last executing test programs: 2.691535895s ago: executing program 1 (id=8226): r0 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x0, 0x1, 0x9, 0x8001, 0x0, 0x0, 0x5}, 0x1c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b74b4fe23a15739ce574efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57ddb4b68dc45942824251d7d17b5191584bcd400e40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb3e1d772595c58e918d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000002) (async) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) sendfile(r4, r5, &(0x7f0000000300)=0x6, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}]}]}, 0x30}}, 0x0) 2.581320747s ago: executing program 1 (id=8229): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async, rerun: 64) unshare(0x20000400) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pread64(r1, 0x0, 0x0, 0x9) r2 = socket(0x8, 0x3, 0xffffffff) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x1}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f00000004c0)="6b29d4ac1327a4c67c32ae3236acc5251b8d357e6e9823de50a2cf56136dede816b7c9987ead0152afd1dc9dc6f47446121ac74f872cab7eaa7c5a1915b69c49bcfdbb6e6ca9b0693fb0d9ddd902b94cfefed91c0b00c892b831e63d4dad97e0b7b0500bb34986c53b259dab898c312821fbc23b25e5f33333792feec4a55d159fda63d6d054abc87c20ab8aa12b00bff9215c5aa1c1df6026165e0b7a2db877da005b00000000000000000000000000000000000000000000039feb89e434658530b5ea6789da7bb630cc53ec035423f8f920859ba51ab1e022be840000000000000000000000000042cdaa237c0a8045c7951f1d42ab43376d16d0699f5146e0d03fad3254b2a2dfb101b31b2214ac06a194e5b1df4bbfb0b20943883b52447c5d138ae6fb63c88b5cd8f71208699b199fbee98645abcd4c904c06e4736e18d47656e162cb18f09b1c") (async) sendto$inet6(r4, 0x0, 0x0, 0x40805, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (rerun: 32) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000200), 0x4) (async) listen(r8, 0xfff) 2.358987177s ago: executing program 2 (id=8230): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008911}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0xff, 0xfffc}, &(0x7f00000002c0)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000340)={&(0x7f0000000140)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="4c51c21f3d980240237e45490c7da41d9a9536c59107947b494b19c6a6441c1d99959c61ae3bd5811a869a749387b433bebd9b2ba81ae608c519c0ac4b8cb5a2e2bd5c328d6b67edba76248fcb6e454a1b141630cc63217f126ff1451a0ac8189638dae6abc453155b712c0286a0eb1bd2f775b6ecf044fc8b657eecef6f4a868b792adc9fd178eb61638921558a047c238e59e732e7678c919754bfc35ff295495f1919f0fd71e6deb52752", 0xac}], 0x1, &(0x7f0000000300)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x7, 0x8000, 0xe, 0x0, 0x5, 0x54d, 0xe096, r4}}], 0x30, 0x4004001}, 0x4040) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x48}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x42, 0xc5, "060ec380525544b211a097f43bb2d83dff03557f91bcfb79831d2c7d98a481073a0742864bf630247e8137c0ca4e40deffb3b26457286ba2558982651241"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x2f, 0xc5, "9d3c6d011e0182d17b14c392822dc4b7626e6aa62a2b39d863640fbcc1f7cf741dcd02f83a8993421835a2"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x811}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x4c081) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x540, 0x3b0, 0x308, 0xffffffff, 0x230, 0x0, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, &(0x7f0000000580), {[{{@uncond, 0x0, 0x1f8, 0x230, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'ipvlan1\x00', {0x2, 0x3807, 0x8, 0x3, 0xfffffff3, 0x5, 0xf7, 0x40, 0x78}, {0x9}}}, @common=@unspec=@connbytes={{0x38}, {[{0x3}, {0x2}], 0x1, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @local, @rand_addr=0x64010101, @gre_key=0x5851, @gre_key=0x1}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x180, 0x910}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x2c}, @dev={0xac, 0x14, 0x14, 0x2f}, @gre_key=0xdd84, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x18, @loopback, @remote, @icmp_id=0x66, @gre_key=0x1ff}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x12, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @dev={0xac, 0x14, 0x14, 0x43}, @broadcast, @port=0x4e20, @port=0x4e20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x12, 0x1b, &(0x7f0000000bc0)=@raw=[@generic={0x4, 0x4, 0x6, 0x6, 0x252}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x37}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000cc0)='syzkaller\x00', 0xfd70, 0x7b, &(0x7f0000000d00)=""/123, 0x40f00, 0x63, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0xa, 0x4, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000e40)=[{0x2, 0x3, 0xb, 0xa}, {0x4, 0x5, 0xd, 0x2}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r7, 0x0, 0x3e, 0x7, &(0x7f0000000f40)="1f1dc132c69438bafcc0a9b8b5db39d77326b8beb64dd051d90681c0eb9aaa80d3a7239f62cc523eb46de84c3e66cb57a31bbc8b13da43cd11bf1b717b8e", &(0x7f0000000f80)=""/7, 0x23, 0x0, 0x32, 0xa5, &(0x7f0000000fc0)="35579eec81673421b40c6ee1606ccb06d16f70235eb11b18cce4f01ba74d290ab321493132b19b2cd132e3b5783a95f4260e", &(0x7f0000001000)="7ea8841a16407a6897d3c30ed09e6c37ddff2f924717c99b67c847663f2a8dc967802e0fc00ec752a99adbd3ec32e8ebf095e2a12dd52b225c0e9deeb45dee9f66d96b4e2757b1c4675063885af482223440cb806dbccfeab8dbab9afa25adadba0741e3d46cf56a7eb8fe1c4a77b7d7a834470dbdf86fd4b3152655f826677262e75eefb43fdabfec58f34cbc29f29915dbf5d3d7a0cc93c439756829090178ea91398b26", 0x0, 0x0, 0xfffffffa}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x40, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@chsw_timing={0x68, 0x4, {0xfff7, 0x100}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x0, 0x1}}]}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r9 = accept4$rose(0xffffffffffffffff, &(0x7f0000001280)=@short={0xb, @remote, @rose, 0x1, @null}, &(0x7f00000012c0)=0x1c, 0x0) ioctl$SIOCRSGCAUSE(r9, 0x89e0, &(0x7f0000001300)) (async) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001340)='memory.swap.events\x00', 0x0, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000001380)={0x2, 0x5}, 0x4) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r11, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r12, 0x321, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}}, 0x4000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001540), r11) sendmsg$NLBL_MGMT_C_REMOVEDEF(r11, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, r13, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc010}, 0x40880) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0xd42, 0x0) (async) write(r2, &(0x7f0000001680)="fd100c760334743535f9736f44aa90f894b87ce1c7cc6d9562a8d83d6e16e651b61deba3203333f65e1a097c0c29869f9201ef558cc4694e48688df04f1aa432e5e9af47fa473217d796fce2c8dc28a3105beec3de60091cdd3516ea896bb4b009ad0eefe967c076f8fb4b73a524a26395aeb8121905c1e6c08adab071b225a82da5d772255d3fcafc6f285064c0", 0x8e) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000001740)={0x4, 0x20c, 0x9, 0xbcaa, r4}, &(0x7f0000001780)=0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000017c0)={r4, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x5f3942b, 0x7, 0x3, 0xe, 0x2}, &(0x7f0000001880)=0x98) 2.357248332s ago: executing program 4 (id=8232): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) 2.268332849s ago: executing program 2 (id=8233): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 2.091554125s ago: executing program 4 (id=8235): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x7}, 0x8) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x800) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x11, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xaa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x1f00}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0x9, 0x18}, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x20, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x4b3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @jmp={0x5, 0x1, 0x4, 0x2, 0x6, 0xc, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xa7, &(0x7f0000000540)=""/167, 0x41000, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x5, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, r6, r7, r8, r3], &(0x7f0000000900)=[{0x5, 0x4, 0x5, 0xf}], 0x10, 0xfffffffe}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, r10, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c891}, 0x14) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, r10, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c891}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x21}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@empty, r13}, 0x14) r14 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r14, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r14, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) (async) setsockopt$inet_int(r14, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r14, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r14, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c2000003080046000024006600ed3527770000119078000000000000000044048d0000014e20000c9078"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x4000) (async) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x4000) 2.091005953s ago: executing program 2 (id=8236): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) unshare(0x20000400) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r1, &(0x7f0000000800), 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000100)="120000001a009b8a5feee09a140000003b9b", 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], 0x24}}, 0xc020) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="30006b08ce0400", @ANYRES16=r4, @ANYBLOB="100029bd7000f7dbdf251700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900070000000a0000000a00060008021100000100000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a001a0008021100000000000a001a000802110000010000"], 0x70}, 0x1, 0x0, 0x0, 0x8084}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000001000061100800000000007b0ae0ff0000000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4e}, 0x94) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x2}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x7, 0x80000000, 0x1, @remote, @local, 0x8000, 0x7820, 0x800, 0x9}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xff}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0xb}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffe0, 0x10}, {0xa, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x20000005) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001042cbd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="0380000010e3040008000500", @ANYRES32=r10, @ANYBLOB="240012800b0001006970766c616e00001400028006"], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0x100, 0x5, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x5}, {0xffff, 0xffff}, {0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x1000000}, @TCA_CHAIN={0x8, 0xb, 0x14000000}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) 1.837339469s ago: executing program 4 (id=8237): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095000000000000000daa0000000000009500000000000000630c8b99fbe43aefa8355b80188931f8282c90cc3a"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095000000000000000daa0000000000009500000000000000630c8b99fbe43aefa8355b80188931f8282c90cc3a"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) (async) 1.712688061s ago: executing program 4 (id=8238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "000000000000000000fbfffff4f40800"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x10, 0x2, 0x6, 0xa, 0x10, 0xc, 0x9, 0xd, 0x3, 0x9, 0xd, 0x1, 0xc, 0x6, 0x10, 0x10], 0x1, [0x10, 0x3, 0xff, 0x4, 0xacc9, 0xfffd, 0x200, 0x6, 0x3, 0x2, 0x1, 0x5, 0x0, 0x7, 0x4, 0x9], [0x4, 0x6, 0x2, 0x8001, 0x1, 0x8, 0x5, 0x0, 0x1, 0x6d5, 0xfff, 0x7, 0xffff, 0xa, 0x5, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0xc8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0x55, 0xc, 0x0, 0xffff7fff, 0xe, 0x1}}, {0x6, 0x2, [0x6]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x3}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xfffffffa}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x4}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x1, 0x9, 0x1, 0x7fff, 0xa9, 0x5}}, {0xe, 0x2, [0x749e, 0x7f, 0x9, 0x4, 0x48]}}]}]}, 0xc8}}, 0x0) 1.591792814s ago: executing program 2 (id=8239): socket$kcm(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x141001, 0x0) write$tun(r1, &(0x7f00000005c0)={@void, @val={0x3, 0x3, 0x5, 0x5ab, 0x200, 0xfff0}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xf, @multicast, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x3e) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/76, 0x4c}], 0x1}, 0x100) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="e83f48b6", 0x4}, {&(0x7f0000000180)="726a771b6fa972cba733e79acfc3d904", 0x10}], 0x2}], 0x1, 0x4040800) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r7, 0x2000000, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r10, 0x89e7, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r11, @ANYBLOB="0000000a010000001800120008000100736974000c00020008000300"], 0x38}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000008c86d8420000000e00000000020000050400028004000380"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042abd7000eaffff000003e400", @ANYRES32=r12, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac1414bb08001400"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.587169839s ago: executing program 1 (id=8240): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) (async) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000040)=0x10) socketpair(0x22, 0x80002, 0x3, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000095000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r3, 0x13, "8fcc41a458f26e54ebd995c948766a47bec980"}, &(0x7f0000000300)=0x1b) 1.367684394s ago: executing program 4 (id=8242): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000ea"], 0x4) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000ea"], 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000480)={{0x2, 0x4e24, @multicast1}, {0x74c9e7b8c49a9e21}, 0xfa2d6b43992c02d1, {0x2, 0x4e20, @rand_addr=0x64010101}}) r5 = socket$netlink(0x10, 0x3, 0x5) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r7, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r7, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x70bd2d, 0x80, {0x0, 0x0, 0x0, 0x0, 0x3400a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xd2c7376ae5874e28}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaa42000008000500", @ANYRES32=r10, @ANYBLOB="55f1841eed3c6078d3a35b2ba2cac6061ef84e1c008f244d8c0ff6547c6e6b4da4d5832c0420c2a16bda1ba44debf94ffb4c22d47fa3c40f0305dcaf98b8065eafb56b3169d9e83fa6f8a2d1704932c006"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000009532156524925e9a50f0252347d2280b41523655b7a0cde2b0299f3ad8b18294fc0638cca5ca197f5e9d190fdc3bd58af7937db1e8e0bae9ad68a4c6f3d956d446b079afcc28bce9200d8d559c440f03a9e4ee18e016b868e032121989c54e7085be3db1b653938a2fb0108ca0cb760c19b7e58d12228b53"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r8, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000009532156524925e9a50f0252347d2280b41523655b7a0cde2b0299f3ad8b18294fc0638cca5ca197f5e9d190fdc3bd58af7937db1e8e0bae9ad68a4c6f3d956d446b079afcc28bce9200d8d559c440f03a9e4ee18e016b868e032121989c54e7085be3db1b653938a2fb0108ca0cb760c19b7e58d12228b53"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r8, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.170980986s ago: executing program 3 (id=8245): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000100)="5c00000011006bcc9e3be35c6e17aa31", 0x10}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) sendmmsg$alg(r1, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="94", 0x1}], 0x1}}], 0x1, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff00c}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) (async) recvmsg$qrtr(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, &(0x7f0000000ac0)=[{0xf8, 0x0, 0x0, ""/230}, {0x30, 0x0, 0x0, ""/32}, {0x110, 0x0, 0x0, ""/253}, {0xe0, 0x0, 0x0, ""/202}, {0x40, 0x0, 0x0, ""/45}], 0x358, 0x10040}, 0x38, 0x40010003) (async) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.112207592s ago: executing program 0 (id=8246): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB="080004007f00"], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB="080004007f00"], 0x50}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) 999.648852ms ago: executing program 3 (id=8247): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000004", @ANYRES32=0x0, @ANYBLOB="04000d800800010002"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = socket(0x27, 0x1, 0x200) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000180)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@null, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000440)=[{0xa0, 0x117, 0x3, "8d1c1cc794b753f22f74f64594876d1524a9587421387b33114515631307bc22aab2a74180fdab5b6a786b7d90ad8a47391f003dd1de173c71f6f82aaec74a6dc42ee0c06453913ba09bd40bf923b3bb9263d8cd20368b49a0f66c6391635f7e017ace53fd6d878a5dc482349bfa0be017a76a881ddc595e3fd42ddc49f627d0a6d5dca9788092879a5575"}, {0x48, 0x118, 0x0, "564facd6ff24f42c2b45d0321252de37bfa3618617c5b92a0cb543a1fa6b43d8264ea046bdfe3a01e6a0f0f4613a9c303624"}, {0x10, 0x111, 0x8}, {0x88, 0x11, 0x9, "4dfc2f939ef2ee1e0e3e63dc9e32c2cbadca4749a7767bc8bcecfaf4994cc82b7e3c695f9812585cadfb3b3cf37143241b1dbd837bef66b9566bb68808bb5dd51cc52ced11b03b0fbd6320daa3253060be52f71339084acd2c06069366a953e9357fdb86eb66e28adf0419660ec573fd9e3c26934e835f"}, {0xc0, 0x119, 0x3, "738e761d84c5b578f53756b8fc936a00892d7b9ee59e9c199df472c87a6cd716346ef71237674541693715a93644b1013f20f69aa903ce99546660d770765d365ee378be9b01c088a5791f74ec695c3c26b4d0638cb40059ca75e33bfe2c784b7f7b93e1d8a4571143a1b39f40d68b304f5edf1d89593cca80f27d16696485dbca0bdb925f3d83c20a77f8ae07dcac089a598e6c34db1369dbc5e9df5622b40c782f1e545a39e25dbf2255c786"}, {0x30, 0x102, 0x0, "ae429f8f5efde6d5ebd686f5f169d2723f9d05942f691460d449ff281602"}, {0xc0, 0x107, 0x4, "d01caf4853f60e9d023cef83c2662c4602dfbf7490dd7e3177fe8aba59ee2706d6528a9962dbf2c2571f9756cb03985500f9c7be0b9a69bfb8b615b3316ffc9c90fa06910972037505b3103535acc9f04ea4b7386261c37180b1752f20e15bee3a3e6f3429725afb2332f09a37b099f5264a607f11ddb1d84be85eb7f408cdd1143e5e1d4da97f360a0d8ff2e903b1be320397e6707dfd9667a632052b08579d1ce0d71ff594924d44d8bd8f"}], 0x330}, 0x40080) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x51056eeb336af510}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x4c, 0x20, 0x400, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x7, 0xd, 0x0, 0x0, 0x8, 0x10000}, [@FRA_FLOW={0x8, 0xb, 0x7e}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x7}, @FRA_DST={0x8, 0x1, @remote}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x51056eeb336af510}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x4c, 0x20, 0x400, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x7, 0xd, 0x0, 0x0, 0x8, 0x10000}, [@FRA_FLOW={0x8, 0xb, 0x7e}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x7}, @FRA_DST={0x8, 0x1, @remote}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 998.990033ms ago: executing program 4 (id=8248): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r4, 0x0, 0x80, 0x8) ioctl$sock_TIOCINQ(r4, 0x541b, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x20, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6fa, 0x0, 0x0, 0x0, 0xefc9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x4000) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb11}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5435}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7535}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f00000003c0)={&(0x7f0000000040), 0x10, &(0x7f0000000380)={&(0x7f00000000c0)={0x7, 0x44, 0x7, {}, {0x77359400}, {0x0, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1, 0x1}, 0x26, 0x3, 0x0, 0x0, "0d77ba332fd1bb0486155f7f97115491130d57732b367272bbd935f2c66b61fa0ccaad69debcb2a1db8afc790e1ec3c37da1454d3aa4fe253434f834d724b60f"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) 875.862144ms ago: executing program 3 (id=8249): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000840)={&(0x7f0000000000)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x180}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYRES32=r0], 0xf0}, 0x4008000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180200007800000000000000626f0000850000002700000018010000786c6c2500000000002020207b1af8ff00000000bfa10800000016007f49582b6182cdf2b702000008000000b70300003f000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000240)=0x14) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) r11 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r11, &(0x7f0000000280)=[{&(0x7f0000001740)=""/6, 0x6}, {0x0}], 0x2, 0x0, 0x0) syz_emit_ethernet(0x93, &(0x7f00000003c0)={@local, @remote, @void, {@mpls_uc={0x8847, {[{0xba, 0x0, 0x1}, {0x4}, {0x800, 0x0, 0x1}, {0x2, 0x0, 0x1}], @llc={@llc={0x6, 0xff, "ed49", "35234565c141d0f8d780f29148a13dc381ac46f02e4766579c941cb277a81d5280214008905f7957863e5fdac481806e5d100c836e3b26ee083c0470ae85e6200b797b9a79e99465aa6eafae1f526b3d6d19f1658daa3b3c95243b1ad1da91fd1920fc241ece9ad286a937db28ed83f2f3"}}}}}}, 0x0) 874.1651ms ago: executing program 0 (id=8250): r0 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) socketpair(0xb, 0x800, 