last executing test programs: 1m11.444500111s ago: executing program 2 (id=1673): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x890c, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x18}}], 0x1, 0x0) getsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 1m11.32959273s ago: executing program 2 (id=1676): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0x0, 0x8}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000006007111000000850000007600000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_init_net_socket$llc(0x1a, 0x801, 0x0) close(0x4) 1m11.188084899s ago: executing program 2 (id=1678): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5218) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000008001400"/30, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) 1m10.973691018s ago: executing program 2 (id=1682): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a090000140002"], 0x58}, 0x1, 0xffffffff00000003}, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1m10.906207547s ago: executing program 2 (id=1684): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x24048041) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="90000000", @ANYRES32=0x0, @ANYBLOB="8b04040000"], 0x90}}, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xbb}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x40080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004b00), r1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newtclass={0x34, 0x28, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {0xd, 0xd}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @TCA_RATE={0x6, 0x5, {0x1d, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x20000001) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x4a}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x4, 0x0, &(0x7f0000000180)) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000005280)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005240)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf253b00f3ff08000300d208000000d2cfda337453d803141cc5eb", @ANYRES32=r6, @ANYBLOB="0a00cd0009000200020000005000330010200000ffffffffffffffffffffffff080211000000410020c06b00060001002d1a001019c3cf000000000000000038000b00000006000000000006dd0603bfd47933e1dd0658f91febd0693e00330030140000080211000001080211000000ffffffffffff090008552a008f7c2d1a100007050000000000000008000000030000000008799d9148100000"], 0xb8}, 0x1, 0x0, 0x0, 0x44011}, 0x4010) 1m10.785467621s ago: executing program 2 (id=1686): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000300)="6a8b63bd33", 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x880) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x880) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000240)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xff}, 0xfd, 0xfd}, {0x1, 0x3, {0x2, 0xff, 0x2}, {0x0, 0xf, 0x1}, 0x1, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0x0, 0x4}, 0x1, 0x2}, {0x3, 0x2, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x2}, {0x2, 0xf0, 0x2}, 0x1, 0xfe}, {0x3, 0x1, {0x1, 0xff, 0x3}, {0x0, 0xf0, 0x2}, 0xfd, 0x1}, {0x1, 0x1, {0x2, 0x1, 0x4}, {0x1, 0xf0, 0x4}, 0x0, 0xff}, {0x0, 0x0, {0x1, 0xff, 0x4}, {0x0, 0x0, 0x2}, 0x1, 0x2}, {0x3, 0x3, {}, {0x1, 0xf0, 0x2}, 0x0, 0xfe}, {0x2, 0x1, {0x0, 0xff, 0x2}, {0x2, 0x0, 0x4}, 0x1, 0xfd}], 0x140) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket(0x2, 0x3, 0xff) (async) socket(0x2, 0x3, 0xff) 42.857197502s ago: executing program 32 (id=1686): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000300)="6a8b63bd33", 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r1, @ANYBLOB="000227bd7000fcdbdf2539000000d8005a800c000280050004003b000000200003801400050006000100090004000500fcff000009000500060002000000a80002801c000200421b0103573e451a0b1232112536252314010702391e040d140005000600ff00f90107000300ff030b00000825000200394856480c3d47314009374119241f090514143631343c512609155409172407290000000f0001000003241b0121360109050100140005000a0003000900ca0c050001000600010014000100300918066c090b0448020c043d06092d14000500ff030200170a02000500050005000900c4005a804800028023000100301b481b0c01240c091260301b050b010612601b18362f051a30186c780205001e000100002404000b240302163d48180b3036300516160918040c12601200000c00008005000700000000006c00008005000700010000030005000f059c0002000500010000000000050004000100000044000200001b0c48274821243e084101553a4b210d5121443902083e1755321d51280b153350251d3a532155431645105057102b26183e422f3357014002194324373d24"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x880) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x880) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'syzkaller1\x00', 0x200}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r3, &(0x7f0000000240)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x1, {0x0, 0x1, 0x2}, {0x0, 0xff}, 0xfd, 0xfd}, {0x1, 0x3, {0x2, 0xff, 0x2}, {0x0, 0xf, 0x1}, 0x1, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0x0, 0x4}, 0x1, 0x2}, {0x3, 0x2, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x2}, {0x2, 0xf0, 0x2}, 0x1, 0xfe}, {0x3, 0x1, {0x1, 0xff, 0x3}, {0x0, 0xf0, 0x2}, 0xfd, 0x1}, {0x1, 0x1, {0x2, 0x1, 0x4}, {0x1, 0xf0, 0x4}, 0x0, 0xff}, {0x0, 0x0, {0x1, 0xff, 0x4}, {0x0, 0x0, 0x2}, 0x1, 0x2}, {0x3, 0x3, {}, {0x1, 0xf0, 0x2}, 0x0, 0xfe}, {0x2, 0x1, {0x0, 0xff, 0x2}, {0x2, 0x0, 0x4}, 0x1, 0xfd}], 0x140) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket(0x2, 0x3, 0xff) (async) socket(0x2, 0x3, 0xff) 13.673608941s ago: executing program 0 (id=2440): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3}) 13.577544808s ago: executing program 0 (id=2443): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 13.550990069s ago: executing program 0 (id=2445): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x44, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x810) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@private1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000480)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0x3d0, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}, [@replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2b, 0x3}}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @migrate={0x1cc, 0x11, [{@in6=@local, @in6=@empty, @in6=@remote, @in6=@loopback, 0x3c, 0x1, 0x0, 0x0, 0x2, 0xa}, {@in=@local, @in6=@empty, @in=@multicast1, @in=@local, 0x32, 0x4, 0x0, 0x0, 0x2, 0xa}, {@in=@broadcast, @in=@rand_addr=0x64010102, @in=@private=0xa010100, @in=@empty, 0x32, 0x3, 0x0, 0x3504, 0x2, 0x2}, {@in=@rand_addr=0x64010102, @in=@empty, @in6=@mcast1, @in=@multicast2, 0xff, 0x0, 0x0, 0x3505, 0xa}, {@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, @in=@loopback, 0x2b, 0x3, 0x0, 0x34ff, 0xa, 0xa}, {@in6=@private2, @in=@rand_addr=0x64010100, @in6=@private2, @in=@local, 0x32, 0x0, 0x0, 0x3505, 0xa, 0xa}]}, @lifetime_val={0x24, 0x9, {0x97ff, 0x101, 0x1800000000, 0x1}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2c, 0xe6}}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in=@loopback, 0x0, 0x8}}, @etimer_thresh={0x8, 0xc, 0x1}, @policy={0xac, 0x7, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, 0x4e23, 0x705, 0x4e21, 0x0, 0xa, 0x20, 0x20, 0x8d, r5, r6}, {0x7, 0x2, 0x17, 0x9, 0x72, 0x10001, 0x2, 0x1a6000000000}, {0x9, 0x7, 0xb}, 0xe06e, 0x6e6bb4, 0x2, 0x0, 0x1}}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 13.296680693s ago: executing program 0 (id=2450): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x20000000) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 12.375169966s ago: executing program 0 (id=2463): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)='\f', 0x1}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x40) (async) accept4(r5, 0x0, 0x0, 0x800) (async) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000340)) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffff800, 0x8, 0x99f5, 0x2, 0x2}}]}]}}}]}, 0x70}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, 0x0, 0x0) sendto$packet(r8, &(0x7f0000000580)="44c394f322916c4516999da20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x1c, r4, 0x1, 0x40, 0x6, @random="babb5d5c8cef"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x5, &(0x7f0000000080)=[{0x2, 0x8, 0x7, 0x2}, {0x2, 0x8, 0x5, 0xffff}, {0x1, 0x9, 0x9, 0x7c7c}, {0x0, 0x3, 0x7, 0x6}, {0xffff, 0x0, 0x3, 0x200}]}, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000029bd7000fcdbdf251000000005000f00400000000600000000040000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 12.272346858s ago: executing program 0 (id=2464): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r2, 0x0, 0x417}, 0x18) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 12.142852777s ago: executing program 33 (id=2464): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r2, 0x0, 0x417}, 0x18) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.18145303s ago: executing program 1 (id=2596): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="782b2a452a2331792272a6770f56588164a770af7dff60cda0c16f6baad523f35c987e073c49", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280080001006772650018000280060003000000000006000e000200000004001200"], 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000000000002d0000000c000500000000000000000008002f00000000000a0001007770616e3400000005002b0000000000"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x100, 0x709d2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x32000014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448ca, &(0x7f0000000840)) r11 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000850000001100000000"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x20000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @multicast1, @private}}}}) 2.316324083s ago: executing program 1 (id=2604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0xe8}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, "101000", 0x7f}) 1.862704956s ago: executing program 6 (id=2618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1b6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80050) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x4, 0x1, 0x1, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000140)={r6, 0x401, 0x7ff, 0x8, 0x10001, 0x6}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) 1.644697017s ago: executing program 6 (id=2621): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f000006"], 0x1c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e000e401"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009001000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x6c, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local}}}}, 0x0) r5 = getuid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000000800)=0xe8) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r8, 0x84, 0x5, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@updpolicy={0x248, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e24, 0x7, 0x4e22, 0x7, 0xa, 0x80, 0x90, 0x2f, 0x0, r5}, {@in=@remote, 0x4d2, 0x32}, @in=@empty, {0x5, 0x6, 0x3, 0x5, 0x7, 0xfff, 0x7, 0x8}, {0xfffffffffffffff1, 0x21a, 0x0, 0x2}, {0x1, 0x9, 0x9}, 0x70bd27, 0x3502, 0xa, 0x1, 0x9, 0x40}}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x4e22, 0x0, 0x4e20, 0x9, 0x2, 0x20, 0x80, 0x21, r6, r7}, {0x41b, 0x5, 0x0, 0x6, 0x200, 0x7, 0xfffffffffffffff7, 0x2}, {0x1, 0x7, 0x84f, 0x4}, 0x10000, 0x6e6bb6, 0x1, 0x1, 0x2, 0x1}}]}, 0x248}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in=@empty}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=@getneigh={0x14, 0x1e, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8008}, 0x240048c0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000089000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f0000000ac0)={'broute\x00', 0x0, 0x0, 0x0, [0xf, 0x2, 0x9, 0x73d, 0x2, 0x401]}, &(0x7f00000005c0)=0x78) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 1.512175338s ago: executing program 6 (id=2625): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000003c0)="b7e773e2946e78da2e0f7f8ef39c78fd789159", 0x13}], 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@union={0x9, 0x2, 0x0, 0x5, 0x1, 0xffff9a2b, [{0xf, 0x2, 0xfffffff7}, {0x1, 0x5, 0xb753}]}, @struct={0xe, 0x5, 0x0, 0x4, 0x1, 0x3, [{0x2, 0x0, 0x7}, {0x6, 0x0, 0x8001}, {0xf, 0x4, 0x4}, {0xf, 0x1, 0x909}, {0xd, 0x1, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x400, 0x3, 0x77}}, @fwd={0xc}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000180)=""/219, 0xad, 0xdb, 0x0, 0x6, 0x10000}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000340)={&(0x7f0000000280)=""/108, 0x6c, 0x0, &(0x7f0000000300)=""/59, 0x3b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x83}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000003c0)="b7e773e2946e78da2e0f7f8ef39c78fd789159", 0x13}], 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@union={0x9, 0x2, 0x0, 0x5, 0x1, 0xffff9a2b, [{0xf, 0x2, 0xfffffff7}, {0x1, 0x5, 0xb753}]}, @struct={0xe, 0x5, 0x0, 0x4, 0x1, 0x3, [{0x2, 0x0, 0x7}, {0x6, 0x0, 0x8001}, {0xf, 0x4, 0x4}, {0xf, 0x1, 0x909}, {0xd, 0x1, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x400, 0x3, 0x77}}, @fwd={0xc}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000180)=""/219, 0xad, 0xdb, 0x0, 0x6, 0x10000}, 0x28) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000340)={&(0x7f0000000280)=""/108, 0x6c, 0x0, &(0x7f0000000300)=""/59, 0x3b}}, 0x10) (async) 1.389708586s ago: executing program 1 (id=2627): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="28130000", @ANYRES16=r4, @ANYBLOB="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"], 0x1328}, 0x1, 0x0, 0x0, 0x40040}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="00000100000018000001000000000000000000008648fb2325c5affed01f9d8bf0033338a566b693659afa6c42822fcc419bbbb2d7664396988129740d8b940be793f01378455828ba2aa78203bf0a0cbbb763b9a7694279ebcc9ba519e6de6a0c5a6cd9a48e97ebe5e91275447528fc775b29944f9ca70993d70bd8a580a4e3af627ab4712b556a68d4c31ba82a29e24c06f2614a81e7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) (async) r7 = socket(0x14, 0x2, 0x4) shutdown(r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r6}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r10, 0x107, 0xc, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x138, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.386249696s ago: executing program 6 (id=2628): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendto$packet(r2, &(0x7f0000000180)="6a66be8056b5965b980f3532a1e6c104f585445535454e2fdce3fcafe7e92d72e0aa88a286ad90d93d08d9ae75d6a4ddf0a1cc9a49ecc0bd8c08c918b59558f2a1536d1b817856782eddbf05644bb1294b208e82467f0866df3f9f38d768e510748aff5f0dc8f4c18753118b5d745ca091ae140e7c98ad6d042bd7b661cb7bd537e6ee0ef3665725694fde2eb2ad9ae4de499e7c4e0cec67a381a4d6de4bcdf6adee3c228cf1c9ed5d42fbefda329ae9e12211d9f8130e545d62de8f5c9edc28409097c912712dd3b3d97154c14e639781af6e95edd5a2ceebfcd12bb8a8059f1a9ff977571f06", 0xe7, 0x0, &(0x7f0000000280)={0x11, 0x3, r1, 0x1, 0x9}, 0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 1.267276804s ago: executing program 6 (id=2629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x5) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000130a5c02000000000000000002000000f9ff000073797a3000000000"], 0x20}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x204, 0x52, 0x10000}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x12) sendfile(r5, r3, 0x0, 0xbdc4) 1.147970421s ago: executing program 5 (id=2631): r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x4c}}, 0x44) socket$netlink(0x10, 0x3, 0xb) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x4c}}, 0x44) (async) 984.534763ms ago: executing program 5 (id=2634): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0x14, 0x8, {0x8}}, @RTA_FLOW={0x4, 0x10}]}, 0x30}}, 0x0) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) (async, rerun: 32) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffb, 0x1}, 0x6) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r3) (async, rerun: 64) r5 = socket(0x2a, 0x2, 0x0) (rerun: 64) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24004004) (rerun: 64) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22040004}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x58, r4, 0x200, 0x70bd29, 0xfffffffc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000000)={0x0, 0x61, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x24000880) 892.758263ms ago: executing program 4 (id=2635): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x25, 0x6, @void}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@RTM_GETMDB={0x18, 0x56, 0x800, 0x70bd29, 0x25dfdbfe, {0x7, r0}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008001}, 0x20048000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000200)={0x72c, 0x18, 0x100, 0x70bd26, 0x25dfdbfc, {0x17}, [@nested={0x70, 0x45, 0x0, 0x1, [@generic="14410c9d2b18d6894219727be91505a276e1522d15a6bc728aeea33f99f8dce9d143309ec6ef91ca4dc7f5e55c786cb9bd9f5cff79f8c2ccfcff1a97236b47226525eb27607dcb8dfdc196ddb1b5939fe1df0d12e4a863b4be9db82b87987ce5798bebfa7de3fd5454dfcf96"]}, @nested={0x206, 0x6, 0x0, 0x1, [@nested={0x4, 0xd6a}, @typed={0x8, 0x107, 0x0, 0x0, @ipv4=@multicast1}, @generic="276f082db183edc72a06d7072100177b8401ed73025e9e24a58e1b4656c5d7ad34f1509fc3f271776995114764b6a0245fa44b151d0d6e10f1aa714c5da3abc55cb94d54d35496b33d620fc83ab8d9589c6fe129822e2409ccd967053240d2ba77822a0da89d4ff0c194fbd3dd72f2d17f713433b3ec81e2bc403022b9bda0a6e53dc8f8d04e6d4e588e3ccb54cc02", @generic="2c038ea853f63e23b32a016a9a57d3eb8b790a681ae5c102518b278f0de7be035802f8fa2337504492abf162be8be2a0c0d6ed5719beeca052c7afc635322d287e4ad0363cdb4b373f01a686f3346d362dfb3a114b651b964a88a8f9c9c3511c02355adf5e58234a75f8d599228aa087d8b9e3", @nested={0x4, 0x98}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0x4}, @generic="ae6687f11575cade8d677ac377ca2b399ac8b11fe78ffbdf0741c4e9a4947fafe22def9029789d79c7011a170465da7a2b8e06ade9add914c5943c4e1a8a58108768c69f760f163ff37e2df3c89bdb26d912e0ca8625afd643518186c8d1b702b47cf2308a1c8456afcf38e6213acada22fd0f16b354114c10bc10753ec4d09903d54f0b5d4f7ca48c9a8955656e87b272933153998abc357381b66f0d3b30d57c5d6835347b3106cbb6c57863386bec01470e3a39b4d971c6215b33a2796c791126d0ccf34de819caaf99b4f7b0a764948f0c54a4f8e45b74874958bf05498084c74185"]}, @generic="6b58c4614ced8fdc1f7033a8d6b35e36fc5039753e98efd060a52e5eeec4653466548cb90bceeed1684eb2d4c68a20be01c9b0c89c136125ff227362b0", @nested={0xf6, 0x0, 0x0, 0x1, [@typed={0xc, 0x78, 0x0, 0x0, @u64=0x101}, @nested={0x4, 0x8e}, @nested={0x4, 0xdc}, @generic="400570382076966bab845422596f8ef4d9c3627301d996dc4f783da304a28d7dd5772deaeb37c7f00bf0812e393e3f994890aa0108088fde17c7fece9a4227a456301cae4671a3456a092e69a734a2f0eff871069e1725d5db616fcfc48614e5b191f928", @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x6a}, @nested={0x4, 0x4c}, @generic="3c5927282bc272834dec3f568ce6a566d5fe31a806338d15c175d7f076e79863cb25f1606e779ff1d4a218767a61177625e28c5518e02708ece68959fb9944fe02384d968d228b12d83ffa84adb0f1ac913d8eedb59df1a23d7c44a20d2f"]}, @typed={0x8, 