last executing test programs: 5.692749799s ago: executing program 2 (id=2270): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000280)=0x1, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfffffffd}}]}}, 0x0, 0x4e}, 0x28) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x5, './file0\x00'}, 0x47) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba3704002cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa0100ff}, 0xffffffffffffff94) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x5, 0x0, &(0x7f0000001480)) connect$inet(r0, &(0x7f0000000100), 0x10) 4.712889409s ago: executing program 2 (id=2286): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='xfrm0\x00', 0x10) 4.320873005s ago: executing program 2 (id=2292): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000008c0000008c0000000c0000000400000001000084010000000a00000003000000000000000b0000000a000006040000000400000002000000040000000600000010000000020000000b000000c6000000070000000c0000000f000000c165000005000000050000000000000009435fd3240000000700000010000000450600000000000000000003000000000200000002000000000000000061002e2e61616161006100"], 0x0, 0xb0}, 0x28) r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x80000) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="afcbdca0b6a3dd256092c5e553311e872db9831bc2149bed00899a68cb0f0a3c32a7183a96f00ccbbbaac5ffd1f04aff79add30eaa91a3b69461c08705a9fd7833faa52311858606971be454e4687c2240fd61ebacaa93a02ad3b1813031e7369f846c47590139556e5bb76e8a8b572ff8ae2492cc398634fbd99a6a22eab4667b141c04154046d66427de73a1bfd4a8f72ddc910b4289f8535100ddf2", 0x9d}, {&(0x7f0000000240)="382ad1e25a51adb68ddffeac3aed807983c74427c111b570e970714b1e6fa4b0e02494a46785e7c4bbd6873d1dbe67723b46ec9c1f939949a331ca2d50e4ce025747eeabcb4bd4", 0x47}, {&(0x7f00000002c0)="f770f57ae572fa70cc2c90ab0b5cf75cc64b5ba6fa7fe68ab27c75c3b586ad826dc10f4294061932da5ba4f04ea5333cd04fb2f08f77e11bb0f9bb45f85bf9ec47fb4a2421f649823c7214c0dbab3534656ba44af057ee5487dd8c4d3b2d08ebf41be4660591ed24580ea19c3cf84dc95c547f33973c3e41aeffd2048e3475f49307e29f", 0x84}, {&(0x7f0000000380)="0e1a0420c9191ffc80d271ba8fc8f4c55bdca8cf9c5c7ddba5af04041de2876415828d9ccca9a2a27445337c2ab434e7142a4ef76a7653326d5859f483dd9d8ced77b7952a3c5fef0cdffd6cc810f7c8ee41e8e55837807cc2cf00c7b0", 0x5d}], 0x4, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}], 0x20}, 0x20000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3b, &(0x7f00000004c0)=0xfffffffd, 0x4) 4.17648826s ago: executing program 2 (id=2293): socket$netlink(0x10, 0x3, 0x12) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, 0x60) syz_init_net_socket$llc(0x1a, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') unshare(0x6a040000) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x4, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x0, @local}, 0x2a) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket(0x20, 0x80000, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x4000006}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000200)=0x6e7c) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x100) sendto$inet6(r4, &(0x7f0000000000)="c6d3ffb6018f3252", 0x8, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000280), 0x12) sendfile(r5, r7, 0x0, 0xffffffff000) recvmmsg(r5, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x40001023, 0x0) 4.151209552s ago: executing program 4 (id=2294): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="b0cdf873329f29855644eb882761d89d083286ec27979002b549834ec138", 0x1e}], 0x1, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet(0x2, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRES8=r4, @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 3.520691136s ago: executing program 4 (id=2299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x5, 0x300, 0x200}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000640)={0x0, 0x3, 0xa336e8b42c1af275, [0x126, 0x8000000000000001, 0xf8a, 0xffffffffffff8001, 0x77], [0x6, 0xf, 0xc, 0x3, 0x40, 0x0, 0x7f, 0xffffffffffffffff, 0x80, 0x8, 0x5, 0x1, 0xc000000000000, 0x41, 0xc, 0x7017, 0xff8, 0x8, 0x1b9, 0x6, 0x4, 0x7, 0x3, 0x2, 0x1, 0x7, 0x2000000000000000, 0x6, 0x8, 0x3ff, 0x54a, 0x1, 0x80000001, 0xfff, 0x5, 0x1, 0x8000, 0x2, 0x7, 0x8, 0x0, 0xfffffffffffffc01, 0x0, 0x100000000, 0x7fffffff, 0xadfc, 0xffffffffffffffff, 0xffff, 0x1282418c, 0x6, 0x1, 0x1, 0x60000000000000, 0x1d7a, 0x1, 0x3, 0x2, 0x3ff, 0x5, 0x8, 0x9, 0x0, 0xfffffffffffffffc, 0xc8e4, 0xfffffffffffffff9, 0x0, 0x3, 0x1, 0x4, 0x7fffffffffffffff, 0x101, 0x9, 0x0, 0x6, 0x4, 0x8, 0x9, 0x4, 0x5ce, 0x1, 0x4, 0x80, 0xb27, 0x7, 0xe943, 0x0, 0x8, 0x9, 0x3, 0x0, 0x1, 0x8000000000000001, 0xbd8, 0x0, 0xf70, 0x5, 0x1f3, 0x1, 0x6056, 0x9, 0x3ff, 0xffffffffffffffff, 0x7, 0x3, 0x8, 0x1, 0xd097, 0x1, 0x7, 0x2, 0xbb2, 0x9, 0x100000000, 0x5, 0x26, 0x6, 0xda00000000000000, 0xffffffffffffffb6, 0xffffffffffff0000, 0x8ba1, 0x2]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000a80)={r7, 0x7, 0x9}) close(r0) 3.214253004s ago: executing program 4 (id=2303): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x11, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.080669662s ago: executing program 0 (id=2306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xffffffff}]}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0xfffffffffffffec0, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000044) 2.888707379s ago: executing program 0 (id=2308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)={0x18, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x2004c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="0bdfc85f218fe033a889bf247bdbc14d20f0388c2d7f561dd9a5b111e7582d2d765d0848fcc019a34341346ffa187d9350560fbf4d8d538959e92b3cb169c3b5b6842d622813c5e1f8c85f9aa3d5f822c506c3fe58dee59eb0b8dd10da4dcb26c62a97bc699f9fa6f9125572d2f3f3b04ff915829b6a808139d267c358bb9e827ea6a2a8ab8f82ecd3f3512e90699b1b7ec12f74c3496c3f9118419c05ac523e5eefb4cf87b10ec16b7b4940601bef22a0fc00cce0f0afd8f1e17504060f21f776b2757f96096491557ce4fc5189e73e1230f157c3159174d86fe5e206645db777c9222fe4a101dfb15ad06da2a2d0c8"], 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000003c40)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff00000000030000001100000000000000000000020000c9"], 0x0, 0x4a}, 0x28) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000049d161afe78057d9e39f7b6689cc60642fa04abab191f13d812571239e71c73932aba7b77c80037d94f4d98ad1008b99f111360102eee3c7e438e91db471fb753f4f62f90237da1f3c26641349e09b2280ebd8c48c558cdfde7833461d507997194721dec028843e2f7c5655d1e43462266fc92b1df6ab6a14ccd8e64f", @ANYRES16=r2, @ANYBLOB="020325bd7000fcdbdf2501000000050005008a00000005000500050000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r6, 0x11, 0x67, 0x0, &(0x7f0000000680)) sendmsg$nl_generic(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x1c, 0x23, 0x100, 0x70bd25, 0x25dfdbfe, {0x1f}, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x6e}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x881}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r8, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x804) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x23, 0x0, &(0x7f00000001c0)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@fragment={0x0, 0x0, 0x3, 0x0, 0x0, 0x1}], {0x0, 0x0, 0x8}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 2.795422194s ago: executing program 4 (id=2309): socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000440)={r3, 0x55, "31965b97fc35298672b2d3466c9676f7bd1c90269883a52499406160799b566a939dd2bcd5248008e0bb6477614d15dd3be35a03e5f946f3ed8364d54ce061c37cec0b81256db279b9379a7e5c378ab2dd95b38601"}, &(0x7f00000004c0)=0x5d) (async) unshare(0x6a040000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x32}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)="e6cb52f62e79a6185dd87ae1d48354e21677b22be6e8da7c3600f26bf9e537b2e092b9dd03a201500ad4c6ab74fc4ee6f4423c0b1b", 0x35}, {&(0x7f0000000300)="7c749dbe974212dc7e17ef643c3ed7cad54b84717a82b895eaec6c8dee22f721c2801c4fe9795d87da620aa4b6403fea", 0x30}, {&(0x7f00000007c0)="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", 0xffffff13}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="bab7055697746a599282474f57217bbb6001c9b8d3f3d61f31c302", 0x1b}, {&(0x7f0000000a80)="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", 0x866}, {&(0x7f00000000c0)="754f037e617e996c6f3e81cd1ccc04f17c682bee61349ad9cf1e98693398159137c306ad5d95bcbce84eee1f0c0ab347f4dd727df6841ecf91cfe3cd94886f2acae617149bedc511d18219651c128fae6285735d7487aa8ac6be3d773a82ab3f9a57f17efd727687afb5fc0711738090c0724c7d71d22285bfae89548b1f03a0020cbddbb6bc340bde7cae845d149a3885b12a4fffcc4e037500075a4250bc3b8f313795d97928e18bb31ad871e6704a12a4092df47faa6060ffa70c7352c4eb4ca8ffead7335865050430995bf27fd073cf850df3b0b7aabba9e3e388e7dff69ed499e4a2bb675a28143b"}], 0x2}}], 0x2, 0x40488d5) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x14de9b47c6d31db4) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000600)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async) bind$inet6(r9, 0x0, 0x0) (async) sendto$inet6(r9, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.497199737s ago: executing program 0 (id=2313): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket(0x21, 0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x1}}, 0x18) sendmsg$inet(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x500}, {&(0x7f0000000780)="8af83b42e304bd", 0x7}], 0x2}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000010401010000000000000000000000010a0002070000000403000000050001000140000008008b4000000008"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r6, 0x4010744d, &(0x7f0000000080)=0xc) syz_emit_ethernet(0x2e, &(0x7f0000000800)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, r10, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) readv(r8, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) close(r9) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010004000000400000000b0000000c0005800700110069620000"], 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0) unshare(0x6a040000) socket(0x8, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) 2.355561934s ago: executing program 3 (id=2316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008850) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000100000073797a32000000000900030073797a3200000000"], 0x2c}}, 0xc800) r4 = socket(0x1d, 0x3, 0x1) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=@report={0x2f4, 0x20, 0x501, 0x70bd2b, 0x25dfdbfd, {0x32, {@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4e21, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x3c, 0x0, r5}}, [@algo_aead={0x68, 0x12, {{'morus1280-generic\x00'}, 0xe0, 0x200, "9870b8188c2b173c51616e71f81f9073e660ec349dfcd31d2ca918c5"}}, @extra_flags={0x8, 0x18, 0x8}, @tmpl={0x144, 0x5, [{{@in=@private=0xa010102, 0x4d6, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x3, 0x1, 0x58, 0x7, 0x3, 0x6c}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x2, @in=@multicast2, 0x3507, 0x0, 0x3, 0x5e, 0x9, 0x1, 0xff}, {{@in6=@local, 0x4d3, 0x32}, 0xa, @in6=@loopback, 0x3506, 0x2, 0x2, 0x7, 0x8, 0x379, 0x5}, {{@in6=@mcast2, 0x4d6, 0x32}, 0x2, @in6=@mcast1, 0x3501, 0x6, 0x0, 0x1, 0x4, 0x625, 0x40}, {{@in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4d2, 0xff}, 0x2, @in=@rand_addr=0x64010101, 0x3507, 0x3, 0x2, 0x3, 0x6, 0x81, 0x72}]}, @algo_auth_trunc={0x60, 0x14, {{'streebog512\x00'}, 0xa0, 0x100, "6c578cbd477831241291d2d96cdaf5e677e6ebdb"}}, @sec_ctx={0x52, 0x8, {0x4e, 0x8, 0x1, 0x2, 0x46, "0179d07ee3bcdecdf81eb2c094c5a1f2a611bda26cfc1ee1c425d0ec9fe96b933d643b331953dcde3fd8c352f7fbeea66fed0f2ce7f5b7c3c44b2ec933f6dce7ce34b7c27029"}}, @srcaddr={0x14, 0xd, @in6=@empty}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x40}, @lifetime_val={0x24, 0x9, {0xe, 0x9, 0x435, 0xcd4}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x41}, 0xc802) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000027bd7000fbdbdf25040000001400220076657468315f746f5f7465616d000000"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40040) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) 2.228700725s ago: executing program 1 (id=2317): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x0, 0x130, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0xff, 'ip6gre0\x00', 'pimreg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'ip6erspan0\x00', 'wlan1\x00', {}, {0xff}, 0x16}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x16]}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0xfb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x75, r1, 0x700}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 2.178478314s ago: executing program 3 (id=2318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$int_out(r6, 0x5460, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0xfff, 0x7, 0x4, r5, 0x1, '\x00', 0x0, r6, 0x5, 0x1, 0x3, 0x7}, 0x50) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0xf000, 0x7}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_HASH={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x1, 0x1}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) ioctl$int_out(r6, 0x5460, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0xfff, 0x7, 0x4, r5, 0x1, '\x00', 0x0, r6, 0x5, 0x1, 0x3, 0x7}, 0x50) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0xf000, 0x7}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_HASH={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) 2.168196517s ago: executing program 1 (id=2319): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x22020600) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4084, 0xfe8, 0x0, 0x0}, &(0x7f0000000000)=0x96) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7800, 0x7800, 0x7, 0x7, {{0x3a, 0x4, 0x1, 0x24, 0xe8, 0x68, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@rr={0x7, 0x2b, 0x14, [@multicast1, @broadcast, @multicast2, @multicast2, @multicast2, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2]}, @lsrr={0x83, 0xb, 0x4a, [@multicast2, @empty]}, @lsrr={0x83, 0x13, 0x46, [@local, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x54, 0x1e, 0x3, 0x3, [{@broadcast, 0xff}, {@broadcast, 0x3}, {@broadcast, 0x2}, {@private=0xa010101, 0xffffffff}, {@multicast2, 0x800}, {@multicast2, 0x401}, {@rand_addr=0x64010100, 0x7f}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x101}, {@rand_addr=0x64010101, 0xc613}]}, @ssrr={0x89, 0xb, 0x8a, [@multicast1, @broadcast]}, @rr={0x7, 0x7, 0x30, [@private=0xa010101]}, @ssrr={0x89, 0x17, 0xf9, [@multicast2, @multicast1, @empty, @local, @remote]}, @rr={0x7, 0xb, 0x29, [@local, @multicast2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x2f, 0xc0, 0x4, 0x7, 0x6e, @private2, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x40, 0xdaa, 0x4}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000036000701fcfffffffddbdf65047c0000b369d0f5bd51f0059bd2ef093579049043aa145ef94689be7dd5c83f4a1a271b26b84a6feb0966"], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050) 2.018624784s ago: executing program 1 (id=2320): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0xb, 0x5, 0x3) getsockopt(r1, 0x200000000114, 0x2717, 0x0, &(0x7f0000000080)=0xf0ff7f) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'macvlan0\x00'}) r7 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x1b, 0x0, &(0x7f0000000040)) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) socket$caif_seqpacket(0x25, 0x5, 0x3) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @private2, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x80032, r10}) 1.920564197s ago: executing program 3 (id=2321): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="e30c1a5f6fa386fe258a15bb0000009921e27b00a40000fe444a351643ab46de6194efe788ef1ce1cdf6528f2c38cd30fc1d29b728caaf651c6db3b8f44167fe809b0126908ad9ccadea45da54ee60cc9414b87e8ed4b73aadf0467fca7ad7b83be2fcf72fa71ae156d8dd5943ebf05d6ff6553f6aaead3c1ce90f9f5f6b1cdfe85d9326169a5aae4679d6ee26ce595bc7f6507d456a90b78f18f65899578451d5840fb65ca10649040558bfc5f57ebdcc4047c1537156290e9d2f4d100d0f954a6fb8907a89c9939197cde60000000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000300), &(0x7f0000000580)=@buf="431bdae4503b5b508ab4c90c5d0ec8482af94c5ef395ee045a4e9366922ffc42a9bae434191cfe92994b87d68253d96ab072de6da2c7c4c4a0e63f7d15bd10d3d98ff7462efb8790aa07b3bce2309b3d101c1ab59a5488c557463b9f57fd024fb4e601b020de27e3428d3fa89468d59487670662d390f6cf57c1e85a5d63ad8698b798bbc6efd339ce14c1caa2ffdafa6bb2265a0a4e521ba22a451daa3fe11287745125cf3368", 0x2}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket(0x10, 0x3, 0x7315) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) recvmsg$kcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/147, 0x93}], 0x2}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x405c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x12, 0x0, 0x41100, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(r4, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="b0", 0x1}], 0x1}}], 0x2, 0x4000840) shutdown(r4, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000680)={0x0, 0x20, "37505db6cb20edefc49b64b358e5718b8f8a9f16042cea01862981057ee3675c34d9ad434a2ff903fae6d9a447e01f8a2c4775320bab48d287f9c3ab960619315dcac21ceaae9a178c32ea82ab1a3024d5e7cfbaacba5db820d9f2229f0434ac1c3874d16436f630e301fc6846c7200adfe808e19ca6d1713997d777bedd995a8ec225e4828ef6f1b530ec472132a561c7da4e70c0ead7a67b9a602fb4793480"}, &(0x7f0000000000)=0xa8) 1.496703845s ago: executing program 1 (id=2322): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000001080)) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000}}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff0}}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4f}, 0x94) 1.16234512s ago: executing program 3 (id=2323): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async, rerun: 32) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async, rerun: 