last executing test programs: 3m49.706780617s ago: executing program 4 (id=2902): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) socket(0x37, 0x80000, 0x5) 3m49.616875009s ago: executing program 4 (id=2906): r0 = socket(0x9, 0x5, 0x3) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="df4800000000000000000c00000014000380100003800c00018008000100030000000c00018008000100", @ANYRES32=r3, @ANYBLOB="2fe646271865106891896044634d16aed724fef6754b47a5dc1197b6c218a79eb400202417de85534cf0fdf9e355803257a951003ab212eaa8b526fd69615ac67b73609da6dd1d38580badad52db8d2822851631c364730f6e19c53b2110d8bd5700e731a22e6659"], 0x34}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x2}}}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={0xffffffffffffffff, &(0x7f00000005c0)="7f86f6e4", &(0x7f00000006c0)=""/47}, 0x20) recvmmsg(r7, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}}], 0x2, 0x11, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00o', @ANYRES16=r13, @ANYBLOB="0100fefffffffedbdf250f00000008000300", @ANYRES32=r12, @ANYBLOB="0500330002000000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r14 = getpid() sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x52, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001200010a00000000000000000100000044001f00", @ANYRES32=r14, @ANYBLOB="35e4b40d00078871560786846696317435bd33901de640ca12b489e1d273c4cdcdca7cf03ca0d2827491eb195c9fe33f2099"], 0xe}}, 0x84000) r15 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x400001, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r15, 0x7434) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) 3m49.393058028s ago: executing program 4 (id=2910): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071106e00000000001d300200000000004704000001ed03040f030000000000001d440000000000006b0a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 3m42.865135087s ago: executing program 4 (id=2912): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) socket$kcm(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r4], 0x30}}, 0x0) 3m42.719681123s ago: executing program 4 (id=3016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x1, 0x0, 0x2, 0x1, 0xc26, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x9, 0x3, 0x9}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x8017}}, @TCA_NETEM_RATE={0x14, 0x6, {0x400, 0x671146ba, 0x8, 0xff}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x8}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x81, 0x9}}]}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m41.843941023s ago: executing program 4 (id=3029): pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getchain={0x44, 0x66, 0x400, 0x70bd2c, 0xfe4, {0x0, 0x0, 0x0, r4, {0xb, 0xffe0}, {0xa, 0xd}, {0xa, 0xb}}, [{0x8, 0xb, 0xb3ca}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5d9}, {0x8, 0xb, 0x4}]}, 0x44}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000300)={'syz_tun\x00'}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @random="50a245d5cde0", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r9, 0x400454cc, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, r8, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x29}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20084054}, 0x48884) getsockopt$bt_hci(r5, 0x11e, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000300)=0x40) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 3m26.604328412s ago: executing program 32 (id=3029): pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getchain={0x44, 0x66, 0x400, 0x70bd2c, 0xfe4, {0x0, 0x0, 0x0, r4, {0xb, 0xffe0}, {0xa, 0xd}, {0xa, 0xb}}, [{0x8, 0xb, 0xb3ca}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5d9}, {0x8, 0xb, 0x4}]}, 0x44}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000300)={'syz_tun\x00'}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @random="50a245d5cde0", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r9, 0x400454cc, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, r8, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x29}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20084054}, 0x48884) getsockopt$bt_hci(r5, 0x11e, 0x1, 0x0, &(0x7f0000000740)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000300)=0x40) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x18, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4.206446448s ago: executing program 2 (id=6295): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000004480), 0x10) connect$inet6(r4, &(0x7f0000004980)={0xa, 0x4e23, 0x6, @private0, 0x7fff}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x3, 0xfffffff9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0x4, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dd, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x7, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0xe, 0x5d41, 0x1, 0x2a940, 0x0, 0xb, 0x8, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0xc, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0xfff, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x488}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001ec0)={0x0, 0x8006}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000680)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004b00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 3.867074451s ago: executing program 2 (id=6300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067656e65766500000c0002a3060005004e220000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.749456862s ago: executing program 2 (id=6301): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_ID={0x8}]}, 0x2c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@private=0xa010101, @in=@multicast1}, {@in=@multicast2, 0x4d6, 0x32}, @in=@dev, {0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x2, 0x2}, [@algo_auth={0x48, 0x1, {{'sha384-avx\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x2056, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x2020, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x200, "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"}, {0x0, 0x200, "a57f50efcc48763b0a8af3cf9d86f7e4c11e4cff500bd3941c41137b3166165daeb57e5b6263affa1faff7e34295c98cf2d3a63b6a918012980123d4a22db60e1104cfd91882adbf22ecbb0871722bcc6d10a421dd20a0198d179889616710d9fab21b7a7c072efc5ab2e99bd2b7c307d5501423c17d2e1a183a186077086894c860bf80c74c39223b2e25c0d3a1d0b1e16f11241a99ba55128e265b967d8dadce3e0c910221ca828ad6ce7a3d92e00a5104e5eb0c6d18ad39aa2d35e6c778994bbd0b06617574451d2a2f48028246f07cf649417902ee329cc4f6d3b6dd0bf91f072a6ddd73b9f6a5746a0cfe4db6ba03e782e5bfda0a212967de46d7c378753824d700e45eee8dc82e325fbf3773788b43383be21a9469dd4fefdd7f436d6f2c3cf3de6577fefc1885c38b98809f832afc4605157b113dd61e4ac0e40cb0b31a4b2a579c4d95442c02564704604aa47f0bf2928cdf9881663a70dd1fd490dd16698757789cba01eec35d6457ba077d278860ea3ed15906b0ea1cb90b20e532c4b552f6de8c4bc6b111f3ec4a259966c91ee6832d814c5dc30667a100c1c3d0c469131371efe7993324fa4a50c08c57f7f13aff64e3637906fc14c62ecc55a611d67b7c234a42790afdc89488da642a63e344ebca2ac02511a3106c753534871eb5017fb873ea8dd7c6021855e228f1838e5d79c4d632ab02c3b46df12782c6052c8222037c11e1b40ee4779f7b2efdd7512bfca3f83d892b0cd078c076412e02e541cb7278a6a86a91916daaf4cbde5064def62b2b67fd8798ebc1be714835d6c6983756a6183f346bbe17153ee4f303cf2d873926c71df52b65cf61bf28ef23d0fbbfda021aa20b5a090e6416b952fb6368d8634b31d642023e8ecb6d17b533a5e4c34dedcc78b5a8cd5f4fd5add8066bf0bc885e9ee4c7d5e696190034ab6a98f7fe06db416e497f0fd9142b8d30e1698af033120875b0ccae5bb2609a8709126cb60693e0be2bf098e77ef1d32bf626fa3cfa52655ab3225d3f9cf16f2c8b23630b38044cfc543764e40d46e715f62fd91c1973c8fc1cfd219996e28ff72f8f1f609b8f58bd81d03df2ffd232d3caeb188f901c2a4b8be244cb3e171479bae3588c72183e5ab45b54d2fa0766bd254c26bbcd60aa426d6164484bb5edebe57ad2bb6ae4220c72f2a5ea0f742b4c1c58ab581160c742a612b295db8eb31d17dbd011e527b38f4b288b2407d537b4335b0bded96e6bf7f1fb378952d186e68eef41ce506148495b068ed70f6bf041b279aaf93e5f2ba2960068b26c0088c72331c38d0a1ea2cbe61d1deaf664a4b4b65d2b83dd9e5ca8a9ba5d2fada409a49a69c1028ded14f7380d310515badec10f6afdaa885f9990a848aaa307632498e0481cd8c94618176ca70ea7653657384a71a6918d84621002bcd964a5d117ab7e0a434b0b010cfc2117487159233a87e9698e8443fe085fb996976bbe557843aa46683cd9d29534485476cca6a342785cffcf23b6323e4ffec4c7ca082e8e857226cbdf2eb7ee82086f7aba2a74a6717a43f496919c8f24cf27609611913b31789f7bafd523427c518b8951110a8c8b6f42d7730a23b1df9c1ca04c9b4803399974277d577f17d6898368e27d1eb0d64a6ce56dfab75ed0e247c74c4857a0c7084ab1019f579e5f0e55187ef051f38b9650b8fdb3d13b98f74bed7faa1f54c884b21c0585f8406802b2c9c14567f604080341244ebec456f9779cfc722d6f1167f32d4a9854d84f3876a8f978b43b2a04d004a537672ae0ec523d28a899e1c2d1426fac6ccff3ab901295ed903302f81508fa765d1376bcc9cf73fbd2f4aa43995520941824bd344f517d155d92806e69a482638e3f2d4857a69413bd15d0cd9bc00b0727032e928762a8d510ef4485b54c42e552f7b30a802908109dba6bd6009aa39025ea5a11f40d1960694365051c902e0bcbff6ece5e9557c8692583476ec7cf4a8c487d663bf1ee9a5302062885c030f4de01c28437eeccb4976b0a95511d2850521cc3d1c38832d7c173a3bd20b4a2c36267994571c0ebf40da46e0a6767629e25676187c18270f554e1d387249090f673f1f032633a3b1c93cc4d85f34ad292869708205c874eab67636f228b12ec6baac3f76e50a12814f9007c5e5bc75e0fc3d93311fe0a3d348c4d4e9820fcc64d4ac9779c66ed41439199d79d61d70b8864710aafcafad489b5b0b6b9ad9600a8f4b1b4657dfaf58578812a61b7867c4ca9a75699f0664efa49154e1a3f4152988b8914314e60c64da6279bc28ff8984ee65ef3d522c89b6233d74154408f1ee78e2e4914a88b79d7b5e1870f4b84cd08dd6034b723d461fd6bab9de0463dea867cca987b2a02bbf7c8e187794f519f5eabcd84cbf4b1a8f6283edc84d845b4baede14093f8231f4468fca51c5d9b6377e6a5e3ead1fb12fcfe992fdd4d3fda6cc1d646fda361ce0b3e581b6cfb4b0de8768bc779b6cc1cb83a43a298f1d9b7cc49e567eb6824d39603082b776c3d138cc3492305c469201866ec8c13af13c511e0ff722a5dec89e753e115d24b3d014c458b31794e2fae87aa889de0a0a3fc594729c8042767f647b625c21daddae198fdcc01eddb26f36e3ab3ab2e32bc2cb4b3d48743ec2d8ff7942bd81f5daeedbf677f35a444e44d5780a81fb1cb8a6ff6615d1bbca495c36d56de1adbaa6024370b4c63996625a0d66a3650f1b4cee75b480aa98b5eb8e81f133b7939a151451289ab5d1fded3d7cce70d663cc69136f1555fd704f5fcc245b19314dc1e7cd5daa447f335a111838887ce02c1ad8ba72f775574428028c37b2282e09ea51c8966b53f3c81ef92fb220d4580a02c2c3fecea3810ff678280b42444d9f3b51a2909e80db62b739afb950aa7c54b2b0e0076f45c8f94c6af5d2ebcd4f7f47a11b2ea78418633accde1ddc926683a62dc33753e35bd95b38a4b4154f70d912a733582f04f49258b75125eab25474d2f9a468c5cf43b518f033bed6eb61107f690cbf08de7e5864d2a611c44e2c4f81c24fc3888de1b9b918627def058458188d612d3686c0de6b7791e791d0c97c871aa0918e8c0b1e1935baa195894980777311a91039ea499f2acb231356156b87af4ead19b9edcac7fa4217ef383cff6345edf1d504934facc905ff51cf2e8546b3d646408ee5b9bc01ae9396a0fdd4e467a94848fab0d9716e1262f27c06327db8fa206314dbb6784aa89c40395bfd0f2cc8aeab96e0304b11079a8f200c9b13969d416eb29a1ae4e92de6491afc323e68f86e61bd8476090d8ac5bc7ecb24433557e73c1bf3f2a957bd92035e493648570c4a90106af7361d0438685f78ffe6be13f7f67583bb14a5f0c1666d69cb38a43260ad57ff9ffbbaf1ca1dafbcac11bbba1abef00114372d611b5fd5ab50f361d7042c3ba586acb3f0ed1668e38e625843059fc3070344dadc1d49edf2a45a3534306e5eaae8d0787c9e5cc03c3cac3a3e5ce658be291c781a3465d0d81b46768b35250d1422090cdfca12713349b80a355417a6c06d88f90fdb6d437cd92b5907470b06c87c2c161f05370ba00921d2ed6dc8f39376b50fe01396aa0f9057821a22cb18e6d993a5c7671d16ad1856229bde0499172f80173552a3c07dde82e0e43795ede5e42c0d21b6633947171ae8ebefd3c901ac7895354cedea88a5761bdbc34b2fd412ebc919de765b685bf90c55daee2110517f6e28467cb5eea451994ea288c1e83ae4c46f417bd2c21c8c28ab91b676414c0af18ded975d1ef44d2cda61aed7634bd1054b4dadb659418eb6993af78804f0cf4178162c97320635a5a0720a94656fcaa600c6cf9e52d59dfeadf9ffb203b3d914274389bde0bb95a8e9372b54b112fbb299de82921069dd863a03c306c6cd3a7b8acecfa6d95bd729277bdae8753bd52ad091bc36bff3f3cbfa85d30624d1b1d6c7a49e808c278c338c0d97b34d329180230369bc15873f962f23dca8d3bed3e5cdb6af4a16006e442460e2a7e8b3f896169721d245b492592734c67ba7a1f5caa0c857611e2b8ec43124ea8492831a9af827b8e41cf65e703c3ed816e65c5d94555a07c2486778b1ab0171ce615b6276f8a7767941024afedabd5512dcdd2412aaa86c6814f08574871d5f4afc5a4985b74a5c528162399514167d92ca0c938ea74eabf6ec91a89af1394b527f4b1dd379d065959728b4499d96e78e4f7a05bb77673439699b79d06f4b51ff420f6edade34e34669f2675fc3a8373c68e8306cdde9a42de303cbb49a563f689d63813b58a137b3354ba41a2ec73ee1fbca06b1381a8fbedb0a3937fc68d47dfef55a2e751474cabd3851ba80625645dc59aaabc498e441c75bfdbacb4430f0caecbba3afd027d293de1a93983c07b30561ad087173da9eab611d99a0224b9ee7c3b814dfe7d3f76a300e6c21fa287dfb57830aae8ed1c88464887892f747cee07a02250b7270b4ea9e8a049fbfaa88fdf17297c9ac77e457c3e33f3660ab4af6f8da55c91de1a38f2fe961646ad650e764ef8ed29524e4f8077e05585f3651b5b5c5ad5d2d9a1442e59e0e65df6a5bb3eea93619f6864449f8c202fc2668dfc9343e650ce349f645e5b4257215b1a34b5cf0fcc87592024aa72f31b1627faa7849fd8bba8baffd6f61ca64ff81ee44696cb4f941853879b96ae1549c295ba441b6601777f7b8d2847908d721fc1ae831d81981720ec2558652d14af1bbc71758d81c447a472af4aba4e237ce9e5af7ce055836627f87012e6af7321f73248ceeea8c8daa2daa9a92af3d181f73386060a9aa7fc96e68601ee6638a69b9bd75a08cd7a61e184ae75fc3faa79c7fa01b7db45fcfdbaabc96c548e2ae658257834cf687893eeb7ebda8ea2d1a63fcdc42fcfcc37b1e107effdf0de42a964eef78e4020fe7a68b8941eb5677ba3430762cae134a2b0764ffd28bbba7490fd7addbb72655a1ed907fd74684e79cc0513945aced46e91d694b5ef6db6a4b42c150adfd84d2a83714c81374744c33483f0549a71bd894ca56728c9f17fcbbae3ae45d8f77303ec9b71adf926db48efb73b7ab1e4771d78ebc21127e0e49682283fb6ce7a0b2e7b665453c47edb294e338e83fff9934ea3e2e750e0877697c9dfdf6f85b4f30b0e79a22bc4cd28515f95e551046f59bc4a829ec75a4cbd72970f3f13765cac82f843e39259870a0e3fccfff89cf5b38ac4ef25a12435d8ec5fbcd606b0829680fa0037d4064efec8aea7d356cf4f9ff08fd098a1a2eb673cd3caf8bc406a5019352e217e92fdd6a1624cebceac0670cbe7688440db663cf1aa17bff5696b038559d8829da7105c036f8aa60abcd39ce2f4e5574c7ab39c41e0d6bac303e77331006ff0cda8ee03ccea629224812ed03a54d6c09c01af289a4928e80bb0f7cb935c2546ab5722d16529b1896984c38bd5a25500b64c86460b0a5545370df5cac7ebac8b277083233cb7de42736b9e89d7b6d58679fe3671f740762d36089ed14ff65de2bd47fc2ec590e7c326055003882361003dc273e27114f54f296d6b70d13bc510c70feada309259bec230f7f4c3a2e5683bf8869bba29fc3d75851db9fb2f369f705b725854d5456b52e60606fca7f2704abab6c11fbfe1efa144781779936a7941cc95bde9340751ffc7db124cb01cb5236cf8367d3cfd2346d77a80d2ac6b16fa3d1b10b5b8a41977d1af67013f05a1eff1363b435c9503dad9254b2fd1abd131da1c844381ae9ae993d01f2512085eeebd8730"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) 3.699099703s ago: executing program 2 (id=6303): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x3b}}}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "12638d7a7e66f62acff92f75af"}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4001) (async, rerun: 64) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x1}], &(0x7f0000000240)='syzkaller\x00', 0x7, 0xd9, &(0x7f0000000280)=""/217, 0x40f00, 0x1f3bf053f8f00460, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x7, 0x8, 0xff}, 0x10, 0xd23d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r4, 0x0, 0x84, 0xd4, &(0x7f00000004c0)="f5aca69485fdd29cd7f014032a9df1a3d4243cdf47993ac673496f6313dadcdbad39849b6322b22ff433be17129bb0e56d82b87a543a41ac828fe72f4f942c5ec98b5b1e4fc99c94d8c216a932b8010aff5fa8639d8d183dac3ec6d5dd0e6f3c2afe0642c9f6ad6158f8a3d9000c73b6f5dd6fd5b2dfb1338cd918851af15a7eb87826b7", &(0x7f0000000580)=""/212, 0x4, 0x0, 0x5f, 0x1000, &(0x7f0000000680)="aa3192ee83af3f5d8639272010ed088c790b56f7613386fad141954e1b2bd53cb16bd3f71192deb69d4ca13c7757580eac5762806efa36e719d8240959ffa1071cb03824b235135b238702eeb2ebb35518988e6c2510e210732d79cd845661", &(0x7f0000000700)="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", 0x2, 0x0, 0x2}, 0x50) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001840)={'ip6tnl0\x00', &(0x7f00000017c0)={'ip6tnl0\x00', 0x0, 0x4, 0xd, 0x2, 0x9, 0x8, @dev={0xfe, 0x80, '\x00', 0x30}, @private2, 0x80, 0x8000, 0x3, 0x5}}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001880)={r2, 0x5}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r6, r7, 0x4, 0x5, 0x3}, 0x50) (async) pipe(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000001980)='bond_slave_0\x00') (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x7, '\x00', r6, r8, 0x2, 0x2, 0x5}, 0x50) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e00)={r9, 0x20, &(0x7f0000001dc0)={&(0x7f0000001d00)=""/125, 0x7d, 0x0, &(0x7f0000001d80)=""/42, 0x2a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x13, 0x29, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffff9}, @printk={@lld}, @ldst={0x3, 0x1, 0x3, 0xa, 0x5, 0x20, 0x7ffffffffffffff2}, @generic={0x99, 0x4, 0xc, 0xe9e, 0x722}, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x2, 0x1, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001bc0)='syzkaller\x00', 0x4, 0x54, &(0x7f0000001c00)=""/84, 0x1e00, 0x1, '\x00', r6, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001cc0)={0x3, 0x0, 0xfffff0e1, 0x4}, 0x10, r11, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001e40)=[{0x4, 0x4, 0x2, 0xb}, {0x5, 0x3, 0x2, 0x6}, {0x2, 0x1, 0xd, 0x3}], 0x10, 0xb7}, 0x94) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000001f40)={0x1, [0x101]}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000001f80)={0x0, 0x7ff}, &(0x7f0000001fc0)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000002000)=@assoc_value={r13, 0xad}, 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002040)=r11, 0x4) (async, rerun: 32) r14 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$IP_VS_SO_SET_ADD(r14, 0x0, 0x482, &(0x7f0000002080)={0x33, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x2, 'lc\x00', 0x0, 0x0, 0x72}, 0x2c) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002140)={r7, 0x58, &(0x7f00000020c0)}, 0x10) (async, rerun: 32) r15 = openat$cgroup_ro(r8, &(0x7f0000002180)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f00000021c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002200)=0x24) (async) r16 = socket$inet6(0xa, 0xa, 0x0) connect(r16, &(0x7f0000002240)=@llc={0x1a, 0x118, 0xb, 0x3, 0x5, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x80) 3.385826824s ago: executing program 2 (id=6307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={r2}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.197318583s ago: executing program 2 (id=6312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007080100000c0a01020000000000000000010000000900020073797a3200000000dc000380d8000080040001800800034000000001c50006407c2432aaf2e15835aab6f584ce76eb9b9fdd3d4c4b9feafeb308d37bc55ab62bf6fcaff3160414d6f1e7583c04910038802faf6b9c16e453c50ec7cd9286a6c4c1b8a1ba3df077f507cfac147e25e3c38a10be0fe68848bfac13345eaf260064e28dcaa9f994c2d8953b27d25f5890fa18948ab505a92917be71c0e16eb99124f79f22e4c0cd7478c9b0c696ff3c379b491fea694bec8f78cef1c15b33b0f6ac6ddaa777c44269f246f74a63c4c2431bfc62db738998804e13471f087cfff2d0980000000900010073797a30"], 0x194}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1.364885163s ago: executing program 0 (id=6338): syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8001}]}, @dstopts={0x62}], @echo_reply}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(r4, 0x0, 0x4, &(0x7f0000000040)="9f0910", 0x3) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000240)) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x20}}}]}, 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x8) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r6, 0xb0fe12b999fd9953, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) 1.105984285s ago: executing program 5 (id=6343): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}}, 0x1c}}, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) (async) r4 = openat$cgroup(r3, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='P'], 