last executing test programs: 2.538078691s ago: executing program 2 (id=2480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@empty=0xe0}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2.46934778s ago: executing program 2 (id=2481): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0c00800c52fa2ae0634bb3940752614cba1e8ee214d50a47d76121c72c2875ad"], 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4054) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001bffffe10000000000010000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f00000001c0)='./file0\x00', r3}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x509, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8f}, 0x1c, 0x0}}], 0x1, 0x20004808) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000b00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b80)={0x54, r2, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x38, 0x73}}}}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xf, 0x4, "80f2d24061d8ca717927de"}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000640)=@in6={0xa, 0x4e23, 0x9, @empty, 0x8}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="f10caad8ded61ac56125eae382b6596a8fd4953a07d83d88688b306811687e9fba8b0e30532e001d109b14701e38a7c65f88118bab1070d2c3619986a127d9312ec39bd7463519800a763b3ae896e8c45271321f33c06e9bf0d8ac11ac640f706e34a13f4d4c1279dc275619699d7ddc5465635823adccdb0e", 0x79}], 0x1, &(0x7f0000000740)=[{0x90, 0x1, 0x5, "f5c10b9ba2f4a1c88e832c0341c62f462d535492ffd6b94b0b08293ff2a607b19eeafd809f5cb177a659c7cf5a2d326d5ff56eb6b0dcad181cb8a8013a462eaea10739309a74446b403f806f3025943420f1c33b5876c9b4427fd73dca577b25018d113d4ca4c111881155fea6ec98230fa521a4949bd66752de"}, {0x100, 0x32, 0xeae, "fe0dbc4b31709e2ee816fa8e34e670d89e935bb29414fa6cef6665632b94be857ace90041b1343e6e306a857539647d7b0ea29efc0ef4c1acd18ef5d67f9c36820c9eaed04fd0bbd9571eac400dff159beb4dc1bd51228a9d8d91a496007338b7f30151181debc53fbd74104a1d5184d216691899655e1260b4be547e8ea840c91410f2b60b9363b3257f4e493c4283c95bfc1f420c65126216002a894b6fad04fd706015287af627033a81d0fc6cc4cbc6c9bc7385331ddfe29267fa5e9ad613fcc30438e76c78d6d39045e850f24e5033abca45176e7efa696f831afa6544ff24b59e6be5887d6e6"}, {0xd0, 0x29, 0x8, "bc0ab8c44c14c4ac02a56f79e022383c61dcaa49ef482d65eea3c62a0f84991a272e05bdd321d84f67f3d84b1b6f81762dffce0d94793a7fe456ec8fc41d6d40d8887b83d36fe2e56564793fb1de0d913d442e481c93be24993645cfdd2e82efd4d187b4642725457fff08b72fe226400c83e67aa7499365287ab43533a98fcb2981a01764195a5f538f4de58920e4c82b10387cbb57390e801e2e1f9d8d9cb74a65494f1fff84c92603c78597d886976e06cd2b61968f94a4e8e2020c49"}, {0xb0, 0x10f, 0x0, "0b7532739827cab8dba60207b31869c3c5912a63a3224b68d2382f3e55119a3d4524b456513957cdbc7b0ac2f2f8cfd6ead7b757f23af0cbf94270cf2e30ad62b35a923613ba31c66e98b8d1e104bdc5e648d31e1be85b69d7d521158a2ec89d951338fb4a0048d5729df8baff53f8161abf6efd4ca881bec3d2c1df95a5cf3826d1ef109e693f11d4745ee3d5b1e74f0fb3473125f31409d7"}], 0x310}, 0x8000) ioctl$SIOCSIFHWADDR(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000c80)={{r5}, r8, 0x0, @inherit={0x68, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000003f6b9f1a4e0da55882a3552fe50d6e0000000400000000000000faffffffffffffff0d080000000000001800000000000000f9ffffffff0000004002000000000000000000000000000002000000000000007f0000000000000005000000000000008000000000000000"]}, @name="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"}) 2.370146334s ago: executing program 2 (id=2482): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "47627347254e2f9c80b2c2de0ad9621c5b09c8d9e193b6eed517e7d27e0ed2104834458ce3897699cb2ac942b3b21ce05a1b93a58b9ff76400af76cf187a69f675b5c081ce85f40a7a5738cf64b82425"}, 0xd8) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000300)) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x200, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (rerun: 32) 2.338630587s ago: executing program 2 (id=2484): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) (async) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x8168}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000003d40), 0x8) (async) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000006f80), &(0x7f0000006fc0)=0xc) (async) connect$bt_sco(r5, &(0x7f00000071c0), 0x8) (async) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r8, 0x1}, 0x14}}, 0x0) sendmsg$NFC_CMD_GET_SE(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}}, 0x40) (async, rerun: 64) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async, rerun: 64) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async, rerun: 64) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async, rerun: 64) bind$tipc(r0, 0x0, 0x0) 2.097910952s ago: executing program 2 (id=2488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000680)=@ethtool_regs={0x12}}) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r3, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/131, 0x83}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 2.020038818s ago: executing program 0 (id=2490): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4089, 0xff9}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000feffffff4440000008000300", @ANYRES32=r7, @ANYBLOB="0c00238006000d0006"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x38}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r8 = socket$inet(0xa, 0x801, 0x0) listen(r8, 0x8) accept4(r8, 0x0, 0x0, 0x0) 1.041375039s ago: executing program 1 (id=2505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x4c82, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.039314089s ago: executing program 2 (id=2508): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) close(r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fedbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="f60673b81d9c15113402f0118daf66caebe6c684068a48288f8e6035d41b2ca0c21ac01e102313167c0ab17efa2a42ee60147f8155c4025700d81bf552b6d30e1dd4879764312f8d51f557d92ae672645d2c282b3dd9c960006bb52e1e9b24c6512255d119ee9c8bd997f1c0e9e632cf0fc6adbd99f3fb119a8af7448b7bb4cb65b5ec942b4dc5c9ab17f928135b4867c0e2bdc444df70ce112feb3d4a5285bce7aa859c5ec30d3bd4fbc9360d7fe9ba94a58371e2581e77a58100"/201], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000380)={r8, 0x5, 0x2, 0xde92}, &(0x7f00000003c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.038005613s ago: executing program 4 (id=2509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = socket(0x29, 0x80805, 0x2) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x24, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800f0ff00000000000000000000000095000000000000004a76cbbef81a87fc57c2ae647f39662d456f61dcd3d5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0xa, r12}, 0x10) (async) bind$xdp(r8, &(0x7f0000000180)={0x2c, 0x1, r11, 0x0, r9}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x1}}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0085f8", @ANYRES16=r1, @ANYBLOB="010000080000000000000700000008000300", @ANYRES32=r13, @ANYBLOB="0c009900009000002d0000001400040070696d367265673000000000000000000800050006000000080005000900000008bdfbbb513da3f999c688480e5d0555e0ae622896fea1444443ba2fbf37165fa4667eb5daea7e26c295af8a00326ce2e1215ff601dd85de"], 0x4c}}, 0x4) 1.025352064s ago: executing program 0 (id=2510): syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000280)=0xfffffffe, 0x15) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1d, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000005140)={r6}) 1.024789117s ago: executing program 1 (id=2511): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaa2aaaa8fa2608d7a9988a2450000140000000000c1b078ac1414aaa72b0000"], 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x5, 0x9, 0xf2}, {0x6, 0x5, 0x80, 0x7f}]}, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000200)={0x80}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xfffffffffffffde0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaa2aaaa8fa2608d7a9988a2450000140000000000c1b078ac1414aaa72b0000"], 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x5, 0x9, 0xf2}, {0x6, 0x5, 0x80, 0x7f}]}, 0x10) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000200)={0x80}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xfffffffffffffde0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) 1.023626911s ago: executing program 3 (id=2512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b7030000ca300009000f000000000000000007000000000000009500000000000a6682f0a61b01e4c027d252f60290167cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f9610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8505f171b46dbe7681ccea60bee06b6f69ef41ca39a200000000000000000000000000000000000000000000000000000000000051"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async) r3 = gettid() (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)={0x120, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x45, 0x3, "2864da8dff7603d916671d76e38bbd31031c92ce076d0664e827f30916076b3db8532595c11d4bd76a0c433a540ec1374afab498583fb02c5c77aeaa14df0a438a"}, @ETHTOOL_A_WOL_SOPASS={0x5, 0x3, "d3"}, @ETHTOOL_A_WOL_MODES={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x14, 0x5, "40d9b8ddc91e9f8f8916ec465ed691bb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_WOL_MODES={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-),.-\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!:))-]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x49}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0x46, 0x3, "d7b41556990c54faaf973b890258ad6878cc8bc64befb9aa735060ee4d4a6eaf34c231fa18d3be0cca8b86cb3d522d6e48e8ad46451fc90a86e2a49b01ce3d449204"}]}, 0x125}, 0x1, 0x0, 0x0, 0x50}, 0x1) (async) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) (async) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="00009e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r12 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r12], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) sendmsg$netlink(r6, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000400), 0x0, &(0x7f0000000440)=[@rights={{0x20, 0x1, 0x1, [r9, r6, r8, r5]}}, @cred={{0x1c, 0x1, 0x2, {r12, r7, 0xee00}}}], 0x40, 0x8084}, 0x4) (async) r13 = getgid() r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x30, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2a46c}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @exit, @generic={0xc6, 0x2, 0x0, 0x4, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xab}}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0xc, 0x4, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000dc0)='GPL\x00', 0x587, 0x20, &(0x7f0000000e00)=""/32, 0x41000, 0x14, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x3013b, r2, 0x0, &(0x7f0000000e80)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}, 0x94) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000f80)=0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000fc0)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f00000010c0)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001100)={0x0, 0x0, 0x0}, &(0x7f0000001140)=0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)={0x4e4, 0x2f, 0x200, 0x70bd2c, 0x6, "", [@typed={0x8, 0xad, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @nested={0xc6, 0x19, 0x0, 0x1, [@generic="19ef16b7da095edf3ab6f9d4549a06824c083fa3d90b0e9e8d8b2817969da7a046c8f18a68b8de0471a0deb5e7e103f53213b8465b3b248aad56f5e63c01ec000b15bf5e708eeff27279019659a37e5057b33ae5961c001c135a01d6356dad4e8442d2d85e49618bee5c2ac5b1f607721b7bf8837b49efd53f7b80dccb3fb0b08266873a4d471018bc83ecf32003cab2954d72fe6bd6b713cedf78decc75a5aff093c6f6626af8598b13d58d255098b97d532523493542728915e98b1936f01112d1"]}, @nested={0x168, 0x95, 0x0, 0x1, [@generic="bd5c1eb66c5fed750bfa90da38b2ca38d163a1f9adbe642554e89aebe5212109224af9a7d18f03fa8363e357e990ba1874a2c8ecfbcc4aa49e12671a86c5b681303f4f6bde3747f6a7d36bf800bbf7bd97135a4c38137cf786dff6fbf137a5fd59663dd2371f9e84a0f85c1897161befb75642318393dd5e9517627d9eab1a2ee9eb715c3fb1e940180368c98d9dd0ef697ea2a245cc8af7422bbda9e9ba70cbbf493e828ac6dc8e1c78e1e7e897941c71f6bf7e72cfb12f976045c89438f51b276db3", @typed={0x8, 0x146, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}, @typed={0x8, 0xf, 0x0, 0x0, @uid=0xee01}, @generic="fafc59a227ea007d8c413905152fe194c0eccd59e6e3029ff019ca7377dfb25a4a84fdd2ea2b0911a2d230593945ca6f1f5ee07db3409f759c4403580322eecfda6e7cd7771f9b276b0fe48d71fa0784e86cb61fe45e7930a6646f491df12b38b5c59b6c8376759535", @typed={0x10, 0x111, 0x0, 0x0, @str='-${:-\'$[..-\x00'}, @nested={0x4, 0x146}]}, @nested={0x150, 0x12b, 0x0, 0x1, [@generic="d3a63a68cb4e2ffa2ec9c8ec8dc6302a3d1bb9975a5f858c4781ca81380030e7cc2440fcf884bae1e46d9dc4734a694c345451be77249973ffdb067130efbf17cfe671b39fbabac21e68b84a258a8ecceb6da6dc93c817fa80a8fd21197d63e1dc7531119548c525f83632ac465539405752b9b9b3bff94252445558093b17c4c94d95016b2ee605e65f9562299db105a0fc76e2e8265aece41d59dfe1ed407bc9098ae68302d278fdf3c35147a5c9d5", @typed={0x5, 0x13e, 0x0, 0x0, @str='\x00'}, @generic="653134daba8a8705c2ef0d4ef2df8e60463bf8b3c2a7f5968b2052923a7b10f8c1f848452bd3fc608040c9b1619e736d6a8182ad9438f76209d8775c51", @generic="f5598e2a4bf0f87a66358aeb8fb41dd0830bc5d8ed6b468b13c6e0e4db441d725bc0ae97f6ef77e80ae52de4af22eba1430bd52a3c118722ab710b6db4ddc90bee7921dcb5ba50561de996773cf038fd9a5aad", @nested={0x4, 0x9}]}, @generic="580c2a295cc214e0f23c41ea1693e97a43527596d91f3e58266257a4f87415adcaf725e79fdc1726bfd54f329fec1c60615f03879cc72a120474fd05a4", @nested={0xf2, 0xe6, 0x0, 0x1, [@typed={0x14, 0x44, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0x116}, @generic="b0ee7a6e5813686f42d7adebe3c14a8d5f2dadd25c41a0e6b195f8c500f9b97af02d01b75287175d1fb45510606d5a88c4b21d18be58cbe4b129110481155435102d21ed22b4c96befc4c9b6c80265941f472ff653883933d3e96aa0a07d4eebe8e6520b191aef5747e280ef5531ed05c69b18cd218deda9aa664f33225fdf0f052a8aac86ea879ccc8cf5382594a9637bf22ed0a10ca3d5c3799b71b6606572f48d1397c1be6904f497b792b670de8d9519f26d28b63ad4e573c70d567b46bc03cc71cba4d84dc6d324ef9099e77be38857ae946702"]}, @generic="c5a6058074378e03c9f012086a4cc9955b4adfa776a0d13f1c6c"]}, 0x4e4}], 0x1, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, r7, r13}}}, @rights={{0x1c, 0x1, 0x1, [r14, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x130}, 0x40000004) 914.020539ms ago: executing program 4 (id=2513): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x114006, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) write$tun(r6, &(0x7f0000000100)={@val={0x0, 0x18}, @void, @llc={@llc={0x8e, 0xf0, "8c"}}}, 0x7) (rerun: 64) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@allocspi={0x120, 0x16, 0x1, 0x0, 0x0, {{{@in6=@remote, @in6=@mcast2, 0xe21, 0x0, 0x4e23, 0x0, 0x0, 0xa0, 0x0, 0x1d}, {@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x6c}, @in6=@mcast2, {0x10000, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfff, 0xffffffffffffffff}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x1032}, [@address_filter={0x28, 0x1a, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x1e, 0x3, 0x3}}]}, 0x120}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xe, 0x4}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x3ff, 0x20000008, 0x6, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r11, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64=r11], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 877.931856ms ago: executing program 0 (id=2514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x7c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd597}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x271}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57758d7a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d91dddd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e1f4406}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x7c}}, 0x0) 849.599555ms ago: executing program 3 (id=2515): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000004300010027000000200000000014b01889000100616e73695f6370726e670000"], 0x24}}, 0x4000000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x20, 0xfffffffe, 0x8000007f}, 0x2c) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000004c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r3, 0x3, 0x4, 0x8}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000035635eff27ec7187fdf54a71421ad20e79de68aa80c30b25ce01664deeb6110e8c53feae", @ANYRES32=r3, @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r5, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 766.081479ms ago: executing program 1 (id=2516): bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x22, 0x2, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x0, 0x4) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r3) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="01ad00000000fbdbdf25170000000c00058004000280040002805400068004000300080006002000000008000600020000003c00040067636d28616573290000000000000000000000000000000000000000000000001400000050e858cb"], 0xcc}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000c0) 752.920617ms ago: executing program 0 (id=2517): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="91e5213a9eed445d6c2d4f81b72862ee1151e5b610bc5bf0efc80053770ddcf95a7b79ce6f1d204d981a098d57a37bb63254609fc97bc20092834e136ab44d509c2be55a53b446c6a0c55cd2e21073b2640ef273d80305eeee183f4a07a8c022f8a64aa080254f8d4d3639ee1f733b1076a1434b15a8b7fea608921ae889790f81", 0x81) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xcc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xcc}}, 0x0) 732.869319ms ago: executing program 3 (id=2518): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff380000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000001850000000000000000000000000000018400000f8ffffff0000ea00000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x90) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffefa, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b000000000000000000"]}, @nested={0x11e, 0x0, 0x0, 0x1, [@typed={0xdd, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x140a, 0x10, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}}, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000240)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x700, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) (async) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) (async) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xffffffffffffffd8) ioctl$TUNSETOWNER(r2, 0x400454cc, r5) 698.65732ms ago: executing program 4 (id=2519): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000100090500000000000000000000000000f9ff054000000000240002002800028005000100000000001400018008000100ac1414aa080002007f0000010c0004800c000140000000005f0900010073797a3000000000"], 0x58}}, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x8, 0x5}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$cgroup_subtree(r2, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x9, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x1000005, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x6, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x400, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x3, 0x180000, 0x4007, 0x8b, 0x5, 0x9, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x8, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x82, 0xd, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x3, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x84ac, 0xd9a, 0x5, 0x82a2, 0xfff, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 581.916229ms ago: executing program 1 (id=2520): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f0000000200)="0bc0fd20d2467f82bbcec8082577c152eb7d554dee94911f776e0ad96f62ab1129930290a79bfe98aed92d67395cb3072199440727f6cd8fcaaa15287f4695c1519638aae852838a56f4a5b3393aafa3f73a0a3206f15e2088f40d31dbad585ab2b057e8f41ff5a604bdf2f5adfff073430c4f2e0e5d54cc84a43fd6e0c86715b4123e9b9f667f0b5ca44f485bce63a14259aacbee87e48765775aa6fa0ca09db79140ac2760e5c14334e27cb3c745ad5392e017d2d0a2a3dead52", 