last executing test programs: 8.553285733s ago: executing program 2 (id=3004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r1, 0xd1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000808, 0xffffffffffffff7c, 0x0}}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0) recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/211, 0xd3}], 0x2}, 0x10002) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = socket(0xa, 0x3, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "bb350f68b94a810529e9573d89780fa0"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "2d23ef1272904241195b0d3406009396"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x18}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x844}, 0x80) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xffffffff, 0x81, 0x3, 0x6, 0x3, 0x6, 0x2598, {0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x9, 0x8, 0x3, 0x7f}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000180)={r7, 0x2, 0x3000, 0x8, 0x3, 0xc}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 8.402169464s ago: executing program 2 (id=3007): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@loopback]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2404e0c4}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000300)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@default, @default, @bcast, @rose, @remote, @rose, @default, @netrom]}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0xf1}], 0x1, &(0x7f0000000280)=""/100, 0x64}, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 7.474145391s ago: executing program 2 (id=3013): r0 = socket(0x2b, 0x1, 0x0) getpeername$packet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7.356337306s ago: executing program 2 (id=3015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x32}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) r1 = socket$inet(0x2, 0x3, 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13314}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0xba01}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000400)={0x0, @private, @multicast1}, &(0x7f0000000440)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x73, 0x6, 0x58, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0xf, 0x700}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4041090}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r9) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r12, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r13, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r14 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r14, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="10001d008800565092332f4036ad0000"], 0x10}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 6.922024439s ago: executing program 2 (id=3016): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) 6.672334724s ago: executing program 2 (id=3018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x67}, @exit], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) 2.936488001s ago: executing program 1 (id=3048): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x106) r3 = socket(0x2, 0x2, 0x1) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="6b000000000000002900000002000000000000000108000000f0ffffff0000008a000000000009448760cd8dcfa0597e975b8451000000640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100000000"], 0x6b}, 0x0) 2.649826569s ago: executing program 1 (id=3053): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000180c2000000080045f8001c0000e000021100000000000000000000000000089078"], 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1f8}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) 2.301978518s ago: executing program 1 (id=3058): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='highspeed', 0x9) sendto$inet6(r3, &(0x7f0000000d00)='\a', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x6}, 0x1c) shutdown(r3, 0x1) accept$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @empty}, &(0x7f00000004c0)=0x1c) mmap(&(0x7f00007d2000/0x3000)=nil, 0x3000, 0x2, 0x22052, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$key(0xf, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000880)=0x1, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180000f92a6a3198d60000000000001f0500000018220000", @ANYRES32=0x1, @ANYBLOB="00000000050000001865000001000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018200000", @ANYRES32=0x1, @ANYBLOB="004f420ec69012c48eea270a183bc4f2000000ffffffff9500000000000000"], &(0x7f0000000000)='GPL\x00', 0xfff, 0x1000, &(0x7f0000000b40)=""/4096, 0x41000, 0x38, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, r5], &(0x7f0000000200)=[{0x0, 0x1, 0x7, 0x4}, {0x8000003, 0x2, 0xf, 0x5}, {0x3, 0x2, 0x9, 0x2}], 0x10, 0x5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r6, r4, 0x25, 0x10, @val=@kprobe_multi=@addrs={0x1, 0x1, 0x0, &(0x7f0000000300)=[0x1f], 0x6}}, 0x30) r7 = socket$inet6(0xa, 0x200000000003, 0x87) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff0200000000000000000000000000013b"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b00)={r5, r4, 0x25, 0x8, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x35c, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) 1.760859512s ago: executing program 1 (id=3064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600009012000300", @ANYRES32=r4, @ANYBLOB="0800050007000000"], 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0xa4, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0x64, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x91}, @NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) r6 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000400000101000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r7}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x50, 0xac, {{0xa, 0x4, 0x0, 0xe, 0x28, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x14, 0x58, 0x1, 0xa, [{@multicast2, 0x3}, {@multicast1, 0x4}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x700, 0x7f00, 0x1ff, 0x0, {{0xe, 0x4, 0x2, 0x11, 0x38, 0x66, 0x0, 0x59, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x10, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0xae, [@rand_addr=0x64010100, @local, @empty, @multicast2]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000500)={@empty}, &(0x7f0000000540)=0x14) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x13f4, 0x2c, 0xd27, 0x1070bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x13c8, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_ACT={0x13bc, 0x7, [@m_connmark={0x10c0, 0x8, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x4, 0x0, 0x2}, 0x100}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x6, 0xa, 0x8000}, 0xfffb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6c1ea103, 0xe4d4, 0x5, 0x4}, 0x5b6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x15e, 0x6, 0x7, 0x9, 0x3}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x83, 0x5, 0x9, 0x1000}, 0x3ff}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x1b4, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0x18c, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x144, 0x1f, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xf, 0x7a, 0x5, 0x400, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xccc}}]}, {0xf3, 0x6, "80951bc3455b884c3d87afda94594b8e81563d4f799d9820b21006e611bbd98e864a7ec30c1ac14d5eaaf17982a2b12eac9e9e3e642c54763b8442d81fe79f9d383c9aa63f3e9019651e1f2f27f323cc6ce88857940d9f98cbf460986f4f346db9111b87a914a027c8671d61cd7eded8074e1d63f2e2de3062585654b2675d2437a6e425fb130592e0378da9845c6cbaa750fac7cf18defb7be10e76bda48d78ddef2851bdac714755714987d04c282bd2e97c277f3200830147b36badc1e9e0fc3eddabf96c829b6b576c886134f37d978a7e35d52fc6b99f13f16cebe5b87cd4e3c678ad8f1037c9d9669fa70ff0"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x13f4}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x40, 0x8, 0x8001, 0x3, {{0xe, 0x4, 0x3, 0x9, 0x38, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x24, 0xaf, 0x1, 0x5, [{@broadcast, 0x8}, {@local, 0x4}, {@private=0xa010101, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x40, 0x62652d20d173289e, 0x9, 0x81, {{0x20, 0x4, 0x1, 