0 speed is unknown, defaulting to 1000 [ 409.958719][T16240] virt_wifi0 speed is unknown, defaulting to 1000 [ 409.966068][T16257] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 409.977039][T16240] virt_wifi0 speed is unknown, defaulting to 1000 [ 410.563885][T16280] veth0: left promiscuous mode [ 410.582779][T16280] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 410.620997][T16280] bond7: left allmulticast mode [ 410.664758][T16280] bond10: left promiscuous mode [ 410.701455][T16280] bond10: left allmulticast mode [ 410.732489][T16280] geneve3: left promiscuous mode [ 410.748054][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 410.758308][T16289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2504'. [ 410.824357][T16280] veth5: left promiscuous mode [ 410.855852][T16280] batman_adv: batadv0: Interface deactivated: macvlan0 [ 410.941833][ T3361] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 411.049085][ T3361] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 411.065437][ T1154] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 411.115700][T16303] bond7: (slave veth0_to_bond): Releasing active interface [ 411.155442][T16303] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 411.312873][T16307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2506'. [ 411.323815][T16307] netlink: 'syz.2.2506': attribute type 1 has an invalid length. [ 411.332167][T16307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2506'. [ 411.554673][T16323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'. [ 411.570803][T16323] netlink: 'syz.1.2509': attribute type 30 has an invalid length. [ 412.074521][T16337] bridge11: entered promiscuous mode [ 412.080864][T16337] bridge11: entered allmulticast mode [ 413.670571][T16348] dvmrp8: entered allmulticast mode [ 413.861197][T16373] __nla_validate_parse: 6 callbacks suppressed [ 413.861217][T16373] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2523'. [ 414.069741][T16384] bridge2: entered promiscuous mode [ 414.092550][T16384] bridge2: entered allmulticast mode [ 414.130613][T16384] team0: Port device bridge2 added [ 414.203639][T16396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2529'. [ 414.250508][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'. [ 414.279712][T16400] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2529'. [ 414.317264][T16380] bridge3: entered promiscuous mode [ 414.322752][T16380] bridge3: entered allmulticast mode [ 414.332450][T16380] team0: Port device bridge3 added [ 414.534644][T16412] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 414.613280][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 414.626168][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2533'. [ 414.675479][T16417] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2534'. [ 414.868773][T16421] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 415.182420][T16450] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2543'. [ 415.241242][T16454] syzkaller1: entered promiscuous mode [ 415.248331][T16454] syzkaller1: entered allmulticast mode [ 415.655554][T16464] can: request_module (can-proto-0) failed. [ 415.692330][T10468] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 415.719830][T16469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.142590][T16492] netlink: 'syz.4.2551': attribute type 6 has an invalid length. [ 416.906815][T16525] netlink: 496 bytes leftover after parsing attributes in process `syz.1.2561'. [ 416.929468][T16526] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 416.981520][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2560'. [ 417.058684][T16530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.068679][T16530] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.082369][T16530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.122603][T16530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.134663][T16530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.145512][T16530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.167159][T16530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.175201][T16530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.183912][T16530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.198354][T16530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.207971][T16530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.215420][T16530] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 417.223936][T16530] 8021q: adding VLAN 0 to HW filter on device bond3 [ 417.258978][T16530] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.300381][T16530] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 417.309637][T16530] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 417.322918][T16530] 8021q: adding VLAN 0 to HW filter on device bond5 [ 417.334731][T16530] 8021q: adding VLAN 0 to HW filter on device bond6 [ 417.355441][T16530] 8021q: adding VLAN 0 to HW filter on device bond7 [ 417.370521][T16530] 8021q: adding VLAN 0 to HW filter on device bond8 [ 417.389238][T16530] 8021q: adding VLAN 0 to HW filter on device bond9 [ 417.401638][T16530] 8021q: adding