0x139, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x193, 0x133, 0x0, 0x1, [@generic="8c95e64214227388a58f6291030f7ac9403fbe1ba7f3574fa3bcf0982074c91fb6166b8858c9f1581713c8a77e9ff556bb7dfc8d0ac3807c092f8e11f7c9f4414c7feb2efc74a8f1acedf9cfa2425a31103f08aba74eb08cb4f738e44e304e3b7f09ae3feec75832bb657c47858ae3efad6e2f991f70568fe43ee77350261ec12b6869e68c7fadcdd2ec", @generic="1f7565080feda08efbde704e344e90c59b7fd89c208ddca8adfa8ed29ba7bd6a34817d96d48b1566274756683124cb1f59fbd19a69d6aed7e5718870aecadfcef3fd655576b8ee5283d7ff671c19f4e158c75ff0738a3eef132f3a2c4ca5473c8d14b79dc4037fa1f4999d12b0b50172a9c8ca228f71d4068287a3dbc6390cb3c0d6dc6736353379422eb251de3435b6bcaf884b35f35c20738238a0d66cf75e85a7a421efad067697f9d884e5d3551ea2e3fde74dbf1df24ac9f1b42aa6257ca24e4863a6ef7a23d5380a65adc690abf2ba98d514e296287cc5de769f2fffd45a20cf69b947edd836570233c3", @nested={0x4, 0x128}, @nested={0x4, 0xc6}, @typed={0xf, 0xb, 0x0, 0x0, @str='@(%}%\\\n/(%\x00'}]}, @nested={0x1b7, 0x4a, 0x0, 0x1, [@generic="c02dab10e28512e81a2acf3b009aa0676e232d30578d7da17b61d5d0c43fbda8009a472ec691997abecb04d4a5111dc38ce09f5939a9fe337b1f93c93cb6882a1719e8ceaa5778a752fc0e6e6d2d35c1d251b1c30f2afdc358be8c1a6eacd58ce426624eed1639eb904dc2b0fe7d43e39b1c51be37414c05e99445bbd72537a4a7575fa5b56df2a3790882c4692a9f69044ce32ddade4ae8039d975ddd9ac73eca9f26bcfbd79430898980cb699a673850749e79d7e5d5419fb7ca8f6f16fc6becac1af30d5fbbd5bb1abef2aba2cc3ca654adfc7dcc160199817f6e240bcd40a7e295fa91243d79", @generic="cc42cfd1001e5b1bef89d525a5be58bc7320f03756496c08a503c35173aefd3bd37d2ff5fc38e74b6c3c4beef87599d79d0dec1405558e", @typed={0x92, 0x31, 0x0, 0x0, @binary="4e6e9b1920cae61e75236bc593a741b9db2dc0611cef0e34139aa266ea326eda53497015ba69132d267f386e96de1cf71490c64e161885e3ec15db968b828ac6ca6d3dedc23e61a077daa47dfddd4b228b1f2830085cfc45cca6de2ee3cd88db3916501f2ac744dfc7aafb8f26a02f64ab1cc523c09510137e6246cb49afbccefdf5864fae0730caf050fc0bb86c"}]}, @typed={0x14, 0x10c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x72c}}, 0x80) r3 = accept(r2, &(0x7f00000009c0)=@nl, &(0x7f0000000a40)=0x80) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000ac0)='ns/mnt\x00') sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x37}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) socket(0x18, 0x2, 0x7) r5 = socket(0xb, 0x80000, 0x8) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000c80)={'bond_slave_0\x00', {0x2, 0x4e23, @broadcast}}) sendmsg$xdp(r3, &(0x7f0000001dc0)={&(0x7f0000000cc0)={0x2c, 0x2, r0, 0x27}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="9847fb5e202aa64bd48d66da01f95361bcbb4b09d91a0d95c3f82bf5f345eb91b6810799c17973aa96f07fa1de8085780c49f20414db89931c826137951f3c8f0ff5a23c84906b25ec36329a72ea741aa8cf8a72eafb096f97031e2c54594742c482d35e8760abe4a1cdc8bf1b3fee6c5630d3f637ce1d", 0x77}], 0x2, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x240400b5) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000001f00)={0x9, 0xbc, 0x93d}, 0x10) sendto$inet6(r5, &(0x7f0000001f40)="63aef9d8a1f8787dd344d0a0af746510b233f3730027928ce0837addbdb53154e9d708718e05d3cbdb", 0x29, 0x40800, &(0x7f0000001f80)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}, 0x1c) r6 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r6, &(0x7f00000031c0)={&(0x7f0000001fc0)={0x2c, 0x4, r0, 0xa}, 0x10, &(0x7f0000003180)=[{&(0x7f0000002000)="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", 0xfa}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="a88957c18086a3eb0cf252c8900fd3052342ab47d2e0410ec22913015a68ca7861ec9bd971268af02454827f401250a97e9d168d7e0bc38bfbea76896f99b629999f0bb74999e379a4c811b02fca128f36a698381e7812afc9bb9452f6aab72f2c19", 0x62}], 0x3, 0x0, 0x0, 0x4080}, 0x10) pselect6(0x40, &(0x7f0000003200)={0xf029, 0x6590, 0xd7bd, 0x3, 0x8, 0x7, 0x5, 0xb}, &(0x7f0000003240)={0x4, 0x5, 0x2, 0x6, 0x9b0000000, 0x5, 0x3, 0xf}, &(0x7f0000003280)={0x9, 0x1, 0x9, 0x99c1, 0x1, 0xeb, 0xf, 0x6}, &(0x7f00000032c0)={0x0, 0x3938700}, &(0x7f0000003340)={&(0x7f0000003300)={[0x5]}, 0x8}) socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000003380)={0x0, @l2={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4000, 0x2}, @can={0x1d, r0}, @l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x32, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0xb43, 0x5}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000034c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x40}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7ff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x58a}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x49a2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000016) write(r1, &(0x7f0000003500)="20ca33a02d530fdfa7fa7c7783a81e97d95636b1e8a976c392a863b465a5ff87f52d8bce087a2719a1a01552411412387739306f77e81d7c529e09e71ffb301dbf835b431832d724768c7676c61d74290f11e5de6a0f2c1f91fa9d0bd25b800a", 0x60) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000003580)={{{@in=@multicast1}}, {{@in6=@ipv4={""/10, ""/2, @local}}, 0x0, @in6=@empty}}, &(0x7f0000003680)=0xe8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r10, &(0x7f00000037c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000882}, 0x20000054) 853.950655ms ago: executing program 3 (id=2636): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="161d023078816f1ea8731e5cb3ce01f8f5507ec1d6043325575589c2653861ffac448aaa78351466b8fad7cda1d2280ae993732425efbd1dc58b44f4c2872c"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 801.528315ms ago: executing program 5 (id=2637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 786.497751ms ago: executing program 1 (id=2638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x0) listen(r3, 0x7fff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x58}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) syz_emit_ethernet(0x85, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1908004500007703000000006c907800000000000000000420880b000000020000080074ee0007000086dd425e7ac3ea628d48383d9c355266203c8b1b1cb450ff0102bfe29b080088be00000000100000000100000000000000080022eb0010000020c8d0f6dc213b6fe7000000000000000800655800000000"], 0x0) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 741.594982ms ago: executing program 4 (id=2639): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x23, 0x1, 0xeffffffb) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async, rerun: 64) getsockopt$sock_buf(r4, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x7ffe}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 711.2916ms ago: executing program 6 (id=2640): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x9, 0x0, 0x1, 0xff}, 0x14) (async) close(0x4) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$netlink(0x10, 0x3, 0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, &(0x7f0000000180)="1e100c018a92bd15fea23c61ee808288aeff173a9636b16a79fdccb5812569cea7", 0x21, 0x8001, &(0x7f0000000300)={0x11, 0x8, 0x0, 0x1, 0xe}, 0x14) (async) ioctl$SIOCSIFHWADDR(r3, 0x8970, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000380)=0x1000, 0x4) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000080), 0x8) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x43) (async) r6 = openat$cgroup_int(r4, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) socket$igmp(0x2, 0x3, 0x2) close(0x3) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800040000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcfd) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000e2ffffffff36000000080001007063690011000200303030303a30303a31302e300000000b08007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003"], 0x9b}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x400000000, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000040000000000000000079120cde0000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 581.529072ms ago: executing program 5 (id=2641): r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xfa3b6b2883b6fee3) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b2a7a2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) (async) recvfrom$inet6(r1, &(0x7f0000000300)=""/3, 0x3, 0x40000041, 0x0, 0x11) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r3 = socket(0x400000000010, 0x6, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r5, 0x12, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r6, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) (async) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4043}, 0x0) write(r3, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) 581.385587ms ago: executing program 3 (id=2642): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000010000100001400"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b000000000004001a80"], 0x2c}}, 0x0) 547.352387ms ago: executing program 4 (id=2643): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)={0xac, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5e8}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xa8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0xac}}, 0x1810) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x2, 0x0, @mcast1, 0x9}, 0x1c) bind$alg(r3, &(0x7f0000001080)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x26, 0xffffffffffffff34) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000010004b040000000002ebff007a000000", @ANYRES32=0x0, @ANYBLOB="00000100000000005000128008000100677265"], 0x70}}, 0x0) 489.117732ms ago: executing program 3 (id=2644): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08060001080006aaaaaaaaaa00"], 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xd0}, 0x20040000) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x0, 0xfffe}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket(0x25, 0x80000, 0x8f) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xe0a1}, [@IFLA_MAP={0x24, 0xe, {0x9, 0x0, 0x9, 0xff, 0x5}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80a0}, 0x2) 369.470803ms ago: executing program 4 (id=2645): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00'}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x7, 0x2, 0x8, 0xfffff5ab, 0x6, 0x4, 0x9, r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad48cc02cb29fcc800775b86dd", 0x0, 0x7f, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 363.33333ms ago: executing program 1 (id=2646): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x18}]}, 0x62}, 0x1, 0x0, 0x0, 0x24050004}, 0x4048) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000210000000000000000000000230000000000000000000000f60fdfc8683ff0a5ce88357c8e0e3d0318bd0b803bff779e1d3a7c8a127445268a1005d73f1f2024f9114c05aed3519df55f2c39bdabb9c105bf6061a2348ff62bd6aa4c9e2a4965e3826e"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8f7ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000a50000009580d2a9bc3e3011a1601cad18f84e8a4f9d02f55adb150e400b2f989cdcce1a34e47b5e7754e8ebeeb1d30867656fdf823812fc894f3d0685"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) 335.122711ms ago: executing program 5 (id=2647): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="000000000000800008002700000000000800fd00090600"/36], 0x40}}, 0x884) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000440)}, {&(0x7f0000000540)="481024524109820b3e73b675126490abc9c41ddb8dfe4196543c13828f28bdc30b0641d346841d4ea51ef996e28e35256e438709abf30ae8b7d1c4e1627ff98f369240f66c069944ce3e4567d4e66519589d3e578a99fd1737ce4046557cba060baab223d6ac414d0cc8ef588943b35c1a84bc6ecaf77e03ad8e95df47d0c9a54db46e2ea16bc95af74cc605beb50d0807d8b283f251e11cf0ede735e4bb5a04715e46be8fbb5a55570b9a0d0d81b1abae9d178a913ff3791976d5312504292dd4564c9881bea5", 0xc7}], 0x3}, 0x4040000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r9 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r0, &(0x7f0000000440)={0x10000000}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r8, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r11) r13 = socket$unix(0x1, 0x1, 0x0) listen(r13, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r11, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="01002dbd7000feffffff05006533"], 0x14}}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x90, r12, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x90}, 0x1, 0x0, 0x0, 0x40080}, 0x80) write$nci(r4, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x7, @v={0x2, 0x6, 0x6, 0x3, {0xff, 0xd, "12b1492198aa74c3"}, 0x1}}, 0x12) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) 6.699703ms ago: executing program 3 (id=2648): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x21b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x34}}, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000003500), &(0x7f0000004e00)=0x4) 6.33578ms ago: executing program 4 (id=2649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f00000000c0)=0x899, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6100272400303aff00000000000000080000ffffac1e0001ff0200000000000000000000000000010104"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) 5.359754ms ago: executing program 1 (id=2650): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newlink={0x5c, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_MASTER={0x8}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}]}}}]}, 0x5c}, 0x1, 0xba01}, 0x4000040) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = epoll_create(0x7) epoll_pwait(r4, &(0x7f0000000380)=[{}], 0x1, 0x3f38, &(0x7f00000002c0), 0x8) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800, 0xfffffffd) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_VF_PORTS={0x10, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}]}]}, 0x30}}, 0x0) 3.36953ms ago: executing program 3 (id=2651): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000000)="3b9f31b362d9345c981059c3e2731d2a23c6e073", 0x14) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) 2.522453ms ago: executing program 4 (id=2652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4078, 0xfee}, {&(0x7f0000000000)=""/139, 0x8b}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4091, 0xffb}], 0x2}, 0x8}], 0x3, 0x2, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000480)={0x601, 0x3, 0xffffffff, 0x7fff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)={0x14, 0x30, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x20004840) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x400000}], @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x68}}, 0x40) 2.013323ms ago: executing program 5 (id=2653): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150007000000000000120800040043430000a80016000a0001407c6f94007134cf6ee08000a0e408e8a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3adfe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee0000000000000000a48156a65908145da1062ff2b44ac6a5", 0xd8}], 0x1}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x800) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff3}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xb, 0x3, 0x200}, {0x85, 0x5, 0x58, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) (async) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001400)=""/227, 0xe3}, {0x0}], 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x12) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_PLIMIT={0x1d, 0x1, 0x5}]}}]}, 0x48}}, 0x0) (async) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x99d3551565a72478}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000000)="dcf3d5ba8f30830acabbb3d5eceb665a889de287eef76b013ec1035b1a670b73103e77702c4a98fd656015c80b77d1d220887b045f1c24bd81facf2ca54a76be09e1090b1f4d00a5353443fe7a2b8c6727d7eab9c17e6392aa994f41b946a87101c270db98a3eb712168227ba606f2a2df7330c5b4563ef40a26b74a4e74cd2522799a3a8b9376665ebcf436e9adabf70b5ab66c541f2260dc54ed4e26c6168b24abd681ad0f3050c1169f6c932319dcc720bbf8a3a1f7bd8175fe5efafd577d328bbdb1165cffd3b6bcf88ab50d1457b863e3e6fd9ded8394ad9968656a84c028f4a80556ffcd48", 0xe8) 0s ago: executing program 3 (id=2654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000001800200000000000000000000000600120002"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x78, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x1a}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x24040840}, 0x4000008) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x7, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc000000", @ANYRESOCT=r2, @ANYBLOB="01002abd7000000000004e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000300ab00fcffffff08000b00a76000000300110002000000"], 0x4c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in=@dev, @in=@dev}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000007b80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r11 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r11, 0x107, 0x14, 0x0, 0x20000000) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x50, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8}, {{0x2, 0x0, 0x1, 0x1}, {0x1}}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8, 0xb, r13}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@empty]}]}}}]}, 0x4c}}, 0x0) kernel console output (not intermixed with test programs): T7262] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.429799][ T7262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.452790][ T7262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.459988][ T7282] openvswitch: netlink: Flow key attr not present in new flow. [ 118.622619][ T7262] vlan2: left promiscuous mode [ 118.634880][ T7262] bridge0: left promiscuous mode [ 118.643044][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.665401][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.679539][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.689577][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.813844][ T7303] netlink: 'syz.3.384': attribute type 10 has an invalid length. [ 118.870777][ T7303] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.927667][ T7316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.955219][ T37] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.993407][ T37] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.011535][ T7303] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 119.020887][ T37] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.067432][ T37] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.122995][ T7322] delete_channel: no stack [ 119.153495][ T7327] netlink: 'syz.4.391': attribute type 10 has an invalid length. [ 119.210926][ T7329] netlink: 'syz.2.392': attribute type 58 has an invalid length. [ 119.307450][ T7334] IPVS: persistence engine module ip_vs_pe_À not found [ 119.553219][ T7361] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 119.678108][ T7368] netlink: 'syz.4.402': attribute type 1 has an invalid length. [ 119.910641][ T7392] netlink: 'syz.1.409': attribute type 19 has an invalid length. [ 119.947672][ T7392] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 119.955384][ T7392] __nla_validate_parse: 9 callbacks suppressed [ 