0x20, 0x80, 0x65, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @end, @generic={0x44, 0xf, "1fb240aa69fc005014b5abf483"}, @lsrr={0x83, 0x2b, 0xf2, [@empty, @dev={0xac, 0x14, 0x14, 0x2f}, @empty, @dev={0xac, 0x14, 0x14, 0x11}, @local, @empty, @private=0xa010100, @local, @local, @rand_addr=0x64010101]}, @generic={0x89, 0x10, "5b6b68450c93d6898dfb06d32b2d"}, @ssrr={0x89, 0x13, 0x23, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @loopback]}, @timestamp_addr={0x44, 0xc, 0xbb, 0x1, 0x9, [{@local, 0x3}]}]}}}}}) 1.698524649s ago: executing program 4 (id=3065): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 1.521928529s ago: executing program 4 (id=3066): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r5, 0xe4}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180)) r8 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r9 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7) r10 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r10, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000002c0), &(0x7f0000001840)=@udp6=r2}, 0x20) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x799618da3696b23c, r0, 0xc0000000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r11, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r13, 0xc08, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r11, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x44000000}, 0x20000000) 1.521230265s ago: executing program 3 (id=3067): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) close(0x3) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6c", 0x6}, {&(0x7f00000001c0)='z3', 0x2}], 0x3, 0x0, 0x0, 0x4012}], 0x1, 0x0) recvmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x20, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x32600) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048080}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000040) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000001000000030000000100000000100000", @ANYRES32, @ANYBLOB="07000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000000000000f00"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8}, 0x90) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x474, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="180000001ff7642e00000000ff0000004d3bc0ff0000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018000000ff07000000000000000080020d03400010000000183a00000200000000"], &(0x7f0000000380)='syzkaller\x00', 0xffff0000, 0x29, &(0x7f0000000a00)=""/41, 0x0, 0x13, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0xb, 0x4e36, 0x5}, 0x10, r9, 0x0, 0x2, &(0x7f0000000b00)=[r10, r4], &(0x7f0000000b40)=[{0x3, 0x4, 0xc, 0xb}, {0x4, 0x5, 0x6, 0x6}], 0x10, 0x5}, 0x94) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.241827159s ago: executing program 4 (id=3070): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe000000007110100000000000e5000200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6, 0x1}, 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac04}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6, 0x1}, 0x20) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac04}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) (async) 1.237966644s ago: executing program 0 (id=3071): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x6159}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001a34010000000000000000000100000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000580000000f0a0104000000000000000001eb000008000b4000000000300004802c00018008000100636d70002000028008000240000000000c00038005000100ef000000080001400000000f0900010073797a3020000000340000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) write$tun(r1, &(0x7f0000002780)=ANY=[], 0xfb5) 1.12516176s ago: executing program 1 (id=3072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0xc010) (async) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0xc010) 989.491994ms ago: executing program 4 (id=3073): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r3, 0x25, 0x0, @void}, 0x10) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) (async) listen(r6, 0xfffffffc) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="0001f2ffe080000008001b0000000000ff59586f0652c9b467dbf8c40336cd6ec711bd6d62438afb924e5664eeee4a7ddeb413185e34f23d6d63ec1e8943c973f37352d827139f8287a41f38c897a1b48c1cf8d46df65c88bc1ab9f76775c89068198da38caf2a6ebbd9e8954b8ed926a4dcf0b41fa7839b06194f26bfc0df47f2c7da5b30369c5e44773ba554d1bd70b62f9d88e7793b6955713743f8b666d9"], 0x28}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="0001f2ffe080000008001b0000000000ff59586f0652c9b467dbf8c40336cd6ec711bd6d62438afb924e5664eeee4a7ddeb413185e34f23d6d63ec1e8943c973f37352d827139f8287a41f38c897a1b48c1cf8d46df65c88bc1ab9f76775c89068198da38caf2a6ebbd9e8954b8ed926a4dcf0b41fa7839b06194f26bfc0df47f2c7da5b30369c5e44773ba554d1bd70b62f9d88e7793b6955713743f8b666d9"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44885) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="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", 0x15f}, {&(0x7f0000000240)="92c8308f50bba2da5ee082c3b8dfae49dd913523b57daa0c3360c48ac2dfb3c6966fcbe70c4b01053f175c14d0139d4521b8458fcc5c4950702163dabc8596fafcbf867a70f93838c529160935b2e8d215daa857d8d8af704772858ca50a7a49e610c807b96eae4617639b498aec97ad751e6a92", 0x74}, {&(0x7f0000001740)="e186be08d00fb17be40da393eddd445ae4605c9b0fafbf5626528d70f0ab5998911d4a9ac7bb80ef0e98d946a18c0e45be0de497ee1617f2d5330d721ab03f9924097344cbf0ff4fb5ba1bb5c81364594645e14b4f8e39441c6bb10e497d9eb271b3312b7565ca7c915c629da5edb7dd41e9b35c535aa0d9c45a107fa4f6142af06c838c59d217283b5f0a83eabf723766bea696be47ff031d9b55ddc4d923c5713b15eb8c8143eb65d83ad9160082cf14eaa66df4e202d285d0b874d28f4f675d0aa916c74c65522e916fd1c9f07b4aa53e9cbd035786b8d0da2255d9d649221339ad8d75b016f5832651c6997342d73c82cea8555bacbe8ca018720ea81c895d4f99620bdb902c61bd100053e319b6f7267e686a9ea58cfd0730d2072023d24d5d17b6539efce62c36d1fbcb07ea0939cc196ec3a218c617d3651ccebe768f632349d1e9e6590526c1e5fb04f2ef84cd676d09f5daee766c54bc5ed88140aeaeb5214c847a4534597df21167f67498ffc04efd118930fdee7fb9338307ad8539a0895b04359f0933c9e0c9aeb4b07d57126e8eec18441f1d8dad2775949065c724430dcd8e83d97fcf2d1e0d542ade674c99f56e4f3a2399afb5cc0e3ab5ff7a201e06327ea4e2864b46283fb99b9b694e49c172db1d78f074b2271659bdd893f6afbd21de140c4fcbd6e1dc5446425b4cfed6a47fe6c8dd553b2b6ef14c1a87acca402ee101b639d6ea26db0759bb0ace4317dc3849bfc9d0a320c85b9c88653e3de103b4299124ab7d4f3c9a6fe1ee33216daab5e4c8486458a6a3d0b64bcb3ce569e0633b2f448c27c34d5a31e09b7af25013a81308062dc033a12bcdd10a8c6f3d19a755d2830fe8aa3b1cdc250f0b5130fc44d06b86e6eee2bdc08f05b6495a15b891793e95c7c65bc0924c6b931d3877711b28753c413cfa79ee4ed587cb563a7eeb68fad93942753adaeed6aba870929c07d29f4531de779bab079c9299770e5b38cbcb7ffc4d5bb9c617f6e92d7d7161d257693c97cbeb1e53e38c07edeea3938a0458d8faf79ce689912496398c6d0521e132a8a4a89bba0019b87e70378a58e86a4ca0182e512bf0c161052d1abe2330b38686f14abdb52b6eb6c5b4e40b64418b785138a16d1144a541c701fc41398a6dfa6b4601572585bc831b9cc1961ec0aa67ee9a2af119e5a7f3ce99e53ac48c21c8cf5cfe356c69e38f2f35ddfd2ba4d575c5162d1417bbe2c4f788f4dadcbf3453d9b4e1efcb5fef298227c1a4cef82bfda158e1b9eaa7cac8d1cfb71eb8d1589012fbe494193621af8fdcee215ecb204e36223d41ed69721b3cf4d44c146d62d54e95971bf77a889c8cccf5f50de13c2c1d3742456e0f44075ce19789988c35ba4b392fd062664c5097728981a700dc8b331c607a9fcfd13a9f757bdabcd8a921e585226d3177ef5849d9475afc88fa6101d6c3b5f0e5de81041866a5da930b04fb56e43d8be1f03c8123344c3dc8123ad1cd1a897651c6d7180e7557e781ba7cec0360b8c6ce1d383776bf1e1f4e97bcc54127ddab6bc817d019736516058888bd2ac599e365002fa098da131bc5425a9fba82da3cc524ee5d734db93675639f466937f66fb3434703356af88e055058ff57031d893b41dd5da4946b59b3c07461fafe858aa1f29505b7389781f4009c1c3abe31ef4b16bd2a812c01ca72d3277cf655de6cba3a7ca8ab32eef46a3fe5e53640d338d3a098a8ddfdf139dd4cc2120b1a0006fd15fa51b7f6501b11cbcb821294f062afd2df6dd0eafb9dcf7619cc6f16da68eea45806f6b0fac624d3825a28fb5c471f4d9a01b96ce361cf274093df4e5e61f781711b7c26c1dea65e8b0049b19d03a2d8d969ff94951f95324ed19db839dd5adecec407b109e1ebd99277e49f464257f2b372c4e4c43f01803f616ddde2dec524468707a4cb4d805128a1eb7bf089a4c7055cba57fe44cf4bc94ce9773806aa7be9a2417eb1fac2edb4d8e8d