0x10}}], 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000e4d698e2b118bb6646df29f07ec725add03723e1e29caed5caf00bc8f290623951777deb5d24c3a1f4e38ad4ea22752eb02af6587988cf740f4bc08a935ebb6b9b27c486ef1e62c86270a65484b3912be6b1e2db3d630986a7845b2fc36d01f83017920a3fc898800e1d48be364d342131885e06252a71a76d68f4a81647e9f38b345e1562987799cb48f36c44250c3a7e8efd7aaf8270debd445024a01a", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYRESOCT], 0x74}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 1.085432623s ago: executing program 1 (id=6344): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x6, 0x1, @broadcast, @rand_addr, {[@timestamp={0x44, 0x18, 0x9d, 0x0, 0xd, [0x800, 0x1000, 0x8000, 0x3, 0xb]}, @timestamp_prespec={0x44, 0x14, 0x4, 0x3, 0x0, [{@multicast1=0xe000002f}, {@private=0xa010101}]}]}}}}}}}, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 991.038698ms ago: executing program 3 (id=6345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000002c0)={'ip_vti0\x00'}) r1 = socket$inet(0x2, 0x3, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x4, 0x3ef4, 0x68}, 0x2c) setsockopt$inet_buf(r1, 0x0, 0x2e, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4005000}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="38007dc0", @ANYBLOB="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", @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) connect$packet(r4, &(0x7f0000000240)={0x11, 0x1b, r5, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r11, @ANYRES16, @ANYRESOCT=r6], 0x114}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1a, 0x0, &(0x7f0000001100)=0x8) sendmsg$IPVS_CMD_NEW_DEST(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0xd0, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9e1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbe}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1b47}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4010}, 0x24002800) 885.94521ms ago: executing program 1 (id=6346): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4d, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711011000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 820.20473ms ago: executing program 5 (id=6347): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r1, r0, 0x0, 0xf03a0005) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x6, 0x8000, {{0x3b, 0x4, 0x1, 0x9, 0xec, 0x68, 0x0, 0x8f, 0x2f, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0x17, 0xad, [@local, @loopback, @loopback, @broadcast, @broadcast]}, @rr={0x7, 0x23, 0xab, [@local, @rand_addr=0x64010102, @broadcast, @local, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @cipso={0x86, 0x72, 0x0, [{0x1, 0x3, 'p'}, {0x6, 0x10, "6be3df8830fe9d1939b4320b1902"}, {0x0, 0x3, 'U'}, {0x6, 0x12, "5e90946528aef80d3e4c478ae728185f"}, {0x0, 0xf, "ddaab52ca3f68d005db7000908"}, {0x0, 0x4, "b27a"}, {0x0, 0xf, "6c08fd5e4661350dd934a3a5bf"}, {0x6, 0x5, "8711ea"}, {0x0, 0xc, "d4de4007f335666cb2e6"}, {0x0, 0x11, "be88ad2773030e5eaf57c6929e45cf"}]}, @timestamp={0x44, 0x2c, 0xd9, 0x0, 0x2, [0x1, 0x9, 0x753, 0x5, 0x4, 0x1, 0x57d1, 0x7fffffff, 0x2, 0xffffffff]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x3, 0x1002, 0x0, 0x201, r1, 0x0, '\x00', r2, 0xffffffffffffffff, 0xffffffff, 0x3, 0x1}, 0x50) 727.716214ms ago: executing program 0 (id=6348): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 64) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7b983e6c727d6b63, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) r2 = socket(0x2, 0x3, 0x100000001) setsockopt(r2, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) (async, rerun: 64) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) (rerun: 64) sendmsg$AUDIT_SET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x1, 0x0, r3, 0x80, 0xf1, 0x3, 0x6, 0x0, 0x8, 0xb53}}, 0x3c}}, 0x804) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x8000, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000000108030000000000000000000a0000017900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4841}, 0x400e010) (async) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYBLOB="a9e3c4c602ce535052079ed6fa1e82f5d953ab25a3e843d6a2a34e388de73580"], 0x34}}, 0x2c04c080) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 724.42197ms ago: executing program 5 (id=6349): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff0000000071104b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 653.981476ms ago: executing program 1 (id=6350): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c000000100003042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="150200010000000008000a00", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="2c00128009000100766c616e000000001c0002800600010000000000100004800c0001000300000008000000"], 0x5c}, 0x1, 0xba01}, 0x4000040) 648.32033ms ago: executing program 3 (id=6351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r1, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40000}, 0x10}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000100)=0x10, 0x4) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$tipc(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x501, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x101, 0x400}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4098) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000040)=ANY=[], 0x2cc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) 572.972991ms ago: executing program 5 (id=6352): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@getchain={0x0, 0x66, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {0x10, 0xfff2}, {0xfff1, 0xa}}, [{0x0, 0xb, 0x630}, {0x0, 0xb, 0x6}, {0x56, 0xb, 0x2}, {0x0, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1404c885}, 0x2000d8c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@getchain={0x0, 0x66, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {0x10, 0xfff2}, {0xfff1, 0xa}}, [{0x0, 0xb, 0x630}, {0x0, 0xb, 0x6}, {0x56, 0xb, 0x2}, {0x0, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1404c885}, 0x2000d8c0) (async) 465.911331ms ago: executing program 1 (id=6353): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) 465.464759ms ago: executing program 3 (id=6354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={r3}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x42af, 0x10, 0x39b8}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={r3}, &(0x7f00000001c0)=0x8) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r3, 0x42af, 0x10, 0x39b8}, 0x10) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) (async) 410.065199ms ago: executing program 0 (id=6355): r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, r5, 0x431, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRESHEX=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) close(r2) (async, rerun: 32) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500218311001fa2660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb301000000dbb7d553b4e92155", 0x39}], 0x1}, 0x20000050) 376.276092ms ago: executing program 3 (id=6356): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x900, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x4}, {0x8e8, 0x1, [@m_ipt={0x8e4, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x8ba, 0x6, "2d5f708f84edefe110bc942779883a64f7018874cd03429867aaaae74f24d73273a567697c06c326f7d977c93e903a431162585305252d3c00f2ab37a59b9f18b4da5e135cf262da517ab21b2a9d90e432cb466b59683c59b0c624003a59fe1e1454bf001784eb4e3221576d2fcf923221bb0540103952213d26fc8c537ac6eb83e4c0a506797d6da9d475ea8c10e046a8d313f6a2d6be90a162074ebdbb1989b298a9a07ba4bb9c8bd729ff6248a84371cb9881bb3d391e7fbccf9dc8c00bad5accea2b3f5852371ebe4d9c1e37fd7a2ceb7b1d5afa6dfd896b8cf63d8897524658f4a3c3fed5bee1f4f7ead06371994584a2959dea4359a08ce085c80ab2aee84d920816b548f8b361047e14e8852d9fdb6693d933e83b57e6d2af5bfaa456e737a1adbd63a4cdf5ab0ce422a7f8698e1ae5a951dcf5a87efacf555953668ef13a49bfe0e61a1a65ea97b076dd98d6ee830fc15e7495a91355f379259df50c64a76d7d464f85beb0c64238840bdeef77f580ccbe2c40dbde80efa936b5ca014d86fd5f37d5c9af95af6f412b2a3b910f333444100ad6a6eaf93d3b06c902081638a52f4924c880e8700da7ab4998914f643e81eec716f7bb9f91e58e3224675ba73c21bc7d85cad61068088c03af7b0adaeb396716fde28b693e0bd90d8a2c106e8225cbcacc882e5d9fb3145f290e0e28819e0345aacce3c2b06f2ea683c9e181a8f03dd7543176b7ac03b36062afef10bd06697d0f96eddb96cb568c6e8bd724f46dee9c788f8d8e5bcfc727943b8bab6a2b07f8b94660d265ebb22117efac51da461a1ff4ea31f4730dcc243099f592bf7aaab607a61074ee4c24b454c6365f1394af4e56a566a77c6c025f01ed0dec1c3b8089e8ed695bae915c5b3e5295de5efcd3815337b4554a2e3a70f9db63a5da03846412caa241e714dccb42f06c6e46903672e527219d1468d896ae35d35ca4fe98857e78460d704800a967ace50e645605da164819130cc0b52164452361e84c5b0f9ec2f0d39dbb8352ef3360ca80f2b3e484a6b70154cb1bba543200236525fc8a5b6eeb35ac5d6f2de9dca7b7c9fd42bee235a30cc112b8d6e9f5947a02642d76f5d3ee455574c4be0ebd7bd93cfd5fbcb52d543a77b40253069a7752424e675b9901fb1a8599585f7adb937f4e2d2adcb69b3a58bd364e24bb5c734ee678305e79957611793c177ed318e7879ad630f2aeba0814f30235a9e2f4a29cf3ecc79789ae8c3857d867a6b6e825af9ada9f2557dd997640d13955c5cc6c7b88b0d9c82ad13184aaa381a0ffea15ad65bbea9e7e77b439f15ef275a131747c2fa505cc1cf87c15163905cea212dd41daeb4d1e442e3f8946f453df99dea266db238245b5f4c808bd43767f22b2cc21c01f2225bf34726014c8e5bee3fe66940f90fd898b6e9ff43c5a951ec26a6ba553ae49c40a44def9dc57a608bf3840e538b8c458b69dd435f25044dc3e459dd09cbfe1b340cce4574ee178733a18986713a3135c9e4097924551c28d801709f9780e1934e4c85f9bcd99f9826e8804151d5273d4a89a5eeac7ecddd2ed9ddd1b3e234f8490ef4c23152c9d7a2dc229a58e04533f889c969edf498ea335b918960ae1893f27163ce8081e00fce242948fdba1d2586bb7b0ff61f2f35044711d47c1a3cfcdb35bc5a59176c7b13af57dd5280f71f1458eeba2861512473bd8908710dff35c71839ff982189907bcb0fffa7d5b74360cae89ed1ba25091312ebd0163aea5d57d6a4a1336f7b36f5b8558a624448434ef61755a74f19328ae4f6dac254603e2b1ad0bb45d15f1435396c710a3ec34c73d50524f41dd000db4a547a53b3e92dba0cfb0e0f6a871a92262a7851df7ce7f76319f8112d23467a79ae31859c78797025541ec5d610b16c0803b6e1f749875a3d0fd0bf83dc6e25e1540cd135f1055094ca620fd80c3c7c78117e07f6c9a44587f35a197d9ebab38a99c65a2edc0086ddcd60d52e29d953eac0b5be5713d23412330c181617e7ad776c1e3bc057e88f4a6106e35b016aeadb7c004bff20248622a6d3fe2a9f59bca217d17ab580220ac4da3dfa5bbbff43bdd748373d7777d0afebcf6d1e9bf50efe1609ad41c80cb14a524cabf54f7165d9ea946b13c77cfa7afeff5b6b897b35a7133bd610ee302aba49b67b86767355922cb9c522a1220db2ec222ee62e4945531d8a2fbf10a79f67cda984494bc9aeb570b23c9be8448cf69d86d246c27935cee8367a5401c8db3e891b349f89017660d2ef2a857511306a24a7e46f27fce812b258e1d6839a2b982c9da629e45861b9ffb7985d8b8c7f2dd829870425c010d6552b39f6020db103cd684820f4d26c4d010af09b6495f49046f1c5e146f1eac48a68469fea622eba0befe5a7be3ec03db8cdf3530d927225291d85a1382034b8bd2ff280e779338af4d826c8024235df4c60b1bff978abc42eb8329335ff5ae54747f65fd179f9446e6c415d1e5a29284703b3ca675ec83c4a485bcb2a53b877be66be9810a2a2b6d54816b7e6ad1a9d7465bcdd30028919747217dcbaea20eeaaadc7c468784a37b28443b8769a045552b55fd6f2717277f6af53b9426eec8a9586fd26e9301b31a7c0f64d7dc8319b495a8ab29740cef294206a5dd213f67d3ba5438ac3a02c01257a7943836d364493cc87a512f76f30cd10bb863acfa2b634437b718b35897a3be7840e1ec7f64b4eb6faa6ee0960cb0bee956b777f5c1a8e86a77914e4cb48bf0cc7e6a2b2f9ee7b7c5f8027349f2e9acb63c215d420243a99f3e4685e273c9728e581dda4a85636c526bc253cf126d50e45c572c5cccfa5969f8dc080467934f3d65c7c99da1baaf59f0a22058c2c5076826944cbc1953682d40ba2e69929333da35d36152f34880a55eecc96d5498ac372a611935f326eff2b3d0f3ac753577ecdd3cbfea80836e1db4f4c391825f72fa2dfbd85981a5efff717d3b3bbc4b4a2a4932aa848d72ef09ab493d3bb1a20f32c8fc8b36f44c72f7b78f2c20b08a90fb6e0c137a6233700c7f4bcd15318234450a78cc8b043ceb37b985cb25f3cda416a074fd985136860ef53c6082c27010e2e56875486de71b90afc7fc947e9e6308e2e7cfde02f09b91c1c8a454"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x900}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x900, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x4}, {0x8e8, 0x1, [@m_ipt={0x8e4, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x8ba, 0x6, "2d5f708f84edefe110bc942779883a64f7018874cd03429867aaaae74f24d73273a567697c06c326f7d977c93e903a431162585305252d3c00f2ab37a59b9f18b4da5e135cf262da517ab21b2a9d90e432cb466b59683c59b0c624003a59fe1e1454bf001784eb4e3221576d2fcf923221bb0540103952213d26fc8c537ac6eb83e4c0a506797d6da9d475ea8c10e046a8d313f6a2d6be90a162074ebdbb1989b298a9a07ba4bb9c8bd729ff6248a84371cb9881bb3d391e7fbccf9dc8c00bad5accea2b3f5852371ebe4d9c1e37fd7a2ceb7b1d5afa6dfd896b8cf63d8897524658f4a3c3fed5bee1f4f7ead06371994584a2959dea4359a08ce085c80ab2aee84d920816b548f8b361047e14e8852d9fdb6693d933e83b57e6d2af5bfaa456e737a1adbd63a4cdf5ab0ce422a7f8698e1ae5a951dcf5a87efacf555953668ef13a49bfe0e61a1a65ea97b076dd98d6ee830fc15e7495a91355f379259df50c64a76d7d464f85beb0c64238840bdeef77f580ccbe2c40dbde80efa936b5ca014d86fd5f37d5c9af95af6f412b2a3b910f333444100ad6a6eaf93d3b06c902081638a52f4924c880e8700da7ab4998914f643e81eec716f7bb9f91e58e3224675ba73c21bc7d85cad61068088c03af7b0adaeb396716fde28b693e0bd90d8a2c106e8225cbcacc882e5d9fb3145f290e0e28819e0345aacce3c2b06f2ea683c9e181a8f03dd7543176b7ac03b36062afef10bd06697d0f96eddb96cb568c6e8bd724f46dee9c788f8d8e5bcfc727943b8bab6a2b07f8b94660d265ebb22117efac51da461a1ff4ea31f4730dcc243099f592bf7aaab607a61074ee4c24b454c6365f1394af4e56a566a77c6c025f01ed0dec1c3b8089e8ed695bae915c5b3e5295de5efcd3815337b4554a2e3a70f9db63a5da03846412caa241e714dccb42f06c6e46903672e527219d1468d896ae35d35ca4fe98857e78460d704800a967ace50e645605da164819130cc0b52164452361e84c5b0f9ec2f0d39dbb8352ef3360ca80f2b3e484a6b70154cb1bba543200236525fc8a5b6eeb35ac5d6f2de9dca7b7c9fd42bee235a30cc112b8d6e9f5947a02642d76f5d3ee455574c4be0ebd7bd93cfd5fbcb52d543a77b40253069a7752424e675b9901fb1a8599585f7adb937f4e2d2adcb69b3a58bd364e24bb5c734ee678305e79957611793c177ed318e7879ad630f2aeba0814f30235a9e2f4a29cf3ecc79789ae8c3857d867a6b6e825af9ada9f2557dd997640d13955c5cc6c7b88b0d9c82ad13184aaa381a0ffea15ad65bbea9e7e77b439f15ef275a131747c2fa505cc1cf87c15163905cea212dd41daeb4d1e442e3f8946f453df99dea266db238245b5f4c808bd43767f22b2cc21c01f2225bf34726014c8e5bee3fe66940f90fd898b6e9ff43c5a951ec26a6ba553ae49c40a44def9dc57a608bf3840e538b8c458b69dd435f25044dc3e459dd09cbfe1b340cce4574ee178733a18986713a3135c9e4097924551c28d801709f9780e1934e4c85f9bcd99f9826e8804151d5273d4a89a5eeac7ecddd2ed9ddd1b3e234f8490ef4c23152c9d7a2dc229a58e04533f889c969edf498ea335b918960ae1893f27163ce8081e00fce242948fdba1d2586bb7b0ff61f2f35044711d47c1a3cfcdb35bc5a59176c7b13af57dd5280f71f1458eeba2861512473bd8908710dff35c71839ff982189907bcb0fffa7d5b74360cae89ed1ba25091312ebd0163aea5d57d6a4a1336f7b36f5b8558a624448434ef61755a74f19328ae4f6dac254603e2b1ad0bb45d15f1435396c710a3ec34c73d50524f41dd000db4a547a53b3e92dba0cfb0e0f6a871a92262a7851df7ce7f76319f8112d23467a79ae31859c78797025541ec5d610b16c0803b6e1f749875a3d0fd0bf83dc6e25e1540cd135f1055094ca620fd80c3c7c78117e07f6c9a44587f35a197d9ebab38a99c65a2edc0086ddcd60d52e29d953eac0b5be5713d23412330c181617e7ad776c1e3bc057e88f4a6106e35b016aeadb7c004bff20248622a6d3fe2a9f59bca217d17ab580220ac4da3dfa5bbbff43bdd748373d7777d0afebcf6d1e9bf50efe1609ad41c80cb14a524cabf54f7165d9ea946b13c77cfa7afeff5b6b897b35a7133bd610ee302aba49b67b86767355922cb9c522a1220db2ec222ee62e4945531d8a2fbf10a79f67cda984494bc9aeb570b23c9be8448cf69d86d246c27935cee8367a5401c8db3e891b349f89017660d2ef2a857511306a24a7e46f27fce812b258e1d6839a2b982c9da629e45861b9ffb7985d8b8c7f2dd829870425c010d6552b39f6020db103cd684820f4d26c4d010af09b6495f49046f1c5e146f1eac48a68469fea622eba0befe5a7be3ec03db8cdf3530d927225291d85a1382034b8bd2ff280e779338af4d826c8024235df4c60b1bff978abc42eb8329335ff5ae54747f65fd179f9446e6c415d1e5a29284703b3ca675ec83c4a485bcb2a53b877be66be9810a2a2b6d54816b7e6ad1a9d7465bcdd30028919747217dcbaea20eeaaadc7c468784a37b28443b8769a045552b55fd6f2717277f6af53b9426eec8a9586fd26e9301b31a7c0f64d7dc8319b495a8ab29740cef294206a5dd213f67d3ba5438ac3a02c01257a7943836d364493cc87a512f76f30cd10bb863acfa2b634437b718b35897a3be7840e1ec7f64b4eb6faa6ee0960cb0bee956b777f5c1a8e86a77914e4cb48bf0cc7e6a2b2f9ee7b7c5f8027349f2e9acb63c215d420243a99f3e4685e273c9728e581dda4a85636c526bc253cf126d50e45c572c5cccfa5969f8dc080467934f3d65c7c99da1baaf59f0a22058c2c5076826944cbc1953682d40ba2e69929333da35d36152f34880a55eecc96d5498ac372a611935f326eff2b3d0f3ac753577ecdd3cbfea80836e1db4f4c391825f72fa2dfbd85981a5efff717d3b3bbc4b4a2a4932aa848d72ef09ab493d3bb1a20f32c8fc8b36f44c72f7b78f2c20b08a90fb6e0c137a6233700c7f4bcd15318234450a78cc8b043ceb37b985cb25f3cda416a074fd985136860ef53c6082c27010e2e56875486de71b90afc7fc947e9e6308e2e7cfde02f09b91c1c8a454"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x900}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) (async) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) (async) 321.786751ms ago: executing program 5 (id=6357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000340)=0x48a, 0x4) sendmmsg(r2, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000017c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000001a00), 0x0, &(0x7f0000001a80)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=ANY=[@ANYBLOB], 0x478}}], 0x3, 0x24004810) (async) listen(0xffffffffffffffff, 0x2f) (async) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0xaca) (async) epoll_create1(0x0) (async) epoll_create1(0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x22021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x40000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x48) socket(0x40000000015, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000012c0), 0x4) (async) pipe(&(0x7f0000000040)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000000)={0x1000, 0xaf43, 0x7, 0x40, 0x1}) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) 294.17255ms ago: executing program 1 (id=6358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x20000080) 269.521831ms ago: executing program 3 (id=6359): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0xb00000000065808, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r1, 0x0, 0x7feff000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00083cbd7000fbdbdf25040000000800030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x1) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x801fca8765c1e952}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x89b1, &(0x7f0000000040)={'wlan1\x00', 0x8000003}) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000010901040000000000530000000000000900010073797a31000000000900010073797a310000000008000340000000000c0004800800014000000000100002000c00028007000100000000000800054000000000840002001400018008000100ffffffff08000200ac1e000114000180080001000a01010008000200ffffffff06000340000300000c0002"], 0xe8}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d000000002d000280080001000300000008000200250000000a0002000000000000000000"], 0x50}}, 0xc080) 173.747344ms ago: executing program 1 (id=6360): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80005) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/216, 0xd8}], 0x1}, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x8940, &(0x7f000000a640)={0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) 166.717905ms ago: executing program 0 (id=6361): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x0, 0x401, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080018"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b3e480a7613088fd71106c027deb3b11"}]}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x44, r3, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x44}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x1, 0x8000, 0xe21, 0x1, {{0x26, 0x4, 0x1, 0x6, 0x98, 0x65, 0x0, 0x8, 0x4, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x3, [{@private=0xa010102, 