119.955402][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 119.980549][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.409'. [ 120.112523][ T7406] pim6reg1: entered promiscuous mode [ 120.118890][ T7406] pim6reg1: entered allmulticast mode [ 120.387577][ T7423] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 120.488610][ T7430] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.424'. [ 120.545308][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 120.660534][ T7449] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 120.670979][ T7449] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 120.679609][ T7448] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 120.689615][ T7449] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 120.698369][ T7448] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 120.753120][ T7449] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 120.784077][ T7449] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 120.809588][ T7457] veth0: entered promiscuous mode [ 120.833761][ T7449] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 120.838701][ T7457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'. [ 120.884902][ T7449] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 120.888083][ T7456] veth0: left promiscuous mode [ 120.919893][ T7449] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 120.928287][ T7449] netlink: 'syz.3.430': attribute type 10 has an invalid length. [ 121.038882][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'. [ 121.056700][ T7473] netlink: 68 bytes leftover after parsing attributes in process `syz.0.438'. [ 121.268080][ T7480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 121.286021][ T7480] tc_dump_action: action bad kind [ 121.403275][ T7484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.443'. [ 121.930594][ T7509] netlink: 72 bytes leftover after parsing attributes in process `syz.3.451'. [ 122.548153][ T7554] vlan2: entered allmulticast mode [ 122.555191][ T7554] bond0: entered allmulticast mode [ 122.592891][ T7554] bond_slave_0: entered allmulticast mode [ 122.603590][ T7554] bond_slave_1: entered allmulticast mode [ 122.775013][ T7568] team0: Device vti0 is of different type [ 122.925399][ T7578] syzkaller1: entered promiscuous mode [ 122.967587][ T7578] syzkaller1: entered allmulticast mode [ 123.310692][ T979] IPVS: starting estimator thread 0... [ 123.316397][ T7607] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 123.428961][ T7609] IPVS: using max 36 ests per chain, 86400 per kthread [ 123.527544][ T7618] veth7: entered allmulticast mode [ 123.564937][ T7624] tipc: Disabling bearer [ 123.616750][ T7633] tipc: Started in network mode [ 123.621784][ T7633] tipc: Node identity 22f795700588, cluster identity 4711 [ 123.690556][ T7633] tipc: Enabled bearer , priority 0 [ 123.753439][ T7635] syzkaller0: entered promiscuous mode [ 123.766702][ T7635] syzkaller0: entered allmulticast mode [ 123.781306][ T7625] tipc: Resetting bearer [ 123.797252][ T7623] tipc: Resetting bearer [ 123.838484][ T7623] tipc: Disabling bearer [ 124.101035][ T7664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.418676][ T7698] Dead loop on virtual device ip6_vti0, fix it urgently! [ 124.506410][ T7708] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 124.518882][ T7708] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 124.732281][ T7728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.743704][ T7728] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 124.757452][ T7730] vcan0: entered allmulticast mode [ 124.897878][ T7740] bond3: entered promiscuous mode [ 124.903131][ T7740] bond3: entered allmulticast mode [ 124.908790][ T7740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.923509][ T7740] bond3 (unregistering): Released all slaves [ 125.096970][ T7754] __nla_validate_parse: 12 callbacks suppressed [ 125.096992][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 125.153493][ T7754] bond0: entered promiscuous mode [ 125.164628][ T7754] bond_slave_0: entered promiscuous mode [ 125.181882][ T7754] bond_slave_1: entered promiscuous mode [ 125.306063][ T7770] netlink: 27 bytes leftover after parsing attributes in process `syz.1.529'. [ 125.519405][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 125.566340][ T7790] lo: entered promiscuous mode [ 125.581637][ T7790] tunl0: entered promiscuous mode [ 125.599535][ T7790] gre0: entered promiscuous mode [ 125.611996][ T7790] gretap0: entered promiscuous mode [ 125.654572][ T7790] ip_vti0: entered promiscuous mode [ 125.667675][ T7790] ip6_vti0: entered promiscuous mode [ 125.684040][ T7790] sit0: entered promiscuous mode [ 125.699389][ T7790] ip6tnl0: entered promiscuous mode [ 125.722293][ T7790] ip6gre0: entered promiscuous mode [ 125.744589][ T7790] syz_tun: entered promiscuous mode [ 125.754847][ T7790] ip6gretap0: entered promiscuous mode [ 125.765322][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.772887][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.783032][ T7790] bridge0: entered promiscuous mode [ 125.791147][ T7790] vcan0: entered promiscuous mode [ 125.797327][ T7790] team0: entered promiscuous mode [ 125.802492][ T7790] team_slave_0: entered promiscuous mode [ 125.809147][ T7790] team_slave_1: entered promiscuous mode [ 125.815282][ T7790] dummy0: entered promiscuous mode [ 125.824608][ T7790] nlmon0: entered promiscuous mode [ 125.831812][ T7790] caif0: entered promiscuous mode [ 125.839149][ T7790] batadv0: entered promiscuous mode [ 125.848798][ T7810] netlink: 64 bytes leftover after parsing attributes in process `syz.3.540'. [ 125.851228][ T7790] vxcan0: entered promiscuous mode [ 125.865605][ T7790] vxcan1: entered promiscuous mode [ 125.872739][ T7790] veth0: entered promiscuous mode [ 125.880859][ T7790] veth1: entered promiscuous mode [ 125.888816][ T7790] wg0: entered promiscuous mode [ 125.895736][ T7790] wg1: entered promiscuous mode [ 125.911766][ T7790] wg2: entered promiscuous mode [ 125.918529][ T7790] veth0_to_bridge: entered promiscuous mode [ 125.922235][ T7812] netlink: 122 bytes leftover after parsing attributes in process `syz.4.541'. [ 125.930585][ T7790] veth1_to_bridge: entered promiscuous mode [ 125.943775][ T7790] veth0_to_bond: entered promiscuous mode [ 125.951593][ T7790] veth1_to_bond: entered promiscuous mode [ 125.962546][ T7790] veth0_to_team: entered promiscuous mode [ 125.975368][ T7790] veth1_to_team: entered promiscuous mode [ 126.000141][ T7790] veth0_to_batadv: entered promiscuous mode [ 126.010196][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.018195][ T7790] batadv_slave_0: entered promiscuous mode [ 126.026012][ T7790] veth1_to_batadv: entered promiscuous mode [ 126.034045][ T7790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.044274][ T7790] xfrm0: entered promiscuous mode [ 126.051202][ T7790] veth0_to_hsr: entered promiscuous mode [ 126.060105][ T7790] veth1_to_hsr: entered promiscuous mode [ 126.069646][ T7790] hsr0: entered promiscuous mode [ 126.077374][ T7790] veth1_virt_wifi: entered promiscuous mode [ 126.085231][ T7790] veth0_virt_wifi: entered promiscuous mode [ 126.094428][ T7790] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 126.110371][ T7790] vlan0: entered promiscuous mode [ 126.115633][ T7790] vlan1: entered promiscuous mode [ 126.121565][ T7790] macvlan0: entered promiscuous mode [ 126.129383][ T7790] macvlan1: entered promiscuous mode [ 126.136537][ T7790] ipvlan0: entered promiscuous mode [ 126.141888][ T7790] ipvlan1: entered promiscuous mode [ 126.152668][ T7790] macvtap0: entered promiscuous mode [ 126.160546][ T7790] macsec0: entered promiscuous mode [ 126.168943][ T7790] geneve0: entered promiscuous mode [ 126.177547][ T7790] geneve1: entered promiscuous mode [ 126.184944][ T7790] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 126.194815][ T7790] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 126.204469][ T7790] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 126.213651][ T7790] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 126.225408][ T7790] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 126.237140][ T7790] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 126.246144][ T7790] vxlan0: entered promiscuous mode [ 126.252518][ T7790] bond1: entered promiscuous mode [ 126.258796][ T7790] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 126.266170][ T7790] hsr1: entered promiscuous mode [ 126.273689][ T7790] bond2: entered promiscuous mode [ 126.281429][ T7790] veth2: entered promiscuous mode [ 126.286963][ T7790] veth3: entered promiscuous mode [ 126.292591][ T7790] veth4: entered promiscuous mode [ 126.298488][ T7790] veth5: entered promiscuous mode [ 126.304141][ T7790] team1: left allmulticast mode [ 126.309466][ T7790] macsec1: entered promiscuous mode [ 126.315340][ T7790] bridge1: entered promiscuous mode [ 126.322276][ T7790] syztnl2: entered promiscuous mode [ 126.327758][ T7790] veth6: entered promiscuous mode [ 126.333092][ T7790] veth7: entered promiscuous mode [ 126.338464][ T7790] veth7: left allmulticast mode [ 126.343899][ T7790] @: entered promiscuous mode [ 126.348971][ T7790] mac80211_hwsim hwsim6 pim6reg0: entered promiscuous mode [ 126.358378][ T1037] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.396746][ T1037] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.432614][ T1037] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.451791][ T1037] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.464864][ T1037] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.475530][ T1037] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.498573][ T1037] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.516886][ T1037] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.068846][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.307322][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.401942][ T7824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.549'. [ 146.405924][ T7825] validate_nla: 32 callbacks suppressed [ 146.405948][ T7825] netlink: 'syz.0.545': attribute type 1 has an invalid length. [ 146.503334][ T7836] netlink: 'syz.4.553': attribute type 4 has an invalid length. [ 146.587861][ T7850] tipc: Started in network mode [ 146.593585][ T7850] tipc: Node identity 16842e08d9d, cluster identity 4711 [ 146.607544][ T7850] tipc: Enabled bearer , priority 0 [ 146.627263][ T7843] tipc: Enabling of bearer rejected, already enabled [ 146.644993][ T7850] syzkaller0: entered promiscuous mode [ 146.650992][ T7850] syzkaller0: entered allmulticast mode [ 146.674579][ T7843] tipc: Resetting bearer [ 146.693461][ T7842] tipc: Resetting bearer [ 146.721671][ T7842] tipc: Disabling bearer [ 146.833772][ T7870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.912933][ T7872] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 146.994831][ T7877] veth0_to_team: entered promiscuous mode [ 147.001264][ T7877] veth0_to_team: entered allmulticast mode [ 147.186514][ T7890] netlink: 'syz.2.562': attribute type 11 has an invalid length. [ 147.434763][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 147.657410][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.571'. [ 147.667715][ T7918] syzkaller1: entered promiscuous mode [ 147.673234][ T7918] syzkaller1: entered allmulticast mode [ 147.690500][ T7920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.569'. [ 147.833818][ T7930] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.852829][ T7930] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.892170][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.575'. [ 147.975850][ T7927] infiniband syz!: set down [ 148.002720][ T7927] infiniband syz!: added team_slave_0 [ 148.050985][ T7927] RDS/IB: syz!: added [ 148.065656][ T7927] smc: adding ib device syz! with port count 1 [ 148.081788][ T7927] smc: ib device syz! port 1 has pnetid [ 148.664472][ T7974] syz.0.586: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 148.725424][ T7974] CPU: 1 UID: 0 PID: 7974 Comm: syz.0.586 Not tainted syzkaller #0 PREEMPT(full) [ 148.725454][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.725467][ T7974] Call Trace: [ 148.725475][ T7974] [ 148.725484][ T7974] dump_stack_lvl+0x189/0x250 [ 148.725515][ T7974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.725540][ T7974] ? __pfx__printk+0x10/0x10 [ 148.725567][ T7974] ? lock_release+0x4b/0x3e0 [ 148.725599][ T7974] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 148.725626][ T7974] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 148.725652][ T7974] warn_alloc+0x214/0x310 [ 148.725687][ T7974] ? __pfx_warn_alloc+0x10/0x10 [ 148.725723][ T7974] ? __get_vm_area_node+0x28f/0x300 [ 148.725752][ T7974] ? xskq_create+0xbf/0x170 [ 148.725790][ T7974] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 148.725836][ T7974] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.725868][ T7974] ? xsk_setsockopt+0x462/0x8d0 [ 148.725893][ T7974] ? __kasan_kmalloc+0x93/0xb0 [ 148.725924][ T7974] vmalloc_user_noprof+0xad/0xf0 [ 148.725954][ T7974] ? xskq_create+0xbf/0x170 [ 148.725981][ T7974] xskq_create+0xbf/0x170 [ 148.726010][ T7974] xsk_init_queue+0xb0/0x110 [ 148.726037][ T7974] xsk_setsockopt+0x4dc/0x8d0 [ 148.726064][ T7974] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.726089][ T7974] ? __pfx_aa_sk_perm+0x10/0x10 [ 148.726122][ T7974] ? lock_release+0x4b/0x3e0 [ 148.726152][ T7974] ? aa_sock_opt_perm+0xff/0x1b0 [ 148.726173][ T7974] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 148.726196][ T7974] ? __pfx_xsk_setsockopt+0x10/0x10 [ 148.726223][ T7974] do_sock_setsockopt+0x17c/0x1b0 [ 148.726246][ T7974] __x64_sys_setsockopt+0x13f/0x1b0 [ 148.726269][ T7974] do_syscall_64+0xfa/0x3b0 [ 148.726300][ T7974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.726320][ T7974] ? clear_bhb_loop+0x60/0xb0 [ 148.726344][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.726365][ T7974] RIP: 0033:0x7f581178ebe9 [ 148.726383][ T7974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.726401][ T7974] RSP: 002b:00007f58126d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 148.726423][ T7974] RAX: ffffffffffffffda RBX: 00007f58119b5fa0 RCX: 00007f581178ebe9 [ 148.726438][ T7974] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000004 [ 148.726452][ T7974] RBP: 00007f5811811e19 R08: 0000000000000004 R09: 0000000000000000 [ 148.726464][ T7974] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 148.726476][ T7974] R13: 00007f58119b6038 R14: 00007f58119b5fa0 R15: 00007ffdfbb17f98 [ 148.726500][ T7974] [ 149.048863][ T7974] Mem-Info: [ 149.052058][ T7974] active_anon:10591 inactive_anon:0 isolated_anon:0 [ 149.052058][ T7974] active_file:2756 inactive_file:39843 isolated_file:0 [ 149.052058][ T7974] unevictable:768 dirty:55 writeback:0 [ 149.052058][ T7974] slab_reclaimable:10720 slab_unreclaimable:99238 [ 149.052058][ T7974] mapped:29014 shmem:1360 pagetables:1051 [ 149.052058][ T7974] sec_pagetables:0 bounce:0 [ 149.052058][ T7974] kernel_misc_reclaimable:0 [ 149.052058][ T7974] free:1321150 free_pcp:14079 free_cma:0 [ 149.168073][ T7985] netlink: 72 bytes leftover after parsing attributes in process `syz.1.588'. [ 149.190327][ T7974] Node 0 active_anon:42580kB inactive_anon:0kB active_file:11024kB inactive_file:159172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116064kB dirty:220kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11872kB pagetables:3932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.257480][ T7974] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.350474][ T7974] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.380837][ T7974] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 149.386941][ T7974] Node 0 DMA32 free:1380980kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42536kB inactive_anon:0kB active_file:11024kB inactive_file:157584kB unevictable:1536kB writepending:220kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:32900kB local_pcp:14756kB free_cma:0kB [ 149.421690][ T7974] lowmem_reserve[]: 0 0 1 1 1 [ 149.449110][ T7974] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 149.484983][ T7974] lowmem_reserve[]: 0 0 0 0 0 [ 149.491222][ T7974] Node 1 Normal free:3885500kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22144kB local_pcp:9088kB free_cma:0kB [ 149.531332][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'. [ 149.560695][ T7974] lowmem_reserve[]: 0 0 0 0 0 [ 149.574773][ T7974] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 149.602376][ T7974] Node 0 DMA32: 279*4kB (UM) 641*8kB (UM) 447*16kB (UM) 761*32kB (UME) 155*64kB (UM) 83*128kB (UME) 139*256kB (UME) 92*512kB (U) 53*1024kB (U) 7*2048kB (UM) 286*4096kB (UM) = 1381044kB [ 149.634998][ T7974] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 149.649107][ T7974] Node 1 Normal: 191*4kB (UE) 48*8kB (UME) 48*16kB (UME) 72*32kB (UME) 21*64kB (UME) 8*128kB (UME) 2*256kB (M) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3885500kB [ 149.716564][ T7974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.739101][ T7974] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.785831][ T7974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.818204][ T7974] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.841271][ T7974] 43956 total pagecache pages [ 149.859933][ T7974] 0 pages in swap cache [ 149.872105][ T7974] Free swap = 124996kB [ 149.884045][ T7974] Total swap = 124996kB [ 149.902812][ T7974] 2097051 pages RAM [ 149.908238][ T7974] 0 pages HighMem/MovableOnly [ 149.920832][ T7974] 425660 pages reserved [ 149.921658][ T8008] netlink: 'syz.1.598': attribute type 10 has an invalid length. [ 149.926271][ T7974] 0 pages cma reserved [ 149.957451][ T8010] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.599'. [ 150.058574][ T8015] team0 (unregistering): Port device team_slave_0 removed [ 150.072239][ T8015] team0 (unregistering): Port device team_slave_1 removed [ 150.152737][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'. [ 150.356367][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.608'. [ 150.394690][ T8032] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 150.411205][ T8032] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 150.530372][ T8046] nftables ruleset with unbound set [ 150.620414][ T8053] bridge1: entered promiscuous mode [ 150.626117][ T8053] bridge1: entered allmulticast mode [ 150.783096][ T8067] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 150.839310][ T5983] IPVS: starting estimator thread 0... [ 150.927729][ T8070] IPVS: using max 35 ests per chain, 84000 per kthread [ 151.486056][ T8127] __nla_validate_parse: 6 callbacks suppressed [ 151.486076][ T8127] netlink: 84 bytes leftover after parsing attributes in process `syz.0.637'. [ 151.504115][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 151.513051][ T8127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'. [ 151.577912][ T8135] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 