6483a14f50a490077a483fbffbc9e00ae29a346be5c7a1f3bb32c031aae0e8cec176b3194c12febf1fc24a2bdd0f91b6f2a9bd2da46f3077f58a59fe8993daa0b6d9a4e7f32059d860ead28be199ac7260b3327fd23bf6981cbe964daee1bf4c405a7d1c6e7c908d5af2173a1ddc666a7ad26835e61bc5cf248c7be1eac3b09b00443da0ae14cda42c46728fa2118f243f2d7cfbcda66f6ae79c49dfb4478d625bc6ea5ffde52b206be4e1360aac4301913044ff3704b5c0c0c80e6bc11cc91a2d3f3803c96fb20656b32175808ae957d4340e16de28a0cbf179951d1bd31b03b8db91fe14c3a6381162423cdc7bc47295eeead7e5e58854d7e852907d27ae04829900794c6560a1d966673ed8acc8293f818986532b43fdab838a09d17574d2d81091f96f21ab7c4fec5de5a956b5d8e76ed8551b8b48cd7d9d325cf7d6b6135590afe0dc266fd5c8a7bf5acefc0c137b940c0b6cd093f2e0275a07a21dd96836770951513fe81bd709de5af4674045bc754d5db7ea9d93ce819794fa69a67cb9e01a057a3220fbe17859896f93c4089e3e85dbdba9ae59aa390e81dbe7d57b28d7ec9372fa70edf5858c67bc6776864b764e7e85711600e5093d62cb9839f5096490221d019dfe2bc59207cc2d62f614035ee1e0b0c14edd5820c7f46ad079b73f33aa892b50c67e812f698f00bcbb1f5fa9c81b0747bf661648385c5492e62a685b08b25bde385962f232caaaa534a48be252629f8a5dcbb4fa05148689a469baa227a500c46b7be587ee2f4090bbff266cd5f98725a1932dba7bc20b9b2e5961ab9d2d20add2dc355c4af744471bdefb00842dd0e30494501b4fb576aaa637937f1bb79bbbe1716d8bedb8f16e8e083df14181013ba1fbe1fc788f605d07f7a020801de9958e7c8d430e4813b5b96b68ffec4fa60f209d987af3469d38333906341035da2332345aefe826b3eaf5c4f138d775fedc0a8a67e63f9a2c39a27ce392fd04d32007b0215987dfd7f6b69596bf8249571f7a649640746002138ebbd337eb5dc2ab94ff786864f5a508e5476b6b8a2d18cd7255a2c05cd68ade532a7a373611eacb9f3cc8721f22ac4278115ac44fe9f8668a8b6b043287c9d1b9f3ec9fabc22495e100ed2a8a8ffdee5de877d1804045dcc5e5010293c14a545997911471a99fcf4713d56a86f7967e311d44399172b57575cb3ec5c9729558d9a4ef745ce99e72bc6b0b9ef3ec8d9fea27c129d246fb995764fb775d533dc446ae9a2760633c8d8b8e59c7a5cf45394476cff54c1b66b7131baeea4ae50e270b4a0b59dc02bf7bc7d84ce339ff42a0b3c7450190e0d9cd13598e5291f6002c117cce428a075e0ab31468b2eaa6ea71e627ca314ae79266ee9947b643e17644b096afac29c46a52f0f2ce2fa008341aa1bd41bf03850c1c55ce1dfa344cdb1031bd340ede749df6c2f7d21a8cb44d0129d968e8ccb737fba0986a3b3da75ca15bdca17ce14177f680a000000000000005bd52ce706c8363733921a52ef56077958d2c125abba11c5b57146a81947df563a931692f88f15f356d5c1db6db8a8ca899784cfbed50fdced8cd61906417d9fd559741e6ec73ec3e716510a38a66220994c9e8cee31b67054cece996adf3f9c36d0b7010e798ee10a938c599a16a6392a6125d226cb949835867f9d18f2c19f6065a9f87ace5b41027e39ca8b099e8e8474660c93c9cbb3e70e56c1b83649e245f6e1fd39b42f0069510d1424af3f27996484a5f348d20d37bec560e57973fb029968bfbcfd39ae0896db1663d406753b7b151f4ddb84e40a0bde620f827d0d522e60b74dd50a8813aee11b4b8edff8e1d7c65ed9fd73fbbc1e1e20b15ae0346e29c33c63860e25b288081e2d273797bc8f53e2c33081862eba186aac40e45bf00f8a63f638913620e1761310c72d12fdde0677b1a44808c0ddf6b30632df29df36db826e443db8939ecffe96a45d1cde9e533040b8254fd1b9befa0a168c41a71765a3914bfe15c064f70aad0f24d8154717d29b0b6dff1f613cfbd301f9b80d6efa3dfe7d22f04b22e316c76d805ced57ab779162fa22f2bb6e77926408410a97128b7c4c5f42029e832cf4947ab3cce86ce731018ce8e506cb69087844869399b8455c5eba03c8256273b0c7ea289cb83629ebb4bab633d7ca7a0b8edf43e98c98242ce9acba7df035fec3114494da3757012c2e803bce9edc8c89f3ad417585ec75d8006c5c9038835d3816a6ea9e68ec608309b61d51958309a16fd2536bd77f8c3385f5de660e5d5d375e43002e30fc72add6a4c1b441894158e1dacba98c6bd1ea315f528f6391d128d1479df3f705f09aedad62b96acbd6fd42a4b8f10b8559f877ef59e1ec0bad501190e413693c105da211b386070c11528d665f6b2bda0f61b1fec4d5e03daab37bcc824f923eb9120e59107c223cea58450d55b56175193fd026e13943c6a61ef585a28da92300bc32bcb311d038ee0b3330b18383ea7b61c0e3967c725f6580afb26ee7b96cde11f0f7ef8a47c37b6671674a8e45b0b1f846f5bd356ca15584aa1c64b850982ceef89d94c8d3b1ed340cf4898bbb3590b55c2ee98cdcb3013cc81a47a6f92adfbeaa0da31a569868d7ac11a8830727a95ebcb7bfb42dace7dda8e40dd281f7cd67b76affea45706de0b46c952e8fe74947b75eb76f965cd4d038dabba270eb44cf5e2d1c71ae84422c0905b5c6b7336976a81360ebc288f8fd35da604845ed498a7afd1e13fa56b8ed356c80f49ecd3348efd93194fc895052a2eda9a5dcea8c8312b85427e774ddd5507797581df295cfe9ad3e5103fafd898cfd01a958f3d3b9ca66e97f834c79b2281615bcdddbf23ab5571773ed63131e24", 0xd88}], 0x3}, 0x40091) (async) sendmsg$kcm(r11, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="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", 0x15f}, {&(0x7f0000000240)="92c8308f50bba2da5ee082c3b8dfae49dd913523b57daa0c3360c48ac2dfb3c6966fcbe70c4b01053f175c14d0139d4521b8458fcc5c4950702163dabc8596fafcbf867a70f93838c529160935b2e8d215daa857d8d8af704772858ca50a7a49e610c807b96eae4617639b498aec97ad751e6a92", 0x74}, {&(0x7f0000001740)="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", 0xd88}], 0x3}, 0x40091) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="182000ffffff0000000000000000d7000010b80000009500050000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 983.708351ms ago: executing program 1 (id=3074): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map, 0xffffffffffffffff, 0x2c}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000435000c02600800000001827", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x100000000, 0x109, 0xfffffffffffffff9, 0x2, 0xc, 0x2800000000000009, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x24040010) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 982.075709ms ago: executing program 3 (id=3075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x1}, {}, {0x6}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0xfffffff3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000044}, 0x4) 848.850561ms ago: executing program 0 (id=3076): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xef, "f08889f2ee43a77cbed81e2530bb854e979dfe6233643a35d18b1f96f848041ae9fb5e6a05ad72743f687b589f590f583552fadf4f6372614e3643d46c285e56f17af6456c3b040c62ceb5288f164f5e4e5f8320c9030b37eab6182bab39bbe1f379a5bda33720949112fa65a99e98d04dc398cc59bdbced11b46743a1d556e62ee392240e73e9e0cb564a7adadaaeec4c2202dde0f24310edae417ea42852a718a9d34212998df9fd80af139eac2fdd3e98b5e041d676cb8215b5c32869614cb494e6603840a9b223433f66fe56a9c07cbd082aad54c43c68afec0676ce33d4dc86b7d530cb23b620f23b77a9fa2a"}, &(0x7f0000000000)=0xf7) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x4, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in={{0x2, 0x4e22, @local}}}, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000061104d000000000095000000000000002d6c27ca7647ab0d4d8cf8f517f3b7c3c0ccf4434d7b2cbd4b3a792a210506614a4d24797339180b1f18eb59c05960607c70101b05daa86aa1d9558871396db39f44ac28c3be456b7e9edb20b30308c31a949cb5d9eaf4a962b33e93e16bb181b03e387fd9c2a2e807dcf313adc7d245cea52b67cf1f1993cd4baa652713567f2294c9daa630f2e63289c9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 792.892669ms ago: executing program 3 (id=3077): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000001c0)={0x2, 0x4e24, @local}, 0x10) 685.866279ms ago: executing program 0 (id=3078): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c}, 0x20) r2 = socket(0x11, 0x800000002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b2c, &(0x7f0000000040)) 657.934151ms ago: executing program 3 (id=3079): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_macvtap\x00', 0x200}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000940), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={0x40, r2, 0x205, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x800) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 617.092935ms ago: executing program 4 (id=3080): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01020000010000ecffff0300260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xc0e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xffffc5e1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x64}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000340)=""/42, 0x2a, 0x0, &(0x7f0000000380)=""/191, 0xbf}}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000e8000000000000002900000004000000"], 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@call={0x85, 0x0, 0x0, 0xcc}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x10000, 0x61, &(0x7f0000000240)=""/97, 0x41000, 0x60, '\x00', r6, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x14a8}, 0x10, r7, 0xffffffffffffffff, 0x8, 