last executing test programs: 12m46.693602473s ago: executing program 4 (id=1823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500001b0b0000004000", @ANYRES32, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1, 0x0, r0, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000167d28000000000000000000950000000094adebe6fe3299452399a0f9f7405a19cf9a0b9f30dd69250f3aa47b5a06d276ec096a20f0463fedd3d774cb75d5490d6fbb6bcb017821a61a7973fa7bf634c07013bb4457b9ecea7cac654180b2bb70db17106145b4d71783f8f1b331bc038a18f433746a3518eb95125539abe0ae6cd0daa2202b5c024e9ba266757930675be115b8ff0f330815dc"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x5}]}]}, 0x23c}}, 0x0) sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e000001"], 0x114}], 0x1}, 0x40000) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r10, 0x1, 0x70bd30, 0x35dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0xbe, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x98ae}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000891}, 0xd1) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x0, 0x46, 0xb}}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r9, 0x10, 0x20, 0x0, 0xa41, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x13, 0x39, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}}}) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000007c0), 0x10) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12m46.181203324s ago: executing program 4 (id=1828): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="151e3060150bdac62680e7991609a6d58529e7ee9fe5f775aa58dadfed66986b5415329b57fcaa7425f56053c82d7f14ac81bd9b98a2cd7eb01d73ce30a02abf3abc1b7f000000000000000000000000000000005e3572adeac3a139f7cbc1b6f8910bd8ffa0004a9eee8fed4d061575198417a15444ffe375c56b304b20074735f9f8d12e442d47be3f5ca131e697ce5e7235ec55bf47df48", @ANYRES64=0x0], 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0x24, 0x0, 0xc, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0x24, 0x0, 0xc, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) 12m45.099382135s ago: executing program 4 (id=1840): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r1}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004) (async) shutdown(r6, 0x2) (async) recvmmsg(r6, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/175, 0xaf}], 0x1}, 0x9}], 0x1, 0x0, 0x0) (async) poll(&(0x7f0000000000)=[{r1, 0x1084}, {r1, 0x6}, {r4, 0x400}], 0x3, 0x3) 12m43.175210623s ago: executing program 4 (id=1854): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'D\x00', 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0xff6f, {[@generic={0x2, 0x2}, @md5sig={0x13, 0x12, "a4d40e239c6e5d57f8d88441b8183a4a"}]}}}}}}}}, 0x0) (async) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYRES8=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x94) (async) r2 = socket(0x1, 0x803, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000002c0)={r6, 0x9}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000480)={r6, 0x9, 0x56, "7e6da1fada3d67519a8c818c3e3be5a1f21062849643b27c7bd6abcf95230e26cb01306dff3bbaa947da280fe5f2040fd75480a0817baf01372a4400f82a143925fbdcdb7db6406fe7a61e409c0ae13f0bdb9871550c"}, 0x5e) (async) r7 = socket(0x10, 0x803, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x270, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x33, 0x3, "cbb31dc727e61844514677b27c950cd020d65a97999269a815c87b65b0364c58887c91d1cf8b9524088982684a466d"}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7567}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe124}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0x174, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @local, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x62, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x60010}, 0x20000000) 12m42.951654443s ago: executing program 4 (id=1856): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "9e10ca1c4bcb8d812a86f1aef52eba19719c78cfd7222b2639b90f7dc70f33eb", "9d51b95305302c62a6ebc6ceb3e740422abd24b41495e53e3b1cb422546c9a92", "5d766a42e23ee91a725598ba37e50e2670e5fd9cadaeccbd745b4a7c97d40b8f", "6a23d7463882fd0380ae3da81fc699f43ab8831af454930135ade949498e962c", "1519fc8065d640d2a08689c86d56f35fef67a66df1abfc781c3cf937784bcb5f", "d1e70cd786c3ea83209fec3b", 0x9, 0x6, 0x4, 0x2708}}) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) 12m42.703639134s ago: executing program 4 (id=1860): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x5c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r6, 0x3cd30000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB="7602f49cac78e7d4dba30ee1e997d387fbd726e9dccaf705402000000074"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, 0x0, 0x0) syz_emit_ethernet(0xd82, &(0x7f0000000b80)={@local, @random="4a26292432ca", @void, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0x3, 0x6, "e58d21", 0xd4c, 0x2f, 0x1, @empty, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "0e1f8eb7c4ef6c7df6e69319cc29829183ad8d8d5cdd88438dc51b9d9c4c4cce09a074de1b58e92679671a6df8d1560ebd7b72cad80aab1a8a883fae4e0c89a487a6feb8c3fcc045e13c639eb87cb86a3ffadd70868f5f377000f53e7d809bf51af7ab41ca0de2c57c85db"}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0xff, 0x3, 0x1, 0x3, 0x5, 0x94}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x2, {{0x7, 0x2, 0xf9, 0x1, 0x0, 0x1, 0x2, 0xfc}, 0x2, {0x7fffffff, 0x101, 0x3, 0x0, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x4, "7a9a911dfec7578006877a3e902782e9cbb8ececd473b1ff78059325ce319a037014af440c0c0fa227a26d18071d068ee210fe5fc90ee3de6e5b0497dd0b90e3fff242556c290f5d4bced4b4be59232a90d85e01e3b759f721cd7e67f06a4d2b80b2a7ddf47b3c5518fe3e819a6d5004ea25edad9f216c896ec2d2f09298b1e0be9ca84b1d3f3c43eb4b567c277e55889160b8a9839d5ef4da58c90daa804e862087bbcb94d29851b6ed38d18d1073ff1c09ec81a132fe45586d210757230f0a2254140b4cfbe65820fd2aef41ecb49acc7690b5db1f5e5a7fd36979396a1575537fb532628089aa"}}}}}}}}, 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000380)={0x31, "23fe2883c00d2dbc39479e7723bb842ebef7e199a28b2a4832a5c53291db79bdfda7ec4602c485c424d2c06b8d72990dc60bbfe8e67cfb3d0cde0eacefb773e8bf2aa231861c4261f65c78e28828b45c09cfbdf666c7bb0a148d705f505fbb3c5d5d716f829ce938a09c1ca79d0a82b338a6496b3e7912bbe4a632713aff8b62"}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) 12m42.351754004s ago: executing program 32 (id=1860): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x98, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x5c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r6, 0x3cd30000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB="7602f49cac78e7d4dba30ee1e997d387fbd726e9dccaf705402000000074"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, 0x0, 0x0) syz_emit_ethernet(0xd82, &(0x7f0000000b80)={@local, @random="4a26292432ca", @void, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0x3, 0x6, "e58d21", 0xd4c, 0x2f, 0x1, @empty, @loopback, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "0e1f8eb7c4ef6c7df6e69319cc29829183ad8d8d5cdd88438dc51b9d9c4c4cce09a074de1b58e92679671a6df8d1560ebd7b72cad80aab1a8a883fae4e0c89a487a6feb8c3fcc045e13c639eb87cb86a3ffadd70868f5f377000f53e7d809bf51af7ab41ca0de2c57c85db"}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0xff, 0x3, 0x1, 0x3, 0x5, 0x94}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x2, {{0x7, 0x2, 0xf9, 0x1, 0x0, 0x1, 0x2, 0xfc}, 0x2, {0x7fffffff, 0x101, 0x3, 0x0, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x4, "7a9a911dfec7578006877a3e902782e9cbb8ececd473b1ff78059325ce319a037014af440c0c0fa227a26d18071d068ee210fe5fc90ee3de6e5b0497dd0b90e3fff242556c290f5d4bced4b4be59232a90d85e01e3b759f721cd7e67f06a4d2b80b2a7ddf47b3c5518fe3e819a6d5004ea25edad9f216c896ec2d2f09298b1e0be9ca84b1d3f3c43eb4b567c277e55889160b8a9839d5ef4da58c90daa804e862087bbcb94d29851b6ed38d18d1073ff1c09ec81a132fe45586d210757230f0a2254140b4cfbe65820fd2aef41ecb49acc7690b5db1f5e5a7fd36979396a1575537fb532628089aa"}}}}}}}}, 0x0) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000380)={0x31, "23fe2883c00d2dbc39479e7723bb842ebef7e199a28b2a4832a5c53291db79bdfda7ec4602c485c424d2c06b8d72990dc60bbfe8e67cfb3d0cde0eacefb773e8bf2aa231861c4261f65c78e28828b45c09cfbdf666c7bb0a148d705f505fbb3c5d5d716f829ce938a09c1ca79d0a82b338a6496b3e7912bbe4a632713aff8b62"}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) 3.779771294s ago: executing program 0 (id=7214): socket$packet(0x11, 0x3, 0x300) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x4000200) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, 0x80}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x40800) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001780)={r6, 0x0, 0x0}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)}, 0x10) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)={0x11c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x108, 0x11, 0x0, 0x1, [@nested={0x101, 0xcf, 0x0, 0x1, [@generic="e32cc4fbd478b585fc62a92925eb81095df4821c3344fb4ccca51f942f2f62edd3d92e983e841d6e53068187237f5e91a707000000ee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632"]}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300) 2.825277314s ago: executing program 0 (id=7224): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000380)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000003c0)={'tunl0\x00', r1, 0x80, 0x7, 0xf, 0x200, {{0x10, 0x4, 0x3, 0x9, 0x40, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0x17, 0x49, [@dev={0xac, 0x14, 0x14, 0x3e}, @local, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @remote]}, @rr={0x7, 0x13, 0x8c, [@multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x13}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newtaction={0x18, 0x30, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000008d5222f4b1b78986da9b5c79bcb17c6bbfc8ff021199aaec4ab69668eba191336f79cb6ac03b47613ee2f7fd3538dbfa8c8e05143835cd6d18f3205c9598faf350f1586fd8fb560ea1c83900e92ca5416a76f350f40bbfdce3ff13099f455aa2ded2eea3438396f10444e9624caf7dddb67872a0870517118f79578244445126f259f29f5709dd358cc6a0c7bd19bc415d37ebe869349f5977989661b1538fd867321ce0f1ddb51964f3eca4", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf250500000008002c0093000000050030000100000008000b000001000108002c00100000000600280001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)="1a762626b48b3267e216392e", 0xc}], 0x1}, 0x8840) socket$netlink(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000b00)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x3}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) socket(0x11, 0xa, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0xfce) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="b80000001500e999"], 0xb8}}, 0x0) socket$unix(0x1, 0x1, 0x0) close(r2) socket$kcm(0x11, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r7) 2.482919337s ago: executing program 0 (id=7231): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x418402, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x2a21104) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="002100000000000000005874f72cf86d73d32f46380f", 0x16}], 0x1, 0x7, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x7800, 0xf895, 0xffffffff, 0x200, {{0x21, 0x4, 0x0, 0x12, 0x84, 0x800, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2c}, {[@timestamp_prespec={0x44, 0x14, 0x7, 0x3, 0x5, [{@private=0xa010101, 0x40}, {@broadcast, 0x9}]}, @timestamp_addr={0x44, 0x4, 0xd4, 0x1, 0x5}, @cipso={0x86, 0x17, 0x1}, @lsrr={0x83, 0x16, 0xf3, [@rand_addr=0x64010101, @multicast2, @loopback, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}]}, @timestamp={0x44, 0x0, 0xbd, 0x0, 0x6, [0x7f, 0x7, 0x7, 0x1, 0x2]}, @ssrr={0x89, 0x7, 0xda, [@dev={0xac, 0x14, 0x14, 0x2c}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100004c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getqdisc={0x24, 0x26, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff3}, {0xc, 0xffff}, {0xffe0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040815}, 0x800) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x2a, &(0x7f0000000200)}, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000e00)=0x14, 0x4) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000000c0)=0x8, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000000)={0x3, 'ip6tnl0\x00', {0x5}, 0x9}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'wg0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x9) 2.310272236s ago: executing program 5 (id=7235): getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x9}, &(0x7f0000000140)=0x18) unshare(0x22020600) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) shutdown(r3, 0x0) (async) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r0, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x4, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x8880}, 0x4000000) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000d15ea019c65db399e53aa6d064693a495c98d4541de5748efd7286e2b5000000000095000900"/63], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, 0x0, &(0x7f00000003c0)=""/89, 0x4}, 0x20) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010030bd7000fddbdf251f0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) 2.124814079s ago: executing program 5 (id=7240): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x870bd28, 0x1, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfe, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x1}}]}, 0x70}, 0x1, 0x7}, 0x8810) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x1903d}}], 0x48}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@delsa={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {@in6=@local, 0x4d4, 0x2, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0xc000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000100), &(0x7f0000000280)=""/115}, 0x20) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @multicast1, 0xf}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x44}, @broadcast, 0xffffffff, 0xffffff00, 0xa, 0x5, {@mac=@multicast, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0xd33, 0x0, 0x7, 0x1b8, 0x2, 0x1, 'pim6reg0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x0, 0x48}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x7}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r3 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c, 0x0) sendmsg$inet6(r3, &(0x7f00000018c0)={&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @empty, 0x1}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000780)="87757c158fa7281df85bc80624e54d7e292d93a09a2fa075e29f50e2bc3c27a8e4bfe69e1c7650f2e5d80e8c4cb903d1cb5653ea4df0b48b68674930a764b9800e36e416410aabf28e2c77537d6bb904220a523b3268357d68c28418e2c923fca23c25462dc9f9b7aedf4c63dfbf54c2a0dcbf913dbbf40bf7dc4bd7e252b1c9d9f65737a4944f1a159188c9c6596ff14eba7305408bac1a131cd8dd6334200b18aa547a1a0c5474fcd40be941d018d50f15237886f61d93f0676230f3c96d8d6a69ba20bc30deb09fd4374f4b88321c3d956a0448db0287604bcf15388a86f9a46718eeaeb50ea66aeb9156b7dee54700b560d9fca5882c", 0xf8}, {&(0x7f0000000880)="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", 0x1000}], 0x2}, 0x4000010) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x1e, 0x0, @loopback}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1}, 0x48) 1.928724846s ago: executing program 5 (id=7245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r1, 0x1, 0x3, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048002}, 0x90) 1.875010168s ago: executing program 3 (id=7246): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a1600000000006d7889d505901767d229ea000000000002001000000000020000000000000000030005585b1633eb91afc9ddead70002000000ac141400000000b7a624ebf82018488c87b8"], 0x50}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x31, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) socket(0x8000000010, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x34, r7, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, 0x0, 0xff00) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x3}]}, {0x0, [0x0, 0x51]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) 1.851785755s ago: executing program 1 (id=7248): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000000)=ANY=[@ANYBLOB="1a0000001900010000000000eeffffff1c"], 0x2c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) 1.79770723s ago: executing program 1 (id=7249): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000045, [0x7, 0x89ff]}}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r0, 0x8000000000000001, 0x88be, 0x5e1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0xfffffff7, '\x00', 0x0, r1, 0x2, 0x4, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, 0x0, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.723378211s ago: executing program 5 (id=7250): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) accept4(r2, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0x20000000002) write$cgroup_int(r4, &(0x7f0000000040)=0x8, 0x12) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) sendto$packet(r5, &(0x7f00000002c0), 0x0, 0x801, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.55239096s ago: executing program 0 (id=7252): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x7ff, 0xffff, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="a15013a8a389f7b8ebb2f8b98016ec133a5d9551274958dfaab89671a981eedc44f8d86c55309bf143c7db13f120c10cd33972fdfbd1b6aef0fab9f60369e7afabadba6052f76e596fbdf76af8ad305308ab69a45be1f7451fe1580be20e8940e2ac5b50bc4eb1f2c20cdd632c50d393eeb4db8f53df5c504eb6fe305f01e6421c0976e939c397090c10c6e95a255909b8cc1129eccfcbc85a"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="40010421f9252ea3"], 0x8) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r12, 0x0, 0xd}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff2059249b379086dd600001000064110000000000000000000000000000000000ff020000000000000000000000000001fffe0e220064907802000000000000000200000075462d59cf0d72118137e1d8c01d46070000000061ffff5e0c0d2ac0636f23a1cb85bf05267ec510575a1cdf03bc75bb00850d58622eee203833d9c122aabe7075f0"], 0x0) 1.435457596s ago: executing program 2 (id=7253): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000140000008500000083d581953f7930d95500000055090100240000009500000000000000bf91000000000000b70200d4000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.215771456s ago: executing program 2 (id=7254): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080010000000b60a0100000000000f000000000000001801000020756c2500000000002020207b9af8ff000000002d9100000000000037010000f8ffffffb702000008000000b70300000400000015000000060000003f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 958.230939ms ago: executing program 2 (id=7255): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4100001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x3b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40480d0}, 0x44) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x5}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 811.646965ms ago: executing program 3 (id=7256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@null, @rose, @default, @default, @rose, @bcast, @null, @rose]}, &(0x7f00000000c0)=0x48, 0x800) recvfrom$netrom(r1, &(0x7f00000001c0)=""/177, 0xb1, 0x1, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000300)=0xe, 0x800) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000340)={0x7, 