151.676355][ T8142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.642'. [ 151.689691][ T8147] netlink: 'syz.4.645': attribute type 10 has an invalid length. [ 151.718350][ T8147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.743130][ T8147] batadv0: entered allmulticast mode [ 151.769721][ T8147] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 151.868457][ T8150] bridge_slave_0: left allmulticast mode [ 151.944628][ T8150] bridge_slave_0: left promiscuous mode [ 151.976846][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.062826][ T8150] bond0: (slave bridge_slave_1): Releasing backup interface [ 152.125798][ T8150] bond1: (slave veth0_to_bond): Releasing active interface [ 152.162960][ T8150] bond0: (slave bond_slave_0): Releasing backup interface [ 152.183777][ T8150] bond0: (slave bond_slave_1): Releasing backup interface [ 152.196403][ T8150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.208389][ T8150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.230069][ T8172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.245463][ T8150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.265875][ T8150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.336255][ T8150] bond1: (slave veth3): Releasing active interface [ 152.414070][ T8172] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 152.484797][ T8185] FAULT_INJECTION: forcing a failure. [ 152.484797][ T8185] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 152.506774][ T8185] CPU: 0 UID: 0 PID: 8185 Comm: syz.0.655 Not tainted syzkaller #0 PREEMPT(full) [ 152.506801][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.506813][ T8185] Call Trace: [ 152.506820][ T8185] [ 152.506828][ T8185] dump_stack_lvl+0x189/0x250 [ 152.506858][ T8185] ? __pfx____ratelimit+0x10/0x10 [ 152.506886][ T8185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.506909][ T8185] ? __pfx__printk+0x10/0x10 [ 152.506940][ T8185] ? rcu_is_watching+0x15/0xb0 [ 152.506961][ T8185] should_fail_ex+0x414/0x560 [ 152.506990][ T8185] _copy_to_user+0x31/0xb0 [ 152.507014][ T8185] simple_read_from_buffer+0xe1/0x170 [ 152.507045][ T8185] proc_fail_nth_read+0x1b3/0x220 [ 152.507070][ T8185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.507094][ T8185] ? rw_verify_area+0x2a6/0x4d0 [ 152.507119][ T8185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.507143][ T8185] vfs_read+0x200/0xa30 [ 152.507167][ T8185] ? fdget_pos+0x247/0x320 [ 152.507187][ T8185] ? __pfx___mutex_lock+0x10/0x10 [ 152.507226][ T8185] ? __pfx_vfs_read+0x10/0x10 [ 152.507256][ T8185] ? __fget_files+0x3a0/0x420 [ 152.507285][ T8185] ? __fget_files+0x2a/0x420 [ 152.507338][ T8185] ksys_read+0x145/0x250 [ 152.507367][ T8185] ? __pfx_ksys_read+0x10/0x10 [ 152.507397][ T8185] ? rcu_is_watching+0x15/0xb0 [ 152.507419][ T8185] do_syscall_64+0xfa/0x3b0 [ 152.507451][ T8185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.507472][ T8185] ? clear_bhb_loop+0x60/0xb0 [ 152.507496][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.507516][ T8185] RIP: 0033:0x7f581178d5fc [ 152.507534][ T8185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.507551][ T8185] RSP: 002b:00007f58126d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.507574][ T8185] RAX: ffffffffffffffda RBX: 00007f58119b5fa0 RCX: 00007f581178d5fc [ 152.507589][ T8185] RDX: 000000000000000f RSI: 00007f58126d60a0 RDI: 0000000000000004 [ 152.507603][ T8185] RBP: 00007f58126d6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.507615][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.507627][ T8185] R13: 00007f58119b6038 R14: 00007f58119b5fa0 R15: 00007ffdfbb17f98 [ 152.507652][ T8185] [ 152.855617][ T8196] bridge_slave_0: invalid flags given to default FDB implementation [ 153.032709][ T8211] netlink: 68 bytes leftover after parsing attributes in process `syz.1.663'. [ 153.045854][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.662'. [ 153.108107][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 153.174704][ T8224] bond2: (slave veth0_to_bond): Releasing active interface [ 153.182192][ T8224] veth0_to_bond: left promiscuous mode [ 153.328693][ T8233] tap0: tun_chr_ioctl cmd 1074025678 [ 153.357923][ T8233] tap0: group set to 0 [ 153.429508][ T8241] netlink: 'syz.1.673': attribute type 3 has an invalid length. [ 153.597971][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 153.642779][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 154.050688][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 154.101703][ T8282] netlink: 'syz.3.682': attribute type 2 has an invalid length. [ 154.217910][ T8296] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 154.289180][ T8299] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 154.533006][ T8322] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 154.573665][ T8321] netlink: 'syz.0.693': attribute type 1 has an invalid length. [ 154.640785][ T8326] tipc: Enabled bearer , priority 0 [ 154.661648][ T8330] syzkaller0: entered promiscuous mode [ 154.668346][ T8330] syzkaller0: entered allmulticast mode [ 154.705247][ T8330] tipc: Resetting bearer [ 154.721431][ T8328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.747333][ T8330] tipc: Disabling bearer [ 154.833339][ T8349] netlink: 'syz.2.701': attribute type 1 has an invalid length. [ 154.997608][ T8373] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 155.057344][ T8366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.131508][ T8378] syzkaller0: entered promiscuous mode [ 155.139261][ T8378] syzkaller0: entered allmulticast mode [ 155.153531][ T8378] netlink: 'syz.4.708': attribute type 3 has an invalid length. [ 155.395406][ T8395] hsr0 speed is unknown, defaulting to 1000 [ 155.403225][ T8400] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 2, id = 0 [ 155.403897][ T8395] hsr0 speed is unknown, defaulting to 1000 [ 155.440333][ T8395] hsr0 speed is unknown, defaulting to 1000 [ 155.470733][ T8395] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.517496][ T8404] netlink: 'syz.2.718': attribute type 1 has an invalid length. [ 155.530968][ T8395] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 155.610777][ T8407] syzkaller0: entered promiscuous mode [ 155.616412][ T8407] syzkaller0: entered allmulticast mode [ 155.627229][ T8409] netem: unknown loss type 0 [ 155.642430][ T8409] netem: change failed [ 155.647705][ T8395] hsr0 speed is unknown, defaulting to 1000 [ 155.654848][ T8395] hsr0 speed is unknown, defaulting to 1000 [ 155.662433][ T8395] hsr0 speed is unknown, defaulting to 1000 [ 155.677189][ T8407] tipc: Started in network mode [ 155.686376][ T8407] tipc: Node identity , cluster identity 4711 [ 155.703346][ T8407] tipc: Failed to obtain node identity [ 155.715056][ T8407] tipc: Enabling of bearer rejected, failed to enable media [ 155.734529][ T8395] hsr0 speed is unknown, defaulting to 1000 [ 155.857817][ T8395] hsr0 speed is unknown, defaulting to 1000 [ 155.910602][ T8423] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 156.071666][ T8439] netlink: 'syz.2.728': attribute type 11 has an invalid length. [ 156.329827][ T8465] netlink: 'syz.2.735': attribute type 2 has an invalid length. [ 156.360598][ T8469] sock: sock_timestamping_bind_phc: sock not bind to device [ 156.443933][ T8475] sock: sock_timestamping_bind_phc: sock not bind to device [ 156.812502][ T8501] openvswitch: netlink: IPv4 tun info is not correct [ 156.968033][ T8505] __nla_validate_parse: 18 callbacks suppressed [ 156.968053][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 157.048374][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 157.357609][ T8544] sctp: [Deprecated]: syz.1.755 (pid 8544) Use of int in max_burst socket option deprecated. [ 157.357609][ T8544] Use struct sctp_assoc_value instead [ 157.452645][ T8553] netlink: 248 bytes leftover after parsing attributes in process `syz.4.760'. [ 157.549519][ T8562] netlink: 25 bytes leftover after parsing attributes in process `syz.1.763'. [ 157.550200][ T8561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.762'. [ 157.604933][ T8566] netlink: 'syz.0.762': attribute type 13 has an invalid length. [ 157.613189][ T8566] netlink: 'syz.0.762': attribute type 27 has an invalid length. [ 157.839881][ T8577] netlink: 'syz.3.767': attribute type 5 has an invalid length. [ 158.035679][ T8595] netlink: 'syz.1.773': attribute type 1 has an invalid length. [ 158.083050][ T8590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.772'. [ 158.161243][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 158.552811][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.781'. [ 158.725725][ T8630] trusted_key: syz.2.783 sent an empty control message without MSG_MORE. [ 158.760962][ T8627] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.783'. [ 158.799769][ T8628] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.783'. [ 158.933628][ T8641] syz_tun: entered allmulticast mode [ 158.960985][ T8645] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 158.981301][ T8640] syz_tun: left allmulticast mode [ 159.057896][ T8647] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 159.065699][ T8647] netlink: 'syz.3.787': attribute type 2 has an invalid length. [ 160.220692][ T8721] netlink: 'syz.3.807': attribute type 2 has an invalid length. [ 160.328120][ T8728] netlink: 'syz.3.807': attribute type 2 has an invalid length. [ 161.136137][ T8797] bridge_slave_1: left allmulticast mode [ 161.226666][ T8797] bridge_slave_1: left promiscuous mode [ 161.277214][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.385190][ T8797] bridge_slave_0: left allmulticast mode [ 161.407540][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.469895][ T8836] netlink: 'syz.2.821': attribute type 2 has an invalid length. [ 161.614377][ T8842] netlink: 'syz.4.823': attribute type 21 has an invalid length. [ 161.662718][ T8841] batadv0: left promiscuous mode [ 161.677639][ T8841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.701092][ T8841] batadv0: entered promiscuous mode [ 161.722351][ T8841] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 161.774101][ T8850] bond0: (slave batadv0): Releasing backup interface [ 161.831060][ T8850] bond0: (slave bond_slave_0): Releasing backup interface [ 161.891657][ T8850] bond0: (slave bond_slave_1): Releasing backup interface [ 161.922709][ T8850] team0: Port device team_slave_0 removed [ 161.942791][ T8850] team0: Port device team_slave_1 removed [ 161.971021][ T8850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.010027][ T8850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.071523][ T8865] __nla_validate_parse: 16 callbacks suppressed [ 162.071544][ T8865] netlink: 44 bytes leftover after parsing attributes in process `syz.4.831'. [ 162.096628][ T8866] gretap1: entered promiscuous mode [ 162.138663][ T8868] netlink: 128 bytes leftover after parsing attributes in process `syz.0.832'. [ 162.160506][ T8868] netlink: 3 bytes leftover after parsing attributes in process `syz.0.832'. [ 162.221157][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 162.243275][ T8875] netlink: 128 bytes leftover after parsing attributes in process `syz.0.832'. [ 162.316825][ T8875] netlink: 3 bytes leftover after parsing attributes in process `syz.0.832'. [ 162.349306][ T8893] netlink: 240 bytes leftover after parsing attributes in process `syz.4.840'. [ 162.539298][ T8900] netlink: 40 bytes leftover after parsing attributes in process `syz.2.842'. [ 162.666862][ T8907] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 162.727259][ T8909] IPv6: Can't replace route, no match found [ 162.760627][ T8912] netlink: 56 bytes leftover after parsing attributes in process `syz.3.845'. [ 163.000277][ T8916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.115174][ T8929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.852'. [ 163.285813][ T8930] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.421606][ T8929] hsr0 speed is unknown, defaulting to 1000 [ 164.612685][ T8995] vlan0: entered promiscuous mode [ 164.624286][ T8995] vlan0: entered allmulticast mode [ 164.636830][ T8995] hsr_slave_1: entered allmulticast mode [ 164.936234][ T9007] openvswitch: netlink: Missing key (keys=40, expected=80) [ 164.977622][ T9009] validate_nla: 9 callbacks suppressed [ 164.977642][ T9009] netlink: 'syz.1.872': attribute type 1 has an invalid length. [ 165.001329][ T9009] netlink: 'syz.1.872': attribute type 2 has an invalid length. [ 165.503911][ T9035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.944514][ T9077] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 166.290704][ T9102] delete_channel: no stack [ 166.456822][ T9114] netlink: 'syz.2.907': attribute type 4 has an invalid length. [ 166.470775][ T9114] netlink: 'syz.2.907': attribute type 4 has an invalid length. [ 166.577349][ T9128] netlink: 'syz.2.911': attribute type 10 has an invalid length. [ 166.623125][ T9128] netlink: 'syz.2.911': attribute type 10 has an invalid length. [ 166.933242][ T9144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.748708][ T9173] netlink: 'syz.1.924': attribute type 10 has an invalid length. [ 167.831264][ T9173] netlink: 'syz.1.924': attribute type 1 has an invalid length. [ 167.840620][ T9173] __nla_validate_parse: 11 callbacks suppressed [ 167.840639][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.924'. [ 168.008420][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.928'. [ 168.060830][ T9187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.928'. [ 168.079488][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'. [ 168.201754][ T9204] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 168.589229][ T9230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.702857][ T9243] netlink: set zone limit has 8 unknown bytes [ 169.260004][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 169.282952][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 169.304596][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 169.371040][ T9302] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 169.831858][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.853548][ T9342] bond0: (slave rose0): Enslaving as an active interface with an up link [ 170.034064][ T9358] bond4: entered promiscuous mode [ 170.039647][ T9358] bond4: entered allmulticast mode [ 170.045299][ T9358] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.071291][ T9358] netlink: 2 bytes leftover after parsing attributes in process `syz.1.983'. [ 170.073595][ T9361] netlink: 84 bytes leftover after parsing attributes in process `syz.0.984'. [ 170.080668][ T9358] ieee802154 phy1 wpan1: encryption failed: -22 [ 170.406192][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.993'. [ 170.660349][ T9413] netlink: 'syz.0.999': attribute type 7 has an invalid length. [ 170.977512][ T9436] netlink: 'syz.2.1007': attribute type 64 has an invalid length. [ 171.571100][ T9464] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 171.953754][ T9494] can: request_module (can-proto-0) failed. [ 172.273444][ T9539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.281247][ T9539] IPv6: NLM_F_CREATE should be set when creating new route [ 172.288576][ T9539] IPv6: NLM_F_CREATE should be set when creating new route [ 172.295796][ T9539] IPv6: NLM_F_CREATE should be set when creating new route [ 172.732447][ T9545] netlink: 'syz.3.1035': attribute type 4 has an invalid length. [ 172.737625][ T9548] netlink: 'syz.1.1037': attribute type 10 has an invalid length. [ 172.784280][ T9548] team0: Port device geneve0 added [ 172.808911][ T8805] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.842600][ T8805] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.873782][ T8805] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.908284][ T8805] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.017855][ T9568] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 173.026069][ T9571] __nla_validate_parse: 75 callbacks suppressed [ 173.026087][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 173.141100][ T9583] netlink: 'syz.1.1045': attribute type 12 has an invalid length. [ 173.153098][ T9581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1044'. [ 173.189587][ T9588] sctp: [Deprecated]: syz.4.1048 (pid 9588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.189587][ T9588] Use struct sctp_sack_info instead [ 173.309361][ T9582] hsr0 speed is unknown, defaulting to 1000 [ 173.314258][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1045'. [ 173.431438][ T9602] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 173.574487][ T9613] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 173.581100][ T9613] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.651636][ T9618] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1055'. [ 173.661038][ T9618] xt_policy: neither incoming nor outgoing policy selected [ 173.698328][ T5856] Bluetooth: hci4: link tx timeout [ 173.703633][ T5856] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 173.712187][ T5856] Bluetooth: hci4: link tx timeout [ 173.718071][ T5856] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.727363][ T5983] hsr0 speed is unknown, defaulting to 1000 [ 173.735965][ T8805] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.782926][ T8805] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.830868][ T8805] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.872562][ T8805] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.946297][ T9625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1060'. [ 173.977833][ T9625] openvswitch: netlink: Flow key attr not present in new flow. [ 173.992715][ T9629] IPVS: Unknown mcast interface: nicvf0 [ 174.118229][ T9637] Bluetooth: MGMT ver 1.23 [ 174.133956][ T9637] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1066'. [ 174.251759][ T9648] netlink: 'syz.1.1069': attribute type 83 has an invalid length. [ 174.349296][ T9658] batman_adv: batadv0: adding TT local entry 24:02:48:ff:05:00 to non-existent VLAN 1303 [ 174.372204][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 174.394886][ T9661] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1073'. [ 174.704277][ T9688] netlink: 'syz.2.1080': attribute type 1 has an invalid length. [ 174.727881][ T9685] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1080'. [ 174.869867][ T9695] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1085'. [ 175.185909][ T9712] syzkaller0: entered promiscuous mode [ 175.193754][ T9712] syzkaller0: entered allmulticast mode [ 175.550489][ T9724] netlink: 'syz.0.1094': attribute type 6 has an invalid length. [ 175.787417][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 176.016168][ T9764] openvswitch: netlink: IP tunnel dst address not specified [ 176.511829][ T9803] team0: Device vti0 is of different type [ 177.244654][ T9846] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 177.434738][ T9856] netlink: 