0xbb}, {&(0x7f0000000480)="ca76a1eab0b6b937a500c199049a8782adb31ee42910703f5939c221453c86997ccdfb4a912ce38f455a09bcbc81ebbb1c4a03d6d33f309e9297df84ebaebb720accf2063717c16a42a25a07be788c71670df658f7d71d34e3a205ab24a66d0165ddb25cea872f0bfa863b4c4455adf6ebca834627b9cd9b4827b277f35cf0a3767e5e22b915082c60b6e845297857ce839c4d6efee988bcaedc8bea78e74ce170304917eefe95acf7054fdb60", 0xad}, {&(0x7f0000000540)="fd3d90eaed44a964a3774453ab8f438e624a1fc92613d2996046135f5b597952368476e73ec5771ed23af026af98ec7f07752e133b8f161d77eff80be4a4f8961843a399ee58c6fe48d3cf48e78635f903738cecd1a785ec411e74b8571c140838ae0a14251316699612caca8229cb52de130c483cce28661a198c16b7424b214d8cb549b2ed96b569811130360108cf7e682881a51aa559b44dc667a88b46527b8e0adcda30086871ecea6caf7b15fc032f641933c41b18bcc9085da430824f497ed1943ba42ec01f324740d972", 0xce}, {&(0x7f0000000980)="72ebecfae8e473c4ec3cdc702019f8bad010c37a313a243e8a8e5d4b8fd030073e69ab53f39d5f0e335bae9f64dc9227cc6e7459b5cf870de027d1937b95e0a8fc515171bbe5ecf69684e464d04e0a9f292af12888db9f0f14871baf912618faa8282f96d9e8d39c23ffaf39464180753effe3053dbf5251f0cbf4fb81e278bba44c90c23e9585266c4780dc1adf05dab9c5c3b48e38e57b1dedc048afc47a9674f3b71a13ddf82ef4206db7142b550dee8091e7bcb24eebbf051df5f5da4d7b77adb5f3aceac84d7cd1fa099978ea48fc92fa190e723810c91c", 0xda}, {&(0x7f0000000640)="9467ae683385ee0637fec2b021138d2aa30375517feb4e992ac9fe1d44c962c11f33741b29ee04c2c52dd70cc047a01089c52e71516fd7a9a3577d91df421388e2833b5d2b1881f3bdac8c4b81e75522ac0513aa4315cffa609fc5ebe6b7982694e88cad07bbb8ae62c672d7636df94c483029cfafc944ceab886274f4a69d79d97a6a56116f1aa0dfaa22ac61f61a991ae3", 0x92}], 0x6) r2 = socket$inet(0x2, 0x5, 0x0) sendfile(r2, r2, 0x0, 0xffffffffffffffff) clock_gettime(0x1, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f0000000200)="0bc0fd20d2467f82bbcec8082577c152eb7d554dee94911f776e0ad96f62ab1129930290a79bfe98aed92d67395cb3072199440727f6cd8fcaaa15287f4695c1519638aae852838a56f4a5b3393aafa3f73a0a3206f15e2088f40d31dbad585ab2b057e8f41ff5a604bdf2f5adfff073430c4f2e0e5d54cc84a43fd6e0c86715b4123e9b9f667f0b5ca44f485bce63a14259aacbee87e48765775aa6fa0ca09db79140ac2760e5c14334e27cb3c745ad5392e017d2d0a2a3dead52", 0xbb}, {&(0x7f0000000480)="ca76a1eab0b6b937a500c199049a8782adb31ee42910703f5939c221453c86997ccdfb4a912ce38f455a09bcbc81ebbb1c4a03d6d33f309e9297df84ebaebb720accf2063717c16a42a25a07be788c71670df658f7d71d34e3a205ab24a66d0165ddb25cea872f0bfa863b4c4455adf6ebca834627b9cd9b4827b277f35cf0a3767e5e22b915082c60b6e845297857ce839c4d6efee988bcaedc8bea78e74ce170304917eefe95acf7054fdb60", 0xad}, {&(0x7f0000000540)="fd3d90eaed44a964a3774453ab8f438e624a1fc92613d2996046135f5b597952368476e73ec5771ed23af026af98ec7f07752e133b8f161d77eff80be4a4f8961843a399ee58c6fe48d3cf48e78635f903738cecd1a785ec411e74b8571c140838ae0a14251316699612caca8229cb52de130c483cce28661a198c16b7424b214d8cb549b2ed96b569811130360108cf7e682881a51aa559b44dc667a88b46527b8e0adcda30086871ecea6caf7b15fc032f641933c41b18bcc9085da430824f497ed1943ba42ec01f324740d972", 0xce}, {&(0x7f0000000980)="72ebecfae8e473c4ec3cdc702019f8bad010c37a313a243e8a8e5d4b8fd030073e69ab53f39d5f0e335bae9f64dc9227cc6e7459b5cf870de027d1937b95e0a8fc515171bbe5ecf69684e464d04e0a9f292af12888db9f0f14871baf912618faa8282f96d9e8d39c23ffaf39464180753effe3053dbf5251f0cbf4fb81e278bba44c90c23e9585266c4780dc1adf05dab9c5c3b48e38e57b1dedc048afc47a9674f3b71a13ddf82ef4206db7142b550dee8091e7bcb24eebbf051df5f5da4d7b77adb5f3aceac84d7cd1fa099978ea48fc92fa190e723810c91c", 0xda}, {&(0x7f0000000640)="9467ae683385ee0637fec2b021138d2aa30375517feb4e992ac9fe1d44c962c11f33741b29ee04c2c52dd70cc047a01089c52e71516fd7a9a3577d91df421388e2833b5d2b1881f3bdac8c4b81e75522ac0513aa4315cffa609fc5ebe6b7982694e88cad07bbb8ae62c672d7636df94c483029cfafc944ceab886274f4a69d79d97a6a56116f1aa0dfaa22ac61f61a991ae3", 0x92}], 0x6) (async) socket$inet(0x2, 0x5, 0x0) (async) sendfile(r2, r2, 0x0, 0xffffffffffffffff) (async) clock_gettime(0x1, &(0x7f0000000080)) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) (async) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async) 581.574353ms ago: executing program 0 (id=2521): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x8090) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000002c0)={r8}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @dev}, &(0x7f00000004c0)=0x10, 0x80000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'nr0\x00'}) 506.404878ms ago: executing program 4 (id=2522): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340), 0x0) sendmmsg$inet(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="86f02c2b1fd65cc55f6cd20ca40e9f671d415246f7ac04b7b9612df49608cc4758bebf84b3b875f4e3469dafb8456ca0855c46b29e1bad9a6227cb162e7ab9", 0x3f}], 0x1}}], 0x1, 0x20040010) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 64) close(r1) (async) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x2dc}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xa, r7}, 0x10) (async) connect$packet(r4, &(0x7f0000000600)={0x11, 0x8, r7, 0x1, 0x2, 0x6, @random="605bc59b4d11"}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 493.144248ms ago: executing program 3 (id=2523): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000)=0x4b, 0x4) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1fc, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x26}}}}, [@NL80211_ATTR_IE={0xee, 0x2a, [@fast_bss_trans={0x37, 0xe8, {0x7, 0x6, "c8247e2d8ca4e290712d14b234e77554", "d4c27b31a481d2757add937defd91f9412927231a68d85d3342ea3f812201ec7", "e79431ef7740a1b484ae712b0506390227028d777cb4a7d75942bee2229df729", [{0x3, 0x5, "12169515b1"}, {0x2, 0xd, "d25dfb584b7ff06b521d44f765"}, {0x2, 0x12, "c1e7e311dce023a9fb98045451b49499ea3f"}, {0x3, 0x25, "2c4b9f24be68909822c3182b6f0c247c95b32c04c81fe28c6e70bf4ce2f14c1dfb719687c1"}, {0x3, 0x27, "4efee83cbfd857c39b52df99914738d1892643dc63f8213bc9f3c6466cc70f924b61d451c875f0"}, {0x2, 0x1a, "cf03f0a911c6ac4d9073e4eb68ef381d98dad275805492f06d8b"}]}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xd5, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0xfa, @device_a, 0x81, @value=@broadcast, 0x8000, 0x3, @device_a, 0x8}}, @random={0x5, 0x98, "92c6b938c2d8711f1d6a5e389532dc200f5ecbcf733c697820253460acf9f29b35277ee12b9067d786442557a3ed8b23d9942042c5f3ad518f21fb127e2da80935afec0886d3242b1faac42ed1699c9e6b66fef64b87ca0d189a2491231e288883b4fa9f0ab4ca98c15f971bd6d23c55524b0f5f3316714881c4f717fcb78f48a25038c987b742d8e0ea576f500393ef4e6192adabc84a36"}, @mesh_chsw={0x76, 0x6, {0xb, 0x7, 0x6}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000440)={r5, 0x8c, "017741d9ddd1738c8615fd40bd6a52418fc2f63456d4d4d056491ae3881854ff7fc4d412eb2270c97ec003f3ceeaf6c0e774a353670d58ae0dc49130404951d0e667fa45c8723e6c2342c2ac511659345fe9a663ec38603772b70a83978267a831ff004d0118b72fd00cc32669bc2daa7d6ddd8ce6cbc993b0672bab349c385e4cc3806037a7b934dafaf537"}, &(0x7f0000000500)=0x94) r6 = socket(0x27, 0x805, 0x2f) sendmsg$NFT_BATCH(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xdcbe2fed39f57187}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x64, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x94) socketpair(0x2c, 0x1, 0x1, &(0x7f0000000700)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0x1, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x7, 0x80, 0x8, 0xfffffff7, {{0x10, 0x4, 0x1, 0x3, 0x40, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast2, @multicast2, {[@end, @timestamp_prespec={0x44, 0x14, 0x54, 0x3, 0x5, [{@private=0xa010100, 0x2}, {@rand_addr=0x64010101, 0x4}]}, @cipso={0x86, 0x15, 0x2, [{0x0, 0xc, "ff33360c75f89e6584ff"}, {0x0, 0x3, "e3"}]}]}}}}}) getpeername$packet(r6, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000980)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x6, 0x3, {{0x2b, 0x4, 0x0, 0x34, 0xac, 0x68, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@ssrr={0x89, 0x23, 0xbc, [@private=0xa010100, @multicast2, @local, @loopback, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp={0x44, 0x8, 0xb3, 0x0, 0x7, [0xcf]}, @ssrr={0x89, 0x1f, 0x17, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @private=0xa010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xc}, @multicast2]}, @timestamp_prespec={0x44, 0x4c, 0x57, 0x3, 0x8, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x3}, {@multicast1, 0x6}, {@broadcast, 0xe}, {@loopback, 0x7}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0xffffffe0}]}]}}}}}) getpeername$packet(r6, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r7, &(0x7f0000000dc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x18c, r8, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x400}, 0x2404c480) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r15, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x397}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x800) sendmsg$nl_route(r6, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x7, 0xf6, 0x0, 0x0, 0x0, 0x9}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x8004) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000001180)={{r7}, "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"}) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000002180)={0x1, 0xc, 0x2, 0x3, 0x0, [@private0={0xfc, 0x0, '\x00', 0x3}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @empty, @local, @empty]}, 0x68) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002300)={@fallback=r7, 0x10, 0x1, 0x10000, &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002280)=[0x0, 0x0], &(0x7f00000022c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002340)={@map, 0xffffffffffffffff, 0x13, 0x34, 0x0, @void, @void, @void, @value, r16}, 0x20) 314.113123ms ago: executing program 3 (id=2524): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xa0001f98, 0x15, 0x0, &(0x7f0000000280)="4c1b84bdac37f4451b20a3066494677ee389d422a1", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x153, 0xfffffffffffffc39) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000001580)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000014c0)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001640)=[{{&(0x7f0000000040)={0xa, 0x0, 0xc, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)="f45b1bdd3f2c2377ef1156b5b9ad244b496d752751d8c04178c5a018b0784c40cd2843c8dcbea6d82a86ed1e3cf4c3019bf20d0e9a9604091a663f4c7d65b0a0a829284a0c52a51af10405254a08f4dd37ff526fd008d313032702b1dea40e66dc940d79f5d8f5ad7197bf4f622dae44ac156ca90c661e01ac6e9e975a109924621a6621ea77fdeffd0659278f1a26b94e664b", 0x93}, {&(0x7f0000000080)="53f9e45a6956bf1d2c2534f2c4f206fb4262912df8dc0d1956a48bc68b0055fe1b", 0x21}, {&(0x7f0000000200)="fd7527650558994cab5a3155cca4571ab10c73a376039ab65552e721539fb1bb688c8f185ab1c8d07c44cf0a7cee62e333cded8e1f2021b89ff41e1a9a49bbc36586ca9141473727640ca1f1af91b699dfe785d93d47696a66c7b268087b6669b06967d189a79979295efcbed8fbbd139afd1d0c983465ac08eb5bd0102feb5b6bec4bf35b787b1f4530719afc69a7", 0x8f}, {&(0x7f00000002c0)="774bf5832ac694eda916b780c853f472e8206535e8289a57c0bbc32b2d15d5d1166de6e2b53ea31464a0ce30eeeebfc5ed7e52e055edfe4d774cee70aebd2a9061b66b4e3e526b4cf39895f18c7580c128f2390e4d2f3c7f1d9e2b22fa164936fe912a400fa6296865e77a485d2be286b065060b58e26dfa06cd9f04e6b72a6a8483d599f590cc07ca30b09d221bb3dea2b97ac3664fd094c1c2a6fcc4dffbedc4f4f11ad93ed38ce4b1af36d33d45afc886cb4d645bbea55836e35df32e734073884d85", 0xc4}, {&(0x7f00000003c0)="09c6c14a44cc63544fa31a251a11f2e021b3f4033835c0522749d80ce68a593f1885381b755588", 0x27}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="19af25da0a65021558", 0x9}], 0x7, &(0x7f00000000c0)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x4, 0x0, '\x00', [@pad1, @pad1]}}}], 0x20}}], 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x808ed3a56aee9e2a) 313.870075ms ago: executing program 4 (id=2525): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) 218.47052ms ago: executing program 1 (id=2526): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000240)=':\\@\x00'}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r1}, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) accept(r3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x1fe, 0x0, &(0x7f0000000000)="e59198eda5ef75aec2d46547f0809548ad8bf81f119e069a0bbd93d9fdc6a6209a76f94834aee7db2f3122faa20329d431d75f346061eea1802b2187a147d23d90c02996cdcb3f68f3cb188206f85a00e167b06a133b7d17fdbccca535e8704837ae0ae7e2c950c681be48029830ccd5ab9a1b2b392110be3ae34e296a70d4a0aced3cc29212ff1d735c2fd4500f021dbe7c88af4a9f1b8b89eae25ed1a048eec003edf1d25d26ea83c8aca3d4417856bbd576d3488970f82b057bc8295538b0d4ffde184e0509669efa825feeac035adb36b0646ee14468b2f836a501fb3753eeeb90fa4416cbb5786d7552dd87e0f4d1da4792df9cc4da57880dcc03420b2ff3644963fce37e8034c6a5089c7ada5e8ab7b5f70000005791cb0e27c6e9c69ae430a0ac0d3354bcc80b9abf785b9e7634e357504cadc32e295c170794f0e395d7b102777f50bff2bc48b3c3a45f876183a16bbeb060c43ae967e6366171144e266fcf40122a5e93a186f4cd37d33b5d837ebfe92cc445ffff5a9ba6f3e55726a08d52e533dbd779a4408aff99793ba36e3bbfb4fb84d91beaa066602597ca3ee3eb5d35b9228b7660fc4134a4c53b90234a26d5765e39b3a61a9a16e356f150515eb012cd2cd48fa0394362c60b54e4a14d7f501cb4e466e3c516985631722214ee8c68b1058e08a5244e76eeca0ae72d83b5c193fc8df29f157c34d924", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8000}, 0x50) 184.683226ms ago: executing program 0 (id=2527): socketpair(0x8, 0x5, 0x2, &(0x7f0000000000)) socket(0x2, 0x80003, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2c, &(0x7f00000001c0)=0x800, 0x4) close(r0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004500000500000000001190787f000001e00000014e210e22000c907801010000b60573594c964075b1f556d76b465c5821aff2c081630100017a30da55fc81006d2e8e31d0e5deba6764fc467712d4110ef67870044ae0506cfa47161ea896a07b05f6f59a8f5efd8dd410081d1c39807567a7df10f8dcfb8b8f5228c300000000000000006b009fdc563aa62518bf09150c61dd3378c287339c591ffa393918b39c12a775cdf7378cc92f3ff767eda6531e65ed1a1608dff29eb8dd7a143c444cdfbb8f135ed043c94d460d982b8ced806a06b0460e2a6a2657a4109f59e719d6e08e834421a076b0dec05a678dcf10348a77cb1ef41946c5ca1ef7347e18af49e3f856895fb38145a0c3db869f91251be5da265957bbbda466b0aedb0c55c1a08185f4c87ee802258a2daf88e9"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000100)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}) 130.02982ms ago: executing program 3 (id=2528): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000fc14c3e4000000000237a100"], 0x10}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r8, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000002200)=@newtaction={0x4fc, 0x30, 0x100, 0x70bd2a, 0x0, {}, [{0x4e8, 0x1, [@m_simple={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_DATA={0xffffffffffffff0a, 0x3, '\x00'}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0x184, 0x9, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x3, 0x20000000, 0x2, 0x4}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3e3, 0x3, 0x4, 0x7, 0x9}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0xd9, 0x6, "2680cbf0203479cf80e3f306069e2235f3e363a27a0243e7d5e9350a97618849011b64438b2896fb1091afb8d30478d9182a91cc2a1d615f09b68f30ecadba9650a826c67e3e1ddc51497b604f67fc06f2efeb6946b4df8b8af514a5e2af7a8cfefcea46e1557a8a15d6be32185b9d44347c9bce0db9ec4919432876e39826d4b27c65e69f4d92fd1205668ca5a4422e6e96febd5b8d564926cf7c03f24051abd1215b1a0dd7a91c14b650cd08e9a512a6b6c56eeb54d8073f5c0e869dc14a50f813102c3998203f019815d3ce0c3968761066a091"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x1c4, 0x16, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0xffffffffffffffff, 0x80, 0x8}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x80, 0x4, 0x80, 0xf}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xa6, 0x2, 0x2, 0x4}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x8, 0x200, 0xfffffffb}, 0x0, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x2000003, 0x6, 0x3, 0x81}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x7, 0x7, 0x6}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xdd5f, 0x7ff, 0xffffffffffffffff, 0xe44, 0xc9}, 0x4, r6}}]}, {0xb8, 0x6, "b696e548e231eab91e90b47589e141f0e6fa37255ab6e340d895fbedf79b142a57518559920b66573cf26a05717f462a90515bb8c8cef27d696b69aec8c0d8205dfbb686f02abf0e1640a42ce3fe5cda7bf56fa9e4218c61fdaf7366ea568ac2483b282634fe9924dadd9d7cbe3e4203daa92090810a5ac9e2f80eb6f140d7f7cf25bffce2a0c0d64bc38bc1e1f364f5f705089378b08d17c152726ce32a39b45b9ad127c0861d1ee409c3460138b9eeffe9d4fe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0xa93185e6a541086e}}}}, @m_nat={0x158, 0x1b, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x81, 0x5, 0x2, 0x90c}, @multicast1, @private=0xa010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9, 0x5, 0x6, 0x4}, @multicast2, @remote, 0x0, 0x1}}]}, {0xde, 0x6, "779a9c84cfc7e5b3796a20103560a951dd07559fa5baf35589a5e1c67c1814fcbb049fdf3cf13a5302c3ae94a5e13ed9388cc94e9437dba37ac3245c60f06df5a3e9d2b9ac356f5bec8795f4cad240c33b25c6e047ffd8093ac86853c57eb3363c760bc288e354f20d7068dc7bf985cea57f1d6f93caccf1f7545a8f091790c52fe3668a3817db43f3e3f52750da75d87b2aafd5ea6b1009840e9d18de1966e7ee13cc81e5eba41c8a07d426165d701ca93fb4fa43bda054fd29e4c7d9cf03bf67a791626357848bc6e4bf851970c3349e0f66cf1a4517a3cc3b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4fc}}, 0x0) 48.522215ms ago: executing program 1 (id=2529): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=@flushpolicy={0x340, 0x1d, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e20, @in=@local}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in=@private=0xa010101, 0x0, 0x2}}, @tmpl={0x184, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3500, 0x0, 0x0, 0xd, 0x9, 0xfffffffe, 0x7}, {{@in=@broadcast, 0x4d5, 0x2b}, 0x9d157abe2c366467, @in=@broadcast, 0x34ff, 0x3, 0x2, 0x9, 0x7, 0xfffff04d, 0x25b0}, {{@in6=@remote, 0x4d3, 0x3c}, 0xa, @in6=@mcast1, 0x3505, 0x4, 0x1, 0x3, 0x1, 0x8, 0x4a}, {{@in=@private=0xa010100, 0x4d5, 0x6c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3505, 0x2, 0x0, 0x3, 0x400, 0x200}, {{@in=@multicast1, 0x4d6, 0xff}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3502, 0x3, 0x3, 0x2, 0x7fff, 0x7, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x33}, 0x2, @in6=@local, 0x3504, 0x0, 0x2, 0x8, 0x0, 0x642, 0xae}]}, @policy_type={0xa}, @address_filter={0x28, 0x1a, {@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa, 0x2, 0x7}}, @sec_ctx={0x76, 0x8, {0x72, 0x8, 0x1, 0x0, 0x6a, "c9c7c99b57c56583fd2870eadc892f5a0fe3a8da2a100e8ef7ab94054d4ef8e8a271b07e552a2b42ef3d736aec91628d3ed09d8b0df88790c6690802c6de151102cf2dad6d37f0a6ef87500474426ee2cd85c4b705c9fed1ddc7a19aa6d37a26c7451b232b5c97b93c87"}}, @algo_comp={0xaf, 0x3, {{'deflate\x00'}, 0x338, "ba8da90f7eba5f3973018461adee1fc7309e0c0e8a32b5c36d56845fff294b8ef8a6c51f02e1a182dd817f7a394a57420c968a858397ba837be6d938ac71e51bb7bbf65d448efde5642fbe50bd425dc86b551568cdba5033e5d301152e2095a1bfbd8822b43e35"}}, @etimer_thresh={0x8, 0xc, 0x9}]}, 0x340}, 0x1, 0x0, 0x0, 0x1}, 0x40004) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000002640)=0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000040)) 0s ago: executing program 4 (id=2530): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) r1 = socket(0x2d, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b", 0x83}], 0x1}, 0x0) connect$qrtr(r1, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYBLOB="07000000017c000a0000e03b75fe7ff01086d200"/33], 0x24}}, 0x4010) kernel console output (not intermixed with test programs): ating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.535316][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.651981][ T3496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.685992][ T3496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.702419][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.747532][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.811134][ T3515] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.854825][ T3515] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.898042][ T3515] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.917835][ T3515] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.948904][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.147529][ T6010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.322349][ T6011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.400175][ T5872] Bluetooth: hci3: command tx timeout [ 99.440692][ T3496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.448577][ T3496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.479812][ T5872] Bluetooth: hci1: command tx timeout [ 99.486610][ T5884] Bluetooth: hci4: command tx timeout [ 99.486686][ T5872] Bluetooth: hci0: command tx timeout [ 99.492783][ T5884] Bluetooth: hci2: command tx timeout [ 99.628492][ T6019] netlink: 'syz.1.11': attribute type 21 has an invalid length. [ 99.663943][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.683806][ T6019] netlink: 'syz.1.11': attribute type 22 has an invalid length. [ 99.693968][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.715093][ T6019] netlink: 'syz.1.11': attribute type 23 has an invalid length. [ 99.755187][ T6019] netlink: 'syz.1.11': attribute type 25 has an invalid length. [ 99.811053][ T6019] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11'. [ 100.049158][ T6033] tipc: Started in network mode [ 100.054232][ T6033] tipc: Node identity 1ac2e8b188cf, cluster identity 4711 [ 100.085858][ T6033] tipc: Enabled bearer , priority 0 [ 100.150087][ T6038] syzkaller0: entered promiscuous mode [ 100.173660][ T6038] syzkaller0: entered allmulticast mode [ 100.267614][ T6033] tipc: Resetting bearer [ 100.307711][ T1157] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.326125][ T1157] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.353238][ T6030] tipc: Resetting bearer [ 100.416314][ T6030] tipc: Disabling bearer [ 100.447044][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20'. [ 100.497256][ T6054] netlink: 'syz.2.20': attribute type 4 has an invalid length. [ 100.653987][ T6056] netlink: 192 bytes leftover after parsing attributes in process `syz.0.21'. [ 100.699250][ T1157] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.718592][ T1157] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.722383][ T6056] netlink: 192 bytes leftover after parsing attributes in process `syz.0.21'. [ 100.799636][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 100.826634][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 101.014368][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22'. [ 101.050142][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 101.343059][ T6076] netlink: 'syz.2.26': attribute type 2 has an invalid length. [ 101.383587][ T6076] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.26'. [ 101.395468][ T6076] nbd: must specify a device to reconfigure [ 102.042214][ T6109] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 102.847912][ T6152] Zero length message leads to an empty skb [ 103.115572][ T6166] IPv6: Can't replace route, no match found [ 103.254678][ T6171] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 103.470892][ T6182] netlink: 'syz.1.56': attribute type 24 has an invalid length. [ 103.535894][ T6188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.615196][ T6178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.706527][ T6178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.033331][ T6211] unknown channel width for channel at 909000KHz? [ 104.393330][ T6230] __nla_validate_parse: 9 callbacks suppressed [ 104.393349][ T6230] netlink: 13 bytes leftover after parsing attributes in process `syz.1.72'. [ 104.415059][ T6230] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 104.424834][ T6230] netlink: 224 bytes leftover after parsing attributes in process `syz.1.72'. [ 105.081964][ T6241] validate_nla: 2 callbacks suppressed [ 105.081986][ T6241] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 105.114749][ T6241] netlink: 'syz.3.76': attribute type 4 has an invalid length. [ 105.136398][ T6241] netlink: 192 bytes leftover after parsing attributes in process `syz.3.76'. [ 105.156978][ T6239] netlink: 512 bytes leftover after parsing attributes in process `syz.4.75'. [ 105.248473][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 105.261362][ T6248] netlink: 32 bytes leftover after parsing attributes in process `syz.3.76'. [ 105.303989][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'. [ 105.464069][ T6254] can: request_module (can-proto-4) failed. [ 105.479873][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 105.586165][ T6262] netlink: 48 bytes leftover after parsing attributes in process `syz.4.82'. [ 105.788747][ T6262] netlink: 48 bytes leftover after parsing attributes in process `syz.4.82'. [ 105.967394][ T6283] syz.1.88 uses obsolete (PF_INET,SOCK_PACKET) [ 106.438666][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.448145][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.563758][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.577964][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.725878][ T3598] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.756877][ T3598] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.771491][ T3598] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.783562][ T3598] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.902132][ T6302] Bluetooth: MGMT ver 1.23 [ 107.247882][ T6308] bridge_slave_1: left allmulticast mode [ 107.278896][ T6308] bridge_slave_1: left promiscuous mode [ 107.296050][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.332098][ T6308] bridge_slave_0: left allmulticast mode [ 107.337846][ T6308] bridge_slave_0: left promiscuous mode [ 107.352559][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.787472][ T6362] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 108.230138][ T6382] netlink: 'syz.0.119': attribute type 16 has an invalid length. [ 108.239775][ T6382] netlink: 'syz.0.119': attribute type 17 has an invalid length. [ 108.431136][ T6400] netlink: 'syz.2.123': attribute type 1 has an invalid length. [ 108.443857][ T6400] nbd: error processing sock list [ 108.456319][ T6400] block nbd0: shutting down sockets [ 108.477856][ T6389] vlan1: entered promiscuous mode [ 108.494776][ T6389] vlan1: entered allmulticast mode [ 108.503334][ T6389] veth0_vlan: entered allmulticast mode [ 108.705574][ T6413] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 108.734532][ T6413] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.748671][ T6413] bond0: (slave team0): Enslaving as an active interface with an up link [ 108.758284][ T6413] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 108.819273][ T6414] netlink: 'syz.2.126': attribute type 10 has an invalid length. [ 108.866549][ T6414] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 108.884907][ T6419] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 109.075969][ T6428] raw_sendmsg: syz.4.132 forgot to set AF_INET. Fix it! [ 109.274501][ T6432] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 109.540522][ T6454] tipc: Started in network mode [ 109.545481][ T6454] tipc: Node identity 2ea530270fa9, cluster identity 4711 [ 109.585450][ T6454] tipc: Enabled bearer , priority 0 [ 109.620242][ T6461] netlink: 'syz.1.145': attribute type 1 has an invalid length. [ 109.620261][ T6457] syzkaller0: entered promiscuous mode [ 109.639492][ T6457] syzkaller0: entered allmulticast mode [ 109.651889][ T6463] __nla_validate_parse: 10 callbacks suppressed [ 109.651907][ T6463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.144'. [ 109.677803][ T6460] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 109.761945][ T6454] tipc: Resetting bearer [ 109.784585][ T6454] trusted_key: syz.0.139 sent an empty control message without MSG_MORE. [ 109.849618][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.139'. [ 109.879396][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.139'. [ 109.994117][ T6482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 110.033234][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.148'. [ 110.054266][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.139'. [ 110.077111][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.139'. [ 110.223518][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.139'. [ 110.233404][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.139'. [ 110.248680][ T6452] tipc: Resetting bearer [ 110.268364][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.150'. [ 110.280536][ T6452] tipc: Disabling bearer [ 110.634206][ T6517] tipc: Enabling of bearer rejected, failed to enable media [ 110.766216][ T5884] Bluetooth: hci4: command tx timeout [ 110.922235][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.954684][ T6532] warning: `syz.2.163' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.177495][ T6553] validate_nla: 1 callbacks suppressed [ 111.177525][ T6553] netlink: 'syz.4.167': attribute type 15 has an invalid length. [ 111.296168][ T6560] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 111.675142][ T6581] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 111.862132][ T6592] netlink: 'syz.4.183': attribute type 13 has an invalid length. [ 111.884367][ T6591] netlink: 'syz.4.183': attribute type 13 has an invalid length. [ 112.016856][ T6600] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 112.355246][ T6624] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 112.420186][ T6624] team0: Port device geneve0 added [ 112.514976][ T6633] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 112.678303][ T6639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.745161][ T6640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.167983][ T6651] smc: net device bond0 applied user defined pnetid SYZ2 [ 113.344816][ T6668] tipc: Enabling of bearer rejected, failed to enable media [ 113.986657][ T6703] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 114.437933][ T6743] netlink: 'syz.0.233': attribute type 19 has an invalid length. [ 114.463736][ T6737] pim6reg: entered allmulticast mode [ 114.480383][ T6737] pim6reg: left allmulticast mode [ 114.537072][ T6745] netlink: 'syz.4.235': attribute type 14 has an invalid length. [ 114.765832][ T6758] __nla_validate_parse: 20 callbacks suppressed [ 114.765855][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 115.185833][ T6774] netlink: 'syz.1.246': attribute type 1 has an invalid length. [ 115.208988][ T6774] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 115.234624][ T6774] netlink: 224 bytes leftover after parsing attributes in process `syz.1.246'. [ 115.393384][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 115.673515][ T6806] netlink: 'syz.2.256': attribute type 25 has an invalid length. [ 115.806110][ T5884] Bluetooth: hci4: command tx timeout [ 115.821691][ T6810] : entered promiscuous mode [ 115.998629][ T6822] team0: Device gtp0 is of different type [ 116.038194][ T6826] netlink: 256 bytes leftover after parsing attributes in process `syz.2.262'. [ 116.262440][ T6839] validate_nla: 1 callbacks suppressed [ 116.262461][ T6839] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 116.295450][ T6839] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 116.308066][ T6839] netlink: 216 bytes leftover after parsing attributes in process `syz.0.267'. [ 116.319507][ T6841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.578319][ T6860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.274'. [ 116.594531][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 116.604459][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 116.636150][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 116.642911][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.650809][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.658816][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.666797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.674838][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.682879][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.690943][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.698794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.706796][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.714696][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.723064][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.730978][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.738934][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.746818][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.754941][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.762949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.770972][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.778825][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.786868][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.794740][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.802746][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.810664][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.818609][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.826619][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.834594][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.842498][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.850519][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.858460][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.866542][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.874438][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.882553][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.890447][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.898419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.906329][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.914343][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.922366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.930389][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.938246][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.946285][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.954183][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.962292][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.970203][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.978265][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 116.986222][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 116.994410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.002410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.010430][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.018293][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.026419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.034319][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.042350][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.050345][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.058318][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.066243][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.074346][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.082259][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.090344][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.098194][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.106296][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.114312][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.122436][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.130335][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.138300][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.146262][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.154661][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.162537][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.170555][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.178402][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.186438][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.194330][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.202388][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.210481][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.218427][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.226310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.234289][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.242192][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.250232][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.258184][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.266312][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.274199][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.282289][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.290184][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.298154][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.306135][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.314191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 117.322177][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 117.548465][ T6876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.278'. [ 117.601154][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 117.713020][ T6880] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 117.767499][ T6880] ifb0: entered promiscuous mode [ 117.773450][ T6880] ifb0: entered allmulticast mode [ 118.832262][ T6958] gre0: entered promiscuous mode [ 118.934419][ T6961] lo speed is unknown, defaulting to 1000 [ 118.975295][ T6961] lo speed is unknown, defaulting to 1000 [ 119.023237][ T6961] lo speed is unknown, defaulting to 1000 [ 119.204905][ T6964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.214788][ T6964] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.245654][ T6964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.354952][ T6975] tipc: Started in network mode [ 119.360654][ T6975] tipc: Node identity 8afd77cd3245, cluster identity 4711 [ 119.376512][ T6975] tipc: Enabled bearer , priority 0 [ 119.394859][ T6976] syzkaller0: entered promiscuous mode [ 119.402034][ T6976] syzkaller0: entered allmulticast mode [ 119.480043][ T6973] tipc: Resetting bearer [ 119.556364][ T6988] unsupported nlmsg_type 40 [ 119.587108][ T6973] tipc: Disabling bearer [ 119.778640][ T6028] lo speed is unknown, defaulting to 1000 [ 119.803125][ T6961] infiniband syz0: set active [ 119.808133][ T6961] infiniband syz0: added lo [ 119.817524][ T6028] syz0: Port: 1 Link ACTIVE [ 119.844069][ T6961] syz0: rxe_create_cq: returned err = -12 [ 119.865782][ T6961] infiniband syz0: Couldn't create ib_mad CQ [ 119.879595][ T7000] __nla_validate_parse: 10 callbacks suppressed [ 119.879618][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 119.884523][ T7002] netlink: 'syz.3.310': attribute type 2 has an invalid length. [ 119.903827][ T6961] infiniband syz0: Couldn't open port 1 [ 119.915243][ T7000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.309'. [ 119.985931][ T6961] RDS/IB: syz0: added [ 120.010852][ T6961] smc: adding ib device syz0 with port count 1 [ 120.029703][ T6961] smc: ib device syz0 port 1 has pnetid [ 120.062473][ T6028] lo speed is unknown, defaulting to 1000 [ 120.075646][ T6961] lo speed is unknown, defaulting to 1000 [ 120.167890][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 120.200251][ T7012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.311'. [ 120.560341][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 120.590784][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 120.667280][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.315'. [ 120.724433][ T7036] netlink: 64 bytes leftover after parsing attributes in process `syz.4.317'. [ 121.073598][ T6961] lo speed is unknown, defaulting to 1000 [ 121.123463][ T7053] netlink: 48 bytes leftover after parsing attributes in process `syz.4.320'. [ 121.142165][ T44] IPVS: starting estimator thread 0... [ 121.158402][ T7052] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 121.180530][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.320'. [ 121.280562][ T7056] IPVS: using max 25 ests per chain, 60000 per kthread [ 121.971657][ T7033] lo speed is unknown, defaulting to 1000 [ 122.190778][ T7100] tipc: Enabled bearer , priority 0 [ 122.224231][ T7100] syzkaller0: entered promiscuous mode [ 122.241588][ T7100] syzkaller0: entered allmulticast mode [ 122.273754][ T7100] tipc: Resetting bearer [ 122.305230][ T7099] tipc: Resetting bearer [ 122.370278][ T7099] tipc: Disabling bearer [ 