32) connect$netlink(r4, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$can_bcm(r4, 0x0, 0x4804) pipe(&(0x7f0000000100)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000070000000000000000010c00028005000100000000000800074000000000440010800800024000000fff0800024000000007080001"], 0xe0}}, 0x0) syz_genetlink_get_family_id$smc(0x0, r4) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async, rerun: 32) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78) (async) write(r4, &(0x7f0000000000)='\"', 0x1) recvmmsg(r4, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001840)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x2, 0x30}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}]}, 0x50}}, 0x0) (async) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 792.596535ms ago: executing program 3 (id=2324): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2c060000) unshare(0x2c060000) unshare(0x2c020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r3, 0x952de000) unshare(0x2c020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r4, 0x952de000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x40818, 0x10043}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4004020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xb0}}, 0x0) r7 = socket(0x11, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt(r8, 0x6, 0x2, 0x0, &(0x7f0000000100)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000080)={0xa0179e08}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="2e0000003a000511d25a80698c63940d0124fc602f6e35400c782c6fc41ec00037153e37a366000025581d00d160", 0x18}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 779.55269ms ago: executing program 0 (id=2325): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000400000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1500}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x4, 0x4, 0x420, 0xffffffff, 0xe8, 0x260, 0x0, 0xfeffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@ah={{0x30}, {[0x4d3, 0x4d2], 0x1, 0xd7, 0x2}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 575.249977ms ago: executing program 0 (id=2326): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket(0x2a, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a000000020000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x4000004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000051f0001c001a8008000e801a000500080000003e120000080006"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f00000010c0)={0x690, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x22b0}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PEERS={0x654, 0x8, 0x0, 0x1, [{0x650, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x540, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x7}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}]}]}, 0x690}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002c070000000000000000000008000100030000000800010002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20028000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r12 = socket$inet(0x2, 0x2, 0x1) connect$inet(r12, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000002c0)=0x4, 0x4) sendmmsg$inet(r12, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000080)=0xa, 0x4) 492.945116ms ago: executing program 4 (id=2327): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async, rerun: 32) r1 = accept4(r0, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000b980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x40804) (async, rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) (rerun: 32) 404.57421ms ago: executing program 2 (id=2328): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000f47a8af8ff00000000bfa200020000000007020000e0ffffb60400000000925e850000000100000095000000000000000000c785a74c103e3a86d1ecacb2d721a5565fcd940058baff24aff2cb4935d1d57ca4d3a1187585c66a8d36", @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcb, 0xcb, 0x9, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0xe, 0x2}]}, @enum={0xf, 0x8, 0x0, 0x6, 0x4, [{0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x557d}, {0x4, 0xc}, {0x0, 0x7fff}, {0x2, 0x5}, {0x3, 0x2}]}, @datasec={0x5, 0x7, 0x0, 0xf, 0x3, [{0x5, 0x0, 0xfffffffc}, {0x4, 0x5, 0x5}, {0x5, 0x400, 0xa}, {0x4, 0xfffffffe, 0xc}, {0x3, 0x8, 0x9}, {0x3, 0x5, 0xfffffffc}, {0x4, 0x1, 0x1f3}], '?ES'}]}, {0x0, [0x61, 0x30, 0x0, 0x30, 0x0, 0x2e, 0x61]}}, &(0x7f0000000500)=""/53, 0xed, 0x35, 0x1, 0x10, 0x10000}, 0x28) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x40086602, &(0x7f0000015740)) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x13, r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$nci(r11, &(0x7f0000000000)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x9, {0x1, 0x6b, "628386f8e7042b388b8271827c243baa9664e57fc4ec559f2527724b2042aa0a7b4922ce5144c30dcf22a320e32a10afde35297f3089c91d68fa5fc11357597b99d59bc3cae9cc326a367990403d199dc2154c70b5c42a0a0eda0a419b67428dc8692306931b306cb01288"}}, 0x70) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x8, 0x8001, 0xffffd127, 0xffffcbcb, 0x2000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x13, 0xf0, 0x2, 0x401, 0x4, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x26, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5edf}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x56}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbebf}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xca, &(0x7f00000002c0)=""/202, 0x41100, 0x2, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x6, 0x8, 0xe6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000700)=[0x1, r9, r10, r11, r12, r13], &(0x7f0000000740)=[{0x1, 0x2, 0x2, 0x6}, {0x4, 0x4, 0x2, 0x5}, {0x3, 0x4, 0x7, 0x3}, {0x2, 0x5, 0x10, 0x3}], 0x10, 0x7}, 0x94) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1c, 0x8, 0x6, 0x6, 0x7, 0x80, 0xe, 0x5b, 0x2, 0x2, 0x3ff, 0x1, 0xd8, 0x4f, 0x5, 0xadf0, [0x2, 0x200]}}) 281.417622ms ago: executing program 1 (id=2329): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) unshare(0x20000400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000c, 0x12, r1, 0x2000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000001c0)=0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(ghash-ce-sync,cryptd(lrw-camellia-aesni-avx2))\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="21040000000004000000010000000800"], 0x38}}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) bind$alg(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20044054}, 0x0) listen(r5, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) 228.858017ms ago: executing program 3 (id=2330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004415}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt(r7, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x8}}}}]}, 0x44}}, 0x4000) socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9, 0x0, 0x4}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f0000009000), 0x4) unshare(0x62040200) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r11, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) setsockopt$sock_int(r11, 0x1, 0x8, 0x0, 0x0) sendto$inet(r11, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) 190.586787ms ago: executing program 0 (id=2331): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="2000000025000000300012800e0001006970366772657461700000001c00028008000e00085e00000800040010"], 0x50}}, 0x0) shutdown(r0, 0x1) 67.577205ms ago: executing program 2 (id=2332): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) r1 = socket$phonet(0x23, 0x2, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000010000001100000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x8880) 65.932898ms ago: executing program 4 (id=2333): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80000000001010400000000141a00000200000044000f80080002400000000408000140000000056400024000000006080003400000000e0800014000000000080003400000002651000140000000000340000000040800074000000300000001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000100010c0002800500010000000000"], 0xa8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000003, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x25c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}, @TCA_POLICE_PEAKRATE={0x391, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8dc, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7a1, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf3, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffffffd, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x2e, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x7, 0x1ff, 0x9, 0x6fa, 0x61, 0x5, 0x8}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xf}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f00000000c0)=0x9, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r9) recvmmsg(r9, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000001c40)=""/4083, 0xff3}, {&(0x7f0000000840)=""/196, 0xc4}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/176, 0xb0}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000002d40)=""/4115, 0x1013}, {&(0x7f0000000640)=""/50, 0x32}, {&(0x7f00000006c0)=""/238, 0xee}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x10002, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=2334): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x0) (async) r2 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg2\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)={@val={0x1c, 0xf5}, @val={0x2}, @mpls={[], @llc={@snap={0xaa, 0xab, 'B-', "2d6f1e", 0x11, "f20abca3af5e61379159a3862ab0e33932826f346d101c06cb9144afaf9a10a5de7a47eb42805e55f5e4328bcb4e3af8da14d2fc3e35758293cb12e46c7c9ebbac5a3854d950eca5f11a6e66bd98dd5849d0e15394bc2119d42271a6b4534c22b8efc7563c24871af8dde51216ed46702b855995924caa87be"}}}}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1b, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x800, 0xbf81, 0xf}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x800, 0xbf81, 0xf}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$netlink(0x10, 0x3, 0x10) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x80, 0x0, 0x7, 0x0, 0xc2, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x80, 0x0, 0x7, 0x0, 0xc2, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r9, 0x1, 0x15}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r9, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4000800) (async) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r9, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000000010dc"}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): [ 162.330467][ T8440] lo speed is unknown, defaulting to 1000 [ 162.419761][ T8478] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.448825][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 162.543779][ T8487] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 163.351138][ T8490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.647'. [ 163.509365][ T8495] tipc: Failed to remove unknown binding: 66,1,1/0:1404083245/1404083247 [ 163.521927][ T8495] tipc: Failed to remove unknown binding: 66,1,1/0:1404083245/1404083247 [ 163.559263][ T8493] tipc: Enabled bearer , priority 0 [ 163.650272][ T8493] syzkaller0: entered promiscuous mode [ 163.660702][ T8493] syzkaller0: entered allmulticast mode [ 163.714774][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 163.725649][ T8493] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 163.773612][ T8493] tipc: Resetting bearer [ 163.829064][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 163.847864][ T8499] ip6gretap0: entered promiscuous mode [ 163.861856][ T8499] ip6gretap0: left promiscuous mode [ 163.944088][ T8492] tipc: Resetting bearer [ 163.962833][ T8492] tipc: Disabling bearer [ 164.152209][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 164.206639][ T8520] validate_nla: 2 callbacks suppressed [ 164.206658][ T8520] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 164.235981][ T8520] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 164.507099][ T8539] netlink: 128 bytes leftover after parsing attributes in process `syz.2.662'. [ 165.035058][ T8519] delete_channel: no stack [ 165.119318][ T8545] netlink: 132 bytes leftover after parsing attributes in process `syz.4.663'. [ 165.361081][ T8554] tipc: Enabled bearer , priority 0 [ 165.387123][ T8558] tipc: Enabling of bearer rejected, already enabled [ 165.391549][ T8563] netlink: 'syz.4.669': attribute type 2 has an invalid length. [ 165.463913][ T8554] syzkaller0: entered promiscuous mode [ 165.470251][ T8554] syzkaller0: entered allmulticast mode [ 165.479583][ T8554] tipc: Resetting bearer [ 165.512985][ T8563] þ: entered promiscuous mode [ 165.528701][ T8553] tipc: Resetting bearer [ 165.627851][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 166.389081][ T5939] tipc: Node number set to 852531171 [ 166.870432][ T8578] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 166.884470][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.672'. [ 167.111029][ T8553] tipc: Disabling bearer [ 167.135123][ T8583] tipc: Enabling of bearer rejected, failed to enable media [ 167.161278][ T8568] lo speed is unknown, defaulting to 1000 [ 167.394406][ T8594] netlink: 'syz.3.678': attribute type 29 has an invalid length. [ 167.419540][ T8594] netlink: 'syz.3.678': attribute type 29 has an invalid length. [ 167.449287][ T8594] netlink: 488 bytes leftover after parsing attributes in process `syz.3.678'. [ 167.511853][ T8598] netlink: 264 bytes leftover after parsing attributes in process `syz.1.680'. [ 167.555823][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.681'. [ 167.561923][ T8598] netlink: 56 bytes leftover after parsing attributes in process `syz.1.680'. [ 167.864203][ T8602] batman_adv: batadv0: Adding interface: dummy0 [ 167.876563][ T8602] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.938286][ T8602] batman_adv: batadv0: Interface activated: dummy0 [ 168.020217][ T8615] batadv_slave_1: entered promiscuous mode [ 168.028290][ T8615] batadv_slave_1: left promiscuous mode [ 168.258038][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 168.372648][ T8625] netlink: 'syz.0.688': attribute type 4 has an invalid length. [ 168.693830][ T8631] !: renamed from dummy0 (while UP) [ 168.791379][ T8635] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 169.002404][ T8644] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.695'. [ 169.014156][ T8639] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.695'. [ 169.026302][ T8644] netlink: 'syz.3.695': attribute type 11 has an invalid length. [ 169.214162][ T8658] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 169.534151][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.704'. [ 169.654485][ T43] IPVS: starting estimator thread 0... [ 169.660104][ T8684] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 169.660450][ T8684] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 169.676637][ T8685] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.755907][ T8686] IPVS: using max 23 ests per chain, 55200 per kthread [ 169.803939][ T8692] netlink: 'syz.4.708': attribute type 32 has an invalid length. [ 169.829126][ T8692] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 169.841407][ T8689] lo speed is unknown, defaulting to 1000 [ 169.869644][ T8694] netlink: 'syz.3.710': attribute type 17 has an invalid length. [ 169.880182][ T8694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.078316][ T8693] netlink: 'syz.1.709': attribute type 18 has an invalid length. [ 170.110012][ T8693] netlink: 'syz.1.709': attribute type 18 has an invalid length. [ 170.968457][ T8718] netlink: 'syz.4.717': attribute type 7 has an invalid length. [ 171.000047][ T8718] : entered promiscuous mode [ 171.036776][ T8718] __nla_validate_parse: 7 callbacks suppressed [ 171.036794][ T8718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.717'. [ 171.097182][ T8721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.197988][ T8729] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.721'. [ 171.574177][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.590944][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.722646][ T8734] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 171.848574][ T6495] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.858045][ T6495] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.920588][ T6495] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.938057][ T6495] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.974105][ T6495] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.997986][ T6495] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.118617][ T6495] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.130911][ T6495] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.340444][ T8764] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.662282][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 173.008324][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'. [ 173.083233][ T8795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.736'. [ 173.200734][ T8801] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 173.209534][ T8801] netlink: 232 bytes leftover after parsing attributes in process `syz.1.738'. [ 173.500640][ T8816] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 173.510070][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'. [ 173.526277][ T8816] netlink: 112 bytes leftover after parsing attributes in process `syz.3.742'. [ 173.641238][ T8819] syzkaller1: entered promiscuous mode [ 173.654006][ T8819] syzkaller1: entered allmulticast mode [ 174.367424][ T8855] IPVS: length: 182 != 2608 [ 174.451216][ T8858] ip6gre0: Master is either lo or non-ether device [ 175.081699][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 