0x0, &(0x7f00000004c0)=[{0x3, 0x2, 0x6, 0x8}, {0x5, 0x5, 0x8, 0xd}, {0x4, 0x1, 0x5, 0x9}, {0x5, 0x5, 0xb, 0x6}, {0x2, 0x4, 0x8, 0x3}, {0x3, 0x4, 0xe, 0x2}, {0x5, 0x1, 0x7, 0xa}, {0x2, 0x5, 0xe, 0x9}], 0x10, 0x3}, 0x94) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x4) 565.625481ms ago: executing program 0 (id=3081): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b2c, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001bb801dfa78cdadc94ba9a755b2bb9e77883dd8246dd315289373bc22fc763331c254effa94082d820fad8fad09ba0f5bdfb3d34d5ca", @ANYRES16=r3, @ANYBLOB="040029bd7000ffdbdf25040000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$inet6(0xa, 0x3, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000000980)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000043) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e22, 0x2000000, @private1}, 0x1c) 347.678001ms ago: executing program 3 (id=3082): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "c43cf3f93d83225a", "b4f6757f3dca139728ecd2e88b7fc0b0", "4ae1a5fd", "b9e13446520c6328"}, 0x28) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x7, 0x0, &(0x7f0000000040)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) r4 = socket(0x25, 0x2, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001b80)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, &(0x7f0000001c40)=0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=@base={0xf, 0x3, 0x5, 0x2, 0x3000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000001e40)={'gre0\x00', 0x0, 0x80, 0x8, 0x3, 0x0, {{0x2e, 0x4, 0x1, 0x25, 0xb8, 0x64, 0x0, 0x3, 0x2f, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x34, 0xa, 0x1, 0x9, [{@local, 0x5}, {@local, 0x2}, {@empty, 0x80000000}, {@loopback, 0xc}, {@remote, 0xff}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0xc, 0xcb, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x81}]}, @ssrr={0x89, 0x23, 0x8a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @broadcast, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @end, @noop, @cipso={0x86, 0x3d, 0x3, [{0x5, 0x12, "e765c6b61e8eeddb58801ec8b7b0a579"}, {0x6, 0x9, "8869595d2da174"}, {0x1, 0xf, "f27b5d0a315862989ac027c506"}, {0x5, 0x5, "3a72ee"}, {0x0, 0x8, "c48eed3dbcc6"}]}]}}}}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001f40)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="200000003800000000000000000000004a020000", @ANYRES32=r6, @ANYBLOB="0200"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="04000000010000000000000000000000000000005e46000000000000"], 0x50) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000003c0)={r10, 0xcb}, 0x8) sendmmsg$inet_sctp(r4, &(0x7f0000001d00)=[{&(0x7f0000000180)=@in6={0xa, 0x4e24, 0x8e, @mcast1, 0x3ff}, 0x1c, &(0x7f00000001c0)}, {&(0x7f0000000240)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000280)="a6ab25fb3b009eb6adc3f2782acf3eed3e2c3a52cc1702dc0b095ad27c04b6f36a0c7c363b0dcfe293bb63d6bb3272c1d34eeaa69b53e4", 0x37}, {&(0x7f0000000440)="b7b1ea15a6256be531e526050bc855117d35bca73b755e8eda448d93dcb7e17e262748a4a3518284ec05d4b2dd1b24f24e1ad267aee4de5bfcccb55aa43fd027cc545bebfd88615bab451b7cccd6cc1706104b4ac7b5d00d6fa2d0b0324b5de91a5cd18d43fd9a605b89f73a1d389cf5047697c02ce42b0551326f8a7b78b9149341c5a07b9b2fb0709afb66a38d48d0d0d3a8ca42f0449c774ccb958be51e5f3fa4eb99bff8ab7adf44af72ec5118de3ae97c2782775b90810708929a44", 0xbe}, {&(0x7f0000000500)="7f262b85389b6bf9016e615db971450eead2a26c3f60190d7c382783653b1737f325c41ef96a5c30ebba45a84c98247f442ceff6e9808781cce9350ecd2b3860d88a19f4aa397e0e0a8b0601f6c46cc5ab57f956ffedfce106d8e23eed1b5fb8a6c5a1a4e2e3b0deca423b173a3bd08eb43bed5e1994db2d3ed9bb920db0865f85c1f7915756a2d9b9823e7ea9e725bf64ea03ad591462560fe3a61645c04c4c2288a14094b2f783cfbc9c3665dd9bfbcb64cef5837897f328cd43434ebd1d9a816d80706f7c12ec037b127da0c22212d5f667ac", 0xd4}, {&(0x7f0000000600)="4f3ffcbce59eaa1ab40494bb07690afc3969c96e3d13a648ec5392e58f37ec8e91983443a0825f835fdfafa9fd2c4d1a6bdd9ff1da2316ff013384b9d21e2d4c45072768b336ce159f29333b85cde54c58176397aff9f1560fed085eb743b1a08a7209466e9d364b60420e0e3e7b5204dea667ad2359ff4d8c1fe7df5db5c6e0adbaa44d3dc132cb383389f631fdaa13f81d067799ebb00dd8e375048fe30e1e02aae2", 0xa3}, {&(0x7f00000002c0)="4395a20ab8f2e0c8261011684ca99d25c8135d1bb733b864a54149750d67015d679e", 0x22}, {&(0x7f00000006c0)="9028193e45487c15ef6f6c573d8208cac3169f238d3b1162995417e404c34370071f7808659cc7dbab5e67400b376ce91c644eca78dfa25d20514ec78f776dc0f3f00dd266e86abcc993b2b6b02bff4e5b70d876799e0919fbb99afdc1a5bee0d5e22997471888d2517b3c7864f9f7a0dc8d28329f4cda671b69", 0x7a}, {&(0x7f0000000740)="40c7d3ff5502ce9ee7406ecbf6fb079fe947f3762cca695d9823adee7dce5931fbfb87c75662be90e539e4f697867b7035dc6a9185990cd40ce73801f1a2e0d3ccb34b6d18f921c0e21c1c0106ae0740b60bd5f6359117b78f30458adcd402e801fda894fdf93f3f09bdef8a90b046c3d9cefaafdc6150a8ddfb9e5a76c95e28ece835acdef1e3b34cd47b0e5dc6c92d492ea3d08f1616204c215f53dd8acb0fe448aa6ea6fa4f0157", 0xa9}, {&(0x7f0000000800)="d38fe872b8ff30cf21b45335a376836db80feea091f8637a73bbf1a43161e0dcc9397387f361716d4d04702876cb11d20e53fe02d2b3a18eef23cffa485ba650619736f88d0a8cd6595bc18b70e6cb15a0395912e56677104b093a1fa2c7ece5bb2cb64b7e362f7f760fa51ddde3fc536aa016bba37d02fbdf36", 0x7a}, {&(0x7f0000000880)="6191eb02241745848ee116ff42f14f29197c8578f709db4fe48667bed3b377b1acd8122408a1e207506c1e8b454567c80a85cf38d5c4a669e9465bc31bdd6fcff2c8f584ce2b12d5095b5fd8ae9ac9b112035d28c7fba706e8dd382b2e652e4e44a8c1b47616eb48d4c89362a5d2906ef021b9d08f910261d325d4ce3a290e3d5298f83e8e98a4f3594c3a52b51852ab3ac2659d16258a7d71f1119748c5659ef01f209381234cbc482b1cdf18fd3a193fc9e13931d74a316df29a878b4ab8a48bbb803e6591", 0xc6}], 0x9, &(0x7f0000000a40)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}}, @init={0x18, 0x84, 0x0, {0xff00, 0x401, 0x3, 0xf07}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @init={0x18, 0x84, 0x0, {0x6, 0x80, 0x9, 0x2}}], 0x80, 0x40000}, {&(0x7f0000000340)=@in6={0xa, 0x4e20, 0x9, @remote, 0xa}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000000b40)="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", 0x1000}], 0x1, &(0x7f0000001c80)=[@authinfo={0x18, 0x84, 0x6, {0x12}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0xb, 0x8, 0x73d7, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x3819, 0x80, 0x8000, 0xd69, 0x291, 0x2, 0x5, 0x4, r10}}], 0x68, 0x4000000}], 0x3, 0x20000010) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x64010100, 0x4e22, 0x2000003, 'sh\x00', 0x2f, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r13, 0x0, 0x485, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800402, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000002000), &(0x7f0000002040)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 232.602904ms ago: executing program 0 (id=3083): getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="f1577458c02d79a50050b8741a80e1146ab8817666b556780301cd34dfea7616463e1108e6b0e9bcfcd6e0d697937a81e93a968cb8c2171299945aca2b2c9060188c5a3870f345fe51358ddc5f156ae38ec9d6dd84473086d8f2b1b208f71aafe8b70649", 0x64, 0x1, &(0x7f0000000100)={0x11, 0x15, r0, 0x1, 0x80}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x3}, 0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0x7, '\x00', r0, r4, 0x4, 0x3, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2d80045dc1"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40890}, 0x24004000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f00000004c0)=0x2) r10 = socket$unix(0x1, 0x1, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000500)=@bpq0, 0x10) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000540)) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000580)={@private1, 0x35, r0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pK \x00'}, 0x20) poll(&(0x7f0000000680)=[{r10, 0x4}, {r10, 0xd2c5}, {r11, 0x4600}, {r9, 0x100}, {r2, 0x500}], 0x5, 0x40c) bind$bt_l2cap(r4, &(0x7f00000006c0)={0x1f, 0xfeff, @none, 0x8a}, 0xe) ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f0000000740)={0x0, @qipcrtr={0x2a, 0xffffffff, 0x4000}, @qipcrtr={0x2a, 0x1, 0x4001}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, 0xff80, 0x0, 0x0, 0x0, 0x9e, &(0x7f0000000700)='syz_tun\x00', 0x2, 0x1, 