0x245a867, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x1dd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x20008894) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040010) r6 = socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r1) (async) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0}, &(0x7f0000000600)=0x14) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x2c}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x21}}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r6, 0x3d, 0x0, 0x7, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={0xffffffffffffffff, r8, 0x25, 0x11, @val=@iter={&(0x7f00000008c0)=@cgroup={0x3, 0xffffffffffffffff, 0x7}, 0x10}}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@cgroup, 0xffffffffffffffff, 0x23, 0x2000, 0x0, @value=r11, @void, @void, @void, r10}, 0x20) (async) connect$inet6(r2, &(0x7f0000000940)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r12, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r13, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24040060) (async) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000b40)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r12, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r14, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4008015) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r16, 0x29, 0x30, &(0x7f0000000c40)={0x6, {{0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x0, 0x3, [{{0xa, 0x4e23, 0x4, @private1, 0xf}}, {{0xa, 0x4e21, 0xcf7, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x200}}, {{0xa, 0x4e21, 0x4, @loopback, 0x2}}]}, 0x210) (async) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000fc0)={&(0x7f0000000e80), 0x10, &(0x7f0000000f80)={&(0x7f0000000f00)={0x3, 0x21, 0x7, {0x77359400}, {r17, r18/1000+60000}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "1f514018d1f9571a2411543d5dd4a4322ed665dae80f5f34801215cd8176af4184eac29ec9cc012da81eed132770f321bca520d675d0b5b395d61733f5946e78"}}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r12, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r13, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x58}}, 0x8804) (async) socket$inet(0x2, 0xa, 0x6) (async) sendmsg$nl_route(r1, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@delneigh={0x1c, 0x1d, 0x400, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x8000) 848.15318ms ago: executing program 0 (id=8251): r0 = socket(0x1e, 0x4, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000200)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x2, 0x9}, {0x0, 0x9}, {0x7, 0xc}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x6d}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 32) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) unshare(0x28000600) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) (async) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000003000e0000000000ffffffff850000002f000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ppoll(&(0x7f0000000000)=[{r9, 0x1030}], 0x1, &(0x7f0000000140), 0x0, 0x0) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14368d00", @ANYRES16=r11, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}}, 0x800) 801.28374ms ago: executing program 3 (id=8252): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) (async) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0x81, 0x40}, 0xffff, [0xffffffffffffffff, 0x8e9, 0x9, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7fffffffffffffff, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0x81, 0x40}, 0xffff, [0xffffffffffffffff, 0x8e9, 0x9, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7fffffffffffffff, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) (async) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r7, 0x331, 0x1, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000400000000000000000a3c000000120a010200000000000000000200000009000200020000000000002008000440000010000900010073797a3000000000080003400000000a14"], 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) (async) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r8 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 655.857586ms ago: executing program 2 (id=8253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4c0e1}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000040)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 627.577686ms ago: executing program 1 (id=8254): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) (async, rerun: 32) socket$isdn_base(0x22, 0x3, 0x0) (rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000308f994900"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES8=r7, @ANYRESHEX=r0, @ANYRESDEC, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0xc2d00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r7}, &(0x7f0000000840), &(0x7f0000000bc0)}, 0x20) (async) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) listen(r12, 0x7) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r13, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async) listen(r13, 0x0) r14 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r14, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 606.334799ms ago: executing program 3 (id=8255): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5400000016e6a2110d1d3a00503b98c86dab6f0eb291d6745ca54e0b89ef53cd13c722e501f7ca868aa9735828c37b2220937ddbb4e8f8b46ec1aa517a6d19df2f1e0a8615d0a1c0dff8749ef34a47576e185545d29540f30d4b1b5fee97e0662a288b5224084a46ec7825440269a95ab15309b51876867cb7cc8d6ffb1c84b8445e1d8aec06853b2ea231b45c29b60e1a5df6aeb1396419b33b878837bfcbbb3bcd1314783e649f4b3720bbcee863b4c7fc5554ed58a65fdb69308634a54afbcf38675155b482f902fd169a1f1bf2b9910e53eea385a8367ddfee48aa33dd441a61133ebffdf0dba6e09a32a5d9ceb80860206d5ddad0a3d1", @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000002800038024000380200001801100020073636865645f737769746368000000000800010006000000"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4044040}, 0x40090) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@nfc={0x27, r7, 0x1, 0x2}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="bc020000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf25130000009800138054000080040001000800010077727200060001002d25000007000100727200000c000100657468746f6f6c00050001002a00000011000100d15b2f282624df21f87b2c262f0000000c00010026287d2e3a2afe5b2c000080050001002e0000000500010068000000050001002d0000000700010072720000080001007772720014000080050001002700000007000100232f250008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="abf4f1f03ee6852a6d2a9df7e1a1497aedb926e5a1090e3609001824629879a86d0ffa6e0d24e7e5531f9302017e1fe0aaea1f441a5892dc590fe5b0baf737864f0100a70397cc"], 0x2bc}, 0x1, 0x0, 0x0, 0x4000081}, 0x24000001) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x10000, 0x1cb, 0x0, 0x13e}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000001340)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xc, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0xffffffff, 0x12d5c, 0x1294b}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, 0x0, 0x0) write(r9, &(0x7f0000000140)="05000000010000", 0x7) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509004200"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r11, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r11, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) 443.81634ms ago: executing program 0 (id=8256): r0 = socket$inet(0x10, 0x3, 0x200) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x9}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 328.466003ms ago: executing program 0 (id=8257): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x1}, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000000)={{r6}, 0x2a, 0x80000007ff, 0x2}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) 327.27154ms ago: executing program 1 (id=8258): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="ea"], 0xb) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="ea"], 0xb) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000001c0)=0x6, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r6, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r7, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01080000009343828ed5b800000000000000006700000008000300405a349c3b5daff39eb8374189d2bbd710c12fd24fca72430a3d6f6476fd4456802d22235ee284df7264d72fbcfb24dbfcf9b096c637e6c24c351367639dfdf4f5e549d75cd55a162d5478b58864", @ANYRES16=r8], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r10, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r10, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r11, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r11, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r13}, 0x25) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) close(0x3) 326.721737ms ago: executing program 3 (id=8259): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0xa, 0x29, 0x80, 0x9, 0xffffffff, 0x80091b1}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3fff8000, 0xf7f, 0x4, 0x1}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x6c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f00000054c0)={0xa, 0x4e20, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', r4, 0x700, 0x8000, 0x6, 0x2, {{0x2d, 0x4, 0x2, 0x3, 0xb4, 0x65, 0x0, 0xc, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x44, 0xd9, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x93}, {@rand_addr=0x64010101}, {@empty, 0x4e4b}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x3}, {@private=0xa010101, 0x1}, {@empty, 0x101}, {@rand_addr=0x64010100, 0x104a}]}, @end, @rr={0x7, 0x13, 0x4a, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty]}, @rr={0x7, 0x1f, 0x80, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0xa5, 0x3, 0x6, [{@local, 0x8}, {@rand_addr=0x64010100, 0x2}, {@local, 0x2}, {@broadcast, 0x7fffffff}]}, @generic={0x0, 0x2}, @end]}}}}}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000a410000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50307, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 159.458881ms ago: executing program 0 (id=8260): unshare(0x8040480) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffd}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000000102030000000000000000000200000124000280140001"], 0x38}, 0x1, 0x0, 0x0, 0x80000}, 0x200490c4) syz_emit_ethernet(0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="45f5fcdb0718267173d03306d46603bf4b2392fa5460b39966c8e1c8946192df13f8af7409f8aa42c5facffa0dd37d1058216012a466473658ce8e932a7cc5a5c4fe369600d90145c94dd051f9e46fc33cdc3b68a4376ef0860c2aed0d4e3a799adfdf23ca29d91619", @ANYRES16], 0x0) unshare(0x8040480) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffd}}, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000000102030000000000000000000200000124000280140001"], 0x38}, 0x1, 0x0, 0x0, 0x80000}, 0x200490c4) (async) syz_emit_ethernet(0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="45f5fcdb0718267173d03306d46603bf4b2392fa5460b39966c8e1c8946192df13f8af7409f8aa42c5facffa0dd37d1058216012a466473658ce8e932a7cc5a5c4fe369600d90145c94dd051f9e46fc33cdc3b68a4376ef0860c2aed0d4e3a799adfdf23ca29d91619", @ANYRES16], 0x0) (async) 79.671985ms ago: executing program 1 (id=8261): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0xcf, &(0x7f00000002c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='$', 0x1}], 0x1}}], 0x2, 0x40408d1) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000000200)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x9, 0x3e, {{0x22, 0x4, 0x2, 0x1c, 0x88, 0x68, 0x0, 0xa, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x2f, 0x1, 0x9, [{@empty, 0x7}]}, @generic={0x86, 0x10, "b00516b66f109dd1736fa969bfee"}, @noop, @noop, @timestamp_prespec={0x44, 0xc, 0x75, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x6}]}, @timestamp_prespec={0x44, 0x1c, 0xcb, 0x3, 0x0, [{@empty, 0x102}, {@rand_addr=0x64010100, 0x88}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x95}]}, @lsrr={0x83, 0x2b, 0xe5, [@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x29}, @local, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002b80)={0x0, &(0x7f0000001980)=""/4096, &(0x7f0000002980), &(0x7f0000002a80), 0x1, r5}, 0x38) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@dev={0xfe, 0x80, '\x00', 0x2d}, @local, @empty, 0xb, 0xc82, 0x7, 0x0, 0x6, 0x880001, r4}) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xffffffe4}], 0x3}], 0x1, 0x40800) recvmsg$qrtr(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000600)=""/210, 0xd2}], 0x2, 0x0, 0x0, 0x40004002}, 0x38, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmmsg$alg(r1, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="e05a5de397ee362f573ea834553caa1d10689e25a2cbda2dbb0b", 0x1a}], 0x1, 0x0, 0x0, 0x4048015}], 0x1, 0x4000000) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) 0s ago: executing program 2 (id=8262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) kernel console output (not intermixed with test programs): ting to 1000 [ 859.377292][T31443] virt_wifi0 speed is unknown, defaulting to 1000 [ 859.428356][T31443] wg1 speed is unknown, defaulting to 1000 [ 859.479494][T31443] xfrm0 speed is unknown, defaulting to 1000 [ 859.683180][T31472] IPVS: set_ctl: invalid protocol: 13599 172.20.20.187:20003 [ 860.083454][T31487] xt_hashlimit: size too large, truncated to 1048576 [ 860.124797][T31487] xt_hashlimit: overflow, try lower: 0/0 [ 860.215536][T31443] lo speed is unknown, defaulting to 1000 [ 860.364752][T31485] virt_wifi0 speed is unknown, defaulting to 1000 [ 860.521967][T31485] wg1 speed is unknown, defaulting to 1000 [ 860.656009][T31485] xfrm0 speed is unknown, defaulting to 1000 [ 861.011413][T31488] nr4: entered promiscuous mode [ 861.026286][T31488] nr4: entered allmulticast mode [ 861.079017][T31507] nbd: must specify at least one socket [ 861.614846][T31528] __nla_validate_parse: 35 callbacks suppressed [ 861.614870][T31528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6762'. [ 861.644267][T31485] lo speed is unknown, defaulting to 1000 [ 861.693389][T31530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6763'. [ 861.746945][T31530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6763'. [ 862.293035][T31548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6768'. [ 862.302216][T31548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6768'. [ 862.335076][T31548] netlink: 'syz.0.6768': attribute type 14 has an invalid length. [ 862.513144][T31559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6771'. [ 862.853533][T31565] virt_wifi0 speed is unknown, defaulting to 1000 [ 862.908778][T31565] wg1 speed is unknown, defaulting to 1000 [ 862.935697][T31565] xfrm0 speed is unknown, defaulting to 1000 [ 862.983096][T31571] virt_wifi0 speed is unknown, defaulting to 1000 [ 863.045435][T31571] wg1 speed is unknown, defaulting to 1000 [ 863.414028][T31576] virt_wifi0 speed is unknown, defaulting to 1000 [ 863.508074][T31576] wg1 speed is unknown, defaulting to 1000 [ 863.723276][T31565] lo speed is unknown, defaulting to 1000 [ 863.728147][T31571] xfrm0 speed is unknown, defaulting to 1000 [ 863.776821][T31589] ip6t_srh: unknown srh invflags BA61 [ 863.992879][T31594] pimreg: entered allmulticast mode [ 864.157953][T31579] nr0: entered promiscuous mode [ 864.162971][T24983] IPVS: starting estimator thread 0... [ 864.169221][T31579] nr0: entered allmulticast mode [ 864.229171][T31576] xfrm0 speed is unknown, defaulting to 1000 [ 864.254924][T31598] IPVS: using max 26 ests per chain, 62400 per kthread [ 864.505046][T31576] lo speed is unknown, defaulting to 1000 [ 864.528158][T31571] lo speed is unknown, defaulting to 1000 [ 864.600694][T31596] virt_wifi0 speed is unknown, defaulting to 1000 [ 864.702513][T31596] wg1 speed is unknown, defaulting to 1000 [ 864.787351][T31596] xfrm0 speed is unknown, defaulting to 1000 [ 864.911191][T31600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6782'. [ 865.150042][T31604] sit0: entered promiscuous mode [ 865.155599][T31604] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6783'. [ 865.193707][T31604] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6783'. [ 865.296779][T31596] lo speed is unknown, defaulting to 1000 [ 865.431903][T31608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6785'. [ 866.675746][T31635] tipc: Trying to set illegal importance in message [ 866.766860][T31641] __nla_validate_parse: 1 callbacks suppressed [ 866.766883][T31641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6793'. [ 866.819083][T31643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6793'. [ 867.344040][T31665] virt_wifi0 speed is unknown, defaulting to 1000 [ 867.422374][T31665] wg1 speed is unknown, defaulting to 1000 [ 867.492816][T31665] xfrm0 speed is unknown, defaulting to 1000 [ 867.861929][T31665] lo speed is unknown, defaulting to 1000 [ 868.248798][T31691] virt_wifi0 speed is unknown, defaulting to 1000 [ 868.268299][T31691] wg1 speed is unknown, defaulting to 1000 [ 868.293425][T31691] xfrm0 speed is unknown, defaulting to 1000 [ 868.521778][T31707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6811'. [ 868.748460][T31715] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6815'. [ 868.771254][ T30] audit: type=1800 audit(1770103022.123:21): pid=31713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6814" name="memory.events" dev="tmpfs" ino=505 res=0 errno=0 [ 868.828596][T31691] lo speed is unknown, defaulting to 1000 [ 868.950437][T31721] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 868.979325][T31723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6818'. [ 869.236355][T20151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.279164][T31726] syzkaller0: entered promiscuous mode [ 869.291222][T31726] syzkaller0: entered allmulticast mode [ 869.299632][T31730] netlink: 'syz.2.6821': attribute type 1 has an invalid length. [ 869.393287][T31733] netlink: 'syz.4.6823': attribute type 1 has an invalid length. [ 869.411887][T31733] netlink: 'syz.4.6823': attribute type 2 has an invalid length. [ 869.432198][T31733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6823'. [ 869.643906][T31730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6821'. [ 869.715335][T31734] gretap1: entered promiscuous mode [ 869.756389][T31734] batman_adv: batadv0: Adding interface: gretap1 [ 869.771444][T31734] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568. [ 869.817980][T31734] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 870.109321][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.121621][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.138650][T31753] syzkaller1: entered promiscuous mode [ 870.168437][T31753] syzkaller1: entered allmulticast mode [ 870.215049][T31756] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6829'. [ 870.226568][T31757] syzkaller0: entered promiscuous mode [ 870.232084][T31757] syzkaller0: entered allmulticast mode [ 870.388176][T31757] virt_wifi0 speed is unknown, defaulting to 1000 [ 870.412042][T31757] wg1 speed is unknown, defaulting to 1000 [ 870.413080][T31765] virt_wifi0 speed is unknown, defaulting to 1000 [ 870.440921][T31757] xfrm0 speed is unknown, defaulting to 1000 [ 870.460227][T31764] virt_wifi0 speed is unknown, defaulting to 1000 [ 870.481573][T31765] wg1 speed is unknown, defaulting to 1000 [ 870.496675][T31764] wg1 speed is unknown, defaulting to 1000 [ 870.743568][T31757] lo speed is unknown, defaulting to 1000 [ 870.751146][T31765] xfrm0 speed is unknown, defaulting to 1000 [ 871.059452][T31764] xfrm0 speed is unknown, defaulting to 1000 [ 871.302195][T31765] lo speed is unknown, defaulting to 1000 [ 871.335374][T31764] lo speed is unknown, defaulting to 1000 [ 880.344923][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 919.620074][T31786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6836'. [ 919.693373][T31791] "syz.4.6838" (31791) uses obsolete ecb(arc4) skcipher [ 920.153356][T31804] virt_wifi0 speed is unknown, defaulting to 1000 [ 920.161190][T31804] wg1 speed is unknown, defaulting to 1000 [ 920.169032][T31804] xfrm0 speed is unknown, defaulting to 1000 [ 920.381630][T31812] virt_wifi0 speed is unknown, defaulting to 1000 [ 920.551861][T31812] wg1 speed is unknown, defaulting to 1000 [ 921.117592][T31812] xfrm0 speed is unknown, defaulting to 1000 [ 921.140295][T31804] lo speed is unknown, defaulting to 1000 [ 921.365921][T31846] xt_hashlimit: max too large, truncated to 1048576 [ 921.387633][T31846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 921.508394][T31851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.855296][T31812] lo speed is unknown, defaulting to 1000 [ 922.038597][T31865] syzkaller0: entered promiscuous mode [ 922.044342][T31865] syzkaller0: entered allmulticast mode [ 922.456292][T31869] vlan2: entered promiscuous mode [ 922.461498][T31869] geneve1: entered promiscuous mode [ 922.467515][T31869] vlan2: entered allmulticast mode [ 922.472834][T31869] geneve1: entered allmulticast mode [ 922.585024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.748722][T31875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6859'. [ 923.000392][T24982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.159700][T31859] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6855'. [ 923.250334][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6862'. [ 923.390651][T31892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6863'. [ 923.400758][T31894] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 923.639038][T31908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 