175.113692][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 175.228530][ T8896] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 175.261827][ T8896] batadv0: mtu less than device minimum [ 176.082305][ T8935] __nla_validate_parse: 4 callbacks suppressed [ 176.082324][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.777'. [ 176.090941][ T8942] netlink: 'syz.0.779': attribute type 8 has an invalid length. [ 176.116708][ T8941] netlink: 'syz.0.779': attribute type 8 has an invalid length. [ 176.471001][ T8963] bridge_slave_0: left allmulticast mode [ 176.499376][ T8963] bridge_slave_0: left promiscuous mode [ 176.511991][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.524818][ T8964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.782'. [ 176.540726][ T8964] openvswitch: netlink: Flow actions attr not present in new flow. [ 176.551443][ T8963] bridge_slave_1: left allmulticast mode [ 176.568510][ T8963] bridge_slave_1: left promiscuous mode [ 176.577799][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.622514][ T8963] team0: Port device team_slave_0 removed [ 176.633093][ T8963] team0: Port device team_slave_1 removed [ 176.650194][ T8963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.682588][ T8963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.707574][ T8963] batman_adv: batadv0: Removing interface: ip6gretap1 [ 176.746828][ T8963] bond0: (slave veth3): Releasing active interface [ 176.757788][ T8963] bond1: (slave bond2): Releasing active interface [ 176.799845][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 177.060283][ T8981] netlink: 180 bytes leftover after parsing attributes in process `syz.1.784'. [ 177.198180][ T8988] xt_bpf: check failed: parse error [ 177.450934][ T8998] xt_hashlimit: overflow, try lower: 72057594037927936/255 [ 177.811442][ T9012] tun0: tun_chr_ioctl cmd 1074025681 [ 177.936432][ T9015] tun0: tun_chr_ioctl cmd 1074025673 [ 177.941976][ T9016] tun0: tun_chr_ioctl cmd 1074025681 [ 178.229072][ T9031] IPVS: length: 70 != 24 [ 178.422854][ T9043] netlink: 60 bytes leftover after parsing attributes in process `syz.2.797'. [ 178.546990][ T9041] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 178.640626][ T9047] lo speed is unknown, defaulting to 1000 [ 179.542106][ T9081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.674828][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 179.693478][ T9075] lo speed is unknown, defaulting to 1000 [ 179.985288][ T9095] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 180.043694][ T9095] netlink: 224 bytes leftover after parsing attributes in process `syz.2.814'. [ 180.134197][ T9102] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 180.236496][ T9103] netlink: del zone limit has 8 unknown bytes [ 180.341279][ T9083] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 180.406867][ T9083] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 180.533894][ T9113] netlink: 64 bytes leftover after parsing attributes in process `syz.2.819'. [ 180.543556][ T9101] syzkaller0: entered promiscuous mode [ 180.550345][ T9101] syzkaller0: entered allmulticast mode [ 180.973126][ T9129] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 180.982659][ T9122] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 181.072214][ T9136] netlink: 48 bytes leftover after parsing attributes in process `syz.0.823'. [ 181.167142][ T9131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.306073][ T9131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.382890][ T9146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.827'. [ 181.407818][ T9131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.554696][ T9151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.573214][ T9131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.843690][ T6482] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.869278][ T6482] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.922230][ T6482] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.010906][ T6482] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.024195][ T9164] lo speed is unknown, defaulting to 1000 [ 182.123345][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 182.161184][ T9175] openvswitch: netlink: Missing key (keys=40, expected=100) [ 182.187820][ T9175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.195148][ T9175] IPv6: NLM_F_CREATE should be set when creating new route [ 182.872663][ T9199] syzkaller0: entered promiscuous mode [ 182.879631][ T9199] syzkaller0: entered allmulticast mode [ 183.182232][ T9210] openvswitch: netlink: Message has 20 unknown bytes. [ 183.191166][ T9210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.238657][ T9205] lo speed is unknown, defaulting to 1000 [ 183.274808][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 183.934891][ T9226] netlink: zone id is out of range [ 183.970972][ T9226] netlink: zone id is out of range [ 184.035339][ T9226] netlink: zone id is out of range [ 184.044454][ T9226] netlink: zone id is out of range [ 184.050713][ T9226] netlink: zone id is out of range [ 184.079793][ T9226] netlink: zone id is out of range [ 184.131615][ T9226] netlink: zone id is out of range [ 184.181948][ T9223] lo speed is unknown, defaulting to 1000 [ 184.769654][ T9239] lo speed is unknown, defaulting to 1000 [ 185.504912][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 185.690497][ T9276] nbd: must specify a size in bytes for the device [ 185.786374][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 186.059233][ T9289] netlink: 68 bytes leftover after parsing attributes in process `syz.1.864'. [ 186.584238][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.869'. [ 186.880810][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 186.929466][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 187.025274][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.875'. [ 187.084487][ T9316] netlink: 64 bytes leftover after parsing attributes in process `syz.4.875'. [ 187.093704][ T9319] netlink: 64 bytes leftover after parsing attributes in process `syz.4.875'. [ 187.114632][ T9333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.878'. [ 187.592724][ T9346] net_ratelimit: 6 callbacks suppressed [ 187.592741][ T9346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.073023][ T9359] netlink: 'syz.4.884': attribute type 9 has an invalid length. [ 188.082418][ T9359] netlink: 'syz.4.884': attribute type 7 has an invalid length. [ 188.106417][ T9359] netlink: 'syz.4.884': attribute type 8 has an invalid length. [ 188.129520][ T9359] netlink: 'syz.4.884': attribute type 21 has an invalid length. [ 188.280241][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'. [ 188.449444][ T9380] bond0: (slave bridge0): Releasing backup interface [ 188.473711][ T9380] batman_adv: batadv0: Interface deactivated: 0! [ 188.484216][ T9380] batman_adv: batadv0: Removing interface: 0! [ 188.531949][ T9374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.890'. [ 188.577830][ T9386] netlink: 47 bytes leftover after parsing attributes in process `syz.1.892'. [ 188.663104][ T9378] lo speed is unknown, defaulting to 1000 [ 189.028342][ T9395] syzkaller0: entered promiscuous mode [ 189.040286][ T9395] syzkaller0: entered allmulticast mode [ 189.071415][ T9394] tipc: Started in network mode [ 189.082184][ T9394] tipc: Node identity 5af89b3a9c49, cluster identity 4711 [ 189.114323][ T9394] tipc: Enabled bearer , priority 0 [ 189.435149][ T9395] tipc: Resetting bearer [ 189.561384][ T9395] tipc: Disabling bearer [ 190.044297][ T9432] bridge0: port 3(team0) entered disabled state [ 190.072842][ T9432] bridge_slave_0: left allmulticast mode [ 190.096772][ T9432] bridge_slave_0: left promiscuous mode [ 190.111877][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.147127][ T9432] bridge_slave_1: left allmulticast mode [ 190.163046][ T9432] bridge_slave_1: left promiscuous mode [ 190.181323][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.234198][ T9432] bond0: (slave bond_slave_0): Releasing backup interface [ 190.269850][ T9432] bond0: (slave bond_slave_1): Releasing backup interface [ 190.307271][ T9432] team_slave_0: left promiscuous mode [ 190.330469][ T9432] team_slave_0: left allmulticast mode [ 190.378093][ T9432] team0: Port device team_slave_0 removed [ 190.380197][ T9437] Bluetooth: MGMT ver 1.23 [ 190.396671][ T9432] team_slave_1: left promiscuous mode [ 190.407662][ T9432] team_slave_1: left allmulticast mode [ 190.421460][ T9432] team0: Port device team_slave_1 removed [ 190.430248][ T9432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.439566][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.450451][ T9432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.460172][ T9432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.488906][ T9432] geneve0: left promiscuous mode [ 190.494200][ T9432] geneve0: left allmulticast mode [ 190.506971][ T9432] team0: Port device geneve0 removed [ 190.515500][ T9432] bond2: (slave gretap1): Releasing active interface [ 190.821487][ T9448] nbd: socks must be embedded in a SOCK_ITEM attr [ 190.855789][ T9448] block nbd0: shutting down sockets [ 190.895431][ T9453] netlink: 'syz.1.908': attribute type 1 has an invalid length. [ 191.111853][ T9454] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.139971][ T9454] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 191.154046][ T9462] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 191.342271][ T9462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.458911][ T9460] vlan2: entered allmulticast mode [ 191.464098][ T9460] veth1: entered allmulticast mode [ 191.515635][ T9460] bond3: (slave vlan2): making interface the new active one [ 191.566636][ T9460] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 191.653291][ T9485] __nla_validate_parse: 11 callbacks suppressed [ 191.653312][ T9485] netlink: 36 bytes leftover after parsing attributes in process `syz.1.916'. [ 191.778082][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.918'. [ 191.916848][ T9500] netlink: 'syz.1.919': attribute type 1 has an invalid length. [ 191.931196][ T5861] Bluetooth: hci3: command 0x0405 tx timeout [ 191.962163][ T9500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.129282][ T9512] netlink: 'syz.4.921': attribute type 1 has an invalid length. [ 192.134334][ T9506] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.144264][ T9512] netlink: 88 bytes leftover after parsing attributes in process `syz.4.921'. [ 192.154476][ T9506] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 192.171100][ T9506] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 192.197151][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 192.271626][ T9500] macvlan2: entered promiscuous mode [ 192.287516][ T9500] macvlan2: entered allmulticast mode [ 192.294262][ T9500] bond5: entered promiscuous mode [ 192.305130][ T9500] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.321251][ T9500] bond5: left promiscuous mode [ 192.363139][ T9519] netlink: 'syz.3.923': attribute type 10 has an invalid length. [ 192.455674][ T9519] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 192.780236][ T9530] lo speed is unknown, defaulting to 1000 [ 193.719609][ T9587] !: renamed from dummy0 [ 193.748749][ T9536] lo speed is unknown, defaulting to 1000 [ 194.149943][ T9609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.943'. [ 194.670439][ T9619] netlink: 248 bytes leftover after parsing attributes in process `syz.4.946'. [ 194.944328][ T9631] netlink: 84 bytes leftover after parsing attributes in process `syz.1.950'. [ 194.993766][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 195.089584][ T9636] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.192845][ T9636] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.429472][ T9636] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.491463][ T9636] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.610843][ T6487] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.660116][ T6497] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.710278][ T6499] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.751008][ T6487] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.010996][ T9661] tipc: Enabling of bearer rejected, failed to enable media [ 196.047451][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.959'. [ 196.126414][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 196.707047][ T9694] sctp: [Deprecated]: syz.3.966 (pid 9694) Use of int in maxseg socket option. [ 196.707047][ T9694] Use struct sctp_assoc_value instead [ 197.013134][ T9719] __nla_validate_parse: 3 callbacks suppressed [ 197.013152][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 197.054887][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 197.076369][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 197.097119][ T9723] netlink: 84 bytes leftover after parsing attributes in process `syz.0.975'. [ 197.229019][ T9733] netlink: 248 bytes leftover after parsing attributes in process `syz.2.976'. [ 197.237901][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.977'. [ 197.313285][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.977'. [ 197.332770][ T9740] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 197.337707][ T9742] netlink: 'syz.0.979': attribute type 1 has an invalid length. [ 197.340549][ T9740] dvmrp1: linktype set to 805 [ 197.353135][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.977'. [ 197.367603][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 197.378245][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.977'. [ 197.406930][ T9742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.598004][ T9745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.626991][ T9745] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 197.650942][ T9745] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 197.709736][ T9760] netlink: 'syz.0.979': attribute type 11 has an invalid length. [ 197.741264][ T6497] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.841630][ T9742] veth3: entered promiscuous mode [ 197.858969][ T9742] bond1: (slave veth3): Enslaving as an active interface with a down link [ 197.873693][ T9749] erspan0: entered allmulticast mode [ 197.959259][ T6497] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.972520][ T6497] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.024331][ T9764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.071506][ T9758] lo speed is unknown, defaulting to 1000 [ 198.080204][ T6497] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.171519][ T9776] tipc: New replicast peer: 255.255.255.83 [ 198.290337][ T9776] tipc: Enabled bearer , priority 10 [ 198.326429][ T9764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.337102][ T9772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.923844][ T9792] lo speed is unknown, defaulting to 1000 [ 199.133733][ T30] audit: type=1800 audit(1753521675.076:4): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.994" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1059 res=0 errno=0 [ 199.529214][ T9822] pim6reg1: entered promiscuous mode [ 199.567133][ T9822] pim6reg1: entered allmulticast mode [ 199.619890][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.949472][ T9848] syzkaller0: entered promiscuous mode [ 199.956358][ T9848] syzkaller0: entered allmulticast mode [ 200.083496][ T9858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 200.133627][ T9857] tap0: tun_chr_ioctl cmd 1074025680 [ 200.153706][ T9857] tipc: Enabled bearer , priority 0 [ 200.561808][ T9881] netlink: 'syz.1.1013': attribute type 13 has an invalid length. [ 200.576496][ T9867] D: renamed from syzkaller0 [ 200.583358][ T9867] tipc: Disabling bearer [ 201.062436][ T9899] sock: sock_set_timeout: `syz.2.1018' (pid 9899) tries to set negative timeout [ 201.280000][ T9894] macsec1: entered allmulticast mode [ 201.287828][ T9894] syz_tun: entered allmulticast mode [ 201.403187][ T9894] syz_tun: left allmulticast mode [ 201.889517][ T9906] syzkaller0: entered promiscuous mode [ 201.898875][ T9906] syzkaller0: entered allmulticast mode [ 201.985745][ T6499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.022868][ T6499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.117934][ T9915] syzkaller0: entered promiscuous mode [ 202.123507][ T9915] syzkaller0: entered allmulticast mode [ 202.162520][ T9926] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 202.356586][ T9938] __nla_validate_parse: 72 callbacks suppressed [ 202.356606][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 203.601334][ T9933] syzkaller1: entered promiscuous mode [ 203.606940][ T9933] syzkaller1: entered allmulticast mode [ 203.799649][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 204.996574][ T6497] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.016295][ T6497] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.042812][ T6497] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.074395][ T6497] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.253455][ T9961] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 205.360742][ T9968] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.507378][ T9968] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.638929][ T9981] vlan3: entered promiscuous mode [ 205.740281][ T9968] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.855086][ T9988] netlink: 'syz.3.1034': attribute type 29 has an invalid length. [ 205.900476][ T9968] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.973082][ T9982] lo speed is unknown, defaulting to 1000 [ 205.973153][ T9972] netlink: 'syz.3.1034': attribute type 29 has an invalid length. [ 206.691299][ T4074] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.737466][ T4074] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.990681][ T4074] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.086257][ T4074] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.300696][T10020] netlink: 'syz.0.1044': attribute type 11 has an invalid length. [ 207.310049][T10020] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1044'. [ 207.351733][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 207.933376][T10030] lo speed is unknown, defaulting to 1000 [ 208.458031][T10057] netlink: 'syz.4.1055': attribute type 2 has an invalid length. [ 208.482782][T10054] netlink: 'syz.2.1053': attribute type 58 has an invalid length. [ 208.499411][T10057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1055'. [ 208.505034][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1053'. [ 208.511226][T10058] syzkaller0: entered promiscuous mode [ 208.534713][T10058] syzkaller0: entered allmulticast mode [ 208.631459][T10028] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1047'. [ 208.664413][T10060] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 208.860782][T10073] netlink: 'syz.0.1058': attribute type 39 has an invalid length. [ 208.889061][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 209.269719][T10091] netlink: 'syz.2.1063': attribute type 2 has an invalid length. [ 209.383877][T10091] k›*·]‘: entered promiscuous mode [ 209.469901][T10091] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1063'. [ 209.553475][T10091] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1063'. [ 209.624064][T10095] rdma_rxe: rxe_newlink: failed to add lo [ 209.957049][T10091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.969384][T10091] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.000328][T10091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.135633][ T5939] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 210.163383][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1068'. [ 210.588199][ T4074] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 210.713514][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 210.744038][T10153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1077'. [ 210.796024][ T5939] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 210.809545][T10153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1077'. [ 211.619828][ T6499] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 211.640166][ T6499] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 211.673569][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 211.814869][T10182] lo speed is unknown, defaulting to 1000 [ 212.030187][T10196] nbd: couldn't find a device at index 65546 [ 212.820108][T10199] lo speed is unknown, defaulting to 1000 [ 212.979453][T10220] veth1_to_bond: entered allmulticast mode [ 213.192157][T10220] veth1_to_bond (unregistering): left allmulticast mode [ 213.269360][T10202] lo speed is unknown, defaulting to 1000 [ 213.598389][T10209] lo speed is unknown, defaulting to 1000 [ 213.831209][T10235] tipc: Enabled bearer , priority 0 [ 213.848162][T10235] tipc: Resetting bearer [ 213.870071][T10234] tipc: Disabling bearer [ 213.887604][T10222] lo speed is unknown, defaulting to 1000 [ 214.264839][T10239] bond0: (slave wlan1): Releasing backup interface [ 214.304142][T10239] bond3: (slave vlan2): Releasing active interface [ 215.353259][T10243] __nla_validate_parse: 4 callbacks suppressed [ 215.353279][T10243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1097'. [ 215.408512][T10244] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 215.437209][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 215.845271][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 215.987317][T10272] macsec0: entered promiscuous mode [ 215.993913][T10272] macsec0: left promiscuous mode [ 216.322050][T10286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 216.632457][T10297] sch_tbf: burst 19872 is lower than device gretap0 mtu (65499) ! [ 216.833742][T10293] lo speed is unknown, defaulting to 1000 [ 216.896226][ T5946] IPVS: starting estimator thread 0... [ 216.995168][T10316] IPVS: using max 23 ests per chain, 55200 per kthread [ 217.049595][ T5167] Bluetooth: hci4: command 0x0406 tx timeout [ 217.055014][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 217.057519][ T5167] Bluetooth: hci1: command 0x0406 tx timeout [ 217.530705][T10302] lo speed is unknown, defaulting to 1000 [ 217.780047][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 218.081231][T10328] sctp: [Deprecated]: syz.4.1112 (pid 10328) Use of int in max_burst socket option. [ 218.081231][T10328] Use struct sctp_assoc_value instead [ 218.391932][T10333] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 218.447143][T10333] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 218.461473][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'. [ 218.519596][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1115'. [ 218.720059][T10351] Cannot find add_set index 2 as target [ 218.947572][T10362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1122'. [ 219.195301][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'. [ 219.242968][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 219.613780][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1130'. [ 219.646811][T10397] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1133'. [ 219.704536][T10392] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 219.780365][T10396] lo speed is unknown, defaulting to 1000 [ 220.769225][T10430] netlink: 'syz.1.1141': attribute type 29 has an invalid length. [ 220.791308][T10429] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 221.237296][T10440] __nla_validate_parse: 1 callbacks suppressed [ 221.237316][T10440] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1145'. [ 221.364720][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1148'. [ 221.534176][T10445] ªªªªªª: renamed from vlan0 [ 221.693170][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 222.081403][T10480] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1157'. [ 222.090820][T10484] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1158'. [ 222.547817][T10504] lo speed is unknown, defaulting to 1000 [ 222.575541][T10493] block nbd0: server does not support multiple connections per device. [ 222.592939][T10493] block nbd0: shutting down sockets [ 222.605562][T10511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1164'. [ 222.632167][T10511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1164'. [ 222.959748][T10521] netlink: 'syz.0.1166': attribute type 13 has an invalid length. [ 222.988657][T10521] netlink: 'syz.0.1166': attribute type 17 has an invalid length. [ 223.025624][T10524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1168'. [ 223.040939][T10521] erspan0: left allmulticast mode [ 223.096162][T10521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.116398][T10519] lo speed is unknown, defaulting to 1000 [ 223.167490][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1169'. [ 223.929618][T10553] lo speed is unknown, defaulting to 1000 [ 224.518792][T10576] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1180'. [ 224.565192][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 225.912355][ T30] audit: type=1800 audit(1753521701.856:5): pid=10634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1197" name=35FFFF dev="tmpfs" ino=1320 res=0 errno=0 [ 226.013852][T10636] netlink: 'syz.0.1198': attribute type 13 has an invalid length. [ 226.041735][T10636] netlink: 'syz.0.1198': attribute type 17 has an invalid length. [ 226.092234][T10636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.371734][T10662] @ÿ: renamed from veth0_vlan (while UP) [ 226.649633][T10669] __nla_validate_parse: 6 callbacks suppressed [ 226.649653][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 227.097984][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 227.909709][T10711] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1214'. [ 227.957006][T10711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 227.969432][T10714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 228.014407][T10711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1214'. [ 228.063372][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 228.110658][T10723] x_tables: duplicate underflow at hook 3 [ 228.228963][T10725] ip6t_srh: unknown srh match flags 4000 [ 228.239643][T10729] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1220'. [ 228.276138][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 228.618042][T10743] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 228.647236][T10743] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1224'. [ 228.961097][T10748] lo speed is unknown, defaulting to 1000 [ 229.042351][T10758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.211280][T10765] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 229.319805][T10768] netlink: 'syz.4.1231': attribute type 15 has an invalid length. [ 229.433070][T10765] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 229.464533][T10765] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 229.500558][T10765] bond2: (slave vti0): making interface the new active one [ 229.536169][T10765] bond2: (slave vti0): Enslaving as an active interface with an up link [ 229.852530][T10784] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.996480][T10784] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.204321][T10792] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 230.318854][T10784] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.467778][T10784] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.468349][T10801] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 230.637834][ T6482] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.740240][ T6499] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.770215][ T6499] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.846112][ T6499] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.250997][T10839] xt_CONNSECMARK: invalid mode: 254 [ 232.299370][T10896] tipc: Enabling of bearer rejected, failed to enable media [ 232.453385][T10905] netlink: 'syz.4.1266': attribute type 1 has an invalid length. [ 232.465499][T10906] __nla_validate_parse: 7 callbacks suppressed [ 232.465519][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 232.530654][T10905] netlink: 'syz.4.1266': attribute type 1 has an invalid length. [ 232.558627][T10905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.579540][T10905] bond3: (slave ip6gretap2): making interface the new active one [ 232.589657][T10905] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 232.730664][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 232.930698][ T6482] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 232.971481][T10930] sctp: [Deprecated]: syz.2.1274 (pid 10930) Use of int in maxseg socket option. [ 232.971481][T10930] Use struct sctp_assoc_value instead [ 233.492032][T10955] netlink: 'syz.1.1281': attribute type 4 has an invalid length. [ 233.507983][T10955] netlink: 'syz.1.1281': attribute type 4 has an invalid length. [ 233.914042][T10969] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1283'. [ 233.934512][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1284'. [ 233.964022][T10970] syzkaller1: entered promiscuous mode [ 233.970903][T10970] syzkaller1: entered allmulticast mode [ 234.012783][T10971] gtp1: entered promiscuous mode [ 234.039310][T10971] gtp1: entered allmulticast mode [ 234.147075][T10974] wireguard0: entered promiscuous mode [ 234.154292][T10974] wireguard0: entered allmulticast mode [ 235.127218][T11015] ipt_ECN: cannot use operation on non-tcp rule [ 235.604652][T11033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1301'. [ 235.656841][T11037] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1302'. [ 235.710950][T11038] tipc: New replicast peer: 255.255.255.255 [ 235.749815][T11038] tipc: Enabled bearer , priority 10 [ 235.814471][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1303'. [ 236.817965][T11063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1310'. [ 236.843704][T11069] netlink: 'syz.3.1310': attribute type 15 has an invalid length. [ 236.852771][ T43] tipc: Node number set to 3333528378 [ 236.871509][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 236.880802][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 237.169219][T11086] syzkaller1: entered promiscuous mode [ 237.175084][T11086] syzkaller1: entered allmulticast mode [ 237.295957][ T5859] Bluetooth: hci3: command 0x0405 tx timeout [ 237.562283][T11105] __nla_validate_parse: 1 callbacks suppressed [ 237.562304][T11105] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1318'. [ 237.657764][T11108] netlink: 'syz.0.1320': attribute type 13 has an invalid length. [ 237.691539][T11108] netlink: 'syz.0.1320': attribute type 17 has an invalid length. [ 237.762609][T11108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.783288][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'. [ 237.934745][T11123] lo speed is unknown, defaulting to 1000 [ 237.943397][T11108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.954593][T11120] IPVS: set_ctl: invalid protocol: 255 172.30.1.2:20004 [ 238.035666][T11132] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 238.058945][T11108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.183962][T11111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.416258][T11138] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR [ 238.787681][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 238.875779][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 238.941982][T11176] netlink: 'syz.1.1329': attribute type 14 has an invalid length. [ 238.964289][T11176] netlink: 'syz.1.1329': attribute type 13 has an invalid length. [ 239.295976][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1333'. [ 239.296065][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'. [ 239.362911][T11189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1333'. [ 239.373954][T11185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1331'. [ 239.433635][ T5946] IPVS: starting estimator thread 0... [ 239.445862][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 239.565679][T11195] IPVS: using max 23 ests per chain, 55200 per kthread [ 239.579834][T11198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.587214][T11198] IPv6: NLM_F_CREATE should be set when creating new route [ 239.675858][T11201] lo: entered allmulticast mode [ 239.728010][T11201] tunl0: entered allmulticast mode [ 239.757608][T11201] gre0: entered allmulticast mode [ 240.081839][T11201] gretap0: entered allmulticast mode [ 240.408363][T11201] erspan0: entered allmulticast mode [ 240.840526][T11201] ip_vti0: entered allmulticast mode [ 241.093597][T11201] ip6_vti0: entered allmulticast mode [ 241.138385][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 241.183063][T11201] sit0: entered allmulticast mode [ 241.190438][T11219] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 241.200773][T11219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.210472][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 241.247278][T11201] ip6tnl0: entered allmulticast mode [ 241.268706][T11201] ip6gre0: entered allmulticast mode [ 241.293680][T11201] ip6gretap0: entered allmulticast mode [ 241.329330][T11201] bridge0: entered allmulticast mode [ 241.344831][T11201] vcan0: entered allmulticast mode [ 241.354420][T11201] bond0: entered allmulticast mode [ 241.364261][T11201] !: entered allmulticast mode [ 241.376927][T11201] nlmon0: entered allmulticast mode [ 241.385566][T11201] caif0: entered allmulticast mode [ 241.391550][T11201] batadv0: entered allmulticast mode [ 241.404052][T11201] vxcan0: entered allmulticast mode [ 241.414715][T11201] vxcan1: entered allmulticast mode [ 241.428052][T11201] veth0: entered allmulticast mode [ 241.459200][T11201] veth1: entered allmulticast mode [ 241.489211][T11201] wg1: entered allmulticast mode [ 241.501721][T11201] wg2: entered allmulticast mode [ 241.511496][T11201] veth0_to_bridge: entered allmulticast mode [ 241.522635][T11201] bridge_slave_0: entered allmulticast mode [ 241.532277][T11201] veth1_to_bridge: entered allmulticast mode [ 241.544004][T11201] bridge_slave_1: entered allmulticast mode [ 241.554323][T11201] veth0_to_bond: entered allmulticast mode [ 241.563296][T11201] bond_slave_0: entered allmulticast mode [ 241.570626][T11201] veth0_to_team: entered allmulticast mode [ 241.579099][T11201] team_slave_0: entered allmulticast mode [ 241.586067][T11201] veth1_to_team: entered allmulticast mode [ 241.594345][T11201] team_slave_1: entered allmulticast mode [ 241.601104][T11201] veth1_to_batadv: entered allmulticast mode [ 241.611447][T11201] batadv_slave_1: left promiscuous mode [ 241.617762][T11201] batadv_slave_1: entered allmulticast mode [ 241.628010][T11201] xfrm0: entered allmulticast mode [ 241.638069][T11201] veth0_to_hsr: entered allmulticast mode [ 241.649937][T11201] veth1_to_hsr: entered allmulticast mode [ 241.668824][T11201] veth1_virt_wifi: entered allmulticast mode [ 241.678429][T11201] veth0_virt_wifi: entered allmulticast mode [ 241.687596][T11201] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 241.696749][T11201] veth1_macvtap: entered allmulticast mode [ 241.706394][T11201] veth0_macvtap: entered allmulticast mode [ 241.721460][T11201] macvtap0: entered allmulticast mode [ 241.730305][T11201] macsec0: entered allmulticast mode [ 241.738592][T11201] geneve0: entered allmulticast mode [ 241.744839][T11201] geneve1: entered allmulticast mode [ 241.766813][T11201] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 241.790043][T11201] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 241.799949][T11201] gretap1: entered allmulticast mode [ 241.811126][T11201] macvlan3: left promiscuous mode [ 241.819504][T11201] mac80211_hwsim hwsim15 wlan2: entered allmulticast mode [ 241.827301][T11201] erspan1: entered allmulticast mode [ 241.832742][T11201] geneve2: entered allmulticast mode [ 241.838899][T11201] mac80211_hwsim hwsim16 wlan3: entered allmulticast mode [ 241.848049][T11201] vti0: left promiscuous mode [ 241.852769][T11201] vti0: entered allmulticast mode [ 241.860604][T11201] tun0: entered allmulticast mode [ 241.869193][T11201] macsec1: entered allmulticast mode [ 241.878030][T11201] bridge1: entered allmulticast mode [ 241.883679][T11201] netdevsim netdevsim0 eth0: entered allmulticast mode [ 241.893389][T11201] netdevsim netdevsim0 eth1: entered allmulticast mode [ 241.901959][T11201] netdevsim netdevsim0 eth2: entered allmulticast mode [ 241.910071][T11201] netdevsim netdevsim0 eth3: entered allmulticast mode [ 241.918025][T11201] bridge2: entered allmulticast mode [ 241.934315][T11201] bridge3: entered allmulticast mode [ 241.943644][T11201] bond1: entered allmulticast mode [ 241.952850][T11201] veth2: entered allmulticast mode [ 241.963948][T11201] veth3: left promiscuous mode [ 241.970041][T11201] veth3: entered allmulticast mode [ 241.977965][T11201] mac80211_hwsim hwsim19 wlan4: entered allmulticast mode [ 241.986508][T11201] ipip0: entered allmulticast mode [ 241.991957][T11201] syzkaller1: entered allmulticast mode [ 242.018291][T11221] IPv6: sit3: Disabled Multicast RS [ 242.024521][T11221] sit3: entered allmulticast mode [ 242.396951][T11250] team0 (unregistering): Port device team_slave_0 removed [ 242.406826][T11250] team0 (unregistering): Port device team_slave_1 removed [ 242.431919][ T77] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.441274][ T77] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.452067][ T77] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.492152][ T77] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.714453][T11259] openvswitch: netlink: Message has 8 unknown bytes. [ 242.787885][T11259] netlink: 'syz.1.1352': attribute type 10 has an invalid length. [ 242.838758][T11259] __nla_validate_parse: 1 callbacks suppressed [ 242.838778][T11259] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1352'. [ 242.865864][T11259] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1352'. [ 243.071674][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1354'. [ 243.174340][T11278] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.278376][T11283] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.351825][T11289] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 243.390133][T11289] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 243.417148][T11289] team0: Failed to send options change via netlink (err -105) [ 243.437040][T11289] team0: Port device batadv1 added [ 243.461945][T11283] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.546284][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 243.550804][T11283] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.662165][T11306] siw: device registration error -23 [ 243.670635][T11283] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.812546][T11312] wg1: entered promiscuous mode [ 243.825261][T11312] wg1: entered allmulticast mode [ 243.980790][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.106360][ T6482] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.172449][ T4074] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.243587][ T4074] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.296535][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1368'. [ 244.318111][T11323] netlink: 39952 bytes leftover after parsing attributes in process `syz.2.1370'. [ 244.490264][T11340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1374'. [ 244.545185][T11341] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1372'. [ 244.906450][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 245.010728][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1379'. [ 245.216494][T11362] netlink: 'syz.0.1380': attribute type 8 has an invalid length. [ 245.331861][T11367] ip6gre1: entered allmulticast mode [ 245.514693][T11375] netlink: 'syz.1.1385': attribute type 10 has an invalid length. [ 245.582524][T11379] syzkaller1: entered promiscuous mode [ 245.638853][T11379] syzkaller1: entered allmulticast mode [ 246.751125][T11412] hsr0: left promiscuous mode [ 247.125057][ T5939] lo speed is unknown, defaulting to 1000 [ 247.130913][ T5939] syz0: Port: 1 Link DOWN [ 247.176671][ T6482] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.195748][ T6482] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.217160][ T6482] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.260530][T11436] lo speed is unknown, defaulting to 1000 [ 247.260583][ T6482] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.454309][T11452] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 247.578838][T11454] lo speed is unknown, defaulting to 1000 [ 247.652211][T11463] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 247.742524][T11471] netlink: 'syz.3.1405': attribute type 16 has an invalid length. [ 247.904799][T11475] netlink: 'syz.2.1407': attribute type 1 has an invalid length. [ 248.029900][T11483] __nla_validate_parse: 5 callbacks suppressed [ 248.029923][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1407'. [ 248.138756][T11479] bond2: (slave geneve2): making interface the new active one [ 248.161227][T11487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1410'. [ 248.177009][T11479] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 248.236288][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'. [ 248.250402][T11483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.265208][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1410'. [ 248.298127][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 248.325180][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 248.342361][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 248.389387][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 248.398667][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 248.424607][T11494] gretap0: left allmulticast mode [ 248.451375][T11494] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1413'. [ 248.454057][T11496] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 248.487548][T11496] netlink: 'syz.0.1413': attribute type 2 has an invalid length. [ 248.519275][T11496] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.1413'. [ 248.529965][T11494] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 248.562008][T11501] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1415'. [ 248.575757][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 248.850599][T11508] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 248.895993][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1416'. [ 249.327664][T11526] sock: sock_timestamping_bind_phc: sock not bind to device [ 249.371080][T11526] netlink: 'syz.4.1422': attribute type 1 has an invalid length. [ 251.686826][T11582] 8021q: VLANs not supported on ip6gre0 [ 251.833437][T11583] bridge0: port 1(macvlan2) entered blocking state [ 251.919551][T11583] bridge0: port 1(macvlan2) entered disabled state [ 251.993300][T11583] macvlan2: entered allmulticast mode [ 252.075586][T11583] bridge0: entered allmulticast mode [ 252.153921][T11583] macvlan2: left allmulticast mode [ 252.168620][T11583] bridge0: left allmulticast mode [ 252.530945][T11599] lo speed is unknown, defaulting to 1000 [ 252.713509][T11614] IPv6: NLM_F_REPLACE set, but no existing node found! [ 253.049704][T11631] netlink: 'syz.2.1440': attribute type 16 has an invalid length. [ 253.058857][T11631] netlink: 'syz.2.1440': attribute type 17 has an invalid length. [ 253.100174][T11631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.116222][ T5939] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 253.174142][T11633] __nla_validate_parse: 3 callbacks suppressed [ 253.174160][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 253.341925][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 253.352641][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 253.554242][T11635] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 253.598849][T11635] team1: entered promiscuous mode [ 253.604060][T11635] team1: entered allmulticast mode [ 253.622642][T11638] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 253.713705][T11638] team2: entered promiscuous mode [ 253.762031][T11638] team2: entered allmulticast mode [ 254.007944][T11666] dvmrp8: entered allmulticast mode [ 254.035072][ T5939] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 254.106308][T11675] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 254.163875][T11675] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 254.674630][T11658] dvmrp8: left allmulticast mode [ 255.099254][T11696] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 255.659411][T11722] tipc: Enabled bearer , priority 0 [ 255.705324][T11723] syzkaller0: entered promiscuous mode [ 255.710871][T11723] syzkaller0: entered allmulticast mode [ 255.917728][T11723] tipc: Resetting bearer [ 255.983473][T11723] tipc: Disabling bearer [ 256.302058][T11751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1468'. [ 256.765444][T11769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1472'. [ 256.926543][T11774] lo speed is unknown, defaulting to 1000 [ 256.951279][T11777] tipc: Enabled bearer , priority 0 [ 256.972205][T11782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.005227][T11783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1474'. [ 257.142217][T11788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1480'. [ 257.154604][T11790] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1479'. [ 257.163973][T11789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.269389][T11782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.568281][T11795] Cannot find del_set index 0 as target [ 257.640232][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 257.666978][T11785] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1478'. [ 257.671712][T11779] lo speed is unknown, defaulting to 1000 [ 257.703747][T11797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.065818][T11438] tipc: Node number set to 3518931930 [ 258.421448][T11814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.767957][T11785] lo speed is unknown, defaulting to 1000 [ 258.786414][T11836] __nla_validate_parse: 1 callbacks suppressed [ 258.786435][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'. [ 258.933838][T11839] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1493'. [ 259.602874][T11860] lo speed is unknown, defaulting to 1000 [ 260.189737][T11833] lo speed is unknown, defaulting to 1000 [ 260.439683][T11869] lo speed is unknown, defaulting to 1000 [ 261.311320][T11891] Cannot find set identified by id 1 to match [ 261.334649][T11893] Cannot find set identified by id 1 to match [ 261.621457][T11897] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 261.630284][T11897] netlink: 'syz.1.1504': attribute type 2 has an invalid length. [ 261.641634][T11897] netlink: 'syz.1.1504': attribute type 1 has an invalid length. [ 261.651440][T11897] netlink: 'syz.1.1504': attribute type 2 has an invalid length. [ 261.931151][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 262.027561][T11904] netlink: 'syz.2.1506': attribute type 1 has an invalid length. [ 262.168010][T11904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.185684][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1507'. [ 262.197349][T11910] netlink: 'syz.3.1507': attribute type 30 has an invalid length. [ 262.224060][T11906] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.231792][T11906] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.244398][T11906] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 262.282535][T11901] gretap1: entered promiscuous mode [ 262.291769][T11901] bond3: (slave gretap1): making interface the new active one [ 262.300388][T11901] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 262.497937][T11922] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 262.527899][T11922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1509'. [ 262.796277][T11938] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1514'. [ 262.818291][T11938] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1514'. [ 263.162079][T11958] syzkaller1: entered promiscuous mode [ 263.169773][T11958] syzkaller1: entered allmulticast mode [ 263.565761][T11976] lo speed is unknown, defaulting to 1000 [ 263.613372][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1528'. [ 264.468545][T12013] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 264.476602][T12013] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1535'. [ 264.882235][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 265.131049][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.139057][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.174105][T12022] tipc: Resetting bearer [ 265.301654][T12022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.320254][T12022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.502838][T12022] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 265.514275][T12022] vlan2: left allmulticast mode [ 265.519947][T12022] veth1: left allmulticast mode [ 265.532861][T12022] ipvlan2: left promiscuous mode [ 265.595516][T12022] gtp1: left promiscuous mode [ 265.600850][T12022] gtp1: left allmulticast mode [ 265.621825][T11986] lo speed is unknown, defaulting to 1000 [ 265.640764][ T59] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.754116][ T59] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.782191][ T59] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.888755][ T59] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.032070][T12063] netlink: 'syz.4.1543': attribute type 1 has an invalid length. [ 266.100266][T12063] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1543'. [ 266.145857][T12069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1543'. [ 267.988598][T12138] netlink: 892 bytes leftover after parsing attributes in process `syz.4.1565'. [ 268.102402][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 268.171093][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1567'. [ 268.212554][T12145] netlink: 'syz.3.1567': attribute type 2 has an invalid length. [ 268.240161][T12145] netlink: 'syz.3.1567': attribute type 1 has an invalid length. [ 268.249752][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1567'. [ 268.750589][T12172] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 268.939232][T12182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.952793][T12178] lo speed is unknown, defaulting to 1000 [ 269.039428][T12184] netlink: del zone limit has 4 unknown bytes [ 269.076391][T12186] tipc: Enabled bearer , priority 0 [ 269.095874][T12186] syzkaller0: entered promiscuous mode [ 269.101426][T12186] syzkaller0: entered allmulticast mode [ 269.158509][T12186] tipc: Resetting bearer [ 269.174734][T12185] tipc: Resetting bearer [ 269.214050][T12185] tipc: Disabling bearer [ 269.249812][T12188] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 269.316969][T12191] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 269.328470][T12191] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 269.350014][T12191] bond5: (slave vti0): making interface the new active one [ 269.386762][T12191] bond5: (slave vti0): Enslaving as an active interface with an up link [ 269.470622][T12196] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106 [ 269.613967][T12200] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1583'. [ 269.639067][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 269.803286][T12209] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1588'. [ 269.866476][T12208] syzkaller0: entered promiscuous mode [ 269.872326][T12208] syzkaller0: entered allmulticast mode [ 269.892770][T12217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1589'. [ 270.557423][T12230] netlink: 'syz.2.1592': attribute type 13 has an invalid length. [ 270.566215][T12230] netlink: 'syz.2.1592': attribute type 17 has an invalid length. [ 270.807145][T12243] netlink: 'syz.2.1592': attribute type 13 has an invalid length. [ 270.815914][T12243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1592'. [ 272.635849][T11438] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 272.700314][T12230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.732380][T12243] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 272.828306][T12231] lo speed is unknown, defaulting to 1000 [ 273.192986][T12275] gretap1: entered promiscuous mode [ 273.205236][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.447727][T11438] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.619438][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 273.651880][ T6497] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.662637][ T6497] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.770379][T12289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1605'. [ 273.835403][ T5911] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.848050][T12291] lo speed is unknown, defaulting to 1000 [ 274.056289][T12295] netlink: 'syz.4.1606': attribute type 16 has an invalid length. [ 274.080165][T12295] netlink: 'syz.4.1606': attribute type 17 has an invalid length. [ 274.240618][T12295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.254446][T12295] tipc: Resetting bearer [ 274.271532][T12295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.351975][T12295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.377082][T12295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.405962][T12295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.431915][T12295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.442843][T12308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1610'. [ 