'syz.4.1135': attribute type 4 has an invalid length. [ 177.449695][ T9856] netlink: 'syz.4.1135': attribute type 4 has an invalid length. [ 177.630233][ T9876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.695312][ T9880] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 177.791095][ T9885] netlink: 'syz.4.1146': attribute type 23 has an invalid length. [ 177.869371][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 177.940851][ T9894] netlink: 'syz.4.1150': attribute type 10 has an invalid length. [ 177.996012][ T9897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.049912][ T9904] sctp: [Deprecated]: syz.2.1153 (pid 9904) Use of int in max_burst socket option. [ 178.049912][ T9904] Use struct sctp_assoc_value instead [ 178.054361][ T9903] __nla_validate_parse: 10 callbacks suppressed [ 178.054384][ T9903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1152'. [ 178.098026][ T9905] netlink: 'syz.4.1150': attribute type 10 has an invalid length. [ 178.250917][ T9894] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.305973][ T9894] team0: entered allmulticast mode [ 178.313480][ T37] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 178.350451][ T9894] team_slave_0: entered allmulticast mode [ 178.376696][ T9894] team_slave_1: entered allmulticast mode [ 178.410438][ T9894] bond0: (slave team0): Enslaving as an active interface with an up link [ 178.426033][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1152'. [ 178.458278][ T9909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.467183][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 178.486854][ T9894] bond_slave_0: entered promiscuous mode [ 178.492661][ T9894] bond_slave_1: entered promiscuous mode [ 178.498394][ T9894] batadv0: entered promiscuous mode [ 178.503667][ T9894] team_slave_0: entered promiscuous mode [ 178.509350][ T9894] team_slave_1: entered promiscuous mode [ 178.515800][ T9894] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.523414][ T9894] bond3: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 178.532715][ T9894] bond3: (slave macvlan2): speed changed to 0 on port 1 [ 178.542010][ T8805] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:5859:66ff:fe4c:9d5d error=-28 [ 178.543155][ T9894] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 178.569670][ T9930] bond0: (slave bond_slave_1): Releasing backup interface [ 178.592015][ T9933] macsec2: entered promiscuous mode [ 178.597579][ T9933] macsec2: entered allmulticast mode [ 178.629730][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 178.649127][ T9936] bond2: entered promiscuous mode [ 178.655712][ T9936] bond2: entered allmulticast mode [ 178.661497][ T9936] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.669670][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 178.679625][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 178.688748][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 178.698974][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 178.732985][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 178.742764][ T9930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'. [ 178.837879][ T9948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.948419][ T9953] bond5: entered promiscuous mode [ 178.953587][ T9953] bond5: entered allmulticast mode [ 178.959562][ T9953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.589962][ T9997] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 179.693615][ T9987] syzkaller1: entered promiscuous mode [ 179.700788][ T9987] syzkaller1: entered allmulticast mode [ 179.743450][T10012] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 179.857655][T10020] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20000 [ 179.932030][T10025] netlink: 'syz.0.1188': attribute type 29 has an invalid length. [ 179.946579][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 180.309867][T10066] raw_sendmsg: syz.0.1200 forgot to set AF_INET. Fix it! [ 180.725661][T10107] bond0 (unregistering): Released all slaves [ 180.830799][T10110] netlink: 'syz.2.1214': attribute type 21 has an invalid length. [ 181.599216][T10161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.618855][T10161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.687182][T10161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.700087][T10161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.775982][T10161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.789498][T10161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.856999][T10161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.879098][T10161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.896757][T10174] vlan0: entered promiscuous mode [ 181.902153][T10174] vlan0: entered allmulticast mode [ 181.908394][T10174] veth0_vlan: entered allmulticast mode [ 181.967925][ T8828] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.998174][ T8828] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.018779][ T8828] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.028494][ T8828] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.037044][ T8828] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.045376][ T8828] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.058799][ T8828] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.067285][ T8828] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.158353][T10188] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 182.301321][T10197] vxlan1: entered promiscuous mode [ 182.307174][T10197] vxlan1: entered allmulticast mode [ 182.951850][T10235] validate_nla: 2 callbacks suppressed [ 182.951872][T10235] netlink: 'syz.1.1252': attribute type 5 has an invalid length. [ 182.973251][T10235] netlink: 'syz.1.1252': attribute type 5 has an invalid length. [ 183.514155][T10266] IPVS: Error joining to the multicast group [ 183.523134][T10268] __nla_validate_parse: 80 callbacks suppressed [ 183.523153][T10268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1261'. [ 183.581244][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 183.638733][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1263'. [ 183.804827][T10286] syzkaller1: entered promiscuous mode [ 183.821029][T10286] syzkaller1: entered allmulticast mode [ 183.868747][T10291] netlink: 'syz.2.1269': attribute type 13 has an invalid length. [ 183.878103][T10291] netlink: 'syz.2.1269': attribute type 58 has an invalid length. [ 183.885964][T10291] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1269'. [ 184.034633][T10300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.070560][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 184.089844][T10299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.136920][T10311] netlink: 'syz.1.1277': attribute type 1 has an invalid length. [ 184.226183][T10311] 8021q: adding VLAN 0 to HW filter on device bond6 [ 184.235830][T10318] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 184.251494][T10319] vlan1: entered promiscuous mode [ 184.258343][T10318] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1278'. [ 184.269051][T10319] bond6: entered promiscuous mode [ 184.292530][T10319] vlan1: entered allmulticast mode [ 184.303311][T10319] bond6: entered allmulticast mode [ 184.349106][T10311] bond6: (slave gretap1): making interface the new active one [ 184.357187][T10311] gretap1: entered promiscuous mode [ 184.362604][T10311] gretap1: entered allmulticast mode [ 184.369276][T10311] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 184.700959][T10351] veth0: entered promiscuous mode [ 184.707701][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 184.874849][T10361] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1293'. [ 185.182139][T10383] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20003 [ 185.241753][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 185.264256][T10385] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 185.384888][T10394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1304'. [ 185.483355][T10397] tipc: Enabled bearer , priority 0 [ 185.490839][T10397] syzkaller0: entered promiscuous mode [ 185.496331][T10397] syzkaller0: entered allmulticast mode [ 185.511214][T10397] tipc: Resetting bearer [ 185.569792][T10396] tipc: Resetting bearer [ 185.577459][T10396] tipc: Disabling bearer [ 185.723476][T10405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.763470][T10407] tipc: Enabling of bearer rejected, media not registered [ 185.835517][T10411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.845958][T10411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.857044][T10411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 185.909894][T10416] openvswitch: netlink: Missing key (keys=40, expected=100) [ 185.950456][T10411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.968889][T10411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.981043][T10411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 186.055434][T10411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.076252][T10411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.087168][T10411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 186.104998][T10425] netlink: 'syz.3.1315': attribute type 2 has an invalid length. [ 186.113615][T10424] netlink: 'syz.4.1314': attribute type 11 has an invalid length. [ 186.113616][T10425] netlink: 'syz.3.1315': attribute type 1 has an invalid length. [ 186.135069][T10411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.147981][T10411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.159881][T10411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 186.359324][ T8822] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.381000][ T8822] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.389799][ T8822] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.437779][ T8822] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.446194][ T8822] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.462043][ T8822] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.531130][ T8822] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.576558][ T8822] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.599724][ T8822] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.630975][ T8822] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.648092][ T7855] udevd[7855]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 186.650862][ T8822] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 186.685810][ T8822] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.789943][T10462] Bluetooth: MGMT ver 1.23 [ 187.670485][T10486] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 187.710308][ T979] IPVS: starting estimator thread 0... [ 187.731297][T10530] bond0: Device is already in use. [ 187.807216][T10528] IPVS: using max 35 ests per chain, 84000 per kthread [ 187.853187][T10536] macvlan2: entered allmulticast mode [ 187.879822][T10536] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 188.327917][T10573] netlink: 'syz.4.1359': attribute type 2 has an invalid length. [ 188.545840][T10589] wg0: entered promiscuous mode [ 188.578629][T10589] wg0: entered allmulticast mode [ 188.612870][T10589] tipc: Enabled bearer , priority 0 [ 188.641846][T10589] __nla_validate_parse: 18 callbacks suppressed [ 188.641869][T10589] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1363'. [ 188.677400][T10603] netlink: 'syz.0.1367': attribute type 25 has an invalid length. [ 188.694762][T10595] pim6reg1: entered promiscuous mode [ 188.723501][T10595] pim6reg1: entered allmulticast mode [ 188.754842][T10584] tipc: Disabling bearer [ 188.869333][T10595] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1366'. [ 188.886509][T10613] can: request_module (can-proto-0) failed. [ 188.887877][T10617] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 188.993850][T10627] netlink: 'syz.3.1374': attribute type 1 has an invalid length. [ 189.007896][T10629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1376'. [ 189.028777][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'. [ 189.038236][T10627] nbd: must specify at least one socket [ 189.190170][T10645] openvswitch: netlink: Message has 4 unknown bytes. [ 189.227777][T10646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1381'. [ 189.238736][T10645] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 189.240064][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 189.353999][T10658] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 189.706322][T10685] netlink: 'syz.4.1394': attribute type 21 has an invalid length. [ 189.720854][T10685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1394'. [ 189.949569][T10701] netlink: 'syz.0.1401': attribute type 33 has an invalid length. [ 190.265314][T10735] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 190.269317][T10730] netlink: 'syz.3.1409': attribute type 6 has an invalid length. [ 190.305039][T10739] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1411'. [ 190.319293][T10739] netlink: 'syz.2.1411': attribute type 39 has an invalid length. [ 190.429387][T10749] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1415'. [ 190.459880][T10749] unsupported nlmsg_type 40 [ 190.683527][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 190.714544][T10766] netlink: 'syz.2.1422': attribute type 7 has an invalid length. [ 190.746776][T10766] netlink: 'syz.2.1422': attribute type 8 has an invalid length. [ 190.874565][T10782] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 190.912588][T10780] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 190.928757][T10780] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 190.965613][T10790] gretap1: entered promiscuous mode [ 190.973682][T10790] bond3: (slave gretap1): making interface the new active one [ 190.981771][T10790] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 191.183751][T10803] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 191.209883][T10802] vcan0 (unregistering): left allmulticast mode [ 191.285602][T10808] team0: Device wireguard0 is of different type [ 191.712913][T10845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.312242][T10909] lo: entered allmulticast mode [ 192.441373][T10919] tipc: Enabled bearer , priority 0 [ 192.451902][T10918] syzkaller0: entered promiscuous mode [ 192.466891][T10918] syzkaller0: entered allmulticast mode [ 192.477978][T10910] lo: left allmulticast mode [ 192.540611][T10918] syzkaller0: mtu greater than device maximum [ 192.582134][T10916] tipc: Resetting bearer [ 192.633570][T10916] tipc: Disabling bearer [ 192.779117][T10946] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 193.294219][T10981] pim6reg1: entered promiscuous mode [ 193.317832][T10981] pim6reg1: entered allmulticast mode [ 193.484923][T10996] tipc: Enabled bearer , priority 0 [ 193.512246][T10996] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 193.525857][T10996] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 193.794407][T11018] __nla_validate_parse: 16 callbacks suppressed [ 193.794428][T11018] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1497'. [ 193.851961][ T3461] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 193.875390][T11024] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 193.931204][T11030] validate_nla: 6 callbacks suppressed [ 193.931223][T11030] netlink: 'syz.1.1501': attribute type 7 has an invalid length. [ 193.953151][T11030] : entered promiscuous mode [ 194.454307][T11078] netlink: 'syz.4.1512': attribute type 11 has an invalid length. [ 194.480456][T11078] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1512'. [ 194.510410][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.558894][T11088] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 194.566188][T11088] batman_adv: batadv0: Adding interface: wlan1 [ 194.572583][T11088] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.598183][T11088] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 194.843488][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'. [ 195.114573][T11083] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 195.251374][T11110] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1522'. [ 195.302519][T11116] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 195.447842][T11129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1525'. [ 195.465964][T11128] netlink: 'syz.3.1526': attribute type 1 has an invalid length. [ 195.475494][T11128] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1526'. [ 195.484686][T11128] netlink: 'syz.3.1526': attribute type 1 has an invalid length. [ 195.517358][T11133] netlink: 'syz.0.1528': attribute type 1 has an invalid length. [ 195.653231][T11147] openvswitch: netlink: IPv4 tun info is not correct [ 195.736164][T11150] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 195.763760][T11150] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 195.862384][T11165] sctp: [Deprecated]: syz.2.1535 (pid 11165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.862384][T11165] Use struct sctp_sack_info instead [ 196.093156][T11184] netlink: 'syz.2.1541': attribute type 1 has an invalid length. [ 196.101089][T11184] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1541'. [ 196.125742][T11184] netlink: 'syz.2.1541': attribute type 2 has an invalid length. [ 196.144481][T11184] netlink: 'syz.2.1541': attribute type 1 has an invalid length. [ 196.169199][T11190] netlink: 'syz.3.1543': attribute type 1 has an invalid length. [ 196.252855][T11194] netlink: 'syz.2.1544': attribute type 1 has an invalid length. [ 196.379694][T11204] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 196.482380][T11208] bond6: entered promiscuous mode [ 196.499444][T11208] bond6: entered allmulticast mode [ 196.505388][T11208] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.623818][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 196.635950][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.665430][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 198.109898][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 199.770802][T11237] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 199.785022][T11237] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 199.897076][T11245] netlink: 'syz.4.1559': attribute type 1 has an invalid length. [ 199.968275][T11245] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.976415][T11245] bond5: (slave bond6): making interface the new active one [ 200.013116][T11245] bond5: (slave bond6): Enslaving as an active interface with an up link [ 200.059413][T11258] bridge_slave_0: invalid flags given to default FDB implementation [ 200.075390][T11245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1559'. [ 200.111836][T11245] bond5: entered promiscuous mode [ 200.121307][T11245] bond6: entered promiscuous mode [ 200.127218][T11245] bond5: entered allmulticast mode [ 200.132479][T11245] bond6: entered allmulticast mode [ 