122.702428][ T6961] lo speed is unknown, defaulting to 1000 [ 122.865842][ T7136] netem: change failed [ 123.041135][ T7132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.482985][ T6961] lo speed is unknown, defaulting to 1000 [ 124.225596][ T7189] netlink: 'syz.2.348': attribute type 3 has an invalid length. [ 124.256978][ T7190] netlink: 'syz.2.348': attribute type 3 has an invalid length. [ 124.388809][ T6961] lo speed is unknown, defaulting to 1000 [ 124.566587][ T7205] macvlan2: entered allmulticast mode [ 124.578219][ T7205] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 124.962218][ T7219] bond1: entered allmulticast mode [ 124.968970][ T7219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.998495][ T7219] bridge0: port 3(bond1) entered blocking state [ 125.019320][ T7219] bridge0: port 3(bond1) entered disabled state [ 125.033688][ T7219] bond1: entered promiscuous mode [ 125.040572][ T7219] bridge0: port 3(bond1) entered blocking state [ 125.047700][ T7219] bridge0: port 3(bond1) entered forwarding state [ 125.091739][ T7234] __nla_validate_parse: 7 callbacks suppressed [ 125.091759][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 125.133136][ T7234] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 125.159141][ T7234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.468595][ T1161] bridge0: port 3(bond1) entered disabled state [ 125.715244][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 125.827104][ T7269] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.366'. [ 126.094419][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 126.142675][ T7284] netlink: 56 bytes leftover after parsing attributes in process `syz.0.371'. [ 126.236038][ T7282] bridge_slave_1 (unregistering): left allmulticast mode [ 126.273566][ T7282] bridge_slave_1 (unregistering): left promiscuous mode [ 126.287074][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.626898][ T7311] tipc: Enabled bearer , priority 0 [ 126.661918][ T7311] syzkaller0: entered promiscuous mode [ 126.669291][ T7311] syzkaller0: entered allmulticast mode [ 126.725126][ T7312] tipc: Resetting bearer [ 126.743314][ T7310] tipc: Resetting bearer [ 126.791319][ T7310] tipc: Disabling bearer [ 126.902777][ T7328] lo speed is unknown, defaulting to 1000 [ 127.029223][ T5884] block nbd0: Receive control failed (result -32) [ 127.069658][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 127.078737][ T7339] netlink: 'syz.4.387': attribute type 5 has an invalid length. [ 127.086916][ T7339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.387'. [ 127.098809][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 127.236382][ T7347] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 127.266678][ T7347] netlink: 224 bytes leftover after parsing attributes in process `syz.3.390'. [ 127.434041][ T7364] netlink: 52 bytes leftover after parsing attributes in process `syz.0.392'. [ 127.470798][ T7331] lo speed is unknown, defaulting to 1000 [ 127.587614][ T7369] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 127.850798][ T7376] netlink: 'syz.3.398': attribute type 15 has an invalid length. [ 127.941148][ T7376] netlink: 'syz.3.398': attribute type 15 has an invalid length. [ 128.108413][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 128.231765][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 128.267235][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 128.277547][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 128.417515][ T7392] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 128.773279][ T7422] netlink: 'syz.4.410': attribute type 1 has an invalid length. [ 128.933257][ T7430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.940565][ T7430] IPv6: NLM_F_CREATE should be set when creating new route [ 128.958899][ T7430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.478303][ T7415] lec:lec_atm_close: lec0: Shut down! [ 129.612666][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.621686][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.963794][ T7466] Driver unsupported XDP return value 0 on prog (id 94) dev N/A, expect packet loss! [ 130.038403][ T7473] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20000 [ 130.195666][ T7483] pim6reg527: entered allmulticast mode [ 130.295878][ T7488] __nla_validate_parse: 9 callbacks suppressed [ 130.295897][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 130.367990][ T7487] tipc: Started in network mode [ 130.377085][ T7487] tipc: Node identity 4aec826d2054, cluster identity 4711 [ 130.385341][ T7487] tipc: Enabled bearer , priority 0 [ 130.579557][ T7497] tipc: Disabling bearer [ 130.668910][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 130.718044][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 130.743801][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 130.757228][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 130.789943][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 130.801656][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 130.811835][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 130.821282][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 130.836356][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 130.878037][ T7521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.084016][ T7602] macsec1: entered promiscuous mode [ 132.092736][ T7602] bridge0: entered promiscuous mode [ 132.098761][ T7602] macsec1: entered allmulticast mode [ 132.106195][ T7602] bridge0: entered allmulticast mode [ 132.125227][ T7602] bridge0: port 1(macsec1) entered blocking state [ 132.140234][ T7602] bridge0: port 1(macsec1) entered disabled state [ 132.162497][ T7602] bridge0: left allmulticast mode [ 132.167835][ T7602] bridge0: left promiscuous mode [ 132.234670][ T7608] tipc: Enabled bearer , priority 0 [ 132.263528][ T7608] syzkaller0: entered promiscuous mode [ 132.278152][ T7608] syzkaller0: entered allmulticast mode [ 132.294688][ T7614] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 132.308858][ T7610] tipc: Enabled bearer , priority 0 [ 132.321593][ T7610] syzkaller0: entered promiscuous mode [ 132.327960][ T7610] syzkaller0: entered allmulticast mode [ 132.351827][ T7610] tipc: Resetting bearer [ 132.373951][ T7608] tipc: Resetting bearer [ 132.418065][ T7605] tipc: Resetting bearer [ 132.488184][ T7605] tipc: Disabling bearer [ 132.513648][ T7609] tipc: Resetting bearer [ 132.577841][ T7609] tipc: Disabling bearer [ 133.064901][ T7643] bridge_slave_0: left allmulticast mode [ 133.091806][ T7643] bridge_slave_0: left promiscuous mode [ 133.097896][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.135302][ T7643] bridge_slave_1: left promiscuous mode [ 133.155980][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.200095][ T7643] bond0: (slave bond_slave_0): Releasing backup interface [ 133.216997][ T7643] bond0: (slave bond_slave_1): Releasing backup interface [ 133.239597][ T7643] team0: Port device team_slave_0 removed [ 133.257465][ T7643] team0: Port device team_slave_1 removed [ 133.267450][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.284027][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.295698][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.304282][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.332810][ T7643] team0: Port device geneve0 removed [ 133.376792][ T7653] tipc: Started in network mode [ 133.381870][ T7653] tipc: Node identity 36c4f89e620b, cluster identity 4711 [ 133.395752][ T7653] tipc: Enabled bearer , priority 0 [ 133.505503][ T7653] tipc: Disabling bearer [ 133.608270][ T7668] bond0: (slave syz_tun): Releasing backup interface [ 133.703178][ T7680] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 133.958680][ T7670] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.006418][ T7670] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.034302][ T7690] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 134.174170][ T7670] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.193968][ T7670] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.272765][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.445332][ T7670] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.481722][ T7670] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.568925][ T7725] IPv6: sit2: Disabled Multicast RS [ 134.576567][ T7725] sit2: entered allmulticast mode [ 134.706238][ T7670] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.717188][ T7670] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.862542][ T7743] netlink: 'syz.3.507': attribute type 21 has an invalid length. [ 135.397003][ T7750] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 135.428967][ T7750] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 135.470087][ T7751] __nla_validate_parse: 69 callbacks suppressed [ 135.470107][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 135.511036][ T3515] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.544310][ T3515] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.558930][ T3515] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.583225][ T3515] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.627396][ T7759] netlink: 'syz.2.511': attribute type 7 has an invalid length. [ 135.653233][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.689926][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.743776][ T3561] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.772848][ T3561] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.031459][ T7771] netlink: 'syz.1.513': attribute type 11 has an invalid length. [ 136.066963][ T7771] netlink: 224 bytes leftover after parsing attributes in process `syz.1.513'. [ 136.149643][ T7791] syzkaller0: entered promiscuous mode [ 136.155474][ T7791] syzkaller0: entered allmulticast mode [ 136.503454][ T7813] netlink: 'syz.2.525': attribute type 1 has an invalid length. [ 136.545775][ T7813] netlink: 'syz.2.525': attribute type 2 has an invalid length. [ 136.627976][ T7823] netlink: 68 bytes leftover after parsing attributes in process `syz.0.527'. [ 136.655063][ T7823] netlink: 72 bytes leftover after parsing attributes in process `syz.0.527'. [ 136.791692][ T7830] netlink: 52 bytes leftover after parsing attributes in process `syz.0.527'. [ 136.823602][ T7823] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 136.855759][ T7823] netlink: 224 bytes leftover after parsing attributes in process `syz.0.527'. [ 136.891516][ T7823] block nbd1: not configured, cannot reconfigure [ 136.904000][ T7830] netlink: 64 bytes leftover after parsing attributes in process `syz.0.527'. [ 137.258714][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.535'. [ 137.297852][ T7849] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 137.304238][ T10] IPVS: starting estimator thread 0... [ 137.346421][ T7845] netem: incorrect ge model size [ 137.371808][ T7853] netlink: 72 bytes leftover after parsing attributes in process `syz.3.537'. [ 137.399229][ T7856] IPVS: using max 28 ests per chain, 67200 per kthread [ 137.428187][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.539'. [ 137.638519][ T7866] syzkaller0: entered promiscuous mode [ 137.660439][ T7866] syzkaller0: entered allmulticast mode [ 137.682907][ T7866] tipc: Enabled bearer , priority 0 [ 137.702214][ T7866] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 137.754438][ T7866] tipc: Resetting bearer [ 137.798842][ T7866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.853416][ T7866] bond0: (slave rose0): Enslaving as an active interface with an up link [ 138.043094][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.050936][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.222838][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.249000][ T7877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.286197][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.293787][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.495509][ T7881] geneve2: entered promiscuous mode [ 138.530164][ T7881] geneve2: entered allmulticast mode [ 138.558569][ T7865] tipc: Resetting bearer [ 138.600560][ T7865] tipc: Disabling bearer [ 138.643962][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.656261][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 138.733778][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.764873][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 138.794876][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.821660][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 138.846559][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.857297][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 139.034668][ T7925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.251621][ T7931] syzkaller1: entered promiscuous mode [ 139.257165][ T7931] syzkaller1: entered allmulticast mode [ 139.407071][ T7943] tipc: Enabling of bearer rejected, media not registered [ 139.696670][ T7964] pimreg: entered allmulticast mode [ 141.032847][ T8035] __nla_validate_parse: 14 callbacks suppressed [ 141.032868][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 141.172613][ T8036] geneve2: entered promiscuous mode [ 141.186965][ T8036] geneve2: entered allmulticast mode [ 141.298433][ T3496] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 141.331998][ T3496] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 141.386772][ T8049] tipc: Enabling of bearer rejected, failed to enable media [ 141.410605][ T3496] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 141.492199][ T3496] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 141.786877][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 141.929212][ T8088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.598'. [ 142.250823][ T8103] netlink: 204 bytes leftover after parsing attributes in process `syz.3.604'. [ 142.346483][ T8119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.607'. [ 142.417826][ T8119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.663057][ T8145] netlink: 104 bytes leftover after parsing attributes in process `syz.3.616'. [ 142.687685][ T8146] netlink: 104 bytes leftover after parsing attributes in process `syz.3.616'. [ 142.971011][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.622'. [ 143.006313][ T8167] lo speed is unknown, defaulting to 1000 [ 143.014126][ T8167] lo speed is unknown, defaulting to 1000 [ 143.021809][ T8167] lo speed is unknown, defaulting to 1000 [ 143.036483][ T8167] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 143.060528][ T8167] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 143.102709][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 143.123617][ T8167] lo speed is unknown, defaulting to 1000 [ 143.132348][ T8167] lo speed is unknown, defaulting to 1000 [ 143.141032][ T8167] lo speed is unknown, defaulting to 1000 [ 143.149521][ T8167] lo speed is unknown, defaulting to 1000 [ 143.158082][ T8167] lo speed is unknown, defaulting to 1000 [ 143.201031][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 143.508513][ T8194] netlink: 'syz.2.632': attribute type 39 has an invalid length. [ 144.169875][ T8226] netlink: 'syz.3.641': attribute type 3 has an invalid length. [ 144.600454][ T8236] lo speed is unknown, defaulting to 1000 [ 144.863911][ T8236] lo speed is unknown, defaulting to 1000 [ 145.086337][ T3598] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.121484][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.294944][ T8265] netlink: zone id is out of range [ 145.301155][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.302553][ T8265] netlink: zone id is out of range [ 145.320481][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.324000][ T8265] netlink: zone id is out of range [ 145.335969][ T8265] netlink: zone id is out of range [ 145.349819][ T8256] netlink: 'syz.1.650': attribute type 8 has an invalid length. [ 145.369237][ T8265] netlink: zone id is out of range [ 145.388407][ T8265] netlink: zone id is out of range [ 145.396931][ T8265] netlink: zone id is out of range [ 145.404840][ T8265] netlink: zone id is out of range [ 145.410751][ T8265] netlink: zone id is out of range [ 145.456277][ T8265] netlink: zone id is out of range [ 145.507599][ T6028] IPVS: starting estimator thread 0... [ 145.599261][ T8274] IPVS: using max 25 ests per chain, 60000 per kthread [ 146.063011][ T8299] __nla_validate_parse: 11 callbacks suppressed [ 146.063036][ T8299] netlink: 1 bytes leftover after parsing attributes in process `syz.3.664'. [ 146.146443][ T8307] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 146.313473][ T8324] netlink: 'syz.0.672': attribute type 8 has an invalid length. [ 146.324936][ T8325] netlink: 'syz.0.672': attribute type 4 has an invalid length. [ 146.478666][ T8337] batadv1: entered allmulticast mode [ 146.545990][ T8338] batadv1: entered allmulticast mode [ 147.178170][ T8372] wg1: entered promiscuous mode [ 147.179944][ T8377] syz.2.682 (8377) used obsolete PPPIOCDETACH ioctl [ 147.505401][ T8389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.689'. [ 148.084361][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 148.135343][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.698'. [ 148.979454][ T8462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.710'. [ 149.030598][ T8462] sock: sock_timestamping_bind_phc: sock not bind to device [ 149.246825][ T8475] netlink: 'syz.1.715': attribute type 21 has an invalid length. [ 149.255153][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 149.306592][ T8475] netlink: 'syz.1.715': attribute type 21 has an invalid length. [ 149.314613][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 149.331678][ T1157] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.388504][ T1157] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.431121][ T1157] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.445302][ T1157] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.661649][ T8494] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 149.846330][ T8505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.725'. [ 149.895691][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 149.926910][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 149.940832][ T8511] netlink: 'syz.2.727': attribute type 12 has an invalid length. [ 149.961300][ T8511] netlink: 'syz.2.727': attribute type 11 has an invalid length. [ 150.002234][ T8515] netlink: 'syz.0.726': attribute type 4 has an invalid length. [ 150.204017][ T8528] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 150.540642][ T8549] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 150.541075][ T8548] IPVS: stopping master sync thread 8549 ... [ 150.604897][ T8548] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.683774][ T8558] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.706613][ T8557] tipc: Enabled bearer , priority 0 [ 150.713898][ T8561] tipc: Enabling of bearer rejected, already enabled [ 150.731245][ T8557] tipc: Resetting bearer [ 150.765320][ T8553] tipc: Disabling bearer [ 150.955995][ T8578] netlink: 'syz.1.742': attribute type 1 has an invalid length. [ 151.091264][ T8578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.156577][ T8577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.170106][ T8577] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 151.182796][ T8577] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 151.232030][ T8596] syzkaller1: entered promiscuous mode [ 151.237590][ T8596] syzkaller1: entered allmulticast mode [ 151.341909][ T8599] __nla_validate_parse: 3 callbacks suppressed [ 151.341997][ T8599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.748'. [ 151.361930][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 151.374773][ T8599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.748'. [ 151.436551][ T8608] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 151.827300][ T8634] sch_fq: defrate 0 ignored. [ 151.997113][ T8642] netlink: 224 bytes leftover after parsing attributes in process `syz.2.762'. [ 