0x1000}) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x23, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xb5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='syzkaller\x00', 0xc2, 0x8, &(0x7f0000000980)=""/8, 0x41100, 0x44, '\x00', r0, 0x0, r4, 0x8, &(0x7f00000009c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a00)=[r11, r11, r3, r3], &(0x7f0000000a40)=[{0x1, 0x5, 0x0, 0xc}, {0x2, 0x1, 0x0, 0x1}, {0x0, 0x5, 0xc, 0x5}, {0x1, 0x4, 0x8, 0x1}, {0x3, 0x4, 0x9, 0x5}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f00000007c0)='mm_migrate_pages\x00', r12, 0x0, 0x2}, 0x18) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000bc0)="1e82d4374346564b3b73f08603b5da77473ee4ce38f2dd6aa0d8107b8bc103fd3ec1b1214679602a976b6e4d8e849a36e9727e544710e719c480f4630d2b97d22fdb1c78522172aca9938eb902424f451498c31caa750f441e439f52a57ec8201356afbce10b87d2f33bc8df92887c0bfa885c5a82e7be626be9c66199d4230e6b08f56531693e923fd98a8e0a4723a88a4c3e065030cb704562b4579f00f86cd520fe03cb985d9741c5107288cf6d5307c4c4cb345b24ff87ec2129238f40a4c648a39c88c9cb1cfe7206c15dcb43bb87", 0xd1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000cc0)={0x8, 'veth0_to_team\x00', {'syz_tun\x00'}, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000000f80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0x57, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x4, 0x13, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x78, &(0x7f0000000e00)=""/120, 0x40f00, 0x5e, '\x00', r7, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80)={0x5, 0x10, 0x4a4e, 0x1}, 0x10, r13, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000011c0)=[{0x1, 0x5, 0xb, 0x3}, {0x5, 0x2, 0x2, 0xc}]}, 0x94) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f00000012c0)={0x6, 'veth0_vlan\x00', {0x3}}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000001300)={'batadv_slave_0\x00', @broadcast}) 227.492607ms ago: executing program 4 (id=3084): r0 = socket$inet6(0xa, 0x2, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x7, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0x0, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x0, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x80000008, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xd, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 5.917517ms ago: executing program 3 (id=3085): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x40080) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fddbdf2531000000080001002800000008000300005991867ce3f0f77cb5850cafdac8a342a869e41c74c5793f41b0030b9c814ddea8df97c5e743aae7e1680ae19faeb790e0dd0cbbb9f98cf7712c8266cadacc986cce037f87e5d7471f31c954fc2f85917ba68eb0ec9d34aec1cbbe", @ANYRES32=r3, @ANYBLOB="0c009900070000002100000008005200", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x4800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r4], 0x7c}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x84840}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r15, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x810) 0s ago: executing program 0 (id=3086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x10}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfffb, 0x591679f83cc10a4a}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) kernel console output (not intermixed with test programs): rocess `syz.4.744'. [ 140.676122][ T8755] team0: Failed to send port change of device 0! via netlink (err -105) [ 140.728630][ T8755] team0: Failed to send options change via netlink (err -105) [ 140.748470][ T8755] team0: Failed to send port change of device 0! via netlink (err -105) [ 140.765339][ T8755] team0: Port device 0! removed [ 140.802981][ T8755] !: entered promiscuous mode [ 140.834050][ T8755] bond0: (slave 0!): Enslaving as an active interface with an up link [ 140.875028][ T8782] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 141.082815][ T8789] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 141.134549][ T8788] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 141.252961][ T8797] netlink: 224 bytes leftover after parsing attributes in process `syz.2.752'. [ 141.253927][ T8792] bond2: (slave bridge2): making interface the new active one [ 141.268337][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 141.286996][ T8792] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 141.427005][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 142.558208][ T8871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.687185][ T8871] bond0: (slave rose0): Enslaving as an active interface with an up link [ 142.728147][ T8875] ip6gre1: entered promiscuous mode [ 142.901425][ T8891] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 143.254276][ T8864] IPVS: nq: FWM 3 0x00000003 - no destination available [ 143.852532][ T8934] tipc: Enabled bearer , priority 0 [ 143.885511][ T8934] syzkaller0: entered promiscuous mode [ 143.926471][ T8934] syzkaller0: entered allmulticast mode [ 144.071685][ T8948] tipc: Resetting bearer [ 144.156437][ T8933] tipc: Resetting bearer [ 144.265445][ T8933] tipc: Disabling bearer [ 144.561095][ T8951] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 144.861945][ T8996] __nla_validate_parse: 9 callbacks suppressed [ 144.861962][ T8996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.801'. [ 144.958877][ T8998] caif0: entered promiscuous mode [ 144.991863][ T8998] caif0: entered allmulticast mode [ 145.138988][ T9006] validate_nla: 1 callbacks suppressed [ 145.139007][ T9006] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 145.549524][ T9027] tap0: tun_chr_ioctl cmd 2148553947 [ 145.801650][ T9036] netlink: 'syz.1.810': attribute type 1 has an invalid length. [ 145.879198][ T9043] veth0: entered promiscuous mode [ 145.892344][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 146.737243][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 146.749857][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'. [ 146.770931][ T9096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.824'. [ 146.797457][ T9096] netlink: 'syz.1.824': attribute type 27 has an invalid length. [ 147.299800][ T9119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.427890][ T9119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.537667][ T9119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.553477][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 147.567899][ T9129] netlink: 176 bytes leftover after parsing attributes in process `syz.0.834'. [ 147.579057][ T9129] netlink: 'syz.0.834': attribute type 5 has an invalid length. [ 147.588447][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 147.601454][ T9130] netlink: 'syz.3.833': attribute type 3 has an invalid length. [ 147.616320][ T9130] netlink: 766 bytes leftover after parsing attributes in process `syz.3.833'. [ 147.703862][ T9119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.879307][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 149.717231][ T7256] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.777322][ T1164] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.828438][ T1164] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.871278][ T7256] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.048713][ T9175] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 150.236944][ T9187] xt_hashlimit: size too large, truncated to 1048576 [ 150.267326][ T9188] netlink: 'syz.0.851': attribute type 12 has an invalid length. [ 150.304202][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 150.387158][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'. [ 150.407665][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 150.429487][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 150.463927][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 150.475135][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 150.486680][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 150.497905][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 150.520556][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 150.547889][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 150.621410][ T9208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.789590][ T9216] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 