923.909669][T31904] virt_wifi0 speed is unknown, defaulting to 1000 [ 923.969597][T31904] wg1 speed is unknown, defaulting to 1000 [ 923.970605][T31910] virt_wifi0 speed is unknown, defaulting to 1000 [ 923.986449][T31904] xfrm0 speed is unknown, defaulting to 1000 [ 923.988021][T31910] wg1 speed is unknown, defaulting to 1000 [ 924.039877][T24982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.101366][T31925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6871'. [ 924.149616][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6871'. [ 924.410690][T31935] virt_wifi0 speed is unknown, defaulting to 1000 [ 924.425755][T31935] wg1 speed is unknown, defaulting to 1000 [ 924.759060][T31910] xfrm0 speed is unknown, defaulting to 1000 [ 924.760916][T31904] lo speed is unknown, defaulting to 1000 [ 925.035302][T31953] openvswitch: netlink: Missing valid actions attribute. [ 925.052671][T31953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.064972][T24974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.164664][ T798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.277957][T31956] syzkaller1: entered promiscuous mode [ 925.293955][T31956] syzkaller1: entered allmulticast mode [ 925.383073][T31935] xfrm0 speed is unknown, defaulting to 1000 [ 925.670064][T31965] netlink: 'syz.0.6880': attribute type 1 has an invalid length. [ 925.680703][T31965] netlink: 'syz.0.6880': attribute type 2 has an invalid length. [ 925.717077][T31969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6881'. [ 925.734698][T31969] chnl_net:caif_netlink_parms(): no params data found [ 925.779321][T31973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6881'. [ 925.866826][T31910] lo speed is unknown, defaulting to 1000 [ 925.937927][T31935] lo speed is unknown, defaulting to 1000 [ 927.151676][T24982] net_ratelimit: 1 callbacks suppressed [ 927.151698][T24982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.360135][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.368753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.386738][T32005] virt_wifi0 speed is unknown, defaulting to 1000 [ 927.427297][T32005] wg1 speed is unknown, defaulting to 1000 [ 927.447016][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.470800][T32005] xfrm0 speed is unknown, defaulting to 1000 [ 927.529388][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.539593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.689406][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.721288][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.729988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.756358][T32003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.305275][T32033] virt_wifi0 speed is unknown, defaulting to 1000 [ 928.318235][ T3485] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.335224][ T3485] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.364148][T32033] wg1 speed is unknown, defaulting to 1000 [ 928.372913][ T3485] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.402482][ T3485] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.797560][T32052] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6904'. [ 928.935793][T32005] lo speed is unknown, defaulting to 1000 [ 928.935808][T32033] xfrm0 speed is unknown, defaulting to 1000 [ 928.954702][T32054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6905'. [ 929.039662][T32059] netlink: 'syz.3.6906': attribute type 16 has an invalid length. [ 929.058714][T32056] tipc: Resetting bearer [ 929.078420][T32059] netlink: 'syz.3.6906': attribute type 17 has an invalid length. [ 929.107577][T32056] tipc: Resetting bearer [ 929.134045][T32058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6903'. [ 929.196509][ T50] tipc: Resetting bearer [ 929.240507][T24982] lo speed is unknown, defaulting to 1000 [ 929.291908][T32064] sit0: left promiscuous mode [ 929.297782][T32064] ip6tnl2: left promiscuous mode [ 929.307180][T32064] ip6tnl2: left allmulticast mode [ 929.313476][T32064] gretap1: left promiscuous mode [ 929.656421][T32033] lo speed is unknown, defaulting to 1000 [ 930.370315][T32087] sctp: [Deprecated]: syz.3.6914 (pid 32087) Use of int in maxseg socket option. [ 930.370315][T32087] Use struct sctp_assoc_value instead [ 930.803840][T32100] netlink: 'syz.3.6917': attribute type 21 has an invalid length. [ 930.838351][T32100] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6917'. [ 930.871265][T32100] netlink: 'syz.3.6917': attribute type 4 has an invalid length. [ 930.899551][T32100] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6917'. [ 930.943591][T32114] netlink: 'syz.3.6917': attribute type 1 has an invalid length. [ 931.024489][T32114] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6917'. [ 931.076142][T32109] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.6920'. [ 931.107876][T32109] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6920'. [ 931.143196][T32117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6921'. [ 931.521372][T32132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6926'. [ 931.702268][T32142] netlink: 340 bytes leftover after parsing attributes in process `syz.2.6928'. [ 932.023656][T32148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6930'. [ 932.032950][T32148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6930'. [ 932.400189][T32171] can: request_module (can-proto-0) failed. [ 933.070225][T32150] batadv1: left promiscuous mode [ 933.075779][T32150] geneve2: left promiscuous mode [ 933.080942][T32150] geneve3: left promiscuous mode [ 933.175813][T32163] netlink: 'syz.3.6934': attribute type 1 has an invalid length. [ 933.183607][T32163] netlink: 'syz.3.6934': attribute type 3 has an invalid length. [ 934.167939][T20151] net_ratelimit: 10 callbacks suppressed [ 934.167961][T20151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.522169][T32219] __nla_validate_parse: 10 callbacks suppressed [ 983.522190][T32219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6945'. [ 983.522619][T32213] openvswitch: netlink: EtherType 50a is less than min 600 [ 983.790871][T32231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6948'. [ 983.814030][T32231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6948'. [ 983.878670][T32234] netlink: 6048 bytes leftover after parsing attributes in process `syz.1.6951'. [ 984.251382][T32257] virt_wifi0 speed is unknown, defaulting to 1000 [ 984.260178][T32257] wg1 speed is unknown, defaulting to 1000 [ 984.263442][T32253] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6955'. [ 984.269801][T32257] xfrm0 speed is unknown, defaulting to 1000 [ 984.292161][T32253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6955'. [ 984.414567][T32257] lo speed is unknown, defaulting to 1000 [ 984.653718][T32262] delete_channel: no stack [ 984.869793][T32270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6960'. [ 984.940290][T32273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6960'. [ 985.013638][T32275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6960'. [ 985.033456][T32270] 8021q: adding VLAN 0 to HW filter on device bond6 [ 985.116019][T32273] netlink: 'syz.0.6960': attribute type 1 has an invalid length. [ 985.688040][T32312] gretap0: entered promiscuous mode [ 985.693424][T32312] vlan2: entered promiscuous mode [ 985.947572][T32316] virt_wifi0 speed is unknown, defaulting to 1000 [ 985.980219][T32316] wg1 speed is unknown, defaulting to 1000 [ 986.106222][T32316] xfrm0 speed is unknown, defaulting to 1000 [ 986.261130][T32333] virt_wifi0 speed is unknown, defaulting to 1000 [ 986.283695][T32335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6974'. [ 986.317245][T32333] wg1 speed is unknown, defaulting to 1000 [ 986.606214][T32347] sctp: [Deprecated]: syz.1.6977 (pid 32347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 986.606214][T32347] Use struct sctp_sack_info instead [ 986.964650][T32333] xfrm0 speed is unknown, defaulting to 1000 [ 986.992814][T32316] lo speed is unknown, defaulting to 1000 [ 986.995440][T32356] virt_wifi0 speed is unknown, defaulting to 1000 [ 987.023441][T32356] wg1 speed is unknown, defaulting to 1000 [ 987.374748][T32333] lo speed is unknown, defaulting to 1000 [ 987.380696][T32356] xfrm0 speed is unknown, defaulting to 1000 [ 987.721939][T32356] lo speed is unknown, defaulting to 1000 [ 987.728520][T32370] syzkaller0: entered promiscuous mode [ 987.736220][T32370] syzkaller0: entered allmulticast mode [ 987.751090][T32365] virt_wifi0 speed is unknown, defaulting to 1000 [ 987.824274][T32365] wg1 speed is unknown, defaulting to 1000 [ 987.863247][T32365] xfrm0 speed is unknown, defaulting to 1000 [ 988.140268][T32377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.314643][T32365] lo speed is unknown, defaulting to 1000 [ 988.460600][T32381] virt_wifi0 speed is unknown, defaulting to 1000 [ 988.496276][T32379] geneve2: entered promiscuous mode [ 988.520889][T32379] geneve2: entered allmulticast mode [ 988.575651][T32390] __nla_validate_parse: 1 callbacks suppressed [ 988.575671][T32390] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6988'. [ 988.624956][T32381] wg1 speed is unknown, defaulting to 1000 [ 988.672395][T32381] xfrm0 speed is unknown, defaulting to 1000 [ 988.935117][T32397] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6990'. [ 989.444511][T32381] lo speed is unknown, defaulting to 1000 [ 989.977847][T32434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6998'. [ 989.989814][T32425] tipc: Started in network mode [ 989.996335][T32425] tipc: Node identity 9696129d7098, cluster identity 4711 [ 990.003749][T32425] tipc: Enabled bearer , priority 0 [ 990.015288][T32430] syzkaller0: entered promiscuous mode [ 990.020812][T32430] syzkaller0: entered allmulticast mode [ 990.086639][T32421] tipc: Resetting bearer [ 990.117342][T32421] tipc: Disabling bearer [ 992.379490][T32463] virt_wifi0 speed is unknown, defaulting to 1000 [ 992.406295][T32463] wg1 speed is unknown, defaulting to 1000 [ 992.415187][T32463] xfrm0 speed is unknown, defaulting to 1000 [ 992.425841][T32473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7001'. [ 992.519087][T32478] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7006'. [ 992.594120][T32482] vxcan2: entered allmulticast mode [ 992.728919][T32463] lo speed is unknown, defaulting to 1000 [ 992.862618][T32489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7008'. [ 992.984610][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 993.003067][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.015271][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.159305][T32499] virt_wifi0 speed is unknown, defaulting to 1000 [ 993.188298][T32499] wg1 speed is unknown, defaulting to 1000 [ 993.196398][T32499] xfrm0 speed is unknown, defaulting to 1000 [ 993.459882][T32511] netlink: 'syz.3.7012': attribute type 1 has an invalid length. [ 993.526140][T32307] udevd[32307]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 993.851637][T32511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 993.883882][T32513] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 993.964080][T32513] bond1: (slave batadv1): making interface the new active one [ 993.973895][T32513] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 994.239585][T32499] lo speed is unknown, defaulting to 1000 [ 994.475575][T32505] Can't find ip_set type [ 994.518209][T32525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7015'. [ 994.607312][T32525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7015'. [ 994.701457][T32531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7016'. [ 995.203797][T32545] virt_wifi0 speed is unknown, defaulting to 1000 [ 995.247305][T32545] wg1 speed is unknown, defaulting to 1000 [ 995.267554][T32545] xfrm0 speed is unknown, defaulting to 1000 [ 995.300907][T32552] netlink: 'syz.1.7021': attribute type 5 has an invalid length. [ 995.490087][T32553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7021'. [ 995.772204][T32545] lo speed is unknown, defaulting to 1000 [ 995.900756][T32565] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 996.079101][T32578] Cannot find del_set index 4 as target [ 996.090002][T32576] syzkaller0: entered promiscuous mode [ 996.095851][T32576] syzkaller0: entered allmulticast mode [ 996.137098][T32582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7031'. [ 996.152185][T32578] block nbd4: Unsupported socket: should be TCP or UNIX. [ 996.286574][T32580] bond2: option min_links: invalid value (18446744073709551612) [ 996.294621][T32580] bond2: option min_links: allowed values 0 - 2147483647 [ 996.307896][T32580] bond2 (unregistering): Released all slaves [ 997.337079][T20151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.544058][T32616] virt_wifi0 speed is unknown, defaulting to 1000 [ 997.575833][T32616] wg1 speed is unknown, defaulting to 1000 [ 997.638387][T32616] xfrm0 speed is unknown, defaulting to 1000 [ 997.710005][T32621] virt_wifi0 speed is unknown, defaulting to 1000 [ 997.749828][T32621] wg1 speed is unknown, defaulting to 1000 [ 998.095814][T32625] netlink: 'syz.1.7042': attribute type 13 has an invalid length. [ 998.174547][T32626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7042'. [ 998.196772][T32626] tc_dump_action: action bad kind [ 998.203259][T32617] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7039'. [ 998.237143][T32617] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7039'. [ 998.258294][T32617] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 998.299348][T32629] batadv_slave_0: entered promiscuous mode [ 998.363003][T32629] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7043'. [ 998.404871][T32621] xfrm0 speed is unknown, defaulting to 1000 [ 998.418824][T32616] lo speed is unknown, defaulting to 1000 [ 998.479773][T32628] batadv_slave_0: left promiscuous mode [ 998.643936][T32642] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7047'. [ 998.655097][T32639] bridge0: port 3(macsec0) entered blocking state [ 998.684218][T32639] bridge0: port 3(macsec0) entered disabled state [ 998.704139][T32639] macsec0: entered allmulticast mode [ 998.729985][T32639] macsec0: entered promiscuous mode [ 998.890469][T32621] lo speed is unknown, defaulting to 1000 [ 999.580148][T32663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.798246][T32671] team0: Caught tx_queue_len zero misconfig [ 999.957930][T32676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7056'. [ 1000.148975][T32681] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1000.208172][T32681] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 1000.242197][T32692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7059'. [ 1000.286061][T32692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7059'. [ 1000.316974][T32695] netlink: 'syz.3.7056': attribute type 16 has an invalid length. [ 1000.343652][T32695] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7056'. [ 1000.425867][T32701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7060'. [ 1000.823460][T32676] macvlan2: entered promiscuous mode [ 1000.829424][T32676] macvlan2: entered allmulticast mode [ 1000.836104][T32676] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 1000.975962][T32701] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1001.207909][T32710] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.7062'. [ 1001.237290][T32710] netlink: Unknown conntrack attr (type=2304, max=9) [ 1001.273417][T32720] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1001.580584][T32729] tipc: Started in network mode [ 1001.587992][T32729] tipc: Node identity 0acf625a09d2, cluster identity 4711 [ 1001.618602][T32729] tipc: Enabled bearer , priority 0 [ 1001.650148][T32735] syzkaller0: entered promiscuous mode [ 1001.669064][T32735] syzkaller0: entered allmulticast mode [ 1001.769176][T32734] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1001.874681][T32740] tipc: Resetting bearer [ 1001.904213][T32727] tipc: Resetting bearer [ 1002.033547][T32727] tipc: Disabling bearer [ 1002.049045][T32749] netlink: 'syz.2.7069': attribute type 4 has an invalid length. [ 1002.296064][T32759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7071'. [ 1002.305508][T32744] virt_wifi0 speed is unknown, defaulting to 1000 [ 1002.313797][T32744] wg1 speed is unknown, defaulting to 1000 [ 1002.333204][T32756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7073'. [ 1002.414448][T32744] xfrm0 speed is unknown, defaulting to 1000 [ 1002.514670][ T300] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7074'. [ 1002.719310][ T305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.821711][ T305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.869614][ T310] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7077'. [ 1002.907711][ T310] 8021q: VLANs not supported on ip_vti0 [ 1002.976194][ T798] IPVS: starting estimator thread 0... [ 1002.981986][T32749] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20001 [ 1003.020285][ T313] netlink: 'syz.3.7078': attribute type 3 has an invalid length. [ 1003.115209][ T317] tipc: Enabled bearer , priority 0 [ 1003.137572][ T317] syzkaller0: entered promiscuous mode [ 1003.144839][ T311] IPVS: using max 26 ests per chain, 62400 per kthread [ 1003.159311][ T317] syzkaller0: entered allmulticast mode [ 1003.177751][ T317] tipc: Resetting bearer [ 1003.203107][ T9048] tipc: Resetting bearer [ 1003.267617][ T316] tipc: Resetting bearer [ 1003.389029][ T316] tipc: Disabling bearer [ 1003.556558][T32744] lo speed is unknown, defaulting to 1000 [ 1003.720337][ T352] batadv_slave_0: entered promiscuous mode [ 1003.780292][ T352] batadv_slave_0: left promiscuous mode [ 1005.030021][ T405] __nla_validate_parse: 3 callbacks suppressed [ 1005.030043][ T405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7102'. [ 1005.218531][ T403] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.325041][ T405] geneve2: entered promiscuous mode [ 1005.372951][ T9048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.396719][ T9048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.438351][ T9048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.470643][ T9048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.540922][ T403] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.543346][ T438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7107'. [ 1005.570489][ T442] netlink: 'syz.2.7108': attribute type 19 has an invalid length. [ 1005.584578][ T442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1005.618676][ T9048] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.618777][ T442] netlink: 'syz.2.7108': attribute type 19 has an invalid length. [ 1005.640160][ T9048] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.648142][ T442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7108'. [ 1005.666913][ T9048] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.756836][ T403] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.780457][ T9048] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1005.891633][ T403] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.935146][ T452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7110'. [ 1005.938199][ T456] syz_tun: entered allmulticast mode [ 1006.004182][ T452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7110'. [ 1006.069030][ T455] syz_tun: left allmulticast mode [ 1006.099466][ T446] netlink: 'syz.4.7110': attribute type 1 has an invalid length. [ 1006.120827][ T9048] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.135278][ T446] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7110'. [ 1006.178491][ T9048] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.215436][ T454] netlink: 'syz.0.7111': attribute type 10 has an invalid length. [ 1006.225955][ T9048] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.251169][ T454] team0: Device ipvlan1 failed to register rx_handler [ 1006.281161][ T9048] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.317779][ T468] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7116'. [ 1006.347941][ T462] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1006.365699][ T468] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1006.391844][ T468] bond1 (unregistering): Released all slaves [ 1006.598318][ T475] virt_wifi0 speed is unknown, defaulting to 1000 [ 1006.649906][ T475] wg1 speed is unknown, defaulting to 1000 [ 1006.703445][ T475] xfrm0 speed is unknown, defaulting to 1000 [ 1006.818414][ T479] virt_wifi0 speed is unknown, defaulting to 1000 [ 1006.864887][ T479] wg1 speed is unknown, defaulting to 1000 [ 1006.872964][ T493] virt_wifi0 speed is unknown, defaulting to 1000 [ 1006.917248][ T493] wg1 speed is unknown, defaulting to 1000 [ 1007.236107][ T510] vlan0: entered promiscuous mode [ 1007.594590][ T479] xfrm0 speed is unknown, defaulting to 1000 [ 1007.596927][ T475] lo speed is unknown, defaulting to 1000 [ 1008.001746][ T518] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.7128'. [ 1008.011568][ T518] openvswitch: netlink: Message has 6 unknown bytes. [ 1008.062943][ T518] syzkaller1: entered promiscuous mode [ 1008.071832][ T518] syzkaller1: entered allmulticast mode [ 1008.103924][ T518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7128'. [ 1008.125877][ T518] netlink: 'syz.3.7128': attribute type 1 has an invalid length. [ 1008.248239][ T479] lo speed is unknown, defaulting to 1000 [ 1008.248254][ T493] xfrm0 speed is unknown, defaulting to 1000 [ 1008.525037][ T526] netlink: 'syz.0.7132': attribute type 6 has an invalid