152.021565][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 152.494757][ T8669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.910187][ T8692] netlink: 'syz.2.776': attribute type 21 has an invalid length. [ 152.929958][ T8692] netlink: 132 bytes leftover after parsing attributes in process `syz.2.776'. [ 153.074471][ T5934] IPVS: starting estimator thread 0... [ 153.155600][ T8662] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 153.169622][ T8706] IPVS: using max 27 ests per chain, 64800 per kthread [ 153.338663][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 153.387386][ T8716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 153.394945][ T8720] tipc: Enabled bearer , priority 0 [ 153.422909][ T8716] netlink: 'syz.1.782': attribute type 12 has an invalid length. [ 153.433836][ T8722] syzkaller0: entered promiscuous mode [ 153.445297][ T8722] syzkaller0: entered allmulticast mode [ 153.466777][ T8716] netlink: 'syz.1.782': attribute type 11 has an invalid length. [ 153.554284][ T8722] tipc: Resetting bearer [ 153.677812][ T8722] tipc: Disabling bearer [ 153.745673][ T8741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.789'. [ 153.749583][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 153.789943][ T8748] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.369501][ T5884] Bluetooth: hci0: command 0x0401 tx timeout [ 154.532997][ T8787] tipc: Invalid UDP bearer configuration [ 154.533057][ T8787] tipc: Enabling of bearer rejected, failed to enable media [ 154.700110][ T8794] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 154.997757][ T8813] netlink: 'syz.1.809': attribute type 27 has an invalid length. [ 155.232770][ T8826] bond1: left promiscuous mode [ 155.256014][ T8826] bridge0: port 3(bond1) entered disabled state [ 155.282353][ T8826] bridge_slave_1: left allmulticast mode [ 155.292917][ T8826] bridge_slave_1: left promiscuous mode [ 155.315625][ T8826] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.336488][ T8835] netlink: 'syz.3.816': attribute type 11 has an invalid length. [ 155.354035][ T8826] bridge_slave_0: left allmulticast mode [ 155.363313][ T8826] bridge_slave_0: left promiscuous mode [ 155.369354][ T8826] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.816459][ T8864] netlink: 'syz.1.824': attribute type 12 has an invalid length. [ 156.066602][ T8873] netlink: 'syz.4.828': attribute type 4 has an invalid length. [ 156.507629][ T8905] pim6reg: entered allmulticast mode [ 156.595639][ T8905] pim6reg: left allmulticast mode [ 157.763632][ T8930] netlink: 'syz.2.842': attribute type 32 has an invalid length. [ 158.202681][ T8940] __nla_validate_parse: 14 callbacks suppressed [ 158.202703][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 158.325331][ T8944] netlink: 'syz.4.849': attribute type 39 has an invalid length. [ 158.418377][ T8949] bridge_slave_0: left allmulticast mode [ 158.437081][ T8949] bridge_slave_0: left promiscuous mode [ 158.454072][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.460585][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'. [ 158.470466][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 158.482951][ T8949] bridge_slave_1: left allmulticast mode [ 158.482976][ T8949] bridge_slave_1: left promiscuous mode [ 158.483227][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.512359][ T8949] bond0: (slave bond_slave_0): Releasing backup interface [ 158.524176][ T8949] bond0: (slave bond_slave_1): Releasing backup interface [ 158.536818][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.852'. [ 158.550635][ T8949] team0: Port device team_slave_0 removed [ 158.557841][ T8949] team0: Port device team_slave_1 removed [ 158.570871][ T8949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.578782][ T8949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.875517][ T8963] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 158.883589][ T8963] netlink: 228 bytes leftover after parsing attributes in process `syz.2.853'. [ 158.894158][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 159.047465][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 159.237152][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 159.383333][ T9002] bond3 (unregistering): Released all slaves [ 159.457830][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.867'. [ 159.704244][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 159.742880][ T9032] 8021q: VLANs not supported on ip_vti0 [ 159.940820][ T9049] netlink: 'syz.1.878': attribute type 14 has an invalid length. [ 161.191546][ T9111] netlink: 'syz.0.899': attribute type 9 has an invalid length. [ 161.216051][ T9111] netlink: 'syz.0.899': attribute type 9 has an invalid length. [ 161.228882][ T9112] dvmrp0: entered allmulticast mode [ 161.274709][ T9115] netlink: 'syz.0.899': attribute type 9 has an invalid length. [ 161.644852][ T9140] netlink: 'syz.1.907': attribute type 64 has an invalid length. [ 161.811142][ T9147] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 162.113687][ T9166] xt_policy: too many policy elements [ 162.155431][ T9166] netlink: 'syz.4.914': attribute type 21 has an invalid length. [ 162.737324][ T9210] tipc: Enabling of bearer rejected, failed to enable media [ 162.808243][ T9214] netlink: 'syz.3.928': attribute type 2 has an invalid length. [ 163.066409][ T9229] syzkaller0: entered promiscuous mode [ 163.086734][ T9229] syzkaller0: entered allmulticast mode [ 163.106252][ T9233] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 163.120544][ T9236] net_ratelimit: 20 callbacks suppressed [ 163.120562][ T9236] openvswitch: netlink: Flow actions attr not present in new flow. [ 163.182567][ T9233] syzkaller0: Linktype set failed because interface is up [ 163.201604][ T12] syzkaller0: tun_net_xmit 48 [ 163.719618][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 163.792018][ T5876] IPVS: starting estimator thread 0... [ 163.893964][ T9255] IPVS: using max 33 ests per chain, 79200 per kthread [ 165.495593][ T9268] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 165.710992][ T9280] __nla_validate_parse: 135 callbacks suppressed [ 165.711014][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.1.943'. [ 165.815189][ T9289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.944'. [ 165.833612][ T9289] netlink: 44 bytes leftover after parsing attributes in process `syz.2.944'. [ 166.509510][ T9325] veth7: entered promiscuous mode [ 166.522111][ T9325] veth7: entered allmulticast mode [ 166.535846][ T9328] 8021q: VLANs not supported on team0 [ 166.564279][ T9335] tipc: Enabled bearer , priority 0 [ 166.644425][ T9335] tipc: Disabling bearer [ 166.676217][ T9339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.962'. [ 166.791370][ T9352] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 166.926191][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 167.153032][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 167.215684][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 167.234786][ T9375] netlink: 'syz.4.970': attribute type 1 has an invalid length. [ 167.291278][ T9389] netlink: 'syz.2.973': attribute type 1 has an invalid length. [ 167.310911][ T9389] netlink: 228 bytes leftover after parsing attributes in process `syz.2.973'. [ 167.444210][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 167.496478][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 167.646331][ T9405] bridge0: port 1(syz_tun) entered blocking state [ 167.676252][ T9405] bridge0: port 1(syz_tun) entered disabled state [ 167.694676][ T9405] syz_tun: entered allmulticast mode [ 167.705693][ T9405] syz_tun: entered promiscuous mode [ 167.812489][ T3515] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 168.010192][ T9434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.158420][ T9442] vlan2: entered allmulticast mode [ 168.164022][ T9442] hsr0: entered allmulticast mode [ 168.169912][ T9442] hsr_slave_0: entered allmulticast mode [ 168.176492][ T9442] hsr_slave_1: entered allmulticast mode [ 168.226089][ T9444] netlink: 'syz.1.989': attribute type 1 has an invalid length. [ 168.268762][ T9444] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.287796][ T9444] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 168.298366][ T9444] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 168.660998][ T9458] netlink: 'syz.1.995': attribute type 21 has an invalid length. [ 168.695201][ T9453] team0: Device wireguard1 is up. Set it down before adding it as a team port [ 168.764427][ T9458] netlink: 'syz.1.995': attribute type 6 has an invalid length. [ 168.857209][ T9470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.082729][ T9487] netlink: 'syz.4.1003': attribute type 9 has an invalid length. [ 169.101024][ T9487] macvlan2: entered promiscuous mode [ 169.116582][ T9487] netlink: 'syz.4.1003': attribute type 9 has an invalid length. [ 169.138556][ T9487] macvlan3: entered promiscuous mode [ 169.355842][ T3598] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.379986][ T9502] siw: device registration error -23 [ 169.385856][ T9502] siw: device registration error -23 [ 169.391903][ T3598] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 169.408159][ T3598] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.417944][ T9502] siw: device registration error -23 [ 169.427827][ T9502] siw: device registration error -23 [ 169.434935][ T3598] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 169.449624][ T9502] siw: device registration error -23 [ 169.457091][ T3598] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.503008][ T3598] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 169.570007][ T3598] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.578949][ T3598] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 169.748865][ T9523] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 170.098312][ T9542] netlink: 'syz.1.1021': attribute type 1 has an invalid length. [ 170.125912][ T9541] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.685451][ T9583] netlink: 'syz.1.1030': attribute type 6 has an invalid length. [ 170.818321][ T30] audit: type=1800 audit(1756732562.507:2): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1033" name="memory.events" dev="tmpfs" ino=1122 res=0 errno=0 [ 170.865150][ T30] audit: type=1804 audit(1756732562.507:3): pid=9592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1033" name="/newroot/215/memory.events" dev="tmpfs" ino=1122 res=1 errno=0 [ 170.958978][ T9596] __nla_validate_parse: 12 callbacks suppressed [ 170.958998][ T9596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1034'. [ 170.980097][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 171.000183][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 171.048464][ T9618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1037'. [ 171.049958][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.084438][ T9616] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1036'. [ 171.140629][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.147893][ T9619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.199556][ T9619] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 171.285487][ T9626] veth0: entered promiscuous mode [ 171.304807][ T9630] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 171.503392][ T9647] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.616790][ T9634] bond0: (slave team0): Releasing backup interface [ 171.635219][ T9634] team0 (unregistering): Port device team_slave_0 removed [ 171.648689][ T9634] team0 (unregistering): Port device team_slave_1 removed [ 171.688500][ T9639] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 172.058043][ T9625] veth0: left promiscuous mode [ 172.242059][ T9679] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 172.250032][ T9679] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 172.282208][ T9680] netlink: 'syz.3.1060': attribute type 11 has an invalid length. [ 172.301167][ T9680] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1060'. [ 172.470750][ T9688] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.1063'. [ 172.567699][ T9705] netem: change failed [ 172.985034][ T9732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1077'. [ 173.000803][ T9735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.090682][ T9739] validate_nla: 3 callbacks suppressed [ 173.090701][ T9739] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 173.137617][ T9739] netlink: 'syz.4.1076': attribute type 10 has an invalid length. [ 173.169301][ T9739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1076'. [ 173.211781][ T9739] team0: Port device geneve0 added [ 173.234874][ T9610] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.284875][ T9610] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.299531][ T9610] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.355754][ T9610] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.415328][ T9756] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 173.507613][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 175.200528][ T9795] netlink: 'syz.1.1092': attribute type 1 has an invalid length. [ 175.208575][ T9795] netlink: 'syz.1.1092': attribute type 2 has an invalid length. [ 175.475987][ T9817] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 175.851929][ T9838] netlink: 'syz.1.1101': attribute type 7 has an invalid length. [ 176.151520][ T9848] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.164161][ T9856] delete_channel: no stack [ 176.180798][ T9848] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 176.185188][ T9852] bridge2: entered promiscuous mode [ 176.198376][ T9852] bridge2: entered allmulticast mode [ 176.284320][ T9859] netlink: 'syz.0.1108': attribute type 33 has an invalid length. [ 176.292377][ T9859] __nla_validate_parse: 5 callbacks suppressed [ 176.292395][ T9859] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1108'. [ 176.313268][ T9859] openvswitch: netlink: Key type 2576 is out of range max 32 [ 176.494131][ T9870] netlink: 'syz.1.1113': attribute type 33 has an invalid length. [ 176.508155][ T9870] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1113'. [ 176.573667][ T9874] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.593766][ T9870] bond4 (unregistering): Released all slaves [ 176.594873][ T9874] netlink: 'syz.3.1115': attribute type 5 has an invalid length. [ 176.612427][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 176.692920][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 176.813155][ T9886] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 176.832608][ T9886] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1118'. [ 176.847039][ T9886] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 176.855874][ T9886] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1118'. [ 176.906554][ T9886] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 176.943058][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1120'. [ 176.957469][ T9894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1120'. [ 177.187525][ T9907] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1122'. [ 177.397090][ T9917] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 177.512499][ T9916] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 177.524378][ T9927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 177.533943][ T9933] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1130'. [ 177.541907][ T9916] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 178.157908][ T9967] validate_nla: 2 callbacks suppressed [ 178.157931][ T9967] netlink: 'syz.4.1141': attribute type 1 has an invalid length. [ 178.294893][ T9977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.326198][ T9972] bond1: (slave gretap1): making interface the new active one [ 178.338724][ T9972] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 178.570991][ T9997] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 178.621586][T10000] IPVS: set_ctl: invalid protocol: 255 172.20.20.45:20000 [ 178.715833][T10007] netlink: ct family unspecified [ 178.726462][T10007] openvswitch: netlink: Actions may not be safe on all matching packets [ 179.140465][T10033] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 179.182619][T10036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.422000][T10056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.429720][T10056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.439954][T10056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.468581][T10056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.683717][T10071] netlink: 'syz.1.1172': attribute type 1 has an invalid length. [ 179.711140][T10074] xt_socket: unknown flags 0xd0 [ 180.063707][T10092] lo speed is unknown, defaulting to 1000 [ 180.249324][T10098] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 180.407943][T10101] gretap2: entered promiscuous mode [ 180.433593][T10101] bond2: (slave gretap2): making interface the new active one [ 180.452872][T10101] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 180.492533][T10092] lo speed is unknown, defaulting to 1000 [ 181.057594][T10130] openvswitch: netlink: Message has 4 unknown bytes. [ 181.088182][T10130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.119969][ T5957] lo speed is unknown, defaulting to 1000 [ 181.143762][T10131] netlink: 'syz.1.1188': attribute type 16 has an invalid length. [ 181.179012][T10131] netlink: 'syz.1.1188': attribute type 17 has an invalid length. [ 181.220024][T10135] dvmrp0: entered allmulticast mode [ 181.342611][T10131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.379747][T10128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 181.400551][T10128] gretap1: entered promiscuous mode [ 181.415866][T10128] gretap1: entered allmulticast mode [ 181.425859][T10135] dvmrp0: left allmulticast mode [ 181.630681][T10157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.670116][ T5957] lo speed is unknown, defaulting to 1000 [ 181.684847][ T5957] syz2: Port: 1 Link DOWN [ 181.692230][T10161] netlink: 'syz.0.1195': attribute type 21 has an invalid length. [ 181.703514][T10157] __nla_validate_parse: 16 callbacks suppressed [ 181.703532][T10157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1194'. [ 181.731569][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1195'. [ 182.454923][T10213] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1212'. [ 182.483970][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 183.093603][T10248] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 183.325959][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 183.420014][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 183.440383][T10268] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1228'. [ 183.554375][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'. [ 183.733481][T10279] netlink: 'syz.1.1235': attribute type 10 has an invalid length. [ 183.761611][T10279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1235'. [ 183.769136][T10287] netlink: 'syz.4.1238': attribute type 83 has an invalid length. [ 183.795515][T10279] team0: Port device geneve0 added [ 183.819653][ T9608] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.879835][ T9608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.898154][T10293] netlink: 'syz.3.1239': attribute type 3 has an invalid length. [ 183.911285][ T9608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.920709][ T9608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.157672][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'. [ 184.265568][T10316] netlink: 'syz.2.1248': attribute type 39 has an invalid length. [ 184.406950][T10310] netlink: 'syz.3.1246': attribute type 29 has an invalid length. [ 184.587183][T10331] vlan1: left allmulticast mode [ 184.617640][T10331] veth0_vlan: left allmulticast mode [ 185.243344][T10374] tipc: Enabled bearer , priority 0 [ 185.279796][T10374] syzkaller0: entered promiscuous mode [ 185.291686][T10374] syzkaller0: entered allmulticast mode [ 185.316567][T10374] tipc: Resetting bearer [ 185.369226][T10371] tipc: Resetting bearer [ 185.438526][T10383] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 185.494389][T10371] tipc: Disabling bearer [ 185.578148][T10383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.635340][T10383] bond3: (slave veth7): Enslaving as an active interface with a down link [ 185.659800][T10399] tunl0: entered promiscuous mode [ 185.686627][T10399] netlink: 'syz.3.1269': attribute type 3 has an invalid length. [ 185.719238][T10398] netlink: 'syz.3.1269': attribute type 3 has an invalid length. [ 185.842883][T10408] netlink: 'syz.1.1273': attribute type 10 has an invalid length. [ 185.856604][T10411] netlink: 'syz.4.1274': attribute type 5 has an invalid length. [ 185.901965][T10415] team0: Device wireguard1 is up. Set it down before adding it as a team port [ 185.972731][T10424] netdevsim netdevsim1 : renamed from netdevsim0 [ 185.996791][T10424] netdevsim netdevsim1 : left promiscuous mode [ 186.062981][T10422] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 186.098304][T10427] smc: net device bond0 applied user defined pnetid SYZ2 [ 186.313096][T10427] smc: removing net device bond0 with user defined pnetid SYZ2 [ 186.327924][T10427] bond0 (unregistering): Released all slaves [ 186.595146][T10405] delete_channel: no stack [ 187.105018][T10473] __nla_validate_parse: 20 callbacks suppressed [ 187.105039][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1292'. [ 187.354315][T10478] team0: Device vti0 is of different type [ 187.588415][T10488] tipc: Enabled bearer , priority 0 [ 187.596317][T10488] syzkaller0: entered promiscuous mode [ 187.603424][T10488] syzkaller0: entered allmulticast mode [ 187.634718][T10488] tipc: Resetting bearer [ 187.657608][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1300'. [ 187.690754][T10493] openvswitch: netlink: Actions may not be safe on all matching packets [ 187.691569][T10488] tipc: Disabling bearer [ 187.838947][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'. [ 188.255053][T10517] netlink: 'syz.3.1306': attribute type 11 has an invalid length. [ 188.390387][T10529] tipc: Enabled bearer , priority 0 [ 188.424430][T10529] tipc: Disabling bearer [ 188.472602][T10532] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1311'. [ 188.557846][T10536] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1313'. [ 188.670619][T10536] bond0 (unregistering): Released all slaves [ 188.938064][T10548] validate_nla: 2 callbacks suppressed [ 188.938084][T10548] netlink: 'syz.0.1316': attribute type 2 has an invalid length. [ 188.969428][T10548] netlink: 'syz.0.1316': attribute type 10 has an invalid length. [ 188.988165][T10548] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1316'. [ 189.116948][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 189.132376][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 189.169393][T10559] netlink: 'syz.1.1318': attribute type 8 has an invalid length. [ 189.181000][T10560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.197368][T10559] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.544801][T10577] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 189.607061][T10577] bond0: entered promiscuous mode [ 189.612937][T10577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.620595][T10594] netlink: 'syz.4.1330': attribute type 25 has an invalid length. [ 189.641500][T10584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.653801][T10584] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address [ 189.670510][T10584] bond0: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 189.686019][T10584] bond0: (slave wireguard1): making interface the new active one [ 189.695509][T10584] wireguard1: entered promiscuous mode [ 189.703626][T10584] bond0: (slave wireguard1): Enslaving as an active interface with an up link [ 189.735715][ T9611] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 189.838657][T10603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.901773][T10603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.922108][T10555] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.244472][T10629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 190.650940][T10645] siw: device registration error -23 [ 191.024569][ T9602] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 191.053650][T10665] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1348'. [ 191.103245][T10677] tipc: Enabled bearer , priority 0 [ 191.116373][T10677] syzkaller0: entered promiscuous mode [ 191.142918][T10677] syzkaller0: entered allmulticast mode [ 191.159396][ T5884] Bluetooth: hci0: command 0x0401 tx timeout [ 191.232407][T10676] tipc: Resetting bearer [ 191.296585][T10676] tipc: Disabling bearer [ 191.407743][T10686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.778958][T10682] netlink: 'syz.3.1352': attribute type 13 has an invalid length. [ 191.793055][T10682] netlink: 'syz.3.1352': attribute type 17 has an invalid length. [ 191.874843][T10682] tunl0: left promiscuous mode [ 191.907389][T10682] gre0: left promiscuous mode [ 192.261910][T10682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.420074][T10745] __nla_validate_parse: 1 callbacks suppressed [ 192.420093][T10745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1370'. [ 192.472770][T10748] IPv6: sit1: Disabled Multicast RS [ 192.486633][T10748] sit1: entered allmulticast mode [ 192.715504][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'. [ 192.941116][T10772] bond3 (unregistering): Released all slaves [ 193.173661][T10773] team0: Port device team_slave_1 removed [ 193.188675][T10778] bridge0: Device is already in use. [ 193.203937][T10771] syzkaller0: entered promiscuous mode [ 193.210352][T10771] syzkaller0: entered allmulticast mode [ 193.237808][T10781] : entered promiscuous mode [ 193.248949][T10784] tipc: Enabled bearer , priority 0 [ 193.271040][T10787] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 193.280051][T10779] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 193.299202][T10787] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1383'. [ 193.338511][T10787] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 193.378419][T10784] tipc: Resetting bearer [ 193.420415][T10796] netlink: 'syz.1.1385': attribute type 4 has an invalid length. [ 193.424222][T10771] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 193.438558][T10796] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1385'. [ 193.466286][T10771] tipc: Enabling of bearer rejected, already enabled [ 193.485368][T10798] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1385'. [ 193.506108][T10768] tipc: Resetting bearer [ 193.557118][T10768] tipc: Disabling bearer [ 193.608040][T10796] `: renamed from bond0 (while UP) [ 193.719240][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 193.845605][T10814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1389'. [ 193.851612][T10819] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1390'. [ 193.863910][T10819] xt_policy: neither incoming nor outgoing policy selected [ 193.879484][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 193.883813][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 193.940238][T10821] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20002 [ 194.071166][T10829] validate_nla: 2 callbacks suppressed [ 194.071185][T10829] netlink: 'syz.1.1394': attribute type 7 has an invalid length. [ 194.241327][T10841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1397'. [ 194.476208][T10852] netlink: 'syz.0.1401': attribute type 7 has an invalid length. [ 195.606194][T10927] veth0: entered promiscuous mode [ 195.618239][T10927] lo: entered allmulticast mode [ 195.641714][T10926] lo: left allmulticast mode [ 195.649953][T10926] veth0: left promiscuous mode [ 196.357127][T10973] smc: adding net device bond0 with user defined pnetid SYZ2 [ 196.402977][T10973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.445181][T10980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.473539][T10980] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 196.495736][T10990] openvswitch: netlink: IP tunnel dst address not specified [ 196.524224][T10980] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 196.596077][T10974] syzkaller1: entered promiscuous mode [ 196.601910][T10974] syzkaller1: entered allmulticast mode [ 196.935849][T11014] netlink: 'syz.4.1447': attribute type 21 has an invalid length. [ 196.952035][T11016] netlink: 'syz.0.1448': attribute type 1 has an invalid length. [ 196.960123][T11014] netlink: 'syz.4.1447': attribute type 6 has an invalid length. [ 197.171630][T11031] netlink: 'syz.0.1453': attribute type 10 has an invalid length. [ 197.225920][T11031] team0: Device dummy0 failed to register rx_handler [ 197.243736][T11035] netlink: 'syz.0.1453': attribute type 10 has an invalid length. [ 197.274853][T11035] team0: Device dummy0 failed to register rx_handler [ 197.350562][T11033] netlink: 'syz.1.1454': attribute type 2 has an invalid length. [ 197.362306][T11033] nbd: must specify at least one socket [ 197.369622][T11033] netlink: 'syz.1.1454': attribute type 2 has an invalid length. [ 197.473632][T11040] __nla_validate_parse: 21 callbacks suppressed [ 197.473658][T11040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1456'. [ 197.516637][T11040] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1456'. [ 197.788331][T11057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1462'. [ 197.940338][T11067] netlink: 'syz.4.1467': attribute type 9 has an invalid length. [ 197.962409][T11064] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1465'. [ 197.991985][T11063] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.998204][T11071] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1468'. [ 198.065051][T11063] bond4: (slave veth7): Enslaving as an active interface with a down link [ 198.076814][T11073] sctp: [Deprecated]: syz.0.1469 (pid 11073) Use of int in maxseg socket option. [ 198.076814][T11073] Use struct sctp_assoc_value instead [ 198.105205][T11063] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 198.478758][T11096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'. [ 198.608664][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1474'. [ 198.623605][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1474'. [ 198.681151][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1482'. [ 198.689411][T11112] tipc: Enabled bearer , priority 0 [ 198.820233][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 198.874633][T11113] syzkaller0: entered promiscuous mode [ 198.892002][T11113] syzkaller0: entered allmulticast mode [ 198.898566][T11113] tipc: Resetting bearer [ 199.008943][ T3598] tipc: Resetting bearer [ 199.027696][T11127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.076178][T11124] bond4: entered promiscuous mode [ 199.081666][T11124] bond4: entered allmulticast mode [ 199.087344][T11124] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.133509][T11113] tipc: Resetting bearer [ 199.310761][T11147] validate_nla: 7 callbacks suppressed [ 199.310779][T11147] netlink: 'syz.4.1491': attribute type 1 has an invalid length. [ 199.713776][ T5957] tipc: Node number set to 3099097037 [ 199.724590][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.502320][T11113] tipc: Disabling bearer [ 200.514756][T11147] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 200.708938][T11161] openvswitch: netlink: Flow actions attr not present in new flow. [ 200.789460][T11166] sctp: [Deprecated]: syz.2.1495 (pid 11166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.789460][T11166] Use struct sctp_sack_info instead [ 200.798149][T11171] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.134836][T11186] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 201.444996][T11195] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 201.493904][T11200] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.639210][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 201.692843][T11208] tipc: Enabling of bearer rejected, failed to enable media [ 201.916059][T11214] netlink: 'syz.4.1510': attribute type 10 has an invalid length. [ 201.967328][T11223] netlink: 'syz.0.1513': attribute type 29 has an invalid length. [ 201.977330][T11223] netlink: 'syz.0.1513': attribute type 29 has an invalid length. [ 202.506754][T11252] __nla_validate_parse: 10 callbacks suppressed [ 202.506774][T11252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1524'. [ 202.655442][T11263] netlink: 'syz.3.1527': attribute type 1 has an invalid length. [ 202.672052][T11263] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.1527'. [ 202.750846][T11266] sctp: [Deprecated]: syz.2.1528 (pid 11266) Use of int in maxseg socket option. [ 202.750846][T11266] Use struct sctp_assoc_value instead [ 202.855399][T11273] syzkaller1: entered promiscuous mode [ 202.865679][T11273] syzkaller1: entered allmulticast mode [ 203.007633][T11280] macsec0: entered promiscuous mode [ 203.023346][T11280] macsec0: entered allmulticast mode [ 203.031826][T11285] veth1_macvtap: entered allmulticast mode [ 203.037906][T11285] macsec0: left promiscuous mode [ 203.060966][T11285] macsec0: left allmulticast mode [ 203.066183][T11285] veth1_macvtap: left allmulticast mode [ 203.108297][T11274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.115858][T11274] IPv6: NLM_F_CREATE should be set when creating new route [ 203.123160][T11274] IPv6: NLM_F_CREATE should be set when creating new route [ 203.133002][T11274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.181213][T11289] IPVS: length: 8 != 389221528704 [ 203.197324][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 203.423477][T11306] team0: Device vti0 is of different type [ 203.553196][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 203.653523][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 203.760352][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 203.867615][T11335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1547'. [ 203.877570][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1547'. [ 203.893930][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 203.985863][T11338] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 204.077516][T11343] tipc: Enabled bearer , priority 0 [ 204.085485][T11343] syzkaller0: entered promiscuous mode [ 204.091643][T11343] syzkaller0: entered allmulticast mode [ 204.101875][T11343] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 204.129959][T11343] tipc: Resetting bearer [ 204.137576][T11342] tipc: Resetting bearer [ 204.180658][T11342] tipc: Disabling bearer [ 204.378188][T11350] netlink: 'syz.1.1553': attribute type 2 has an invalid length. [ 204.378689][T11353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1554'. [ 204.909366][T11384] netlink: 'syz.3.1563': attribute type 2 has an invalid length. [ 205.145454][T11395] syz.3.1569 (11395) used greatest stack depth: 17912 bytes left [ 205.345097][T11412] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 205.623407][T11427] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 207.647244][T11486] __nla_validate_parse: 15 callbacks suppressed [ 207.647267][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'. [ 207.727393][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 207.797484][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'. [ 207.917723][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1603'. [ 208.088776][T11516] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1607'. [ 208.098167][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'. [ 208.285531][T11525] vlan3: entered promiscuous mode [ 208.314588][T11525] vlan3: entered allmulticast mode [ 208.335655][T11525] hsr_slave_1: entered allmulticast mode [ 208.754421][T11561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1617'. [ 208.769523][T11555] 8021q: VLANs not supported on ip_vti0 [ 208.779150][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1617'. [ 208.788365][T11561] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1617'. [ 209.064403][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 209.134030][T11585] tipc: Enabling of bearer rejected, failed to enable media [ 209.143454][T11584] tipc: Enabling of bearer rejected, failed to enable media [ 209.251984][T11588] tipc: Enabled bearer , priority 0 [ 209.293589][T11588] syzkaller0: entered promiscuous mode [ 209.301182][T11588] syzkaller0: entered allmulticast mode [ 209.389637][T11588] tipc: Resetting bearer [ 209.424289][T11587] tipc: Resetting bearer [ 209.453272][T11587] tipc: Disabling bearer [ 209.472616][T11609] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20001 [ 209.547388][T11613] 8021q: VLANs not supported on ip6_vti0 [ 209.958800][T11640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.254039][T11653] netlink: 'syz.2.1646': attribute type 1 has an invalid length. [ 210.392866][T11653] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.426570][T11662] bond5: (slave geneve2): making interface the new active one [ 210.436411][T11662] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 210.654093][T11672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 210.744582][T11671] 8021q: adding VLAN 0 to HW filter on device bond6 [ 210.765999][T11671] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 210.790479][T11671] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 211.075641][T11692] netlink: 'syz.0.1657': attribute type 16 has an invalid length. [ 211.088307][T11692] netlink: 'syz.0.1657': attribute type 17 has an invalid length. [ 211.152682][T11692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.420577][T11713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.556400][T11720] tipc: Enabled bearer , priority 10 [ 211.859515][T11742] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 212.075944][T11754] netlink: 'syz.2.1678': attribute type 10 has an invalid length. [ 212.278544][T11763] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 212.290454][T11763] bond3: (slave vcan0): Error -95 calling set_mac_address [ 212.515650][T11771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 212.524073][T11771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 212.532104][T11771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 212.540134][T11771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 212.548037][T11771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 212.556018][T11771] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 212.637857][T11775] netlink: 'syz.1.1685': attribute type 3 has an invalid length. [ 212.684932][T11777] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 212.862014][T11785] __nla_validate_parse: 15 callbacks suppressed [ 212.862033][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1689'. [ 212.880313][T11789] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1691'. [ 212.907208][T11789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1691'. [ 212.943606][T11793] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1692'. [ 213.063817][T11796] syzkaller1: entered promiscuous mode [ 213.077802][T11796] syzkaller1: entered allmulticast mode [ 213.093789][T11799] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1695'. [ 213.151601][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 213.406018][T11817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1700'. [ 213.606791][T11832] netlink: 'syz.0.1703': attribute type 2 has an invalid length. [ 213.615408][T11832] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1703'. [ 213.634192][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 213.650661][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1704'. [ 214.276448][T11878] netlink: 'syz.1.1719': attribute type 15 has an invalid length. [ 214.318000][T11880] team0: Device gtp0 is up. Set it down before adding it as a team port [ 214.503244][T11895] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 214.512879][T11895] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 214.621074][T11900] sctp: [Deprecated]: syz.1.1726 (pid 11900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.621074][T11900] Use struct sctp_sack_info instead [ 214.831359][T11909] netlink: 'syz.3.1727': attribute type 21 has an invalid length. [ 214.845426][T11909] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.475214][T11940] netlink: 'syz.2.1736': attribute type 9 has an invalid length. [ 215.502042][T11940] netlink: 'syz.2.1736': attribute type 9 has an invalid length. [ 215.570437][T11946] netlink: 'syz.3.1739': attribute type 11 has an invalid length. [ 215.936619][T11976] net_ratelimit: 49 callbacks suppressed [ 215.936640][T11976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.538851][T12006] netlink: 'syz.3.1757': attribute type 142 has an invalid length. [ 217.162749][ T5189] Bluetooth: hci0: command 0x0401 tx timeout [ 217.168864][ T5189] Bluetooth: hci1: command 0x0406 tx timeout [ 217.176689][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 217.251857][T12054] bond0: Error: Cannot enslave bond to itself. [ 217.471324][T12068] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 217.566997][T12075] netlink: 'syz.4.1779': attribute type 1 has an invalid length. [ 217.639243][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 217.920153][T12094] netlink: 'syz.4.1783': attribute type 8 has an invalid length. [ 218.126291][T12103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.791181][T12127] netlink: 'syz.0.1790': attribute type 9 has an invalid length. [ 218.804731][T12127] __nla_validate_parse: 22 callbacks suppressed [ 218.804751][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 219.234909][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 219.327952][T12165] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 240.598397][T12181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1806'. [ 240.877307][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1811'. [ 241.008825][T12203] hsr_slave_1 (unregistering): left promiscuous mode [ 241.010230][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 241.032880][T12219] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 241.070272][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 241.115601][T12206] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.360205][ T9608] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 241.377734][ T9608] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.401600][ T9608] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 241.418506][ T9608] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 241.428238][ T9608] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.446270][ T9608] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 241.479838][ T9608] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 241.489463][ T9608] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.498481][ T9608] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 241.525450][ T9608] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 241.536039][ T9608] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.545593][ T9608] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 241.852794][T12254] veth0: entered promiscuous mode [ 241.913598][T12249] syz.1.1827 (12249) used greatest stack depth: 16552 bytes left [ 242.126299][T12253] veth0: left promiscuous mode [ 242.361678][T12284] netlink: 'syz.4.1836': attribute type 2 has an invalid length. [ 242.471700][T12286] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.1840'. [ 242.633236][T12286] netlink: 'syz.1.1840': attribute type 11 has an invalid length. [ 242.662056][T12286] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1840'. [ 242.810597][T12295] "syz.2.1842" (12295) uses obsolete ecb(arc4) skcipher [ 243.028314][T12322] netlink: 'syz.0.1849': attribute type 29 has an invalid length. [ 243.151603][T12328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.238012][T12331] macvtap1: entered promiscuous mode [ 243.251100][T12331] vlan0: entered promiscuous mode [ 243.256804][T12331] macvtap1: entered allmulticast mode [ 243.270679][T12331] vlan0: entered allmulticast mode [ 243.304691][T12331] veth0_vlan: entered allmulticast mode [ 243.616028][T12353] tunl0: entered promiscuous mode [ 243.645481][T12353] netlink: 'syz.0.1859': attribute type 3 has an invalid length. [ 243.674484][T12353] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1859'. [ 244.097649][T12376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1868'. [ 244.251678][T12388] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 244.281241][ T6028] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 244.356309][T12392] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1874'. [ 244.396601][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 244.409218][T12392] netlink: 'syz.4.1874': attribute type 5 has an invalid length. [ 244.409943][T12397] sctp: [Deprecated]: syz.3.1876 (pid 12397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.409943][T12397] Use struct sctp_sack_info instead [ 244.416995][T12392] netlink: 'syz.4.1874': attribute type 6 has an invalid length. [ 244.820755][T12420] team0: No ports can be present during mode change [ 245.050166][T12435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.160589][ T5935] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.285459][T12455] netlink: 'syz.2.1892': attribute type 32 has an invalid length. [ 245.334567][T12455] (unnamed net_device) (uninitialized): Setting coupled_control to on (1) [ 245.356439][T12459] siw: device registration error -23 [ 245.416725][T12464] netlink: 'syz.4.1893': attribute type 10 has an invalid length. [ 245.461282][T12464] bridge0: port 1(team0) entered blocking state [ 245.486946][T12464] bridge0: port 1(team0) entered disabled state [ 245.494373][T12464] team0: entered allmulticast mode [ 245.535262][T12464] geneve0: entered allmulticast mode [ 245.543423][T12464] team0: entered promiscuous mode [ 245.548648][T12464] geneve0: entered promiscuous mode [ 245.705006][T12474] netlink: 'syz.0.1894': attribute type 2 has an invalid length. [ 245.807243][T12478] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 245.861589][T12479] tipc: Enabled bearer , priority 0 [ 245.884619][T12479] IPVS: ip_vs_add_dest(): server weight less than zero [ 245.937390][T12476] tipc: Disabling bearer [ 246.438181][T12525] netlink: 'syz.4.1905': attribute type 26 has an invalid length. [ 246.470976][ T5957] hid (null): unknown global tag 0xe [ 246.477572][ T5957] hid (null): nested delimiters [ 246.655436][T12533] __nla_validate_parse: 5 callbacks suppressed [ 246.655455][T12533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1911'. [ 246.702906][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 246.822420][T12538] veth11: entered promiscuous mode [ 246.832061][T12543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1912'. [ 247.132863][T12557] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1916'. [ 247.206978][T12562] vlan2: entered promiscuous mode [ 247.224376][T12565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1920'. [ 247.224974][T12562] vlan2: entered allmulticast mode [ 247.257333][T12562] hsr_slave_1: entered allmulticast mode [ 247.315795][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1917'. [ 247.547692][T12579] validate_nla: 1 callbacks suppressed [ 247.547714][T12579] netlink: 'syz.2.1922': attribute type 24 has an invalid length. [ 247.835813][T12587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1925'. [ 248.145039][T12597] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1929'. [ 248.179255][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1929'. [ 248.188278][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1929'. [ 248.558274][ T5957] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 248.580767][ T5957] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 248.614892][ T5957] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 248.999235][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 249.437870][T12645] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 250.514026][T12713] netlink: 'syz.1.1964': attribute type 33 has an invalid length. [ 250.628011][T12723] vlan4: entered promiscuous mode [ 250.634081][T12723] bridge0: entered promiscuous mode [ 250.656177][T12711] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 250.711050][T12720] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 250.796073][T12731] netlink: 'syz.2.1967': attribute type 29 has an invalid length. [ 251.284073][T12724] vlan0: left allmulticast mode [ 251.289526][T12724] veth0_vlan: left allmulticast mode [ 251.294954][T12724] vlan0: left promiscuous mode [ 251.351177][ T9607] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.370816][ T9607] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.386798][ T9607] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.436070][ T9607] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.466490][ T9607] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.490944][ T9607] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.550481][ T9607] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.586777][ T9607] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.608227][T12768] nbd: must specify a device to reconfigure [ 251.670558][T12774] __nla_validate_parse: 12 callbacks suppressed [ 251.670581][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 251.818285][T12779] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1984'. [ 251.877454][T12784] netlink: 'syz.3.1986': attribute type 10 has an invalid length. [ 251.917891][T12784] syzkaller1: entered promiscuous mode [ 251.925635][T12784] syzkaller1: entered allmulticast mode [ 251.955138][T12784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1986'. [ 252.166174][T12799] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 252.186141][T12799] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 252.394696][T12819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.410888][T12818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.427425][T12823] ip6gre0: Master is either lo or non-ether device [ 252.533732][T12818] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1998'. [ 252.647268][T12834] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 252.673155][T12834] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2001'. [ 252.699325][T12831] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 252.722861][T12831] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 252.875624][T12847] netlink: 'syz.3.2007': attribute type 1 has an invalid length. [ 252.920002][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'. [ 253.017810][T12861] netlink: 'syz.0.2010': attribute type 24 has an invalid length. [ 253.072197][T12843] lo speed is unknown, defaulting to 1000 [ 253.226030][T12868] netlink: 'syz.3.2012': attribute type 11 has an invalid length. [ 253.244776][T12868] netlink: 'syz.3.2012': attribute type 11 has an invalid length. [ 253.254892][T12868] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2012'. [ 253.299673][T12875] openvswitch: netlink: Tunnel attr 1 has unexpected len 16 expected 4 [ 253.466648][T12884] netlink: 'syz.2.2015': attribute type 10 has an invalid length. [ 253.696704][T12893] netlink: 'syz.0.2019': attribute type 13 has an invalid length. [ 253.721632][T12893] netlink: 'syz.0.2019': attribute type 58 has an invalid length. [ 253.740633][T12893] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2019'. [ 253.773578][T12895] netlink: 'syz.0.2019': attribute type 4 has an invalid length. [ 253.845492][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'. [ 253.858940][T12897] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2020'. [ 254.023449][T12854] netlink: 'syz.4.2006': attribute type 13 has an invalid length. [ 254.111536][T12917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.204172][T12854] gretap0: entered promiscuous mode [ 254.287225][T12854] bridge0: port 1(team0) entered blocking state [ 254.293673][T12854] bridge0: port 1(team0) entered forwarding state [ 254.300619][T12854] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.314657][T12854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.796832][T12948] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 255.396915][T12976] netlink: 'syz.1.2038': attribute type 11 has an invalid length. [ 255.436848][T12977] block nbd0: NBD_DISCONNECT [ 255.442001][T12977] block nbd0: Send disconnect failed -32 [ 255.452186][T12977] block nbd0: shutting down sockets [ 255.977205][T13003] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.043169][T13001] veth11: entered promiscuous mode [ 256.458676][T13031] veth13: entered promiscuous mode [ 256.473864][T13031] veth13: entered allmulticast mode [ 256.661814][T13043] tipc: Enabled bearer , priority 0 [ 256.669873][T13043] syzkaller0: entered promiscuous mode [ 256.698141][T13047] __nla_validate_parse: 16 callbacks suppressed [ 256.698164][T13047] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.2063'. [ 256.714746][T13043] syzkaller0: entered allmulticast mode [ 256.775661][T13047] openvswitch: netlink: Message has 5 unknown bytes. [ 256.794437][T13043] tipc: Resetting bearer [ 256.821547][T13042] tipc: Resetting bearer [ 256.876072][T13042] tipc: Disabling bearer [ 256.922051][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 256.941759][T13057] erspan0: entered promiscuous mode [ 256.993987][T13065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2067'. [ 257.097069][T13071] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2068'. [ 257.130040][T13071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2068'. [ 257.349202][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 257.407152][T13094] 8021q: VLANs not supported on ip_vti0 [ 257.621897][T13103] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2079'. [ 257.675479][T13103] validate_nla: 9 callbacks suppressed [ 257.675500][T13103] netlink: 'syz.3.2079': attribute type 10 has an invalid length. [ 257.687466][T13110] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 257.707991][T13103] syzkaller1: entered promiscuous mode [ 257.729543][T13103] syzkaller1: entered allmulticast mode [ 258.104948][T13135] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.122482][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 258.123101][T13144] netlink: 808 bytes leftover after parsing attributes in process `syz.0.2090'. [ 258.287279][T13154] openvswitch: netlink: Unknown key attributes 2 [ 258.661852][T13175] bridge_slave_0: invalid flags given to default FDB implementation [ 258.686087][T13175] netlink: 'syz.2.2100': attribute type 10 has an invalid length. [ 258.830963][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2102'. [ 258.911247][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2104'. [ 258.918380][T13185] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 259.061030][T13190] netlink: 'syz.4.2106': attribute type 13 has an invalid length. [ 259.247977][T13202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.322359][T13190] netlink: 'syz.4.2106': attribute type 13 has an invalid length. [ 259.651171][T13222] tipc: Enabled bearer , priority 0 [ 259.694365][T13230] netlink: 'syz.2.2117': attribute type 2 has an invalid length. [ 259.748585][T13235] tipc: Resetting bearer [ 259.938263][T13219] tipc: Disabling bearer [ 259.983013][T13252] netlink: 'syz.1.2124': attribute type 3 has an invalid length. [ 260.200040][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 261.164815][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.401728][T13318] netlink: 'syz.1.2145': attribute type 1 has an invalid length. [ 261.433304][T13318] netlink: 'syz.1.2145': attribute type 1 has an invalid length. [ 261.487952][T13318] tipc: Enabling of bearer rejected, failed to enable media [ 261.824865][T13346] erspan0: entered allmulticast mode [ 261.931259][T13352] tipc: Enabled bearer , priority 10 [ 262.125820][T13368] netlink: 'syz.1.2161': attribute type 2 has an invalid length. [ 262.138528][T13367] __nla_validate_parse: 10 callbacks suppressed [ 262.138549][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2163'. [ 262.292043][T13374] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2165'. [ 262.302502][T13374] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2165'. [ 262.335885][T13376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2166'. [ 262.502202][T13378] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2167'. [ 262.534323][T13386] netlink: 'syz.3.2170': attribute type 1 has an invalid length. [ 262.631671][T13386] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.658309][T13388] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 262.709336][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'. [ 262.786473][T13407] validate_nla: 1 callbacks suppressed [ 262.786494][T13407] netlink: 'syz.4.2176': attribute type 3 has an invalid length. [ 262.800556][T13407] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2176'. [ 262.809824][T13399] macsec1: entered promiscuous mode [ 262.820345][T13399] bridge0: entered promiscuous mode [ 262.825845][T13399] macsec1: entered allmulticast mode [ 262.832344][T13399] bridge0: entered allmulticast mode [ 262.840215][T13399] bridge0: port 1(macsec1) entered blocking state [ 262.846906][T13399] bridge0: port 1(macsec1) entered disabled state [ 262.858397][T13399] bridge0: left allmulticast mode [ 262.864073][T13399] bridge0: left promiscuous mode [ 262.895144][T13411] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2176'. [ 262.937169][T13409] tipc: Enabling of bearer rejected, failed to enable media [ 262.949550][T13404] netlink: 'syz.3.2175': attribute type 4 has an invalid length. [ 263.049480][ T5957] tipc: Node number set to 1790476909 [ 263.217017][T13430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2182'. [ 263.387341][T13441] tipc: Enabling of bearer rejected, failed to enable media [ 263.986290][T13478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2201'. [ 263.993311][T13479] netlink: 'syz.0.2202': attribute type 29 has an invalid length. [ 264.756023][T13541] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 264.850552][T13546] netlink: 'syz.0.2220': attribute type 1 has an invalid length. [ 265.361378][T13570] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 265.373067][T13570] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 265.381627][T13570] gretap1: entered promiscuous mode [ 265.386946][T13570] gretap1: entered allmulticast mode [ 265.628266][T13598] C: renamed from team_slave_0 [ 265.637338][T13598] netlink: 'syz.0.2235': attribute type 1 has an invalid length. [ 265.689249][T13598] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 265.710240][T13586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.981730][T13610] tipc: Cannot configure node identity twice [ 266.111201][T13617] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 266.144898][T13620] openvswitch: netlink: IPv4 tun info is not correct [ 267.440028][ T9608] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 267.928887][T13692] __nla_validate_parse: 11 callbacks suppressed [ 267.928907][T13692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2266'. [ 267.962672][T13695] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2267'. [ 267.996113][T13695] netlink: 'syz.3.2267': attribute type 1 has an invalid length. [ 268.053606][T13695] netlink: 'syz.3.2267': attribute type 3 has an invalid length. [ 268.091865][T13695] netlink: 'syz.3.2267': attribute type 235 has an invalid length. [ 268.104718][T13706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2268'. [ 268.293785][T13714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2271'. [ 268.306400][T13718] tipc: Enabled bearer , priority 0 [ 268.318589][T13717] tipc: Enabling of bearer rejected, already enabled [ 268.335994][T13718] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 268.344242][T13718] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 268.385112][T13717] tipc: Resetting bearer [ 