0x8, 0x1, 0x0, 0x0, [{{r0}, 0x6}]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xf}}, 0x14}}, 0x4000000) 811.210667ms ago: executing program 1 (id=7257): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000008c0)="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", 0x150, 0x4001, 0x0, 0xfe01) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x6, 0x2) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc0000000000000000080001000000000008000100ffffffff08000400", @ANYRES32=0x0, @ANYBLOB="08001f00", @ANYRES32=0x0, @ANYBLOB="08000f"], 0x44}}, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x400, 0x10}, 0xc) pipe(&(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000c6ffffff030000000800000040420400", @ANYRES32=r7, @ANYBLOB="6617000000000000000000000000000000000000b7b0eec6739059c07e3bda1effe82a27b6c3fc2d59f7bb35a2d9e7e1dc34fa1c67ef1eb1277e6cbc7b4a90d75eaa2121dd8780c8faaa2dc6afe1b2a802965b1cf159", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000004000000040000000800"/28], 0x50) 657.272577ms ago: executing program 3 (id=7258): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x27) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25fe88000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200400000000000000000000000ffffac1414bb00000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000005000000000000004305000000000000070000124b8f0000000000ffffffffffffff7f0000000000000000000000000000000000000000ffffffff000000002cbd70000035000002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000100000000000000000000001c00000000ed181139000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a1c00040000004e244e240000fe8000000000000000000000a2df9f11eb6cc16773fcb42cf8424fc24db709796cfd53db017db939c685dbc1df741bf634a5e2cc2ec896cd887b8d9d7ba4a7a9feff84649ecd7e5eeaca39d5341a"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 594.240929ms ago: executing program 5 (id=7259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0xfb, 0x53, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2={0xff, 0x5}, 0x700, 0x700, 0x7d, 0x3ff}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x94, 0x2a, 0x400, 0x70bd28, 0x25dfdbfc, {0x3}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}, @nested={0x5d, 0x141, 0x0, 0x1, [@generic="06ea4b88973b32076ade75eb50177f7fbfd76cfb5473259ad69436170f55ac28ab2b79e0011cdd96368545894c162701875263dcf846e529a25bfde117b8ebcf9e36dcddf025414928", @nested={0x4, 0xee}, @typed={0xc, 0xde, 0x0, 0x0, @u64=0x1}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@loopback}, @typed={0x4, 0x10a}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query, @alu={0x7, 0x1, 0xb, 0x8, 0xf, 0xfffffffffffffff0, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x9a, &(0x7f00000003c0)=""/154, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x1, 0x1], &(0x7f0000000480)=[{0x4, 0x2, 0xb, 0x2}, {0x3, 0x1, 0xd, 0xc}, {0x1, 0x1, 0x0, 0xc}, {0x0, 0x4, 0xc, 0x8}, {0x4, 0x2, 0xc, 0xc}, {0x2, 0x2, 0x10, 0xb}, {0x1, 0x5, 0x3, 0x5}, {0x2, 0x1, 0xa, 0xa}], 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x74, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010100}]}}}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}]}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) 495.214367ms ago: executing program 2 (id=7260): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async) r2 = socket(0x2, 0x400000000002, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB=',0i'], 0x8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r7, 0xfffff000) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async) accept4(r8, 0x0, 0x0, 0x0) (async) unshare(0x24020400) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="140000000400000008000000224e2e1f0600000000000000e1b0a0a5137fd21c16212d11b0983678cfa0d32f4c428e0000000098ec878286d07239af18df1038fa611add43a6ce72d9e176e54628d5ad632ba150db55476973144ffe7b2ec2dc25363a4d54aed7da17b12dc4c3e05964d088508405f8c9ce989be33dd56a3c9aa0e31dcabd9016c6166221da916069454c1b9a7fbe0b0fea80b77fbdcb926d86739e10c513349550ec002c1c7b9dd8555cbdf176c284ddbb2acc58ebdca4a303615b5bd0a06cfcd16af2f9cd0a19d4259d44e557af2e460a8e3f8cb2fe07d19a5943ed75c9b02873acb75594d701fdc889ab90856e44070a861e780344daac3f0baee56bf7404ddca3f1e4226b1b87b2550062ec8cab6c20d52bc385bd8c49f60138b6b33cee080f68bfd5a5a0d7f8ba7b8093b8aab0b0025c0e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r10, &(0x7f0000000140), 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x4d4) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xdb, &(0x7f0000003e40)=""/219, 0x41000, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r1, @ANYRES16=r11, @ANYBLOB="20002dbd928a27f213737000fedbdf25250000000e0001006e657464020000006d0000000f0002006e657464657673696d30000008008c000100000020c524d08a410a2b768c677025e18b"], 0x3c}, 0x1, 0x0, 0x0, 0x44851}, 0x20000040) 436.803537ms ago: executing program 0 (id=7261): socket(0x2, 0xa, 0x300) (async) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x53, &(0x7f00000002c0)={0x0, 0x0}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000080)=0x8) 419.063048ms ago: executing program 1 (id=7262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:*r\x00\x00'], 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) close(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x2004c8c0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x80000, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x244, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x120b}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x90}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r11 = socket$kcm(0x2, 0xa, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0x0, &(0x7f0000000200)="9a78a2c545e004da799ee8f8dd9f", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x40004, &(0x7f0000000740)=@framed={{}, [@tail_call]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @broadcast, @val={@val={0x88a8, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1e, 0x2c, 0x68, 0x2000, 0xfc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast}, {0x7ffd, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x5224}}}}}}}, 0x46) 324.068889ms ago: executing program 2 (id=7263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) 322.357418ms ago: executing program 3 (id=7264): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180300004000000000000000ff00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000140000008500000083d581953f7930d95500000055090100240000009500000000000000bf91000000000000b70200000a0000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 262.070799ms ago: executing program 0 (id=7265): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d0000000000950003"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008001240000000080500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a6970246d656300"], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a80000001000030500004088ee25db4bce7c12", @ANYRES32, @ANYBLOB="1000020000000000600012800b00010065727370616e00005000028006000f00e6f2000008000700ff"], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x10}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x80000a8e}, {0x6, 0xfc}]}) write$ppp(r4, &(0x7f0000000180)="1e08", 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) syz_80211_join_ibss(&(0x7f0000000380)='wlan0\x00', &(0x7f00000003c0), 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r10 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r10) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x65754f12bc7c30e}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="07002dbd7000fbdbdf254b0000000e00a90066697273746e616d6500000008001c00000000004d074aaf2b1f4cad6f03127ae73840d37b07b6a15a2a827e945f6a18921597bd982958826507728b8bd0361f"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) 255.351773ms ago: executing program 3 (id=7266): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x108) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x3c}}, 0x40048a4) 164.003864ms ago: executing program 1 (id=7267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xe0, 0x128, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x19a}, {0x1}], 0x1, 0xf87c4be628ed8e41}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x8, 0x9, 0x7fffffff, 0x20840, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0xa}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000000000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 163.320964ms ago: executing program 2 (id=7268): r0 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@in, &(0x7f00000000c0)=0x80, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x0, 0x1, {{0x2a, 0x4, 0x2, 0x8, 0xa8, 0x67, 0x0, 0x6, 0x29, 0x0, @remote, @empty, {[@lsrr={0x83, 0x3, 0xb1}, @ssrr={0x89, 0xb, 0x2a, [@rand_addr=0x64010102, @empty]}, @rr={0x7, 0x1b, 0xb2, [@rand_addr=0x64010100, @remote, @rand_addr=0x64010101, @remote, @empty, @rand_addr=0x64010100]}, @noop, @timestamp={0x44, 0x24, 0x8e, 0x0, 0xe, [0x8, 0x4, 0x7, 0x5, 0xc9eb, 0x2, 0x5, 0x3]}, @ssrr={0x89, 0x1f, 0x5c, [@multicast2, @private=0xa010101, @local, @multicast2, @multicast2, @remote, @empty]}, @timestamp_addr={0x44, 0x24, 0x54, 0x1, 0x8, [{@rand_addr=0x64010100, 0x5371ecea}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0xfffffffe}, {@empty, 0x1}]}]}}}}}) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x891d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINK={0x8, 0x5, r1}]}, 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4, r4}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd4400000000000a0095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 150.209351ms ago: executing program 5 (id=7269): unshare(0x22020400) unshare(0x2c060000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="14005e80050001"], 0x30}}, 0x0) 123.527604ms ago: executing program 3 (id=7270): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 0s ago: executing program 1 (id=7271): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000001bc0), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002840)={0x14, 0x3c, 0x301, 0x70bd29, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc000084) (async) socket(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8}, @initr0, @exit]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00', @ANYRES16=r4, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x8000000, @empty}}, 0x0, 0x0, 0xfffffffd, 0x0, 0x8a, 0x5}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x6}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x8814) (async) r8 = socket(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000000000)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x15, 0x0}}], 0x1, 0x24008881) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) shutdown(r6, 0x2) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 01][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 898.157103][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 898.164704][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 898.210493][T29068] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6065'. [ 898.553559][T29064] wg1 speed is unknown, defaulting to 1000 [ 898.587729][T29064] ip6_vti0 speed is unknown, defaulting to 1000 [ 898.604831][T29081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6070'. [ 898.638282][T29081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6070'. [ 898.865113][T29089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6073'. [ 898.935355][T29087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.976916][T29087] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.994379][T29087] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 899.021679][ T5953] ip6_vti0 speed is unknown, defaulting to 1000 [ 899.030483][ T5953] syz2: Port: 1 Link ACTIVE [ 899.063982][ T5953] ip6_vti0 speed is unknown, defaulting to 1000 [ 899.395170][T29107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6078'. [ 899.454352][T29107] macsec1: entered promiscuous mode [ 899.460166][T29107] macsec1: entered allmulticast mode [ 899.469414][T29105] syzkaller0: entered promiscuous mode [ 900.153665][T29129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.278112][ T5839] Bluetooth: hci2: command tx timeout [ 900.291624][T29133] sit0: entered promiscuous mode [ 900.339658][T29133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 900.649612][T29139] wg1 speed is unknown, defaulting to 1000 [ 900.669924][T29139] ip6_vti0 speed is unknown, defaulting to 1000 [ 900.700339][T29149] tipc: Started in network mode [ 900.708325][T29149] tipc: Node identity 064a2812319f, cluster identity 4711 [ 900.723381][T29149] tipc: Enabled bearer , priority 0 [ 900.830872][T29154] syzkaller0: entered promiscuous mode [ 900.859557][T29154] syzkaller0: entered allmulticast mode [ 900.939023][T29149] tipc: Resetting bearer [ 900.947169][T29148] tipc: Resetting bearer [ 900.988580][T29148] tipc: Disabling bearer [ 901.003217][T29158] netlink: 'syz.5.6090': attribute type 6 has an invalid length. [ 901.015321][T29158] netlink: 'syz.5.6090': attribute type 7 has an invalid length. [ 901.023360][T29158] netlink: 'syz.5.6090': attribute type 8 has an invalid length. [ 901.032307][T29158] netlink: 'syz.5.6090': attribute type 13 has an invalid length. [ 901.054598][T29064] chnl_net:caif_netlink_parms(): no params data found [ 901.267945][T29167] netlink: 'syz.5.6094': attribute type 2 has an invalid length. [ 901.276826][T29167] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 901.324687][T29167] netlink: 'syz.5.6094': attribute type 2 has an invalid length. [ 901.507435][T29064] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.524912][T29064] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.537547][T29064] bridge_slave_0: entered allmulticast mode [ 901.544644][T29064] bridge_slave_0: entered promiscuous mode [ 901.561926][T29177] syzkaller0: entered promiscuous mode [ 901.567688][T29177] syzkaller0: entered allmulticast mode [ 901.642700][T29064] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.650951][T29064] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.659592][T29064] bridge_slave_1: entered allmulticast mode [ 901.668248][T29064] bridge_slave_1: entered promiscuous mode [ 901.787295][T29064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.793710][T29192] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 901.822606][T29064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.860429][T29194] wg1 speed is unknown, defaulting to 1000 [ 901.894208][T29194] ip6_vti0 speed is unknown, defaulting to 1000 [ 901.895673][T29064] team0: Port device team_slave_0 added [ 901.916014][T29064] team0: Port device team_slave_1 added [ 901.967525][T29064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.974622][T29064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.002375][T29064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.020954][T29064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.028567][T29064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.055070][T29064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.135701][T29064] hsr_slave_0: entered promiscuous mode [ 902.142726][T29064] hsr_slave_1: entered promiscuous mode [ 902.149234][T29064] debugfs: 'hsr0' already exists in 'hsr' [ 902.154993][T29064] Cannot create hsr debugfs directory [ 902.353888][T29064] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.365176][ T5839] Bluetooth: hci2: command tx timeout [ 902.411920][T29201] __nla_validate_parse: 7 callbacks suppressed [ 902.411939][T29201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6102'. [ 902.457318][T29201] bond_slave_0: entered promiscuous mode [ 902.463067][T29201] bond_slave_1: entered promiscuous mode [ 902.470095][T29201] macvlan2: entered promiscuous mode [ 902.475536][T29201] bond0: entered promiscuous mode [ 902.483109][T29201] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 902.528615][T29064] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.644130][T29064] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.774293][T29064] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.388223][T29213] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6106'. [ 903.468182][T29213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6106'. [ 903.552902][T29064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 903.581030][T29064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 903.607294][T29064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 903.634586][T29064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 903.970915][T29064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.020734][T29064] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.050336][T22682] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.057555][T22682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.078281][T24756] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.085483][T24756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.446484][ T5839] Bluetooth: hci2: command tx timeout [ 904.470456][T29064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.549446][T29064] veth0_vlan: entered promiscuous mode [ 904.573168][T29064] veth1_vlan: entered promiscuous mode [ 904.630355][T29064] veth0_macvtap: entered promiscuous mode [ 904.653254][T29064] veth1_macvtap: entered promiscuous mode [ 904.679456][T29064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.723833][T29064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.763804][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.783775][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.822396][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.848581][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.873444][T29265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6117'. [ 904.908289][T29265] netlink: 'syz.2.6117': attribute type 1 has an invalid length. [ 904.922302][T29265] netlink: 'syz.2.6117': attribute type 2 has an invalid length. [ 904.931728][T29270] netlink: 'syz.2.6117': attribute type 1 has an invalid length. [ 905.018783][T29270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 905.092069][T10764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.106624][T10764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.279611][T24759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.300011][T24759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.449993][T29294] wg1 speed is unknown, defaulting to 1000 [ 905.468568][T29294] ip6_vti0 speed is unknown, defaulting to 1000 [ 905.595702][T29292] netlink: 'syz.3.6123': attribute type 2 has an invalid length. [ 905.618934][T29292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6123'. [ 905.773447][T29305] syzkaller0: entered promiscuous mode [ 905.780523][T29305] syzkaller0: entered allmulticast mode [ 906.531936][ T5839] Bluetooth: hci2: command tx timeout [ 906.771001][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025179400: rx timeout, send abort [ 906.781231][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025179400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 907.865568][T29322] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6128'. [ 907.939869][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6129'. [ 907.993706][T29324] tipc: Enabling of bearer rejected, failed to enable media [ 908.165640][T29331] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 908.497182][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 908.508210][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 908.510766][T29342] erspan0: entered promiscuous mode [ 908.521119][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 908.541356][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 908.549473][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 908.605637][T29349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6135'. [ 908.893685][T29346] wg1 speed is unknown, defaulting to 1000 [ 908.909871][T29346] ip6_vti0 speed is unknown, defaulting to 1000 [ 909.068649][T21093] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.232797][T21093] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.351578][T21093] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.483229][T21093] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.507889][T29363] pim6reg1: entered promiscuous mode [ 909.513560][T29363] pim6reg1: entered allmulticast mode [ 909.698015][T21093] bridge_slave_1: left allmulticast mode [ 909.706202][T21093] bridge_slave_1: left promiscuous mode [ 909.712316][T21093] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.723025][T21093] x9: left allmulticast mode [ 909.728555][T21093] x9: left promiscuous mode [ 909.733655][T21093] bridge0: port 1(1x9) entered disabled state [ 909.750766][T21093] veth5: left allmulticast mode [ 909.755761][T21093] veth5: left promiscuous mode [ 909.763243][T21093] bridge3: port 3(veth5) entered disabled state [ 909.774521][T21093] veth0_to_bond: left allmulticast mode [ 909.780566][T21093] veth0_to_bond: left promiscuous mode [ 909.786493][T21093] bridge3: port 2(veth0_to_bond) entered disabled state [ 909.846055][T21093] tipc: Resetting bearer [ 909.892929][T29377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6144'. [ 909.903224][T29378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6144'. [ 910.289587][T29385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6146'. [ 910.460465][T21093] bond5 (unregistering): (slave gretap1): Releasing active interface [ 910.488314][T21093] tipc: Disabling bearer [ 910.597570][ T5839] Bluetooth: hci5: command tx timeout [ 910.720706][T21093] bond0 (unregistering): (slave bridge2): Releasing active interface [ 910.870925][T21093] bond3 (unregistering): (slave bridge5): Releasing active interface [ 911.275525][T21093] bond0 (unregistering): Released all slaves [ 911.404765][T21093] bond1 (unregistering): (slave veth7): Releasing active interface [ 911.415036][T21093] bond1 (unregistering): Released all slaves [ 911.553262][T21093] bond2 (unregistering): Released all slaves [ 911.566088][T21093] bond3 (unregistering): Released all slaves [ 911.714334][T21093] bond4 (unregistering): Released all slaves [ 911.840857][T21093] bond5 (unregistering): Released all slaves [ 911.964777][T21093] bond6 (unregistering): Released all slaves [ 911.979135][T29385] 8021q: VLANs not supported on nlmon0 [ 912.125020][T21093] : left promiscuous mode [ 912.218988][T21093] tipc: Disabling bearer [ 912.233641][T21093] tipc: Disabling bearer [ 912.291757][T21093] tipc: Left network mode [ 912.416294][T29397] sctp: [Deprecated]: syz.5.6150 (pid 29397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 912.416294][T29397] Use struct sctp_sack_info instead [ 912.430530][T29403] netlink: 'syz.0.6151': attribute type 8 has an invalid length. [ 912.676788][ T5839] Bluetooth: hci5: command tx timeout [ 912.757663][T29414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6153'. [ 912.789356][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6154'. [ 912.789356][T29417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6154'. [ 912.855800][T29414] 8021q: adding VLAN 0 to HW filter on device bond7 [ 913.113578][T29428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6157'. [ 913.316027][T29432] team0: No ports can be present during mode change [ 913.455261][T29432] veth15: entered promiscuous mode [ 913.503310][T29346] chnl_net:caif_netlink_parms(): no params data found [ 914.133691][T29468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6168'. [ 914.143063][T29466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6167'. [ 914.168424][T29469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6167'. [ 914.188024][T29470] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 914.236510][T21093] hsr_slave_0: left promiscuous mode [ 914.259280][T21093] hsr_slave_1: left promiscuous mode [ 914.285548][T21093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.328767][T21093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.756607][ T5839] Bluetooth: hci5: command tx timeout [ 914.969481][T29483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6171'. [ 915.331165][T21093] team0 (unregistering): Port device team_slave_1 removed [ 915.391383][T21093] team0 (unregistering): Port device team_slave_0 removed [ 915.737215][T21093] team0 (unregistering): Port device v removed [ 915.957097][T29346] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.976759][T29346] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.984175][T29346] bridge_slave_0: entered allmulticast mode [ 916.017879][T29346] bridge_slave_0: entered promiscuous mode [ 916.056924][T29346] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.064144][T29346] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.076995][T29346] bridge_slave_1: entered allmulticast mode [ 916.092748][T29346] bridge_slave_1: entered promiscuous mode [ 916.114261][T29495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6174'. [ 916.213115][T29346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.261740][T29346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.380217][T29346] team0: Port device team_slave_0 added [ 916.390949][T29502] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6176'. [ 916.423071][T29346] team0: Port device team_slave_1 added [ 916.602311][T29346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.616217][T29346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.644794][T29346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.659241][T29346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.668554][T29346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.700848][T29346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.722696][T21093] IPVS: stop unused estimator thread 0... [ 916.752474][T29507] wg1 speed is unknown, defaulting to 1000 [ 916.789383][T29500] netlink: 'syz.0.6175': attribute type 1 has an invalid length. [ 916.797841][T29500] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6175'. [ 916.833056][T29507] ip6_vti0 speed is unknown, defaulting to 1000 [ 916.837575][ T5839] Bluetooth: hci5: command tx timeout [ 916.877224][T29346] hsr_slave_0: entered promiscuous mode [ 916.884316][T29346] hsr_slave_1: entered promiscuous mode [ 916.891549][T29346] debugfs: 'hsr0' already exists in 'hsr' [ 916.918681][T29346] Cannot create hsr debugfs directory [ 917.255495][T29516] wg1 speed is unknown, defaulting to 1000 [ 917.272419][T29516] ip6_vti0 speed is unknown, defaulting to 1000 [ 917.405460][T29526] bond1: option xmit_hash_policy: invalid value (10) [ 917.420375][T29526] bond1 (unregistering): Released all slaves [ 917.830423][T29536] syzkaller0: entered promiscuous mode [ 917.835945][T29536] syzkaller0: entered allmulticast mode [ 917.863999][T24774] syzkaller0: tun_net_xmit 48 [ 917.918513][T29536] syzkaller0: tun_net_xmit 1280 [ 917.926562][T29536] syzkaller0: create flow: hash 3468914588 index 1 [ 917.950640][T29539] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 918.075724][T29545] netlink: 'syz.5.6188': attribute type 15 has an invalid length. [ 918.084267][T29535] syzkaller0: delete flow: hash 3468914588 index 1 [ 920.060075][T29556] sit1: entered promiscuous mode [ 920.207006][T29559] netlink: 'syz.5.6193': attribute type 58 has an invalid length. [ 920.215156][T29559] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6193'. [ 920.527811][T29568] netlink: 'syz.0.6196': attribute type 29 has an invalid length. [ 920.546161][T29346] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 920.589611][T29568] IPv6: Can't replace route, no match found [ 920.599629][T29346] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 920.726557][T29573] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6197'. [ 920.763041][T29346] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 920.802230][T29346] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 920.810127][T29568] wg1 speed is unknown, defaulting to 1000 [ 920.892048][T29568] ip6_vti0 speed is unknown, defaulting to 1000 [ 921.075908][T29346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 921.451143][T29346] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.467709][T10753] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.475028][T10753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.519823][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.527037][T10753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.046047][T29346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.198016][T29346] veth0_vlan: entered promiscuous mode [ 922.218550][T29346] veth1_vlan: entered promiscuous mode [ 922.349021][T29346] veth0_macvtap: entered promiscuous mode [ 922.377174][T29346] veth1_macvtap: entered promiscuous mode [ 922.386283][T29588] wg1 speed is unknown, defaulting to 1000 [ 922.393963][T29588] ip6_vti0 speed is unknown, defaulting to 1000 [ 922.423158][T29346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.453743][T29592] xt_hashlimit: size too large, truncated to 1048576 [ 922.465710][T29346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.515312][T10753] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.535451][T10753] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.572676][T10753] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.594209][T10753] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.858380][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.886694][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.954710][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.969554][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.643882][T29612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6202'. [ 923.742895][T29614] wg1 speed is unknown, defaulting to 1000 [ 923.968981][T29625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6205'. [ 923.979450][T29614] ip6_vti0 speed is unknown, defaulting to 1000 [ 924.676188][T29631] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6207'. [ 924.702787][T29631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6207'. [ 925.345766][T29638] tipc: New replicast peer: 0.0.0.0 [ 925.352873][T29638] tipc: Enabled bearer , priority 10 [ 925.376773][T29636] wg1 speed is unknown, defaulting to 1000 [ 925.384294][T29636] ip6_vti0 speed is unknown, defaulting to 1000 [ 926.291768][T29644] sit0: entered promiscuous mode [ 926.297546][T29644] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6211'. [ 926.310295][T29644] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6211'. [ 926.492195][T29648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 926.543335][T29653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6214'. [ 926.568168][T29654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6214'. [ 926.681733][T29657] netlink: 'syz.5.6215': attribute type 39 has an invalid length. [ 926.832969][T29659] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6216'. [ 927.417988][T29672] netlink: 'syz.2.6219': attribute type 12 has an invalid length. [ 927.448157][T29672] netlink: 'syz.2.6219': attribute type 4 has an invalid length. [ 927.843722][T29680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6222'. [ 927.854948][T29680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6222'. [ 928.217082][T29690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 928.331219][T29690] gretap1: entered promiscuous mode [ 928.337597][T29690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6224'. [ 928.478885][T29700] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6227'. [ 928.569775][T29700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6227'. [ 928.794268][T29715] netlink: zone id is out of range [ 928.809328][T29715] netlink: zone id is out of range [ 928.902233][T29729] netlink: 'syz.1.6238': attribute type 31 has an invalid length. [ 928.947080][T29733] syzkaller0: entered promiscuous mode [ 928.956686][T29733] syzkaller0: entered allmulticast mode [ 929.024988][T29737] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 929.180080][T29732] Bluetooth: MGMT ver 1.23 [ 929.240600][T29743] netlink: 'syz.0.6237': attribute type 10 has an invalid length. [ 929.261097][T29743] team0: Port device dummy0 added [ 929.452780][T29749] netlink: 'syz.3.6240': attribute type 10 has an invalid length. [ 929.460788][T29749] bond0: entered promiscuous mode [ 929.465825][T29749] bond_slave_0: entered promiscuous mode [ 929.471705][T29749] bond_slave_1: entered promiscuous mode [ 929.478319][T29749] bridge0: port 3(bond0) entered blocking state [ 929.484676][T29749] bridge0: port 3(bond0) entered disabled state [ 929.491260][T29749] bond0: entered allmulticast mode [ 929.496551][T29749] bond_slave_0: entered allmulticast mode [ 929.502285][T29749] bond_slave_1: entered allmulticast mode [ 929.508285][T29749] team0: entered allmulticast mode [ 929.513391][T29749] team_slave_0: entered allmulticast mode [ 929.519170][T29749] : entered allmulticast mode [ 929.526207][T29749] bridge0: port 3(bond0) entered blocking state [ 929.532561][T29749] bridge0: port 3(bond0) entered listening state [ 929.767928][T29751] netlink: 'syz.1.6241': attribute type 31 has an invalid length. [ 930.031961][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 930.050320][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 930.058889][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 930.076976][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 930.084718][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 930.397900][T22732] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.444930][T29758] wg1 speed is unknown, defaulting to 1000 [ 930.469640][T29758] ip6_vti0 speed is unknown, defaulting to 1000 [ 930.523450][T22732] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.690490][T22732] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.776884][T29792] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 930.788446][T22732] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.810016][T29798] wg1 speed is unknown, defaulting to 1000 [ 931.053495][T29798] ip6_vti0 speed is unknown, defaulting to 1000 [ 931.070418][T29808] sctp: [Deprecated]: syz.0.6260 (pid 29808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 931.070418][T29808] Use struct sctp_sack_info instead [ 931.101970][T22732] bond0: left allmulticast mode [ 931.116648][T22732] bond_slave_0: left allmulticast mode [ 931.136904][T22732] bond_slave_1: left allmulticast mode [ 931.151391][T22732] team0: left allmulticast mode [ 931.158161][T22732] team_slave_0: left allmulticast mode [ 931.176131][T22732] : left allmulticast mode [ 931.186163][T22732] bridge0: port 3(bond0) entered disabled state [ 931.205490][T22732] bridge_slave_1: left allmulticast mode [ 931.223586][T22732] bridge_slave_1: left promiscuous mode [ 931.236704][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 931.237388][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 931.263754][T22732] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.284683][T22732] bridge_slave_0: left promiscuous mode [ 931.303338][T22732] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.355836][T22732] veth11: left allmulticast mode [ 931.376088][T22732] veth11: left promiscuous mode [ 931.383801][T22732] bridge4: port 3(veth11) entered disabled state [ 931.408365][T22732] veth0_to_bond: left allmulticast mode [ 931.415909][T22732] veth0_to_bond: left promiscuous mode [ 931.423281][T22732] bridge4: port 2(veth0_to_bond) entered disabled state [ 931.453441][T22732] veth9: left allmulticast mode [ 931.468930][T22732] veth9: left promiscuous mode [ 931.482873][T22732] bridge4: port 1(veth9) entered disabled state [ 931.520468][T22732] tipc: Resetting bearer [ 931.829838][T22732] dvmrp6 (unregistering): left allmulticast mode [ 931.938277][T22732] tipc: Disabling bearer [ 932.119178][ T5839] Bluetooth: hci0: command tx timeout [ 932.437702][T22732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.447607][T22732] bond_slave_0: left promiscuous mode [ 932.454411][T22732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.463295][T22732] bond_slave_1: left promiscuous mode [ 932.469901][T22732] bond0 (unregistering): (slave team0): Releasing backup interface [ 932.481528][T22732] bond0 (unregistering): Released all slaves [ 932.606668][T22732] team0: Port device macvlan2 removed [ 932.617949][T22732] bond1 (unregistering): Released all slaves [ 932.730815][T22732] bond2 (unregistering): Released all slaves [ 932.841398][T29800] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 932.855968][T22732] bond3 (unregistering): Released all slaves [ 932.869193][T22732] bond4 (unregistering): Released all slaves [ 932.881478][T22732] bond5 (unregistering): Released all slaves [ 932.998739][T22732] bond6 (unregistering): Released all slaves [ 933.112249][T22732] bond7 (unregistering): (slave veth13): Releasing active interface [ 933.121793][T22732] bond7 (unregistering): Released all slaves [ 933.133844][ T5876] ip6_vti0 speed is unknown, defaulting to 1000 [ 933.141017][ T5876] syz2: Port: 1 Link DOWN [ 933.149937][T29816] __nla_validate_parse: 14 callbacks suppressed [ 933.149949][T29816] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6263'. [ 933.167445][T29816] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6263'. [ 933.178744][T29816] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6263'. [ 933.348706][ T5876] ip6_vti0 speed is unknown, defaulting to 1000 [ 933.355550][T29822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6265'. [ 933.374996][T29822] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6265'. [ 933.693065][T29831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6268'. [ 934.004209][T29758] chnl_net:caif_netlink_parms(): no params data found [ 934.186070][T10764] smc: removing ib device syz2 [ 934.206629][ T5830] Bluetooth: hci0: command 0x041b tx timeout [ 934.244644][T29820] wg1 speed is unknown, defaulting to 1000 [ 934.309193][T29851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6271'. [ 934.343078][T29758] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.371607][T29758] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.405263][T29758] bridge_slave_0: entered allmulticast mode [ 934.467941][T29758] bridge_slave_0: entered promiscuous mode [ 934.534841][T29847] syzkaller0: entered promiscuous mode [ 934.551948][T29847] syzkaller0: entered allmulticast mode [ 934.559719][T29827] wg1 speed is unknown, defaulting to 1000 [ 