0xffffffd7}, {@loopback}, {@rand_addr=0x64010102, 0xfffff757}, {@empty, 0x3}]}, @timestamp={0x44, 0x20, 0xd1, 0x0, 0x3, [0xff, 0x2, 0x2, 0xd3e, 0x3, 0x1, 0xffffffff]}, @timestamp_addr={0x44, 0x3c, 0x5, 0x1, 0x8, [{@loopback, 0x9}, {@multicast1, 0x5}, {@remote, 0x4}, {@multicast1, 0x6}, {@private=0xa010100, 0x5}, {@private=0xa010100, 0x8}, {@empty, 0x2}]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x6, 0x6, 0x13, @mcast2, @local, 0x10, 0x8000, 0x2, 0x80000000}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0x1}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x80, 0x8, 0x6, 0xff, {{0xd, 0x4, 0x0, 0x3c, 0x34, 0x67, 0x0, 0xd2, 0x4, 0x0, @empty, @multicast2, {[@lsrr={0x83, 0x1f, 0x47, [@empty, @remote, @remote, @local, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x2e}]}]}}}}}) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r12, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r12, &(0x7f00000001c0)={0x2c, 0x2, r14, 0x29, r12}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x10, 0x40, 0x6ca, 0xfffffff8, {{0x12, 0x4, 0x0, 0x2, 0x48, 0x64, 0x0, 0x5, 0x29, 0x0, @empty, @broadcast, {[@rr={0x7, 0x23, 0xbf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast2, @rand_addr=0x64010101, @loopback]}, @ssrr={0x89, 0xf, 0xe9, [@local, @broadcast, @private=0xa010102]}]}}}}}) (async) ioctl$BTRFS_IOC_DEFRAG(r12, 0x50009402, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1d8, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5fe531f17cdda4fe}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x1d8}}, 0x4048000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 106.345193ms ago: executing program 0 (id=6362): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x20000600) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0xc0189436, &(0x7f0000000000)) (async, rerun: 64) read(r1, 0x0, 0x0) (async, rerun: 64) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x85) 63.309304ms ago: executing program 5 (id=6363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000100001000000ee41ca35422186f7000a7c000000060a010400000000000000000a0000050900010073797a31000000005000048020000180070001006374000014000280080002400000000708000140000000092c0001800a0001006c696d69740000001c0002800c00024000000000000000000c00014000000000000000090900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0x1}, 0x20) close(0x3) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x36c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x1e0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x134, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}], {0x14, 0x10}}, 0x3b4}}, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) write$6lowpan_enable(r4, &(0x7f0000001500)='0', 0x1) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xaac}, &(0x7f0000000080)=0x8) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r7, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) ioctl$sock_proto_private(r7, 0x89ee, &(0x7f00000002c0)="a6935bf10b1aa119f26477c5b4c1a229cfa58c938ceebc63aa3888ae61f3fdd26e562c60fe98f69628c7302c618af9419f045e598d5634ac983807b2c2124e708c15a50543af92e0c5bfe34944ebd1985a2d8d") getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000100)={r6, @in={{0x2, 0x4e22, @multicast2}}, 0x0, 0xa4, 0x10001, 0x9}, &(0x7f0000000280)=0x98) 458.695µs ago: executing program 0 (id=6364): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r2, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) close(0x4) (async) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 0s ago: executing program 3 (id=6365): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xa) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x1) getsockname$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) kernel console output (not intermixed with test programs): ] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.746566][T21548] netlink: 'syz.2.4606': attribute type 1 has an invalid length. [ 352.904981][T21562] dvmrp0: left allmulticast mode [ 352.910088][T21562] lo: left allmulticast mode [ 352.942762][T21560] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 353.025011][T21571] netlink: 'syz.0.4613': attribute type 21 has an invalid length. [ 353.230913][T21582] tipc: Enabling of bearer rejected, failed to enable media [ 353.506202][T21607] netlink: 'syz.5.4627': attribute type 4 has an invalid length. [ 353.538454][T21607] netlink: 'syz.5.4627': attribute type 4 has an invalid length. [ 353.721413][T21632] tipc: Enabling of bearer rejected, failed to enable media [ 353.805531][T21628] netlink: 'syz.0.4633': attribute type 11 has an invalid length. [ 353.847650][T21628] netlink: 'syz.0.4633': attribute type 11 has an invalid length. [ 353.971444][T21647] netlink: 'syz.5.4638': attribute type 1 has an invalid length. [ 354.069205][T21647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.476284][T21706] __nla_validate_parse: 62 callbacks suppressed [ 354.476307][T21706] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4649'. [ 354.517224][T21706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4649'. [ 354.598786][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4651'. [ 354.627632][T21713] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4651'. [ 354.848964][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4654'. [ 354.858434][T21723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4654'. [ 354.875532][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4654'. [ 354.885033][T21723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4654'. [ 354.930544][T21725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4655'. [ 355.067593][T21728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4656'. [ 355.138692][T21729] nbd: socks must be embedded in a SOCK_ITEM attr [ 355.149754][T21729] tipc: Enabled bearer , priority 0 [ 355.338305][T21740] gretap0: entered promiscuous mode [ 355.524139][T21758] Bluetooth: MGMT ver 1.23 [ 355.569757][T21761] bond0: (slave team0): Releasing backup interface [ 355.663778][ T9022] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 355.733086][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 355.898140][T21781] netlink: 'syz.3.4676': attribute type 8 has an invalid length. [ 355.910754][T21727] tipc: Disabling bearer [ 356.013082][ T9022] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 356.356605][T21818] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 356.525931][T21834] nbd: must specify a size in bytes for the device [ 357.220053][T21890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.296183][T21893] bridge_slave_0: invalid flags given to default FDB implementation [ 357.429882][T21900] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 357.588543][T21914] team0: Device vti0 is up. Set it down before adding it as a team port [ 357.682226][T21927] sctp: [Deprecated]: syz.2.4720 (pid 21927) Use of int in max_burst socket option. [ 357.682226][T21927] Use struct sctp_assoc_value instead [ 357.896479][T21941] tipc: Enabled bearer , priority 0 [ 357.932059][T21941] syzkaller0: entered promiscuous mode [ 357.949361][T21941] syzkaller0: entered allmulticast mode [ 357.982536][T21941] tipc: Resetting bearer [ 358.001668][T21939] tipc: Resetting bearer [ 358.024804][T21939] tipc: Disabling bearer [ 358.508428][T21978] tipc: Enabled bearer , priority 0 [ 358.516631][T21977] syzkaller0: entered promiscuous mode [ 358.527028][T21977] syzkaller0: entered allmulticast mode [ 358.571716][T21976] tipc: Resetting bearer [ 358.581287][T21976] tipc: Disabling bearer [ 358.876468][T22004] netlink: 'syz.1.4744': attribute type 1 has an invalid length. [ 359.147593][T22023] bond6: entered allmulticast mode [ 359.160665][T22023] 8021q: adding VLAN 0 to HW filter on device bond6 [ 359.168714][T22023] bridge0: port 1(bond6) entered blocking state [ 359.176185][T22023] bridge0: port 1(bond6) entered disabled state [ 359.184520][T22023] bond6: entered promiscuous mode [ 359.190594][T22023] bridge0: port 1(bond6) entered blocking state [ 359.197030][T22023] bridge0: port 1(bond6) entered forwarding state [ 359.245014][ T12] bridge0: port 1(bond6) entered disabled state [ 359.280379][ T5231] udevd[5231]: worker [19203] terminated by signal 33 (Unknown signal 33) [ 359.292243][ T5231] udevd[5231]: worker [19203] failed while handling '/devices/virtual/block/loop5' [ 359.506391][T22055] __nla_validate_parse: 23 callbacks suppressed [ 359.506425][T22055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4760'. [ 359.752476][T22073] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 359.766145][T22073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4765'. [ 359.817185][T22076] tipc: Enabled bearer , priority 0 [ 359.827765][T22076] syzkaller0: entered promiscuous mode [ 359.834023][T22076] syzkaller0: entered allmulticast mode [ 359.844457][T22076] tipc: Resetting bearer [ 359.851724][T22075] tipc: Resetting bearer [ 359.860110][T22075] tipc: Disabling bearer [ 359.986560][T22087] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4770'. [ 360.011029][T22092] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4770'. [ 360.077044][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4772'. [ 360.269785][T22101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4774'. [ 360.281773][T22108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4776'. [ 360.371905][T22121] tipc: Enabled bearer , priority 0 [ 360.382774][T22121] syzkaller0: entered promiscuous mode [ 360.392289][T22121] syzkaller0: entered allmulticast mode [ 360.408797][T22121] tipc: Resetting bearer [ 360.462352][T22125] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 360.529349][T22127] tipc: Resetting bearer [ 360.549169][T22127] tipc: Disabling bearer [ 360.563554][T22132] netlink: 'syz.2.4782': attribute type 1 has an invalid length. [ 360.664036][T22145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4787'. [ 360.747002][T22150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4789'. [ 360.881129][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4791'. [ 360.947953][T22166] tipc: Enabled bearer , priority 0 [ 360.959626][T22166] syzkaller0: entered promiscuous mode [ 360.966614][T22166] syzkaller0: entered allmulticast mode [ 361.092684][ T9020] hid-generic 0005:10CF:0009.0002: unknown main item tag 0x0 [ 361.114330][T22166] tipc: Resetting bearer [ 361.121632][ T9020] hid-generic 0005:10CF:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 361.166900][T22177] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 361.212262][T22165] tipc: Resetting bearer [ 361.249220][T22165] tipc: Disabling bearer [ 361.316839][T22185] syzkaller0: entered promiscuous mode [ 361.335790][T22185] syzkaller0: entered allmulticast mode [ 361.402373][T22189] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 361.590499][T22201] netlink: 'syz.1.4805': attribute type 4 has an invalid length. [ 361.894147][T22218] netlink: 'syz.0.4811': attribute type 16 has an invalid length. [ 361.910228][T22218] netlink: 'syz.0.4811': attribute type 17 has an invalid length. [ 361.991343][T22224] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 362.101666][T22218] gretap0: left promiscuous mode [ 362.129035][T22218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.898123][T22291] netlink: 'syz.3.4836': attribute type 21 has an invalid length. [ 363.113602][T22309] syzkaller1: entered promiscuous mode [ 363.136463][T22309] syzkaller1: entered allmulticast mode [ 363.230376][T22318] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 363.331672][T22329] netlink: 'syz.0.4849': attribute type 7 has an invalid length. [ 363.343817][T22331] netlink: 'syz.0.4849': attribute type 7 has an invalid length. [ 363.510951][T22347] netlink: 'syz.5.4855': attribute type 12 has an invalid length. [ 363.678182][T22361] netlink: 'syz.2.4859': attribute type 4 has an invalid length. [ 364.187530][T22405] netlink: 'syz.3.4873': attribute type 1 has an invalid length. [ 364.406452][T22429] netlink: 'syz.5.4880': attribute type 1 has an invalid length. [ 364.514692][T22434] netlink: 'syz.3.4882': attribute type 5 has an invalid length. [ 364.539905][T22438] __nla_validate_parse: 18 callbacks suppressed [ 364.539925][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4886'. [ 364.546630][T22434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4882'. [ 364.546666][T22434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4882'. [ 364.550150][T22434] syz_tun: entered promiscuous mode [ 364.559415][T22438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4886'. [ 364.591190][T22434] syz_tun: left promiscuous mode [ 364.840573][T22463] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4892'. [ 364.992679][T22475] netlink: 'syz.3.4895': attribute type 12 has an invalid length. [ 365.116694][T22477] netlink: 'syz.5.4896': attribute type 2 has an invalid length. [ 365.485515][T22498] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4903'. [ 365.546384][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4903'. [ 365.567863][T22503] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 365.590769][T22502] netlink: 'syz.1.4905': attribute type 11 has an invalid length. [ 365.644251][T22495] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 365.654642][T22502] netlink: 'syz.1.4905': attribute type 4 has an invalid length. [ 365.654667][T22502] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4905'. [ 365.808199][T22515] tipc: Enabled bearer , priority 0 [ 365.836625][T22515] syzkaller0: entered promiscuous mode [ 365.857360][T22515] syzkaller0: entered allmulticast mode [ 365.973811][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 365.975569][T22515] tipc: Resetting bearer [ 366.015330][T22513] tipc: Resetting bearer [ 366.028282][T22513] tipc: Disabling bearer [ 366.085237][T22526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4911'. [ 366.264783][T22540] syzkaller0: entered promiscuous mode [ 366.271167][T22540] syzkaller0: entered allmulticast mode [ 366.281140][T22540] tipc: Enabling of bearer rejected, failed to enable media [ 366.296406][T22540] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 366.411055][T22544] IPVS: set_ctl: invalid protocol: 1472 0.32.0.0:14336 [ 366.469456][T22546] bond4: (slave gretap3): Releasing active interface [ 366.527849][T22548] netlink: 'syz.5.4921': attribute type 21 has an invalid length. [ 366.536324][T22548] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4921'. [ 366.659589][T22556] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 366.750629][T22559] syzkaller0: entered promiscuous mode [ 366.756988][T22559] syzkaller0: entered allmulticast mode [ 366.768682][T22559] delete_channel: no stack [ 366.999905][T22574] macsec2: entered promiscuous mode [ 367.005764][T22574] bridge0: entered promiscuous mode [ 367.011478][T22574] bridge0: port 3(macsec2) entered blocking state [ 367.019144][T22574] bridge0: port 3(macsec2) entered disabled state [ 367.026458][T22574] macsec2: entered allmulticast mode [ 367.031777][T22574] bridge0: entered allmulticast mode [ 367.038476][T22574] macsec2: left allmulticast mode [ 367.044206][T22574] bridge0: left allmulticast mode [ 367.050027][T22574] bridge0: left promiscuous mode [ 367.093263][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.332780][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e0d6c00: rx timeout, send abort [ 367.341666][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e0d6c00: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 367.531936][T22589] netlink: 'syz.1.4933': attribute type 1 has an invalid length. [ 367.560333][T22589] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.795815][T22606] nbd: must specify at least one socket [ 367.878846][T22625] syzkaller1: entered promiscuous mode [ 367.931828][T22625] syzkaller1: entered allmulticast mode [ 368.331538][T22645] netlink: 'syz.3.4949': attribute type 21 has an invalid length. [ 368.348320][T22645] netlink: 'syz.3.4949': attribute type 21 has an invalid length. [ 368.364254][T22639] block nbd1: not configured, cannot reconfigure [ 368.516060][T22668] lo: entered allmulticast mode [ 368.978649][T22708] macvlan3: entered promiscuous mode [ 369.012759][T22708] macvlan3: entered allmulticast mode [ 369.107590][T22732] netlink: 'syz.1.4968': attribute type 11 has an invalid length. [ 369.296972][T22741] validate_nla: 2 callbacks suppressed [ 369.296994][T22741] netlink: 'syz.2.4971': attribute type 2 has an invalid length. [ 369.966204][T22801] __nla_validate_parse: 11 callbacks suppressed [ 369.966225][T22801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4985'. [ 369.987134][T22801] syz_tun: left allmulticast mode [ 369.992363][T22801] syz_tun: left promiscuous mode [ 369.998143][T22801] bridge0: port 3(syz_tun) entered disabled state [ 370.011767][T22801] bridge_slave_1: left allmulticast mode [ 370.022044][T22801] bridge_slave_1: left promiscuous mode [ 370.047063][T22801] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.059987][T22801] bridge_slave_0: left allmulticast mode [ 370.065811][T22801] bridge_slave_0: left promiscuous mode [ 370.100524][T22801] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.118392][T22811] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4988'. [ 370.179013][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4990'. [ 370.269948][T22824] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4992'. [ 370.283635][T22825] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4992'. [ 370.354955][T22825] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.4992'. [ 370.491982][T22843] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4998'. [ 370.593223][T22852] openvswitch: netlink: Key type 5136 is out of range max 32 [ 370.801830][T22871] netlink: 'syz.0.5006': attribute type 1 has an invalid length. [ 370.843946][T22871] syzkaller0: entered promiscuous mode [ 370.849726][T22871] syzkaller0: entered allmulticast mode [ 371.242755][T22904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5013'. [ 371.327459][T22914] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5017'. [ 371.479871][T22927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5021'. [ 371.488547][T22924] netlink: zone id is out of range [ 371.498588][T22924] netlink: zone id is out of range [ 371.504741][T22924] netlink: get zone limit has 8 unknown bytes [ 371.513921][T22924] 8021q: VLANs not supported on vcan0 [ 371.609118][T22922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.726254][T22944] can: request_module (can-proto-0) failed. [ 371.898609][T22965] netlink: 'syz.5.5032': attribute type 17 has an invalid length. [ 371.917381][T22957] veth5: entered allmulticast mode [ 371.927053][T22965] erspan0: entered promiscuous mode [ 371.935634][T22965] 0ªî{X¹¦: entered promiscuous mode [ 371.941685][T22965] debugfs: '' already exists in 'hsr' [ 371.948441][T22965] Cannot create hsr debugfs directory [ 371.960698][T22967] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 372.109295][T22982] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 372.794688][T22995] syzkaller0: entered promiscuous mode [ 372.800450][T22995] syzkaller0: entered allmulticast mode [ 372.983774][T23002] netlink: 'syz.1.5040': attribute type 1 has an invalid length. [ 373.058521][T23007] openvswitch: netlink: Actions may not be safe on all matching packets [ 373.082283][T23002] 8021q: adding VLAN 0 to HW filter on device bond6 [ 373.179128][T23012] syzkaller0: entered promiscuous mode [ 373.192930][T23012] syzkaller0: entered allmulticast mode [ 373.226971][T23005] 