268.478565][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'. [ 268.576551][T13731] netlink: 'syz.4.2277': attribute type 1 has an invalid length. [ 268.821875][T13751] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2282'. [ 268.873001][T13755] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.2281'. [ 268.968651][T13750] netlink: 'syz.4.2281': attribute type 10 has an invalid length. [ 268.984603][T13750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2281'. [ 268.995321][T13750] ipvlan1: entered promiscuous mode [ 269.012242][T13750] ipvlan1: entered allmulticast mode [ 269.021921][T13750] veth0_vlan: entered allmulticast mode [ 269.030501][T13750] bridge0: port 2(ipvlan1) entered blocking state [ 269.037764][T13750] bridge0: port 2(ipvlan1) entered disabled state [ 269.054034][T13750] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 269.379482][ T5935] tipc: Node number set to 1422915742 [ 269.668955][T13797] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2294'. [ 269.781591][T13804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2296'. [ 269.928277][T13813] vlan0: entered allmulticast mode [ 269.940208][T13813] bond0: entered allmulticast mode [ 269.949216][T13813] bond_slave_0: entered allmulticast mode [ 269.965323][T13813] bond_slave_1: entered allmulticast mode [ 269.977358][T13813] bridge0: entered allmulticast mode [ 270.273275][T13832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.481318][T13846] tipc: Enabled bearer , priority 0 [ 270.496781][T13846] syzkaller0: entered promiscuous mode [ 270.508884][T13846] syzkaller0: entered allmulticast mode [ 270.584147][T13846] tipc: Resetting bearer [ 270.782097][T13845] tipc: Resetting bearer [ 270.839640][T13845] tipc: Disabling bearer [ 270.895340][T13864] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 270.926304][T13864] sctp: [Deprecated]: syz.3.2315 (pid 13864) Use of int in maxseg socket option. [ 270.926304][T13864] Use struct sctp_assoc_value instead [ 271.987949][T13925] lo speed is unknown, defaulting to 1000 [ 272.033760][T13918] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 273.003201][T13970] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 273.334733][T13988] __nla_validate_parse: 73 callbacks suppressed [ 273.334754][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 273.737327][T14010] netlink: 'syz.0.2362': attribute type 1 has an invalid length. [ 273.788456][T14018] bridge0: port 1(team0) entered disabled state [ 274.042864][T14034] netlink: 'syz.1.2368': attribute type 23 has an invalid length. [ 274.110473][T14018] team0 (unregistering): left allmulticast mode [ 274.132629][T14018] geneve0: left allmulticast mode [ 274.140113][T14018] team0 (unregistering): left promiscuous mode [ 274.146451][T14018] geneve0: left promiscuous mode [ 274.155206][T14018] bridge0: port 1(team0) entered disabled state [ 274.191353][T14018] team0 (unregistering): Port device geneve0 removed [ 274.238120][ T9607] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.255646][ T9607] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.283848][ T9607] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.330202][ T9610] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.489714][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 274.559486][T14061] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.2374'. [ 274.717200][ T9607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.726442][ T9607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.770463][T14075] veth1_to_bond: entered allmulticast mode [ 274.817295][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2379'. [ 274.996765][T14075] bond0: (slave bond_slave_1): Releasing backup interface [ 275.036399][T14075] veth1_to_bond (unregistering): left allmulticast mode [ 275.088826][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2381'. [ 275.109396][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2381'. [ 275.374460][T14110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2389'. [ 275.400476][T14114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2389'. [ 275.784946][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2397'. [ 275.867394][T14141] tipc: Enabling of bearer rejected, media not registered [ 276.015570][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2403'. [ 276.020591][T14152] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 276.033857][T14153] netlink: 'syz.1.2403': attribute type 8 has an invalid length. [ 276.347214][T14166] netlink: 'syz.4.2407': attribute type 1 has an invalid length. [ 277.058538][T14212] lo speed is unknown, defaulting to 1000 [ 277.404975][T14238] : renamed from veth0_vlan (while UP) [ 277.468827][T14240] netem: change failed [ 277.504929][T14241] veth0: entered promiscuous mode [ 277.805130][T14231] veth0: left promiscuous mode [ 278.138389][T14272] netlink: 'syz.0.2440': attribute type 2 has an invalid length. [ 278.197493][T14280] nbd: must specify a size in bytes for the device [ 278.297406][T14281] macvlan3: entered promiscuous mode [ 278.350097][T14281] macvlan3: entered allmulticast mode [ 278.355682][T14288] __nla_validate_parse: 11 callbacks suppressed [ 278.355702][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 278.355720][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'. [ 278.386436][T14288] netlink: 'syz.0.2444': attribute type 18 has an invalid length. [ 278.444966][ T9610] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.446617][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'. [ 278.464936][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'. [ 278.469227][ T9610] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.486139][T14288] netlink: 'syz.0.2444': attribute type 18 has an invalid length. [ 278.551059][ T9610] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.567951][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2447'. [ 278.577774][ T9610] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.663050][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2447'. [ 278.677272][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2447'. [ 279.117188][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2453'. [ 279.615289][T14351] netlink: 'syz.4.2461': attribute type 15 has an invalid length. [ 279.638767][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2461'. [ 279.677876][T14353] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.680864][T14351] netlink: 'syz.4.2461': attribute type 15 has an invalid length. [ 279.705181][T14353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.724123][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2461'. [ 280.326923][T14386] sch_fq: defrate 0 ignored. [ 280.923814][T14423] netlink: 'syz.0.2483': attribute type 3 has an invalid length. [ 281.103769][T14432] xt_HMARK: proto mask must be zero with L3 mode [ 281.224302][T14438] netlink: 'syz.3.2489': attribute type 1 has an invalid length. [ 281.293673][T14445] veth11: entered promiscuous mode [ 281.330689][T14438] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 281.395416][T14450] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 281.487893][T14456] veth0: entered promiscuous mode [ 281.553560][T14455] veth0: left promiscuous mode [ 281.766210][T14470] netlink: 'syz.4.2501': attribute type 29 has an invalid length. [ 282.583179][T14534] tun0: tun_chr_ioctl cmd 1074025675 [ 282.594621][T14534] tun0: persist disabled [ 282.688655][T14539] netlink: 'syz.1.2520': attribute type 4 has an invalid length. [ 282.720962][T14539] netlink: 'syz.1.2520': attribute type 4 has an invalid length. [ 282.743699][T14541] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 282.784640][T13666] lo speed is unknown, defaulting to 1000 [ 282.789858][T14543] netlink: 'syz.1.2520': attribute type 4 has an invalid length. [ 282.957442][T14553] bond3: (slave bridge6): making interface the new active one [ 282.986082][T14553] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 282.995526][ T5942] lo speed is unknown, defaulting to 1000 [ 283.012456][ T5942] syz0: Port: 1 Link DOWN [ 283.111182][ T5942] lo speed is unknown, defaulting to 1000 [ 283.172403][T14568] ªªªªªª: renamed from vlan0 [ 283.261032][T14571] ================================================================== [ 283.269179][T14571] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 283.277195][T14571] Read of size 1 at addr ffff888031545430 by task syz.1.2529/14571 [ 283.285112][T14571] [ 283.287488][T14571] CPU: 1 UID: 0 PID: 14571 Comm: syz.1.2529 Not tainted syzkaller #0 PREEMPT(full) [ 283.287516][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.287537][T14571] Call Trace: [ 283.287546][T14571] [ 283.287555][T14571] dump_stack_lvl+0x189/0x250 [ 283.287583][T14571] ? __kasan_check_byte+0x12/0x40 [ 283.287613][T14571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.287637][T14571] ? lock_release+0x4b/0x3e0 [ 283.287668][T14571] ? __virt_addr_valid+0x4a5/0x5c0 [ 283.287695][T14571] print_report+0xca/0x240 [ 283.287713][T14571] ? xfrm_state_find+0x2cf2/0x5400 [ 283.287732][T14571] kasan_report+0x118/0x150 [ 283.287760][T14571] ? xfrm_state_find+0x2cf2/0x5400 [ 283.287783][T14571] xfrm_state_find+0x2cf2/0x5400 [ 283.287801][T14571] ? check_noncircular+0xe0/0x160 [ 283.287835][T14571] ? validate_chain+0x897/0x2140 [ 283.287861][T14571] ? xfrm_state_find+0x1da/0x5400 [ 283.287883][T14571] ? __pfx_xfrm_state_find+0x10/0x10 [ 283.287912][T14571] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 283.287951][T14571] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 283.287978][T14571] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 283.288004][T14571] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 283.288033][T14571] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 283.288079][T14571] ? xfrm_expand_policies+0x41f/0x6a0 [ 283.288107][T14571] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 283.288136][T14571] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 283.288174][T14571] ? __lock_acquire+0xab9/0xd20 [ 283.288205][T14571] xfrm_lookup_route+0x3c/0x1c0 [ 283.288231][T14571] __ip4_datagram_connect+0x9a5/0x1270 [ 283.288266][T14571] udp_connect+0x33/0x1f0 [ 283.288286][T14571] __sys_connect+0x313/0x440 [ 283.288317][T14571] ? __pfx___sys_connect+0x10/0x10 [ 283.288353][T14571] ? rcu_is_watching+0x15/0xb0 [ 283.288377][T14571] __x64_sys_connect+0x7a/0x90 [ 283.288408][T14571] do_syscall_64+0xfa/0x3b0 [ 283.288425][T14571] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.288452][T14571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.288472][T14571] ? clear_bhb_loop+0x60/0xb0 [ 283.288494][T14571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.288513][T14571] RIP: 0033:0x7fba7b78ebe9 [ 283.288539][T14571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.288558][T14571] RSP: 002b:00007fba7c5ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 283.288583][T14571] RAX: ffffffffffffffda RBX: 00007fba7b9c5fa0 RCX: 00007fba7b78ebe9 [ 283.288599][T14571] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000004 [ 283.288612][T14571] RBP: 00007fba7b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 283.288625][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.288637][T14571] R13: 00007fba7b9c6038 R14: 00007fba7b9c5fa0 R15: 00007ffd7b157698 [ 283.288661][T14571] [ 283.288668][T14571] [ 283.572708][T14571] Allocated by task 11859: [ 283.577128][T14571] kasan_save_track+0x3e/0x80 [ 283.581822][T14571] __kasan_slab_alloc+0x6c/0x80 [ 283.586680][T14571] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 283.592147][T14571] xfrm_state_alloc+0x24/0x2f0 [ 283.596928][T14571] __find_acq_core+0x8a7/0x1c00 [ 283.601778][T14571] xfrm_find_acq+0x78/0xa0 [ 283.606203][T14571] xfrm_alloc_userspi+0x6b3/0xc90 [ 283.611234][T14571] xfrm_user_rcv_msg+0x7a3/0xab0 [ 283.616177][T14571] netlink_rcv_skb+0x208/0x470 [ 283.620952][T14571] xfrm_netlink_rcv+0x79/0x90 [ 283.626113][T14571] netlink_unicast+0x82f/0x9e0 [ 283.630887][T14571] netlink_sendmsg+0x805/0xb30 [ 283.635650][T14571] __sock_sendmsg+0x219/0x270 [ 283.640331][T14571] ____sys_sendmsg+0x505/0x830 [ 283.645096][T14571] ___sys_sendmsg+0x21f/0x2a0 [ 283.649775][T14571] __x64_sys_sendmsg+0x19b/0x260 [ 283.654722][T14571] do_syscall_64+0xfa/0x3b0 [ 283.659227][T14571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.665122][T14571] [ 283.667443][T14571] Freed by task 10: [ 283.671246][T14571] kasan_save_track+0x3e/0x80 [ 283.675929][T14571] kasan_save_free_info+0x46/0x50 [ 283.680978][T14571] __kasan_slab_free+0x5b/0x80 [ 283.685749][T14571] kmem_cache_free+0x18f/0x400 [ 283.690525][T14571] xfrm_state_gc_task+0x52d/0x6b0 [ 283.695558][T14571] process_scheduled_works+0xae1/0x17b0 [ 283.701105][T14571] worker_thread+0x8a0/0xda0 [ 283.705697][T14571] kthread+0x70e/0x8a0 [ 283.709770][T14571] ret_from_fork+0x3f9/0x770 [ 283.714369][T14571] ret_from_fork_asm+0x1a/0x30 [ 283.719143][T14571] [ 283.721475][T14571] The buggy address belongs to the object at ffff888031545100 [ 283.721475][T14571] which belongs to the cache xfrm_state of size 928 [ 283.735446][T14571] The buggy address is located 816 bytes inside of [ 283.735446][T14571] freed 928-byte region [ffff888031545100, ffff8880315454a0) [ 283.749244][T14571] [ 283.751571][T14571] The buggy address belongs to the physical page: [ 283.757994][T14571] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031546ec0 pfn:0x31544 [ 283.768071][T14571] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 283.776569][T14571] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 283.784127][T14571] page_type: f5(slab) [ 283.788117][T14571] raw: 00fff00000000040 ffff88801fecab40 dead000000000122 0000000000000000 [ 283.796701][T14571] raw: ffff888031546ec0 00000000800f0008 00000000f5000000 0000000000000000 [ 283.805291][T14571] head: 00fff00000000040 ffff88801fecab40 dead000000000122 0000000000000000 [ 283.813967][T14571] head: ffff888031546ec0 00000000800f0008 00000000f5000000 0000000000000000 [ 283.822641][T14571] head: 00fff00000000002 ffffea0000c55101 00000000ffffffff 00000000ffffffff [ 283.831313][T14571] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 283.839980][T14571] page dumped because: kasan: bad access detected [ 283.846401][T14571] page_owner tracks the page as allocated [ 283.852111][T14571] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6551, tgid 6550 (syz.2.168), ts 111165026650, free_ts 111037933301 [ 283.871301][T14571] post_alloc_hook+0x240/0x2a0 [ 283.876080][T14571] get_page_from_freelist+0x21e4/0x22c0 [ 283.881631][T14571] __alloc_frozen_pages_noprof+0x181/0x370 [ 283.887443][T14571] alloc_pages_mpol+0x232/0x4a0 [ 283.892305][T14571] allocate_slab+0x8a/0x370 [ 283.896812][T14571] ___slab_alloc+0xbeb/0x1410 [ 283.901500][T14571] kmem_cache_alloc_noprof+0x283/0x3c0 [ 283.906964][T14571] xfrm_state_alloc+0x24/0x2f0 [ 283.911766][T14571] __find_acq_core+0x8a7/0x1c00 [ 283.916623][T14571] xfrm_find_acq+0x78/0xa0 [ 283.921039][T14571] pfkey_getspi+0x65d/0xee0 [ 283.925545][T14571] pfkey_sendmsg+0xbfe/0x1090 [ 283.930225][T14571] __sock_sendmsg+0x219/0x270 [ 283.934911][T14571] ____sys_sendmsg+0x505/0x830 [ 283.939679][T14571] ___sys_sendmsg+0x21f/0x2a0 [ 283.944361][T14571] __x64_sys_sendmsg+0x19b/0x260 [ 283.949303][T14571] page last free pid 6544 tgid 6544 stack trace: [ 283.955628][T14571] __free_frozen_pages+0xbc4/0xd30 [ 283.960750][T14571] __slab_free+0x303/0x3c0 [ 283.965176][T14571] qlist_free_all+0x97/0x140 [ 283.969783][T14571] kasan_quarantine_reduce+0x148/0x160 [ 283.975267][T14571] __kasan_slab_alloc+0x22/0x80 [ 283.980130][T14571] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 283.985595][T14571] getname_flags+0xb8/0x540 [ 283.990119][T14571] do_sys_openat2+0xbc/0x1c0 [ 283.994715][T14571] __x64_sys_openat+0x138/0x170 [ 283.999580][T14571] do_syscall_64+0xfa/0x3b0 [ 284.004086][T14571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.010001][T14571] [ 284.012332][T14571] Memory state around the buggy address: [ 284.017959][T14571] ffff888031545300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.026024][T14571] ffff888031545380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.034101][T14571] >ffff888031545400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.042165][T14571] ^ [ 284.047796][T14571] ffff888031545480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 284.055877][T14571] ffff888031545500: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 284.063934][T14571] ================================================================== [ 284.109332][T14571] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 284.116598][T14571] CPU: 0 UID: 0 PID: 14571 Comm: syz.1.2529 Not tainted syzkaller #0 PREEMPT(full) [ 284.126016][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.136190][T14571] Call Trace: [ 284.139486][T14571] [ 284.142423][T14571] dump_stack_lvl+0x99/0x250 [ 284.147153][T14571] ? __asan_memcpy+0x40/0x70 [ 284.151832][T14571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.157079][T14571] ? __pfx__printk+0x10/0x10 [ 284.161717][T14571] vpanic+0x281/0x750 [ 284.165716][T14571] ? preempt_schedule+0xae/0xc0 [ 284.170587][T14571] ? __pfx_vpanic+0x10/0x10 [ 284.175099][T14571] ? preempt_schedule_common+0x83/0xd0 [ 284.180577][T14571] ? preempt_schedule+0xae/0xc0 [ 284.185469][T14571] ? __pfx_preempt_schedule+0x10/0x10 [ 284.190911][T14571] panic+0xb9/0xc0 [ 284.194641][T14571] ? __pfx_panic+0x10/0x10 [ 284.199068][T14571] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 284.205003][T14571] ? xfrm_state_find+0x2cf2/0x5400 [ 284.210154][T14571] check_panic_on_warn+0x89/0xb0 [ 284.215118][T14571] ? xfrm_state_find+0x2cf2/0x5400 [ 284.220251][T14571] end_report+0x78/0x160 [ 284.224802][T14571] kasan_report+0x129/0x150 [ 284.229420][T14571] ? xfrm_state_find+0x2cf2/0x5400 [ 284.234593][T14571] xfrm_state_find+0x2cf2/0x5400 [ 284.239541][T14571] ? check_noncircular+0xe0/0x160 [ 284.244588][T14571] ? validate_chain+0x897/0x2140 [ 284.249554][T14571] ? xfrm_state_find+0x1da/0x5400 [ 284.254589][T14571] ? __pfx_xfrm_state_find+0x10/0x10 [ 284.259886][T14571] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 284.266068][T14571] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 284.271974][T14571] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 284.278574][T14571] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 284.284480][T14571] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 284.290509][T14571] ? xfrm_expand_policies+0x41f/0x6a0 [ 284.295896][T14571] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 284.301285][T14571] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 284.307107][T14571] ? __lock_acquire+0xab9/0xd20 [ 284.311979][T14571] xfrm_lookup_route+0x3c/0x1c0 [ 284.316888][T14571] __ip4_datagram_connect+0x9a5/0x1270 [ 284.322368][T14571] udp_connect+0x33/0x1f0 [ 284.326706][T14571] __sys_connect+0x313/0x440 [ 284.331313][T14571] ? __pfx___sys_connect+0x10/0x10 [ 284.336537][T14571] ? rcu_is_watching+0x15/0xb0 [ 284.341359][T14571] __x64_sys_connect+0x7a/0x90 [ 284.346156][T14571] do_syscall_64+0xfa/0x3b0 [ 284.350666][T14571] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.355881][T14571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.361954][T14571] ? clear_bhb_loop+0x60/0xb0 [ 284.366640][T14571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.372548][T14571] RIP: 0033:0x7fba7b78ebe9 [ 284.376972][T14571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.396598][T14571] RSP: 002b:00007fba7c5ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 284.405041][T14571] RAX: ffffffffffffffda RBX: 00007fba7b9c5fa0 RCX: 00007fba7b78ebe9 [ 284.413025][T14571] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000004 [ 284.421005][T14571] RBP: 00007fba7b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 284.428987][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.436968][T14571] R13: 00007fba7b9c6038 R14: 00007fba7b9c5fa0 R15: 00007ffd7b157698 [ 284.444960][T14571] [ 284.448297][T14571] Kernel Offset: disabled [ 284.452673][T14571] Rebooting in 86400 seconds..