VLAN 0 to HW filter on device bond10 [ 417.411443][T16530] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 417.427208][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 417.511095][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.518303][T10469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.534832][T10469] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.542041][T10469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.572947][ T3361] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.584111][ T3361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.593610][ T3361] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.604924][ T3361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.641985][ T3361] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.694903][ T3361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.836679][ T13] bond10: (slave bridge0): failed to get link speed/duplex [ 417.919148][T16559] netlink: 'syz.3.2570': attribute type 4 has an invalid length. [ 417.988485][ T13] bond10: (slave bridge0): failed to get link speed/duplex [ 418.117916][ T3361] bond10: (slave bridge0): failed to get link speed/duplex [ 418.256465][T10469] bond10: (slave bridge0): failed to get link speed/duplex [ 418.428972][T16590] pimreg: left allmulticast mode [ 418.606064][T16594] bond14: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 418.649481][T16594] bond14 (unregistering): Released all slaves [ 418.706692][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 418.838778][ T1154] bond10: (slave bridge0): failed to get link speed/duplex [ 418.919669][T16605] __nla_validate_parse: 3 callbacks suppressed [ 418.919690][T16605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2578'. [ 419.065707][T16616] xt_hashlimit: max too large, truncated to 1048576 [ 419.085016][T16616] xt_hashlimit: overflow, try lower: 137438953472/8 [ 419.103795][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2580'. [ 419.140347][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'. [ 419.160481][ T36] bond10: (slave bridge0): failed to get link speed/duplex [ 419.178207][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'. [ 419.317843][ T13] bond10: (slave bridge0): failed to get link speed/duplex [ 419.447771][ T1154] bond10: (slave bridge0): failed to get link speed/duplex [ 419.485769][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2585'. [ 419.639812][T16636] netlink: 'syz.3.2586': attribute type 1 has an invalid length. [ 419.662739][T16636] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2586'. [ 419.795277][T16650] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2589'. [ 419.827627][T16650] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2589'. [ 419.855784][T16654] Cannot find map_set index 65532 as target [ 420.154748][T16667] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2593'. [ 420.867306][T16697] netlink: 'syz.4.2599': attribute type 10 has an invalid length. [ 421.028783][T16700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2600'. [ 421.781681][T16722] netlink: 'syz.4.2604': attribute type 7 has an invalid length. [ 421.945050][T16734] bridge0: port 3(veth1_to_bridge) entered blocking state [ 421.968041][T16734] bridge0: port 3(veth1_to_bridge) entered disabled state [ 421.997419][T16734] veth1_to_bridge: entered allmulticast mode [ 422.034073][T16734] veth1_to_bridge: entered promiscuous mode [ 422.094642][T16734] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 422.180435][T16734] bridge0: port 3(veth1_to_bridge) entered blocking state [ 422.187798][T16734] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 422.276494][T10469] net_ratelimit: 19 callbacks suppressed [ 422.276515][T10469] bond10: (slave bridge0): failed to get link speed/duplex [ 422.447135][ T36] bond10: (slave bridge0): failed to get link speed/duplex [ 422.617161][ T36] bond10: (slave bridge0): failed to get link speed/duplex [ 422.628905][T16759] netlink: 'syz.3.2611': attribute type 32 has an invalid length. [ 422.685461][T16759] netlink: 'syz.3.2611': attribute type 32 has an invalid length. [ 422.701796][T16759] netlink: 'syz.3.2611': attribute type 32 has an invalid length. [ 422.719024][T16759] netlink: 'syz.3.2611': attribute type 32 has an invalid length. [ 422.738047][T16759] netlink: 'syz.3.2611': attribute type 32 has an invalid length. [ 422.756917][ T13] bond10: (slave bridge0): failed to get link speed/duplex [ 422.790069][T16759] netlink: 'syz.3.2611': attribute type 32 has an invalid length. [ 422.906502][T10469] bond10: (slave bridge0): failed to get link speed/duplex [ 423.026958][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:e2:25:27:22:17:5e, vlan:0) [ 423.037984][T10469] bond10: (slave bridge0): failed to get link speed/duplex [ 423.248045][T10469] bond10: (slave bridge0): failed to get link speed/duplex [ 423.299104][T16782] validate_nla: 59 callbacks suppressed [ 423.299124][T16782] netlink: 'syz.3.2614': attribute type 1 has an invalid length. [ 423.386564][ T1154] bond10: (slave bridge0): failed to get link speed/duplex [ 423.435278][T16783] netlink: 'syz.3.2614': attribute