8021q: adding VLAN 0 to HW filter on device bond6 [ 373.237436][T23005] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 373.253432][T23005] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 373.278356][T23016] !: renamed from dummy0 (while UP) [ 373.518936][T23041] bond6: left promiscuous mode [ 373.536060][T23041] bridge0: port 1(bond6) entered disabled state [ 373.678478][T23046] syzkaller1: entered promiscuous mode [ 373.688600][T23046] syzkaller1: entered allmulticast mode [ 374.073561][T23094] netlink: 'syz.5.5062': attribute type 4 has an invalid length. [ 374.420285][T23126] netlink: 'syz.0.5072': attribute type 10 has an invalid length. [ 374.494798][T23132] nbd: must specify at least one socket [ 374.682466][T23144] netlink: 'syz.2.5076': attribute type 6 has an invalid length. [ 374.691246][T23146] netlink: 'syz.2.5076': attribute type 6 has an invalid length. [ 374.808779][T23160] veth0_to_bridge: entered promiscuous mode [ 374.831933][T23162] veth0_to_bridge: left promiscuous mode [ 375.001001][T23179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.080963][T23188] __nla_validate_parse: 24 callbacks suppressed [ 375.080998][T23188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5089'. [ 375.180063][T23201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5091'. [ 375.271276][T23205] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5093'. [ 375.285894][T23205] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5093'. [ 375.298986][T23207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5094'. [ 375.325516][T23205] netlink: 'syz.1.5093': attribute type 10 has an invalid length. [ 375.337165][T23205] netlink: 'syz.1.5093': attribute type 1 has an invalid length. [ 375.345366][T23205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5093'. [ 375.346522][T23207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.354452][T23205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5093'. [ 375.413479][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5096'. [ 375.501505][T23219] pimreg: entered allmulticast mode [ 375.511214][T23219] netlink: 'syz.1.5098': attribute type 2 has an invalid length. [ 375.638361][T23227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5102'. [ 375.714123][T23227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5102'. [ 375.740963][T23239] netlink: 'syz.0.5106': attribute type 4 has an invalid length. [ 375.809966][T23246] tipc: Enabled bearer , priority 10 [ 375.976432][T23263] gtp0: entered promiscuous mode [ 375.981602][T23263] gtp0: entered allmulticast mode [ 376.098917][T23270] IPv6: sit1: Disabled Multicast RS [ 376.111885][T23270] sit1: entered allmulticast mode [ 376.178913][T23278] netlink: 'syz.1.5121': attribute type 5 has an invalid length. [ 376.222165][T23278] geneve4: entered promiscuous mode [ 376.254495][T23278] geneve4: entered allmulticast mode [ 376.269006][ T37] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 376.290867][ T37] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 376.300547][ T37] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 376.318592][ T37] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 376.419153][T23298] netlink: 'syz.1.5126': attribute type 5 has an invalid length. [ 376.433385][T23300] xt_limit: Overflow, try lower: 604147548/4200216962 [ 376.548500][T23303] syzkaller0: entered promiscuous mode [ 376.558625][T23303] syzkaller0: entered allmulticast mode [ 376.756185][T23322] netlink: 'syz.1.5135': attribute type 10 has an invalid length. [ 376.766065][T23322] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 376.805536][T23322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.852218][T23322] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 376.922907][ T9022] tipc: Node number set to 3626259558 [ 376.988376][T23341] tipc: Enabled bearer , priority 0 [ 376.996851][T23341] syzkaller0: entered promiscuous mode [ 377.002435][T23341] syzkaller0: entered allmulticast mode [ 377.058620][T23341] tipc: Resetting bearer [ 377.067966][T23339] tipc: Resetting bearer [ 377.106512][T23339] tipc: Disabling bearer [ 377.138935][T23347] tipc: Enabled bearer , priority 0 [ 377.152473][T23347] syzkaller0: entered promiscuous mode [ 377.164716][T23347] syzkaller0: entered allmulticast mode [ 377.185500][T23352] syzkaller0: entered promiscuous mode [ 377.199710][T23352] syzkaller0: entered allmulticast mode [ 377.209422][T23346] tipc: Resetting bearer [ 377.221093][T23346] tipc: Disabling bearer [ 377.256351][T23351] tipc: Enabled bearer , priority 0 [ 377.319348][T23351] tipc: Resetting bearer [ 377.379981][T23351] tipc: Disabling bearer [ 378.526592][T23436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.552161][T23436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.650331][T23436] veth0_macvtap: left allmulticast mode [ 378.680226][ T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.708166][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.731686][ T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.758666][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.790082][T23455] hsr0 speed is unknown, defaulting to 1000 [ 378.796252][ T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.828620][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.849925][ T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.851942][T23455] wg1 speed is unknown, defaulting to 1000 [ 378.871604][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.915077][T23455] lo speed is unknown, defaulting to 1000 [ 379.253018][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 379.371143][T23495] IPVS: Unknown mcast interface: vcan0 [ 379.390828][T23493] syzkaller1: entered promiscuous mode [ 379.410799][T23493] syzkaller1: entered allmulticast mode [ 379.541000][T23506] veth0: entered promiscuous mode [ 379.561433][T23502] veth0 (unregistering): left promiscuous mode [ 380.277575][T23540] __nla_validate_parse: 21 callbacks suppressed [ 380.277598][T23540] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5193'. [ 380.357877][T23548] team0: No ports can be present during mode change [ 380.502953][T23557] validate_nla: 24 callbacks suppressed [ 380.502974][T23557] netlink: 'syz.3.5196': attribute type 1 has an invalid length. [ 380.562674][T23557] netlink: 'syz.3.5196': attribute type 2 has an invalid length. [ 380.635718][T23569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5199'. [ 380.894801][T23590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5202'. [ 381.006236][T23591] syzkaller0: entered promiscuous mode [ 381.012272][T23591] syzkaller0: entered allmulticast mode [ 381.031087][T23590] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5202'. [ 381.055333][T23589] FAULT_INJECTION: forcing a failure. [ 381.055333][T23589] name failslab, interval 1, probability 0, space 0, times 0 [ 381.056604][T23600] netlink: 'syz.3.5210': attribute type 6 has an invalid length. [ 381.096743][T23589] CPU: 1 UID: 0 PID: 23589 Comm: syz.5.5206 Not tainted syzkaller #0 PREEMPT(full) [ 381.096775][T23589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.096788][T23589] Call Trace: [ 381.096795][T23589] [ 381.096804][T23589] dump_stack_lvl+0x189/0x250 [ 381.096832][T23589] ? __pfx____ratelimit+0x10/0x10 [ 381.096858][T23589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.096880][T23589] ? __pfx__printk+0x10/0x10 [ 381.096906][T23589] ? fs_reclaim_acquire+0x7d/0x100 [ 381.096935][T23589] ? __pfx___might_resched+0x10/0x10 [ 381.096965][T23589] ? lock_acquire+0x5f/0x360 [ 381.096992][T23589] should_fail_ex+0x414/0x560 [ 381.097018][T23589] should_failslab+0xa8/0x100 [ 381.097046][T23589] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 381.097071][T23589] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 381.097095][T23589] ? __alloc_skb+0x112/0x2d0 [ 381.097123][T23589] __alloc_skb+0x112/0x2d0 [ 381.097151][T23589] rtmsg_ifinfo_build_skb+0x84/0x260 [ 381.097178][T23589] rtnetlink_event+0x1b7/0x270 [ 381.097205][T23589] notifier_call_chain+0x1b3/0x3e0 [ 381.097229][T23589] netif_set_mtu_ext+0x594/0x7d0 [ 381.097250][T23589] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 381.097267][T23589] ? __mutex_trylock_common+0x153/0x260 [ 381.097287][T23589] ? __pfx___mutex_trylock_common+0x10/0x10 [ 381.097308][T23589] ? rcu_is_watching+0x15/0xb0 [ 381.097328][T23589] ? trace_contention_end+0x39/0x120 [ 381.097351][T23589] netif_set_mtu+0xa4/0x150 [ 381.097366][T23589] ? __pfx_netif_set_mtu+0x10/0x10 [ 381.097390][T23589] ? netdev_name_node_lookup+0xdf/0x120 [ 381.097414][T23589] dev_set_mtu+0x126/0x260 [ 381.097432][T23589] dev_ioctl+0x7b4/0x1150 [ 381.097459][T23589] sock_do_ioctl+0x22c/0x300 [ 381.097483][T23589] ? __pfx_sock_do_ioctl+0x10/0x10 [ 381.097504][T23589] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 381.097537][T23589] sock_ioctl+0x576/0x790 [ 381.097556][T23589] ? lock_release+0x4b/0x3e0 [ 381.097583][T23589] ? __pfx_sock_ioctl+0x10/0x10 [ 381.097605][T23589] ? __fget_files+0x2a/0x420 [ 381.097632][T23589] ? __fget_files+0x3a0/0x420 [ 381.097658][T23589] ? __fget_files+0x2a/0x420 [ 381.097685][T23589] ? bpf_lsm_file_ioctl+0x9/0x20 [ 381.097709][T23589] ? __pfx_sock_ioctl+0x10/0x10 [ 381.097730][T23589] __se_sys_ioctl+0xfc/0x170 [ 381.097753][T23589] do_syscall_64+0xfa/0x3b0 [ 381.097781][T23589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.097800][T23589] ? clear_bhb_loop+0x60/0xb0 [ 381.097821][T23589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.097840][T23589] RIP: 0033:0x7f05d2b8ebe9 [ 381.097858][T23589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.097875][T23589] RSP: 002b:00007f05d394a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.097898][T23589] RAX: ffffffffffffffda RBX: 00007f05d2db5fa0 RCX: 00007f05d2b8ebe9 [ 381.097914][T23589] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 381.097926][T23589] RBP: 00007f05d394a090 R08: 0000000000000000 R09: 0000000000000000 [ 381.097939][T23589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.097966][T23589] R13: 00007f05d2db6038 R14: 00007f05d2db5fa0 R15: 00007ffe6568c408 [ 381.097988][T23589] [ 381.575664][T23617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5216'. [ 381.815729][T23638] netlink: 'syz.5.5219': attribute type 9 has an invalid length. [ 381.981973][T23655] tipc: Enabled bearer , priority 0 [ 382.016632][T23655] syzkaller0: entered promiscuous mode [ 382.034890][T23655] syzkaller0: entered allmulticast mode [ 382.050309][T23659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5226'. [ 382.052572][T23657] tipc: Enabled bearer , priority 0 [ 382.085234][T23657] syzkaller0: entered promiscuous mode [ 382.092221][T23657] syzkaller0: entered allmulticast mode [ 382.122434][T23655] tipc: Resetting bearer [ 382.130854][T23657] tipc: Resetting bearer [ 382.138672][T23654] tipc: Resetting bearer [ 382.172453][T23654] tipc: Disabling bearer [ 382.253300][T23679] tipc: Enabled bearer , priority 10 [ 382.348435][T23685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5233'. [ 382.375354][T23656] tipc: Resetting bearer [ 382.376861][T23685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5233'. [ 382.405134][T23656] tipc: Disabling bearer [ 382.775604][T23717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5241'. [ 382.832270][T23719] tipc: Enabled bearer , priority 0 [ 382.841557][T23721] tipc: Enabled bearer , priority 0 [ 382.851003][T23721] syzkaller0: entered promiscuous mode [ 382.857753][T23721] syzkaller0: entered allmulticast mode [ 382.878184][T23718] tipc: Disabling bearer [ 382.901331][T23721] tipc: Resetting bearer [ 382.912558][T23720] tipc: Resetting bearer [ 382.940138][T23720] tipc: Disabling bearer [ 383.055167][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5248'. [ 383.275786][T23760] syzkaller1: entered promiscuous mode [ 383.281704][T23760] syzkaller1: entered allmulticast mode [ 383.292507][T23760] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 383.924607][T12259] tipc: Node number set to 1378062483 [ 384.134520][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 384.230222][T23793] 0ªî{X¹¦: left allmulticast mode [ 384.321471][T23797] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 384.760927][T23840] netlink: 'syz.5.5280': attribute type 2 has an invalid length. [ 384.771242][T23834] 8021q: adding VLAN 0 to HW filter on device bond8 [ 384.857830][T23841] 8021q: adding VLAN 0 to HW filter on device bond8 [ 384.871186][T23841] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 384.884667][T23841] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 384.956055][T23854] netlink: 'syz.3.5287': attribute type 1 has an invalid length. [ 385.016979][T23854] 8021q: adding VLAN 0 to HW filter on device bond5 [ 385.035634][T23850] netlink: 'syz.2.5285': attribute type 1 has an invalid length. [ 385.045562][T23858] bond5: (slave gretap4): making interface the new active one [ 385.083603][T23858] bond5: (slave gretap4): Enslaving as an active interface with an up link [ 385.336260][T23868] __nla_validate_parse: 13 callbacks suppressed [ 385.336285][T23868] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5292'. [ 385.429127][T23886] tipc: Enabled bearer , priority 0 [ 385.488165][T23886] tipc: Resetting bearer [ 385.521656][T23884] tipc: Disabling bearer [ 385.618807][T23901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5302'. [ 385.639788][T23899] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5300'. [ 385.667855][T23899] team0: Device vti0 is up. Set it down before adding it as a team port [ 385.701678][T23906] openvswitch: netlink: Duplicate or invalid key (type 0). [ 385.709902][T23906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.781252][T23905] syzkaller0: entered promiscuous mode [ 385.815556][T23905] syzkaller0: entered allmulticast mode [ 385.896298][T23920] netlink: 'syz.3.5308': attribute type 1 has an invalid length. [ 385.920286][T23920] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5308'. [ 385.931992][T23921] netlink: 'syz.0.5309': attribute type 5 has an invalid length. [ 386.110028][T23931] tipc: Enabled bearer , priority 0 [ 386.120685][T23931] syzkaller0: entered promiscuous mode [ 386.128726][T23931] syzkaller0: entered allmulticast mode [ 386.185333][T23931] tipc: Resetting bearer [ 386.226564][T23929] tipc: Resetting bearer [ 386.274979][T23929] tipc: Disabling bearer [ 386.306425][T23944] tipc: Enabled bearer , priority 0 [ 386.337870][T23944] syzkaller0: entered promiscuous mode [ 386.361780][T23944] syzkaller0: entered allmulticast mode [ 386.402020][T23944] syzkaller0: mtu less than device minimum [ 386.418011][T23954] hsr0 speed is unknown, defaulting to 1000 [ 386.472593][T23943] tipc: Resetting bearer [ 386.520733][T23943] tipc: Disabling bearer [ 386.570863][T23968] netlink: 'syz.5.5321': attribute type 1 has an invalid length. [ 386.579202][T23954] wg1 speed is unknown, defaulting to 1000 [ 386.593965][T23954] lo speed is unknown, defaulting to 1000 [ 386.689888][T23972] hsr0 speed is unknown, defaulting to 1000 [ 386.729060][T23972] wg1 speed is unknown, defaulting to 1000 [ 386.918041][T23981] netlink: 'syz.2.5326': attribute type 4 has an invalid length. [ 386.932104][T23981] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5326'. [ 386.989238][T23972] lo speed is unknown, defaulting to 1000 [ 387.047758][T23959] netlink: 'syz.0.5318': attribute type 13 has an invalid length. [ 387.074415][T23959] netlink: 'syz.0.5318': attribute type 17 has an invalid length. [ 387.084444][ T5869] Bluetooth: hci4: link tx timeout [ 387.090063][ T5869] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 387.120020][T23959] netlink: 'syz.0.5318': attribute type 27 has an invalid length. [ 387.241338][T24004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5332'. [ 387.314666][T24004] netlink: 'syz.1.5332': attribute type 10 has an invalid length. [ 387.476942][T24018] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5335'. [ 387.745663][T24028] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5338'. [ 387.767242][T24028] netlink: 'syz.2.5338': attribute type 7 has an invalid length. [ 387.836207][T24034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5340'. [ 387.839384][T24028] : entered promiscuous mode [ 388.001009][T24038] netlink: 'syz.2.5341': attribute type 29 has an invalid length. [ 388.031330][T24040] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5341'. [ 388.059393][T24041] openvswitch: netlink: IPv6 tunnel dst address is zero [ 388.355468][T24053] tipc: Enabled bearer , priority 0 [ 388.365473][T24053] syzkaller0: entered promiscuous mode [ 388.371095][T24053] syzkaller0: entered allmulticast mode [ 388.382098][T24053] tipc: Resetting bearer [ 388.401258][T24050] tipc: Resetting bearer [ 388.447200][T24050] tipc: Disabling bearer [ 388.529116][T24064] hsr0 speed is unknown, defaulting to 1000 [ 388.541779][T24064] wg1 speed is unknown, defaulting to 1000 [ 388.549486][T24064] lo speed is unknown, defaulting to 1000 [ 388.624844][T24069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.737314][T24073] vlan4: entered promiscuous mode [ 388.784226][T24073] bridge0: entered promiscuous mode [ 389.174095][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 390.411631][T24189] __nla_validate_parse: 5 callbacks suppressed [ 390.411654][T24189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5378'. [ 390.672332][T24204] openvswitch: netlink: Actions may not be safe on all matching packets [ 390.673799][T22719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.708919][T22719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.774759][T24213] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5386'. [ 390.878484][T24226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5390'. [ 390.909935][T24226] tipc: Enabled bearer , priority 0 [ 390.928852][T24226] syzkaller0: entered promiscuous mode [ 390.949278][T24226] syzkaller0: entered allmulticast mode [ 390.961380][T24232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5392'. [ 390.980218][T24230] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5392'. [ 390.987672][T24237] validate_nla: 8 callbacks suppressed [ 390.987692][T24237] netlink: 'syz.2.5394': attribute type 1 has an invalid length. [ 391.013337][T24226] tipc: Resetting bearer [ 391.041437][T24220] tipc: Resetting bearer [ 391.091989][T24220] tipc: Disabling bearer [ 391.360901][T24270] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5403'. [ 391.388274][T24269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5404'. [ 391.394550][T24272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5405'. [ 391.403703][T24269] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5404'. [ 391.548975][T24282] tipc: Enabled bearer , priority 0 [ 391.569934][T24282] syzkaller0: entered promiscuous mode [ 391.576648][T24282] syzkaller0: entered allmulticast mode [ 391.608850][T24282] tipc: Resetting bearer [ 391.627931][T24279] tipc: Resetting bearer [ 391.657889][T24279] tipc: Disabling bearer [ 391.716161][T24300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5413'. [ 391.976458][T24322] netlink: 'syz.2.5420': attribute type 21 has an invalid length. [ 392.018815][T24325] netlink: 'syz.5.5421': attribute type 1 has an invalid length. [ 392.057154][T24325] netlink: 'syz.5.5421': attribute type 11 has an invalid length. [ 392.163981][T24334] bridge0: port 1(veth0_to_bridge) entered blocking state [ 392.186696][T24334] bridge0: port 1(veth0_to_bridge) entered disabled state [ 392.202003][T24334] veth0_to_bridge: entered allmulticast mode [ 392.210123][T24334] veth0_to_bridge: entered promiscuous mode [ 392.221669][T24344] netlink: 'syz.0.5424': attribute type 29 has an invalid length. [ 392.248808][T24341] tipc: Enabled bearer , priority 0 [ 392.305461][T24341] syzkaller0: entered promiscuous mode [ 392.311002][T24341] syzkaller0: entered allmulticast mode [ 392.343955][T24341] tipc: Resetting bearer [ 392.361011][T24337] tipc: Resetting bearer [ 392.400657][T24337] tipc: Disabling bearer [ 392.602347][T24373] netlink: 'syz.5.5435': attribute type 1 has an invalid length. [ 393.364922][T24426] netlink: 'syz.2.5455': attribute type 1 has an invalid length. [ 393.377771][T24426] netlink: 'syz.2.5455': attribute type 4 has an invalid length. [ 394.683165][T24498] hsr_slave_0: left promiscuous mode [ 394.729456][T24512] sctp: [Deprecated]: syz.1.5477 (pid 24512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.729456][T24512] Use struct sctp_sack_info instead [ 395.061214][T24531] bridge_slave_0: left allmulticast mode [ 395.067936][T24531] bridge_slave_0: left promiscuous mode [ 395.075363][T24531] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.087260][T24531] bridge_slave_1: left allmulticast mode [ 395.093947][T24531] bridge_slave_1: left promiscuous mode [ 395.099805][T24531] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.134164][T24531] team0: Port device team_slave_0 removed [ 395.155550][T24531] bond2: (slave gretap2): Releasing active interface [ 395.180741][T12259] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.464635][T24566] __nla_validate_parse: 24 callbacks suppressed [ 395.464657][T24566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5492'. [ 395.501998][T24566] netlink: 'syz.2.5492': attribute type 5 has an invalid length. [ 395.527175][T24566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5492'. [ 395.586906][T24570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5494'. [ 395.638444][T24577] netlink: 'syz.3.5496': attribute type 1 has an invalid length. [ 395.647706][T24577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5496'. [ 395.719316][T24584] Unsupported ieee802154 address type: 0 [ 395.940745][T24599] bond4: entered promiscuous mode [ 395.966741][T24599] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.036643][T24600] 8021q: adding VLAN 0 to HW filter on device bond5 [ 396.055296][T12259] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 396.057933][T24600] bond4: (slave bond5): making interface the new active one [ 396.070245][T24600] bond5: entered promiscuous mode [ 396.084061][T24600] bond4: (slave bond5): Enslaving as an active interface with an up link [ 396.180041][T24615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5507'. [ 396.190114][T24615] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5507'. [ 396.484014][T24618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5508'. [ 396.497812][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5508'. [ 396.508264][T24618] validate_nla: 4 callbacks suppressed [ 396.508285][T24618] netlink: 'syz.0.5508': attribute type 12 has an invalid length. [ 396.515925][T24623] netlink: 'syz.3.5509': attribute type 1 has an invalid length. [ 396.523970][T24618] netlink: 'syz.0.5508': attribute type 11 has an invalid length. [ 396.530836][T24623] netlink: 'syz.3.5509': attribute type 4 has an invalid length. [ 396.549426][T24623] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5509'. [ 396.559684][T24623] NCSI netlink: No device for ifindex 458760 [ 396.614718][T24627] netlink: 'syz.0.5510': attribute type 1 has an invalid length. [ 396.638980][T24627] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5510'. [ 396.652375][T24627] netlink: 'syz.0.5510': attribute type 1 has an invalid length. [ 396.659570][T24631] netlink: 'syz.1.5512': attribute type 1 has an invalid length. [ 396.670355][T24627] netlink: 'syz.0.5510': attribute type 1 has an invalid length. [ 396.674114][T24630] geneve2: entered promiscuous mode [ 396.678608][T24627] netlink: 'syz.0.5510': attribute type 1 has an invalid length. [ 396.691708][T24630] geneve2: entered allmulticast mode [ 396.691840][T24627] netlink: 'syz.0.5510': attribute type 1 has an invalid length. [ 397.172316][T24670] tipc: Enabled bearer , priority 0 [ 397.189037][T24670] syzkaller0: entered promiscuous mode [ 397.200827][T24670] syzkaller0: entered allmulticast mode [ 397.234406][T24670] tipc: Resetting bearer [ 397.259515][T24669] tipc: Resetting bearer [ 397.282763][T24669] tipc: Disabling bearer [ 397.744837][T24717] tipc: Enabled bearer , priority 0 [ 397.752401][T24717] syzkaller0: entered promiscuous mode [ 397.759574][T24717] syzkaller0: entered allmulticast mode [ 397.884494][T24729] hsr0 speed is unknown, defaulting to 1000 [ 397.902339][T24729] wg1 speed is unknown, defaulting to 1000 [ 397.915490][T24717] tipc: Resetting bearer [ 397.937308][T24729] lo speed is unknown, defaulting to 1000 [ 397.965278][T24731] syzkaller1: entered promiscuous mode [ 397.970923][T24731] syzkaller1: entered allmulticast mode [ 398.543536][T24716] tipc: Resetting bearer [ 398.558937][T24716] tipc: Disabling bearer [ 398.779872][T24785] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 398.808349][T24785] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 399.088978][T24800] 8021q: VLANs not supported on ip6gre0 [ 399.347097][T24818] nbd: must specify a device to reconfigure [ 399.352950][T24820] openvswitch: netlink: IPv4 tun info is not correct [ 399.418185][T24823] openvswitch: netlink: Missing key (keys=40, expected=100) [ 399.979601][T24870] Bluetooth: MGMT ver 1.23 [ 400.397553][T24910] lo: left promiscuous mode [ 400.408672][T24910] tunl0: left promiscuous mode [ 400.414981][T24910] gre0: left promiscuous mode [ 400.421616][T24910] gretap0: left promiscuous mode [ 400.459630][T24910] erspan0: left promiscuous mode [ 400.476044][T24910] ip_vti0: left promiscuous mode [ 400.508142][T24910] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.525841][ T30] audit: type=1804 audit(1756277457.547:6): pid=24920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5599" name="/newroot/552/cgroup.controllers" dev="tmpfs" ino=2833 res=1 errno=0 [ 400.553278][T24919] __nla_validate_parse: 52 callbacks suppressed [ 400.553301][T24919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5598'. [ 400.571800][ T30] audit: type=1800 audit(1756277457.547:7): pid=24920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5599" name="cgroup.controllers" dev="tmpfs" ino=2833 res=0 errno=0 [ 400.575220][T24910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.634392][T24910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.644308][T24910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.656978][T24910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.673732][T24910] veth1_vlan: left promiscuous mode [ 400.680547][T24910] veth0_vlan: left promiscuous mode [ 400.688557][T24910] veth0_vlan: entered promiscuous mode [ 400.697052][T24910] veth1_vlan: entered promiscuous mode [ 400.707388][T24910] veth1_macvtap: left promiscuous mode [ 400.715730][T24910] veth0_macvtap: left promiscuous mode [ 400.722821][T24910] veth0_macvtap: entered promiscuous mode [ 400.730392][T24910] veth1_macvtap: entered promiscuous mode [ 400.745192][T24910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.755749][T24910] batadv0: entered promiscuous mode [ 400.761387][T24935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5605'. [ 400.766051][T24910] gretap1: left promiscuous mode [ 400.780545][T24910] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 400.789822][T24910] A link change request failed with some changes committed already. Interface pim6reg0 may have been left with an inconsistent configuration, please check. [ 400.807370][ T9019] lo speed is unknown, defaulting to 1000 [ 400.826028][T24937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5606'. [ 400.846624][ T9019] syz0: Port: 1 Link ACTIVE [ 400.941698][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.948938][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.970187][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.977426][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.032472][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5611'. [ 401.039052][T22721] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.054374][T22721] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.058414][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5611'. [ 401.062883][ T9019] lo speed is unknown, defaulting to 1000 [ 401.075441][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5611'. [ 401.084616][T22721] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.096094][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5611'. [ 401.108953][T22721] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.129457][T24959] veth1_to_team: mtu less than device minimum [ 401.139488][T22721] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.151613][T22721] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.166496][T22721] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.176541][T22721] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.225123][T22719] bond1: (slave vlan2): link status definitely up, 10000 Mbps full duplex [ 401.241209][T24966] IPVS: ip_vs_edit_dest(): server weight less than zero [ 401.246044][T22719] bond1: (slave vlan2): making interface the new active one [ 401.277553][T22719] bond1: active interface up! [ 401.308033][T24966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5615'. [ 401.335256][T24966] xfrm1: entered promiscuous mode [ 401.340661][T24966] xfrm1: entered allmulticast mode [ 401.361843][T24969] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 401.374306][T24970] sock: sock_set_timeout: `syz.3.5617' (pid 24970) tries to set negative timeout [ 401.388538][T24970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5617'. [ 401.405324][T24970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.588408][T24991] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5625'. [ 401.606036][ T848] IPVS: starting estimator thread 0... [ 401.715361][T24994] IPVS: using max 40 ests per chain, 96000 per kthread [ 401.835235][T25008] geneve3: entered promiscuous mode [ 401.845526][T25008] geneve3: entered allmulticast mode [ 401.858014][T22719] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 401.879017][T22719] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 401.906970][T25008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.920533][T25008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.940334][T22719] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 402.304479][T25042] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 403.259707][T25008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.270481][T25008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.281111][T25008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 403.342067][T25008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.352717][T25008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.364007][T25008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 403.416659][T25008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.427691][T25008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.438525][T25008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 403.487548][T22719] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.496460][T22719] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 403.505499][T22719] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 403.519826][T22719] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.528625][T22719] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 403.537401][T22719] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 403.550715][ T1165] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.560045][ T1165] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 403.569065][ T1165] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 403.615586][T22721] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.667786][T22721] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 403.695294][T22721] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 404.011888][T25133] pim6reg527: entered allmulticast mode [ 404.065472][T25136] openvswitch: netlink: Unknown key attributes 2 [ 404.335385][T25156] validate_nla: 73 callbacks suppressed [ 404.335406][T25156] netlink: 'syz.0.5676': attribute type 1 has an invalid length. [ 404.385255][T25147] netlink: 'syz.1.5674': attribute type 2 has an invalid length. [ 404.467566][T25164] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 404.556178][T25174] netlink: 'syz.0.5679': attribute type 11 has an invalid length. [ 404.574406][T25173] netlink: 'syz.3.5682': attribute type 1 has an invalid length. [ 404.620532][T25182] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 404.635957][T25180] IPVS: stopping backup sync thread 25182 ... [ 404.772423][T25192] netlink: 'syz.0.5688': attribute type 1 has an invalid length. [ 405.037888][T25207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.281821][T25223] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 405.344286][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.355394][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.367160][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.410696][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.421553][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.471145][T25234] netlink: ct family unspecified [ 405.478354][T25234] openvswitch: netlink: Actions may not be safe on all matching packets [ 405.533743][T25226] hsr0 speed is unknown, defaulting to 1000 [ 405.552669][T25226] wg1 speed is unknown, defaulting to 1000 [ 405.566955][T25226] lo speed is unknown, defaulting to 1000 [ 405.602202][T25243] vlan1: entered promiscuous mode [ 405.636142][T25243] bridge0: entered promiscuous mode [ 405.920042][T25264] __nla_validate_parse: 24 callbacks suppressed [ 405.920066][T25264] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5710'. [ 406.005865][T25268] netlink: 'syz.2.5712': attribute type 2 has an invalid length. [ 406.019152][T25268] netlink: 'syz.2.5712': attribute type 2 has an invalid length. [ 406.042874][T25268] netlink: 'syz.2.5712': attribute type 1 has an invalid length. [ 406.071379][T25268] netlink: 'syz.2.5712': attribute type 2 has an invalid length. [ 406.079542][T25264] IPVS: persistence engine module ip_vs_pe_À not found [ 406.289416][T25285] netlink: 'syz.2.5713': attribute type 23 has an invalid length. [ 406.349338][T25226] chnl_net:caif_netlink_parms(): no params data found [ 406.576918][T25292] netlink: 'syz.0.5716': attribute type 29 has an invalid length. [ 406.642751][T25226] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.674822][T25226] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.698060][T25226] bridge_slave_0: entered allmulticast mode [ 406.731765][T25226] bridge_slave_0: entered promiscuous mode [ 406.772563][T25226] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.806356][T25226] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.831191][T25226] bridge_slave_1: entered allmulticast mode [ 406.846589][T25301] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.5720'. [ 406.906697][T25226] bridge_slave_1: entered promiscuous mode [ 406.989660][T25303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.120839][T25302] A link change request failed with some changes committed already. Interface pim6reg0 may have been left with an inconsistent configuration, please check. [ 407.206360][T25226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.229752][T25226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.274762][T25303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5719'. [ 407.390028][T25226] team0: Port device team_slave_0 added [ 407.416890][T25226] team0: Port device team_slave_1 added [ 407.491691][T25226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.503495][ T5869] Bluetooth: hci0: command tx timeout [ 407.515993][T25226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.543925][T25226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.556758][T25226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.565007][T25226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.594128][T25226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.623994][T25341] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5730'. [ 407.792332][T25226] hsr_slave_0: entered promiscuous mode [ 407.801686][T25226] hsr_slave_1: entered promiscuous mode [ 407.821588][T25226] debugfs: 'hsr0' already exists in 'hsr' [ 407.837886][T25346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5730'. [ 407.838128][T25226] Cannot create hsr debugfs directory [ 407.855859][T25359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5735'. [ 407.932463][T25363] sctp: [Deprecated]: syz.0.5737 (pid 25363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.932463][T25363] Use struct sctp_sack_info instead [ 408.006852][T25365] tipc: Enabled bearer , priority 0 [ 408.014792][T25365] syzkaller0: entered promiscuous mode [ 408.020816][T25365] syzkaller0: entered allmulticast mode [ 408.042707][T25365] tipc: Resetting bearer [ 408.054115][T25364] tipc: Resetting bearer [ 408.070886][T25364] tipc: Disabling bearer [ 408.095703][T25374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5740'. [ 408.114878][T25373] delete_channel: no stack [ 408.209561][T25226] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.235005][T25382] netlink: 248 bytes leftover after parsing attributes in process `syz.5.5743'. [ 408.237655][T25226] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.259663][T25226] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 408.325903][T25390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.341266][T25226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.354727][T25226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.366597][T25226] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 408.382206][T25386] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 408.396297][T25386] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 408.407023][T25386] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 408.434142][T25226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.453915][T25226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.473290][T25226] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 408.549523][T25226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.560312][T25226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.571041][T25226] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 408.641376][T25226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.651182][T25226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.661776][T25226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.673757][T25226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 408.724669][T25226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.741454][T25226] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.752629][T22722] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.759855][T22722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.789605][T22722] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.796836][T22722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.842299][T25405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5749'. [ 408.895339][T25405] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 409.139693][T25432] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5753'. [ 