934.763461][T29758] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.781227][T29758] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.796704][T29758] bridge_slave_1: entered allmulticast mode [ 934.863590][T29758] bridge_slave_1: entered promiscuous mode [ 936.295571][ T5839] Bluetooth: hci0: command 0x041b tx timeout [ 937.502213][T29758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.543688][T29758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.671843][T29758] team0: Port device team_slave_0 added [ 937.698060][T29758] team0: Port device team_slave_1 added [ 937.782220][T29863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6273'. [ 937.817087][T29758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.824072][T29758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.852137][T29758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.865325][T29758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.879500][T29758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.906600][T29758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.924565][T22732] : left promiscuous mode [ 938.085088][T29758] hsr_slave_0: entered promiscuous mode [ 938.101281][T29758] hsr_slave_1: entered promiscuous mode [ 938.108879][T29758] debugfs: 'hsr0' already exists in 'hsr' [ 938.114643][T29758] Cannot create hsr debugfs directory [ 938.137489][T29867] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 938.262040][T22732] tipc: Disabling bearer [ 938.268158][T22732] tipc: Left network mode [ 938.270599][T29867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.292571][T29867] batadv_slave_0: entered promiscuous mode [ 938.318559][T29867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6274'. [ 938.356733][ T5839] Bluetooth: hci0: command 0x041b tx timeout [ 939.074618][T29875] netlink: 'syz.0.6276': attribute type 26 has an invalid length. [ 939.933703][T29886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6280'. [ 939.958919][T29886] netlink: 'syz.1.6280': attribute type 4 has an invalid length. [ 940.194235][T29892] tun0: tun_chr_ioctl cmd 1074025675 [ 940.214938][T29892] tun0: persist enabled [ 940.258295][T22732] hsr_slave_0: left promiscuous mode [ 940.274282][T22732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.438353][ T5830] Bluetooth: hci0: command 0x041b tx timeout [ 940.607453][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6283'. [ 941.079643][T22732] (unregistering): left promiscuous mode [ 941.088261][T22732] team0 (unregistering): Port device 76 removed [ 941.138820][T22732] team_slave_0 (unregistering): left promiscuous mode [ 941.147293][T22732] team0 (unregistering): Port device team_slave_0 removed [ 941.524337][T29892] tun0: tun_chr_ioctl cmd 1074025675 [ 941.531043][T29892] tun0: persist enabled [ 941.561343][T29906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6284'. [ 941.587620][T29906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6284'. [ 941.601239][T29906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6284'. [ 941.614595][T29906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6284'. [ 941.627391][T29906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6284'. [ 941.644407][T29906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6284'. [ 941.658218][T29906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6284'. [ 941.668052][T29906] sit0: left promiscuous mode [ 941.684609][T29906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.693207][T29906] 8021q: adding VLAN 0 to HW filter on device ` [ 941.702718][T29906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 941.751291][T29758] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 941.831639][T29758] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 941.918451][T29758] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 941.984042][T29758] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 942.054215][T29909] wg1 speed is unknown, defaulting to 1000 [ 942.315258][T22732] IPVS: stop unused estimator thread 0... [ 942.337866][T29930] FAULT_INJECTION: forcing a failure. [ 942.337866][T29930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.385134][T29930] CPU: 1 UID: 0 PID: 29930 Comm: syz.5.6289 Not tainted syzkaller #0 PREEMPT(full) [ 942.385163][T29930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 942.385177][T29930] Call Trace: [ 942.385185][T29930] [ 942.385194][T29930] dump_stack_lvl+0xe8/0x150 [ 942.385223][T29930] should_fail_ex+0x414/0x560 [ 942.385258][T29930] _copy_from_user+0x2d/0xb0 [ 942.385284][T29930] ___sys_recvmsg+0x12e/0x510 [ 942.385315][T29930] ? __pfx____sys_recvmsg+0x10/0x10 [ 942.385345][T29930] ? __fget_files+0x2a/0x420 [ 942.385385][T29930] ? __fget_files+0x3a0/0x420 [ 942.385420][T29930] do_recvmmsg+0x307/0x770 [ 942.385452][T29930] ? __pfx_do_recvmmsg+0x10/0x10 [ 942.385486][T29930] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 942.385526][T29930] __x64_sys_recvmmsg+0x190/0x240 [ 942.385554][T29930] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 942.385589][T29930] do_syscall_64+0xec/0xf80 [ 942.385608][T29930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.385627][T29930] ? trace_irq_disable+0x37/0x100 [ 942.385652][T29930] ? clear_bhb_loop+0x60/0xb0 [ 942.385674][T29930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.385692][T29930] RIP: 0033:0x7f113e98f749 [ 942.385710][T29930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.385729][T29930] RSP: 002b:00007f113f822038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 942.385751][T29930] RAX: ffffffffffffffda RBX: 00007f113ebe5fa0 RCX: 00007f113e98f749 [ 942.385766][T29930] RDX: 0000000000000001 RSI: 0000200000013b00 RDI: 0000000000000003 [ 942.385779][T29930] RBP: 00007f113f822090 R08: 0000000000000000 R09: 0000000000000000 [ 942.385798][T29930] R10: 00000000000113c2 R11: 0000000000000246 R12: 0000000000000001 [ 942.385810][T29930] R13: 00007f113ebe6038 R14: 00007f113ebe5fa0 R15: 00007ffc7c909ee8 [ 942.385842][T29930] [ 942.387505][T29758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.569149][ T5839] Bluetooth: hci0: command 0x041b tx timeout [ 942.729088][T29938] tipc: Enabled bearer , priority 0 [ 942.753408][T29758] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.772618][T29938] syzkaller0: entered promiscuous mode [ 942.782919][T29938] syzkaller0: entered allmulticast mode [ 942.825161][T24757] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.832408][T24757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.882080][T29944] netlink: 'syz.1.6294': attribute type 30 has an invalid length. [ 942.901533][T29938] tipc: Resetting bearer [ 942.973887][T29944] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 943.009810][T29944] bond1 (unregistering): Released all slaves [ 943.085461][T22732] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.092690][T22732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.103847][T29935] tipc: Resetting bearer [ 943.123224][T29935] tipc: Disabling bearer [ 943.441668][T29758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.518975][T29758] veth0_vlan: entered promiscuous mode [ 943.544059][T29932] lo speed is unknown, defaulting to 1000 [ 943.566979][T29932] lo speed is unknown, defaulting to 1000 [ 943.573835][T29758] veth1_vlan: entered promiscuous mode [ 943.590427][T29932] lo speed is unknown, defaulting to 1000 [ 943.640378][T29932] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 943.704092][T29953] __nla_validate_parse: 13 callbacks suppressed [ 943.704106][T29953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6295'. [ 943.731865][T29932] lo speed is unknown, defaulting to 1000 [ 943.823778][T29932] lo speed is unknown, defaulting to 1000 [ 943.869195][T29932] lo speed is unknown, defaulting to 1000 [ 943.870996][T29758] veth0_macvtap: entered promiscuous mode [ 943.895889][T29932] lo speed is unknown, defaulting to 1000 [ 943.904094][T29758] veth1_macvtap: entered promiscuous mode [ 943.939336][T29932] lo speed is unknown, defaulting to 1000 [ 943.952150][T29932] lo speed is unknown, defaulting to 1000 [ 943.974766][T29758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.013182][T29932] lo speed is unknown, defaulting to 1000 [ 944.031026][T29758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.042469][T29932] lo speed is unknown, defaulting to 1000 [ 944.047711][T24757] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.058035][T24757] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.084552][T24757] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.107521][T24757] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.139795][T29932] lo speed is unknown, defaulting to 1000 [ 944.148707][T29932] lo speed is unknown, defaulting to 1000 [ 944.168873][T29932] lo speed is unknown, defaulting to 1000 [ 944.372573][T10762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.402281][T10762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.510613][T24774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.525687][T24774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.750979][T29984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6304'. [ 944.779782][T29984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6304'. [ 945.089685][T29996] netlink: 'syz.0.6307': attribute type 1 has an invalid length. [ 945.210997][T30000] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6309'. [ 945.343965][T30003] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6309'. [ 945.520173][T29998] bond1: (slave gretap1): making interface the new active one [ 945.571295][T29998] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 945.665276][T30001] macvlan2: entered promiscuous mode [ 945.715809][T30001] macvlan2: entered allmulticast mode [ 945.756118][T30001] bond1: entered promiscuous mode [ 945.792836][T30001] gretap1: entered promiscuous mode [ 945.825031][T30001] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 945.866197][T30001] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 945.918427][T30001] bond1: left promiscuous mode [ 945.923277][T30001] gretap1: left promiscuous mode [ 946.091863][T29994] wg1 speed is unknown, defaulting to 1000 [ 946.365493][T30021] wg1 speed is unknown, defaulting to 1000 [ 946.624027][T30033] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input13 [ 946.669970][T30032] syzkaller0: entered promiscuous mode [ 946.675953][T30032] syzkaller0: entered allmulticast mode [ 946.904879][T29994] lo speed is unknown, defaulting to 1000 [ 948.384723][T30058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6321'. [ 949.458579][T30021] lo speed is unknown, defaulting to 1000 [ 949.589300][T30059] wg1 speed is unknown, defaulting to 1000 [ 949.872768][T30067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6324'. [ 949.899401][T30067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6324'. [ 950.212642][T30069] geneve2: entered promiscuous mode [ 950.229208][T30069] geneve2: entered allmulticast mode [ 950.364143][T30071] wg1 speed is unknown, defaulting to 1000 [ 950.780171][T30059] lo speed is unknown, defaulting to 1000 [ 951.189023][T30096] macsec2: entered promiscuous mode [ 951.194413][T30096] macsec2: entered allmulticast mode [ 951.267894][T30071] lo speed is unknown, defaulting to 1000 [ 951.505608][T30101] netlink: 'syz.2.6335': attribute type 1 has an invalid length. [ 951.635967][T30103] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 951.648131][T30103] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 951.688032][T30104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6335'. [ 951.799152][T30104] 8021q: adding VLAN 0 to HW filter on device bond2 [ 951.822959][T30103] bond2: (slave bridge5): Enslaving as an active interface with a down link [ 951.843848][T30101] macvlan3: entered promiscuous mode [ 951.850358][T30101] macvlan3: entered allmulticast mode [ 951.858155][T30101] bond2: entered promiscuous mode [ 951.863622][T30101] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 951.873103][T30101] bond2: left promiscuous mode [ 952.263483][T30117] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 952.279406][T30117] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 952.422664][T30125] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6339'. [ 952.530243][T30128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6342'. [ 952.539677][T30128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6342'. [ 952.891661][T30140] netlink: 'syz.5.6348': attribute type 5 has an invalid length. [ 953.231233][T30146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6350'. [ 953.755486][T30148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6349'. [ 953.795343][T30148] bond2: Unable to set up delay as MII monitoring is disabled [ 953.840555][T30148] bond2 (unregistering): Released all slaves [ 954.042190][T30165] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6354'. [ 954.537803][T30191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input15 [ 954.677995][T30187] wg1 speed is unknown, defaulting to 1000 [ 954.809090][ T8646] IPVS: starting estimator thread 0... [ 954.838348][T30202] netlink: 'syz.2.6363': attribute type 1 has an invalid length. [ 954.896634][T30203] IPVS: using max 29 ests per chain, 69600 per kthread [ 954.930705][T30212] IPv6: Can't replace route, no match found [ 955.012590][T30200] bond3: option ad_user_port_key: invalid value (65535) [ 955.050766][T30200] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 955.090630][T30200] bond3 (unregistering): Released all slaves [ 955.180857][T30207] netlink: 'syz.3.6362': attribute type 29 has an invalid length. [ 955.304500][T30212] wg1 speed is unknown, defaulting to 1000 [ 955.402609][T30229] netlink: 'syz.2.6367': attribute type 15 has an invalid length. [ 955.459573][T30231] bond2: entered promiscuous mode [ 955.464645][T30231] bond2: entered allmulticast mode [ 955.507640][T30231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 955.848081][T30243] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6369'. [ 956.052894][T30247] lo: entered allmulticast mode [ 956.071955][T30247] lo: left allmulticast mode [ 956.164345][T30187] lo speed is unknown, defaulting to 1000 [ 956.182025][T30249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6372'. [ 956.450784][T30259] xt_hashlimit: size too large, truncated to 1048576 [ 956.478687][T30258] netlink: 'syz.2.6376': attribute type 4 has an invalid length. [ 956.580347][T30264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6376'. [ 957.115511][T30277] netlink: 'syz.5.6379': attribute type 29 has an invalid length. [ 957.150767][T30212] lo speed is unknown, defaulting to 1000 [ 957.197066][T30278] netlink: 500 bytes leftover after parsing attributes in process `syz.5.6379'. [ 957.206293][T30278] unsupported nla_type 58 [ 957.272007][T30277] netlink: 'syz.5.6379': attribute type 29 has an invalid length. [ 958.169206][T30314] netlink: 'syz.2.6385': attribute type 1 has an invalid length. [ 958.188914][T30314] netlink: 'syz.2.6385': attribute type 3 has an invalid length. [ 958.200738][T30314] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6385'. [ 958.236902][T30318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6382'. [ 958.392091][T30317] syzkaller0: entered promiscuous mode [ 958.413940][ T5830] block nbd5: Receive control failed (result -1) [ 958.424187][T30317] syzkaller0: entered allmulticast mode [ 958.997969][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 958.998946][T29744] Bluetooth: hci2: command 0x0401 tx timeout [ 959.517456][T30354] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6393'. [ 960.554509][T30368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6397'. [ 960.591540][T30368] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6397'. [ 960.605766][T30373] wg1 speed is unknown, defaulting to 1000 [ 961.161073][T30390] wg1 speed is unknown, defaulting to 1000 [ 961.340320][T30397] netlink: 'syz.5.6404': attribute type 21 has an invalid length. [ 961.391545][T30397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6404'. [ 962.448952][T30373] lo speed is unknown, defaulting to 1000 [ 963.264724][T30390] lo speed is unknown, defaulting to 1000 [ 963.522758][T30412] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6409'. [ 963.562893][T30412] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6409'. [ 963.683119][T30420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6410'. [ 964.060622][T30419] wg1 speed is unknown, defaulting to 1000 [ 964.923055][T30444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6418'. [ 964.991667][T30445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6418'. [ 965.029154][T30445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6418'. [ 965.211238][T30453] syzkaller0: entered promiscuous mode [ 965.242219][T30453] syzkaller0: entered allmulticast mode [ 965.294504][T30419] lo speed is unknown, defaulting to 1000 [ 965.299927][T30460] netlink: 'syz.1.6422': attribute type 6 has an invalid length. [ 966.035051][T30471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6425'. [ 966.045911][T30471] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6425'. [ 966.118772][T30473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6426'. [ 967.317645][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 968.854481][T30489] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6430'. [ 968.939190][T30489] netlink: 'syz.0.6430': attribute type 10 has an invalid length. [ 968.984949][T30489] bridge0: port 3(macsec0) entered blocking state [ 968.994191][T30489] bridge0: port 3(macsec0) entered disabled state [ 969.002173][T30489] macsec0: entered allmulticast mode [ 969.009758][T30489] veth1_macvtap: entered allmulticast mode [ 969.021182][T30489] macsec0: entered promiscuous mode [ 969.034184][T30489] bridge0: port 3(macsec0) entered blocking state [ 969.041109][T30489] bridge0: port 3(macsec0) entered forwarding state [ 969.051650][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6433'. [ 969.105297][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6433'. [ 969.345810][T30510] wg1 speed is unknown, defaulting to 1000 [ 969.379446][T30514] wg1 speed is unknown, defaulting to 1000 [ 969.387923][T30518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6435'. [ 969.481288][T30521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6435'. [ 969.503491][T30522] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6439'. [ 969.549654][T30522] macsec3: entered promiscuous mode [ 969.565230][T30522] macsec3: entered allmulticast mode [ 969.633251][T30522] wg1 speed is unknown, defaulting to 1000 [ 970.589581][T30510] lo speed is unknown, defaulting to 1000 [ 970.862311][T30545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6445'. [ 971.215694][T30553] bond8: option mode: invalid value (129) [ 971.224139][T30553] bond8 (unregistering): Released all slaves [ 971.257227][T30514] lo speed is unknown, defaulting to 1000 [ 971.539300][T30556] wg1 speed is unknown, defaulting to 1000 [ 972.044021][T30522] lo speed is unknown, defaulting to 1000 [ 972.521272][T30568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6451'. [ 972.540802][T30563] IPVS: Scheduler module ip_vs_sip not found [ 972.572304][T30564] IPVS: Scheduler module ip_vs_sip not found [ 972.607304][T30570] netlink: 'syz.2.6452': attribute