274.457487][T12295] veth1_macvtap: left promiscuous mode [ 274.465072][T12295] veth0_macvtap: left promiscuous mode [ 274.473414][T12295] veth0_macvtap: entered promiscuous mode [ 274.482921][T12295] veth1_macvtap: entered promiscuous mode [ 274.508368][T12295] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 274.530138][T12295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.548170][T12295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.559790][T12295] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.572053][T12295] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 274.592880][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.600105][ T6497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.627273][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.634491][ T6497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.706153][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.734041][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.757843][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.780244][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.825963][T12311] ip_vti0: left allmulticast mode [ 274.831707][T12311] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1611'. [ 274.850243][T12311] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 274.863849][T12317] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1611'. [ 274.867968][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.886356][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.890860][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 274.916312][T12313] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1612'. [ 274.930604][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'. [ 274.939015][T12313] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1612'. [ 274.949502][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1612'. [ 274.962171][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1613'. [ 274.973871][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.983484][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.016451][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.024708][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.045214][ T5911] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.085707][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 275.183694][T12327] netlink: 'syz.4.1615': attribute type 10 has an invalid length. [ 275.213238][T12327] team0: Port device 0! added [ 275.222436][T12327] netlink: 'syz.4.1615': attribute type 10 has an invalid length. [ 275.231394][T12323] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1614'. [ 275.251111][T12327] team0: Port device 0! removed [ 275.262533][T12327] bond0: (slave 0!): Enslaving as an active interface with an up link [ 275.486987][T12338] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1619'. [ 275.558313][T12342] bridge0: left allmulticast mode [ 275.595185][T12342] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 275.764084][T12346] netlink: 'syz.4.1622': attribute type 11 has an invalid length. [ 275.825259][T12346] x_tables: duplicate underflow at hook 1 [ 275.913162][T12353] vlan0: entered promiscuous mode [ 275.960872][T12353] bond0: entered promiscuous mode [ 275.981679][T12353] vlan0: entered allmulticast mode [ 276.068862][T12357] lo speed is unknown, defaulting to 1000 [ 276.113606][T12360] netlink: 'syz.3.1628': attribute type 10 has an invalid length. [ 276.125483][T12360] dummy0: entered promiscuous mode [ 276.130935][T12360] dummy0: entered allmulticast mode [ 276.152697][T12360] team0: Port device dummy0 added [ 276.559878][T12374] syzkaller0: entered promiscuous mode [ 276.583603][T12374] syzkaller0: entered allmulticast mode [ 279.118928][T12383] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 279.125202][ C0] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 279.125224][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 279.156225][T12388] bond1: (slave veth3): Releasing active interface [ 279.184791][T12384] lo speed is unknown, defaulting to 1000 [ 279.285375][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 279.899467][T12403] macvtap1: entered promiscuous mode [ 279.925030][T12403] team0: entered promiscuous mode [ 279.941423][T12403] macvtap1: entered allmulticast mode [ 279.956387][T12411] ipt_REJECT: ECHOREPLY no longer supported. [ 279.959874][T12403] team0: entered allmulticast mode [ 279.983241][T12403] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 280.010350][T12411] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004 [ 280.029773][T12409] team0: left allmulticast mode [ 280.034697][T12409] team0: left promiscuous mode [ 280.393971][T12418] pimreg: entered allmulticast mode [ 280.685569][T12427] dummy0: left promiscuous mode [ 280.697086][T12427] dummy0: left allmulticast mode [ 280.734714][T12427] team0: Port device dummy0 removed [ 280.754651][T12427] bond5: (slave vti0): Releasing backup interface [ 281.057733][T12432] tipc: Enabled bearer , priority 0 [ 281.115909][T12432] __nla_validate_parse: 6 callbacks suppressed [ 281.115940][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1646'. [ 281.148340][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 281.233610][T12431] tipc: Disabling bearer [ 281.262042][T12438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1648'. [ 281.454789][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'. [ 281.490276][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 281.645883][T12452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.728236][T12454] gtp0: entered promiscuous mode [ 281.766695][T12454] gtp0: entered allmulticast mode [ 281.772737][T12454] team0: Port device gtp0 added [ 282.162703][T12485] FAULT_INJECTION: forcing a failure. [ 282.162703][T12485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.210965][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.2.1661 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 282.211000][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.211014][T12485] Call Trace: [ 282.211024][T12485] [ 282.211034][T12485] dump_stack_lvl+0x189/0x250 [ 282.211067][T12485] ? __pfx____ratelimit+0x10/0x10 [ 282.211094][T12485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.211121][T12485] ? __pfx__printk+0x10/0x10 [ 282.211164][T12485] should_fail_ex+0x414/0x560 [ 282.211195][T12485] _copy_to_user+0x31/0xb0 [ 282.211229][T12485] simple_read_from_buffer+0xe1/0x170 [ 282.211264][T12485] proc_fail_nth_read+0x1df/0x250 [ 282.211288][T12485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.211312][T12485] ? rw_verify_area+0x258/0x650 [ 282.211340][T12485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.211362][T12485] vfs_read+0x200/0x980 [ 282.211396][T12485] ? __pfx___mutex_lock+0x10/0x10 [ 282.211422][T12485] ? __pfx_vfs_read+0x10/0x10 [ 282.211451][T12485] ? __fget_files+0x2a/0x420 [ 282.211476][T12485] ? __fget_files+0x3a0/0x420 [ 282.211493][T12485] ? __fget_files+0x2a/0x420 [ 282.211523][T12485] ksys_read+0x145/0x250 [ 282.211564][T12485] ? __pfx_ksys_read+0x10/0x10 [ 282.211600][T12485] ? do_syscall_64+0xbe/0x3b0 [ 282.211631][T12485] do_syscall_64+0xfa/0x3b0 [ 282.211655][T12485] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.211677][T12485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.211698][T12485] ? clear_bhb_loop+0x60/0xb0 [ 282.211726][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.211747][T12485] RIP: 0033:0x7f76b658d3bc [ 282.211767][T12485] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.211785][T12485] RSP: 002b:00007f76b743e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.211809][T12485] RAX: ffffffffffffffda RBX: 00007f76b67b5fa0 RCX: 00007f76b658d3bc [ 282.211826][T12485] RDX: 000000000000000f RSI: 00007f76b743e0a0 RDI: 0000000000000003 [ 282.211840][T12485] RBP: 00007f76b743e090 R08: 0000000000000000 R09: 0000000000000000 [ 282.211853][T12485] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 282.211867][T12485] R13: 0000000000000000 R14: 00007f76b67b5fa0 R15: 00007fff7c206568 [ 282.211902][T12485] [ 282.586668][T12497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1667'. [ 282.616800][T12497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1667'. [ 282.706907][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 282.801348][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'. [ 282.972859][T12514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1672'. [ 283.040397][T12515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.086479][T12518] lo speed is unknown, defaulting to 1000 [ 283.354530][T12529] netlink: 'syz.3.1676': attribute type 39 has an invalid length. [ 283.371799][T12531] sctp: [Deprecated]: syz.0.1677 (pid 12531) Use of int in max_burst socket option. [ 283.371799][T12531] Use struct sctp_assoc_value instead [ 283.477389][T12536] netlink: 'syz.3.1679': attribute type 1 has an invalid length. [ 283.624674][T12536] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 283.702465][T12550] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 284.210396][T12572] gretap0: entered promiscuous mode [ 284.232895][T12572] 0ªî{X¹¦: renamed from gretap0 [ 284.302865][T12572] 0ªî{X¹¦: left promiscuous mode [ 284.319013][T12572] 0ªî{X¹¦: entered allmulticast mode [ 284.331822][T12572] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 284.919494][T12613] netlink: 'syz.3.1698': attribute type 14 has an invalid length. [ 284.928808][T12613] netlink: 'syz.3.1698': attribute type 13 has an invalid length. [ 284.999288][T12603] wg0: entered allmulticast mode [ 285.365099][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.081767][T12662] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 286.221018][T12674] __nla_validate_parse: 14 callbacks suppressed [ 286.221039][T12674] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1716'. [ 286.670605][T12697] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1720'. [ 286.771630][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 286.875855][T12691] lo speed is unknown, defaulting to 1000 [ 286.883080][T12707] netlink: 'syz.2.1721': attribute type 12 has an invalid length. [ 286.906679][T12706] tipc: Enabled bearer , priority 0 [ 286.962739][T12705] tipc: Enabling of bearer rejected, already enabled [ 286.990656][T12705] syzkaller0: entered promiscuous mode [ 286.999745][T12705] syzkaller0: entered allmulticast mode [ 287.037746][T12705] tipc: Resetting bearer [ 287.054568][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 287.105727][T12710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1725'. [ 287.211849][T12704] tipc: Resetting bearer [ 287.282245][T12704] tipc: Disabling bearer [ 287.295579][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.303780][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 287.677850][T12727] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1727'. [ 287.741768][T12727] syzkaller0: entered promiscuous mode [ 287.748224][T12727] syzkaller0: entered allmulticast mode [ 287.754245][T12729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1728'. [ 287.762712][T12727] ip6t_srh: unknown srh match flags 4000 [ 287.770659][T12727] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1727'. [ 288.632623][T12764] netlink: 'syz.1.1740': attribute type 4 has an invalid length. [ 288.716625][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1741'. [ 288.751122][T12769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1741'. [ 288.773289][T12769] netlink: 'syz.3.1741': attribute type 6 has an invalid length. [ 289.034432][T12787] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 289.630956][T12777] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 289.745549][T12798] erspan1: entered promiscuous mode [ 289.791831][T12798] erspan1: entered allmulticast mode [ 290.885970][T12841] tipc: Enabling of bearer rejected, failed to enable media [ 290.929943][T12837] lo speed is unknown, defaulting to 1000 [ 291.211681][T12849] syzkaller0: entered promiscuous mode [ 291.230631][T12849] syzkaller0: entered allmulticast mode [ 293.108475][T12872] __nla_validate_parse: 7 callbacks suppressed [ 293.108497][T12872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1766'. [ 293.320206][T12885] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1770'. [ 293.342680][T12885] unsupported nlmsg_type 40 [ 293.599712][T12894] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1772'. [ 293.720246][T12896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1771'. [ 293.813615][T12904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1775'. [ 293.937296][T12902] veth5: entered promiscuous mode [ 294.113452][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'. [ 294.224337][T12916] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1778'. [ 294.299913][T12923] xt_hashlimit: size too large, truncated to 1048576 [ 294.360492][T12910] : renamed from bridge_slave_0 [ 294.479811][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1777'. [ 294.673500][T12938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1783'. [ 294.717572][T12939] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1783'. [ 294.890274][T12947] lo speed is unknown, defaulting to 1000 [ 294.947420][T12951] openvswitch: netlink: Message has 20 unknown bytes. [ 294.975695][T12951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.124345][T12994] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 297.952774][T13013] syzkaller1: entered promiscuous mode [ 297.964481][T13013] syzkaller1: entered allmulticast mode [ 298.070723][T13014] tipc: Enabled bearer , priority 0 [ 298.119065][T13014] syzkaller0: entered promiscuous mode [ 298.124792][T13014] syzkaller0: entered allmulticast mode [ 298.400882][T13032] tipc: Resetting bearer [ 298.533049][T13012] tipc: Resetting bearer [ 298.540974][T13037] __nla_validate_parse: 5 callbacks suppressed [ 298.540994][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1808'. [ 298.594704][T13012] tipc: Disabling bearer [ 298.628111][T13035] ÿ: renamed from bond_slave_0 [ 298.684253][ T30] audit: type=1800 audit(1753521774.626:6): pid=13041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1810" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1810 res=0 errno=0 [ 298.835618][T13046] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 298.950314][T13056] netlink: 'syz.1.1812': attribute type 13 has an invalid length. [ 298.979359][T13056] netlink: 'syz.1.1812': attribute type 17 has an invalid length. [ 299.128685][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'. [ 299.194699][T13056] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.245353][T13056] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.366580][T13071] netlink: 'syz.4.1818': attribute type 3 has an invalid length. [ 299.378682][T13071] netlink: 'syz.4.1818': attribute type 3 has an invalid length. [ 299.403869][T13066] lo speed is unknown, defaulting to 1000 [ 299.420926][T13056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.603595][T13080] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1821'. [ 299.736368][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1820'. [ 299.749663][T13079] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1821'. [ 299.974859][T13089] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 300.006500][T13089] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1822'. [ 300.029458][T13091] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1822'. [ 300.214371][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'. [ 300.223790][T13098] netlink: 'syz.3.1827': attribute type 30 has an invalid length. [ 300.241144][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'. [ 300.250289][T13098] netlink: 'syz.3.1827': attribute type 30 has an invalid length. [ 300.270819][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'. [ 300.334202][T13103] sock: sock_timestamping_bind_phc: sock not bind to device [ 300.360938][ T77] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.426733][ T77] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.467299][ T6495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.477151][ T6487] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.489720][ T6495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.530267][ T6487] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.725119][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 300.754618][T13121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.785969][T13120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.810016][T13122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.841300][T13116] lo speed is unknown, defaulting to 1000 [ 301.949678][T13143] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 301.962191][T13153] @ÿ: renamed from veth0_vlan [ 303.060283][T13211] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 303.323355][T13229] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 303.325231][T13225] netlink: 'syz.2.1858': attribute type 39 has an invalid length. [ 303.393089][T13233] netlink: 'syz.4.1860': attribute type 3 has an invalid length. [ 303.717255][T13245] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.724709][T13247] team0: Device dummy0 is of different type [ 303.747587][T13250] bridge2: entered allmulticast mode [ 303.789444][T13252] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 303.827463][T13250] syzkaller1: entered promiscuous mode [ 303.832997][T13250] syzkaller1: entered allmulticast mode [ 303.928115][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 303.936064][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.169861][T13267] __nla_validate_parse: 