type 1 has an invalid length. [ 423.541624][ T13] bond10: (slave bridge0): failed to get link speed/duplex [ 424.370804][T16809] __nla_validate_parse: 10 callbacks suppressed [ 424.370825][T16809] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2620'. [ 424.474542][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2620'. [ 425.077487][T16821] xt_CT: No such helper "snmp_trap" [ 426.499106][T16854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.525773][T16858] netlink: 'syz.0.2630': attribute type 13 has an invalid length. [ 426.666013][T16858] netlink: 'syz.0.2630': attribute type 17 has an invalid length. [ 426.877888][T16857] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.887632][T16857] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.286672][ C0] net_ratelimit: 5512 callbacks suppressed [ 427.286694][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.305219][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.317857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.330565][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.343213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.355906][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.368597][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.381795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.394415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 427.406980][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 428.002777][T16857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.080614][T16857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.837219][ T6928] lo speed is unknown, defaulting to 1000 [ 429.145340][T16858] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.230811][T16858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.284425][T16906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2636'. [ 429.345242][T16906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2636'. [ 429.364799][T16858] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.372076][T16858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.529416][T16858] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.536798][T16858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.719651][T16858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.734915][T16858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.820480][T16858] veth1_vlan: left promiscuous mode [ 429.835837][T16858] veth0_vlan: left promiscuous mode [ 429.861789][T16858] veth0_vlan: entered promiscuous mode [ 429.890241][T16858] veth1_vlan: entered promiscuous mode [ 429.939815][T16858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.974337][T16858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.992040][T16858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.024889][T16858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.146289][T16860] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.208877][T10468] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 430.239381][T10468] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 430.258799][ T6928] lo speed is unknown, defaulting to 1000 [ 430.489810][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2638'. [ 430.539306][T10468] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 430.591419][ T5631] lo speed is unknown, defaulting to 1000 [ 430.597611][T10468] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 430.700774][T16919] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 431.380166][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2642'. [ 431.768562][T16949] bond14: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 431.854037][T16949] bond14 (unregistering): Released all slaves [ 431.861188][T16956] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 432.229776][T16959] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2643'. [ 432.297167][ C0] net_ratelimit: 7897 callbacks suppressed [ 432.297191][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.315429][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.329096][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.341442][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.354482][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.366808][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.377651][T10468] bond10: (slave bridge0): failed to get link speed/duplex [ 432.381540][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.398245][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.411233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 432.629099][T10469] wlan1: Trigger new scan to find an IBSS to join [ 432.706692][T16970] netlink: 'syz.2.2646': attribute type 1 has an invalid length. [ 432.863206][T16978] netlink: 'syz.3.2647': attribute type 4 has an invalid length. [ 432.966917][T16983] netlink: 'syz.3.2647': attribute type 4 has an invalid length. [ 433.178725][T16970] 8021q: adding VLAN 0 to HW filter on device bond10 [ 433.390247][T16977] bond10: (slave veth7): Enslaving as an active interface with a down link [ 433.493273][T16980] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 