type 21 has an invalid length. [ 972.628236][T30567] sit0: entered promiscuous mode [ 972.649128][T30567] netlink: 'syz.2.6452': attribute type 1 has an invalid length. [ 972.685568][T30567] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6452'. [ 972.783244][T30577] pim6reg: entered allmulticast mode [ 972.833754][T30556] lo speed is unknown, defaulting to 1000 [ 973.014044][T30585] syzkaller0: entered promiscuous mode [ 973.022557][T30585] syzkaller0: entered allmulticast mode [ 973.033061][T30582] syzkaller1: entered promiscuous mode [ 973.044413][T30582] syzkaller1: entered allmulticast mode [ 973.112459][T30574] pim6reg: left allmulticast mode [ 973.468149][T30593] netlink: 'syz.3.6457': attribute type 13 has an invalid length. [ 973.476767][T30593] netlink: 'syz.3.6457': attribute type 17 has an invalid length. [ 973.485147][T30594] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6456'. [ 973.617556][T30593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 974.250589][T30598] wg1 speed is unknown, defaulting to 1000 [ 974.925079][T30617] __nla_validate_parse: 1 callbacks suppressed [ 974.925098][T30617] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6461'. [ 974.947724][T30617] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6461'. [ 975.107001][T30622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6463'. [ 975.343012][T30630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6465'. [ 975.367833][T30630] netlink: 'syz.5.6465': attribute type 1 has an invalid length. [ 975.389502][T30630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6465'. [ 975.401932][T30627] bond3: option all_slaves_active: invalid value (13) [ 975.447780][T30627] bond3 (unregistering): Released all slaves [ 975.513848][T30598] lo speed is unknown, defaulting to 1000 [ 975.912173][T30650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 975.919474][T30650] IPv6: NLM_F_CREATE should be set when creating new route [ 975.943250][T30654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6472'. [ 975.969283][T30655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 976.022849][T30654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6472'. [ 976.271601][T30671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6474'. [ 976.487052][T30673] netlink: 'syz.2.6476': attribute type 2 has an invalid length. [ 976.498935][T30673] netlink: 'syz.2.6476': attribute type 8 has an invalid length. [ 976.516597][T30673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6476'. [ 976.578466][T30676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6477'. [ 977.053651][T30691] wg1 speed is unknown, defaulting to 1000 [ 978.120190][T30732] wg1 speed is unknown, defaulting to 1000 [ 978.171152][T30731] wg1 speed is unknown, defaulting to 1000 [ 978.205863][T30736] syzkaller0: entered promiscuous mode [ 978.222663][T30736] syzkaller0: entered allmulticast mode [ 978.234493][T30730] wg1 speed is unknown, defaulting to 1000 [ 978.331841][T30691] lo speed is unknown, defaulting to 1000 [ 978.634404][T30741] batman_adv: batadv0: Adding interface: dummy0 [ 978.642121][T30741] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.697197][T30741] batman_adv: batadv0: Interface activated: dummy0 [ 978.704715][T30743] netlink: 'syz.2.6492': attribute type 30 has an invalid length. [ 978.779197][T30743] bond3: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 978.791756][T30743] bond3 (unregistering): Released all slaves [ 979.595871][T30732] lo speed is unknown, defaulting to 1000 [ 979.692791][T30763] sctp: [Deprecated]: syz.2.6498 (pid 30763) Use of int in max_burst socket option. [ 979.692791][T30763] Use struct sctp_assoc_value instead [ 980.143096][T30782] __nla_validate_parse: 8 callbacks suppressed [ 980.143117][T30782] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6504'. [ 980.478266][T30731] lo speed is unknown, defaulting to 1000 [ 980.488479][T30730] lo speed is unknown, defaulting to 1000 [ 980.513514][T30786] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 980.821513][T30793] Bluetooth: MGMT ver 1.23 [ 980.925074][T30793] syzkaller0: entered promiscuous mode [ 980.939201][T30793] syzkaller0: entered allmulticast mode [ 980.954711][T30803] siw: device registration error -23 [ 982.746989][T30803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.754381][T30803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.762877][T30803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.770568][T30803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.781148][T30803] batman_adv: batadv0: Interface deactivated: dummy0 [ 982.788447][T30803] batman_adv: batadv0: Removing interface: dummy0 [ 982.973328][T30809] tipc: Started in network mode [ 982.979873][T30809] tipc: Node identity 360824b5f3f2, cluster identity 4711 [ 982.988162][T30809] tipc: Enabled bearer , priority 0 [ 982.996080][T30809] syzkaller0: entered promiscuous mode [ 983.012953][T30809] syzkaller0: entered allmulticast mode [ 983.051223][T30809] tipc: Resetting bearer [ 983.165877][T30806] tipc: Resetting bearer [ 983.209776][T30806] tipc: Disabling bearer [ 983.628677][T30822] tipc: Started in network mode [ 983.645861][T30822] tipc: Node identity 76b8a1d3efba, cluster identity 4711 [ 983.685312][T30822] tipc: Enabled bearer , priority 0 [ 983.750726][T30826] syzkaller0: entered promiscuous mode [ 983.766442][T30826] syzkaller0: entered allmulticast mode [ 983.787296][T30821] tipc: Resetting bearer [ 983.807465][T30821] tipc: Disabling bearer [ 983.995787][T30842] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 984.005987][T30845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6520'. [ 984.018715][T30847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6521'. [ 984.040945][T30843] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 984.131210][T30850] tipc: Enabled bearer , priority 0 [ 984.144786][T30850] syzkaller0: entered promiscuous mode [ 984.179673][T30850] syzkaller0: entered allmulticast mode [ 984.211289][T30850] tipc: Resetting bearer [ 984.249616][T30849] tipc: Resetting bearer [ 984.317087][T30860] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6528'. [ 984.338013][T30861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6526'. [ 984.348582][T30849] tipc: Disabling bearer [ 984.373593][T10757] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.374353][T30861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6526'. [ 984.393512][T10757] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.393557][T10757] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.393591][T10757] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.500532][T30871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6527'. [ 984.575245][T30883] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 984.615954][T30886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6533'. [ 984.660530][T30890] netlink: 'syz.3.6534': attribute type 21 has an invalid length. [ 984.669972][T30890] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6534'. [ 984.899151][T30899] netlink: 'syz.1.6535': attribute type 4 has an invalid length. [ 984.908221][T30899] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.6535'. [ 985.332289][T30910] 8021q: VLANs not supported on ip_vti0 [ 985.504199][T30915] wg1 speed is unknown, defaulting to 1000 [ 985.676112][T30924] netlink: 'syz.3.6542': attribute type 2 has an invalid length. [ 985.715644][T30924] !: entered promiscuous mode [ 985.731385][T30924] netlink: 'syz.3.6542': attribute type 2 has an invalid length. [ 985.739583][T30924] !: left promiscuous mode [ 985.837623][T30925] wg1 speed is unknown, defaulting to 1000 [ 985.918822][T30930] xt_connbytes: Forcing CT accounting to be enabled [ 986.058449][T30937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6548'. [ 986.072871][T30937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6548'. [ 986.130213][T30944] netlink: 'syz.2.6546': attribute type 3 has an invalid length. [ 986.160605][T30944] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6546'. [ 986.225106][T30944] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 986.536094][T30956] tipc: Enabled bearer , priority 0 [ 986.559426][T30915] lo speed is unknown, defaulting to 1000 [ 986.566284][T30956] syzkaller0: entered promiscuous mode [ 986.573625][T30956] syzkaller0: entered allmulticast mode [ 986.613975][T30956] tipc: Resetting bearer [ 986.634039][T30956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6550'. [ 986.688561][T30955] tipc: Resetting bearer [ 986.718878][T30955] tipc: Disabling bearer [ 986.979339][T30966] wg1 speed is unknown, defaulting to 1000 [ 986.988739][T30925] lo speed is unknown, defaulting to 1000 [ 987.004639][T30968] wg1 speed is unknown, defaulting to 1000 [ 987.545042][T30996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6559'. [ 987.714597][T30998] syzkaller0: entered promiscuous mode [ 987.763574][T30998] syzkaller0: entered allmulticast mode [ 987.795349][T30998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6558'. [ 987.807427][T30998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6558'. [ 988.059994][T30968] lo speed is unknown, defaulting to 1000 [ 988.101464][T31009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6563'. [ 988.110872][T31009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6563'. [ 988.453874][T31019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6566'. [ 990.210338][T30966] lo speed is unknown, defaulting to 1000 [ 990.333539][T31027] netlink: del zone limit has 4 unknown bytes [ 990.385286][T31027] veth0: entered promiscuous mode [ 990.770963][T31037] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 991.023123][T31045] netlink: 'syz.2.6572': attribute type 1 has an invalid length. [ 991.117034][T31045] bond3: entered promiscuous mode [ 991.122496][T31045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 991.195572][T31051] netlink: 'syz.3.6574': attribute type 2 has an invalid length. [ 991.299928][T31051] __nla_validate_parse: 3 callbacks suppressed [ 991.299947][T31051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6574'. [ 991.573750][T31050] netlink: 'syz.5.6573': attribute type 7 has an invalid length. [ 991.801770][T31069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6578'. [ 991.844513][T31069] vlan2: entered promiscuous mode [ 991.864492][T31069] dummy0: entered promiscuous mode [ 991.955638][T31071] IPVS: Scheduler module ip_vs_ not found [ 992.272804][T31086] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6579'. [ 992.470144][T31088] wg1 speed is unknown, defaulting to 1000 [ 992.525665][T31094] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 992.815636][T31117] netlink: 'syz.0.6590': attribute type 10 has an invalid length. [ 992.846834][T31117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6590'. [ 992.948905][T31116] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 992.979003][T31117] dummy0: entered promiscuous mode [ 993.002241][T31121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6591'. [ 993.025486][T31117] team0: Port device dummy0 removed [ 993.050229][T31117] bridge0: port 4(dummy0) entered blocking state [ 993.068030][T31117] bridge0: port 4(dummy0) entered disabled state [ 993.094479][T31117] dummy0: entered allmulticast mode [ 993.109154][T31123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6592'. [ 993.118891][T31125] netlink: 'syz.1.6592': attribute type 29 has an invalid length. [ 993.127164][T31123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6592'. [ 993.167969][T31125] netlink: 'syz.1.6592': attribute type 29 has an invalid length. [ 993.304982][T31131] syzkaller0: entered promiscuous mode [ 993.317245][T31131] syzkaller0: entered allmulticast mode [ 993.435405][T31137] cgroup: fork rejected by pids controller in /syz1 [ 993.493746][T31160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6598'. [ 993.520068][T31144] xt_CT: No such helper "netbios-ns" [ 993.586135][T31160] bridge0: port 3(vlan2) entered blocking state [ 993.594461][T31160] bridge0: port 3(vlan2) entered disabled state [ 993.603730][T31229] openvswitch: netlink: Key 6 has unexpected len 8 expected 2 [ 993.614087][T31160] vlan2: entered allmulticast mode [ 993.625601][T31160] erspan0: entered allmulticast mode [ 993.642945][T31160] vlan2: entered promiscuous mode [ 993.649310][T31160] erspan0: entered promiscuous mode [ 993.655543][T31160] bridge0: port 3(vlan2) entered blocking state [ 993.662093][T31160] bridge0: port 3(vlan2) entered forwarding state [ 993.685229][T31252] netlink: 'syz.2.6599': attribute type 21 has an invalid length. [ 993.691839][T31150] : entered promiscuous mode [ 993.708004][T31252] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6599'. [ 993.740642][T31088] lo speed is unknown, defaulting to 1000 [ 994.215055][T31264] wg1 speed is unknown, defaulting to 1000 [ 994.941106][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 994.952254][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 994.969942][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 994.983830][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 994.993151][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 995.042558][T31275] wg1 speed is unknown, defaulting to 1000 [ 995.119582][T31282] netlink: 'syz.0.6608': attribute type 1 has an invalid length. [ 995.199728][T31282] bond3: entered promiscuous mode [ 995.205515][T31282] bond3: entered allmulticast mode [ 995.212669][T31282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 995.258097][T31264] lo speed is unknown, defaulting to 1000 [ 995.324779][T31282] netlink: 'syz.0.6608': attribute type 1 has an invalid length. [ 995.961003][T31294] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6611'. [ 996.057502][T31275] lo speed is unknown, defaulting to 1000 [ 996.351157][T31306] __nla_validate_parse: 4 callbacks suppressed [ 996.351177][T31306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6613'. [ 996.387702][ T60] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.482867][ T60] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.540426][ T60] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.562966][ T60] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.831556][T31275] chnl_net:caif_netlink_parms(): no params data found [ 997.010587][T31275] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.019591][T31275] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.029224][T31275] bridge_slave_0: entered allmulticast mode [ 997.037752][T31275] bridge_slave_0: entered promiscuous mode [ 997.046889][T31275] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.054157][T31275] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.061601][T31275] bridge_slave_1: entered allmulticast mode [ 997.069414][T31275] bridge_slave_1: entered promiscuous mode [ 997.095549][ T5830] Bluetooth: hci1: command tx timeout [ 997.225515][T31275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.235394][T31351] netlink: 'syz.0.6625': attribute type 2 has an invalid length. [ 997.243740][T31351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6625'. [ 997.297783][T31275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.377818][T31275] team0: Port device team_slave_0 added [ 997.393707][T31275] team0: Port device team_slave_1 added [ 997.409139][T31357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6627'. [ 997.525114][T31275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.535700][T31275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.573479][T31275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.608110][T31275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.620680][T31275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.676673][T31275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.703382][T31367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6630'. [ 997.724874][T31367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6630'. [ 997.749654][T31367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6630'. [ 997.779209][T31370] x_tables: duplicate underflow at hook 2 [ 997.780007][T31354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6626'. [ 997.832821][T31275] hsr_slave_0: entered promiscuous mode [ 997.845770][T31275] hsr_slave_1: entered promiscuous mode [ 997.858890][T31275] debugfs: 'hsr0' already exists in 'hsr' [ 997.863580][T31376] netlink: 'syz.2.6633': attribute type 3 has an invalid length. [ 997.865115][T31275] Cannot create hsr debugfs directory [ 997.940181][T31379] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6634'. [ 998.493932][T31383] x_tables: duplicate underflow at hook 1 [ 998.788615][T31394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6638'. [ 999.087449][T31275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.164563][T31404] wg1 speed is unknown, defaulting to 1000 [ 999.171971][ T5830] Bluetooth: hci1: command tx timeout [ 999.220404][T31412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6643'. [ 999.231290][T31275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.352863][T31275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.503798][T31275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.532219][T31414] wg1 speed is unknown, defaulting to 1000 [ 999.828462][T31275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 999.898452][T31430] netlink: 'syz.0.6647': attribute type 1 has an invalid length. [ 999.936771][T31430] netlink: 'syz.0.6647': attribute type 2 has an invalid length. [ 1000.007423][T31275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1000.023078][T31433] netlink: 'syz.0.6647': attribute type 1 has an invalid length. [ 1000.056449][T31433] netlink: 'syz.0.6647': attribute type 2 has an invalid length. [ 1000.130116][T31404] lo speed is unknown, defaulting to 1000 [ 1000.130456][T31275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1000.177512][T31275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1000.502734][T31275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.527810][T31414] lo speed is unknown, defaulting to 1000 [ 1000.560364][T31275] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.741678][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.748886][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.806549][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.813714][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.237331][ T5830] Bluetooth: hci1: command tx timeout [ 1001.315639][ T5923] lo speed is unknown, defaulting to 1000 [ 1001.323301][T22227] lo speed is unknown, defaulting to 1000 [ 1001.547303][T31275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.675865][T31464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6654'. [ 1001.720188][T31275] veth0_vlan: entered promiscuous mode [ 1001.770271][T31275] veth1_vlan: entered promiscuous mode [ 1001.847563][T31473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6656'. [ 1001.920703][T31473] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1001.938732][T31473] bond4 (unregistering): Released all slaves [ 1002.091977][T31275] veth0_macvtap: entered promiscuous mode [ 1002.111712][T31275] veth1_macvtap: entered promiscuous mode [ 