length. [ 1008.553332][ T528] netlink: 'syz.0.7132': attribute type 6 has an invalid length. [ 1008.807154][ T493] lo speed is unknown, defaulting to 1000 [ 1009.046335][ T543] netlink: zone id is out of range [ 1009.051520][ T543] netlink: zone id is out of range [ 1009.056997][ T543] netlink: zone id is out of range [ 1009.062148][ T543] netlink: zone id is out of range [ 1009.084536][ T543] netlink: zone id is out of range [ 1009.102482][ T543] netlink: zone id is out of range [ 1009.115558][ T543] netlink: zone id is out of range [ 1009.128079][ T543] netlink: zone id is out of range [ 1009.137847][ T543] netlink: zone id is out of range [ 1009.530522][ T557] syzkaller1: entered promiscuous mode [ 1009.541111][ T557] syzkaller1: entered allmulticast mode [ 1009.557531][ T557] syzkaller1: left promiscuous mode [ 1009.563428][ T557] syzkaller1: left allmulticast mode [ 1009.981655][ T564] virt_wifi0 speed is unknown, defaulting to 1000 [ 1010.034001][ T580] netlink: 'syz.2.7145': attribute type 6 has an invalid length. [ 1010.064796][ T564] wg1 speed is unknown, defaulting to 1000 [ 1010.087687][ T564] xfrm0 speed is unknown, defaulting to 1000 [ 1010.336943][ T594] syzkaller0: entered promiscuous mode [ 1010.343659][ T594] syzkaller0: entered allmulticast mode [ 1010.381428][ T594] tipc: Enabled bearer , priority 0 [ 1010.400804][ T593] tipc: Resetting bearer [ 1010.401189][ T597] __nla_validate_parse: 3 callbacks suppressed [ 1010.401207][ T597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7155'. [ 1010.447316][ T593] tipc: Disabling bearer [ 1010.537076][ T598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7154'. [ 1010.553928][ T598] xfrm1: entered allmulticast mode [ 1010.672826][ T607] netlink: 'syz.4.7158': attribute type 1 has an invalid length. [ 1010.676695][ T614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7159'. [ 1010.685712][ T607] netlink: 'syz.4.7158': attribute type 2 has an invalid length. [ 1010.697772][ T607] netlink: 'syz.4.7158': attribute type 1 has an invalid length. [ 1010.780211][ T564] lo speed is unknown, defaulting to 1000 [ 1010.930935][ T625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7161'. [ 1010.961933][ T625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7161'. [ 1011.246735][ T643] netlink: 'syz.1.7167': attribute type 8 has an invalid length. [ 1011.273172][ T643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7167'. [ 1011.277734][ T645] dvmrp6: entered allmulticast mode [ 1011.373654][ T643] bond0: entered promiscuous mode [ 1011.399980][ T643] bond_slave_0: entered promiscuous mode [ 1011.412362][ T643] bond_slave_1: entered promiscuous mode [ 1011.422737][ T643] dummy0: entered promiscuous mode [ 1011.433477][ T643] bond0: left promiscuous mode [ 1011.452547][ T643] bond_slave_0: left promiscuous mode [ 1011.475956][ T643] bond_slave_1: left promiscuous mode [ 1011.496855][ T643] dummy0: left promiscuous mode [ 1011.643932][ T659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7173'. [ 1011.692500][ T661] netlink: 'syz.4.7174': attribute type 10 has an invalid length. [ 1011.720617][ T661] bond2: (slave dummy0): Releasing active interface [ 1011.750289][ T661] team0: Port device dummy0 added [ 1011.769590][ T668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7174'. [ 1011.808515][ T661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7174'. [ 1011.974093][ T674] virt_wifi0 speed is unknown, defaulting to 1000 [ 1011.982714][ T674] wg1 speed is unknown, defaulting to 1000 [ 1011.996284][ T674] xfrm0 speed is unknown, defaulting to 1000 [ 1012.339465][ T674] lo speed is unknown, defaulting to 1000 [ 1012.438848][ T692] dvmrp6: entered allmulticast mode [ 1012.450142][ T699] netlink: 'syz.1.7184': attribute type 66 has an invalid length. [ 1012.566048][ T707] macsec1: entered promiscuous mode [ 1012.571492][ T707] macsec1: entered allmulticast mode [ 1012.664805][ T711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7189'. [ 1012.863912][ T709] syzkaller0: entered promiscuous mode [ 1012.870492][ T709] syzkaller0: entered allmulticast mode [ 1012.903026][ T719] macvlan2: entered promiscuous mode [ 1012.944129][ T725] macvlan3: entered promiscuous mode [ 1012.962092][ T717] virt_wifi0 speed is unknown, defaulting to 1000 [ 1013.032714][ T717] wg1 speed is unknown, defaulting to 1000 [ 1014.002633][ T748] net_ratelimit: 134 callbacks suppressed [ 1014.002655][ T748] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1015.425749][ T717] xfrm0 speed is unknown, defaulting to 1000 [ 1015.597268][ T757] __nla_validate_parse: 2 callbacks suppressed [ 1015.597292][ T757] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7200'. [ 1015.634633][ T757] nbd: socks must be embedded in a SOCK_ITEM attr [ 1015.641674][ T747] netem: incorrect gi model size [ 1015.648825][ T747] netem: change failed [ 1017.673212][ T717] lo speed is unknown, defaulting to 1000 [ 1017.734205][ T754] virt_wifi0 speed is unknown, defaulting to 1000 [ 1017.778981][ T754] wg1 speed is unknown, defaulting to 1000 [ 1017.809796][ T754] xfrm0 speed is unknown, defaulting to 1000 [ 1017.879400][ T778] netlink: 'syz.4.7204': attribute type 6 has an invalid length. [ 1018.100346][ T785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7207'. [ 1018.285610][ T795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7209'. [ 1018.285783][ T754] lo speed is unknown, defaulting to 1000 [ 1018.335263][ T795] netlink: 'syz.4.7209': attribute type 39 has an invalid length. [ 1018.811714][ T804] netlink: 'syz.3.7211': attribute type 11 has an invalid length. [ 1018.995427][ T806] virt_wifi0 speed is unknown, defaulting to 1000 [ 1019.003834][ T806] wg1 speed is unknown, defaulting to 1000 [ 1019.092949][ T806] xfrm0 speed is unknown, defaulting to 1000 [ 1019.529077][ T806] lo speed is unknown, defaulting to 1000 [ 1019.651363][ T815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7214'. [ 1020.011823][ T815] virt_wifi0 speed is unknown, defaulting to 1000 [ 1020.032341][ T824] xt_CT: No such helper "pptp" [ 1020.066886][ T815] wg1 speed is unknown, defaulting to 1000 [ 1020.097421][ T815] xfrm0 speed is unknown, defaulting to 1000 [ 1020.449356][ T845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7220'. [ 1020.472066][ T815] lo speed is unknown, defaulting to 1000 [ 1020.478187][ T847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7220'. [ 1021.147001][ T859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7225'. [ 1021.306469][ T866] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7227'. [ 1021.398703][ T861] virt_wifi0 speed is unknown, defaulting to 1000 [ 1021.473968][ T861] wg1 speed is unknown, defaulting to 1000 [ 1021.492346][ T861] xfrm0 speed is unknown, defaulting to 1000 [ 1021.674209][ T877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7228'. [ 1022.043940][ T888] tipc: New replicast peer: 255.255.15.242 [ 1022.075802][ T888] tipc: Enabled bearer , priority 10 [ 1022.263702][ T861] lo speed is unknown, defaulting to 1000 [ 1022.310598][ T900] netlink: 'syz.2.7237': attribute type 3 has an invalid length. [ 1022.750083][ T947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7242'. [ 1022.950827][ T953] netlink: 'syz.1.7245': attribute type 3 has an invalid length. [ 1022.991534][ T953] syz_tun: entered allmulticast mode [ 1023.055929][ T951] syz_tun: left allmulticast mode [ 1023.087031][ T961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7248'. [ 1023.268220][ T978] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.7250'. [ 1023.284809][ T977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7248'. [ 1023.318441][ T978] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1023.803021][ T1001] syzkaller0: entered promiscuous mode [ 1023.819388][ T1015] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7258'. [ 1023.835425][ T1021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1023.858889][ T1001] syzkaller0: entered allmulticast mode [ 1023.906858][ T1000] virt_wifi0 speed is unknown, defaulting to 1000 [ 1024.749953][ T1062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7263'. [ 1025.036713][ T1072] netlink: 'syz.0.7265': attribute type 1 has an invalid length. [ 1025.045068][ T1072] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7265'. [ 1026.633808][ T1000] wg1 speed is unknown, defaulting to 1000 [ 1026.667780][ T1046] dvmrp12: entered allmulticast mode [ 1026.689036][ T1046] dvmrp12: left allmulticast mode [ 1026.772820][ T1000] xfrm0 speed is unknown, defaulting to 1000 [ 1026.918924][ T1084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7268'. [ 1026.946282][ T1084] vlan1: entered promiscuous mode [ 1026.951373][ T1084] bridge0: entered promiscuous mode [ 1027.000237][ T1091] netlink: 'syz.2.7268': attribute type 4 has an invalid length. [ 1027.033700][ T1092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7270'. [ 1027.047493][ T1091] netlink: 'syz.2.7268': attribute type 1 has an invalid length. [ 1027.066900][ T1091] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7268'. [ 1027.086179][ T1097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7270'. [ 1027.431947][ T1107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7275'. [ 1027.441401][ T1107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7275'. [ 1027.479137][ T1000] lo speed is unknown, defaulting to 1000 [ 1027.563348][ T1102] syzkaller0: entered promiscuous mode [ 1027.570486][ T1111] netlink: 'syz.3.7277': attribute type 21 has an invalid length. [ 1027.578690][ T1102] syzkaller0: entered allmulticast mode [ 1027.601775][ T1111] netlink: 'syz.3.7277': attribute type 6 has an invalid length. [ 1027.611238][ T1111] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7277'. [ 1027.647318][ T1101] tun0: tun_chr_ioctl cmd 1074025698 [ 1027.653056][ T1101] tun0: tun_chr_ioctl cmd 2147767507 [ 1027.712870][ T1119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7279'. [ 1027.750685][ T1121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7280'. [ 1027.763649][ T1123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7280'. [ 1027.779768][ T1119] gtp0: entered promiscuous mode [ 1027.785509][ T1119] gtp0: entered allmulticast mode [ 1028.151627][ T1136] netlink: 'syz.0.7285': attribute type 6 has an invalid length. [ 1028.187941][ T1136] netlink: 'syz.0.7285': attribute type 6 has an invalid length. [ 1028.890983][ T1160] virt_wifi0 speed is unknown, defaulting to 1000 [ 1028.907104][ T1160] wg1 speed is unknown, defaulting to 1000 [ 1028.922208][ T1160] xfrm0 speed is unknown, defaulting to 1000 [ 1028.955891][ T1165] syzkaller0: entered promiscuous mode [ 1028.961861][ T1165] syzkaller0: entered allmulticast mode [ 1029.263954][ T1160] lo speed is unknown, defaulting to 1000 [ 1029.659734][ T1187] gretap0: entered promiscuous mode [ 1029.678032][ T1187] gretap0: left promiscuous mode [ 1029.757660][ T1187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.839789][ T1187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1029.868213][ T30] audit: type=1107 audit(1770103183.233:22): pid=1198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Õ¼ÆÖ­Áid´àQRjü/¥l†^i¡‹á>ñvå“þCázyDp1ÐD€¡@®¤!q6j 2ï—;ÃÀ¬ë$(TxŸÖðÔ>-× crËB±ÆAD€´xé4hOg] ¢5¶°UãÉmE1Q½{H"“¢ú=¼¿éj+ö&AV`Œ?TÀN¢-61D6m—n¬'éI@¸Î\+¾‰â ÿËšY“^eX­XÖoi t‡/'Ó§QÔz!åyfÞ@øxP{Ú³ÔqÂÓÂà Ö99̤æ"lþ~HÿëÆ,…µì0ã}©¼OèuÑÍÎÀ~úébšM' [ 1029.953916][ T1185] virt_wifi0 speed is unknown, defaulting to 1000 [ 1029.996043][ T1185] wg1 speed is unknown, defaulting to 1000 [ 1030.041577][ T1185] xfrm0 speed is unknown, defaulting to 1000 [ 1030.328600][ T1211] syzkaller0: entered promiscuous mode [ 1030.334138][ T1211] syzkaller0: entered allmulticast mode [ 1030.725111][ T1216] virt_wifi0 speed is unknown, defaulting to 1000 [ 1030.756942][ T1216] wg1 speed is unknown, defaulting to 1000 [ 1031.301028][ T1185] lo speed is unknown, defaulting to 1000 [ 1031.333496][ T1216] xfrm0 speed is unknown, defaulting to 1000 [ 1032.096733][ T1216] lo speed is unknown, defaulting to 1000 [ 1032.215842][ T1254] netlink: 'syz.4.7317': attribute type 1 has an invalid length. [ 1032.266945][ T1254] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1032.414213][ T1263] __nla_validate_parse: 2 callbacks suppressed [ 1032.414235][ T1263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7320'. [ 1032.663122][ T1270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7323'. [ 1032.680679][ T1271] netlink: 'syz.1.7322': attribute type 5 has an invalid length. [ 1032.714026][ T1269] netlink: 'syz.1.7322': attribute type 5 has an invalid length. [ 1032.797980][ T1277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.809600][ T1277] batadv_slave_0: entered promiscuous mode [ 1032.864749][ T1277] netlink: 'syz.0.7325': attribute type 2 has an invalid length. [ 1033.338430][ T1318] geneve1: Caught tx_queue_len zero misconfig [ 1033.540355][ T1330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7339'. [ 1033.549709][ T1330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7339'. [ 1033.738608][ T1330] virt_wifi0 speed is unknown, defaulting to 1000 [ 1033.829024][ T1339] virt_wifi0 speed is unknown, defaulting to 1000 [ 1033.842000][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7343'. [ 1033.858532][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7343'. [ 1033.866173][ T1330] wg1 speed is unknown, defaulting to 1000 [ 1033.885749][ T1339] wg1 speed is unknown, defaulting to 1000 [ 1033.893611][ T1339] xfrm0 speed is unknown, defaulting to 1000 [ 1033.925317][ T1352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7344'. [ 1033.979063][ T9047] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1033.979209][ T1352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7344'. [ 1033.998216][ T9047] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.018803][ T9047] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.052200][ T9047] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.135382][ T1358] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7347'. [ 1034.164526][ T1358] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7347'. [ 1034.346908][ T1366] netlink: 'syz.0.7349': attribute type 1 has an invalid length. [ 1034.480904][ T1366] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1034.579428][ T1339] lo speed is unknown, defaulting to 1000 [ 1034.590625][ T1330] xfrm0 speed is unknown, defaulting to 1000 [ 1034.678088][ T1366] bond9: (slave gretap3): making interface the new active one [ 1034.721868][ T1366] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 1034.796810][ T1402] lo: Caught tx_queue_len zero misconfig [ 1034.860227][ T1404] bridge_slave_0: entered promiscuous mode [ 1035.439550][ T1330] lo speed is unknown, defaulting to 1000 [ 1035.440854][ T1420] virt_wifi0 speed is unknown, defaulting to 1000 [ 1035.564862][ T1420] wg1 speed is unknown, defaulting to 1000 [ 1035.618530][ T1432] syzkaller0: entered promiscuous mode [ 1035.624178][ T1432] syzkaller0: entered allmulticast mode [ 1035.680150][ T1420] xfrm0 speed is unknown, defaulting to 1000 [ 1036.020521][ T1441] tipc: Enabled bearer , priority 0 [ 1036.045048][ T1441] syzkaller0: entered promiscuous mode [ 1036.050721][ T1441] syzkaller0: entered allmulticast mode [ 1036.119721][ T1441] tipc: Resetting bearer [ 1036.146485][ T1439] tipc: Resetting bearer [ 1036.197012][ T1439] tipc: Disabling bearer [ 1036.249032][ T1420] lo speed is unknown, defaulting to 1000 [ 1036.431428][ T1458] netlink: 'syz.4.7373': attribute type 4 has an invalid length. [ 1036.551928][ T1456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1036.648531][ T1462] macvlan2: entered promiscuous mode [ 1036.654259][ T1462] macvlan2: entered allmulticast mode [ 1036.878673][ T1469] virt_wifi0 speed is unknown, defaulting to 1000 [ 1036.978310][ T1471] geneve3: entered promiscuous mode [ 1036.983850][ T1471] geneve3: entered allmulticast mode [ 1036.992111][ T1469] wg1 speed is unknown, defaulting to 1000 [ 1037.030227][ T1389] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1037.046369][ T1389] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1037.059281][ T1469] xfrm0 speed is unknown, defaulting to 1000 [ 1037.060746][ T1389] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1037.074949][ T1389] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1037.619425][ T1469] lo speed is unknown, defaulting to 1000 [ 1038.031146][ T1505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1038.369710][ T1521] __nla_validate_parse: 3 callbacks suppressed [ 1038.369733][ T1521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7390'. [ 1038.570390][ T1528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7391'. [ 1038.700304][ T1532] sctp: [Deprecated]: syz.4.7393 (pid 1532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1038.700304][ T1532] Use struct sctp_sack_info instead [ 1038.743665][ T1532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7393'. [ 1038.780194][ T1532] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7393'. [ 1039.026139][ T1543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7394'. [ 1039.297159][ T1556] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.7400'. [ 1039.328863][ T1562] netlink: 860 bytes leftover after parsing attributes in process `syz.2.7398'. [ 1039.345366][ T1563] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.7400'. [ 1039.363258][ T1556] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1039.386654][ T1563] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1039.478941][ T1572] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7403'. [ 1039.667810][ T1582] FAULT_INJECTION: forcing a failure. [ 1039.667810][ T1582] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.710177][ T1582] CPU: 0 UID: 0 PID: 1582 Comm: syz.0.7405 Not tainted syzkaller #0 PREEMPT(full) [ 1039.710207][ T1582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1039.710219][ T1582] Call Trace: [ 1039.710228][ T1582] [ 1039.710237][ T1582] dump_stack_lvl+0xe8/0x150 [ 1039.710271][ T1582] should_fail_ex+0x412/0x560 [ 1039.710310][ T1582] should_failslab+0xa8/0x100 [ 1039.710334][ T1582] __kmalloc_noprof+0xde/0x7e0 [ 1039.710354][ T1582] ? nla_strdup+0x9d/0x140 [ 1039.710378][ T1582] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1039.710402][ T1582] nla_strdup+0x9d/0x140 [ 1039.710431][ T1582] nf_tables_newchain+0x1a9a/0x2890 [ 1039.710458][ T1582] ? __lock_acquire+0x6b5/0x2cf0 [ 1039.710502][ T1582] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1039.710565][ T1582] ? nfnl_pernet+0x23/0x240 [ 1039.710585][ T1582] ? nfnl_pernet+0x23/0x240 [ 1039.710627][ T1582] ? __nla_parse+0x40/0x60 [ 1039.710658][ T1582] nfnetlink_rcv+0x1240/0x27b0 [ 1039.710720][ T1582] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1039.710760][ T1582] ? ref_tracker_free+0x693/0x840 [ 1039.710819][ T1582] ? __netlink_deliver_tap+0x807/0x850 [ 1039.710842][ T1582] ? netlink_deliver_tap+0x2e/0x1b0 [ 1039.710886][ T1582] netlink_unicast+0x80f/0x9b0 [ 1039.710918][ T1582] ? __pfx_netlink_unicast+0x10/0x10 [ 1039.710941][ T1582] ? netlink_sendmsg+0x650/0xb40 [ 1039.710961][ T1582] ? skb_put+0x11b/0x210 [ 1039.710991][ T1582] netlink_sendmsg+0x813/0xb40 [ 1039.711026][ T1582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.711052][ T1582] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1039.711078][ T1582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1039.711102][ T1582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.711124][ T1582] ____sys_sendmsg+0xa68/0xad0 [ 1039.711152][ T1582] ? __might_fault+0xaf/0x130 [ 1039.711187][ T1582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.711226][ T1582] ? import_iovec+0x73/0xa0 [ 1039.711259][ T1582] ___sys_sendmsg+0x2a5/0x360 [ 1039.711291][ T1582] ? __lock_acquire+0x6b5/0x2cf0 [ 1039.711321][ T1582] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.711388][ T1582] ? __fget_files+0x2a/0x420 [ 1039.711413][ T1582] ? __fget_files+0x3a0/0x420 [ 1039.711444][ T1582] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1039.711471][ T1582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1039.711510][ T1582] ? __pfx_ksys_write+0x10/0x10 [ 1039.711549][ T1582] do_syscall_64+0xe2/0xf80 [ 1039.711573][ T1582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.711592][ T1582] ? trace_irq_disable+0x37/0x100 [ 1039.711611][ T1582] ? clear_bhb_loop+0x60/0xb0 [ 1039.711634][ T1582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.711653][ T1582] RIP: 0033:0x7f140e19aeb9 [ 1039.711672][ T1582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.711689][ T1582] RSP: 002b:00007f140ef88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.711711][ T1582] RAX: ffffffffffffffda RBX: 00007f140e415fa0 RCX: 00007f140e19aeb9 [ 1039.711724][ T1582] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1039.711736][ T1582] RBP: 00007f140ef88090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.711748][ T1582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.711759][ T1582] R13: 00007f140e416038 R14: 00007f140e415fa0 R15: 00007ffdcb7368f8 [ 1039.711793][ T1582] [ 1040.319283][ T1597] virt_wifi0 speed is unknown, defaulting to 1000 [ 1040.377293][ T1597] wg1 speed is unknown, defaulting to 1000 [ 1040.384220][ T1597] xfrm0 speed is unknown, defaulting to 1000 [ 1040.448939][ T1600] virt_wifi0 speed is unknown, defaulting to 1000 [ 1040.463325][ T30] audit: type=1800 audit(1770103193.813:23): pid=1613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7415" name=CB dev="tmpfs" ino=1203 res=0 errno=0 [ 1040.552843][ T1600] wg1 speed is unknown, defaulting to 1000 [ 1040.556968][ T1617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7416'. [ 1040.867872][ T1597] lo speed is unknown, defaulting to 1000 [ 1040.868576][ T1600] xfrm0 speed is unknown, defaulting to 1000 [ 1041.010237][ T1632] atomic_op ffff88807f94c198 conn xmit_atomic 0000000000000000 [ 1041.019054][ T1632] netlink: 'syz.1.7419': attribute type 23 has an invalid length. [ 1041.084610][ T1625] netlink: 'syz.4.7417': attribute type 1 has an invalid length. [ 1041.846796][ T1672] xt_l2tp: v2 doesn't support IP mode [ 1042.001835][ T1678] netlink: 'syz.3.7431': attribute type 5 has an invalid length. [ 1042.308827][ T1600] lo speed is unknown, defaulting to 1000 [ 1042.484702][T24974] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1042.806460][ T1710] FAULT_INJECTION: forcing a failure. [ 1042.806460][ T1710] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.821868][ T1710] CPU: 1 UID: 0 PID: 1710 Comm: syz.2.7441 Not tainted syzkaller #0 PREEMPT(full) [ 1042.821896][ T1710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1042.821909][ T1710] Call Trace: [ 1042.821918][ T1710] [ 1042.821926][ T1710] dump_stack_lvl+0xe8/0x150 [ 1042.821959][ T1710] should_fail_ex+0x412/0x560 [ 1042.821990][ T1710] should_failslab+0xa8/0x100 [ 1042.822016][ T1710] __kmalloc_noprof+0xde/0x7e0 [ 1042.822034][ T1710] ? nft_pernet+0x23/0x240 [ 1042.822061][ T1710] ? nf_tables_newrule+0x152c/0x28b0 [ 1042.822095][ T1710] nf_tables_newrule+0x152c/0x28b0 [ 1042.822142][ T1710] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1042.822167][ T1710] ? nfnl_pernet+0x23/0x240 [ 1042.822188][ T1710] ? nfnl_pernet+0x23/0x240 [ 1042.822220][ T1710] ? __nla_parse+0x40/0x60 [ 1042.822252][ T1710] nfnetlink_rcv+0x1240/0x27b0 [ 1042.822322][ T1710] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1042.822396][ T1710] ? netlink_deliver_tap+0x2e/0x1b0 [ 1042.822421][ T1710] ? netlink_deliver_tap+0x2e/0x1b0 [ 1042.822464][ T1710] netlink_unicast+0x80f/0x9b0 [ 1042.822496][ T1710] ? __pfx_netlink_unicast+0x10/0x10 [ 1042.822520][ T1710] ? netlink_sendmsg+0x650/0xb40 [ 1042.822540][ T1710] ? skb_put+0x11b/0x210 [ 1042.822570][ T1710] netlink_sendmsg+0x813/0xb40 [ 1042.822605][ T1710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.822634][ T1710] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1042.822662][ T1710] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1042.822686][ T1710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1042.822708][ T1710] ____sys_sendmsg+0xa68/0xad0 [ 1042.822735][ T1710] ? __might_fault+0xaf/0x130 [ 1042.822778][ T1710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1042.822818][ T1710] ? import_iovec+0x73/0xa0 [ 1042.822851][ T1710] ___sys_sendmsg+0x2a5/0x360 [ 1042.822877][ T1710] ? __lock_acquire+0x6b5/0x2cf0 [ 1042.822910][ T1710] ? __pfx____sys_sendmsg+0x10/0x10 [ 1042.823002][ T1710] ? __fget_files+0x2a/0x420 [ 1042.823023][ T1710] ? __fget_files+0x3a0/0x420 [ 1042.823057][ T1710] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1042.823088][ T1710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1042.823128][ T1710] ? __pfx_ksys_write+0x10/0x10 [ 1042.823171][ T1710] do_syscall_64+0xe2/0xf80 [ 1042.823196][ T1710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.823214][ T1710] ? trace_irq_disable+0x37/0x100 [ 1042.823231][ T1710] ? clear_bhb_loop+0x60/0xb0 [ 1042.823255][ T1710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.823273][ T1710] RIP: 0033:0x7fc5a999aeb9 [ 1042.823299][ T1710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.823314][ T1710] RSP: 002b:00007fc5aa933028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.823335][ T1710] RAX: ffffffffffffffda RBX: 00007fc5a9c15fa0 RCX: 00007fc5a999aeb9 [ 1042.823349][ T1710] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1042.823362][ T1710] RBP: 00007fc5aa933090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.823374][ T1710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1042.823385][ T1710] R13: 00007fc5a9c16038 R14: 00007fc5a9c15fa0 R15: 00007ffe2ad55188 [ 1042.823421][ T1710] [ 1043.340255][ T1722] lo: Caught tx_queue_len zero misconfig [ 1043.374921][ T1717] __nla_validate_parse: 14 callbacks suppressed [ 1043.374945][ T1717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7443'. [ 1043.392097][T24974] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1043.441824][ T1717] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1043.553718][ T3485] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1043.558085][ T1729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1043.599746][ T1729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7448'. [ 1043.796616][ T1746] FAULT_INJECTION: forcing a failure. [ 1043.796616][ T1746] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.856267][ T1746] CPU: 0 UID: 0 PID: 1746 Comm: syz.1.7452 Not tainted syzkaller #0 PREEMPT(full) [ 1043.856298][ T1746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1043.856310][ T1746] Call Trace: [ 1043.856319][ T1746] [ 1043.856328][ T1746] dump_stack_lvl+0xe8/0x150 [ 1043.856360][ T1746] should_fail_ex+0x412/0x560 [ 1043.856391][ T1746] should_failslab+0xa8/0x100 [ 1043.856415][ T1746] __kmalloc_cache_noprof+0x83/0x6e0 [ 1043.856437][ T1746] ? nf_tables_newchain+0xf8a/0x2890 [ 1043.856468][ T1746] nf_tables_newchain+0xf8a/0x2890 [ 1043.856514][ T1746] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1043.856569][ T1746] ? nft_trans_table_add+0x230/0x430 [ 1043.856601][ T1746] ? nfnl_pernet+0x23/0x240 [ 1043.856622][ T1746] ? nfnl_pernet+0x23/0x240 [ 1043.856653][ T1746] ? __nla_parse+0x40/0x60 [ 1043.856685][ T1746] nfnetlink_rcv+0x1240/0x27b0 [ 1043.856747][ T1746] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1043.856786][ T1746] ? ref_tracker_free+0x693/0x840 [ 1043.856843][ T1746] ? __netlink_deliver_tap+0x807/0x850 [ 1043.856866][ T1746] ? netlink_deliver_tap+0x2e/0x1b0 [ 1043.856909][ T1746] netlink_unicast+0x80f/0x9b0 [ 1043.856940][ T1746] ? __pfx_netlink_unicast+0x10/0x10 [ 1043.856963][ T1746] ? netlink_sendmsg+0x650/0xb40 [ 1043.856984][ T1746] ? skb_put+0x11b/0x210 [ 1043.857014][ T1746] netlink_sendmsg+0x813/0xb40 [ 1043.857049][ T1746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1043.857076][ T1746] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1043.857103][ T1746] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1043.857127][ T1746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1043.857149][ T1746] ____sys_sendmsg+0xa68/0xad0 [ 1043.857176][ T1746] ? __might_fault+0xaf/0x130 [ 1043.857220][ T1746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1043.857259][ T1746] ? import_iovec+0x73/0xa0 [ 1043.857290][ T1746] ___sys_sendmsg+0x2a5/0x360 [ 1043.857314][ T1746] ? __lock_acquire+0x6b5/0x2cf0 [ 1043.857346][ T1746] ? __pfx____sys_sendmsg+0x10/0x10 [ 1043.857414][ T1746] ? __fget_files+0x2a/0x420 [ 1043.857435][ T1746] ? __fget_files+0x3a0/0x420 [ 1043.857470][ T1746] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1043.857500][ T1746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1043.857540][ T1746] ? __pfx_ksys_write+0x10/0x10 [ 1043.857582][ T1746] do_syscall_64+0xe2/0xf80 [ 1043.857606][ T1746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.857624][ T1746] ? trace_irq_disable+0x37/0x100 [ 1043.857643][ T1746] ? clear_bhb_loop+0x60/0xb0 [ 1043.857668][ T1746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.857687][ T1746] RIP: 0033:0x7f45f9b9aeb9 [ 1043.857707][ T1746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.857724][ T1746] RSP: 002b:00007f45faa65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1043.857747][ T1746] RAX: ffffffffffffffda RBX: 00007f45f9e15fa0 RCX: 00007f45f9b9aeb9 [ 1043.857762][ T1746] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1043.857774][ T1746] RBP: 00007f45faa65090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.857787][ T1746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1043.857799][ T1746] R13: 00007f45f9e16038 R14: 00007f45f9e15fa0 R15: 00007ffe5bfdb268 [ 1043.857834][ T1746] [ 1044.252760][ T1743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.278416][ T1743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1044.284601][ T1753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7453'. [ 1044.360375][ T1753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7453'. [ 1044.589012][ T1769] virt_wifi0 speed is unknown, defaulting to 1000 [ 1044.645394][ T8300] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1044.654965][ T8300] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1044.670316][ T1769] wg1 speed is unknown, defaulting to 1000 [ 1044.726210][ T1769] xfrm0 speed is unknown, defaulting to 1000 [ 1044.727241][ T1781] virt_wifi0 speed is unknown, defaulting to 1000 [ 1044.748910][ T1779] ip6tnl4: entered allmulticast mode [ 1044.778034][ T1781] wg1 speed is unknown, defaulting to 1000 [ 1044.929246][ T1792] team0: Port device dummy0 removed [ 1044.949597][T24983] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1044.977751][ T1792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1045.060186][ T1794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7463'. [ 1045.125976][ T1803] netlink: 'syz.2.7465': attribute type 1 has an invalid length. [ 1045.196927][ T1803] bond1: entered promiscuous mode [ 1045.203227][ T1803] bond1: entered allmulticast mode [ 1045.271384][ T1808] bond1: (slave ip6gretap1): making interface the new active one [ 1045.286902][ T1808] ip6gretap1: entered promiscuous mode [ 1045.292607][ T1808] ip6gretap1: entered allmulticast mode [ 1045.300208][ T1808] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1045.310429][ T1781] xfrm0 speed is unknown, defaulting to 1000 [ 1045.317022][ T1803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7465'. [ 1045.329005][ T1769] lo speed is unknown, defaulting to 1000 [ 1045.656291][ T1820] bridge0: entered allmulticast mode [ 1045.665530][ T1820] bridge_slave_1: left allmulticast mode [ 1045.671281][ T1820] bridge_slave_1: left promiscuous mode [ 1045.677772][ T1820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.693803][ T1820] bridge_slave_0: left allmulticast mode [ 1045.705103][ T1820] bridge_slave_0: left promiscuous mode [ 1045.710945][ T1820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.816380][ T1829] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7469'. [ 1045.894371][ T1829] gretap0: entered promiscuous mode [ 1045.930025][ T1781] lo speed is unknown, defaulting to 1000 [ 1046.351358][ T1875] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.7476'. [ 1046.625184][ T1891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7481'. [ 1046.675627][ T1891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7481'. [ 1046.886270][ T1905] netlink: 'syz.3.7485': attribute type 1 has an invalid length. [ 1047.048682][ T1914] netlink: 'syz.2.7487': attribute type 3 has an invalid length. [ 1047.134953][ T1926] syzkaller0: entered promiscuous mode [ 1047.143242][ T1926] syzkaller0: entered allmulticast mode [ 1047.158614][ T1926] tipc: Enabled bearer , priority 0 [ 1047.237651][ T1925] tipc: Resetting bearer [ 1047.299938][ T1925] tipc: Disabling bearer [ 1047.914789][ T1952] Bluetooth: MGMT ver 1.23 [ 1047.995442][ T1954] netlink: 'syz.4.7499': attribute type 3 has an invalid length. [ 1048.132861][ T1957] netlink: 'syz.2.7500': attribute type 4 has an invalid length. [ 1048.264826][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1048.601045][ T1974] __nla_validate_parse: 12 callbacks suppressed [ 1048.601069][ T1974] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7504'. [ 1048.802680][ T1983] virt_wifi0 speed is unknown, defaulting to 1000 [ 1048.812331][ T1983] wg1 speed is unknown, defaulting to 1000 [ 1048.822973][ T1983] xfrm0 speed is unknown, defaulting to 1000 [ 1048.981529][ T1991] netlink: 'syz.0.7511': attribute type 1 has an invalid length. [ 1049.033752][ T1991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7511'. [ 1049.046023][ T1991] bond10 (unregistering): Released all slaves [ 1049.268132][ T1997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7512'. [ 1049.300939][ T1983] lo speed is unknown, defaulting to 1000 [ 1049.542152][ T2006] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7515'. [ 1049.682693][ T2007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7514'. [ 1049.694706][ T2007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7514'. [ 1049.724923][ T2007] netlink: 'syz.3.7514': attribute type 12 has an invalid length. [ 1049.751944][ T2007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7514'. [ 1049.787640][ T2007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7514'. [ 1049.796878][ T2007] netlink: 'syz.3.7514': attribute type 12 has an invalid length. [ 1049.921243][ T2014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7518'. [ 1050.252451][ T2021] xt_TCPMSS: Only works on TCP SYN packets [ 1050.491253][ T2030] netlink: 'syz.2.7523': attribute type 3 has an invalid length. [ 1050.556955][ T2030] netlink: 'syz.2.7523': attribute type 3 has an invalid length. [ 1050.608637][ T2027] virt_wifi0 speed is unknown, defaulting to 1000 [ 1050.646304][ T2027] wg1 speed is unknown, defaulting to 1000 [ 1050.651705][ T2034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7524'. [ 1050.671039][ T2027] xfrm0 speed is unknown, defaulting to 1000 [ 1050.911459][ T2027] lo speed is unknown, defaulting to 1000 [ 1051.339176][ T2071] netlink: 'syz.0.7532': attribute type 13 has an invalid length. [ 1051.422210][ T1864] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.454165][ T1864] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.494610][ T1864] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.511466][ T1864] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1051.742212][ T2084] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1052.139311][ T2090] virt_wifi0 speed is unknown, defaulting to 1000 [ 1052.149778][ T2090] wg1 speed is unknown, defaulting to 1000 [ 1052.152328][ T2104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1052.159058][ T2090] xfrm0 speed is unknown, defaulting to 1000 [ 1052.359837][ T2112] virt_wifi0 speed is unknown, defaulting to 1000 [ 1052.373011][ T2112] wg1 speed is unknown, defaulting to 1000 [ 1052.601713][ T2112] xfrm0 speed is unknown, defaulting to 1000 [ 1052.601783][ T2090] lo speed is unknown, defaulting to 1000 [ 1052.876056][ T2112] lo speed is unknown, defaulting to 1000 [ 1053.046383][ T2134] virt_wifi0 speed is unknown, defaulting to 1000 [ 1053.179523][ T2134] wg1 speed is unknown, defaulting to 1000 [ 1053.187564][ T2134] xfrm0 speed is unknown, defaulting to 1000 [ 1053.755068][ T2134] lo speed is unknown, defaulting to 1000 [ 1053.809780][ T2154] virt_wifi0 speed is unknown, defaulting to 1000 [ 1053.869637][ T2154] wg1 speed is unknown, defaulting to 1000 [ 1053.919192][ T2154] xfrm0 speed is unknown, defaulting to 1000 [ 1054.434715][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.447469][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.454517][ T2159] __nla_validate_parse: 7 callbacks suppressed [ 1054.454535][ T2159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7554'. [ 1054.526730][ T2161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7555'. [ 1054.886134][ T2164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.917226][ T2164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.976053][ T2164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 1055.032042][ T2164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.163195][ T2164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.174031][ T2164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.207689][ T2154] lo speed is unknown, defaulting to 1000 [ 1055.207814][ T2169] netlink: 252 bytes leftover after parsing attributes in process `syz.2.7557'. [ 1055.704591][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1055.849622][ T2180] virt_wifi0 speed is unknown, defaulting to 1000 [ 1055.936891][ T2180] wg1 speed is unknown, defaulting to 1000 [ 1055.955247][ T2180] xfrm0 speed is unknown, defaulting to 1000 [ 1056.259554][ T2185] IPVS: Scheduler module ip_vs_ not found [ 1056.411203][ T2180] lo speed is unknown, defaulting to 1000 [ 1056.753758][ T2192] bridge0: port 1(macsec0) entered blocking state [ 1056.765088][ T2192] bridge0: port 1(macsec0) entered disabled state [ 1056.772434][ T2192] macsec0: entered allmulticast mode [ 1056.778338][ T2192] veth1_macvtap: entered allmulticast mode [ 1056.792270][ T2192] macsec0: entered promiscuous mode [ 1056.866209][ T2199] validate_nla: 1 callbacks suppressed [ 1056.866227][ T2199] netlink: 'syz.3.7564': attribute type 9 has an invalid length. [ 1056.934494][ T2199] netlink: 'syz.3.7564': attribute type 6 has an invalid length. [ 1057.735741][ T2229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7573'. [ 1057.807990][ T2229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7573'. [ 1058.116837][ T2245] virt_wifi0 speed is unknown, defaulting to 1000 [ 1058.145004][ T2245] wg1 speed is unknown, defaulting to 1000 [ 1058.166587][ T2245] xfrm0 speed is unknown, defaulting to 1000 [ 1058.318754][ T2259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7580'. [ 1058.366907][ T2259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7580'. [ 1058.403983][ T2259] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7580'. [ 1058.413595][ T2263] netlink: 'syz.2.7581': attribute type 21 has an invalid length. [ 1058.428358][ T2263] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7581'. [ 1058.463871][ T2263] netlink: 'syz.2.7581': attribute type 4 has an invalid length. [ 1058.499044][ T2263] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7581'. [ 1058.564827][ T2268] netlink: 'syz.2.7581': attribute type 1 has an invalid length. [ 1059.001410][ T2245] lo speed is unknown, defaulting to 1000 [ 1059.400883][ T2290] vlan0: left promiscuous mode [ 1059.447473][ T2290] macsec1: left promiscuous mode [ 1059.483761][ T2290] geneve2: left promiscuous mode [ 1059.484679][ T2309] netlink: 'syz.3.7591': attribute type 1 has an invalid length. [ 1059.489773][ T2290] macvlan2: left promiscuous mode [ 1059.643539][ T2309] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1059.940872][ T2316] __nla_validate_parse: 1 callbacks suppressed [ 1059.940892][ T2316] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7593'. [ 1059.958800][ T9044] veth13: left allmulticast mode [ 1059.972976][ T9044] veth13: left promiscuous mode [ 1059.996553][ T9044] bridge2: port 3(veth13) entered disabled state [ 1060.010063][ T9044] veth0_to_bond: left allmulticast mode [ 1060.025237][ T9044] veth0_to_bond: left promiscuous mode [ 1060.031000][ T9044] bridge2: port 2(veth0_to_bond) entered disabled state [ 1060.048303][ T9044] veth11: left allmulticast mode [ 1060.053305][ T9044] veth11: left promiscuous mode [ 1060.060151][ T9044] bridge2: port 1(veth11) entered disabled state [ 1060.439318][ T9044] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1060.767683][T20151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.940373][ T9044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.951140][ T9044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.962571][ T9044] bond0 (unregistering): Released all slaves [ 1061.133942][ T9044] bond1 (unregistering): Released all slaves [ 1061.154042][ T9044] bond2 (unregistering): Released all slaves [ 1061.175833][ T9044] bond3 (unregistering): Released all slaves [ 1061.203719][ T9044] bond4 (unregistering): Released all slaves [ 1061.358184][ T9044] tipc: Disabling bearer [ 1061.403655][ T9044] tipc: Left network mode [ 1061.542554][ T2341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7599'. [ 1061.568867][ T2341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7599'. [ 1061.689837][ T2347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7602'. [ 1061.721322][ T2347] vlan4: entered allmulticast mode [ 1061.749709][ T2347] team0: entered allmulticast mode [ 1061.751379][ T2358] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7602'. [ 1061.779047][ T2347] team_slave_0: entered allmulticast mode [ 1061.796821][ T2347] team_slave_1: entered allmulticast mode [ 1061.906206][ T2354] macsec3: entered promiscuous mode [ 1061.930894][ T2354] dummy0: entered promiscuous mode [ 1061.965361][ T2354] macsec3: entered allmulticast mode [ 1061.977493][ T2354] dummy0: entered allmulticast mode [ 1062.005567][ T2354] dummy0: left allmulticast mode [ 1062.015223][ T2354] dummy0: left promiscuous mode [ 1062.148720][ T2373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1062.174691][ T2360] virt_wifi0 speed is unknown, defaulting to 1000 [ 1062.197436][ T2360] wg1 speed is unknown, defaulting to 1000 [ 1062.242891][ T2360] xfrm0 speed is unknown, defaulting to 1000 [ 1062.534809][ T9044] mac80211_hwsim hwsim35 wlan1 (unregistering): left promiscuous mode [ 1062.727502][ T2360] lo speed is unknown, defaulting to 1000 [ 1062.839782][ T2388] virt_wifi0 speed is unknown, defaulting to 1000 [ 1062.971127][ T2388] wg1 speed is unknown, defaulting to 1000 [ 1062.993974][ T2388] xfrm0 speed is unknown, defaulting to 1000 [ 1063.073191][ T2406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1063.130236][ T2409] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7616'. [ 1063.575682][ T2426] syzkaller0: entered promiscuous mode [ 1063.581225][ T2426] syzkaller0: entered allmulticast mode [ 1063.618728][ T2426] 0: reclassify loop, rule prio 0, protocol 800 [ 1063.628922][ T2426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7619'. [ 1063.716930][ T2426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7619'. [ 1063.776499][ T2426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7619'. [ 1063.820134][ T2426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7619'. [ 1063.931854][ T2426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1064.104808][ T2388] lo speed is unknown, defaulting to 1000 [ 1064.418912][ T9044] veth0_to_team: left promiscuous mode [ 1064.524912][ T9044] hsr_slave_0: left promiscuous mode [ 1064.531340][ T9044] hsr_slave_1: left promiscuous mode [ 1064.545346][ T9044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.565462][ T9044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.611500][ T9044] pimreg3 (unregistering): left allmulticast mode [ 1064.933924][ T30] audit: type=1804 audit(1770103218.293:24): pid=2439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7621" name="/newroot/257/cgroup.controllers" dev="tmpfs" ino=1331 res=1 errno=0 [ 1064.957579][ T30] audit: type=1800 audit(1770103218.293:25): pid=2439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7621" name="cgroup.controllers" dev="tmpfs" ino=1331 res=0 errno=0 [ 1064.994855][ T30] audit: type=1800 audit(1770103218.353:26): pid=2439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7621" name="cgroup.controllers" dev="tmpfs" ino=1331 res=0 errno=0 [ 1065.159150][ T2441] __nla_validate_parse: 13 callbacks suppressed [ 1065.159174][ T2441] netlink: 200 bytes leftover after parsing attributes in process `syz.1.7622'. [ 1065.560062][ T9044] team0 (unregistering): Port device team_slave_1 removed [ 1065.607736][ T9044] team0 (unregistering): Port device team_slave_0 removed [ 1066.446740][ T2456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7624'. [ 1066.545873][ T2457] tipc: Enabled bearer , priority 0 [ 1066.574077][ T2457] syzkaller0: entered promiscuous mode [ 1066.581030][ T2457] syzkaller0: entered allmulticast mode [ 1066.635331][ T2457] tipc: Resetting bearer [ 1066.665644][ T2457] netlink: 'syz.0.7626': attribute type 4 has an invalid length. [ 1066.673996][ T2457] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7626'. [ 1066.705840][ T2457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7626'. [ 1066.720214][ T2455] tipc: Resetting bearer [ 1066.790387][ T2455] tipc: Disabling bearer [ 1066.812032][ T2466] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7628'. [ 1066.843619][ T9044] IPVS: stop unused estimator thread 0... [ 1067.339456][ T1857] bond0: (slave bond_slave_0): interface is now down [ 1067.347783][ T2485] bond0: option arp_validate: invalid value (55553) [ 1067.364411][ T1857] bond0: (slave bond_slave_1): interface is now down [ 1067.396698][ T2485] bond0: option arp_validate: invalid value (55553) [ 1067.403605][ T1857] bond0: (slave dummy0): interface is now down [ 1067.410702][ T2485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7634'. [ 1067.426711][ T1845] bond0: (slave bond_slave_0): interface is now down [ 1067.433461][ T1845] bond0: (slave bond_slave_1): interface is now down [ 1067.472017][ T1845] bond0: (slave dummy0): interface is now down [ 1067.489939][ T2489] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7635'. [ 1067.499281][ T1845] bond0: now running without any active interface! [ 1068.290106][ T2521] virt_wifi0 speed is unknown, defaulting to 1000 [ 1068.304704][ T2527] netlink: 'syz.2.7623': attribute type 1 has an invalid length. [ 1068.333247][ T2536] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 1068.361821][ T2521] wg1 speed is unknown, defaulting to 1000 [ 1068.380667][ T2522] virt_wifi0 speed is unknown, defaulting to 1000 [ 1068.403853][ T2521] xfrm0 speed is unknown, defaulting to 1000 [ 1068.467798][ T2522] wg1 speed is unknown, defaulting to 1000 [ 1068.842855][ T2554] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1069.110122][ T2561] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1069.191633][ T2522] xfrm0 speed is unknown, defaulting to 1000 [ 1069.224846][ T2521] lo speed is unknown, defaulting to 1000 [ 1069.228217][ T2565] tipc: Enabled bearer , priority 0 [ 1069.279126][ T2563] syzkaller0: entered promiscuous mode [ 1069.303085][ T2563] syzkaller0: entered allmulticast mode [ 1069.510530][ T2576] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7651'. [ 1069.520556][ T2562] tipc: Resetting bearer [ 1069.521231][ T2576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7651'. [ 1069.616025][ T2562] tipc: Disabling bearer [ 1069.915192][ T2522] lo speed is unknown, defaulting to 1000 [ 1070.514999][ T2596] netlink: 'syz.0.7657': attribute type 23 has an invalid length. [ 1070.600922][ T2595] sit0: entered promiscuous mode [ 1070.632848][ T2595] netlink: 'syz.0.7657': attribute type 1 has an invalid length. [ 1070.654792][ T2595] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7657'. [ 1071.064629][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1071.486729][ T2617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7665'. [ 1071.537233][ T2618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7664'. [ 1072.176248][ T2657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7675'. [ 1072.191975][ T2657] netlink: 'syz.1.7675': attribute type 1 has an invalid length. [ 1072.430376][ T2667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7678'. [ 1072.446441][ T2672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7679'. [ 1072.460000][ T2672] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1072.833189][ T2693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7686'. [ 1072.955335][ T2698] xt_l2tp: v2 doesn't support IP mode [ 1073.029752][ T2709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7690'. [ 1073.072082][ T2710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7689'. [ 1073.084631][ T2699] virt_wifi0 speed is unknown, defaulting to 1000 [ 1073.102393][ T2698] virt_wifi0 speed is unknown, defaulting to 1000 [ 1073.126444][ T2698] wg1 speed is unknown, defaulting to 1000 [ 1073.134223][ T2698] xfrm0 speed is unknown, defaulting to 1000 [ 1073.135160][ T2699] wg1 speed is unknown, defaulting to 1000 [ 1073.252082][ T2723] netlink: 'syz.2.7691': attribute type 2 has an invalid length. [ 1073.274438][ T2723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7691'. [ 1073.334996][ T2725] tipc: Enabling of bearer rejected, failed to enable media [ 1073.772848][ T2699] xfrm0 speed is unknown, defaulting to 1000 [ 1073.780688][ T2743] syzkaller0: entered promiscuous mode [ 1073.801676][ T2743] syzkaller0: entered allmulticast mode [ 1073.814598][ T2698] lo speed is unknown, defaulting to 1000 [ 1073.844561][ T2743] 0: reclassify loop, rule prio 0, protocol 800 [ 1074.121566][ T2761] tipc: Enabled bearer , priority 0 [ 1074.130931][ T2759] syzkaller0: entered promiscuous mode [ 1074.142437][ T2759] syzkaller0: entered allmulticast mode [ 1074.181085][ T2759] tipc: Resetting bearer [ 1074.191388][ T2758] tipc: Resetting bearer [ 1074.242720][ T2758] tipc: Disabling bearer [ 1074.336258][ T2699] lo speed is unknown, defaulting to 1000 [ 1075.048430][ T2786] batman_adv: batadv0: Adding interface: dummy0 [ 1075.056932][ T2786] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.113378][ T2786] batman_adv: batadv0: Interface activated: dummy0 [ 1075.155215][ T2789] batadv0: mtu less than device minimum [ 1075.162510][ T2789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.174975][ T2789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.187109][ T2789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.199003][ T2789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.211039][ T2789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.223056][ T2789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.235085][ T2789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.247008][ T2789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1075.473741][ T2802] bond3: option ad_user_port_key: invalid value (65535) [ 1075.481205][ T2802] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 1075.509644][ T2802] bond3 (unregistering): Released all slaves [ 1075.541039][ T2811] netlink: 'syz.2.7710': attribute type 3 has an invalid length. [ 1076.040765][ T2843] bridge0: port 4(bond0) entered blocking state [ 1076.060916][ T2843] bridge0: port 4(bond0) entered disabled state [ 1076.087234][ T2843] bond0: entered allmulticast mode [ 1076.092421][ T2843] bond_slave_0: entered allmulticast mode [ 1076.124205][ T2843] bond_slave_1: entered allmulticast mode [ 1076.157444][ T2843] bond0: entered promiscuous mode [ 1076.162650][ T2843] bond_slave_0: entered promiscuous mode [ 1076.180551][ T2861] netlink: 'syz.3.7721': attribute type 1 has an invalid length. [ 1076.203528][ T2843] bond_slave_1: entered promiscuous mode [ 1076.211550][ T2843] bridge0: port 4(bond0) entered blocking state [ 1076.218036][ T2843] bridge0: port 4(bond0) entered forwarding state [ 1076.228187][ T2863] __nla_validate_parse: 6 callbacks suppressed [ 1076.228208][ T2863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7717'. [ 1076.285785][ T2867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7721'. [ 1076.475497][ T2867] bond7: (slave bridge5): making interface the new active one [ 1076.511617][ T2867] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 1076.569581][ T2884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7725'. [ 1076.572536][ T2868] bond7: (slave bridge6): Enslaving as an active interface with a down link [ 1076.736017][ T2887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7726'. [ 1076.767354][ T2886] syzkaller0: entered promiscuous mode [ 1076.772896][ T2886] syzkaller0: entered allmulticast mode [ 1076.795048][ T2891] nbd: nbd1 already in use [ 1076.807581][ T2891] block nbd1: NBD_DISCONNECT [ 1076.836532][ T2891] block nbd1: Send disconnect failed -104 [ 1076.859715][ T2891] block nbd1: shutting down sockets [ 1078.455838][ T2941] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7737'. [ 1079.723580][ T1854] erspan0: left allmulticast mode [ 1079.739331][ T1854] bridge0: port 1(erspan0) entered disabled state [ 1079.780064][ T2943] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.7738'. [ 1079.841476][ T2945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7739'. [ 1080.282933][ T2969] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.7746'. [ 1080.551519][ T1854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.561135][ T1854] bond0 (unregistering): Released all slaves [ 1080.573751][ T1854] bond1 (unregistering): Released all slaves [ 1080.604148][ T1854] bond2 (unregistering): Released all slaves [ 1080.628837][ T2934] batadv_slave_0: entered promiscuous mode [ 1080.635923][ T2940] batadv_slave_0: left promiscuous mode [ 1080.808935][ T1854] æÿîÿ: left promiscuous mode [ 1080.942164][ T1854] tipc: Left network mode [ 1081.289132][ T3005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7755'. [ 1081.318395][ T3011] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7757'. [ 1081.344257][ T3015] netlink: 'syz.3.7756': attribute type 2 has an invalid length. [ 1081.356892][ T3011] netlink: 'syz.1.7757': attribute type 1 has an invalid length. [ 1081.368680][ T3015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7756'. [ 1081.395947][ T3008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7756'. [ 1081.562468][ T3022] netlink: 'syz.4.7761': attribute type 1 has an invalid length. [ 1081.587923][ T3015] vlan3: entered allmulticast mode [ 1081.593106][ T3015] hsr0: entered allmulticast mode [ 1081.619536][ T3015] hsr_slave_0: entered allmulticast mode [ 1081.646676][ T3015] hsr_slave_1: entered allmulticast mode [ 1081.719160][ T3022] bond5: entered promiscuous mode [ 1081.727781][ T3022] bond5: entered allmulticast mode [ 1081.733358][ T3022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1081.757437][ T3036] netlink: 'syz.3.7765': attribute type 29 has an invalid length. [ 1081.821351][ T3027] erspan2: entered allmulticast mode [ 1081.831451][ T3039] net_ratelimit: 12 callbacks suppressed [ 1081.831472][ T3039] openvswitch: netlink: Missing valid actions attribute. [ 1081.831908][ T3027] bond5: (slave erspan2): making interface the new active one [ 1081.837717][ T3039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1081.856544][ T3042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7767'. [ 1081.878375][ T3027] erspan2: entered promiscuous mode [ 1081.887392][ T3027] bond5: (slave erspan2): Enslaving as an active interface with an up link [ 1081.898646][ T3032] netlink: 'syz.2.7764': attribute type 2 has an invalid length. [ 1082.048400][ T3049] bond10: Unable to set up delay as MII monitoring is disabled [ 1082.059565][ T3049] bond10 (unregistering): Released all slaves [ 1082.454782][ T1854] hsr_slave_0: left promiscuous mode [ 1082.475893][ T1854] hsr_slave_1: left promiscuous mode [ 1082.575645][ T3077] netlink: 'syz.2.7777': attribute type 21 has an invalid length. [ 1082.594019][ T3078] netlink: 'syz.2.7777': attribute type 2 has an invalid length. [ 1082.629836][ T3077] netlink: 'syz.2.7777': attribute type 2 has an invalid length. [ 1082.656621][ T3077] netlink: 119 bytes leftover after parsing attributes in process `syz.2.7777'. [ 1082.664436][ T3078] netlink: 119 bytes leftover after parsing attributes in process `syz.2.7777'. [ 1082.717876][ T3083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7780'. [ 1083.120581][ T3100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7782'. [ 1083.402044][ T1854] team0 (unregistering): Port device team_slave_1 removed [ 1083.453716][ T1854] team0 (unregistering): Port device team_slave_0 removed [ 1083.779617][ T1854] team0 (unregistering): Port device dummy0 removed [ 1084.046112][ T3112] netlink: 'syz.2.7786': attribute type 4 has an invalid length. [ 1084.316607][ T3134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7792'. [ 1084.333246][ T3135] netlink: 'syz.4.7791': attribute type 10 has an invalid length. [ 1084.376405][ T3122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1084.539936][ T3135] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1084.570324][ T3135] team0: Port device dummy0 removed [ 1084.582024][ T3135] dummy0: entered promiscuous mode [ 1084.588617][ T3135] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1084.608355][ T1854] IPVS: stop unused estimator thread 0... [ 1085.482980][ T3137] xfrm0 speed is unknown, defaulting to 1000 [ 1085.718577][ T3193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1085.983706][T24983] IPVS: starting estimator thread 0... [ 1086.000596][ T3171] xfrm0 speed is unknown, defaulting to 1000 [ 1086.008395][ T3137] lo speed is unknown, defaulting to 1000 [ 1086.084547][ T3207] IPVS: using max 25 ests per chain, 60000 per kthread [ 1086.365952][ T3216] syzkaller0: entered promiscuous mode [ 1086.371501][ T3216] syzkaller0: entered allmulticast mode [ 1086.379661][ T3199] xfrm0 speed is unknown, defaulting to 1000 [ 1086.390911][ T3216] macsec3: entered promiscuous mode [ 1086.448341][ T3217] __nla_validate_parse: 2 callbacks suppressed [ 1086.448362][ T3217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7810'. [ 1086.607052][ T3219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1086.707999][ T3199] lo speed is unknown, defaulting to 1000 [ 1086.732003][ T3171] lo speed is unknown, defaulting to 1000 [ 1087.651005][ T3242] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.7816'. [ 1087.699217][ T3248] validate_nla: 4 callbacks suppressed [ 1087.699239][ T3248] netlink: 'syz.1.7819': attribute type 1 has an invalid length. [ 1087.807391][ T3248] bond4: entered promiscuous mode [ 1087.812538][ T3248] bond4: entered allmulticast mode [ 1087.860777][ T3248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7819'. [ 1087.908209][ T3252] bond4: (slave ip6gretap2): making interface the new active one [ 1087.917524][ T3252] ip6gretap2: entered promiscuous mode [ 1087.923207][ T3252] ip6gretap2: entered allmulticast mode [ 1087.951395][ T3252] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1087.996038][ T3248] bond4: left promiscuous mode [ 1088.063805][ T3248] ip6gretap2: left promiscuous mode [ 1088.084181][ T3248] bond4: left allmulticast mode [ 1088.105523][ T3248] ip6gretap2: left allmulticast mode [ 1088.142619][ T3248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1088.291094][ T3277] xfrm0 speed is unknown, defaulting to 1000 [ 1088.299903][ T3276] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7826'. [ 1088.309554][ T3276] netlink: 'syz.4.7826': attribute type 1 has an invalid length. [ 1088.430826][ T3276] bond5: left promiscuous mode [ 1088.450649][ T3276] erspan2: left promiscuous mode [ 1088.626880][ T3276] bond0: (slave dummy0): Releasing backup interface [ 1088.658071][ T3276] dummy0: left promiscuous mode [ 1088.680713][ T3276] batman_adv: batadv0: Adding interface: dummy0 [ 1088.712359][ T3276] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.762300][ T3266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7821'. [ 1088.772079][ T3276] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1088.800187][ T3277] lo speed is unknown, defaulting to 1000 [ 1088.944155][ T3303] netlink: 'syz.1.7832': attribute type 1 has an invalid length. [ 1089.060322][ T3303] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1089.096505][ T3308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7832'. [ 1089.220719][ T3303] veth7: entered promiscuous mode [ 1089.251083][ T3303] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1089.343512][ T3304] bond5: entered allmulticast mode [ 1089.383227][ T3303] netlink: 'syz.1.7832': attribute type 4 has an invalid length. [ 1089.413662][ T3310] syzkaller0: entered promiscuous mode [ 1089.419562][ T3310] syzkaller0: entered allmulticast mode [ 1089.456006][ T3304] netlink: 'syz.1.7832': attribute type 4 has an invalid length. [ 1089.586394][ T3326] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7836'. [ 1089.601278][ T3322] xfrm0 speed is unknown, defaulting to 1000 [ 1089.639168][ T3319] netlink: 180992 bytes leftover after parsing attributes in process `syz.3.7836'. [ 1089.752739][ T3336] bond0: entered promiscuous mode [ 1089.766146][ T3336] bond_slave_0: entered promiscuous mode [ 1089.774749][ T3336] bond_slave_1: entered promiscuous mode [ 1089.794965][ T3336] dummy0: entered promiscuous mode [ 1089.802384][ T3336] batadv0: entered promiscuous mode [ 1089.836537][ T3336] debugfs: 'hsr0' already exists in 'hsr' [ 1089.844956][ T3336] Cannot create hsr debugfs directory [ 1089.973273][ T3347] netlink: 'syz.4.7842': attribute type 12 has an invalid length. [ 1089.982066][ T3322] lo speed is unknown, defaulting to 1000 [ 1090.849805][ T3373] netlink: 'syz.1.7848': attribute type 30 has an invalid length. [ 1091.055475][ T3387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7856'. [ 1091.105088][ T3387] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1091.204819][ T3401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7856'. [ 1091.258258][ T3401] macvlan3: entered promiscuous mode [ 1091.267236][ T3401] macvlan3: entered allmulticast mode [ 1091.524120][ T3421] syzkaller0: entered promiscuous mode [ 1091.536054][ T3421] syzkaller0: entered allmulticast mode [ 1091.608660][ T3427] __nla_validate_parse: 3 callbacks suppressed [ 1091.608682][ T3427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7864'. [ 1093.512352][ T3421] netlink: 'syz.3.7862': attribute type 15 has an invalid length. [ 1093.575718][ T3448] netlink: 'syz.0.7869': attribute type 1 has an invalid length. [ 1093.583512][ T3448] netlink: 'syz.0.7869': attribute type 2 has an invalid length. [ 1093.728782][ T3455] ip6erspan1: entered allmulticast mode [ 1093.744877][ T3461] xt_hashlimit: size too large, truncated to 1048576 [ 1093.751891][ T3451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7871'. [ 1093.764795][ T3451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7871'. [ 1093.792990][ T3469] netlink: 'syz.0.7873': attribute type 1 has an invalid length. [ 1094.307764][ T3496] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7877'. [ 1094.392563][ T3501] netlink: 'syz.0.7878': attribute type 1 has an invalid length. [ 1094.423248][ T3463] wg1: left allmulticast mode [ 1094.639326][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.673783][ T3463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.009938][ T3463] macsec1: left allmulticast mode [ 1095.081084][ T3463] geneve2: left allmulticast mode [ 1095.100035][ T3463] bond5: left allmulticast mode [ 1095.109444][ T3463] erspan2: left allmulticast mode [ 1095.131851][ T3463] macvlan3: left promiscuous mode [ 1095.138238][ T3463] macvlan3: left allmulticast mode [ 1095.267694][ T3501] bond10: entered promiscuous mode [ 1095.273106][ T3501] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1095.367394][ T1864] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.406440][ T1864] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.425989][ T1864] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.450416][ T1864] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.470093][ T3521] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7881'. [ 1095.490289][ T1864] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.512723][ T1864] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.527587][ T1864] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.536280][ T1864] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.851419][ T3545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7887'. [ 1095.890787][ T3545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7887'. [ 1096.153579][ T3560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7890'. [ 1096.394926][ T3562] xfrm0 speed is unknown, defaulting to 1000 [ 1096.579319][ T3575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7893'. [ 1096.765331][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7897'. [ 1096.814160][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7898'. [ 1096.877720][ T3590] netlink: 'syz.1.7899': attribute type 30 has an invalid length. [ 1096.971812][ T3562] lo speed is unknown, defaulting to 1000 [ 1097.042650][ T3586] xfrm0 speed is unknown, defaulting to 1000 [ 1097.100282][ T3600] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7898'. [ 1097.124646][ T3600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7898'. [ 1097.163875][ T3603] netlink: 'syz.4.7898': attribute type 1 has an invalid length. [ 1097.335059][ T3604] syzkaller1: entered promiscuous mode [ 1097.342977][ T3604] syzkaller1: entered allmulticast mode [ 1097.477978][ T3611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7902'. [ 1097.499130][ T3586] lo speed is unknown, defaulting to 1000 [ 1097.601498][ T3611] xfrm0 speed is unknown, defaulting to 1000 [ 1097.637909][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7904'. [ 1097.666438][ T3618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7904'. [ 1097.676242][ T3618] netlink: 'syz.1.7904': attribute type 13 has an invalid length. [ 1097.689356][ T3620] netlink: 'syz.1.7904': attribute type 28 has an invalid length. [ 1098.092945][ T3611] lo speed is unknown, defaulting to 1000 [ 1098.169922][ T3626] xfrm0 speed is unknown, defaulting to 1000 [ 1098.752780][ T3630] xfrm0 speed is unknown, defaulting to 1000 [ 1098.841182][ T3644] netpci0: tun_chr_ioctl cmd 1074025678 [ 1098.848006][ T3644] netpci0: group set to 0 [ 1098.949458][ T3626] lo speed is unknown, defaulting to 1000 [ 1098.960593][ T3644] xfrm0 speed is unknown, defaulting to 1000 [ 1098.961306][ T3630] lo speed is unknown, defaulting to 1000 [ 1099.362033][ T3644] lo speed is unknown, defaulting to 1000 [ 1099.703113][ T3652] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7912'. [ 1099.735781][ T3652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1099.767863][ T3649] xfrm0 speed is unknown, defaulting to 1000 [ 1100.192257][ T3662] bond11: Removing last arp target with arp_interval on [ 1100.207597][ T3666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7916'. [ 1100.228668][ T3666] netlink: 39 bytes leftover after parsing attributes in process `syz.1.7916'. [ 1100.249970][ T3649] lo speed is unknown, defaulting to 1000 [ 1100.825739][ T3686] netlink: 'syz.0.7920': attribute type 1 has an invalid length. [ 1100.853930][ T3686] netlink: 'syz.0.7920': attribute type 2 has an invalid length. [ 1101.169546][ T3708] netlink: 'syz.2.7926': attribute type 11 has an invalid length. [ 1101.208733][ T3706] netlink: 'syz.2.7926': attribute type 11 has an invalid length. [ 1101.453118][ T3720] netlink: 'syz.2.7930': attribute type 7 has an invalid length. [ 1101.619299][ T3709] team_slave_0: left promiscuous mode [ 1101.634925][ T3709] team_slave_1: left promiscuous mode [ 1101.781633][ T3709] __nla_validate_parse: 42 callbacks suppressed [ 1101.781653][ T3709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1101.810428][ T3709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1101.846986][ T3709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1101.862719][ T3709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1101.890327][ T3709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1101.903150][ T3709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1101.942201][ T3709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1101.964507][ T3709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1101.987042][ T3709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1101.999920][ T3709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7927'. [ 1102.136680][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.472105][ T3709] veth1_macvtap: left allmulticast mode [ 1102.506732][ T3709] bridge0: port 1(macsec0) entered disabled state [ 1102.835208][ T3709] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1103.121454][ T3740] : entered promiscuous mode [ 1103.175446][ T1847] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.199626][ T1847] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.234572][ T1847] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.243508][ T1847] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.291720][ T1847] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.301138][ T1847] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.310405][ T1847] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1103.319701][ T1847] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.331946][ T3739] xfrm0 speed is unknown, defaulting to 1000 [ 1103.827013][ T3739] lo speed is unknown, defaulting to 1000 [ 1103.832887][ T3755] xfrm0 speed is unknown, defaulting to 1000 [ 1104.247905][ T3785] bridge3: entered promiscuous mode [ 1104.253307][ T3785] bridge3: entered allmulticast mode [ 1104.262430][ T3785] team0: Port device bridge3 added [ 1104.290046][ T3755] lo speed is unknown, defaulting to 1000 [ 1104.290549][ T3774] xfrm0 speed is unknown, defaulting to 1000 [ 1104.331656][ T3785] bridge0: port 1(team0) entered blocking state [ 1104.343866][ T3785] bridge0: port 1(team0) entered disabled state [ 1104.354959][ T3785] team0: entered allmulticast mode [ 1104.360198][ T3785] team_slave_0: entered allmulticast mode [ 1104.366800][ T3785] team_slave_1: entered allmulticast mode [ 1104.375792][ T3785] team0: entered promiscuous mode [ 1104.380977][ T3785] team_slave_0: entered promiscuous mode [ 1104.387426][ T3785] team_slave_1: entered promiscuous mode [ 1104.624885][ T3782] xfrm0 speed is unknown, defaulting to 1000 [ 1104.842032][ T3782] lo speed is unknown, defaulting to 1000 [ 1104.873869][ T3774] lo speed is unknown, defaulting to 1000 [ 1106.058724][ T3819] xfrm0 speed is unknown, defaulting to 1000 [ 1106.248816][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.257494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.307506][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.605545][ T3825] xfrm0 speed is unknown, defaulting to 1000 [ 1106.621646][ T3819] lo speed is unknown, defaulting to 1000 [ 1106.967493][ T3822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.977745][T24988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.025033][ T3822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.034048][T24988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.054305][T24988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.067678][ T3822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.106412][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.139303][ T3825] lo speed is unknown, defaulting to 1000 [ 1107.139320][ T3843] xfrm0 speed is unknown, defaulting to 1000 [ 1107.360287][ T3867] __nla_validate_parse: 195 callbacks suppressed [ 1107.360310][ T3867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7961'. [ 1107.747944][ T3843] lo speed is unknown, defaulting to 1000 [ 1109.082240][ T3908] bridge_slave_1: left allmulticast mode [ 1109.089276][ T3908] bridge_slave_1: left promiscuous mode [ 1109.099656][ T3908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.147603][ T3912] netlink: 'syz.4.7975': attribute type 4 has an invalid length. [ 1109.201799][ T3914] netlink: 'syz.4.7975': attribute type 4 has an invalid length. [ 1109.247268][ T3908] bridge_slave_1: entered promiscuous mode [ 1109.266395][ T3908] bridge_slave_1: entered allmulticast mode [ 1109.955251][ T3933] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7980'. [ 1110.067066][ T3942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7983'. [ 1110.090347][ T3942] netlink: 'syz.3.7983': attribute type 7 has an invalid length. [ 1110.111639][ T3942] netlink: 'syz.3.7983': attribute type 8 has an invalid length. [ 1110.133133][ T3942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7983'. [ 1110.155587][ T3942] batadv0: entered promiscuous mode [ 1110.157594][ T3945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7983'. [ 1110.184477][ T3942] batadv0: left promiscuous mode [ 1110.208662][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7982'. [ 1110.266433][ T3947] xfrm0 speed is unknown, defaulting to 1000 [ 1110.527367][ T3960] netlink: 'syz.1.7986': attribute type 1 has an invalid length. [ 1110.555406][ T3963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7987'. [ 1110.574544][ T3963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7987'. [ 1110.798049][ T3969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7988'. [ 1110.822214][ T3947] lo speed is unknown, defaulting to 1000 [ 1110.841382][ T3933] xfrm0 speed is unknown, defaulting to 1000 [ 1111.224936][ T3985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7993'. [ 1111.353576][ T3985] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1111.383093][ T3991] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1111.411520][ T3991] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 1111.420780][ T3933] lo speed is unknown, defaulting to 1000 [ 1111.513235][ T3991] netlink: 'syz.4.7993': attribute type 1 has an invalid length. [ 1111.630466][ T3994] bond7 (unregistering): (slave batadv1): Releasing backup interface [ 1111.641413][ T3994] bond7 (unregistering): Released all slaves [ 1111.725844][ T4001] bond0: entered promiscuous mode [ 1111.740782][ T4001] batadv0: entered promiscuous mode [ 1111.757652][ T4001] debugfs: 'hsr1' already exists in 'hsr' [ 1111.764537][ T4001] Cannot create hsr debugfs directory [ 1112.123287][ T4023] net_ratelimit: 2 callbacks suppressed [ 1112.123302][ T4023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1112.328872][ T4028] xfrm0 speed is unknown, defaulting to 1000 [ 1112.589744][ T4028] lo speed is unknown, defaulting to 1000 [ 1112.936920][ T4040] xt_ecn: cannot match TCP bits for non-tcp packets [ 1112.946717][ T4039] __nla_validate_parse: 3 callbacks suppressed [ 1112.970097][ T4039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8004'. [ 1113.019109][ T4036] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1113.049787][ T4036] bond7 (unregistering): Released all slaves [ 1113.135267][ T4047] tipc: Enabling of bearer rejected, already enabled [ 1113.185299][ T4040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8005'. [ 1113.608827][ T4070] tipc: Enabled bearer , priority 0 [ 1113.652652][ T4070] tipc: Resetting bearer [ 1113.748689][ T4070] tipc: Disabling bearer [ 1113.815036][ T4084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8017'. [ 1113.850737][ T4093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8020'. [ 1113.858858][ T4084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8017'. [ 1113.886614][ T4084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8017'. [ 1113.910790][ T4095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8021'. [ 1113.916120][ T4084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8017'. [ 1113.933669][ T4084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8017'. [ 1113.933688][ T4097] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 1113.948440][ T4084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8017'. [ 1114.020336][ T4097] netlink: 'syz.3.8022': attribute type 1 has an invalid length. [ 1114.048725][ T4084] bridge0: port 4(bond0) entered disabled state [ 1114.276627][ T4112] netlink: 'syz.3.8026': attribute type 1 has an invalid length. [ 1114.371790][ T4108] xfrm0 speed is unknown, defaulting to 1000 [ 1114.546804][ T4115] can: request_module (can-proto-0) failed. [ 1114.753471][ T4136] vlan5: entered allmulticast mode [ 1114.758951][ T4136] bond0: entered allmulticast mode [ 1114.774731][ T4136] bond_slave_0: entered allmulticast mode [ 1114.794712][ T4136] bond_slave_1: entered allmulticast mode [ 1114.825125][ T4136] dummy0: entered allmulticast mode [ 1114.912185][ T4139] bond0 (unregistering): left promiscuous mode [ 1114.923246][ T4139] bond_slave_0: left promiscuous mode [ 1114.929688][ T4139] bond_slave_1: left promiscuous mode [ 1114.936086][ T4139] dummy0: left promiscuous mode [ 1114.942964][ T4139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.952152][ T4139] bond_slave_0: left allmulticast mode [ 1114.960386][ T4139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.970660][ T4139] bond_slave_1: left allmulticast mode [ 1114.978037][ T4139] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1114.986836][ T4139] dummy0: left allmulticast mode [ 1114.993501][ T4139] bond0 (unregistering): Released all slaves [ 1115.011050][ T4108] lo speed is unknown, defaulting to 1000 [ 1115.018790][ T4145] netlink: 'syz.2.8036': attribute type 15 has an invalid length. [ 1115.054007][ T4142] xfrm0 speed is unknown, defaulting to 1000 [ 1115.462938][ T4162] syzkaller0: entered promiscuous mode [ 1115.468937][ T4162] syzkaller0: entered allmulticast mode [ 1115.582896][ T4142] lo speed is unknown, defaulting to 1000 [ 1115.881239][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.893220][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.111210][ T4188] gretap3: entered promiscuous mode [ 1116.712333][ T4219] pimreg: entered allmulticast mode [ 1116.798373][ T4219] xfrm0 speed is unknown, defaulting to 1000 [ 1117.358157][ T4261] openvswitch: netlink: Invalid VLAN frame [ 1117.494802][ T4261] bond7: option updelay: invalid value (18446744072924056005) [ 1117.519702][ T4261] bond7: option updelay: allowed values 0 - 2147483647 [ 1117.576467][ T4261] bond7 (unregistering): Released all slaves [ 1117.598068][ T4231] netlink: 'syz.3.8058': attribute type 2 has an invalid length. [ 1117.715498][ T4262] bond7: option updelay: invalid value (18446744072924056005) [ 1117.725286][ T4262] bond7: option updelay: allowed values 0 - 2147483647 [ 1117.741293][ T4262] bond7 (unregistering): Released all slaves [ 1117.768295][ T4219] lo speed is unknown, defaulting to 1000 [ 1118.052115][ T4301] __nla_validate_parse: 140 callbacks suppressed [ 1118.052138][ T4301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8079'. [ 1118.095096][ T4290] bond7 (unregistering): Released all slaves [ 1118.102552][ T4307] netlink: 'syz.0.8079': attribute type 13 has an invalid length. [ 1118.203437][ T4311] IPVS: Unknown mcast interface: xfrm0 [ 1118.394595][ T4322] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8083'. [ 1118.847371][ T4346] syzkaller0: entered promiscuous mode [ 1118.862125][ T4346] syzkaller0: entered allmulticast mode [ 1119.236068][ T4357] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1119.377871][ T4363] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1119.656554][ T4376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1120.180573][ T4414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8108'. [ 1120.209115][ T4414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.216460][ T4414] IPv6: NLM_F_CREATE should be set when creating new route [ 1120.227713][ T4414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1120.235047][ T4414] IPv6: NLM_F_CREATE should be set when creating new route [ 1120.719529][ T4425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8111'. [ 1120.847442][ T4427] netlink: 'syz.4.8113': attribute type 178 has an invalid length. [ 1120.881670][ T4430] netlink: 192 bytes leftover after parsing attributes in process `syz.0.8112'. [ 1120.900662][ T4430] openvswitch: netlink: Flow key attr not present in new flow. [ 1120.927982][ T4431] pim6reg: entered allmulticast mode [ 1120.956561][ T4431] netlink: 'syz.3.8114': attribute type 1 has an invalid length. [ 1120.989382][ T4431] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8114'. [ 1121.139053][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1121.941427][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8128'. [ 1122.309354][ T4501] xt_TCPMSS: Only works on TCP SYN packets [ 1122.317854][ T4502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8131'. [ 1122.364521][ T4500] syzkaller0: entered promiscuous mode [ 1122.370750][ T4500] syzkaller0: entered allmulticast mode [ 1122.427329][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8131'. [ 1122.771620][ T3565] udevd[3565]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1122.797265][ T4517] xfrm0 speed is unknown, defaulting to 1000 [ 1123.510502][ T5487] veth0_vlan: left promiscuous mode [ 1123.573076][ T5487] veth0_vlan: entered promiscuous mode [ 1123.712492][ T4529] xfrm0 speed is unknown, defaulting to 1000 [ 1123.731490][ T4517] lo speed is unknown, defaulting to 1000 [ 1124.076763][ T4565] syzkaller0: entered promiscuous mode [ 1124.112801][ T4565] syzkaller0: entered allmulticast mode [ 1124.339246][ T4529] lo speed is unknown, defaulting to 1000 [ 1125.305068][T20151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.638202][ T4614] xfrm0 speed is unknown, defaulting to 1000 [ 1125.780036][ T4608] IPVS: Scheduler module ip_vs_sip not found [ 1125.854741][ T4622] tipc: Invalid UDP bearer configuration [ 1125.854803][ T4622] tipc: Enabling of bearer rejected, failed to enable media [ 1125.949755][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8158'. [ 1125.961790][ T4624] syzkaller0: entered promiscuous mode [ 1125.967650][ T4624] syzkaller0: entered allmulticast mode [ 1126.141074][ T4626] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1126.195784][ T4614] lo speed is unknown, defaulting to 1000 [ 1126.198536][ T4627] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1126.385915][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8160'. [ 1126.609063][ T4649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8163'. [ 1126.780023][ T4654] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8165'. [ 1126.891045][ T4655] netlink: 'syz.3.8166': attribute type 1 has an invalid length. [ 1126.924472][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8166'. [ 1126.936125][ T4655] netlink: 'syz.3.8166': attribute type 1 has an invalid length. [ 1126.943915][ T4655] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8166'. [ 1127.003779][ T4661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8168'. [ 1127.026090][ T4661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8168'. [ 1127.087427][ T4658] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1127.110596][ T4655] IPVS: Scheduler module ip_vs_sip not found [ 1127.163046][ T4673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8170'. [ 1127.376831][ T4684] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8174'. [ 1127.595200][ T4696] sit0: entered promiscuous mode [ 1127.900282][ T4710] netlink: 'syz.3.8180': attribute type 2 has an invalid length. [ 1128.370226][T16452] block nbd1: Receive control failed (result -32) [ 1129.039574][ T4779] netlink: 'syz.0.8202': attribute type 2 has an invalid length. [ 1129.079308][ T4779] l24): entered promiscuous mode [ 1129.492072][ T4791] syzkaller0: entered promiscuous mode [ 1129.498097][ T4791] syzkaller0: entered allmulticast mode [ 1129.579206][ T4799] netlink: 'syz.2.8201': attribute type 5 has an invalid length. [ 1129.641009][ T4814] xt_hashlimit: size too large, truncated to 1048576 [ 1130.055745][ T4833] netlink: 'syz.4.8211': attribute type 1 has an invalid length. [ 1130.109477][ T4833] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1130.169961][ T4845] 8021q: VLANs not supported on sit0 [ 1130.977650][ T4898] __nla_validate_parse: 6 callbacks suppressed [ 1130.977672][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1131.011798][ T4898] chnl_net:caif_netlink_parms(): no params data found [ 1131.072406][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8227'. [ 1131.112206][ T4906] macsec1: entered promiscuous mode [ 1131.145833][ T4906] macsec1: entered allmulticast mode [ 1131.240201][ T4912] xfrm0 speed is unknown, defaulting to 1000 [ 1131.560927][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8235'. [ 1131.670915][ T4934] macvtap1: entered promiscuous mode [ 1131.686723][ T4934] veth1_to_hsr: entered promiscuous mode [ 1131.694831][ T4934] macvtap1: entered allmulticast mode [ 1131.700355][ T4934] veth1_to_hsr: entered allmulticast mode [ 1131.750026][ T4912] lo speed is unknown, defaulting to 1000 [ 1131.773913][ T4939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8236'. [ 1131.986465][ T4949] netlink: 84 bytes leftover after parsing attributes in process `syz.4.8238'. [ 1132.051962][ T4949] netlink: 'syz.4.8238': attribute type 1 has an invalid length. [ 1132.433621][ T4966] veth4: entered allmulticast mode [ 1132.478426][ T4968] veth6: entered allmulticast mode [ 1132.526426][ T4966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8242'. [ 1132.538818][ T4981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8246'. [ 1132.564598][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8246'. [ 1132.694204][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8249'. [ 1132.713401][ T4992] vlan4: entered allmulticast mode [ 1132.720522][ T4992] dummy0: entered allmulticast mode [ 1132.728388][ T4992] bridge0: port 1(vlan4) entered blocking state [ 1132.735478][ T4992] bridge0: port 1(vlan4) entered disabled state [ 1133.018208][ T5014] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1133.031236][ T5015] Bluetooth: MGMT ver 1.23 [ 1133.043720][ T5014] IPVS: ip_vs_add_dest(): server weight less than zero [ 1133.051541][ T5014] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1133.062097][ T5014] netlink: 'syz.3.8255': attribute type 66 has an invalid length. [ 1133.160375][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8256'. [ 1133.343313][ T5029] netlink: 'syz.0.8257': attribute type 4 has an invalid length. [ 1133.511987][ T5028] IPVS: Scheduler module ip_vs_œý not found [ 1133.521133][ T5037] IPVS: length: 24 != 12312 [ 1133.545437][ T5028] bridge0: entered promiscuous mode [ 1133.551123][ T5028] vlan4: entered promiscuous mode [ 1133.556245][ T5028] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 1133.565591][ T5028] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5028, name: syz.3.8259 [ 1133.574679][ T5028] preempt_count: 201, expected: 0 [ 1133.579726][ T5028] RCU nest depth: 0, expected: 0 [ 1133.584720][ T5028] 3 locks held by syz.3.8259/5028: [ 1133.589892][ T5028] #0: ffffffff8fef71a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1133.599509][ T5028] #1: ffffffff8f9ac1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1133.608760][ T5028] #2: ffff88805a308370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1133.619091][ T5028] Preemption disabled at: [ 1133.619108][ T5028] [] dev_uc_add+0x56/0x120 [ 1133.629510][ T5028] CPU: 0 UID: 0 PID: 5028 Comm: syz.3.8259 Not tainted syzkaller #0 PREEMPT(full) [ 1133.629541][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1133.629554][ T5028] Call Trace: [ 1133.629564][ T5028] [ 1133.629573][ T5028] dump_stack_lvl+0xe8/0x150 [ 1133.629608][ T5028] __might_resched+0x378/0x4d0 [ 1133.629641][ T5028] ? dev_uc_add+0x56/0x120 [ 1133.629673][ T5028] __mutex_lock+0x119/0x1300 [ 1133.629710][ T5028] ? __pfx__printk+0x10/0x10 [ 1133.629741][ T5028] ? vprintk_emit+0x4eb/0x560 [ 1133.629763][ T5028] ? dev_set_promiscuity+0x10e/0x260 [ 1133.629791][ T5028] ? __netdev_printk+0x36f/0x480 [ 1133.629814][ T5028] ? __pfx___mutex_lock+0x10/0x10 [ 1133.629843][ T5028] ? netdev_info+0x11e/0x180 [ 1133.629880][ T5028] ? __pfx_netdev_info+0x10/0x10 [ 1133.629922][ T5028] dev_set_promiscuity+0x10e/0x260 [ 1133.629954][ T5028] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 1133.629983][ T5028] __dev_set_promiscuity+0x515/0x710 [ 1133.630012][ T5028] ? netdev_info+0x11e/0x180 [ 1133.630057][ T5028] netif_set_promiscuity+0x50/0xe0 [ 1133.630088][ T5028] dev_set_promiscuity+0x126/0x260 [ 1133.630122][ T5028] br_manage_promisc+0x180/0x560 [ 1133.630155][ T5028] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1133.630182][ T5028] __dev_set_promiscuity+0x515/0x710 [ 1133.630212][ T5028] ? __hw_addr_add_ex+0x361/0x650 [ 1133.630244][ T5028] __dev_set_rx_mode+0x17c/0x260 [ 1133.630275][ T5028] dev_uc_add+0xc8/0x120 [ 1133.630306][ T5028] macvlan_open+0x446/0x8e0 [ 1133.630338][ T5028] __dev_open+0x44d/0x830 [ 1133.630368][ T5028] ? __pfx___dev_open+0x10/0x10 [ 1133.630393][ T5028] ? __local_bh_enable_ip+0xd0/0x130 [ 1133.630418][ T5028] __dev_change_flags+0x1f7/0x690 [ 1133.630451][ T5028] ? __pfx___dev_change_flags+0x10/0x10 [ 1133.630474][ T5028] ? netdev_is_rx_handler_busy+0x56/0x120 [ 1133.630490][ T5028] ? __pfx_tap_handle_frame+0x10/0x10 [ 1133.630520][ T5028] ? macvtap_newlink+0x166/0x1b0 [ 1133.630548][ T5028] rtnl_newlink_create+0x587/0xb70 [ 1133.630574][ T5028] ? __pfx___nla_validate_parse+0x10/0x10 [ 1133.630613][ T5028] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1133.630643][ T5028] ? __pfx___mutex_lock+0x10/0x10 [ 1133.630682][ T5028] ? ns_capable+0x89/0xe0 [ 1133.630711][ T5028] rtnl_newlink+0x1666/0x1be0 [ 1133.630752][ T5028] ? __pfx_rtnl_newlink+0x10/0x10 [ 1133.630773][ T5028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.630835][ T5028] ? kasan_quarantine_put+0xbb/0x1f0 [ 1133.630866][ T5028] ? lockdep_hardirqs_on+0x7a/0x110 [ 1133.630898][ T5028] ? kmem_cache_free+0x195/0x610 [ 1133.630918][ T5028] ? nlmon_xmit+0xb0/0x100 [ 1133.630954][ T5028] ? __lock_acquire+0x6b5/0x2cf0 [ 1133.630993][ T5028] ? __local_bh_enable_ip+0xd0/0x130 [ 1133.631012][ T5028] ? lockdep_hardirqs_on+0x7a/0x110 [ 1133.631128][ T5028] ? __dev_queue_xmit+0x274/0x3850 [ 1133.631157][ T5028] ? __local_bh_enable_ip+0xd0/0x130 [ 1133.631173][ T5028] ? __dev_queue_xmit+0x274/0x3850 [ 1133.631211][ T5028] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1133.631255][ T5028] ? __pfx_rtnl_newlink+0x10/0x10 [ 1133.631278][ T5028] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1133.631306][ T5028] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1133.631329][ T5028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1133.631351][ T5028] ? ref_tracker_free+0x693/0x840 [ 1133.631374][ T5028] ? __copy_skb_header+0xa3/0x4a0 [ 1133.631405][ T5028] ? __pfx_ref_tracker_free+0x10/0x10 [ 1133.631445][ T5028] netlink_rcv_skb+0x232/0x4b0 [ 1133.631470][ T5028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1133.631497][ T5028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1133.631531][ T5028] ? netlink_deliver_tap+0x2e/0x1b0 [ 1133.631562][ T5028] netlink_unicast+0x80f/0x9b0 [ 1133.631593][ T5028] ? __pfx_netlink_unicast+0x10/0x10 [ 1133.631617][ T5028] ? netlink_sendmsg+0x650/0xb40 [ 1133.631638][ T5028] ? skb_put+0x11b/0x210 [ 1133.631667][ T5028] netlink_sendmsg+0x813/0xb40 [ 1133.631703][ T5028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1133.631733][ T5028] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1133.631760][ T5028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1133.631785][ T5028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1133.631808][ T5028] ____sys_sendmsg+0xa68/0xad0 [ 1133.631836][ T5028] ? __might_fault+0xaf/0x130 [ 1133.631873][ T5028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1133.631912][ T5028] ? import_iovec+0x73/0xa0 [ 1133.631949][ T5028] ___sys_sendmsg+0x2a5/0x360 [ 1133.631976][ T5028] ? __lock_acquire+0x6b5/0x2cf0 [ 1133.632010][ T5028] ? __pfx____sys_sendmsg+0x10/0x10 [ 1133.632097][ T5028] ? futex_wait+0x29a/0x380 [ 1133.632152][ T5028] ? __fget_files+0x2a/0x420 [ 1133.632175][ T5028] ? __fget_files+0x3a0/0x420 [ 1133.632210][ T5028] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1133.632242][ T5028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1133.632281][ T5028] ? rcu_is_watching+0x15/0xb0 [ 1133.632317][ T5028] do_syscall_64+0xe2/0xf80 [ 1133.632343][ T5028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.632361][ T5028] ? trace_irq_disable+0x37/0x100 [ 1133.632379][ T5028] ? clear_bhb_loop+0x60/0xb0 [ 1133.632403][ T5028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.632422][ T5028] RIP: 0033:0x7ff65b99aeb9 [ 1133.632442][ T5028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.632459][ T5028] RSP: 002b:00007ff65c7fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.632482][ T5028] RAX: ffffffffffffffda RBX: 00007ff65bc15fa0 RCX: 00007ff65b99aeb9 [ 1133.632496][ T5028] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1133.632509][ T5028] RBP: 00007ff65ba08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1133.632521][ T5028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.632533][ T5028] R13: 00007ff65bc16038 R14: 00007ff65bc15fa0 R15: 00007ffee8c0a5c8 [ 1133.632568][ T5028] [ 1133.632577][ T5028] [ 1134.181849][ T5028] ============================= [ 1134.186684][ T5028] [ BUG: Invalid wait context ] [ 1134.191522][ T5028] syzkaller #0 Tainted: G W [ 1134.197484][ T5028] ----------------------------- [ 1134.202318][ T5028] syz.3.8259/5028 is trying to lock: [ 1134.207588][ T5028] ffff88805c6ecd40 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 1134.217971][ T5028] other info that might help us debug this: [ 1134.223849][ T5028] context-{5:5} [ 1134.227293][ T5028] 3 locks held by syz.3.8259/5028: [ 1134.232388][ T5028] #0: ffffffff8fef71a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1134.241889][ T5028] #1: ffffffff8f9ac1c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1134.250935][ T5028] #2: ffff88805a308370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1134.261151][ T5028] stack backtrace: [ 1134.264865][ T5028] CPU: 0 UID: 0 PID: 5028 Comm: syz.3.8259 Tainted: G W syzkaller #0 PREEMPT(full) [ 1134.264884][ T5028] Tainted: [W]=WARN [ 1134.264888][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1134.264896][ T5028] Call Trace: [ 1134.264901][ T5028] [ 1134.264908][ T5028] dump_stack_lvl+0xe8/0x150 [ 1134.264925][ T5028] __lock_acquire+0xec1/0x2cf0 [ 1134.264944][ T5028] ? __show_trace_log_lvl+0x478/0x550 [ 1134.264960][ T5028] ? dev_set_promiscuity+0x10e/0x260 [ 1134.264975][ T5028] lock_acquire+0x106/0x330 [ 1134.264990][ T5028] ? dev_set_promiscuity+0x10e/0x260 [ 1134.265005][ T5028] ? dump_stack_lvl+0x135/0x150 [ 1134.265019][ T5028] ? __might_resched+0x378/0x4d0 [ 1134.265043][ T5028] __mutex_lock+0x19f/0x1300 [ 1134.265059][ T5028] ? dev_set_promiscuity+0x10e/0x260 [ 1134.265075][ T5028] ? __pfx__printk+0x10/0x10 [ 1134.265091][ T5028] ? vprintk_emit+0x4eb/0x560 [ 1134.265101][ T5028] ? dev_set_promiscuity+0x10e/0x260 [ 1134.265116][ T5028] ? __netdev_printk+0x36f/0x480 [ 1134.265128][ T5028] ? __pfx___mutex_lock+0x10/0x10 [ 1134.265142][ T5028] ? netdev_info+0x11e/0x180 [ 1134.265160][ T5028] ? __pfx_netdev_info+0x10/0x10 [ 1134.265178][ T5028] dev_set_promiscuity+0x10e/0x260 [ 1134.265194][ T5028] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 1134.265211][ T5028] __dev_set_promiscuity+0x515/0x710 [ 1134.265227][ T5028] ? netdev_info+0x11e/0x180 [ 1134.265244][ T5028] netif_set_promiscuity+0x50/0xe0 [ 1134.265260][ T5028] dev_set_promiscuity+0x126/0x260 [ 1134.265275][ T5028] br_manage_promisc+0x180/0x560 [ 1134.265289][ T5028] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1134.265304][ T5028] __dev_set_promiscuity+0x515/0x710 [ 1134.265319][ T5028] ? __hw_addr_add_ex+0x361/0x650 [ 1134.265335][ T5028] __dev_set_rx_mode+0x17c/0x260 [ 1134.265350][ T5028] dev_uc_add+0xc8/0x120 [ 1134.265366][ T5028] macvlan_open+0x446/0x8e0 [ 1134.265381][ T5028] __dev_open+0x44d/0x830 [ 1134.265395][ T5028] ? __pfx___dev_open+0x10/0x10 [ 1134.265407][ T5028] ? __local_bh_enable_ip+0xd0/0x130 [ 1134.265419][ T5028] __dev_change_flags+0x1f7/0x690 [ 1134.265436][ T5028] ? __pfx___dev_change_flags+0x10/0x10 [ 1134.265450][ T5028] ? netdev_is_rx_handler_busy+0x56/0x120 [ 1134.265460][ T5028] ? __pfx_tap_handle_frame+0x10/0x10 [ 1134.265476][ T5028] ? macvtap_newlink+0x166/0x1b0 [ 1134.265491][ T5028] rtnl_newlink_create+0x587/0xb70 [ 1134.265506][ T5028] ? __pfx___nla_validate_parse+0x10/0x10 [ 1134.265525][ T5028] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1134.265541][ T5028] ? __pfx___mutex_lock+0x10/0x10 [ 1134.265558][ T5028] ? ns_capable+0x89/0xe0 [ 1134.265575][ T5028] rtnl_newlink+0x1666/0x1be0 [ 1134.265600][ T5028] ? __pfx_rtnl_newlink+0x10/0x10 [ 1134.265620][ T5028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.265656][ T5028] ? kasan_quarantine_put+0xbb/0x1f0 [ 1134.265678][ T5028] ? lockdep_hardirqs_on+0x7a/0x110 [ 1134.265694][ T5028] ? kmem_cache_free+0x195/0x610 [ 1134.265705][ T5028] ? nlmon_xmit+0xb0/0x100 [ 1134.265720][ T5028] ? __lock_acquire+0x6b5/0x2cf0 [ 1134.265738][ T5028] ? __local_bh_enable_ip+0xd0/0x130 [ 1134.265747][ T5028] ? lockdep_hardirqs_on+0x7a/0x110 [ 1134.265760][ T5028] ? __dev_queue_xmit+0x274/0x3850 [ 1134.265776][ T5028] ? __local_bh_enable_ip+0xd0/0x130 [ 1134.265785][ T5028] ? __dev_queue_xmit+0x274/0x3850 [ 1134.265803][ T5028] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1134.265820][ T5028] ? __pfx_rtnl_newlink+0x10/0x10 [ 1134.265833][ T5028] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1134.265847][ T5028] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1134.265859][ T5028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1134.265872][ T5028] ? ref_tracker_free+0x693/0x840 [ 1134.265885][ T5028] ? __copy_skb_header+0xa3/0x4a0 [ 1134.265901][ T5028] ? __pfx_ref_tracker_free+0x10/0x10 [ 1134.265917][ T5028] netlink_rcv_skb+0x232/0x4b0 [ 1134.265931][ T5028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1134.265945][ T5028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1134.265960][ T5028] ? netlink_deliver_tap+0x2e/0x1b0 [ 1134.265975][ T5028] netlink_unicast+0x80f/0x9b0 [ 1134.265988][ T5028] ? __pfx_netlink_unicast+0x10/0x10 [ 1134.266000][ T5028] ? netlink_sendmsg+0x650/0xb40 [ 1134.266012][ T5028] ? skb_put+0x11b/0x210 [ 1134.266026][ T5028] netlink_sendmsg+0x813/0xb40 [ 1134.266049][ T5028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.266062][ T5028] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1134.266077][ T5028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1134.266090][ T5028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.266103][ T5028] ____sys_sendmsg+0xa68/0xad0 [ 1134.266119][ T5028] ? __might_fault+0xaf/0x130 [ 1134.266137][ T5028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.266154][ T5028] ? import_iovec+0x73/0xa0 [ 1134.266171][ T5028] ___sys_sendmsg+0x2a5/0x360 [ 1134.266186][ T5028] ? __lock_acquire+0x6b5/0x2cf0 [ 1134.266202][ T5028] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.266219][ T5028] ? futex_wait+0x29a/0x380 [ 1134.266238][ T5028] ? __fget_files+0x2a/0x420 [ 1134.266250][ T5028] ? __fget_files+0x3a0/0x420 [ 1134.266265][ T5028] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1134.266281][ T5028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1134.266298][ T5028] ? rcu_is_watching+0x15/0xb0 [ 1134.266313][ T5028] do_syscall_64+0xe2/0xf80 [ 1134.266328][ T5028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.266338][ T5028] ? trace_irq_disable+0x37/0x100 [ 1134.266350][ T5028] ? clear_bhb_loop+0x60/0xb0 [ 1134.266362][ T5028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.266374][ T5028] RIP: 0033:0x7ff65b99aeb9 [ 1134.266386][ T5028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.266397][ T5028] RSP: 002b:00007ff65c7fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.266411][ T5028] RAX: ffffffffffffffda RBX: 00007ff65bc15fa0 RCX: 00007ff65b99aeb9 [ 1134.266419][ T5028] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1134.266427][ T5028] RBP: 00007ff65ba08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1134.266434][ T5028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.266442][ T5028] R13: 00007ff65bc16038 R14: 00007ff65bc15fa0 R15: 00007ffee8c0a5c8 [ 1134.266455][ T5028] [ 1134.851139][ T5028] dummy0: entered promiscuous mode [ 1134.863817][ T5028] bridge0: port 2(macvtap0) entered blocking state [ 1134.870474][ T5028] bridge0: port 2(macvtap0) entered disabled state [ 1134.877295][ T5028] macvtap0: entered allmulticast mode [ 1134.882686][ T5028] bridge0: entered allmulticast mode [ 1134.891839][ T5028] macvtap0: left allmulticast mode [ 1134.897217][ T5028] bridge0: left allmulticast mode [ 1134.903224][ T5028] bridge0: left promiscuous mode [ 1134.908398][ T5028] vlan4: left promiscuous mode [ 1134.913173][ T5028] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 1134.922492][ T5028] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5028, name: syz.3.8259 [ 1134.931548][ T5028] preempt_count: 201, expected: 0 [ 1134.936587][ T5028] RCU nest depth: 0, expected: 0 [ 1134.941572][ T5028] INFO: lockdep is turned off. [ 1134.946361][ T5028] Preemption disabled at: [ 1134.946373][ T5028] [] dev_uc_del+0x56/0x110 [ 1134.956723][ T5028] CPU: 1 UID: 0 PID: 5028 Comm: syz.3.8259 Tainted: G W syzkaller #0 PREEMPT(full) [ 1134.956742][ T5028] Tainted: [W]=WARN [ 1134.956746][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1134.956754][ T5028] Call Trace: [ 1134.956760][ T5028] [ 1134.956765][ T5028] dump_stack_lvl+0xe8/0x150 [ 1134.956784][ T5028] __might_resched+0x378/0x4d0 [ 1134.956802][ T5028] ? dev_uc_del+0x56/0x110 [ 1134.956818][ T5028] __mutex_lock+0x119/0x1300 [ 1134.956835][ T5028] ? __pfx__printk+0x10/0x10 [ 1134.956852][ T5028] ? dev_set_promiscuity+0x10e/0x260 [ 1134.956869][ T5028] ? __pfx___mutex_lock+0x10/0x10 [ 1134.956883][ T5028] ? netdev_info+0x11e/0x180 [ 1134.956901][ T5028] ? __pfx_netdev_info+0x10/0x10 [ 1134.956917][ T5028] ? __kasan_kmalloc+0x93/0xb0 [ 1134.956930][ T5028] dev_set_promiscuity+0x10e/0x260 [ 1134.956947][ T5028] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 1134.956964][ T5028] __dev_set_promiscuity+0x515/0x710 [ 1134.956979][ T5028] ? lock_release+0x4b/0x3a0 [ 1134.956995][ T5028] netif_set_promiscuity+0x50/0xe0 [ 1134.957011][ T5028] dev_set_promiscuity+0x126/0x260 [ 1134.957026][ T5028] br_manage_promisc+0x4db/0x560 [ 1134.957040][ T5028] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1134.957055][ T5028] __dev_set_promiscuity+0x515/0x710 [ 1134.957072][ T5028] __dev_set_rx_mode+0x17c/0x260 [ 1134.957087][ T5028] dev_uc_del+0xc0/0x110 [ 1134.957108][ T5028] macvlan_stop+0x259/0x3e0 [ 1134.957121][ T5028] ? __pfx_macvlan_stop+0x10/0x10 [ 1134.957134][ T5028] __dev_close_many+0x368/0x6d0 [ 1134.957148][ T5028] ? __pfx___dev_close_many+0x10/0x10 [ 1134.957163][ T5028] netif_close_many+0x225/0x420 [ 1134.957177][ T5028] ? __pfx_netif_close_many+0x10/0x10 [ 1134.957191][ T5028] unregister_netdevice_many_notify+0xb47/0x2370 [ 1134.957204][ T5028] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 1134.957220][ T5028] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1134.957233][ T5028] ? netdev_upper_dev_unlink+0x99/0xe0 [ 1134.957247][ T5028] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 1134.957266][ T5028] ? macvlan_dellink+0x3e2/0x470 [ 1134.957295][ T5028] rtnl_newlink_create+0x84b/0xb70 [ 1134.957319][ T5028] ? __pfx___nla_validate_parse+0x10/0x10 [ 1134.957344][ T5028] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1134.957360][ T5028] ? __pfx___mutex_lock+0x10/0x10 [ 1134.957378][ T5028] ? ns_capable+0x89/0xe0 [ 1134.957394][ T5028] rtnl_newlink+0x1666/0x1be0 [ 1134.957411][ T5028] ? __pfx_rtnl_newlink+0x10/0x10 [ 1134.957424][ T5028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.957444][ T5028] ? kasan_quarantine_put+0xbb/0x1f0 [ 1134.957461][ T5028] ? lockdep_hardirqs_on+0x7a/0x110 [ 1134.957476][ T5028] ? kmem_cache_free+0x195/0x610 [ 1134.957487][ T5028] ? nlmon_xmit+0xb0/0x100 [ 1134.957502][ T5028] ? __lock_acquire+0x6b5/0x2cf0 [ 1134.957519][ T5028] ? __local_bh_enable_ip+0xd0/0x130 [ 1134.957529][ T5028] ? lockdep_hardirqs_on+0x7a/0x110 [ 1134.957542][ T5028] ? __dev_queue_xmit+0x274/0x3850 [ 1134.957559][ T5028] ? __local_bh_enable_ip+0xd0/0x130 [ 1134.957568][ T5028] ? __dev_queue_xmit+0x274/0x3850 [ 1134.957586][ T5028] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1134.957602][ T5028] ? __pfx_rtnl_newlink+0x10/0x10 [ 1134.957615][ T5028] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1134.957630][ T5028] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1134.957642][ T5028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1134.957655][ T5028] ? ref_tracker_free+0x693/0x840 [ 1134.957668][ T5028] ? __copy_skb_header+0xa3/0x4a0 [ 1134.957685][ T5028] ? __pfx_ref_tracker_free+0x10/0x10 [ 1134.957701][ T5028] netlink_rcv_skb+0x232/0x4b0 [ 1134.957715][ T5028] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1134.957727][ T5028] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1134.957743][ T5028] ? netlink_deliver_tap+0x2e/0x1b0 [ 1134.957757][ T5028] netlink_unicast+0x80f/0x9b0 [ 1134.957770][ T5028] ? __pfx_netlink_unicast+0x10/0x10 [ 1134.957782][ T5028] ? netlink_sendmsg+0x650/0xb40 [ 1134.957794][ T5028] ? skb_put+0x11b/0x210 [ 1134.957808][ T5028] netlink_sendmsg+0x813/0xb40 [ 1134.957823][ T5028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.957837][ T5028] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1134.957851][ T5028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1134.957864][ T5028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.957877][ T5028] ____sys_sendmsg+0xa68/0xad0 [ 1134.957892][ T5028] ? __might_fault+0xaf/0x130 [ 1134.957910][ T5028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.957928][ T5028] ? import_iovec+0x73/0xa0 [ 1134.957945][ T5028] ___sys_sendmsg+0x2a5/0x360 [ 1134.957960][ T5028] ? __lock_acquire+0x6b5/0x2cf0 [ 1134.957975][ T5028] ? __pfx____sys_sendmsg+0x10/0x10 [ 1134.957992][ T5028] ? futex_wait+0x29a/0x380 [ 1134.958010][ T5028] ? __fget_files+0x2a/0x420 [ 1134.958022][ T5028] ? __fget_files+0x3a0/0x420 [ 1134.958037][ T5028] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1134.958053][ T5028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1134.958070][ T5028] ? rcu_is_watching+0x15/0xb0 [ 1134.958084][ T5028] do_syscall_64+0xe2/0xf80 [ 1134.958099][ T5028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.958109][ T5028] ? trace_irq_disable+0x37/0x100 [ 1134.958120][ T5028] ? clear_bhb_loop+0x60/0xb0 [ 1134.958133][ T5028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.958144][ T5028] RIP: 0033:0x7ff65b99aeb9 [ 1134.958156][ T5028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.958167][ T5028] RSP: 002b:00007ff65c7fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.958181][ T5028] RAX: ffffffffffffffda RBX: 00007ff65bc15fa0 RCX: 00007ff65b99aeb9 [ 1134.958190][ T5028] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1134.958198][ T5028] RBP: 00007ff65ba08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1134.958206][ T5028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.958213][ T5028] R13: 00007ff65bc16038 R14: 00007ff65bc15fa0 R15: 00007ffee8c0a5c8 [ 1134.958226][ T5028] [ 1134.958232][ T5028] dummy0: left promiscuous mode