150.799950][ T9216] netlink: 'syz.2.860': attribute type 4 has an invalid length. [ 151.251117][ T9245] lo: Caught tx_queue_len zero misconfig [ 151.271143][ T9245] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 151.290823][ T9246] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 151.479898][ T9257] syzkaller0: entered promiscuous mode [ 151.485833][ T9257] syzkaller0: entered allmulticast mode [ 151.525125][ T9257] tipc: Enabled bearer , priority 0 [ 151.536442][ T9257] netlink: 'syz.1.875': attribute type 58 has an invalid length. [ 151.626562][ T9255] tipc: Resetting bearer [ 151.730100][ T9255] tipc: Disabling bearer [ 151.747168][ T9273] sctp: [Deprecated]: syz.0.879 (pid 9273) Use of int in max_burst socket option deprecated. [ 151.747168][ T9273] Use struct sctp_assoc_value instead [ 151.803350][ T9278] netlink: 'syz.2.880': attribute type 64 has an invalid length. [ 151.844038][ T9269] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 151.857828][ T9269] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 151.869523][ T9278] netlink: 'syz.2.880': attribute type 64 has an invalid length. [ 152.129362][ T9305] netlink: 'syz.4.887': attribute type 11 has an invalid length. [ 152.784547][ T9339] tipc: Enabled bearer , priority 0 [ 152.867918][ T12] tipc: Resetting bearer [ 152.884957][ T9327] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 152.897033][ T9326] tipc: Resetting bearer [ 154.637040][ T9326] tipc: Disabling bearer [ 154.810292][ T9378] x_tables: duplicate underflow at hook 1 [ 154.957514][ T9389] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.981400][ T9390] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 155.027119][ T9390] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 155.064071][ T9390] veth5: entered promiscuous mode [ 155.096570][ T9390] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 155.451708][ T9419] __nla_validate_parse: 38 callbacks suppressed [ 155.451726][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.919'. [ 155.525270][ T9423] netlink: 'syz.0.922': attribute type 12 has an invalid length. [ 155.543423][ T9423] batadv1: entered allmulticast mode [ 155.594138][ T9429] sctp: [Deprecated]: syz.0.922 (pid 9429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.594138][ T9429] Use struct sctp_sack_info instead [ 155.701803][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 155.739345][ T9436] netlink: 'syz.3.926': attribute type 64 has an invalid length. [ 155.769244][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.926'. [ 155.791891][ T9432] "syz.4.925" (9432) uses obsolete ecb(arc4) skcipher [ 156.069755][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.931'. [ 156.132231][ T9465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.931'. [ 156.276743][ T9469] openvswitch: netlink: Missing valid actions attribute. [ 156.284995][ T9469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.371196][ T9478] netlink: 2 bytes leftover after parsing attributes in process `syz.1.933'. [ 156.386674][ T9478] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 156.572208][ T9488] netlink: 'syz.4.938': attribute type 5 has an invalid length. [ 156.704090][ T9492] netlink: 'syz.4.941': attribute type 3 has an invalid length. [ 157.123952][ T30] audit: type=1800 audit(1763518181.670:2): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.942" name="memory.events" dev="tmpfs" ino=1031 res=0 errno=0 [ 157.362203][ T9529] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 157.432356][ T9531] netlink: 'syz.3.950': attribute type 13 has an invalid length. [ 157.490134][ T9531] gretap0: refused to change device tx_queue_len [ 157.498938][ T9531] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 157.503762][ T9540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.812145][ T9560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.957'. [ 157.943017][ T9566] netlink: 220 bytes leftover after parsing attributes in process `syz.4.958'. [ 157.966767][ T9566] netlink: 220 bytes leftover after parsing attributes in process `syz.4.958'. [ 157.985438][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'. [ 158.037195][ T9575] netlink: zone id is out of range [ 158.061007][ T9575] netlink: zone id is out of range [ 158.086748][ T9575] netlink: zone id is out of range [ 158.092780][ T9575] netlink: zone id is out of range [ 158.117705][ T9583] sock: sock_set_timeout: `syz.0.964' (pid 9583) tries to set negative timeout [ 158.156457][ T9587] netlink: 'syz.4.966': attribute type 4 has an invalid length. [ 158.728600][ T9619] bridge_slave_0: left allmulticast mode [ 158.742933][ T9619] bridge_slave_0: left promiscuous mode [ 158.765143][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.395964][ T9653] wlan0 speed is unknown, defaulting to 1000 [ 159.433904][ T9660] netlink: 'syz.3.988': attribute type 7 has an invalid length. [ 159.467921][ T9660] netlink: 'syz.3.988': attribute type 8 has an invalid length. [ 159.537914][ T9660] gretap0: entered promiscuous mode [ 159.556303][ T9660] batadv_slave_1: entered promiscuous mode [ 159.563090][ T9660] batadv_slave_1: left promiscuous mode [ 159.587798][ T9660] gretap0: left promiscuous mode [ 159.717530][ T9672] C: renamed from lo [ 160.805349][ T9726] __nla_validate_parse: 11 callbacks suppressed [ 160.805366][ T9726] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1000'. [ 160.852688][ T9731] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20004 [ 161.335330][ T9774] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 161.428034][ T9779] netlink: 'syz.4.1014': attribute type 23 has an invalid length. [ 161.758753][ T9802] sctp: [Deprecated]: syz.4.1020 (pid 9802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.758753][ T9802] Use struct sctp_sack_info instead [ 161.810656][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1021'. [ 161.872941][ T9800] delete_channel: no stack [ 162.251048][ T9839] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:0 [ 162.333862][ T9831] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.492841][ T9831] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.678012][ T9831] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.782250][ T9859] netlink: 'syz.2.1037': attribute type 1 has an invalid length. [ 162.795302][ T9859] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1037'. [ 162.856525][ T9831] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.927868][ T9864] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1039'. [ 163.092518][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.095338][ T9872] net_ratelimit: 33 callbacks suppressed [ 163.095356][ T9872] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 163.118765][ T9873] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1043'. [ 163.142605][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.189108][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.253086][ T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.427501][ T9891] netlink: 'syz.4.1048': attribute type 13 has an invalid length. [ 163.505864][ T9891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.552507][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 163.563099][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 163.855338][ T9917] xt_cgroup: invalid path, errno=-2 [ 163.897566][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 163.909086][ T9921] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1059'. [ 163.922216][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 164.482725][ T9971] tipc: Enabled bearer , priority 0 [ 164.514375][ T9967] tipc: Enabling of bearer rejected, already enabled [ 164.527468][ T9971] syzkaller0: entered promiscuous mode [ 164.533601][ T9971] syzkaller0: entered allmulticast mode [ 164.626689][ T9978] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.635277][ T9971] tipc: Resetting bearer [ 164.664400][ T9966] tipc: Resetting bearer [ 164.712632][ T9966] tipc: Disabling bearer [ 164.926120][ T9997] netlink: 'syz.2.1079': attribute type 83 has an invalid length. [ 165.108067][T10009] netlink: 'syz.0.1085': attribute type 1 has an invalid