409.342576][T25226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.381678][T25446] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 409.472079][T25453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.491808][T25453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.552734][T25226] veth0_vlan: entered promiscuous mode [ 409.577477][ T5869] Bluetooth: hci0: command tx timeout [ 409.595679][T25453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.607571][T25453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.648183][T25226] veth1_vlan: entered promiscuous mode [ 409.691100][T25453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.707884][T25453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.775568][T25453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.814821][T25453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.832364][T25226] veth0_macvtap: entered promiscuous mode [ 409.862190][T25226] veth1_macvtap: entered promiscuous mode [ 409.910258][T25226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.957052][T25226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.972686][T22719] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.990918][T22719] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.038392][T22719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.057781][T22719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.089463][T22721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.228838][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.239420][ T37] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.249850][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.278742][T25478] hsr0 speed is unknown, defaulting to 1000 [ 410.285525][T22721] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.309239][T22721] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.331741][T22721] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.348855][T22721] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.366588][T25478] wg1 speed is unknown, defaulting to 1000 [ 410.392109][T22722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.392413][T25478] lo speed is unknown, defaulting to 1000 [ 410.442212][T22722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.495338][T22722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.521292][T22722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.762457][T25520] validate_nla: 9 callbacks suppressed [ 410.762479][T25520] netlink: 'syz.1.5782': attribute type 1 has an invalid length. [ 410.775709][T25521] tipc: New replicast peer: 255.255.255.255 [ 410.799511][T25521] tipc: Enabled bearer , priority 10 [ 410.967507][T25536] netlink: 'syz.3.5785': attribute type 4 has an invalid length. [ 411.247872][T25553] tipc: Enabling of bearer rejected, failed to enable media [ 411.347325][T25547] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 411.518765][T22722] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 411.604239][T25577] hsr0 speed is unknown, defaulting to 1000 [ 411.614265][T25577] wg1 speed is unknown, defaulting to 1000 [ 411.632334][T25577] lo speed is unknown, defaulting to 1000 [ 411.654179][ T5869] Bluetooth: hci0: command tx timeout [ 411.989478][T25597] netlink: 'syz.1.5802': attribute type 24 has an invalid length. [ 412.120321][T25604] __nla_validate_parse: 5 callbacks suppressed [ 412.120342][T25604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5804'. [ 412.418142][T25622] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5810'. [ 412.451515][T25622] netlink: 'syz.1.5810': attribute type 10 has an invalid length. [ 412.511740][T25622] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 412.659710][T25644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5814'. [ 412.779600][T25654] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 412.791992][T25652] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5817'. [ 412.820082][T25654] veth7: entered promiscuous mode [ 413.055248][T22719] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 413.089170][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5824'. [ 413.103961][T25684] dummy0: entered promiscuous mode [ 413.114451][T25684] batadv_slave_1: entered promiscuous mode [ 413.227660][T25697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.495025][T25714] netlink: 'syz.2.5831': attribute type 1 has an invalid length. [ 413.546460][T25714] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5831'. [ 413.625965][T25726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.668200][T25727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5834'. [ 413.729847][T25727] chnl_net:caif_netlink_parms(): no params data found [ 413.739642][ T5869] Bluetooth: hci0: command tx timeout [ 413.796564][T25740] netlink: 'syz.5.5838': attribute type 1 has an invalid length. [ 413.820711][T25740] netlink: 'syz.5.5838': attribute type 4 has an invalid length. [ 413.836651][T25740] netlink: 192 bytes leftover after parsing attributes in process `syz.5.5838'. [ 413.979031][T25756] netlink: 'syz.1.5841': attribute type 11 has an invalid length. [ 414.006056][T25756] warn_alloc: 1 callbacks suppressed [ 414.006077][T25756] syz.1.5841: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 414.046482][T25756] CPU: 1 UID: 0 PID: 25756 Comm: syz.1.5841 Not tainted syzkaller #0 PREEMPT(full) [ 414.046514][T25756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.046526][T25756] Call Trace: [ 414.046533][T25756] [ 414.046542][T25756] dump_stack_lvl+0x189/0x250 [ 414.046572][T25756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.046596][T25756] ? __pfx__printk+0x10/0x10 [ 414.046622][T25756] ? lock_release+0x4b/0x3e0 [ 414.046649][T25756] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 414.046671][T25756] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 414.046694][T25756] warn_alloc+0x214/0x310 [ 414.046723][T25756] ? stack_depot_save_flags+0x40/0x860 [ 414.046749][T25756] ? __pfx_warn_alloc+0x10/0x10 [ 414.046778][T25756] ? kasan_save_track+0x4f/0x80 [ 414.046803][T25756] ? xskq_create+0x56/0x170 [ 414.046826][T25756] ? xsk_init_queue+0xb0/0x110 [ 414.046847][T25756] ? xsk_setsockopt+0x4dc/0x8d0 [ 414.046869][T25756] ? do_sock_setsockopt+0x17c/0x1b0 [ 414.046901][T25756] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 414.046918][T25756] ? do_syscall_64+0xfa/0x3b0 [ 414.046946][T25756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.046968][T25756] __vmalloc_node_range_noprof+0x125/0x12f0 [ 414.047007][T25756] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 414.047034][T25756] ? xsk_setsockopt+0x462/0x8d0 [ 414.047056][T25756] ? __kasan_kmalloc+0x93/0xb0 [ 414.047080][T25756] vmalloc_user_noprof+0xad/0xf0 [ 414.047106][T25756] ? xskq_create+0xbf/0x170 [ 414.047127][T25756] xskq_create+0xbf/0x170 [ 414.047151][T25756] xsk_init_queue+0xb0/0x110 [ 414.047172][T25756] xsk_setsockopt+0x4dc/0x8d0 [ 414.047194][T25756] ? __pfx_xsk_setsockopt+0x10/0x10 [ 414.047214][T25756] ? __pfx_aa_sk_perm+0x10/0x10 [ 414.047239][T25756] ? lock_release+0x4b/0x3e0 [ 414.047265][T25756] ? aa_sock_opt_perm+0xff/0x1b0 [ 414.047285][T25756] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 414.047307][T25756] ? __pfx_xsk_setsockopt+0x10/0x10 [ 414.047330][T25756] do_sock_setsockopt+0x17c/0x1b0 [ 414.047348][T25756] __x64_sys_setsockopt+0x13f/0x1b0 [ 414.047370][T25756] do_syscall_64+0xfa/0x3b0 [ 414.047397][T25756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.047414][T25756] ? clear_bhb_loop+0x60/0xb0 [ 414.047434][T25756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.047450][T25756] RIP: 0033:0x7ff67438ebe9 [ 414.047468][T25756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.047487][T25756] RSP: 002b:00007ff6725cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 414.047509][T25756] RAX: ffffffffffffffda RBX: 00007ff6745b6090 RCX: 00007ff67438ebe9 [ 414.047524][T25756] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 414.047536][T25756] RBP: 00007ff674411e19 R08: 0000000000000004 R09: 0000000000000000 [ 414.047548][T25756] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.047559][T25756] R13: 00007ff6745b6128 R14: 00007ff6745b6090 R15: 00007ffdddc69a88 [ 414.047582][T25756] [ 414.047591][T25756] Mem-Info: [ 414.299569][T25770] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 414.309975][T25756] active_anon:9039 inactive_anon:0 isolated_anon:0 [ 414.309975][T25756] active_file:3552 inactive_file:39991 isolated_file:0 [ 414.309975][T25756] unevictable:768 dirty:70 writeback:0 [ 414.309975][T25756] slab_reclaimable:14240 slab_unreclaimable:144050 [ 414.309975][T25756] mapped:29580 shmem:1377 pagetables:1716 [ 414.309975][T25756] sec_pagetables:0 bounce:0 [ 414.309975][T25756] kernel_misc_reclaimable:0 [ 414.309975][T25756] free:1267529 free_pcp:14190 free_cma:0 [ 414.358978][T25771] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 414.366160][T25756] Node 0 active_anon:36156kB inactive_anon:0kB active_file:14208kB inactive_file:159764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118320kB dirty:276kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16604kB pagetables:6724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 414.366223][T25756] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 414.366274][T25756] Node 0 DMA free:15160kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:104kB free_cma:0kB [ 414.366334][T25756] lowmem_reserve[]: [ 414.419936][T25770] Bluetooth: MGMT ver 1.23 [ 414.452351][T25756] 0 2497 2499 2499 2499 [ 414.452405][T25756] Node 0 DMA32 free:1151932kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36112kB inactive_anon:0kB active_file:14208kB inactive_file:158172kB unevictable:1536kB writepending:276kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:46796kB local_pcp:19796kB free_cma:0kB [ 414.452469][T25756] lowmem_reserve[]: 0 0 1 1 1 [ 414.452507][T25756] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 414.452564][T25756] lowmem_reserve[]: 0 0 0 0 0 [ 414.452602][T25756] Node 1 Normal free:3903024kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9664kB local_pcp:5504kB free_cma:0kB [ 414.452660][T25756] lowmem_reserve[]: 0 0 0 0 0 [ 414.452708][T25756] Node 0 DMA: 6*4kB (U) 4*8kB (U) 2*16kB (U) 3*32kB (U) 2*64kB (U) 4*128kB (U) 4*256kB (U) 2*512kB (U) 0*1024kB 2*2048kB (UM) 2*4096kB (UM) = 15160kB [ 414.454961][T25756] Node 0 DMA32: [ 414.544248][T25773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5847'. [ 414.566759][T25756] 1370*4kB (UM) 619*8kB (UM) 124*16kB (M) 645*32kB (UM) 1110*64kB (UME) 940*128kB (UM) 767*256kB (UME) 536*512kB (UME) 305*1024kB (UME) 40*2048kB (UM) 16*4096kB (UM) = 1154976kB [ 414.685138][T25756] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 414.782240][T25756] Node 1 Normal: 174*4kB (UME) 49*8kB (UME) 45*16kB (UME) 181*32kB (UME) 56*64kB (UME) 15*128kB (UME) 6*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3903280kB [ 414.802481][T25756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.825440][T25780] netlink: 'syz.2.5848': attribute type 1 has an invalid length. [ 414.827502][T25756] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 414.842930][T25780] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5848'. [ 414.857836][T25756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 414.900070][T25756] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 414.967467][T25756] 44917 total pagecache pages [ 415.017225][T25756] 0 pages in swap cache [ 415.021454][T25756] Free swap = 124996kB [ 415.058574][T25756] Total swap = 124996kB [ 415.139766][T25756] 2097051 pages RAM [ 415.145180][T25756] 0 pages HighMem/MovableOnly [ 415.149979][T25756] 425660 pages reserved [ 415.161500][T25756] 0 pages cma reserved [ 415.816530][ T5869] Bluetooth: hci0: command tx timeout [ 416.050716][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.060930][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.073856][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.082610][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.091716][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.144971][T25849] IPVS: length: 157 != 24 [ 416.165678][T25846] hsr0 speed is unknown, defaulting to 1000 [ 416.175396][T25846] wg1 speed is unknown, defaulting to 1000 [ 416.190583][T25846] lo speed is unknown, defaulting to 1000 [ 416.202006][T25849] syzkaller1: entered promiscuous mode [ 416.232486][T25849] syzkaller1: entered allmulticast mode [ 416.679277][T25846] chnl_net:caif_netlink_parms(): no params data found [ 416.722098][T25880] netlink: 'syz.1.5879': attribute type 1 has an invalid length. [ 416.821578][T25893] veth3: entered promiscuous mode [ 416.845923][T25846] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.853916][T25846] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.863280][T25846] bridge_slave_0: entered allmulticast mode [ 416.870748][T25846] bridge_slave_0: entered promiscuous mode [ 416.881206][T25895] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 416.895064][T25846] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.906406][T25846] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.915794][T25846] bridge_slave_1: entered allmulticast mode [ 416.924822][T25846] bridge_slave_1: entered promiscuous mode [ 416.997827][T25846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.027779][T25846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.080613][T25846] team0: Port device team_slave_0 added [ 417.089115][T25846] team0: Port device team_slave_1 added [ 417.111801][T25846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.119234][T25846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.151459][T25846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.170374][T25846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.179196][T25846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.210582][T25846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.217159][T25916] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 417.310534][T25846] hsr_slave_0: entered promiscuous mode [ 417.317337][T25846] hsr_slave_1: entered promiscuous mode [ 417.324130][T25846] debugfs: 'hsr0' already exists in 'hsr' [ 417.330066][T25846] Cannot create hsr debugfs directory [ 417.447262][T25846] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.458133][T25846] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 417.468715][T25846] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 417.538068][T25846] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.552430][T25846] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 417.562945][T25846] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 417.658613][T25846] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.681003][T25846] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 417.703610][T25846] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 417.738912][T25929] tc_dump_action: action bad kind [ 417.746946][T25927] netlink: 'syz.2.5892': attribute type 11 has an invalid length. [ 417.773692][T25846] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.790923][T25935] netlink: 'syz.5.5893': attribute type 10 has an invalid length. [ 417.796403][T25846] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 417.799631][T25937] netlink: 'syz.5.5893': attribute type 10 has an invalid length. [ 417.816215][T25846] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 417.875616][T25937] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 418.057873][T25952] netlink: 'syz.5.5897': attribute type 11 has an invalid length. [ 418.097409][ T30] audit: type=1800 audit(1756277475.097:8): pid=25955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5898" name="memory.events" dev="tmpfs" ino=173 res=0 errno=0 [ 418.129784][T25846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 418.135673][ T5869] Bluetooth: hci2: command tx timeout [ 418.162310][ T30] audit: type=1804 audit(1756277475.097:9): pid=25955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5898" name="/newroot/31/memory.events" dev="tmpfs" ino=173 res=1 errno=0 [ 418.175670][T25965] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 418.185627][T25956] __nla_validate_parse: 4 callbacks suppressed [ 418.185643][T25956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5897'. [ 418.230224][T25962] IPv6: sit3: Disabled Multicast RS [ 418.244182][T25962] sit3: entered allmulticast mode [ 418.262363][T25968] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 418.288078][T25963] batadv3: entered allmulticast mode [ 418.298380][T25846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 418.309107][T25956] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5897'. [ 418.385669][T25962] IPv6: sit3: Disabled Multicast RS [ 418.392361][T25962] sit3: entered allmulticast mode [ 418.416151][T25846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 418.452454][T25963] batadv3: entered allmulticast mode [ 418.488203][T25846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 418.515976][T25962] IPv6: sit3: Disabled Multicast RS [ 418.522096][T25962] sit3: entered allmulticast mode [ 418.571433][T25963] batadv3: entered allmulticast mode [ 418.606521][T25962] IPv6: sit3: Disabled Multicast RS [ 418.634724][T25962] sit3: entered allmulticast mode [ 418.707921][T25963] batadv3: entered allmulticast mode [ 418.725798][T25962] IPv6: sit3: Disabled Multicast RS [ 418.735356][T25962] sit3: entered allmulticast mode [ 418.801933][T25963] batadv3: entered allmulticast mode [ 418.837206][T25962] IPv6: sit3: Disabled Multicast RS [ 418.854239][T25962] sit3: entered allmulticast mode [ 418.941855][T25962] IPv6: sit3: Disabled Multicast RS [ 418.958418][T25962] sit3: entered allmulticast mode [ 419.004522][T25963] batadv3: entered allmulticast mode [ 419.060224][T26019] bond0: (slave bridge_slave_1): Releasing backup interface [ 419.090744][T26019] bond0: (slave bond_slave_0): Releasing backup interface [ 419.111389][T26019] team0: Port device team_slave_0 removed [ 419.112453][T26025] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5917'. [ 419.126893][T26025] netlink: 'syz.5.5917': attribute type 7 has an invalid length. [ 419.127426][T26019] team0: Port device team_slave_1 removed [ 419.135985][T26025] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5917'. [ 419.146965][T26019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.160697][T26019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.180069][T26019] bond4: (slave bond5): Releasing backup interface [ 419.187749][T26019] bond5: left promiscuous mode [ 419.220720][T26022] veth3: entered promiscuous mode [ 419.254001][T26026] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5916'. [ 419.281606][T26028] pimreg: entered allmulticast mode [ 419.291294][T26033] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 419.315356][T26033] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 419.364801][T25846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.376029][T26037] netlink: 'syz.0.5922': attribute type 1 has an invalid length. [ 419.398094][T25846] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.417920][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.425102][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.497345][T26041] bond8: (slave bridge8): making interface the new active one [ 419.506051][T26041] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 419.518228][T22722] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.525385][T22722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.570130][T26048] hsr0 