1002.173565][T31275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.204339][T31275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.229400][T31484] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6658'. [ 1002.273732][T31481] wg1 speed is unknown, defaulting to 1000 [ 1002.294709][T31489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6660'. [ 1002.324228][T24766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.339605][T24766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.355384][T24766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.370288][T24766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.527022][T31497] netlink: 'syz.5.6662': attribute type 31 has an invalid length. [ 1002.596538][T24766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.619558][T24766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.697081][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.708100][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.837507][T31505] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1002.859114][T31514] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6666'. [ 1002.888799][T31514] bridge0: port 3(macsec0) entered disabled state [ 1002.895604][T31514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.903032][T31514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.265133][T31525] bond4: option arp_validate: invalid value (18446744073491447809) [ 1003.266670][T31533] netlink: 'syz.1.6670': attribute type 1 has an invalid length. [ 1003.291374][T31525] bond4 (unregistering): Released all slaves [ 1003.314714][T31533] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.6670'. [ 1003.324599][ T5830] Bluetooth: hci1: command tx timeout [ 1003.333975][T31481] lo speed is unknown, defaulting to 1000 [ 1003.770933][T31548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6673'. [ 1004.018497][T31551] netlink: 'syz.0.6676': attribute type 13 has an invalid length. [ 1004.027362][T31551] netlink: 'syz.0.6676': attribute type 17 has an invalid length. [ 1004.152243][T31542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.191169][T31542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.465610][T31551] bridge0: port 3(macsec0) entered blocking state [ 1004.472226][T31551] bridge0: port 3(macsec0) entered forwarding state [ 1004.479192][T31551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.486456][T31551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.493968][T31551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.501365][T31551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.537895][T31551] bridge0: port 4(dummy0) entered blocking state [ 1004.544760][T31551] bridge0: port 4(dummy0) entered forwarding state [ 1004.559644][T31551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1004.645807][T31542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.663905][T31542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.762024][T31542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.776763][T31542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.876758][T31542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1004.933262][T31581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6681'. [ 1004.942505][T31542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.100394][T24775] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.109837][T24775] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.130977][T31586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6684'. [ 1005.140799][T31586] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1005.157106][T24775] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.165319][T24775] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.204688][T24775] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.213690][T24775] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.236997][ T5830] Bluetooth: hci4: command 0x041b tx timeout [ 1005.249576][T24761] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.261691][T24761] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.295581][T31588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6685'. [ 1005.629878][T31604] ip6gretap1: entered promiscuous mode [ 1005.823404][T31610] wg1 speed is unknown, defaulting to 1000 [ 1005.911345][T31634] netlink: 'syz.2.6695': attribute type 3 has an invalid length. [ 1006.070535][T31642] netlink: 'syz.3.6700': attribute type 61 has an invalid length. [ 1006.149334][T31644] wg1 speed is unknown, defaulting to 1000 [ 1006.213994][T31642] wg1 speed is unknown, defaulting to 1000 [ 1006.602080][T31610] lo speed is unknown, defaulting to 1000 [ 1006.903566][T31658] __nla_validate_parse: 2 callbacks suppressed [ 1006.903584][T31658] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6704'. [ 1007.169343][T31670] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6707'. [ 1007.388607][T31678] syzkaller1: entered promiscuous mode [ 1007.394117][T31678] syzkaller1: entered allmulticast mode [ 1007.564937][T31642] lo speed is unknown, defaulting to 1000 [ 1007.621407][T31644] lo speed is unknown, defaulting to 1000 [ 1008.048238][T31699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6718'. [ 1008.089854][T31699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6718'. [ 1008.379423][T31706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6719'. [ 1008.550858][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405703 [ 1008.607034][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405702 [ 1008.661066][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405701 [ 1008.678035][T31720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1008.710312][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405700 [ 1008.752916][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405699 [ 1008.766237][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405698 [ 1008.792410][T31724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6723'. [ 1008.813407][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405697 [ 1008.843069][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405696 [ 1008.936547][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405695 [ 1008.945019][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405694 [ 1008.992709][T31731] netlink: 'syz.1.6724': attribute type 30 has an invalid length. [ 1009.016113][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405693 [ 1009.083647][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405692 [ 1009.096120][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405691 [ 1009.114538][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405690 [ 1009.129556][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405689 [ 1009.153647][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405688 [ 1009.174618][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405687 [ 1009.193900][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405686 [ 1009.219284][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405685 [ 1009.254175][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405684 [ 1009.265277][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405683 [ 1009.274198][T31710] tipc: Failed to remove unknown binding: 66,0,0/0:4041405681/4041405682 [ 1009.352280][T31744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6728'. [ 1009.365477][T31744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6728'. [ 1009.633511][T31762] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6731'. [ 1009.668546][T31762] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6731'. [ 1009.695412][T31761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1009.848708][T24770] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1009.892314][T31778] x_tables: unsorted underflow at hook 1 [ 1010.074076][T31784] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1010.793882][T31802] pimreg: entered allmulticast mode [ 1010.988387][T31814] hsr_slave_0: left promiscuous mode [ 1011.010607][T31814] hsr_slave_1: left promiscuous mode [ 1011.087645][T31818] veth0: entered promiscuous mode [ 1011.155724][T31819] veth0: left promiscuous mode [ 1011.440235][T31843] siw: device registration error -23 [ 1011.780595][T31858] syzkaller0: entered promiscuous mode [ 1011.788171][T31858] syzkaller0: entered allmulticast mode [ 1011.872267][T31864] netlink: 'syz.1.6760': attribute type 10 has an invalid length. [ 1011.886260][T31864] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1011.893422][T31864] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.919545][T31864] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1012.051082][T31872] __nla_validate_parse: 8 callbacks suppressed [ 1012.051100][T31872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6763'. [ 1012.325973][T31891] syz_tun: entered promiscuous mode [ 1012.336111][T31891] syz_tun: refused to change device tx_queue_len [ 1012.343564][T31891] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1012.455029][T31900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6772'. [ 1012.465518][T31900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6772'. [ 1012.524533][T31906] tipc: Invalid UDP bearer configuration [ 1012.524584][T31906] tipc: Enabling of bearer rejected, failed to enable media [ 1012.692097][T31920] netlink: 'syz.2.6776': attribute type 1 has an invalid length. [ 1012.712778][T31920] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6776'. [ 1012.734330][T31920] syzkaller1: entered promiscuous mode [ 1012.742337][T31920] syzkaller1: entered allmulticast mode [ 1012.768164][T31924] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6778'. [ 1012.781660][T31924] netlink: 7 bytes leftover after parsing attributes in process `syz.0.6778'. [ 1012.829423][T31924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6778'. [ 1012.865021][T31924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6778'. [ 1012.921138][T31930] xt_cluster: node mask cannot exceed total number of nodes [ 1012.964389][T31924] bond4: Unable to set down delay as MII monitoring is disabled [ 1013.010381][T31924] bond4 (unregistering): Released all slaves [ 1013.106125][T31933] wg1 speed is unknown, defaulting to 1000 [ 1013.306270][T31940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1013.463710][T31939] wg1 speed is unknown, defaulting to 1000 [ 1013.532913][T31946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6785'. [ 1013.564435][T31946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6785'. [ 1013.946104][T31937] netlink: 'syz.2.6782': attribute type 4 has an invalid length. [ 1014.067209][T31933] lo speed is unknown, defaulting to 1000 [ 1014.524545][T31939] lo speed is unknown, defaulting to 1000 [ 1015.788235][T32008] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1015.828670][T32002] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1016.087253][T32024] IPVS: set_ctl: invalid protocol: 33 172.20.20.20:20001 [ 1016.137116][T32019] syzkaller0: entered promiscuous mode [ 1016.146688][T32019] syzkaller0: entered allmulticast mode [ 1016.229739][T32019] wg1 speed is unknown, defaulting to 1000 [ 1016.273743][T32028] bond5: entered promiscuous mode [ 1016.311877][T32030] macvlan4: entered promiscuous mode [ 1016.327077][T32030] macvlan4: entered allmulticast mode [ 1016.341403][T32030] bond5: (slave macvlan4): Opening slave failed [ 1016.457355][T32035] netlink: 'syz.0.6807': attribute type 36 has an invalid length. [ 1016.919687][T32019] lo speed is unknown, defaulting to 1000 [ 1020.597157][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 1072.734033][T32055] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1072.777746][ T5910] IPVS: starting estimator thread 0... [ 1072.803478][T32063] __nla_validate_parse: 5 callbacks suppressed [ 1072.803497][T32063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6811'. [ 1072.804616][T32055] bond8: (slave ip6gretap2): making interface the new active one [ 1072.828820][T32055] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1072.876488][T32065] IPVS: using max 31 ests per chain, 74400 per kthread [ 1072.881944][T32063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.981614][T32075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6814'. [ 1073.100751][T32063] bridge_slave_1 (unregistering): left allmulticast mode [ 1073.110129][T32063] bridge_slave_1 (unregistering): left promiscuous mode [ 1073.117663][T32063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.212346][T32079] wg1 speed is unknown, defaulting to 1000 [ 1073.599258][T32079] lo speed is unknown, defaulting to 1000 [ 1073.842773][T32106] bridge0: port 4(dummy0) entered disabled state [ 1073.880259][T32110] netlink: 'syz.0.6825': attribute type 16 has an invalid length. [ 1073.880824][T32106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.889693][T32110] netlink: 'syz.0.6825': attribute type 17 has an invalid length. [ 1073.918314][T32106] bridge0: port 3(macsec0) entered disabled state [ 1073.996200][T32110] bridge0: port 4(dummy0) entered blocking state [ 1074.002723][T32110] bridge0: port 4(dummy0) entered forwarding state [ 1074.012781][T32110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1074.254548][T32119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6831'. [ 1074.303491][T32122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6830'. [ 1074.469194][T32130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6830'. [ 1074.483733][T32131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6832'. [ 1074.558762][T32127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6829'. [ 1074.622878][T32131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1074.768214][T32133] wg1 speed is unknown, defaulting to 1000 [ 1075.114237][T32151] syzkaller0: entered promiscuous mode [ 1075.120856][T32151] syzkaller0: entered allmulticast mode [ 1075.173995][T32160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6840'. [ 1075.380401][T32166] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6842'. [ 1075.411237][T32166] ksmbd: Unknown IPC event: 1, ignore. [ 1075.553448][T32133] lo speed is unknown, defaulting to 1000 [ 1075.622138][T32172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6844'. [ 1075.634312][T32170] wg1 speed is unknown, defaulting to 1000 [ 1075.835364][T32175] bridge9: entered promiscuous mode [ 1075.845703][T32175] bridge9: entered allmulticast mode [ 1075.868418][T32188] netlink: 'syz.2.6845': attribute type 11 has an invalid length. [ 1075.876285][T32188] netlink: 'syz.2.6845': attribute type 11 has an invalid length. [ 1076.301265][T32202] wg1 speed is unknown, defaulting to 1000 [ 1076.817215][T32229] nbd: nbd5 already in use [ 1076.820493][T32170] lo speed is unknown, defaulting to 1000 [ 1076.828769][T32229] block nbd5: NBD_DISCONNECT [ 1076.833833][T32229] block nbd5: Send disconnect failed -104 [ 1076.842761][T32229] block nbd5: shutting down sockets [ 1077.035946][T10755] bridge_slave_1: left allmulticast mode [ 1077.051037][T10755] bridge_slave_1: left promiscuous mode [ 1077.082265][T10755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.153435][T10755] bridge_slave_0: left allmulticast mode [ 1077.166718][T10755] bridge_slave_0: left promiscuous mode [ 1077.182780][T10755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.072363][T32255] __nla_validate_parse: 5 callbacks suppressed [ 1078.072381][T32255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6861'. [ 1078.123624][T32256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6861'. [ 1078.133824][T10755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.150060][T10755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.167820][T10755] bond0 (unregistering): Released all slaves [ 1078.194090][T32202] lo speed is unknown, defaulting to 1000 [ 1078.290205][T10755] tipc: Left network mode [ 1078.802855][T32263] tipc: Enabled bearer , priority 0 [ 1078.830614][T32263] syzkaller0: entered promiscuous mode [ 1078.836130][T32263] syzkaller0: entered allmulticast mode [ 1079.097237][T32271] tipc: Resetting bearer [ 1079.137572][T32262] tipc: Resetting bearer [ 1079.200084][T32262] tipc: Disabling bearer [ 1079.685665][T32282] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6869'. [ 1080.185383][T10755] hsr_slave_0: left promiscuous mode [ 1080.223240][T10755] hsr_slave_1: left promiscuous mode [ 1080.247668][T10755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.255156][T10755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.352603][T10755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.387269][T10755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.471627][T10755] veth1_macvtap: left promiscuous mode [ 1080.489327][T10755] veth0_macvtap: left promiscuous mode [ 1080.494959][T10755] veth1_vlan: left promiscuous mode [ 1080.501044][T10755] veth0_vlan: left promiscuous mode [ 1081.309538][T10755] team0 (unregistering): Port device team_slave_1 removed [ 1081.353728][T10755] team0 (unregistering): Port device team_slave_0 removed [ 1081.886035][T32304] wg1 speed is unknown, defaulting to 1000 [ 1082.105720][T32315] wg1 speed is unknown, defaulting to 1000 [ 1082.904781][T32304] lo speed is unknown, defaulting to 1000 [ 1082.971834][T32337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6886'. [ 1082.995204][T32334] wg1 speed is unknown, defaulting to 1000 [ 1083.507458][T32349] netlink: del zone limit has 4 unknown bytes [ 1083.823108][T32334] lo speed is unknown, defaulting to 1000 [ 1083.844027][T32315] lo speed is unknown, defaulting to 1000 [ 1083.938451][T32374] No such timeout policy "syz1" [ 1084.316770][T32383] bridge0: port 3(vlan2) entered disabled state [ 1084.350185][T32383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.357903][T32383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.484905][T32383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.503624][T32383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.650026][T32386] pimreg: tun_chr_ioctl cmd 2147767506 [ 1084.663601][T32392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1084.681041][T24770] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.707524][T24770] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.728091][T24770] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.743517][T24770] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.823447][T24770] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.832195][T24770] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.846452][T24770] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.859172][T24770] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.917218][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1085.068032][T32402] netlink: 'syz.2.6901': attribute type 1 has an invalid length. [ 1085.242630][T32406] bond6: entered promiscuous mode [ 1085.276551][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1085.295835][T32406] bond6: entered allmulticast mode [ 1085.328532][T32406] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1085.451587][T32402] bridge10: entered promiscuous mode [ 1085.485516][T10758] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1085.520973][T32402] bridge10: entered allmulticast mode [ 1085.535500][T32402] bond6: (slave bridge10): Enslaving as an active interface with an up link [ 1085.545259][T32409] syzkaller1: entered promiscuous mode [ 1085.557723][T32409] syzkaller1: entered allmulticast mode [ 1085.589284][T32419] 8021q: VLANs not supported on caif0 [ 1085.636855][T10758] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1085.684587][T32422] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6905'. [ 1085.694708][T32422] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6905'. [ 1085.739439][T32422] netlink: 'syz.2.6905': attribute type 6 has an invalid length. [ 1085.779545][T32422] netlink: 'syz.2.6905': attribute type 5 has an invalid length. [ 1085.816153][T32427] netlink: 'syz.2.6905': attribute type 4 has an invalid length. [ 1085.821669][T32422] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6905'. [ 1085.840713][T32431] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6908'. [ 1085.851981][T32430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6907'. [ 1085.861193][T32430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6907'. [ 1085.873136][T32431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6908'. [ 1085.897536][T32437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6909'. [ 1086.002131][T32423] netlink: 'syz.2.6905': attribute type 4 has an invalid length. [ 1086.027979][T32440] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1086.043583][T32440] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1086.065754][T32446] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6910'. [ 1086.077945][T32446] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6910'. [ 1086.821487][T32489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1086.849900][T32483] pim6reg1: entered promiscuous mode [ 1086.863550][T32483] pim6reg1: entered allmulticast mode [ 1087.085492][T32497] netlink: 'syz.5.6922': attribute type 1 has an invalid length. [ 1087.157961][T29744] Bluetooth: hci0: command 0x041b tx timeout [ 1087.757686][T32499] wg1 speed is unknown, defaulting to 1000 [ 1087.793235][T32524] x_tables: duplicate underflow at hook 1 [ 1088.508661][T32499] lo speed is unknown, defaulting to 1000 [ 1088.754132][T32555] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1088.789849][T32554] netlink: 'syz.2.6937': attribute type 8 has an invalid length. [ 1088.827804][T32558] bond1: Removing last ns target with arp_interval on [ 1088.888418][T32555] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.015004][T32555] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.138399][T32571] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1089.227083][T32555] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.427930][ T30] audit: type=1804 audit(1768061014.163:15): pid=32585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6947" name="/newroot/248/memory.events" dev="tmpfs" ino=1290 res=1 errno=0 [ 1089.472160][ T30] audit: type=1800 audit(1768061014.163:16): pid=32585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6947" name="memory.events" dev="tmpfs" ino=1290 res=0 errno=0 [ 1089.501239][T32586] 0{X: renamed from gretap0 (while UP) [ 1089.525211][T32586] 0{X: entered allmulticast mode [ 1089.532704][T32586] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1089.579166][T24763] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.595061][T32589] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1089.640829][T10751] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.671311][T10751] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.711987][T32555] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.848189][T32555] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1089.942513][T32555] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.011310][T32654] bond2: Removing last arp target with arp_interval on [ 1091.023515][T32654] bond2: entered promiscuous mode [ 1091.028967][T32654] bond2: entered allmulticast mode [ 1091.038058][T32654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1091.133101][T32664] syzkaller0: entered promiscuous mode [ 1091.136837][T32667] netlink: 'syz.1.6967': attribute type 1 has an invalid length. [ 1091.146518][T32664] syzkaller0: entered allmulticast mode [ 1091.205326][T32672] __nla_validate_parse: 10 callbacks suppressed [ 1091.205346][T32672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6965'. [ 1091.261605][T32672] dummy0: left allmulticast mode [ 1091.276592][T32672] dummy0: left promiscuous mode [ 1091.298033][T32672] bridge0: port 4(dummy0) entered disabled state [ 1091.310309][T32672] macsec0: left allmulticast mode [ 1091.315374][T32672] veth1_macvtap: left allmulticast mode [ 1091.333200][T32672] macsec0: left promiscuous mode [ 1091.345731][T32672] bridge0: port 3(macsec0) entered disabled state [ 1091.355663][T32672] bridge_slave_0: left allmulticast mode [ 1091.361785][T32672] bridge_slave_0: left promiscuous mode [ 1091.369062][T32672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.724268][T32683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6972'. [ 1091.735452][T32678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.735736][T32683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6972'. [ 1091.781461][T32687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6970'. [ 1091.892669][T32690] tipc: Enabled bearer , priority 0 [ 1091.902392][T32692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.911593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.958750][T32678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.983899][T32693] syzkaller0: entered promiscuous mode [ 1091.995831][T32693] syzkaller0: entered allmulticast mode [ 1092.118013][T32678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.134204][T32700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6976'. [ 1092.160470][T32693] tipc: Resetting bearer [ 1092.216994][T32689] tipc: Resetting bearer [ 1092.223872][ T24] IPVS: starting estimator thread 0... [ 1092.240526][T32702] sctp: [Deprecated]: syz.5.6974 (pid 32702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1092.240526][T32702] Use struct sctp_sack_info instead [ 1092.258879][T32689] tipc: Disabling bearer [ 1092.264750][T32698] netlink: 'syz.0.6975': attribute type 9 has an invalid length. [ 1092.281861][T32698] netlink: 'syz.0.6975': attribute type 6 has an invalid length. [ 1092.327049][T32705] IPVS: using max 38 ests per chain, 91200 per kthread [ 1092.422145][T32678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.712236][T32717] netlink: 'syz.0.6979': attribute type 10 has an invalid length. [ 1092.726261][T32704] wg1 speed is unknown, defaulting to 1000 [ 1092.811708][T32719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6978'. [ 1093.035021][T32713] wg1 speed is unknown, defaulting to 1000 [ 1093.041422][T24770] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.051679][T32714] wg1 speed is unknown, defaulting to 1000 [ 1093.061787][T24770] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.087152][T24773] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.154248][T24770] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.181830][T32728] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6981'. [ 1093.375724][T32732] wg1 speed is unknown, defaulting to 1000 [ 1093.575172][T32741] wg1 speed is unknown, defaulting to 1000 [ 1093.739698][T32743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.242743][T32704] lo speed is unknown, defaulting to 1000 [ 1094.364556][ T306] wg1 speed is unknown, defaulting to 1000 [ 1095.289158][T32713] lo speed is unknown, defaulting to 1000 [ 1096.312899][ T333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6999'. [ 1096.317153][T32741] lo speed is unknown, defaulting to 1000 [ 1096.353376][ T333] gretap2: entered promiscuous mode [ 1096.397469][T32732] lo speed is unknown, defaulting to 1000 [ 1096.404479][ T333] x_tables: duplicate underflow at hook 1 [ 1096.480230][T32714] lo speed is unknown, defaulting to 1000 [ 1096.596857][ T5830] Bluetooth: hci1: command tx timeout [ 1096.688813][ T306] lo speed is unknown, defaulting to 1000 [ 1098.481352][ T367] wg1 speed is unknown, defaulting to 1000 [ 1098.981306][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7008'. [ 1098.992441][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7008'. [ 1099.087570][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7008'. [ 1099.132261][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7008'. [ 1099.186068][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7008'. [ 1099.479676][ T388] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7011'. [ 1099.671580][ T367] lo speed is unknown, defaulting to 1000 [ 1099.909770][ T403] wg1 speed is unknown, defaulting to 1000 [ 1100.340161][ T414] netlink: 'syz.5.7018': attribute type 2 has an invalid length. [ 1100.360193][ T415] netlink: 'syz.5.7018': attribute type 2 has an invalid length. [ 1100.422974][ T403] lo speed is unknown, defaulting to 1000 [ 1100.432840][ T411] wg1 speed is unknown, defaulting to 1000 [ 1100.835882][ T425] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7019'. [ 1101.258619][ T429] netlink: 'syz.1.7020': attribute type 10 has an invalid length. [ 1101.282042][ T429] team0: Port device syz_tun added [ 1101.524528][ T437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7023'. [ 1101.672397][ T437] nbd: socks must be embedded in a SOCK_ITEM attr [ 1101.791165][ T411] lo speed is unknown, defaulting to 1000 [ 1102.452574][ T457] netlink: 'syz.5.7026': attribute type 21 has an invalid length. [ 1102.463383][ T457] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7026'. [ 1102.474338][ T457] netlink: 'syz.5.7026': attribute type 4 has an invalid length. [ 1102.497846][ T457] netlink: 'syz.5.7026': attribute type 5 has an invalid length. [ 1102.506663][ T457] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7026'. [ 1102.867045][ T472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1102.878499][ T472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1103.126382][ T482] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1103.146492][ T482] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1103.164494][ T482] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1103.219553][ T488] m1Ie5n: entered promiscuous mode [ 1103.547209][ T502] tipc: Failed to remove unknown binding: 66,1,1/0:4166440968/4166440970 [ 1103.734521][ T502] tipc: Failed to remove unknown binding: 66,1,1/0:4166440968/4166440970 [ 1103.766449][ T502] tipc: Failed to remove unknown binding: 66,1,1/0:4166440968/4166440970 [ 1103.922279][ T505] bond1: option arp_validate: invalid value (18446744073491447809) [ 1103.934770][ T505] bond1 (unregistering): Released all slaves [ 1104.107638][ T512] tipc: Enabling of bearer rejected, failed to enable media [ 1104.156857][ T517] x_tables: duplicate underflow at hook 2 [ 1105.155194][ T556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7050'. [ 1105.288187][ T556] bond9: entered promiscuous mode [ 1105.308474][ T556] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1105.390761][ T562] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1105.406207][ T562] bond10: entered promiscuous mode [ 1105.414562][ T562] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1105.645491][ T578] tipc: Enabled bearer , priority 0 [ 1105.664364][ T578] syzkaller0: entered promiscuous mode [ 1105.680628][ T578] syzkaller0: entered allmulticast mode [ 1105.732053][ T578] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7056'. [ 1105.756647][ T578] tipc: Resetting bearer [ 1105.778756][ T577] tipc: Resetting bearer [ 1105.883733][ T577] tipc: Disabling bearer [ 1105.902464][ T592] netlink: zone id is out of range [ 1105.908351][ T592] netlink: zone id is out of range [ 1105.913619][ T592] netlink: get zone limit has 4 unknown bytes [ 1106.086692][T10753] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x9c [ 1106.120012][ T613] tipc: Enabled bearer , priority 0 [ 1106.129344][ T613] syzkaller0: entered promiscuous mode [ 1106.134995][ T613] syzkaller0: entered allmulticast mode [ 1106.232258][ T613] tipc: Resetting bearer [ 1106.269336][ T609] tipc: Resetting bearer [ 1106.340227][ T609] tipc: Disabling bearer [ 1106.351419][ T633] sctp: [Deprecated]: syz.3.7070 (pid 633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1106.351419][ T633] Use struct sctp_sack_info instead [ 1106.415829][ T623] wg1 speed is unknown, defaulting to 1000 [ 1107.171426][ T660] __nla_validate_parse: 1 callbacks suppressed [ 1107.171446][ T660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7077'. [ 1107.331113][ T665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7079'. [ 1107.422967][T24766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.431402][T24766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.453901][ T623] lo speed is unknown, defaulting to 1000 [ 1107.532461][ T667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7079'. [ 1107.809324][ T679] syzkaller1: entered promiscuous mode [ 1107.819414][ T679] syzkaller1: entered allmulticast mode [ 1107.831381][ T679] netlink: 'syz.2.7084': attribute type 2 has an invalid length. [ 1107.858383][ T679] : entered promiscuous mode [ 1108.364595][ T703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7092'. [ 1108.365923][ T699] wg1 speed is unknown, defaulting to 1000 [ 1108.375902][ T704] tipc: Enabling of bearer rejected, failed to enable media [ 1108.389242][ T703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7092'. [ 1108.884110][ T721] netlink: 'syz.5.7097': attribute type 1 has an invalid length. [ 1108.942971][ T717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7097'. [ 1108.958393][ T717] x_tables: duplicate underflow at hook 1 [ 1108.984818][ T699] lo speed is unknown, defaulting to 1000 [ 1109.194690][ T738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7103'. [ 1109.205099][ T738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7103'. [ 1109.271243][ T737] tipc: Enabled bearer , priority 0 [ 1109.279313][ T737] syzkaller0: entered promiscuous mode [ 1109.284890][ T737] syzkaller0: entered allmulticast mode [ 1109.305831][ T737] tipc: Resetting bearer [ 1109.326430][ T742] xt_hashlimit: max too large, truncated to 1048576 [ 1109.406993][ T736] tipc: Resetting bearer [ 1109.432204][ T736] tipc: Disabling bearer [ 1109.802347][ T754] netlink: 25 bytes leftover after parsing attributes in process `syz.5.7109'. [ 1109.835541][ T754] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7109'. [ 1110.238175][ T778] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1110.249476][ T778] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1110.260847][ T778] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1110.275731][ T787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1110.621803][ T802] bond0: entered promiscuous mode [ 1110.627262][ T802] bond_slave_0: entered promiscuous mode [ 1110.637087][ T802] bond_slave_1: entered promiscuous mode [ 1110.650675][ T802] batadv0: entered promiscuous mode [ 1110.663787][ T802] debugfs: 'hsr0' already exists in 'hsr' [ 1110.670479][ T802] Cannot create hsr debugfs directory [ 1110.693387][ T802] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1110.705618][ T802] bond0: left promiscuous mode [ 1110.711776][ T802] bond_slave_0: left promiscuous mode [ 1110.717677][ T802] bond_slave_1: left promiscuous mode [ 1110.724667][ T802] batadv0: left promiscuous mode [ 1110.797669][ T801] bond0: entered promiscuous mode [ 1110.802818][ T801] bond_slave_0: entered promiscuous mode [ 1110.820051][ T801] bond_slave_1: entered promiscuous mode [ 1110.827707][ T801] batadv0: entered promiscuous mode [ 1110.833895][ T801] debugfs: 'hsr0' already exists in 'hsr' [ 1110.841943][ T801] Cannot create hsr debugfs directory [ 1110.848397][ T801] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1110.863431][ T801] bond0: left promiscuous mode [ 1110.876242][ T801] bond_slave_0: left promiscuous mode [ 1110.883795][ T801] bond_slave_1: left promiscuous mode [ 1110.890858][ T801] batadv0: left promiscuous mode [ 1111.051102][ T820] IPVS: Scheduler module ip_vs_sip not found [ 1111.113324][ T824] ip6tnl1: entered allmulticast mode [ 1111.154686][ T831] netlink: 'syz.3.7134': attribute type 2 has an invalid length. [ 1111.448465][ T847] netlink: zone id is out of range [ 1111.453787][ T847] netlink: zone id is out of range [ 1111.459845][ T847] netlink: zone id is out of range [ 1111.465299][ T847] netlink: zone id is out of range [ 1111.471250][ T847] netlink: zone id is out of range [ 1111.478773][ T847] netlink: zone id is out of range [ 1111.484295][ T847] netlink: zone id is out of range [ 1111.489823][ T847] netlink: zone id is out of range [ 1111.495572][ T847] netlink: zone id is out of range [ 1111.501852][ T852] x_tables: unsorted entry at hook 1 [ 1111.501953][ T847] netlink: zone id is out of range [ 1111.519854][ T853] pimreg3: entered allmulticast mode [ 1111.545830][ T855] netlink: 'syz.2.7140': attribute type 1 has an invalid length. [ 1111.601340][ T855] netlink: 'syz.2.7140': attribute type 3 has an invalid length. [ 1111.626623][ T855] NCSI netlink: No device for ifindex 813332851 [ 1112.027263][ T870] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.133199][ T870] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.217689][ T870] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.327948][ T870] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.373396][ T887] netlink: 'syz.3.7153': attribute type 11 has an invalid length. [ 1112.383156][ T887] netlink: 'syz.3.7153': attribute type 4 has an invalid length. [ 1112.402860][ T887] netlink: 'syz.3.7153': attribute type 5 has an invalid length. [ 1112.411371][ T887] netlink: 'syz.3.7153': attribute type 6 has an invalid length. [ 1112.419331][ T887] __nla_validate_parse: 14 callbacks suppressed [ 1112.419349][ T887] netlink: 199748 bytes leftover after parsing attributes in process `syz.3.7153'. [ 1112.493468][T10751] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.551452][ T1158] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.573279][T10751] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.604254][T24773] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.907563][ T924] x_tables: duplicate underflow at hook 1 [ 1112.999046][ T932] netlink: 'syz.1.7164': attribute type 11 has an invalid length. [ 1113.007119][ T932] netlink: 'syz.1.7164': attribute type 11 has an invalid length. [ 1113.015032][ T932] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7164'. [ 1113.029683][ T945] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7165'. [ 1113.048697][ T932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.283552][ T965] netlink: 'syz.5.7169': attribute type 39 has an invalid length. [ 1113.310206][ T967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7170'. [ 1113.334527][ T968] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7169'. [ 1113.355334][ T967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7170'. [ 1113.385653][ T970] netlink: 'syz.2.7170': attribute type 3 has an invalid length. [ 1113.424707][ T970] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7170'. [ 1113.624214][ T981] netlink: 'syz.2.7173': attribute type 3 has an invalid length. [ 1113.632722][ T981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7173'. [ 1113.852617][ T1005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7179'. [ 1113.862251][ T1005] netlink: 'syz.2.7179': attribute type 12 has an invalid length. [ 1113.906963][T24758] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.916107][ T1005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7179'. [ 1113.925522][T24758] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.946516][ T1005] netlink: 'syz.2.7179': attribute type 12 has an invalid length. [ 1113.958942][T24758] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.972169][T24758] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1114.396283][ T1045] bond3: Removing last ns target with arp_interval on [ 1114.641520][ T1065] gretap0: entered promiscuous mode [ 1114.650460][ T1063] wg1 speed is unknown, defaulting to 1000 [ 1114.657581][ T1012] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1115.220197][T24761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.233499][T24761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.367520][ T1094] tipc: Enabled bearer , priority 0 [ 1115.374493][ T1093] tipc: Enabling of bearer rejected, already enabled [ 1115.384055][ T1094] syzkaller0: entered promiscuous mode [ 1115.391464][ T1094] syzkaller0: entered allmulticast mode [ 1115.434000][ T1094] tipc: Resetting bearer [ 1115.466819][ T1091] tipc: Resetting bearer [ 1115.522029][ T1099] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1115.550670][ T1091] tipc: Disabling bearer [ 1115.660521][ T1063] lo speed is unknown, defaulting to 1000 [ 1116.433626][ T1134] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)% ]3DL̥!!b.