200.139715][T11245] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.293061][T11278] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1566'. [ 200.325891][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1566'. [ 200.339817][T11278] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1566'. [ 200.351864][T11278] netlink: 'syz.2.1566': attribute type 3 has an invalid length. [ 200.364914][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 200.374904][T11278] netlink: 'syz.2.1566': attribute type 2 has an invalid length. [ 200.383689][T11278] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1566'. [ 200.450810][T11287] openvswitch: netlink: Duplicate or invalid key (type 0). [ 200.460557][T11287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.551757][T11295] netlink: 'syz.2.1573': attribute type 83 has an invalid length. [ 200.644104][T11302] pim6reg527: entered allmulticast mode [ 200.963638][T11336] netlink: 'syz.0.1584': attribute type 1 has an invalid length. [ 201.074646][ T5987] IPVS: starting estimator thread 0... [ 201.165626][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1587'. [ 201.178483][T11344] IPVS: using max 36 ests per chain, 86400 per kthread [ 201.181618][T11351] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1590'. [ 201.195616][T11347] tipc: Enabling of bearer rejected, already enabled [ 201.273874][T11368] netlink: 'syz.0.1592': attribute type 3 has an invalid length. [ 201.300367][T11353] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 201.500657][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 201.706383][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1602'. [ 201.770655][T11411] lo: entered allmulticast mode [ 201.945997][T11410] lo: left allmulticast mode [ 202.205690][T11432] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004 [ 202.218119][T11435] openvswitch: netlink: IPv4 tun info is not correct [ 202.540426][T11456] netlink: 'syz.4.1615': attribute type 10 has an invalid length. [ 202.615765][T11445] netlink: 'syz.1.1614': attribute type 5 has an invalid length. [ 202.683375][T11456] team_slave_0: left promiscuous mode [ 202.695314][T11456] team_slave_1: left promiscuous mode [ 203.260570][T11507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.340750][T11507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.434320][T11520] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 203.450362][T11524] veth0_to_hsr: entered allmulticast mode [ 203.624917][T11533] gtp0: entered promiscuous mode [ 203.678644][T11533] gtp0: entered allmulticast mode [ 204.894101][T11566] syz.2.1647 (11566) used greatest stack depth: 16304 bytes left [ 205.149163][T11637] netlink: zone id is out of range [ 205.154338][T11637] netlink: zone id is out of range [ 205.224149][T11637] netlink: zone id is out of range [ 205.236178][T11637] netlink: zone id is out of range [ 205.245230][T11637] netlink: zone id is out of range [ 205.251860][T11637] netlink: zone id is out of range [ 205.259196][T11637] netlink: zone id is out of range [ 205.334569][T11657] veth1_to_bond: entered allmulticast mode [ 205.347465][T11657] __nla_validate_parse: 20 callbacks suppressed [ 205.347481][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 205.400822][T11663] veth1_to_bond: left allmulticast mode [ 205.452741][T11654] syzkaller1: entered promiscuous mode [ 205.475760][T11654] syzkaller1: entered allmulticast mode [ 205.704567][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 205.714029][ T5181] Bluetooth: hci4: command 0x0406 tx timeout [ 205.721110][T11682] net_ratelimit: 2 callbacks suppressed [ 205.721128][T11682] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 205.736245][T11682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.788673][T11689] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 205.880398][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 205.900496][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'. [ 205.918513][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1685'. [ 206.034757][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 206.040509][T11707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 206.062707][T11705] validate_nla: 5 callbacks suppressed [ 206.062731][T11705] netlink: 'syz.1.1688': attribute type 2 has an invalid length. [ 206.087258][T11705] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1688'. [ 206.211138][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'. [ 206.211797][T11719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1693'. [ 206.282753][T11719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1693'. [ 206.374528][T11727] macsec0: entered promiscuous mode [ 206.380753][T11727] macsec0: entered allmulticast mode [ 206.387159][T11727] veth1_macvtap: entered allmulticast mode [ 206.393310][T11727] macsec0: left promiscuous mode [ 206.398976][T11727] macsec0: left allmulticast mode [ 206.409730][T11727] veth1_macvtap: left allmulticast mode [ 206.666582][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 206.701089][T11748] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 206.741714][T11752] netlink: 'syz.4.1705': attribute type 4 has an invalid length. [ 206.860378][T11765] netlink: 'syz.1.1707': attribute type 83 has an invalid length. [ 207.079924][T11779] dvmrp1: entered allmulticast mode [ 207.173502][T11790] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 207.186123][T11790] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 207.492290][T11815] batadv_slave_0: entered promiscuous mode [ 207.587121][T11814] batadv_slave_0: left promiscuous mode [ 207.615755][T11825] batman_adv: batadv0: Interface activated: wlan1 [ 207.753012][T11837] dvmrp1: left allmulticast mode [ 207.787707][ T5181] Bluetooth: hci4: command 0x0406 tx timeout [ 208.013678][T11862] netlink: 'syz.0.1735': attribute type 33 has an invalid length. [ 208.034526][T11862] team0: left promiscuous mode [ 208.048917][T11858] netlink: 'syz.1.1736': attribute type 1 has an invalid length. [ 208.079473][T11858] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.119171][T11862] veth9: entered allmulticast mode [ 208.909527][T11936] netlink: 'syz.3.1758': attribute type 7 has an invalid length. [ 208.947640][T11936] netlink: 'syz.3.1758': attribute type 8 has an invalid length. [ 208.961020][T11919] hsr0 speed is unknown, defaulting to 1000 [ 209.289106][T11952] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 209.372956][T11952] 8021q: adding VLAN 0 to HW filter on device bond8 [ 209.403331][T11954] bond8 (unregistering): Released all slaves [ 210.027850][T11992] batman_adv: batadv0: Adding interface: dummy0 [ 210.047362][T11992] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.073406][T11983] "syz.1.1771" (11983) uses obsolete ecb(arc4) skcipher [ 210.083740][T11992] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 210.200868][T12002] 8021q: VLANs not supported on ip_vti0 [ 210.209778][ T10] IPVS: starting estimator thread 0... [ 210.301203][T12006] IPVS: using max 34 ests per chain, 81600 per kthread [ 210.318594][T12015] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 210.391921][T12022] bridge0: port 3(syz_tun) entered blocking state [ 210.402192][T12022] bridge0: port 3(syz_tun) entered disabled state [ 210.411474][T12022] syz_tun: entered allmulticast mode [ 210.418329][T12022] syz_tun: entered promiscuous mode [ 210.778623][T12030] tc_dump_action: action bad kind [ 210.784219][T12031] __nla_validate_parse: 17 callbacks suppressed [ 210.784236][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1781'. [ 211.109725][T12047] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 211.128918][T12047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1787'. [ 211.263849][T12057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.429894][T12072] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1793'. [ 211.439987][T12070] validate_nla: 2 callbacks suppressed [ 211.440006][T12070] netlink: 'syz.3.1795': attribute type 10 has an invalid length. [ 211.456111][T12074] netlink: 'syz.1.1796': attribute type 1 has an invalid length. [ 211.482834][T12074] 8021q: adding VLAN 0 to HW filter on device bond8 [ 211.494490][T12070] team0: Port device netdevsim0 added [ 211.548281][T12074] bond8: (slave veth3): Enslaving as an active interface with a down link [ 211.562676][T12082] vlan2: entered allmulticast mode [ 211.568185][T12082] veth0_to_bond: entered allmulticast mode [ 211.585186][T12082] bond8: (slave vlan2): Opening slave failed [ 211.772392][T12100] bridge7: entered promiscuous mode [ 211.783298][T12100] bridge7: entered allmulticast mode [ 211.823171][T12106] syzkaller1: entered promiscuous mode [ 211.829310][T12106] syzkaller1: entered allmulticast mode [ 211.861655][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'. [ 211.962257][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1806'. [ 212.043049][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1808'. [ 212.084605][T12120] team1: entered promiscuous mode [ 212.090215][T12120] team1: entered allmulticast mode [ 212.656204][T12177] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 212.755561][T12177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 212.984805][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 213.033335][T12201] netlink: 'syz.4.1830': attribute type 1 has an invalid length. [ 213.043318][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1831'. [ 213.043597][T12204] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1829'. [ 213.076560][T12201] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 213.089189][T12201] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 213.100303][T12201] bond9: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 213.144144][T12212] netlink: 'syz.1.1832': attribute type 10 has an invalid length. [ 213.144432][T12206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1831'. [ 213.155168][T12212] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.171574][T12212] bond0: (slave team0): Enslaving as an active interface with an up link [ 213.182854][T12212] netlink: 'syz.1.1832': attribute type 10 has an invalid length. [ 213.233279][T12212] 8021q: adding VLAN 0 to HW filter on device bond9 [ 213.249159][T12215] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 213.288139][T12220] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 213.581649][T12242] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 213.710451][T12233] hsr0 speed is unknown, defaulting to 1000 [ 214.823122][T12263] vlan2: entered allmulticast mode [ 214.828388][T12263] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 214.835698][T12265] sch_tbf: burst 0 is lower than device lo mtu (80) ! [ 215.546674][ T5181] Bluetooth: hci4: command 0x0406 tx timeout [ 223.946633][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 233.854218][T12297] IPVS: Error connecting to the multicast addr [ 233.863372][T12294] syzkaller1: entered promiscuous mode [ 233.870152][T12294] syzkaller1: entered allmulticast mode [ 234.006799][T12303] __nla_validate_parse: 4 callbacks suppressed [ 234.006820][T12303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1858'. [ 234.119908][T12313] netlink: 'syz.4.1857': attribute type 1 has an invalid length. [ 234.131724][T12315] netlink: 'syz.3.1861': attribute type 21 has an invalid length. [ 234.141278][T12315] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1861'. [ 234.179823][ T5181] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.187306][ T5181] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.203159][ T5181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.211631][ T5181] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.220835][ T5181] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.273570][T12313] bond10: (slave gretap2): making interface the new active one [ 234.306031][T12313] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 234.498545][T12346] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1867'. [ 234.521234][T12346] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1867'. [ 234.550521][T12351] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 234.584117][T12351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1866'. [ 234.589119][T12317] hsr0 speed is unknown, defaulting to 1000 [ 234.764251][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 234.785063][T12362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.797617][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 234.819006][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'. [ 234.888877][T12317] chnl_net:caif_netlink_parms(): no params data found [ 234.966480][T12367] hsr0 speed is unknown, defaulting to 1000 [ 235.120233][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.137616][T12317] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.154375][T12317] bridge_slave_0: entered allmulticast mode [ 235.162428][T12317] bridge_slave_0: entered promiscuous mode [ 235.173146][T12317] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.180968][T12317] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.190795][T12317] bridge_slave_1: entered allmulticast mode [ 235.210215][T12317] bridge_slave_1: entered promiscuous mode [ 235.237932][T12389] netlink: 'syz.4.1879': attribute type 1 has an invalid length. [ 235.269807][T12389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'. [ 235.372639][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1878'. [ 235.393662][T12317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.435306][T12317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.589792][T12416] tipc: Enabling of bearer rejected, failed to enable media [ 235.635940][T12419] team2: entered promiscuous mode [ 235.643728][T12419] team2: entered allmulticast mode [ 235.653330][T12317] team0: Port device team_slave_0 added [ 235.665153][T12317] team0: Port device team_slave_1 added [ 235.730517][T12423] netlink: 'syz.1.1885': attribute type 6 has an invalid length. [ 235.780547][T12317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.794647][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.823975][T12317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.864064][T12317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.881934][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.955207][T12317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.185900][T12459] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 236.239106][T12317] hsr_slave_0: entered promiscuous mode [ 236.245755][T12317] hsr_slave_1: entered promiscuous mode [ 236.259925][T12317] debugfs: 'hsr0' already exists in 'hsr' [ 236.266529][ T5856] Bluetooth: hci5: command tx timeout [ 236.272858][T12317] Cannot create hsr debugfs directory [ 236.559016][T12478] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 236.559161][T12317] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 236.578137][T12317] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.599214][T12317] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.619352][T12317] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.681542][T12491] bond10: entered promiscuous mode [ 236.687156][T12491] bond10: entered allmulticast mode [ 236.692811][T12491] 8021q: adding VLAN 0 to HW filter on device bond10 [ 236.703502][T12491] netlink: 'syz.1.1901': attribute type 1 has an invalid length. [ 236.865563][T12317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.913114][T12503] 8021q: VLANs not supported on vcan0 [ 236.925468][T12505] sctp: [Deprecated]: syz.1.1905 (pid 12505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.925468][T12505] Use struct sctp_sack_info instead [ 236.937839][T12317] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.972366][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.979643][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.013921][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.021086][ T8828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.328898][T12317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.864454][T12317] veth0_vlan: entered promiscuous mode [ 237.888648][T12317] veth1_vlan: entered promiscuous mode [ 237.974863][T12317] veth0_macvtap: entered promiscuous mode [ 238.011813][T12317] veth1_macvtap: entered promiscuous mode [ 238.078705][T12317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.133660][T12590] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20004 [ 238.151589][T12317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.193244][ T1037] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.207558][ T1037] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.218914][ T3495] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.232413][ T3495] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.288030][T12599] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 238.294534][T12599] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 238.312963][T12600] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 238.347207][ T5856] Bluetooth: hci5: command tx timeout [ 238.470797][ T8828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.494790][ T8828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.523996][ T8828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.561874][ T8828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.682667][T12622] chnl_net:caif_netlink_parms(): no params data found [ 238.744435][T12624] IPVS: Error connecting to the multicast addr [ 238.821126][T12630] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 238.861909][T12634] netlink: 'syz.3.1935': attribute type 1 has an invalid length. [ 238.883773][T12634] netlink: 'syz.3.1935': attribute type 2 has an invalid length. [ 238.920581][T12625] netlink: 'syz.3.1935': attribute type 7 has an invalid length. [ 238.934061][T12625] netlink: 'syz.3.1935': attribute type 8 has an invalid length. [ 239.130590][T12649] sctp: [Deprecated]: syz.5.1938 (pid 12649) Use of int in max_burst socket option deprecated. [ 239.130590][T12649] Use struct sctp_assoc_value instead [ 239.164560][T12651] __nla_validate_parse: 17 callbacks suppressed [ 239.164583][T12651] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1942'. [ 239.180524][T12651] hsr_slave_0: left promiscuous mode [ 239.186621][T12651] hsr_slave_1: left promiscuous mode [ 239.211876][T12643] tipc: Started in network mode [ 239.217678][T12643] tipc: Node identity 1ad782de4a0a, cluster identity 4711 [ 239.225018][T12643] tipc: Enabled bearer , priority 0 [ 239.235447][T12643] syzkaller0: entered promiscuous mode [ 239.242353][T12643] syzkaller0: entered allmulticast mode [ 239.252501][T12643] tipc: Resetting bearer [ 239.273590][T12642] tipc: Resetting bearer [ 239.285648][T12642] tipc: Disabling bearer [ 239.577140][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1948'. [ 239.589761][T12673] netlink: 'syz.3.1948': attribute type 1 has an invalid length. [ 239.601079][T12673] netlink: 'syz.3.1948': attribute