length. [ 165.163556][T10009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.282978][T10009] bond0: (slave veth7): Enslaving as an active interface with a down link [ 165.354440][ T9997] infiniband syz1: set down [ 165.362492][ T9997] infiniband syz1: added ipvlan0 [ 165.423761][ T9997] RDS/IB: syz1: added [ 165.429130][ T9997] smc: adding ib device syz1 with port count 1 [ 165.436228][T10029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.436810][ T9997] smc: ib device syz1 port 1 has no pnetid [ 165.451836][T10021] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 165.470401][T10034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.621390][T10040] netlink: 'syz.0.1093': attribute type 12 has an invalid length. [ 165.683661][T10044] netlink: 'syz.4.1096': attribute type 1 has an invalid length. [ 165.866751][T10052] __nla_validate_parse: 5 callbacks suppressed [ 165.866774][T10052] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1099'. [ 165.980685][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 166.022053][T10054] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1100'. [ 166.404503][T10078] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 166.414360][T10079] IPVS: ip_vs_add_dest(): server weight less than zero [ 166.909989][T10095] netlink: 'syz.4.1113': attribute type 1 has an invalid length. [ 166.921981][T10095] netlink: 359 bytes leftover after parsing attributes in process `syz.4.1113'. [ 166.991400][T10097] pim6reg1: entered promiscuous mode [ 167.000470][T10097] pim6reg1: entered allmulticast mode [ 167.135507][T10054] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 167.239298][T10103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1115'. [ 167.273846][T10105] bridge_slave_0: left allmulticast mode [ 167.287912][T10105] bridge_slave_0: left promiscuous mode [ 167.307110][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.320324][T10105] bridge_slave_1: left promiscuous mode [ 167.329464][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.340245][T10113] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1115'. [ 167.362874][T10105] bond0: (slave veth0_to_bond): Releasing active interface [ 167.379892][T10105] team0: Port device team_slave_0 removed [ 167.389162][T10105] team0: Port device team_slave_1 removed [ 167.399532][T10105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.442104][T10105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.451219][T10105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.663828][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 167.663828][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 167.663852][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1126'. [ 167.705042][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 168.041602][T10168] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 168.184899][T10181] netlink: 'syz.1.1138': attribute type 1 has an invalid length. [ 168.192742][T10171] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.193666][T10181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.208951][T10171] bond3: (slave bond4): making interface the new active one [ 168.219052][T10171] bond3: (slave bond4): Enslaving as an active interface with an up link [ 168.230060][T10173] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 168.714217][T10211] vlan2: entered allmulticast mode [ 169.161095][T10227] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 169.174245][T10227] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 169.185164][T10227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.748039][T10253] syzkaller1: entered promiscuous mode [ 169.765044][T10253] syzkaller1: entered allmulticast mode [ 170.111742][T10271] sctp: [Deprecated]: syz.2.1160 (pid 10271) Use of int in max_burst socket option. [ 170.111742][T10271] Use struct sctp_assoc_value instead [ 170.180642][T10276] bond5: Unable to set down delay as MII monitoring is disabled [ 170.200940][T10276] bond5 (unregistering): Released all slaves [ 170.299728][T10276] bond5: Unable to set down delay as MII monitoring is disabled [ 170.343497][T10276] bond5 (unregistering): Released all slaves [ 170.500079][T10276] bond5: Unable to set down delay as MII monitoring is disabled [ 170.512354][T10276] bond5 (unregistering): Released all slaves [ 170.538173][T10301] tipc: Enabling of bearer rejected, already enabled [ 170.577067][T10305] netlink: 'syz.4.1171': attribute type 2 has an invalid length. [ 170.621624][T10276] bond5: Unable to set down delay as MII monitoring is disabled [ 170.632252][T10276] bond5 (unregistering): Released all slaves [ 170.732542][T10314] netlink: 'syz.2.1170': attribute type 11 has an invalid length. [ 170.751657][T10276] bond5: Unable to set down delay as MII monitoring is disabled [ 170.764508][T10276] bond5 (unregistering): Released all slaves [ 170.806723][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.814449][T10314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.829208][T10314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.840014][T10314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.903916][T10276] bond5: Unable to set down delay as MII monitoring is disabled [ 170.921264][T10276] bond5 (unregistering): Released all slaves [ 170.950142][T10322] sit1: entered promiscuous mode [ 170.956028][T10322] sit1: entered allmulticast mode [ 170.964164][T10322] sctp: [Deprecated]: syz.3.1176 (pid 10322) Use of int in max_burst socket option deprecated. [ 170.964164][T10322] Use struct sctp_assoc_value instead [ 171.022765][T10326] netlink: 'syz.3.1177': attribute type 4 has an invalid length. [ 171.023255][T10325] netlink: 'syz.3.1177': attribute type 4 has an invalid length. [ 171.460362][T10354] __nla_validate_parse: 200 callbacks suppressed [ 171.460381][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1183'. [ 171.659176][T10370] xt_l2tp: unknown flags: 10 [ 171.772916][T10363] wlan0 speed is unknown, defaulting to 1000 [ 171.909505][T10380] netlink: 1920 bytes leftover after parsing attributes in process `syz.3.1194'. [ 171.935515][T10380] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 171.976677][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 172.619636][T10426] netlink: 'syz.2.1207': attribute type 8 has an invalid length. [ 172.681275][T10427] tipc: Enabled bearer , priority 0 [ 172.705233][T10427] syzkaller0: entered promiscuous mode [ 172.711522][T10427] syzkaller0: entered allmulticast mode [ 172.745140][T10431] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1208'. [ 172.784417][T10428] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 172.893270][T10436] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1210'. [ 172.920487][T10436] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1210'. [ 172.951790][T10428] tipc: Resetting bearer [ 172.970787][T10446] netlink: 'syz.4.1212': attribute type 1 has an invalid length. [ 173.007662][T10446] netlink: 'syz.4.1212': attribute type 11 has an invalid length. [ 173.035149][T10427] tipc: Resetting bearer [ 173.046993][T10446] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1212'. [ 173.071595][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 173.101447][T10427] tipc: Disabling bearer [ 173.183682][T10454] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 173.594211][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 173.604032][T10482] netlink: 'syz.3.1226': attribute type 2 has an invalid length. [ 173.641238][T10482] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 173.674957][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1227'. [ 173.743784][T10485] pim6reg527: entered allmulticast mode [ 173.832601][T10495] Cannot find del_set index 0 as target [ 173.885896][T10505] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 173.934443][T10505] bond5 (unregistering): Released all slaves [ 173.993598][T10513] ip6tnl1: entered promiscuous mode [ 174.000576][T10513] ip6tnl1: entered allmulticast mode [ 174.372599][T10540] syzkaller0: entered promiscuous mode [ 174.382780][T10540] syzkaller0: entered allmulticast mode [ 174.973613][T10581] bond6: entered promiscuous mode [ 