433.516091][T16980] bond10: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 434.001870][T17000] 8021q: VLANs not supported on ip6_vti0 [ 434.233825][T17006] syzkaller0: entered promiscuous mode [ 434.271818][T17006] syzkaller0: entered allmulticast mode [ 434.698697][T17015] ip6gretap2: entered promiscuous mode [ 435.085954][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2656'. [ 435.806404][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2659'. [ 435.893684][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2658'. [ 436.788578][T17059] syzkaller1: entered promiscuous mode [ 436.854086][T17059] syzkaller1: entered allmulticast mode [ 437.306390][ C0] net_ratelimit: 6849 callbacks suppressed [ 437.306413][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.307673][ T3361] bond10: (slave bridge0): failed to get link speed/duplex [ 437.313522][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.345014][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.357517][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.371960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.385818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.399237][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.411706][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.425193][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 437.676041][ T1154] wlan1: Trigger new scan to find an IBSS to join [ 437.864651][T17072] pim6reg: entered allmulticast mode [ 438.106946][T17070] lo speed is unknown, defaulting to 1000 [ 438.262058][T17070] lo speed is unknown, defaulting to 1000 [ 438.599042][T17088] lo speed is unknown, defaulting to 1000 [ 438.671257][ T3361] wlan1: Creating new IBSS network, BSSID 7e:74:be:c8:8f:a6 [ 439.557555][T17114] netlink: 'syz.1.2675': attribute type 1 has an invalid length. [ 439.639991][T17113] nbd: couldn't find a device at index 1 [ 439.821348][T17114] bond14: option mode: invalid value (8) [ 439.932426][T17114] bond14 (unregistering): Released all slaves [ 440.310005][T17079] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20002 [ 440.774422][T17138] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2681'. [ 440.825422][T17139] tipc: Started in network mode [ 440.845911][T17139] tipc: Node identity 36beeb9d93c4, cluster identity 4711 [ 440.869712][T17139] tipc: Enabled bearer , priority 0 [ 440.949073][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2681'. [ 441.090010][T17137] tipc: Disabling bearer [ 441.283811][T17088] lo speed is unknown, defaulting to 1000 [ 441.290483][T17070] virt_wifi0 speed is unknown, defaulting to 1000 [ 441.300788][T17147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 441.387945][T17142] lo speed is unknown, defaulting to 1000 [ 442.277598][T17142] lo speed is unknown, defaulting to 1000 [ 442.283743][T17088] virt_wifi0 speed is unknown, defaulting to 1000 [ 442.316853][ C0] net_ratelimit: 6326 callbacks suppressed [ 442.316874][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.335070][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.348088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.360466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.373490][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.385850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.398860][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.411208][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.424273][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 442.436666][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 443.565654][T17142] virt_wifi0 speed is unknown, defaulting to 1000 [ 443.712826][T17164] lo speed is unknown, defaulting to 1000 [ 443.824677][T17164] lo speed is unknown, defaulting to 1000 [ 443.985835][T17180] syzkaller0: entered promiscuous mode [ 444.007832][T17180] syzkaller0: entered allmulticast mode [ 444.672014][T17164] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.765942][T17183] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2693'. [ 446.124410][T17192] syzkaller0: entered promiscuous mode [ 446.153102][T17192] syzkaller0: entered allmulticast mode [ 446.292384][T17198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2695'. [ 446.651795][T17222] netlink: 'syz.4.2698': attribute type 21 has an invalid length. [ 447.326534][ C0] net_ratelimit: 7886 callbacks suppressed [ 447.326556][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.344706][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.357056][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.370018][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.382309][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.395107][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.407998][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.420310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.432510][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.445361][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 449.457862][ T4992] udevd[4992]: worker [5652] /devices/virtual/block/nbd0 timeout; kill it [ 449.474527][ T4992] udevd[4992]: seq 12258 '/devices/virtual/block/nbd0' killed [ 450.634420][T17208] syzkaller1: entered promiscuous mode [ 450.640390][T17208] syzkaller1: entered allmulticast mode [ 450.970885][T17220] syzkaller0: entered promiscuous mode [ 450.986347][T17220] syzkaller0: entered allmulticast mode [ 451.561513][ T5631] IPVS: starting estimator thread 0... [ 451.680065][T17242] IPVS: using max 24 ests per chain, 57600 per kthread [ 452.336616][ C0] net_ratelimit: 9318 callbacks suppressed [ 452.336636][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.354859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.367296][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.380153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.392431][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.404926][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.417610][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.429995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.442570][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 452.455152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 455.065403][T17233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2699'. [ 455.134035][T17240] lo speed is unknown, defaulting to 1000 [ 455.151631][T17240] lo speed is unknown, defaulting to 1000 [ 457.346521][ C0] net_ratelimit: 8438 callbacks suppressed [ 457.346542][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.365230][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.378024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.390408][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.402855][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.415636][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.427814][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.440401][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.453077][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.465416][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.552590][T17240] virt_wifi0 speed is unknown, defaulting to 1000 [ 458.664969][T17307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2714'. [ 459.758379][T17327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2721'. [ 460.060605][T17325] bond11: invalid ARP target 0.0.0.0 specified for addition [ 460.083393][T17325] bond11: option arp_ip_target: invalid value (0) [ 460.133051][T17325] bond11 (unregistering): Released all slaves [ 460.613713][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2726'. [ 460.720702][T17350] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2728'. [ 460.945268][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2726'. [ 461.362155][T17353] syzkaller0: entered promiscuous mode [ 461.391720][T17353] syzkaller0: entered allmulticast mode [ 461.407275][T17366] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2732'. [ 461.439715][T17366] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2732'. [ 462.356351][ C0] net_ratelimit: 7649 callbacks suppressed [ 462.356372][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.359737][T10469] bond10: (slave bridge0): failed to get link speed/duplex [ 462.364760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.393754][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.406409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.419299][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.431588][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.444259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.457214][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.469535][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 462.832699][T17383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2738'. [ 463.018820][T17394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2738'. [ 463.321095][T17403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2740'. [ 464.443265][T17390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 464.924592][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2741'. [ 465.429011][ T31] INFO: task kworker/1:1H:1623 blocked for more than 143 seconds. [ 465.461904][ T31] Not tainted syzkaller #0 [ 465.492629][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.524971][ T31] task:kworker/1:1H state:D stack:25656 pid:1623 tgid:1623 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 465.548697][ T31] Workqueue: kblockd blk_mq_requeue_work [ 465.560266][ T31] Call Trace: [ 465.565731][ T31] [ 465.572104][ T31] __schedule+0x17d9/0x56c0 [ 465.578572][ T31] ? __lock_acquire+0x683/0x2cf0 [ 465.583958][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.592498][ T31] ? __pfx___schedule+0x10/0x10 [ 465.599059][ T31] ? schedule+0x90/0x2b0 [ 465.603656][ T31] schedule+0x164/0x2b0 [ 465.608370][ T31] schedule_timeout+0x152/0x2c0 [ 465.613650][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 465.627628][ T31] ? __pfx_process_timeout+0x10/0x10 [ 465.648662][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 465.692868][ T31] ? prepare_to_wait_event+0x436/0x480 [ 465.731943][ T31] nbd_queue_rq+0x889/0x1150 [ 465.760450][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 