>nS#^' [ 1116.454181][ T1134] CPU: 1 UID: 0 PID: 1134 Comm: syz.0.7214 Not tainted syzkaller #0 PREEMPT(full) [ 1116.454212][ T1134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1116.454226][ T1134] Call Trace: [ 1116.454235][ T1134] [ 1116.454246][ T1134] dump_stack_lvl+0xe8/0x150 [ 1116.454280][ T1134] sysfs_warn_dup+0x8e/0xa0 [ 1116.454303][ T1134] sysfs_do_create_link_sd+0xc0/0x110 [ 1116.454328][ T1134] device_add_class_symlinks+0x1cf/0x240 [ 1116.454355][ T1134] device_add+0x475/0xb80 [ 1116.454381][ T1134] wiphy_register+0x1d2e/0x2d20 [ 1116.454430][ T1134] ? __pfx_wiphy_register+0x10/0x10 [ 1116.454460][ T1134] ? __pfx_netdev_run_todo+0x10/0x10 [ 1116.454489][ T1134] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1116.454522][ T1134] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1116.454551][ T1134] ieee80211_register_hw+0x34a7/0x4110 [ 1116.454576][ T1134] ? __lock_acquire+0x6b6/0x2cf0 [ 1116.454611][ T1134] ? ieee80211_register_hw+0x13f1/0x4110 [ 1116.454647][ T1134] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1116.454691][ T1134] ? __hrtimer_setup+0x181/0x200 [ 1116.454716][ T1134] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1116.454745][ T1134] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 1116.454801][ T1134] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1116.454821][ T1134] ? kstrndup+0xbf/0x160 [ 1116.454856][ T1134] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1116.454885][ T1134] ? __pfx___nla_validate_parse+0x10/0x10 [ 1116.454934][ T1134] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1116.454964][ T1134] ? rcu_is_watching+0x15/0xb0 [ 1116.454994][ T1134] ? __nla_parse+0x40/0x60 [ 1116.455023][ T1134] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1116.455055][ T1134] genl_family_rcv_msg_doit+0x215/0x300 [ 1116.455084][ T1134] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1116.455117][ T1134] ? bpf_lsm_capable+0x9/0x20 [ 1116.455139][ T1134] ? security_capable+0x7e/0x2e0 [ 1116.455170][ T1134] genl_rcv_msg+0x60e/0x790 [ 1116.455196][ T1134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1116.455215][ T1134] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1116.455251][ T1134] netlink_rcv_skb+0x208/0x470 [ 1116.455278][ T1134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1116.455300][ T1134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1116.455321][ T1134] ? genl_rcv+0x19/0x40 [ 1116.455355][ T1134] ? down_read+0x274/0x2e0 [ 1116.455378][ T1134] ? genl_rcv+0xd/0x40 [ 1116.455397][ T1134] genl_rcv+0x28/0x40 [ 1116.455412][ T1134] netlink_unicast+0x82f/0x9e0 [ 1116.455446][ T1134] ? __pfx_netlink_unicast+0x10/0x10 [ 1116.455468][ T1134] ? __alloc_skb+0x198/0x3a0 [ 1116.455488][ T1134] ? netlink_sendmsg+0x642/0xb30 [ 1116.455513][ T1134] ? skb_put+0x11b/0x210 [ 1116.455539][ T1134] netlink_sendmsg+0x805/0xb30 [ 1116.455573][ T1134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.455602][ T1134] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1116.455630][ T1134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1116.455647][ T1134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.455676][ T1134] __sock_sendmsg+0x21c/0x270 [ 1116.455709][ T1134] ____sys_sendmsg+0x505/0x820 [ 1116.455739][ T1134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1116.455774][ T1134] ? import_iovec+0x74/0xa0 [ 1116.455825][ T1134] ___sys_sendmsg+0x21f/0x2a0 [ 1116.455852][ T1134] ? __pfx____sys_sendmsg+0x10/0x10 [ 1116.455885][ T1134] ? futex_wake+0x4b2/0x560 [ 1116.455946][ T1134] ? __fget_files+0x2a/0x420 [ 1116.455972][ T1134] ? __fget_files+0x3a0/0x420 [ 1116.456009][ T1134] __x64_sys_sendmsg+0x19b/0x260 [ 1116.456038][ T1134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1116.456073][ T1134] ? rcu_is_watching+0x15/0xb0 [ 1116.456112][ T1134] do_syscall_64+0xec/0xf80 [ 1116.456134][ T1134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.456153][ T1134] ? trace_irq_disable+0x37/0x100 [ 1116.456178][ T1134] ? clear_bhb_loop+0x60/0xb0 [ 1116.456203][ T1134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.456223][ T1134] RIP: 0033:0x7fc2c618f749 [ 1116.456242][ T1134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.456260][ T1134] RSP: 002b:00007fc2c70d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1116.456283][ T1134] RAX: ffffffffffffffda RBX: 00007fc2c63e6090 RCX: 00007fc2c618f749 [ 1116.456304][ T1134] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b [ 1116.456317][ T1134] RBP: 00007fc2c6213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1116.456329][ T1134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1116.456341][ T1134] R13: 00007fc2c63e6128 R14: 00007fc2c63e6090 R15: 00007ffd30506188 [ 1116.456374][ T1134] [ 1116.976196][ T1137] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1117.100765][ T1142] batadv_slave_0: entered promiscuous mode [ 1117.578638][ T1170] bond11: option ad_user_port_key: invalid value (65535) [ 1117.596453][ T1170] bond11: option ad_user_port_key: allowed values 0 - 1023 [ 1117.619107][ T1170] bond11 (unregistering): Released all slaves [ 1118.345571][ T1236] x_tables: duplicate entry at hook 2 [ 1118.427170][ T1243] netlink: 'syz.5.7250': attribute type 39 has an invalid length. [ 1118.429334][ T1244] x9: renamed from bridge_slave_0 [ 1118.977822][ T1239] net_ratelimit: 79 callbacks suppressed [ 1118.977842][ T1239] Set syz1 is full, maxelem 6117 reached [ 1119.648324][ T1280] __nla_validate_parse: 12 callbacks suppressed [ 1119.648344][ T1280] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7258'. [ 1119.689896][ T1283] Bluetooth: MGMT ver 1.23 [ 1120.033872][ T1311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7268'. [ 1120.052772][ T1305] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7265'. [ 1120.054655][ T1311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7268'. [ 1120.093289][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.103758][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.130492][T24761] ------------[ cut here ]------------ [ 1120.136542][T24761] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1120.146428][T24761] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: kworker/u8:19/24761 [ 1120.157448][T24761] Modules linked in: [ 1120.161769][T24761] CPU: 1 UID: 0 PID: 24761 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 1120.171469][T24761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.181576][T24761] Workqueue: ipv6_addrconf addrconf_dad_work [ 1120.187684][T24761] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 1120.193955][T24761] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 1120.213644][T24761] RSP: 0018:ffffc9000e516438 EFLAGS: 00010246 [ 1120.219772][T24761] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1120.227804][T24761] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92e270 [ 1120.235695][ T1325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7273'. [ 1120.235797][T24761] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1120.252746][T24761] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8880a537d668 [ 1120.260773][T24761] R13: 0000000000000000 R14: ffffffff8f92e270 R15: ffff88808dfc3138 [ 1120.268809][T24761] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 1120.277793][T24761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1120.284391][T24761] CR2: 00007f1f30b91c50 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 1120.292457][T24761] Call Trace: [ 1120.295752][T24761] [ 1120.298757][T24761] rate_control_send_low+0x1a7/0x7b0 [ 1120.304069][T24761] rate_control_get_rate+0x20b/0x5d0 [ 1120.309420][T24761] ieee80211_tx_h_rate_ctrl+0xae0/0x1760 [ 1120.315101][T24761] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1120.321239][T24761] ? __skb_flow_dissect+0x408/0x68b0 [ 1120.326589][T24761] ? lock_acquire+0x107/0x340 [ 1120.331305][T24761] invoke_tx_handlers_late+0xba/0x18a0 [ 1120.336853][T24761] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 1120.342786][T24761] ieee80211_tx_dequeue+0x308e/0x4360 [ 1120.348275][T24761] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1120.354061][T24761] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 1120.360209][T24761] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 1120.366869][T24761] ? __local_bh_enable_ip+0xd0/0x130 [ 1120.372192][T24761] ieee80211_queue_skb+0x1a12/0x2190 [ 1120.377590][T24761] ieee80211_tx+0x297/0x460 [ 1120.382138][T24761] ? __pfx_ieee80211_tx+0x10/0x10 [ 1120.387259][T24761] ? ieee80211_xmit+0x315/0x400 [ 1120.392142][T24761] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 1120.398191][T24761] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 1120.404390][T24761] ? ipv6_mc_dad_complete+0x88/0x410 [ 1120.409752][T24761] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1120.416203][T24761] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1120.422521][T24761] ieee80211_subif_start_xmit+0xe0/0x510 [ 1120.428306][T24761] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1120.434589][T24761] ? __pfx_netif_skb_features+0x10/0x10 [ 1120.440231][T24761] dev_hard_start_xmit+0x2cd/0x800 [ 1120.445379][T24761] __dev_queue_xmit+0x149d/0x31c0 [ 1120.450479][T24761] ? __dev_queue_xmit+0x289/0x31c0 [ 1120.455625][T24761] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1120.461058][T24761] ? neigh_resolve_output+0x438/0x750 [ 1120.466502][T24761] ? eth_header+0x11b/0x200 [ 1120.471050][T24761] ? __asan_memcpy+0x40/0x70 [ 1120.475709][T24761] ? ip6_output+0x126/0x550 [ 1120.480286][T24761] ip6_output+0x340/0x550 [ 1120.484659][T24761] NF_HOOK+0x9e/0x380 [ 1120.488743][T24761] ? NF_HOOK+0x101/0x380 [ 1120.493018][T24761] ? __pfx_NF_HOOK+0x10/0x10 [ 1120.497677][T24761] ? __pfx_dst_output+0x10/0x10 [ 1120.502567][T24761] ? lockdep_hardirqs_on+0x7b/0x110 [ 1120.507828][T24761] ? __local_bh_enable_ip+0xd0/0x130 [ 1120.513138][T24761] ? icmp6_dst_alloc+0x3a5/0x420 [ 1120.518164][T24761] mld_sendpack+0x8d4/0xe60 [ 1120.522705][T24761] ? __asan_memcpy+0x40/0x70 [ 1120.527393][T24761] ? mld_sendpack+0x1e7/0xe60 [ 1120.532105][T24761] ? __pfx_mld_sendpack+0x10/0x10 [ 1120.537213][T24761] ? mld_send_initial_cr+0x352/0x550 [ 1120.542507][T24761] ipv6_mc_dad_complete+0x88/0x410 [ 1120.547664][T24761] addrconf_dad_completed+0x6d5/0xd60 [ 1120.553037][T24761] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 1120.558969][T24761] ? __local_bh_enable_ip+0xd0/0x130 [ 1120.564254][T24761] addrconf_dad_work+0xc36/0x14b0 [ 1120.569307][T24761] ? lock_acquire+0x107/0x340 [ 1120.573985][T24761] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1120.579480][T24761] ? process_scheduled_works+0x9ef/0x1770 [ 1120.585215][T24761] ? process_scheduled_works+0x9ef/0x1770 [ 1120.590987][T24761] ? process_scheduled_works+0x9ef/0x1770 [ 1120.596744][T24761] process_scheduled_works+0xad1/0x1770 [ 1120.602309][T24761] ? __pfx_process_scheduled_works+0x10/0x10 [ 1120.608352][T24761] ? do_raw_spin_lock+0x121/0x290 [ 1120.613573][T24761] worker_thread+0x8a0/0xda0 [ 1120.618212][T24761] kthread+0x711/0x8a0 [ 1120.622282][T24761] ? __pfx_worker_thread+0x10/0x10 [ 1120.627419][T24761] ? __pfx_kthread+0x10/0x10 [ 1120.632004][T24761] ? _raw_spin_unlock_irq+0x23/0x50 [ 1120.637229][T24761] ? __pfx_kthread+0x10/0x10 [ 1120.641817][T24761] ret_from_fork+0x510/0xa50 [ 1120.646445][T24761] ? __pfx_ret_from_fork+0x10/0x10 [ 1120.651561][T24761] ? __switch_to+0xc9e/0x1480 [ 1120.656237][T24761] ? __pfx_kthread+0x10/0x10 [ 1120.660901][T24761] ret_from_fork_asm+0x1a/0x30 [ 1120.665720][T24761] [ 1120.668784][T24761] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1120.676061][T24761] CPU: 1 UID: 0 PID: 24761 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 1120.685694][T24761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.695765][T24761] Workqueue: ipv6_addrconf addrconf_dad_work [ 1120.701770][T24761] Call Trace: [ 1120.705043][T24761] [ 1120.708052][T24761] vpanic+0x1e0/0x670 [ 1120.712030][T24761] panic+0xb9/0xc0 [ 1120.715750][T24761] ? __pfx_panic+0x10/0x10 [ 1120.720204][T24761] ? ret_from_fork_asm+0x1a/0x30 [ 1120.725169][T24761] __warn+0x317/0x4b0 [ 1120.729150][T24761] ? __rate_control_send_low+0x524/0x800 [ 1120.734780][T24761] ? __rate_control_send_low+0x524/0x800 [ 1120.740410][T24761] __report_bug+0x288/0x500 [ 1120.744921][T24761] ? __lock_acquire+0x6b6/0x2cf0 [ 1120.749864][T24761] ? __rate_control_send_low+0x524/0x800 [ 1120.755613][T24761] ? __pfx___report_bug+0x10/0x10 [ 1120.760666][T24761] ? __lock_acquire+0x6b6/0x2cf0 [ 1120.765615][T24761] report_bug_entry+0x19a/0x290 [ 1120.770477][T24761] ? __rate_control_send_low+0x5bb/0x800 [ 1120.776120][T24761] ? __rate_control_send_low+0x5c0/0x800 [ 1120.781760][T24761] handle_bug+0xca/0x200 [ 1120.786020][T24761] exc_invalid_op+0x1a/0x50 [ 1120.790580][T24761] asm_exc_invalid_op+0x1a/0x20 [ 1120.795433][T24761] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 1120.801779][T24761] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 1120.821570][T24761] RSP: 0018:ffffc9000e516438 EFLAGS: 00010246 [ 1120.827651][T24761] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1120.835621][T24761] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92e270 [ 1120.843679][T24761] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1120.851653][T24761] R10: 0000000000000004 R11: 0000000000000000 R12: ffff8880a537d668 [ 1120.859622][T24761] R13: 0000000000000000 R14: ffffffff8f92e270 R15: ffff88808dfc3138 [ 1120.867609][T24761] ? __rate_control_send_low+0x58d/0x800 [ 1120.873260][T24761] rate_control_send_low+0x1a7/0x7b0 [ 1120.878551][T24761] rate_control_get_rate+0x20b/0x5d0 [ 1120.883846][T24761] ieee80211_tx_h_rate_ctrl+0xae0/0x1760 [ 1120.889489][T24761] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1120.895642][T24761] ? __skb_flow_dissect+0x408/0x68b0 [ 1120.900942][T24761] ? lock_acquire+0x107/0x340 [ 1120.905627][T24761] invoke_tx_handlers_late+0xba/0x18a0 [ 1120.911095][T24761] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 1120.916992][T24761] ieee80211_tx_dequeue+0x308e/0x4360 [ 1120.922420][T24761] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 1120.928199][T24761] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 1120.934298][T24761] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 1120.940907][T24761] ? __local_bh_enable_ip+0xd0/0x130 [ 1120.946214][T24761] ieee80211_queue_skb+0x1a12/0x2190 [ 1120.951538][T24761] ieee80211_tx+0x297/0x460 [ 1120.956051][T24761] ? __pfx_ieee80211_tx+0x10/0x10 [ 1120.961098][T24761] ? ieee80211_xmit+0x315/0x400 [ 1120.965947][T24761] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 1120.971924][T24761] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 1120.978078][T24761] ? ipv6_mc_dad_complete+0x88/0x410 [ 1120.983361][T24761] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 1120.989771][T24761] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 1120.996009][T24761] ieee80211_subif_start_xmit+0xe0/0x510 [ 1121.001642][T24761] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 1121.007904][T24761] ? __pfx_netif_skb_features+0x10/0x10 [ 1121.013484][T24761] dev_hard_start_xmit+0x2cd/0x800 [ 1121.018627][T24761] __dev_queue_xmit+0x149d/0x31c0 [ 1121.023683][T24761] ? __dev_queue_xmit+0x289/0x31c0 [ 1121.028829][T24761] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1121.034213][T24761] ? neigh_resolve_output+0x438/0x750 [ 1121.039584][T24761] ? eth_header+0x11b/0x200 [ 1121.044091][T24761] ? __asan_memcpy+0x40/0x70 [ 1121.048704][T24761] ? ip6_output+0x126/0x550 [ 1121.053202][T24761] ip6_output+0x340/0x550 [ 1121.057532][T24761] NF_HOOK+0x9e/0x380 [ 1121.061516][T24761] ? NF_HOOK+0x101/0x380 [ 1121.065751][T24761] ? __pfx_NF_HOOK+0x10/0x10 [ 1121.070340][T24761] ? __pfx_dst_output+0x10/0x10 [ 1121.075184][T24761] ? lockdep_hardirqs_on+0x7b/0x110 [ 1121.080379][T24761] ? __local_bh_enable_ip+0xd0/0x130 [ 1121.085657][T24761] ? icmp6_dst_alloc+0x3a5/0x420 [ 1121.091037][T24761] mld_sendpack+0x8d4/0xe60 [ 1121.095626][T24761] ? __asan_memcpy+0x40/0x70 [ 1121.100233][T24761] ? mld_sendpack+0x1e7/0xe60 [ 1121.104916][T24761] ? __pfx_mld_sendpack+0x10/0x10 [ 1121.110122][T24761] ? mld_send_initial_cr+0x352/0x550 [ 1121.115405][T24761] ipv6_mc_dad_complete+0x88/0x410 [ 1121.120530][T24761] addrconf_dad_completed+0x6d5/0xd60 [ 1121.125903][T24761] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 1121.131835][T24761] ? __local_bh_enable_ip+0xd0/0x130 [ 1121.137146][T24761] addrconf_dad_work+0xc36/0x14b0 [ 1121.142178][T24761] ? lock_acquire+0x107/0x340 [ 1121.146864][T24761] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1121.152330][T24761] ? process_scheduled_works+0x9ef/0x1770 [ 1121.158154][T24761] ? process_scheduled_works+0x9ef/0x1770 [ 1121.163885][T24761] ? process_scheduled_works+0x9ef/0x1770 [ 1121.169612][T24761] process_scheduled_works+0xad1/0x1770 [ 1121.175186][T24761] ? __pfx_process_scheduled_works+0x10/0x10 [ 1121.181156][T24761] ? do_raw_spin_lock+0x121/0x290 [ 1121.186199][T24761] worker_thread+0x8a0/0xda0 [ 1121.190811][T24761] kthread+0x711/0x8a0 [ 1121.194879][T24761] ? __pfx_worker_thread+0x10/0x10 [ 1121.199985][T24761] ? __pfx_kthread+0x10/0x10 [ 1121.204574][T24761] ? _raw_spin_unlock_irq+0x23/0x50 [ 1121.209770][T24761] ? __pfx_kthread+0x10/0x10 [ 1121.214357][T24761] ret_from_fork+0x510/0xa50 [ 1121.218951][T24761] ? __pfx_ret_from_fork+0x10/0x10 [ 1121.224050][T24761] ? __switch_to+0xc9e/0x1480 [ 1121.228745][T24761] ? __pfx_kthread+0x10/0x10 [ 1121.233350][T24761] ret_from_fork_asm+0x1a/0x30 [ 1121.238132][T24761] [ 1121.241492][T24761] Kernel Offset: disabled [ 1121.245804][T24761] Rebooting in 86400 seconds..