speed is unknown, defaulting to 1000 [ 419.589402][T25846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 419.600458][T25846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.618183][T26048] wg1 speed is unknown, defaulting to 1000 [ 419.694574][T26048] lo speed is unknown, defaulting to 1000 [ 419.860373][T26067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5931'. [ 419.931907][T25846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.056573][T26072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5933'. [ 420.067988][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5933'. [ 420.098592][T26072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5933'. [ 420.121107][T25846] veth0_vlan: entered promiscuous mode [ 420.156638][T25846] veth1_vlan: entered promiscuous mode [ 420.201081][T25846] veth0_macvtap: entered promiscuous mode [ 420.207546][T26072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5933'. [ 420.217747][ T5869] Bluetooth: hci2: command tx timeout [ 420.236141][T26072] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 420.238544][T26079] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 420.248187][T26072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.263923][T25846] veth1_macvtap: entered promiscuous mode [ 420.299509][T25846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.314454][T25846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.335464][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.351394][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.362112][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.371611][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.426102][T22711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.453725][T22711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.528927][ T3458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.563118][ T3458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.186064][T26104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.355780][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.372311][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.381684][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.407773][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.417725][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.460529][T26120] hsr0 speed is unknown, defaulting to 1000 [ 421.470778][T26120] wg1 speed is unknown, defaulting to 1000 [ 421.478225][T26120] lo speed is unknown, defaulting to 1000 [ 421.561838][T22722] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.583405][T22722] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.657976][T22722] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.668585][T22722] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.721940][T22722] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.747122][T22722] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.748695][T26141] netlink: 'syz.5.5951': attribute type 1 has an invalid length. [ 421.766774][T22711] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 421.827332][T22722] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.844325][T22722] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.061907][T22722] veth0_to_bridge: left allmulticast mode [ 422.078051][T22722] veth0_to_bridge: left promiscuous mode [ 422.086890][T22722] bridge0: port 1(veth0_to_bridge) entered disabled state [ 422.111171][T22722] tipc: Resetting bearer [ 422.201816][T26158] xt_socket: unknown flags 0x50 [ 422.252008][T22722] tipc: Disabling bearer [ 422.278353][T22722] dvmrp0 (unregistering): left allmulticast mode [ 422.293122][ T5869] Bluetooth: hci2: command tx timeout [ 422.676839][T22722] bond8 (unregistering): (slave bridge8): Releasing active interface [ 422.727828][T22722] bond0 (unregistering): Released all slaves [ 422.737932][T22722] bond1 (unregistering): Released all slaves [ 422.749246][T22722] bond2 (unregistering): Released all slaves [ 422.760354][T22722] bond3 (unregistering): Released all slaves [ 422.772098][T22722] bond4 (unregistering): Released all slaves [ 422.791294][T22722] bond5 (unregistering): Released all slaves [ 422.805232][T22722] bond6 (unregistering): Released all slaves [ 422.816947][T22722] bond7 (unregistering): Released all slaves [ 422.828854][T22722] bond8 (unregistering): Released all slaves [ 422.844062][T26120] chnl_net:caif_netlink_parms(): no params data found [ 422.982676][T22722] : left promiscuous mode [ 423.038242][T26190] sit0: entered promiscuous mode [ 423.066193][T26190] netlink: 'syz.3.5966': attribute type 1 has an invalid length. [ 423.121264][T22722] tipc: Disabling bearer [ 423.142038][T22722] tipc: Left network mode [ 423.236194][T26120] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.246791][T26120] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.255153][T26120] bridge_slave_0: entered allmulticast mode [ 423.262682][T26120] bridge_slave_0: entered promiscuous mode [ 423.286470][T26210] netlink: 'syz.3.5970': attribute type 25 has an invalid length. [ 423.296377][T26120] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.307938][T26120] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.316373][T26120] bridge_slave_1: entered allmulticast mode [ 423.325955][T26120] bridge_slave_1: entered promiscuous mode [ 423.419771][T26213] syzkaller0: entered promiscuous mode [ 423.431589][T26213] syzkaller0: entered allmulticast mode [ 423.449648][T26208] tipc: Enabling of bearer rejected, failed to enable media [ 423.462088][T26120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.482748][T26120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.494618][ T5869] Bluetooth: hci1: command tx timeout [ 423.550634][T26120] team0: Port device team_slave_0 added [ 423.559667][ T5869] block nbd2: Receive control failed (result -32) [ 423.571781][T26120] team0: Port device team_slave_1 added [ 423.648130][T26120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.658192][T26120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.687145][T26120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.721702][T26120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.729634][T26120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.756546][T26120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.783852][T26234] __nla_validate_parse: 7 callbacks suppressed [ 423.783875][T26234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5977'. [ 423.841137][T26240] netlink: 'syz.2.5980': attribute type 2 has an invalid length. [ 423.861884][T26240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5980'. [ 423.878927][T26240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5980'. [ 423.890499][T26240] netlink: 'syz.2.5980': attribute type 2 has an invalid length. [ 423.968916][T26120] hsr_slave_0: entered promiscuous mode [ 423.988614][T26120] hsr_slave_1: entered promiscuous mode [ 424.028010][T26120] debugfs: 'hsr0' already exists in 'hsr' [ 424.037258][T26120] Cannot create hsr debugfs directory [ 424.132334][T26255] netlink: 'syz.5.5984': attribute type 7 has an invalid length. [ 424.252397][T22722] hsr_slave_0: left promiscuous mode [ 424.282372][T22722] veth1_macvtap: left promiscuous mode [ 424.291786][T22722] veth0_macvtap: left promiscuous mode [ 424.300389][T22722] veth1_vlan: left promiscuous mode [ 424.307815][T22722] veth0_vlan: left promiscuous mode [ 424.371598][T22722] pim6reg (unregistering): left allmulticast mode [ 424.383389][ T5869] Bluetooth: hci2: command tx timeout [ 424.817945][T26280] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 424.879647][T26280] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 424.893414][T26280] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 425.208706][T26308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6002'. [ 425.225679][T22722] IPVS: stop unused estimator thread 0... [ 425.248505][T26311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.332762][T26317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6004'. [ 425.364675][T26120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 425.375315][T26120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 425.387211][T26120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 425.398044][T26120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 425.548158][T26120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.573897][ T5869] Bluetooth: hci1: command tx timeout [ 425.608620][T26120] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.635051][T22711] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.642182][T22711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.662588][ T3458] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.669759][ T3458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.911954][T26356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6016'. [ 425.912028][T26353] bridge_slave_0: left allmulticast mode [ 425.950281][T26353] bridge_slave_0: left promiscuous mode [ 425.961188][T26353] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.970423][T26358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6016'. [ 425.991496][T26353] bridge_slave_1: left allmulticast mode [ 425.995468][T26360] netlink: 'syz.2.6017': attribute type 10 has an invalid length. [ 425.998045][T26353] bridge_slave_1: left promiscuous mode [ 426.011757][T26353] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.028535][T26353] bond0: (slave bond_slave_0): Releasing backup interface [ 426.038832][T26353] bond0: (slave bond_slave_1): Releasing backup interface [ 426.051597][T26353] team0: Port device team_slave_0 removed [ 426.062764][T26353] team0: Port device team_slave_1 removed [ 426.078970][T26353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.090992][T26353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.101217][T26353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.114428][T26353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.135548][T26353] bond0: (slave wlan1): Releasing backup interface [ 426.149551][T26356] xfrm1: entered promiscuous mode [ 426.160071][T26356] xfrm1: entered allmulticast mode [ 426.184399][T26360] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.192358][T26360] bridge_slave_1: left allmulticast mode [ 426.200777][T26360] bridge_slave_1: left promiscuous mode [ 426.207280][T26360] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.377427][ T5869] Bluetooth: hci0: command tx timeout [ 426.402076][T26120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.487323][T26120] veth0_vlan: entered promiscuous mode [ 426.520903][T26120] veth1_vlan: entered promiscuous mode [ 426.539860][T26391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6022'. [ 426.581786][T26391] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 426.596770][T26391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.599257][T26120] veth0_macvtap: entered promiscuous mode [ 426.638059][T26120] veth1_macvtap: entered promiscuous mode [ 426.658508][T26120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.668966][T26393] netlink: 'syz.3.6023': attribute type 1 has an invalid length. [ 426.677864][T26393] netlink: 'syz.3.6023': attribute type 2 has an invalid length. [ 426.739171][T26120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.781731][T22711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.807563][T22711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.835641][T22711] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.863590][T22719] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.984735][T26410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.099275][T22719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.112142][T22719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.200922][T26428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6035'. [ 427.212606][T22711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.234320][T22711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.375593][T26434] netlink: 'syz.1.6037': attribute type 10 has an invalid length. [ 427.390440][T26441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6038'. [ 427.432758][T26434] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 427.581623][T26450] hsr0 speed is unknown, defaulting to 1000 [ 427.590037][T26452] veth1_to_team: entered allmulticast mode [ 427.600844][T26450] wg1 speed is unknown, defaulting to 1000 [ 427.612139][T26450] lo speed is unknown, defaulting to 1000 [ 427.653715][ T5869] Bluetooth: hci1: command tx timeout [ 428.000552][T26475] mac80211_hwsim hwsim62 wlan1: entered allmulticast mode [ 428.027527][T26481] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 428.058805][T26475] netlink: 'syz.3.6051': attribute type 10 has an invalid length. [ 428.109481][T26475] mac80211_hwsim hwsim62 wlan1: left allmulticast mode [ 428.161233][T26480] bridge_slave_0: left allmulticast mode [ 428.171518][T26480] bridge_slave_0: left promiscuous mode [ 428.179103][T26480] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.195165][T26480] bridge_slave_1: left allmulticast mode [ 428.201227][T26480] bridge_slave_1: left promiscuous mode [ 428.211468][T26480] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.225897][T26480] bond0: (slave bond_slave_0): Releasing backup interface [ 428.238339][T26480] bond0: (slave bond_slave_1): Releasing backup interface [ 428.255689][T26480] team0: Port device team_slave_0 removed [ 428.270280][T26480] team0: Port device team_slave_1 removed [ 428.278022][T26480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.286453][T26480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.299684][T26480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.311236][T26480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.350284][T26478] hsr0 speed is unknown, defaulting to 1000 [ 428.372635][T26478] wg1 speed is unknown, defaulting to 1000 [ 428.410021][T26501] netlink: 'syz.1.6058': attribute type 1 has an invalid length. [ 428.411139][T26478] lo speed is unknown, defaulting to 1000 [ 428.452377][T26501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.506678][T26501] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 428.814649][T26527] netlink: 'syz.0.6068': attribute type 8 has an invalid length. [ 428.862479][T26527] __nla_validate_parse: 7 callbacks suppressed [ 428.862501][T26527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6068'. [ 428.927500][T26537] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 428.943811][T26538] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6070'. [ 428.954415][T26538] netlink: 1981 bytes leftover after parsing attributes in process `syz.1.6070'. [ 428.958799][T26532] netlink: 'syz.1.6070': attribute type 23 has an invalid length. [ 428.968581][T26538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6070'. [ 429.091220][T26536] hsr0 speed is unknown, defaulting to 1000 [ 429.174761][T26536] wg1 speed is unknown, defaulting to 1000 [ 429.265096][T23791] udevd[23791]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 429.315835][T26536] lo speed is unknown, defaulting to 1000 [ 429.327981][T26544] netlink: 'syz.5.6072': attribute type 11 has an invalid length. [ 429.361643][ T9020] IPVS: starting estimator thread 0... [ 429.367706][T26546] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 429.498593][T26556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6075'. [ 429.517210][T26552] IPVS: using max 33 ests per chain, 79200 per kthread [ 429.552762][T26558] tipc: Enabled bearer , priority 0 [ 429.568686][T26558] syzkaller0: entered promiscuous mode [ 429.577710][T26558] syzkaller0: entered allmulticast mode [ 429.657716][T26567] tipc: Started in network mode [ 429.674508][T26567] tipc: Node identity 9607746577aa, cluster identity 4711 [ 429.681926][T26567] tipc: Enabled bearer , priority 0 [ 429.733142][ T5869] Bluetooth: hci1: command tx timeout [ 429.800976][T26567] syzkaller0: entered promiscuous mode [ 429.867657][T26567] syzkaller0: entered allmulticast mode [ 429.888982][T26567] tipc: Resetting bearer [ 429.976519][T26572] tipc: Resetting bearer [ 429.996882][T26557] tipc: Resetting bearer [ 430.024625][T26557] tipc: Disabling bearer [ 430.124350][T26581] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6081'. [ 430.182698][T26583] netlink: 'syz.1.6082': attribute type 24 has an invalid length. [ 430.500402][T26564] tipc: Resetting bearer [ 430.691163][T26564] tipc: Disabling bearer [ 430.751750][T26597] mac80211_hwsim hwsim44 wlan1: left promiscuous mode [ 430.792909][T26597] mac80211_hwsim hwsim44 wlan1: left allmulticast mode [ 430.975982][T26611] pim6reg1: entered promiscuous mode [ 430.988621][T26611] pim6reg1: entered allmulticast mode [ 431.033197][T26617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.051687][T26620] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6089'. [ 431.140683][T26611] hsr0 speed is unknown, defaulting to 1000 [ 431.170828][T26611] wg1 speed is unknown, defaulting to 1000 [ 431.230925][T26611] lo speed is unknown, defaulting to 1000 [ 431.297346][T26628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.352550][T26649] tipc: Started in network mode [ 431.372371][T26649] tipc: Node identity 4e6265dfa75f, cluster identity 4711 [ 431.405843][T26649] tipc: Enabled bearer , priority 0 [ 431.418386][T26655] veth1_virt_wifi: mtu greater than device maximum [ 431.451260][T26648] tipc: Disabling bearer [ 431.544114][T26662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6100'. [ 431.601958][T26667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6103'. [ 431.610525][T26668] netlink: 'syz.2.6102': attribute type 1 has an invalid length. [ 431.619219][T26668] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6102'. [ 431.906492][T26692] tipc: Started in network mode [ 431.911561][T26692] tipc: Node identity 220bc7be080a, cluster identity 4711 [ 431.920004][T26692] tipc: Enabled bearer , priority 0 [ 431.931126][T26692] syzkaller0: entered promiscuous mode [ 431.943869][T26692] syzkaller0: entered allmulticast mode [ 431.978108][T26692] 8021q: VLANs not supported on ip_vti0 [ 431.997932][T26692] tipc: Resetting bearer [ 432.026497][T26691] tipc: Resetting bearer [ 432.047270][T26691] tipc: Disabling bearer [ 432.344269][T26716] netlink: 'syz.3.6116': attribute type 10 has an invalid length. [ 432.369488][T26716] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 432.451558][T26727] vlan2: entered promiscuous mode [ 432.457218][T26727] vlan2: entered allmulticast mode [ 432.462497][T26727] hsr_slave_1: entered allmulticast mode [ 432.511056][T26729] netlink: 'syz.5.6122': attribute type 4 has an invalid length. [ 432.664631][T26734] bond1: (slave veth0_to_bond): Releasing active interface [ 432.728781][T26734] bond0: (slave wlan1): Releasing backup interface [ 432.862111][T26742] syzkaller0: entered promiscuous mode [ 432.875673][T26742] syzkaller0: entered allmulticast mode [ 432.955197][T26762] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 433.181491][T26784] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 433.749044][T26823] syzkaller1: entered promiscuous mode [ 433.759085][T26823] syzkaller1: entered allmulticast mode [ 433.888692][T26836] bond_slave_1: mtu less than device minimum [ 433.908469][T26839] __nla_validate_parse: 9 callbacks suppressed [ 433.908490][T26839] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6153'. [ 433.932586][T26839] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6153'. [ 434.010811][T26844] netlink: 'syz.1.6154': attribute type 21 has an invalid length. [ 