type 2 has an invalid length. [ 239.613048][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1948'. [ 239.624008][T12673] netlink: 'syz.3.1948': attribute type 1 has an invalid length. [ 239.641867][T12673] netlink: 'syz.3.1948': attribute type 2 has an invalid length. [ 239.694617][T12680] netlink: 'syz.0.1950': attribute type 11 has an invalid length. [ 239.988211][T12698] netlink: 'syz.0.1957': attribute type 10 has an invalid length. [ 239.997186][T12698] veth1_macvtap: left promiscuous mode [ 240.026239][T12698] team0: Device veth1_macvtap failed to register rx_handler [ 240.099727][T12704] netlink: 'syz.3.1960': attribute type 21 has an invalid length. [ 240.427232][ T5856] Bluetooth: hci5: command tx timeout [ 240.453230][T12730] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1969'. [ 240.515737][T12736] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1970'. [ 240.692365][T12749] geneve2: entered promiscuous mode [ 240.699811][T12749] geneve2: entered allmulticast mode [ 240.706244][ T8779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.717142][ T8779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.725951][ T8779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.734905][ T8779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.990534][T12758] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 241.122156][T12763] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 241.130655][T12763] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1975'. [ 241.152312][T12763] nbd: couldn't find device at index 1048576 [ 241.314019][T12775] syzkaller1: entered promiscuous mode [ 241.327761][T12775] syzkaller1: entered allmulticast mode [ 241.350216][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 241.374014][T12777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1979'. [ 241.445636][T12782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.574904][T12792] netlink: 'syz.4.1984': attribute type 1 has an invalid length. [ 241.586684][T12792] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1984'. [ 241.661703][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'. [ 241.665315][T12796] batman_adv: batadv0: Interface deactivated: wlan1 [ 241.993397][T12819] netlink: 'syz.4.1993': attribute type 10 has an invalid length. [ 242.021015][T12819] geneve0: entered allmulticast mode [ 242.028742][T12819] team0: Port device geneve0 added [ 242.164612][T12831] 8021q: adding VLAN 0 to HW filter on device bond11 [ 242.181153][T12831] bond11: entered allmulticast mode [ 242.188469][T12831] team0: Failed to send port change of device bond11 via netlink (err -105) [ 242.198090][T12831] team0: Failed to send options change via netlink (err -105) [ 242.205732][T12831] team0: Port device bond11 added [ 242.310110][T12836] pimreg: entered allmulticast mode [ 242.508823][ T5856] Bluetooth: hci5: command tx timeout [ 242.673592][T12865] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 242.694879][T12857] netlink: 'syz.4.2007': attribute type 13 has an invalid length. [ 242.705381][T12865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.852254][T12876] openvswitch: netlink: Message has 5 unknown bytes. [ 242.869202][T12857] team_slave_0: entered promiscuous mode [ 242.875026][T12857] team_slave_1: entered promiscuous mode [ 242.880829][T12857] geneve0: entered promiscuous mode [ 242.887751][T12857] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.912488][T12857] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 243.240166][T12898] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 243.251874][T12888] tunl0: entered promiscuous mode [ 243.283642][T12901] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 243.308467][T12901] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 243.438147][T12908] bridge0: port 3(vlan2) entered blocking state [ 243.454771][T12908] bridge0: port 3(vlan2) entered disabled state [ 243.476792][T12908] vlan2: entered allmulticast mode [ 243.494927][T12908] bridge0: entered allmulticast mode [ 243.526904][T12908] vlan2: left allmulticast mode [ 243.540644][T12908] bridge0: left allmulticast mode [ 243.849371][T12944] tc_dump_action: action bad kind [ 244.005538][T12952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.035189][T12952] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 244.048947][T12952] sock: sock_set_timeout: `syz.3.2033' (pid 12952) tries to set negative timeout [ 244.174681][T12962] __nla_validate_parse: 17 callbacks suppressed [ 244.174701][T12962] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2037'. [ 244.201813][T12964] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2037'. [ 244.376368][T12982] IPVS: set_ctl: invalid protocol: 38 224.0.0.1:20003 [ 244.412709][T12989] tipc: Started in network mode [ 244.427795][T12989] tipc: Node identity 3205615a386d, cluster identity 4711 [ 244.435215][T12989] tipc: Enabled bearer , priority 0 [ 244.550228][T12989] syzkaller0: entered promiscuous mode [ 244.556288][T12989] syzkaller0: entered allmulticast mode [ 244.562608][T12989] tipc: Resetting bearer [ 244.579704][T12986] tipc: Resetting bearer [ 244.646197][T12986] tipc: Disabling bearer [ 244.792253][T13005] tipc: New replicast peer: 255.255.255.255 [ 244.801658][T13005] tipc: Enabled bearer , priority 10 [ 244.935497][T13013] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2052'. [ 244.946045][T12997] validate_nla: 7 callbacks suppressed [ 244.946063][T12997] netlink: 'syz.1.2044': attribute type 1 has an invalid length. [ 244.954217][T13013] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.033379][T13013] veth1_to_hsr: entered allmulticast mode [ 245.113399][T13025] atomic_op ffff88806fb54998 conn xmit_atomic 0000000000000000 [ 245.157294][T13026] netlink: 'syz.4.2054': attribute type 29 has an invalid length. [ 245.169540][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2054'. [ 245.214166][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'. [ 245.650646][T13059] netlink: 'syz.3.2060': attribute type 16 has an invalid length. [ 245.687166][T13055] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2059'. [ 245.704325][T13059] netlink: 'syz.3.2060': attribute type 3 has an invalid length. [ 245.722323][T13059] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2060'. [ 245.916616][ T5987] tipc: Node number set to 174612826 [ 246.073710][T13089] netlink: 'syz.5.2070': attribute type 1 has an invalid length. [ 246.309010][T13104] netlink: 'syz.1.2076': attribute type 24 has an invalid length. [ 246.375722][T13115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.432816][T13115] netlink: 'syz.5.2080': attribute type 1 has an invalid length. [ 246.455282][T13115] netlink: 'syz.5.2080': attribute type 3 has an invalid length. [ 246.478857][T13115] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2080'. [ 246.495494][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2083'. [ 246.501697][T13115] NCSI netlink: No device for ifindex 813332851 [ 246.510521][T13122] bond0: entered promiscuous mode [ 246.515974][T13122] team0: entered promiscuous mode [ 246.522218][T13122] geneve0: entered promiscuous mode [ 246.544749][T13124] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2082'. [ 246.555308][T13122] bond_slave_0: entered promiscuous mode [ 246.581056][T13122] debugfs: 'hsr1' already exists in 'hsr' [ 246.590648][T13122] Cannot create hsr debugfs directory [ 246.600902][T13122] hsr1: entered promiscuous mode [ 246.607103][T13124] netlink: 'syz.0.2082': attribute type 7 has an invalid length. [ 246.635351][T13129] netlink: 'syz.3.2084': attribute type 1 has an invalid length. [ 247.338872][T13173] delete_channel: no stack [ 247.473874][T13192] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 247.894671][T13226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.023524][T13233] macsec0: entered promiscuous mode [ 248.043149][T13233] macsec0: entered allmulticast mode [ 248.107729][T13233] veth1_macvtap: entered allmulticast mode [ 248.153039][T13233] macsec0: left promiscuous mode [ 248.196927][T13233] macsec0: left allmulticast mode [ 248.216853][T13233] veth1_macvtap: left allmulticast mode [ 248.843924][T13303] openvswitch: netlink: IP tunnel TTL not specified. [ 249.250014][T13340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.412680][T13352] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 249.451888][T13354] netlink: 'syz.3.2152': attribute type 11 has an invalid length. [ 249.476084][T13354] __nla_validate_parse: 25 callbacks suppressed [ 249.476104][T13354] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2152'. [ 249.645325][T13370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.716910][T13370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.775367][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 249.812116][T13370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.827705][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 250.116622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.219577][T13417] validate_nla: 3 callbacks suppressed [ 250.219597][T13417] netlink: 'syz.4.2170': attribute type 25 has an invalid length. [ 251.037043][T13444] tipc: Enabling of bearer rejected, media not registered [ 251.060327][T13444] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2178'. [ 251.069517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.171387][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2179'. [ 251.313306][T13462] syzkaller1: entered promiscuous mode [ 251.334712][T13462] syzkaller1: entered allmulticast mode [ 251.570212][T13487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2191'. [ 251.624742][T13489] netlink: 'syz.1.2192': attribute type 1 has an invalid length. [ 251.641041][T13489] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2192'. [ 251.651178][T13489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.677534][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2193'. [ 251.704513][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2193'. [ 251.820202][T13509] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2199'. [ 251.903110][T13502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.052490][T13527] tipc: Failed to remove unknown binding: 66,1,1/1921253694:3645268784/3645268786 [ 252.088710][T13527] tipc: Failed to remove unknown binding: 66,1,1/1921253694:3645268784/3645268786 [ 252.291251][T13549] netlink: 'syz.4.2211': attribute type 1 has an invalid length. [ 252.354593][T13554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.912166][T13601] erspan0: entered promiscuous mode [ 252.969253][T13601] erspan0: entered allmulticast mode [ 253.854095][T13632] netlink: 'syz.0.2232': attribute type 10 has an invalid length. [ 254.012160][T13643] macsec1: entered promiscuous mode [ 254.056928][T13643] macsec1: entered allmulticast mode [ 254.261780][T13661] netlink: 'syz.1.2244': attribute type 3 has an invalid length. [ 254.302554][T13669] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 254.313471][T13669] netlink: 'syz.5.2246': attribute type 21 has an invalid length. [ 254.323804][T13669] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.367057][T13669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.374352][T13669] IPv6: NLM_F_CREATE should be set when creating new route [ 254.381653][T13669] IPv6: NLM_F_CREATE should be set when creating new route [ 254.388924][T13669] IPv6: NLM_F_CREATE should be set when creating new route [ 254.410401][T13677] tipc: Enabled bearer , priority 0 [ 254.422092][T13677] syzkaller0: entered promiscuous mode [ 254.427821][T13677] syzkaller0: entered allmulticast mode [ 254.512038][T13685] vlan2: entered promiscuous mode [ 254.530160][T13685] bridge0: entered promiscuous mode [ 254.559942][T13687] macvlan3: entered allmulticast mode [ 254.566316][T13687] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 254.593996][T13690] bond12: entered promiscuous mode [ 254.621448][T13694] netlink: 'syz.5.2252': attribute type 2 has an invalid length. [ 254.630098][T13690] bond12: entered allmulticast mode [ 254.635664][T13690] 8021q: adding VLAN 0 to HW filter on device bond12 [ 254.654611][T13677] tipc: Resetting bearer [ 254.693839][T13677] tipc: Disabling bearer [ 254.723727][T13692] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 254.833292][T13701] netlink: 'syz.3.2255': attribute type 11 has an invalid length. [ 254.869460][T13701] __nla_validate_parse: 13 callbacks suppressed [ 254.869482][T13701] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2255'. [ 254.899716][T13703] netlink: 'syz.5.2256': attribute type 11 has an invalid length. [ 254.920458][T13703] netlink: 'syz.5.2256': attribute type 11 has an invalid length. [ 254.941952][T13703] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2256'. [ 254.960870][T13708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 254.972893][T13708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 254.986746][T13708] gretap0: entered promiscuous mode [ 254.993596][T13708] gretap0: left promiscuous mode [ 255.003018][T13712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2259'. [ 255.059409][T13708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 255.075512][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2261'. [ 255.085018][T13720] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 255.112510][T13708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 255.165428][T13708] gretap0: entered promiscuous mode [ 255.181539][T13708] gretap0: left promiscuous mode [ 255.200178][T13724] netlink: 'syz.5.2264': attribute type 3 has an invalid length. [ 255.268636][T13708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 255.294439][T13708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2258'. [ 255.332911][T13708] gretap0: entered promiscuous mode [ 255.353903][T13708] gretap0: left promiscuous mode [ 255.374824][T13736] netlink: 'syz.5.2267': attribute type 10 has an invalid length. [ 255.557278][T13736] bond0: (slave wlan1): Opening slave failed [ 255.570329][T13708] gretap0: entered promiscuous mode [ 255.580331][T13708] gretap0: left promiscuous mode [ 255.745712][T13708] gretap0: entered promiscuous mode [ 255.761581][T13708] gretap0: left promiscuous mode [ 255.948695][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.957860][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.066735][T13776] netlink: 'syz.3.2280': attribute type 11 has an invalid length. [ 256.111696][T13776] netlink: 'syz.3.2280': attribute type 4 has an invalid length. [ 256.784044][T13809] IPv6: sit1: Disabled Multicast RS [ 256.830305][T13809] sit1: entered allmulticast mode [ 256.978200][T13822] netlink: 'syz.0.2295': attribute type 11 has an invalid length. [ 257.156058][T13835] netlink: 'syz.3.2301': attribute type 1 has an invalid length. [ 257.262584][T13839] team_slave_0: left promiscuous mode [ 257.289132][T13839] team_slave_0: entered allmulticast mode [ 257.517412][T13862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.980353][T13907] netlink: 'syz.0.2323': attribute type 1 has an invalid length. [ 258.035386][T13913] syzkaller0: entered promiscuous mode [ 258.043163][T13913] syzkaller0: entered allmulticast mode [ 258.051864][T13917] netlink: 'syz.5.2324': attribute type 4 has an invalid length. [ 258.081686][T13908] bond9: (slave gretap1): making interface the new active one [ 258.100854][T13908] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 258.663408][T13964] tipc: Started in network mode [ 258.673491][T13964] tipc: Node identity 4ec724d55668, cluster identity 4711 [ 258.711803][T13964] tipc: Enabled bearer , priority 0 [ 258.766718][T13975] syzkaller0: entered promiscuous mode [ 258.772235][T13975] syzkaller0: entered allmulticast mode [ 258.833932][T13981] netlink: 'syz.0.2348': attribute type 1 has an invalid length. [ 258.862799][T13964] tipc: Resetting bearer [ 258.924506][T13981] 8021q: adding VLAN 0 to HW filter on device bond10 [ 258.986299][T13963] tipc: Resetting bearer [ 259.016529][T13963] tipc: Disabling bearer [ 259.214877][T14006] netlink: 'syz.4.2354': attribute type 1 has an invalid length. [ 259.262137][T14006] 8021q: adding VLAN 0 to HW filter on device bond13 [ 259.271623][T14012] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 259.307555][T14006] 8021q: adding VLAN 0 to HW filter on device bond13 [ 259.315970][T14012] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 259.335893][T14006] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 259.348338][T14006] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 259.364132][T14020] tipc: Enabled bearer , priority 10 [ 259.379876][T14019] veth1: entered promiscuous mode [ 259.388237][T14019] bond13: (slave veth1): Enslaving as an active interface with a down link [ 259.400073][T14019] 8021q: adding VLAN 0 to HW filter on device bond13 [ 259.937290][T14068] __nla_validate_parse: 29 callbacks suppressed [ 259.937313][T14068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2377'. [ 259.973174][T14068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2377'. [ 259.987787][T14068] gretap0: entered promiscuous mode [ 259.994990][T14068] gretap0: left promiscuous mode [ 260.007110][T14072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2379'. [ 260.019315][T14073] netlink: 'syz.3.2378': attribute type 8 has an invalid length. [ 260.318462][T14096] netlink: 'syz.1.2384': attribute type 5 has an invalid length. [ 260.426633][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 260.461707][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2384'. [ 260.476694][ T5987] tipc: Node number set to 3478400520 [ 260.529760][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 260.623762][T14113] openvswitch: netlink: Message has -1 unknown bytes. [ 260.830294][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2392'. [ 260.841192][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2392'. [ 261.011759][T14143] batman_adv: batadv0: Removing interface: team0 [ 261.038496][T14143] team0 (unregistering): Port device team_slave_0 removed [ 261.057525][T14143] team0 (unregistering): Port device team_slave_1 removed [ 261.073950][T14147] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 261.093129][T14147] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2398'. [ 261.103100][T14147] tipc: Invalid UDP bearer configuration [ 261.103144][T14147] tipc: Enabling of bearer rejected, failed to enable media [ 261.207420][T14151] netlink: 'syz.5.2399': attribute type 6 has an invalid length. [ 261.259610][T14154] netlink: 'syz.0.2401': attribute type 1 has an invalid length. [ 261.281811][T14157] netlink: 'syz.1.2402': attribute type 6 has an invalid length. [ 261.306642][ T5181] Bluetooth: hci5: command 0x0405 tx timeout [ 261.341245][T14163] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.2404'. [ 261.424713][T14154] veth11: entered promiscuous mode [ 261.452422][T14154] bond11: (slave veth11): Enslaving as a backup interface with a