465.795578][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 465.836137][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 465.886623][ T31] ? sbitmap_get+0x229/0x390 [ 465.930764][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 465.964383][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 466.000163][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 466.038408][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 466.074477][ T31] ? blk_mq_hw_queue_need_run+0x134/0x630 [ 466.108185][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 466.139842][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 466.168137][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 466.197020][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 466.212166][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 466.223724][ T31] blk_mq_run_hw_queues+0x268/0x3f0 [ 466.238433][ T31] blk_mq_requeue_work+0x703/0x760 [ 466.254063][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 466.272398][ T31] ? rcu_is_watching+0x15/0xb0 [ 466.283652][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 466.298100][ T31] process_scheduled_works+0xa8e/0x14e0 [ 466.310566][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.323888][ T31] ? assign_work+0x3cf/0x5d0 [ 466.330734][ T31] worker_thread+0xa47/0xfb0 [ 466.336715][ T31] ? __kthread_parkme+0x71/0x1f0 [ 466.341963][ T31] kthread+0x388/0x470 [ 466.346158][ T31] ? __pfx_worker_thread+0x10/0x10 [ 466.353150][ T31] ? __pfx_kthread+0x10/0x10 [ 466.359213][ T31] ret_from_fork+0x514/0xb70 [ 466.364088][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 466.370978][ T31] ? __switch_to+0xc89/0x1420 [ 466.376069][ T31] ? __pfx_kthread+0x10/0x10 [ 466.381259][ T31] ret_from_fork_asm+0x1a/0x30 [ 466.386993][ T31] [ 466.403316][ T31] [ 466.403316][ T31] Showing all locks held in the system: [ 466.420859][ T31] 1 lock held by khungtaskd/31: [ 466.430994][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 466.491387][ T31] 4 locks held by kworker/1:1H/1623: [ 466.506638][ T31] #0: ffff88801fef4940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 466.533783][ T31] #1: ffffc9000648fc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 466.563544][ T31] #2: ffff88802763aa18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 466.581216][ T31] #3: ffff8880279576b8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 466.591632][ T31] 3 locks held by kworker/u8:14/3409: [ 466.599844][ T31] 2 locks held by getty/5380: [ 466.604754][ T31] #0: ffff8880320c80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 466.615479][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 466.626195][ T31] 1 lock held by udevd/5652: [ 466.632374][ T31] #0: ffff8880278d8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 466.649585][ T31] 1 lock held by syz.1.2741/17408: [ 466.654847][ T31] #0: ffffffff8eb5fe38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 466.665535][ T31] 2 locks held by syz.0.2746/17438: [ 466.671336][ T31] #0: ffffffff9002d500 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 466.681080][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 466.693162][ T31] [ 466.695617][ T31] ============================================= [ 466.695617][ T31] [ 466.707641][ T31] NMI backtrace for cpu 1 [ 466.707658][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 466.707682][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 466.707695][ T31] Call Trace: [ 466.707703][ T31] [ 466.707711][ T31] dump_stack_lvl+0xe8/0x150 [ 466.707749][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 466.707771][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 466.707806][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 466.707831][ T31] sys_info+0x135/0x170 [ 466.707861][ T31] watchdog+0xfd7/0x1030 [ 466.707896][ T31] ? watchdog+0x1c7/0x1030 [ 466.707931][ T31] kthread+0x388/0x470 [ 466.707963][ T31] ? __pfx_watchdog+0x10/0x10 [ 466.707988][ T31] ? __pfx_kthread+0x10/0x10 [ 466.708021][ T31] ret_from_fork+0x514/0xb70 [ 466.708056][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 466.708088][ T31] ? __switch_to+0xc89/0x1420 [ 466.708119][ T31] ? __pfx_kthread+0x10/0x10 [ 466.708152][ T31] ret_from_fork_asm+0x1a/0x30 [ 466.708194][ T31] [ 466.708236][ T31] Sending NMI from CPU 1 to CPUs 0: [ 466.820307][ C0] NMI backtrace for cpu 0 [ 466.820325][ C0] CPU: 0 UID: 0 PID: 5613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 466.820346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 466.820358][ C0] RIP: 0010:__asan_memset+0x18/0x50 [ 466.820386][ C0] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 01 00 00 00 e8 1e e5 ff ff 84 c0 74 11 4c 89 f7 89 ee 48 89 da [ 466.820402][ C0] RSP: 0018:ffffc90000007780 EFLAGS: 00000246 [ 466.820419][ C0] RAX: 1ffff92000000f2c RBX: 0000000000000010 RCX: ffffffff8aadc12d [ 466.820433][ C0] RDX: 0000000000000010 RSI: 0000000000000010 RDI: ffffc90000007810 [ 466.820444][ C0] RBP: 0000000000000000 R08: ffffc9000000795f R09: 0000000000000000 [ 466.820456][ C0] R10: ffffc90000007950 R11: ffffffff8aadbf50 R12: 1ffff92000000efc [ 466.820471][ C0] R13: ffff888076df0000 R14: ffffc90000007810 R15: ffff88803d99b150 [ 466.820484][ C0] FS: 00005555620e6540(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 466.820500][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.820513][ C0] CR2: 00007f6173e17e9c CR3: 000000007be28000 CR4: 00000000003526f0 [ 466.820530][ C0] Call Trace: [ 466.820537][ C0] [ 466.820545][ C0] ebt_broute+0x1dd/0x7c0 [ 466.820572][ C0] ? process_backlog+0x774/0x1860 [ 466.820590][ C0] ? handle_softirqs+0x225/0x840 [ 466.820612][ C0] ? __local_bh_enable_ip+0xf8/0x130 [ 466.820633][ C0] ? tcp_recvmsg+0x1df/0x7f0 [ 466.820654][ C0] ? sock_recvmsg+0x166/0x1e0 [ 466.820679][ C0] ? __pfx_ebt_broute+0x10/0x10 [ 466.820710][ C0] ? do_syscall_64+0x174/0x580 [ 466.820741][ C0] ? __pfx_ebt_broute+0x10/0x10 [ 466.820766][ C0] br_handle_frame+0x127f/0x1510 [ 466.820792][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 466.820813][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 466.820833][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 466.820857][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.820882][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 466.820901][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 466.820935][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 466.820956][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 466.820982][ C0] ? ip6_rcv_finish+0x265/0x280 [ 466.821001][ C0] ? NF_HOOK+0x336/0x3c0 [ 466.821024][ C0] ? process_backlog+0x3c3/0x1860 [ 466.821044][ C0] ? process_backlog+0x3c3/0x1860 [ 466.821059][ C0] ? process_backlog+0x3c3/0x1860 [ 466.821078][ C0] process_backlog+0x706/0x1860 [ 466.821097][ C0] ? process_backlog+0x3c3/0x1860 [ 466.821121][ C0] __napi_poll+0xaa/0x330 [ 466.821148][ C0] net_rx_action+0x61d/0xf50 [ 466.821172][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 466.821204][ C0] handle_softirqs+0x225/0x840 [ 466.821228][ C0] ? do_softirq+0x76/0xd0 [ 466.821252][ C0] ? tcp_recvmsg+0x1df/0x7f0 [ 466.821274][ C0] do_softirq+0x76/0xd0 [ 466.821294][ C0] [ 466.821300][ C0] [ 466.821307][ C0] __local_bh_enable_ip+0xf8/0x130 [ 466.821329][ C0] tcp_recvmsg+0x1df/0x7f0 [ 466.821355][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 466.821379][ C0] ? __pfx_tcp_recvmsg+0x10/0x10 [ 466.821403][ C0] ? sock_rps_record_flow+0x19/0x350 [ 466.821422][ C0] ? inet_recvmsg+0xb3/0x120 [ 466.821439][ C0] ? __pfx_inet_recvmsg+0x10/0x10 [ 466.821457][ C0] sock_recvmsg+0x166/0x1e0 [ 466.821485][ C0] sock_read_iter+0x22a/0x2f0 [ 466.821511][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 466.821539][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 466.821561][ C0] ? security_file_permission+0x75/0x260 [ 466.821593][ C0] vfs_read+0x595/0xa80 [ 466.821610][ C0] ? __hrtimer_setup+0x1b7/0x260 [ 466.821634][ C0] ? __pfx_vfs_read+0x10/0x10 [ 466.821663][ C0] ksys_read+0x150/0x270 [ 466.821681][ C0] ? __pfx_ksys_read+0x10/0x10 [ 466.821707][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.821728][ C0] do_syscall_64+0x174/0x580 [ 466.821750][ C0] ? clear_bhb_loop+0x40/0x90 [ 466.821771][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.821789][ C0] RIP: 0033:0x7ff57e359017 [ 466.821806][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 466.821821][ C0] RSP: 002b:00007ffcb76f1360 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 466.821839][ C0] RAX: ffffffffffffffda RBX: 00005555620e6540 RCX: 00007ff57e359017 [ 466.821853][ C0] RDX: 0000000000000004 RSI: 00007ffcb76f13bc RDI: 0000000000000003 [ 466.821864][ C0] RBP: 00007ffcb76f1860 R08: 0000000000000000 R09: 0000000000000000 [ 466.821876][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 466.821887][ C0] R13: 00007ffcb76f13bc R14: 00007ffcb76f1450 R15: 0000000000000000 [ 466.821909][ C0] [ 467.318523][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 467.325421][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 467.334560][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 467.344649][ T31] Call Trace: [ 467.347964][ T31] [ 467.350932][ T31] vpanic+0x56c/0xa60 [ 467.354962][ T31] ? __pfx___schedule+0x10/0x10 [ 467.359850][ T31] ? __pfx_vpanic+0x10/0x10 [ 467.364389][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 467.370579][ T31] panic+0xc5/0xd0 [ 467.374344][ T31] ? __pfx_panic+0x10/0x10 [ 467.378803][ T31] ? preempt_schedule_common+0x82/0xd0 [ 467.384299][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 467.389719][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 467.395908][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 467.402099][ T31] watchdog+0x1030/0x1030 [ 467.406505][ T31] ? watchdog+0x1c7/0x1030 [ 467.410966][ T31] kthread+0x388/0x470 [ 467.415071][ T31] ? __pfx_watchdog+0x10/0x10 [ 467.419791][ T31] ? __pfx_kthread+0x10/0x10 [ 467.424421][ T31] ret_from_fork+0x514/0xb70 [ 467.429050][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 467.434196][ T31] ? __switch_to+0xc89/0x1420 [ 467.438910][ T31] ? __pfx_kthread+0x10/0x10 [ 467.443550][ T31] ret_from_fork_asm+0x1a/0x30 [ 467.448372][ T31] [ 467.452033][ T31] Kernel Offset: disabled [ 467.456374][ T31] Rebooting in 86400 seconds..