434.054086][T26844] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6154'. [ 434.148202][T26856] netlink: 'syz.0.6157': attribute type 1 has an invalid length. [ 434.182200][T26856] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6157'. [ 434.394255][T26872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6160'. [ 434.421688][T26872] tipc: Enabled bearer , priority 0 [ 434.430907][T26872] syzkaller0: entered promiscuous mode [ 434.440296][T26872] syzkaller0: entered allmulticast mode [ 434.448220][T26876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6163'. [ 434.461875][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6163'. [ 434.475878][T26872] tipc: Resetting bearer [ 434.545198][T26868] tipc: Resetting bearer [ 434.561273][T26868] tipc: Disabling bearer [ 434.587348][T26882] erspan0: entered allmulticast mode [ 434.621376][T26885] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34 [ 434.681531][T26890] netlink: 'syz.5.6168': attribute type 6 has an invalid length. [ 434.964921][T26913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6177'. [ 434.966378][T26907] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6175'. [ 434.999556][T26917] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6178'. [ 435.020537][T26917] netlink: 'syz.3.6178': attribute type 5 has an invalid length. [ 435.408092][T26935] netlink: 'syz.0.6184': attribute type 2 has an invalid length. [ 435.442001][T26939] netlink: 'syz.3.6186': attribute type 11 has an invalid length. [ 435.519256][T26945] netlink: 'syz.0.6189': attribute type 1 has an invalid length. [ 435.729339][T26964] netlink: 'syz.5.6191': attribute type 8 has an invalid length. [ 436.226737][T27002] bond2 (unregistering): Released all slaves [ 436.441454][T27013] netlink: 'syz.2.6208': attribute type 1 has an invalid length. [ 436.450975][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 436.461462][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 436.470425][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 436.478243][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 436.487435][T27007] ip6tnl1: entered promiscuous mode [ 436.492683][T27007] ip6tnl1: entered allmulticast mode [ 436.501451][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 436.547249][T27013] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.589639][ T30] audit: type=1800 audit(1756277493.607:10): pid=27021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6209" name="memory.events" dev="tmpfs" ino=656 res=0 errno=0 [ 436.593448][T27013] bond5: (slave gretap2): making interface the new active one [ 436.620199][T27013] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 436.676011][T27016] vlan3: entered promiscuous mode [ 436.695335][T27016] bond5: entered promiscuous mode [ 436.700440][T27016] gretap2: entered promiscuous mode [ 436.720711][T27016] vlan3: entered allmulticast mode [ 436.729892][T27016] bond5: entered allmulticast mode [ 436.740134][T27016] gretap2: entered allmulticast mode [ 436.812375][T27012] hsr0 speed is unknown, defaulting to 1000 [ 436.819975][T27012] wg1 speed is unknown, defaulting to 1000 [ 436.827835][T27012] lo speed is unknown, defaulting to 1000 [ 436.994866][T27055] vlan4: entered promiscuous mode [ 437.027173][T27054] delete_channel: no stack [ 437.035403][T27054] netlink: 'syz.1.6217': attribute type 75 has an invalid length. [ 437.212666][T27072] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.252942][T27072] bond0: (slave team0): Enslaving as an active interface with an up link [ 437.806697][T27012] chnl_net:caif_netlink_parms(): no params data found [ 437.904963][ T9020] hid-generic 0005:16C0:0005.0003: item fetching failed at offset 0/1 [ 437.923267][ T9020] hid-generic 0005:16C0:0005.0003: probe with driver hid-generic failed with error -22 [ 438.071803][T27012] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.081669][T27012] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.089600][T27012] bridge_slave_0: entered allmulticast mode [ 438.096752][T27012] bridge_slave_0: entered promiscuous mode [ 438.123053][T27012] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.130852][T27012] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.141388][T27012] bridge_slave_1: entered allmulticast mode [ 438.148831][T27012] bridge_slave_1: entered promiscuous mode [ 438.228072][T27150] validate_nla: 1 callbacks suppressed [ 438.228094][T27150] netlink: 'syz.2.6239': attribute type 32 has an invalid length. [ 438.265554][T27012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.286603][T27012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.371500][T27012] team0: Port device team_slave_0 added [ 438.396413][T27012] team0: Port device team_slave_1 added [ 438.497731][T27012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.524497][T27012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.551334][ T5869] Bluetooth: hci5: command tx timeout [ 438.583740][T27012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.607584][T27012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.622139][T27012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.657434][T27012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.766607][T27012] hsr_slave_0: entered promiscuous mode [ 438.780757][T27012] hsr_slave_1: entered promiscuous mode [ 438.797319][T27012] debugfs: 'hsr0' already exists in 'hsr' [ 438.817117][T27012] Cannot create hsr debugfs directory [ 439.182030][T27205] __nla_validate_parse: 24 callbacks suppressed [ 439.182054][T27205] netlink: 86684 bytes leftover after parsing attributes in process `syz.3.6253'. [ 439.488153][T27218] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6258'. [ 439.499577][T27012] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.591595][T27012] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.664670][T27012] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.697384][T27229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6261'. [ 439.709498][T27229] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.779087][T27012] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.819135][T27238] netlink: 'syz.1.6263': attribute type 9 has an invalid length. [ 439.830417][T27240] netlink: 'syz.1.6263': attribute type 9 has an invalid length. [ 439.869937][T27242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6265'. [ 439.892360][T27246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6264'. [ 439.906771][T27247] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6264'. [ 439.975432][T27248] veth3: entered promiscuous mode [ 439.989472][T27250] netlink: 'syz.2.6266': attribute type 12 has an invalid length. [ 439.999159][T27250] netlink: 'syz.2.6266': attribute type 29 has an invalid length. [ 440.007867][T27250] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6266'. [ 440.017226][T27250] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6266'. [ 440.062174][T27012] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 440.089853][T27255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6267'. [ 440.101213][T27255] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6267'. [ 440.110558][T27255] netlink: 'syz.1.6267': attribute type 5 has an invalid length. [ 440.129746][T27012] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 440.150521][T27012] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 440.176101][T27012] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 440.196152][T27258] tipc: Enabled bearer , priority 0 [ 440.258189][T27269] netlink: 'syz.2.6270': attribute type 5 has an invalid length. [ 440.268001][T27258] tipc: Disabling bearer [ 440.389047][T27275] gretap0: entered promiscuous mode [ 440.449551][T27012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.525779][T27012] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.557383][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.564591][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.607806][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.615054][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.634519][ T5869] Bluetooth: hci5: command tx timeout [ 440.640519][T27299] netlink: 'syz.2.6278': attribute type 1 has an invalid length. [ 440.693133][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.091452][T27339] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 441.169776][T27012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.312649][T27351] netlink: 'syz.2.6289': attribute type 1 has an invalid length. [ 441.312650][T27354] netlink: 'syz.3.6290': attribute type 11 has an invalid length. [ 441.336833][ T1165] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.348527][T22721] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.363395][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.373887][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.778227][T27012] veth0_vlan: entered promiscuous mode [ 441.819409][T27012] veth1_vlan: entered promiscuous mode [ 441.906378][T27012] veth0_macvtap: entered promiscuous mode [ 441.947088][T27012] veth1_macvtap: entered promiscuous mode [ 441.974981][T27382] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 441.975046][T27012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.982302][T27382] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 441.992303][T27012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.110331][T22721] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.145104][T22721] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.229452][T22721] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.255319][T22721] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.438055][T27409] nbd: illegal input index -8454144 [ 442.482522][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.507503][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.613136][T22721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.621187][T22721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.694261][ T5869] Bluetooth: hci5: command tx timeout [ 442.906974][T27448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.217117][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 443.227583][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 443.235571][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 443.248876][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 443.257290][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.275119][T27463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.305629][T27467] hsr0 speed is unknown, defaulting to 1000 [ 443.312689][T27467] wg1 speed is unknown, defaulting to 1000 [ 443.320201][T27467] lo speed is unknown, defaulting to 1000 [ 443.789897][T27467] chnl_net:caif_netlink_parms(): no params data found [ 444.001741][T27467] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.017718][T27467] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.025686][T27467] bridge_slave_0: entered allmulticast mode [ 444.035876][T27467] bridge_slave_0: entered promiscuous mode [ 444.049479][T27467] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.058982][T27467] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.066423][T27467] bridge_slave_1: entered allmulticast mode [ 444.090544][T27467] bridge_slave_1: entered promiscuous mode [ 444.145736][T27467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.166571][T27467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.250200][T27467] team0: Port device team_slave_0 added [ 444.278842][T27467] team0: Port device team_slave_1 added [ 444.318980][T27521] validate_nla: 5 callbacks suppressed [ 444.319001][T27521] netlink: 'syz.0.6333': attribute type 18 has an invalid length. [ 444.378204][T27530] __nla_validate_parse: 26 callbacks suppressed [ 444.378226][T27530] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6333'. [ 444.411207][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.465718][T27467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.491176][T27467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.526057][T27467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.553797][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.568882][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.612565][T27542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6340'. [ 444.620344][T27467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.646027][T27467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.723282][T27553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6343'. [ 444.741602][T27467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.771744][T27552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6343'. [ 444.773409][ T5869] Bluetooth: hci5: command tx timeout [ 444.787687][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.806484][T27553] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6343'. [ 444.809829][T27552] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6343'. [ 444.921250][T27552] geneve2: entered promiscuous mode [ 444.927490][T27552] geneve2: entered allmulticast mode [ 444.938045][ T9] IPVS: starting estimator thread 0... [ 444.955585][T27559] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 445.009282][T27559] netlink: 'syz.3.6345': attribute type 1 has an invalid length. [ 445.036877][T27467] hsr_slave_0: entered promiscuous mode [ 445.054256][T27467] hsr_slave_1: entered promiscuous mode [ 445.064012][T27561] IPVS: using max 43 ests per chain, 103200 per kthread [ 445.071673][T27467] debugfs: 'hsr0' already exists in 'hsr' [ 445.078747][T27467] Cannot create hsr debugfs directory [ 445.090003][T27563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.251489][T27575] vlan0: entered allmulticast mode [ 445.253614][T27579] netlink: 'syz.3.6351': attribute type 1 has an invalid length. [ 445.265002][T27579] netlink: 'syz.3.6351': attribute type 11 has an invalid length. [ 445.274678][T27579] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6351'. [ 445.284894][T27575] bond0: entered allmulticast mode [ 445.290085][T27575] team0: entered allmulticast mode [ 445.334079][ T5869] Bluetooth: hci3: command tx timeout [ 445.515005][T27467] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.526169][T27467] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.621207][T27467] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.638035][T27467] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.652664][T27615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6359'. [ 445.676290][T27615] netlink: 'syz.3.6359': attribute type 1 has an invalid length. [ 445.690359][T27615] netlink: 'syz.3.6359': attribute type 1 has an invalid length. [ 445.701882][T27615] netlink: 'syz.3.6359': attribute type 2 has an invalid length. [ 445.704594][T27611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6359'. [ 445.715128][T27615] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6359'. [ 445.738328][T27467] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.749267][T27467] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.821458][T27467] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.836468][T27467] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.848620][ C0] ------------[ cut here ]------------ [ 445.854324][ C0] kernel BUG at arch/x86/mm/physaddr.c:28! [ 445.860205][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 445.866482][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 445.875712][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.885792][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 445.891006][ C0] Code: 8d ae 00 e9 45 ff ff ff e8 62 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 10 c0 8a 03 e9 4d ff ff ff e8 46 24 4b 00 90 <0f> 0b e8 3e 24 4b 00 90 0f 0b e8 36 24 4b 00 90 0f 0b 0f 1f 00 90 [ 445.910865][ C0] RSP: 0018:ffffc90000147878 EFLAGS: 00010246 [ 445.917216][ C0] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801ce9bc00 [ 445.925376][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 445.933640][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: 0000000000000000 [ 445.941632][ C0] R10: dffffc0000000000 R11: ffffffff8a021100 R12: ffffffff8a021100 [ 445.949625][ C0] R13: ffffffff81a7f7c7 R14: 000000017fff0000 R15: dffffc0000000000 [ 445.957689][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 445.966889][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.973847][ C0] CR2: 00002000000000c0 CR3: 000000007803c000 CR4: 00000000003526f0 [ 445.981826][ C0] Call Trace: [ 445.985111][ C0] [ 445.988047][ C0] ? in_dev_free_rcu+0x49/0x60 [ 445.992829][ C0] kfree+0x77/0x440 [ 445.996644][ C0] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 446.002019][ C0] ? rcu_core+0xc37/0x1770 [ 446.006446][ C0] in_dev_free_rcu+0x49/0x60 [ 446.011073][ C0] rcu_core+0xca8/0x1770 [ 446.015414][ C0] ? debug_object_activate+0x2e2/0x420 [ 446.021059][ C0] ? __pfx_rcu_core+0x10/0x10 [ 446.025742][ C0] ? rcu_qs+0xc4/0x170 [ 446.029905][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 446.034582][ C0] ? rcu_is_watching+0x15/0xb0 [ 446.039521][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 446.044458][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 446.049688][ C0] handle_softirqs+0x283/0x870 [ 446.054456][ C0] ? run_ksoftirqd+0x9b/0x100 [ 446.059150][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 446.064457][ C0] ? schedule+0x91/0x360 [ 446.068727][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 446.073844][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 446.078973][ C0] run_ksoftirqd+0x9b/0x100 [ 446.083663][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 446.088778][ C0] smpboot_thread_fn+0x53f/0xa60 [ 446.093762][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 446.098806][ C0] kthread+0x70e/0x8a0 [ 446.102915][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 446.108397][ C0] ? __pfx_kthread+0x10/0x10 [ 446.112999][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.118303][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.123517][ C0] ? __pfx_kthread+0x10/0x10 [ 446.128110][ C0] ret_from_fork+0x3f9/0x770 [ 446.132795][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 446.137909][ C0] ? __switch_to_asm+0x39/0x70 [ 446.142809][ C0] ? __switch_to_asm+0x33/0x70 [ 446.147592][ C0] ? __pfx_kthread+0x10/0x10 [ 446.152271][ C0] ret_from_fork_asm+0x1a/0x30 [ 446.157146][ C0] [ 446.160190][ C0] Modules linked in: [ 446.164237][ C0] ---[ end trace 0000000000000000 ]--- [ 446.169716][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 446.175024][ C0] Code: 8d ae 00 e9 45 ff ff ff e8 62 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 10 c0 8a 03 e9 4d ff ff ff e8 46 24 4b 00 90 <0f> 0b e8 3e 24 4b 00 90 0f 0b e8 36 24 4b 00 90 0f 0b 0f 1f 00 90 [ 446.194887][ C0] RSP: 0018:ffffc90000147878 EFLAGS: 00010246 [ 446.200995][ C0] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801ce9bc00 [ 446.209103][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 446.217138][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: 0000000000000000 [ 446.225592][ C0] R10: dffffc0000000000 R11: ffffffff8a021100 R12: ffffffff8a021100 [ 446.233793][ C0] R13: ffffffff81a7f7c7 R14: 000000017fff0000 R15: dffffc0000000000 [ 446.241802][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 446.250859][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.257560][ C0] CR2: 00002000000000c0 CR3: 000000007803c000 CR4: 00000000003526f0 [ 446.265626][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 446.273248][ C0] Kernel Offset: disabled [ 446.278026][ C0] Rebooting in 86400 seconds..