down link [ 261.652788][T14188] netlink: 'syz.1.2411': attribute type 23 has an invalid length. [ 261.839706][T14196] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2414'. [ 261.896278][T14208] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.929604][T14210] netlink: 'syz.4.2418': attribute type 4 has an invalid length. [ 262.004895][T14210] `: renamed from bond0 (while UP) [ 262.036727][T14210] bond_slave_0: left promiscuous mode [ 262.051114][T14210] bond_slave_1: left promiscuous mode [ 262.059333][T14210] batadv0: left promiscuous mode [ 262.064465][T14210] team_slave_0: left promiscuous mode [ 262.069971][T14210] team_slave_1: left promiscuous mode [ 262.075404][T14210] geneve0: left promiscuous mode [ 262.090860][T14217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.161196][T14217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.305167][T14233] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 262.380079][T14237] delete_channel: no stack [ 262.882371][T14284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.163186][T14308] vxcan0: entered promiscuous mode [ 263.220718][T14316] netlink: 'syz.3.2446': attribute type 16 has an invalid length. [ 263.331761][T14321] tipc: Enabled bearer , priority 0 [ 263.340664][T14321] syzkaller0: entered promiscuous mode [ 263.346191][T14321] syzkaller0: entered allmulticast mode [ 263.412241][T14321] tipc: Resetting bearer [ 263.433458][T14320] tipc: Resetting bearer [ 263.450160][T14320] tipc: Disabling bearer [ 263.536760][T14337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.604857][T14337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.639597][T14337] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 263.665816][T14337] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 263.686511][T14342] tipc: Enabling of bearer rejected, failed to enable media [ 263.711640][T14340] netlink: 'syz.5.2453': attribute type 1 has an invalid length. [ 263.835479][T14364] pimreg: left allmulticast mode [ 264.014094][T14375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.402994][ T8828] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.471236][ T8828] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.520674][ T8828] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.600348][ T8828] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.721269][ T8828] bridge_slave_1: left allmulticast mode [ 264.730656][ T8828] bridge_slave_1: left promiscuous mode [ 264.736437][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.744878][ T8828] bridge_slave_0: left allmulticast mode [ 264.751439][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.812976][ T8828] bond9 (unregistering): (slave gretap1): Releasing active interface [ 264.998026][T14389] __nla_validate_parse: 14 callbacks suppressed [ 264.998047][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2468'. [ 265.026988][T14389] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 265.052931][T14389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.159573][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2471'. [ 265.258263][ T5181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 265.265588][ T5181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 265.273271][ T5181] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.284287][ T5181] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.292259][ T5181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.361180][ T8828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.372929][ T8828] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 265.385043][ T8828] batadv0: left promiscuous mode [ 265.393195][ T8828] bond0 (unregistering): Released all slaves [ 265.403843][ T8828] bond1 (unregistering): Released all slaves [ 265.416222][ T8828] bond2 (unregistering): (slave veth3): Releasing active interface [ 265.425379][ T8828] bond2 (unregistering): (slave veth5): Releasing active interface [ 265.433960][ T8828] bond2 (unregistering): Released all slaves [ 265.445577][ T8828] bond3 (unregistering): Released all slaves [ 265.457577][ T8828] bond4 (unregistering): Released all slaves [ 265.469527][ T8828] bond5 (unregistering): Released all slaves [ 265.481488][ T8828] bond6 (unregistering): Released all slaves [ 265.498127][ T8828] bond7 (unregistering): Released all slaves [ 265.512698][ T8828] bond8 (unregistering): Released all slaves [ 265.525540][ T8828] bond9 (unregistering): Released all slaves [ 265.537220][ T8828] bond10 (unregistering): Released all slaves [ 265.549505][ T8828] bond11 (unregistering): (slave veth11): Releasing backup interface [ 265.558945][ T8828] bond11 (unregistering): Released all slaves [ 265.726145][ T8828] tipc: Disabling bearer [ 265.739530][ T8828] tipc: Left network mode [ 265.767759][T14418] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2474'. [ 265.946566][ T5856] Bluetooth: hci5: command 0x0405 tx timeout [ 266.215157][ T8828] batman_adv: batadv0: Removing interface: wlan1 [ 266.318979][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2480'. [ 266.489600][T14454] netlink: zone id is out of range [ 266.517097][T14454] netlink: zone id is out of range [ 266.532217][T14454] netlink: zone id is out of range [ 266.564760][T14454] netlink: zone id is out of range [ 266.579301][T14461] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 266.588376][T14454] netlink: zone id is out of range [ 266.593597][T14454] netlink: zone id is out of range [ 266.754978][T14468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2486'. [ 266.981635][ T8828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.991790][ T8828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.011150][ T8828] batman_adv: batadv0: Removing interface: dummy0 [ 267.026344][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2493'. [ 267.252532][T14409] chnl_net:caif_netlink_parms(): no params data found [ 267.314494][ T5856] Bluetooth: hci0: command tx timeout [ 267.414174][T14512] netlink: 'syz.3.2494': attribute type 16 has an invalid length. [ 267.439792][T14512] netlink: 'syz.3.2494': attribute type 17 has an invalid length. [ 267.623137][T14512] erspan0: left promiscuous mode [ 267.641242][T14512] erspan0: left allmulticast mode [ 267.645226][T14517] Bluetooth: MGMT ver 1.23 [ 267.669347][T14512] bridge0: port 3(syz_tun) entered blocking state [ 267.675925][T14512] bridge0: port 3(syz_tun) entered forwarding state [ 267.684864][T14512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.695598][T14512] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.838663][T14409] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.845816][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.894169][T14409] bridge_slave_0: entered allmulticast mode [ 267.912498][T14409] bridge_slave_0: entered promiscuous mode [ 267.943442][T14409] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.957262][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.974686][T14409] bridge_slave_1: entered allmulticast mode [ 267.981941][T14409] bridge_slave_1: entered promiscuous mode [ 268.061591][T14409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.089218][T14409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.363062][T14409] team0: Port device team_slave_0 added [ 268.379179][T14409] team0: Port device team_slave_1 added [ 268.400339][ T8828] IPVS: stop unused estimator thread 0... [ 268.451345][T14409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.477181][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.545360][T14409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.564939][T14409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.576358][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.607863][T14409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.696051][T14409] hsr_slave_0: entered promiscuous mode [ 268.717952][T14409] hsr_slave_1: entered promiscuous mode [ 268.724903][T14563] wg1: entered promiscuous mode [ 268.733018][T14563] wg1: entered allmulticast mode [ 268.981920][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2515'. [ 269.123371][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2515'. [ 269.337049][T14409] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 269.389666][ T5856] Bluetooth: hci0: command tx timeout [ 269.396037][T14409] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 269.415017][T14409] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 269.429681][T14409] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.435638][T14613] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 269.449444][T14608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2523'. [ 269.564468][T14409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.582885][T14634] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2525'. [ 269.619132][T14409] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.646995][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.654185][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.701365][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.708544][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.939632][T14652] netlink: 'syz.4.2532': attribute type 1 has an invalid length. [ 270.021917][T14409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.207270][T14674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2535'. [ 270.304834][T14409] veth0_vlan: entered promiscuous mode [ 270.316045][T14409] veth1_vlan: entered promiscuous mode [ 270.342209][T14409] veth0_macvtap: entered promiscuous mode [ 270.350977][T14409] veth1_macvtap: entered promiscuous mode [ 270.364924][T14409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.379771][T14409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.392708][ T8828] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.401983][ T8828] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.414960][ T8828] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.424848][ T8828] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.871497][ T8830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.884578][ T8830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.922809][T14683] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2539'. [ 270.972344][ T8828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.982149][ T8828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.147654][T14695] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2543'. [ 271.255250][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2546'. [ 271.386111][T14716] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2549'. [ 271.467227][ T5856] Bluetooth: hci0: command tx timeout [ 271.720224][T14737] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2555'. [ 271.851227][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2556'. [ 271.867619][T14749] tipc: Enabling of bearer rejected, failed to enable media [ 271.877046][T14750] tipc: Enabling of bearer rejected, failed to enable media [ 272.021447][ T30] audit: type=1804 audit(1755997269.012:7): pid=14758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2560" name="/newroot/534/cgroup.controllers" dev="tmpfs" ino=2735 res=1 errno=0 [ 272.130654][ T30] audit: type=1800 audit(1755997269.012:8): pid=14758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2560" name="cgroup.controllers" dev="tmpfs" ino=2735 res=0 errno=0 [ 272.368428][T14782] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 272.482958][T14794] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 272.540716][T14794] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 272.569987][T14799] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2569'. [ 273.079104][T14839] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2586'. [ 273.147434][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2585'. [ 273.458082][T14869] net_ratelimit: 29 callbacks suppressed [ 273.458103][T14869] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 273.472995][T14869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.556701][ T5856] Bluetooth: hci0: command tx timeout [ 274.530306][T14914] netlink: 'syz.5.2609': attribute type 1 has an invalid length. [ 274.538895][T14914] netlink: 'syz.5.2609': attribute type 1 has an invalid length. [ 274.603696][T14917] netlink: 'syz.3.2610': attribute type 7 has an invalid length. [ 275.035006][T14949] netlink: 'syz.6.2621': attribute type 7 has an invalid length. [ 275.046192][T14949] netlink: 'syz.6.2621': attribute type 8 has an invalid length. [ 275.194540][T14960] netlink: 'syz.6.2625': attribute type 11 has an invalid length. [ 275.213721][T14965] netlink: 'syz.6.2625': attribute type 11 has an invalid length. [ 275.231056][T14898] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.351789][T14974] vlan2: entered promiscuous mode [ 275.357382][T14974] bridge0: entered promiscuous mode [ 275.489262][T14997] __nla_validate_parse: 11 callbacks suppressed [ 275.489285][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2629'. [ 275.898760][T15026] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 275.907419][T15026] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 276.128113][T15044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.155186][T15047] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2643'. [ 276.205858][T15050] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 276.375056][T15058] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2647'. [ 276.402763][T15062] sctp: [Deprecated]: syz.3.2648 (pid 15062) Use of int in max_burst socket option. [ 276.402763][T15062] Use struct sctp_assoc_value instead [ 276.424440][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 276.443043][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.524854][T15070] vlan2: entered allmulticast mode [ 276.533448][T15070] bond0: entered allmulticast mode [ 276.538780][T15070] team0: entered allmulticast mode [ 276.550536][T15075] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2651'. [ 276.551003][T15070] geneve0: entered allmulticast mode [ 276.618130][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2654'. [ 276.629663][T15072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2652'. [ 276.640406][T15078] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2653'. [ 276.661084][ T5231] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 276.672494][T15078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.673005][ T5231] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 276.697663][ T5231] CPU: 0 UID: 0 PID: 5231 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 276.706536][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.716626][ T5231] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 276.722483][ T5231] Code: 01 48 c7 c7 00 4b 98 8b be 4b 03 00 00 48 c7 c2 40 4b 98 8b e8 24 bf 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 e4 4d f7 ff 49 8b 07 a8 03 75 62 [ 276.742121][ T5231] RSP: 0018:ffffc90003637810 EFLAGS: 00010006 [ 276.748205][ T5231] RAX: 000000001fffe000 RBX: ffffffff822bc619 RCX: 703c2640717d1800 [ 276.756185][ T5231] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620 [ 276.764168][ T5231] RBP: 0000000000000078 R08: 0000000000000000 R09: 0000000000000000 [ 276.772149][ T5231] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: dffffc0000000000 [ 276.780139][ T5231] R13: ffff8880b863b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 276.788113][ T5231] FS: 00007f1317c03880(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 276.797048][ T5231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.803637][ T5231] CR2: 00007f598bdaff98 CR3: 000000007be9e000 CR4: 00000000003526f0 [ 276.811615][ T5231] Call Trace: [ 276.814900][ T5231] [ 276.817840][ T5231] refill_obj_stock+0x254/0x850 [ 276.822709][ T5231] ? refill_obj_stock+0x116/0x850 [ 276.827744][ T5231] __memcg_slab_free_hook+0x127/0x3d0 [ 276.833136][ T5231] ? __dequeue_signal+0x487/0x5b0 [ 276.838175][ T5231] kmem_cache_free+0x223/0x400 [ 276.842957][ T5231] __dequeue_signal+0x487/0x5b0 [ 276.847833][ T5231] dequeue_signal+0x1a2/0x370 [ 276.852547][ T5231] signalfd_read_iter+0x2b7/0x980 [ 276.857775][ T5231] ? __pfx_signalfd_read_iter+0x10/0x10 [ 276.863342][ T5231] ? __pfx_ep_try_send_events+0x10/0x10 [ 276.868904][ T5231] ? __x64_sys_unlink+0x47/0x50 [ 276.873867][ T5231] ? __pfx_default_wake_function+0x10/0x10 [ 276.879692][ T5231] ? common_file_perm+0x1b5/0x230 [ 276.884735][ T5231] ? bpf_lsm_file_permission+0x9/0x20 [ 276.890117][ T5231] ? security_file_permission+0x75/0x290 [ 276.895790][ T5231] vfs_read+0x557/0xa30 [ 276.899970][ T5231] ? __pfx_vfs_read+0x10/0x10 [ 276.904666][ T5231] ksys_read+0x145/0x250 [ 276.908926][ T5231] ? __pfx_ksys_read+0x10/0x10 [ 276.913722][ T5231] ? rcu_is_watching+0x15/0xb0 [ 276.918507][ T5231] do_syscall_64+0xfa/0x3b0 [ 276.923295][ T5231] ? rcu_is_watching+0x15/0xb0 [ 276.928069][ T5231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.934145][ T5231] ? clear_bhb_loop+0x60/0xb0 [ 276.938834][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.944734][ T5231] RIP: 0033:0x7f13174a7407 [ 276.949158][ T5231] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 276.968767][ T5231] RSP: 002b:00007ffee8fa3f30 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 276.977214][ T5231] RAX: ffffffffffffffda RBX: 00007f1317c03880 RCX: 00007f13174a7407 [ 276.985194][ T5231] RDX: 0000000000000080 RSI: 00007ffee8fa4170 RDI: 0000000000000008 [ 276.993259][ T5231] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.001242][ T5231] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 277.009221][ T5231] R13: 0000561fd6e47100 R14: 0000000000000001 R15: 0000000000000000 [ 277.017209][ T5231] [ 277.020232][ T5231] Modules linked in: [ 277.024145][ T5231] ---[ end trace 0000000000000000 ]--- [ 277.029616][ T5231] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 277.035525][ T5231] Code: 01 48 c7 c7 00 4b 98 8b be 4b 03 00 00 48 c7 c2 40 4b 98 8b e8 24 bf 71 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 e4 4d f7 ff 49 8b 07 a8 03 75 62 [ 277.055230][ T5231] RSP: 0018:ffffc90003637810 EFLAGS: 00010006 [ 277.061310][ T5231] RAX: 000000001fffe000 RBX: ffffffff822bc619 RCX: 703c2640717d1800 [ 277.069297][ T5231] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffffffff8be33620 [ 277.077289][ T5231] RBP: 0000000000000078 R08: 0000000000000000 R09: 0000000000000000 [ 277.085271][ T5231] R10: dffffc0000000000 R11: fffffbfff1f47087 R12: dffffc0000000000 [ 277.093260][ T5231] R13: ffff8880b863b540 R14: 0000000000000001 R15: 00000000ffff0000 [ 277.101253][ T5231] FS: 00007f1317c03880(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 277.110205][ T5231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.116790][ T5231] CR2: 00007f598bdaff98 CR3: 000000007be9e000 CR4: 00000000003526f0 [ 277.124861][ T5231] Kernel panic - not syncing: Fatal exception [ 277.131333][ T5231] Kernel Offset: disabled [ 277.135660][ T5231] Rebooting in 86400 seconds..