10 callbacks suppressed [ 304.169881][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1869'. [ 304.211066][T13273] tipc: New replicast peer: 255.255.255.255 [ 304.220969][T13273] tipc: Enabled bearer , priority 10 [ 304.361714][T13288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'. [ 304.550875][T13292] validate_nla: 37 callbacks suppressed [ 304.550892][T13292] netlink: 'syz.0.1874': attribute type 8 has an invalid length. [ 304.576134][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 304.657690][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1874'. [ 304.685164][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1874'. [ 304.719666][T13295] 0ªî{X¹¦: left allmulticast mode [ 304.896861][T13297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.103165][T13308] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1878'. [ 305.352399][T11438] tipc: Node number set to 2201545668 [ 305.826701][T13308] wg1: left promiscuous mode [ 305.857887][T13308] vlan2: left promiscuous mode [ 305.877259][T13308] veth3: left promiscuous mode [ 305.890506][T13308] geneve2: left promiscuous mode [ 305.930552][T13308] team1: left promiscuous mode [ 305.953053][T13308] team2: left promiscuous mode [ 305.959284][T13308] macvtap1: left promiscuous mode [ 305.963909][T13339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1887'. [ 305.979071][T13339] netlink: 'syz.2.1887': attribute type 7 has an invalid length. [ 305.987828][T13339] netlink: 'syz.2.1887': attribute type 8 has an invalid length. [ 306.000370][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 306.024197][T13339] gretap0: entered promiscuous mode [ 306.031579][T13339] batadv_slave_1: entered promiscuous mode [ 306.043977][T13339] erspan0: entered promiscuous mode [ 306.051190][T13339] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.163483][T13335] lo speed is unknown, defaulting to 1000 [ 306.261542][T13343] geneve2: entered promiscuous mode [ 306.270618][ T6487] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 306.301367][ T6487] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 306.324071][T13347] netlink: 'syz.0.1888': attribute type 4 has an invalid length. [ 306.335866][T13347] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1888'. [ 306.344328][ T6487] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 306.372689][ T6487] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 306.477366][T13350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1891'. [ 306.525549][T13347] sctp: [Deprecated]: syz.0.1888 (pid 13347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.525549][T13347] Use struct sctp_sack_info instead [ 307.342844][T13387] pimreg: entered allmulticast mode [ 307.676650][T13406] tipc: Enabling of bearer rejected, failed to enable media [ 307.762487][T13403] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.794721][T13403] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.815227][T13403] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.037295][T13407] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 308.138224][T13403] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.152586][T13403] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.163274][T13403] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.307157][T13403] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.317867][T13403] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.332311][T13403] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.483011][T13403] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.504218][T13403] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.520762][T13403] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 308.811147][T13452] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 308.961961][ T6487] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.993136][ T6487] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.021603][ T6487] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.039811][ T6487] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.059350][T13461] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (65485) ! [ 309.100018][ T6487] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.112572][ T6487] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.131208][T13460] tipc: Enabled bearer , priority 0 [ 309.150740][T13457] lo speed is unknown, defaulting to 1000 [ 309.178196][ T6487] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.187485][ T6487] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.219933][T13460] tipc: Resetting bearer [ 309.252415][ T6487] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.261252][ T6487] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.269983][ T6487] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 309.292855][T13458] tipc: Disabling bearer [ 309.323832][ T6487] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.338112][ T6487] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.354626][ T6487] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 309.384716][T13471] __nla_validate_parse: 8 callbacks suppressed [ 309.384738][T13471] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1920'. [ 309.395254][ T6487] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.428119][ T6487] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.429279][T13471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1920'. [ 309.451931][ T6487] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 309.475700][T13471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1920'. [ 309.489554][ T6487] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.514335][T13476] netlink: 'syz.4.1922': attribute type 1 has an invalid length. [ 309.540930][ T6487] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.558029][T13473] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1920'. [ 309.566748][ T6487] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 309.592702][T13473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1920'. [ 309.630284][T13473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1920'. [ 309.734827][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1923'. [ 309.910808][T13489] sock: sock_timestamping_bind_phc: sock not bind to device [ 309.928125][T13489] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1924'. [ 310.107275][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1927'. [ 310.160376][T13499] tipc: Enabled bearer , priority 0 [ 310.169408][T13499] syzkaller0: entered promiscuous mode [ 310.175680][T13499] syzkaller0: entered allmulticast mode [ 310.187886][T13504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1930'. [ 310.289498][T13500] tipc: Resetting bearer [ 310.317140][T13497] tipc: Resetting bearer [ 310.377814][T13497] tipc: Disabling bearer [ 310.753486][T13519] lo speed is unknown, defaulting to 1000 [ 311.022812][T13523] netlink: 'syz.1.1936': attribute type 1 has an invalid length. [ 312.585419][ T59] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 312.629272][T13565] lo speed is unknown, defaulting to 1000 [ 313.539639][T13596] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 314.520010][T13627] __nla_validate_parse: 5 callbacks suppressed [ 314.520033][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 314.594503][T13633] netlink: 'syz.2.1960': attribute type 32 has an invalid length. [ 314.630918][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 314.646039][T13633] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17) [ 314.751433][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 314.891667][T13639] lo speed is unknown, defaulting to 1000 [ 315.255970][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 315.660366][T13642] lo speed is unknown, defaulting to 1000 [ 316.165836][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1977'. [ 316.345707][T13695] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1978'. [ 316.379391][T13683] lo speed is unknown, defaulting to 1000 [ 316.623474][T13703] xt_TPROXY: Can be used only with -p tcp or -p udp [ 316.776615][T13701] syz.1.1980 (13701) used greatest stack depth: 17864 bytes left [ 316.868059][T13709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1982'. [ 317.149947][T13712] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1983'. [ 317.880542][T13732] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 318.292035][T13748] netlink: 'syz.4.1991': attribute type 4 has an invalid length. [ 318.443332][T13752] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1992'. [ 318.571746][T13756] lo speed is unknown, defaulting to 1000 [ 318.633064][T13758] sctp: [Deprecated]: syz.4.1995 (pid 13758) Use of int in max_burst socket option. [ 318.633064][T13758] Use struct sctp_assoc_value instead [ 319.754392][T13790] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2004'. [ 319.954599][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2007'. [ 320.213151][T13807] netlink: 'syz.1.2008': attribute type 7 has an invalid length. [ 320.240302][T13806] netlink: 'syz.1.2008': attribute type 7 has an invalid length. [ 320.301712][T13810] dvmrp8: entered allmulticast mode [ 320.477158][T13815] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2011'. [ 320.545896][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 320.697059][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2015'. [ 320.719250][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2015'. [ 320.799420][T13832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'. [ 321.329912][T13849] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2022'. [ 321.356049][T13851] netlink: 'syz.4.2020': attribute type 1 has an invalid length. [ 321.371165][T13851] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 321.571735][T13863] xt_connbytes: Forcing CT accounting to be enabled [ 321.624532][T13866] netlink: 'syz.4.2025': attribute type 4 has an invalid length. [ 321.651986][T13863] xt_CT: No such helper "syz0" [ 322.006971][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 322.093994][T13883] netlink: 'syz.0.2030': attribute type 83 has an invalid length. [ 322.773718][ T5856] Bluetooth: hci3: link tx timeout [ 322.779166][ T5856] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 322.789486][ T5859] Bluetooth: hci3: link tx timeout [ 322.794673][ T5859] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 322.802798][ T5859] Bluetooth: hci3: link tx timeout [ 322.808157][ T5859] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 322.816100][ T5859] Bluetooth: hci3: link tx timeout [ 322.821360][ T5859] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 323.750471][T13923] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2036'. [ 324.811187][ T5859] Bluetooth: hci3: command 0x0405 tx timeout [ 325.066439][T13905] lo speed is unknown, defaulting to 1000 [ 325.126419][T13928] netlink: 'syz.3.2038': attribute type 39 has an invalid length. [ 325.136774][T13930] __nla_validate_parse: 5 callbacks suppressed [ 325.136796][T13930] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2037'. [ 325.170596][T13932] netlink: 'syz.1.2039': attribute type 1 has an invalid length. [ 325.212778][T13932] 8021q: adding VLAN 0 to HW filter on device bond8 [ 325.266694][T13932] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 325.283186][T13932] bond8: (slave batadv1): making interface the new active one [ 325.305963][T13935] x_tables: duplicate underflow at hook 2 [ 325.330826][T13932] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 325.762927][T13949] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2044'. [ 325.784500][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2042'. [ 325.848878][T13946] geneve2: entered promiscuous mode [ 325.874312][ T6497] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.895691][ T6497] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.929448][ T6497] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.950092][ T6497] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.180783][T13957] lo speed is unknown, defaulting to 1000 [ 326.262927][T13969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2050'. [ 326.296047][T13969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2050'. [ 326.381062][T13974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2052'. [ 326.766076][T13985] lo speed is unknown, defaulting to 1000 [ 327.272462][T14001] syzkaller0: entered promiscuous mode [ 327.280565][T14001] syzkaller0: entered allmulticast mode [ 329.144388][T14010] xt_hashlimit: size too large, truncated to 1048576 [ 329.257200][T14013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2061'. [ 329.525917][T14018] ip6tnl0: Master is either lo or non-ether device [ 329.844198][T14031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2066'. [ 329.875829][T14031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2066'. [ 330.132005][T13985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.230144][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2070'. [ 330.342928][T14046] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 330.368332][T14046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2072'. [ 331.377468][T14087] dvmrp0: left allmulticast mode [ 331.973511][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'. [ 332.237769][T14124] netlink: 'syz.0.2097': attribute type 1 has an invalid length. [ 332.433503][T14132] veth5: entered promiscuous mode [ 332.534412][T14124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2097'. [ 333.040613][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2105'. [ 333.117327][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2105'. [ 333.146501][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2105'. [ 333.159782][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 333.196198][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2105'. [ 333.246084][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2105'. [ 333.536283][T14190] netlink: 'syz.1.2110': attribute type 7 has an invalid length. [ 333.580943][T14194] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20003 [ 334.119337][T14211] tipc: Enabled bearer , priority 0 [ 334.196766][T14207] tipc: Resetting bearer [ 334.206713][T14207] netlink: 'syz.1.2117': attribute type 2 has an invalid length. [ 334.280209][T14207] þ: entered promiscuous mode [ 334.361679][T14218] syzkaller0: entered promiscuous mode [ 334.411052][T14218] syzkaller0: entered allmulticast mode [ 334.465896][T14206] tipc: Resetting bearer [ 334.546344][T14206] tipc: Disabling bearer [ 335.285252][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 336.565347][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 337.283599][T14229] netlink: 'syz.1.2122': attribute type 13 has an invalid length. [ 337.307824][T14229] netlink: 'syz.1.2122': attribute type 17 has an invalid length. [ 337.326883][T14235] xt_bpf: check failed: parse error [ 337.410286][T14229] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.432714][T14229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.491760][T14236] lo speed is unknown, defaulting to 1000 [ 337.556981][T14229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.660560][T14229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.725788][T14229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.017698][T14271] __nla_validate_parse: 30 callbacks suppressed [ 338.017722][T14271] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2134'. [ 338.133984][T14242] lo speed is unknown, defaulting to 1000 [ 338.883307][T14301] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2142'. [ 339.518777][T14315] xt_CT: No such helper "syz1" [ 339.563130][T14318] xt_CT: No such helper "pptp" [ 339.829171][T14328] netlink: 'syz.3.2146': attribute type 1 has an invalid length. [ 340.402029][T14346] tipc: Enabling of bearer rejected, failed to enable media [ 340.473128][T14353] netlink: 'syz.4.2150': attribute type 10 has an invalid length. [ 340.554305][T14354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2150'. [ 340.609844][T14353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2150'. [ 340.638604][T14354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 340.767550][T14353] team0: Port device geneve0 added [ 340.824539][T14354] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 341.292537][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2157'. [ 341.352052][T14389] vxlan0: entered promiscuous mode [ 341.357731][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'. [ 341.367328][T14389] vxlan0: entered allmulticast mode [ 341.384097][ T4074] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.401713][ T4074] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.440742][ T4074] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.461706][ T4074] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.543225][T14401] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.2163'. [ 341.634216][T14406] netlink: 'syz.3.2165': attribute type 1 has an invalid length. [ 341.642891][T14410] tipc: Enabling of bearer rejected, failed to enable media [ 341.943847][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2167'. [ 342.062264][T14433] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2171'. [ 342.284080][T14449] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 342.671277][T14465] tipc: Enabling of bearer rejected, failed to enable media [ 342.791952][T14473] netlink: 'syz.0.2182': attribute type 1 has an invalid length. [ 342.873049][T14473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.887260][T14477] netlink: 'syz.1.2183': attribute type 30 has an invalid length. [ 342.931284][T14481] bond2: (slave bridge4): making interface the new active one [ 342.943334][T14481] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 342.973930][ T59] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.049385][T14473] bond2: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 343.142939][ T59] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.157080][ T59] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.198783][ T59] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.395578][T14507] __nla_validate_parse: 4 callbacks suppressed [ 343.395601][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2190'. [ 343.607053][T14512] syzkaller0: entered promiscuous mode [ 343.612718][T14512] syzkaller0: entered allmulticast mode [ 343.736078][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2195'. [ 343.753759][T14525] tipc: Enabling of bearer rejected, failed to enable media [ 344.168261][T14540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2200'. [ 344.291199][T14540] lo speed is unknown, defaulting to 1000 [ 344.310498][T14547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2199'. [ 344.399536][T14546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.518501][T14546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.583994][T14546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.651719][T14560] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2203'. [ 345.154271][T14576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2207'. [ 345.171555][T14576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.183526][T14576] bpq0: entered promiscuous mode [ 345.376926][T14581] tipc: Enabling of bearer rejected, failed to enable media [ 345.999171][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2214'. [ 346.284630][T14615] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 346.290046][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2216'. [ 346.311828][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2216'. [ 346.344790][T14615] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2215'. [ 347.639142][T14660] lo speed is unknown, defaulting to 1000 [ 348.004149][T14665] lo speed is unknown, defaulting to 1000 [ 348.351369][T14669] veth5: entered promiscuous mode [ 348.696769][T14679] __nla_validate_parse: 2 callbacks suppressed [ 348.696791][T14679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2228'. [ 348.858422][T14682] netlink: 'syz.1.2231': attribute type 3 has an invalid length. [ 349.033848][T14684] tipc: Enabling of bearer rejected, failed to enable media [ 349.156351][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2234'. [ 349.175117][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2234'. [ 349.184058][T14691] netlink: 'syz.3.2234': attribute type 13 has an invalid length. [ 349.237355][T14691] netlink: 'syz.3.2234': attribute type 11 has an invalid length. [ 349.299492][T14695] gre0: entered allmulticast mode [ 349.356416][T14694] lo speed is unknown, defaulting to 1000 [ 349.362391][T14694] lo speed is unknown, defaulting to 1000 [ 349.391179][T14695] netlink: 'syz.4.2235': attribute type 1 has an invalid length. [ 349.417923][T14695] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2235'. [ 349.437063][T14694] lo speed is unknown, defaulting to 1000 [ 349.443103][T14700] netlink: 'syz.4.2235': attribute type 1 has an invalid length. [ 349.467810][T14700] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2235'. [ 349.490056][T14694] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 349.649041][T14694] lo speed is unknown, defaulting to 1000 [ 349.830292][T14694] lo speed is unknown, defaulting to 1000 [ 349.852435][T14694] lo speed is unknown, defaulting to 1000 [ 349.885029][T14694] lo speed is unknown, defaulting to 1000 [ 349.892860][T14694] lo speed is unknown, defaulting to 1000 [ 349.898879][T14712] bpq0: left promiscuous mode [ 349.979968][T14694] lo speed is unknown, defaulting to 1000 [ 350.025498][T14719] siw: device registration error -23 [ 350.059564][T14719] netlink: 'syz.3.2240': attribute type 2 has an invalid length. [ 350.067545][T14719] netlink: 'syz.3.2240': attribute type 8 has an invalid length. [ 350.079990][T14719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2240'. [ 350.144119][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2241'. [ 350.228963][T14723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.628336][T14735] lo speed is unknown, defaulting to 1000 [ 351.109980][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2251'. [ 351.119143][T14748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.333441][T14759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2253'. [ 351.490318][T14759] lo speed is unknown, defaulting to 1000 [ 351.496074][T14735] lo speed is unknown, defaulting to 1000 [ 351.568133][T14767] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 351.586289][T14767] netlink: 'syz.0.2255': attribute type 2 has an invalid length. [ 351.594457][T14767] netlink: 'syz.0.2255': attribute type 8 has an invalid length. [ 351.647876][T14767] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.2255'. [ 351.937964][T14759] lo speed is unknown, defaulting to 1000 [ 352.276719][T14777] block nbd0: not configured, cannot reconfigure [ 352.452125][T14775] lo speed is unknown, defaulting to 1000 [ 352.944707][T14780] lo speed is unknown, defaulting to 1000 [ 352.967231][T14798] tipc: Enabled bearer , priority 0 [ 352.974729][T14799] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 352.982574][T14799] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 352.991512][T14799] tipc: Resetting bearer [ 353.000862][ T49] tipc: Resetting bearer [ 353.316606][T14803] lo speed is unknown, defaulting to 1000 [ 353.388327][T14775] lo speed is unknown, defaulting to 1000 [ 353.403648][T14780] lo speed is unknown, defaulting to 1000 [ 353.621555][T14803] lo speed is unknown, defaulting to 1000 [ 354.096734][T14815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.252348][T14822] __nla_validate_parse: 5 callbacks suppressed [ 354.252370][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2265'. [ 354.937668][T14844] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2271'. [ 355.054762][T14849] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2273'. [ 355.075305][T14849] 0ªX¹¦À: renamed from caif0 [ 355.093784][T14849] 0ªX¹¦À: entered allmulticast mode [ 355.100211][T14849] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 355.296643][T14861] netlink: 'syz.3.2277': attribute type 3 has an invalid length. [ 355.463906][T14872] set match dimension is over the limit! [ 355.694202][T14882] pimreg3: entered allmulticast mode [ 355.983503][T14892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2287'. [ 356.012194][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 356.049433][T14892] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2287'. [ 356.068267][T14893] tipc: Enabling of bearer rejected, failed to enable media [ 356.575715][T14921] batadv_slave_0: entered promiscuous mode [ 356.589291][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2295'. [ 356.614233][T14921] netlink: 'syz.2.2293': attribute type 3 has an invalid length. [ 356.643365][T14916] lo speed is unknown, defaulting to 1000 [ 356.649548][T14921] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2293'. [ 356.947800][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 357.299865][T14910] batadv_slave_0: left promiscuous mode [ 357.467480][T14955] netlink: 'syz.4.2303': attribute type 10 has an invalid length. [ 357.479811][T14954] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2304'. [ 357.521166][T14955] tipc: Resetting bearer [ 357.541426][T14955] tipc: Resetting bearer [ 357.602418][T14955] bond0: (slave team0): Enslaving as an active interface with an up link [ 357.637240][T14916] lo speed is unknown, defaulting to 1000 [ 357.652051][T14963] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 357.669867][T14963] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 357.715544][T14966] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 357.741527][T14966] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 358.031388][T14978] lo speed is unknown, defaulting to 1000 [ 358.170431][T14994] xt_TCPMSS: Only works on TCP SYN packets [ 358.330807][T15003] SET target dimension over the limit! [ 358.363456][T14992] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 358.551485][T14992] lo speed is unknown, defaulting to 1000 [ 358.558098][T14978] lo speed is unknown, defaulting to 1000 [ 358.690465][T15013] tipc: Enabling of bearer rejected, failed to enable media [ 359.052918][T14992] lo speed is unknown, defaulting to 1000 [ 359.851354][ T30] audit: type=1804 audit(1753521835.796:7): pid=15032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2324" name="memory.events" dev="tmpfs" ino=2414 res=1 errno=0 [ 359.916249][ T30] audit: type=1800 audit(1753521835.816:8): pid=15032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2324" name="memory.events" dev="tmpfs" ino=2414 res=0 errno=0 [ 359.981006][ T30] audit: type=1804 audit(1753521835.836:9): pid=15032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2324" name="memory.events" dev="tmpfs" ino=2414 res=1 errno=0 [ 360.086601][ T30] audit: type=1800 audit(1753521835.836:10): pid=15032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2324" name="memory.events" dev="tmpfs" ino=2414 res=0 errno=0 [ 360.164475][T15039] tipc: New replicast peer: 255.255.255.255 [ 360.173066][T15039] tipc: Enabled bearer , priority 10 [ 360.193175][T15039] __nla_validate_parse: 5 callbacks suppressed [ 360.193196][T15039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 360.213717][T15039] tipc: Disabling bearer [ 360.461197][T15052] netlink: 'syz.0.2331': attribute type 14 has an invalid length. [ 360.485812][T15052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2331'. [ 360.637290][T15057] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2333'. [ 360.693928][T15049] lo speed is unknown, defaulting to 1000 [ 361.011760][T15049] lo speed is unknown, defaulting to 1000 [ 362.262447][ T6487] bridge_slave_1: left allmulticast mode [ 362.269353][ T6487] bridge_slave_1: left promiscuous mode [ 362.281644][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.298579][ T6487] bridge_slave_0: left allmulticast mode [ 362.304301][ T6487] bridge_slave_0: left promiscuous mode [ 362.311144][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.585413][ T6487] erspan0 (unregistering): left promiscuous mode [ 362.629378][ T6487] gretap0 (unregistering): left promiscuous mode [ 362.646145][ T6487] bond3 (unregistering): (slave gretap1): Releasing active interface [ 362.733275][ T6487] bond2 (unregistering): (slave geneve2): Releasing active interface [ 363.362070][ T6487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.372351][ T6487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.381971][ T6487] bond0 (unregistering): Released all slaves [ 363.397784][ T6487] bond1 (unregistering): Released all slaves [ 363.511779][ T6487] bond2 (unregistering): Released all slaves [ 363.617367][ T6487] bond3 (unregistering): Released all slaves [ 363.702217][ T6487] : left promiscuous mode [ 363.788005][ T6487] k›*·]‘: left promiscuous mode [ 363.845367][ T6487] tipc: Disabling bearer [ 363.852098][ T6487] tipc: Left network mode [ 364.184377][ T6487] batadv_slave_1: left promiscuous mode [ 364.192389][ T6487] hsr_slave_0: left promiscuous mode [ 364.213938][ T6487] hsr_slave_1: left promiscuous mode [ 365.143321][ T6487] IPVS: stop unused estimator thread 0... [ 365.200846][ T6487] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.211503][ T6487] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 365.221582][ T6487] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.283298][ T6487] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.293227][ T6487] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 365.303572][ T6487] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.351038][ T6487] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.361122][ T6487] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 365.371551][ T6487] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.422032][ T6487] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.432158][ T6487] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 365.442293][ T6487] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.541403][ T6487] bridge_slave_1: left allmulticast mode [ 365.547302][ T6487] bridge_slave_1: left promiscuous mode [ 365.553081][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.563688][ T6487] bridge_slave_0: left allmulticast mode [ 365.570525][ T6487] bridge_slave_0: left promiscuous mode [ 365.576463][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.634377][ T6487] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 365.646327][ T6487] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 365.656130][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: kworker/u8:10 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 365.668395][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.678484][ T6487] Workqueue: netns cleanup_net [ 365.683296][ T6487] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 365.688952][ T6487] Code: ff ff ff e8 33 99 43 01 89 c5 31 ff 89 c6 e8 a8 39 93 f7 85 ed 74 45 e8 5f 35 93 f7 eb 05 e8 58 35 93 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 e2 44 f5 f7 49 8b 2c 24 49 8d 7c [ 365.708571][ T6487] RSP: 0018:ffffc9001bf4f1b8 EFLAGS: 00010206 [ 365.714664][ T6487] RAX: 000000001fffe000 RBX: 1ffff1100ab69482 RCX: ffff88806a505a00 [ 365.722672][ T6487] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 365.730658][ T6487] RBP: 0000000000000001 R08: ffffffff8fa236f7 R09: 1ffffffff1f446de [ 365.739114][ T6487] R10: dffffc0000000000 R11: fffffbfff1f446df R12: 00000000ffff0000 [ 365.747108][ T6487] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055b4a410 [ 365.755144][ T6487] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 365.764081][ T6487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.770691][ T6487] CR2: 00007f99e5f74460 CR3: 000000000df38000 CR4: 00000000003526f0 [ 365.778677][ T6487] Call Trace: [ 365.781972][ T6487] [ 365.784925][ T6487] __ipv6_dev_mc_dec+0x2e4/0x330 [ 365.789907][ T6487] __ipv6_ifa_notify+0x43d/0xac0 [ 365.794876][ T6487] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 365.800364][ T6487] ? __lock_acquire+0xab9/0xd20 [ 365.805228][ T6487] ? __local_bh_enable_ip+0x12d/0x1c0 [ 365.810608][ T6487] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.815831][ T6487] ? __local_bh_enable_ip+0x12d/0x1c0 [ 365.821292][ T6487] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 365.827018][ T6487] addrconf_ifdown+0xe69/0x1880 [ 365.831888][ T6487] ? tls_dev_event+0x717/0xec0 [ 365.836680][ T6487] ? __pfx_addrconf_ifdown+0x10/0x10 [ 365.842083][ T6487] addrconf_notify+0x1bc/0x1010 [ 365.846943][ T6487] notifier_call_chain+0x1b3/0x3e0 [ 365.852060][ T6487] netif_close_many+0x29c/0x410 [ 365.856918][ T6487] ? __pfx_netif_close_many+0x10/0x10 [ 365.862295][ T6487] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 365.868634][ T6487] ? unregister_netdevice_queue+0x1b3/0x380 [ 365.874533][ T6487] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 365.881301][ T6487] ? __pfx_call_rcu+0x10/0x10 [ 365.885991][ T6487] ? net_generic+0x1e/0x240 [ 365.890521][ T6487] ? remove_nexthop+0xdf/0x180 [ 365.895291][ T6487] ops_undo_list+0x3dc/0x990 [ 365.899881][ T6487] ? __pfx_ops_undo_list+0x10/0x10 [ 365.904992][ T6487] ? do_raw_spin_unlock+0x122/0x240 [ 365.910197][ T6487] cleanup_net+0x4c5/0x800 [ 365.914608][ T6487] ? __pfx_cleanup_net+0x10/0x10 [ 365.919542][ T6487] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.924760][ T6487] ? process_scheduled_works+0x9ef/0x17b0 [ 365.930475][ T6487] ? process_scheduled_works+0x9ef/0x17b0 [ 365.936204][ T6487] process_scheduled_works+0xae1/0x17b0 [ 365.941786][ T6487] ? __pfx_process_scheduled_works+0x10/0x10 [ 365.947785][ T6487] worker_thread+0x8a0/0xda0 [ 365.952407][ T6487] kthread+0x70e/0x8a0 [ 365.956516][ T6487] ? __pfx_worker_thread+0x10/0x10 [ 365.961716][ T6487] ? __pfx_kthread+0x10/0x10 [ 365.966333][ T6487] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.971556][ T6487] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.976770][ T6487] ? __pfx_kthread+0x10/0x10 [ 365.981409][ T6487] ret_from_fork+0x3fc/0x770 [ 365.986014][ T6487] ? __pfx_ret_from_fork+0x10/0x10 [ 365.991162][ T6487] ? __switch_to_asm+0x39/0x70 [ 365.995938][ T6487] ? __switch_to_asm+0x33/0x70 [ 366.000733][ T6487] ? __pfx_kthread+0x10/0x10 [ 366.005333][ T6487] ret_from_fork_asm+0x1a/0x30 [ 366.010116][ T6487] [ 366.013142][ T6487] Modules linked in: [ 366.018555][ T6487] ---[ end trace 0000000000000000 ]--- [ 366.024358][ T6487] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 366.031782][ T6487] Code: ff ff ff e8 33 99 43 01 89 c5 31 ff 89 c6 e8 a8 39 93 f7 85 ed 74 45 e8 5f 35 93 f7 eb 05 e8 58 35 93 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 e2 44 f5 f7 49 8b 2c 24 49 8d 7c [ 366.051845][ T6487] RSP: 0018:ffffc9001bf4f1b8 EFLAGS: 00010206 [ 366.058273][ T6487] RAX: 000000001fffe000 RBX: 1ffff1100ab69482 RCX: ffff88806a505a00 [ 366.066413][ T6487] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 366.074437][ T6487] RBP: 0000000000000001 R08: ffffffff8fa236f7 R09: 1ffffffff1f446de [ 366.082491][ T6487] R10: dffffc0000000000 R11: fffffbfff1f446df R12: 00000000ffff0000 [ 366.090751][ T6487] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055b4a410 [ 366.099047][ T6487] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 366.108146][ T6487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.114941][ T6487] CR2: 000055782f0f3000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 366.122963][ T6487] Kernel panic - not syncing: Fatal exception [ 366.129488][ T6487] Kernel Offset: disabled [ 366.133862][ T6487] Rebooting in 86400 seconds..