175.007744][T10585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.018059][T10581] bond6: entered allmulticast mode [ 175.024116][T10581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.044802][T10579] netlink: 'syz.4.1253': attribute type 4 has an invalid length. [ 175.131314][T10584] netlink: 'syz.4.1253': attribute type 4 has an invalid length. [ 175.419171][T10609] pim6reg1: entered promiscuous mode [ 175.431312][T10609] pim6reg1: entered allmulticast mode [ 175.456509][T10613] SET target dimension over the limit! [ 175.579020][T10618] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 175.603099][T10618] bond2 (unregistering): Released all slaves [ 175.651317][T10627] IPVS: Unknown mcast interface: nicvf0 [ 175.817073][T10638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.271048][T10668] syzkaller0: entered promiscuous mode [ 176.292516][T10668] syzkaller0: entered allmulticast mode [ 176.527471][T10688] __nla_validate_parse: 57 callbacks suppressed [ 176.527489][T10688] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1286'. [ 176.768371][T10700] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1292'. [ 176.950176][T10714] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 177.159663][T10723] netlink: 'syz.3.1296': attribute type 6 has an invalid length. [ 177.199344][T10727] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 177.236811][T10723] syzkaller1: entered promiscuous mode [ 177.251410][T10723] syzkaller1: entered allmulticast mode [ 177.380533][T10738] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1301'. [ 177.639530][T10751] pim6reg: entered allmulticast mode [ 177.677420][T10751] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 177.796971][T10760] netlink: 'syz.1.1309': attribute type 4 has an invalid length. [ 177.864452][T10762] netlink: 'syz.2.1310': attribute type 13 has an invalid length. [ 177.896720][T10762] veth0_macvtap: left promiscuous mode [ 177.914512][T10762] macvtap0: entered allmulticast mode [ 177.953685][T10762] macvtap0: refused to change device tx_queue_len [ 178.041670][T10770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.128106][T10765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1306'. [ 178.272898][T10780] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1315'. [ 194.261581][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.122053][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 206.162426][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 206.179629][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 206.191265][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 206.191320][T10805] netlink: 'syz.4.1324': attribute type 24 has an invalid length. [ 206.216724][T10803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1322'. [ 206.224630][T10808] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 206.268428][T10802] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1324'. [ 206.300312][T10805] netlink: 'syz.4.1324': attribute type 24 has an invalid length. [ 206.328077][T10797] hsr_slave_0: left promiscuous mode [ 206.345943][T10797] hsr_slave_1: left promiscuous mode [ 206.423654][T10805] netlink: 'syz.4.1324': attribute type 24 has an invalid length. [ 206.461904][T10822] wlan0 speed is unknown, defaulting to 1000 [ 206.474891][T10802] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1324'. [ 206.526320][T10802] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1324'. [ 206.644766][T10802] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1324'. [ 206.661728][T10802] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1324'. [ 206.704182][T10805] netlink: 'syz.4.1324': attribute type 24 has an invalid length. [ 206.722795][T10805] netlink: 'syz.4.1324': attribute type 24 has an invalid length. [ 206.736063][T10805] netlink: 'syz.4.1324': attribute type 24 has an invalid length. [ 206.746795][T10805] netlink: 'syz.4.1324': attribute type 24 has an invalid length. [ 206.756810][T10805] netlink: 'syz.4.1324': attribute type 24 has an invalid length. [ 206.767362][T10805] netlink: 'syz.4.1324': attribute type 24 has an invalid length. [ 207.466375][T10861] ip6tnl0: Caught tx_queue_len zero misconfig [ 208.123826][T10865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.159074][T10865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.425224][ T7252] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.455981][ T7252] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 208.475102][ T1164] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.490390][ T1164] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 208.545307][ T1164] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.560368][ T1164] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 208.637245][ T1164] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.652938][ T1164] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 208.864822][T10916] tipc: Enabling of bearer rejected, failed to enable media [ 209.506581][T10960] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.811654][T10981] bridge_slave_1: left allmulticast mode [ 209.819747][T10981] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.835850][T10981] bridge_slave_0: left promiscuous mode [ 209.843175][T10981] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.886494][T10986] xt_TCPMSS: Only works on TCP SYN packets [ 210.695376][T11032] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.709322][T11032] bond0: (slave team0): Enslaving as an active interface with an up link [ 210.949954][T11055] unsupported nlmsg_type 40 [ 211.222752][T11071] __nla_validate_parse: 77 callbacks suppressed [ 211.222772][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 211.490851][T11098] x_tables: duplicate underflow at hook 2 [ 211.598591][T11107] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1406'. [ 211.621984][T11106] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1406'. [ 211.633801][T11109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1407'. [ 211.648685][T11109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1407'. [ 211.785186][T11124] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1412'. [ 211.811467][T11119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1411'. [ 211.852958][T11124] bond3: (slave gre0): Device is not bonding slave [ 211.858963][T11128] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1413'. [ 211.860873][T11124] bond3: option active_slave: invalid value (gre0) [ 211.881174][T11124] bond3 (unregistering): Released all slaves [ 211.904822][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 211.941422][T11124] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1412'. [ 212.001552][T11124] bond3: (slave gre0): Device is not bonding slave [ 212.010920][T11124] bond3: option active_slave: invalid value (gre0) [ 212.050658][T11135] validate_nla: 45 callbacks suppressed [ 212.050685][T11135] netlink: 'syz.4.1415': attribute type 1 has an invalid length. [ 212.133994][T11124] bond3 (unregistering): Released all slaves [ 212.191187][T11138] bond5: (slave gretap1): making interface the new active one [ 212.201328][T11138] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 212.253911][T11124] bond3: (slave gre0): Device is not bonding slave [ 212.265342][T11124] bond3: option active_slave: invalid value (gre0) [ 212.288740][T11124] bond3 (unregistering): Released all slaves [ 212.357369][T11139] pim6reg1: entered promiscuous mode [ 212.363662][T11139] pim6reg1: entered allmulticast mode [ 212.393301][T11148] wlan0 speed is unknown, defaulting to 1000 [ 212.496011][T11124] bond3: (slave gre0): Device is not bonding slave [ 212.517885][T11124] bond3: option active_slave: invalid value (gre0) [ 212.551401][T11155] netlink: 'syz.4.1421': attribute type 58 has an invalid length. [ 212.561923][T11124] bond3 (unregistering): Released all slaves [ 212.632479][T11156] hsr_slave_0: left promiscuous mode [ 212.642003][T11156] hsr_slave_1: left promiscuous mode [ 213.638763][T11227] netlink: 'syz.2.1440': attribute type 10 has an invalid length. [ 213.688082][T11223] bond0: (slave bond_slave_1): Releasing backup interface [ 213.698843][T11223] bond_slave_1 (unregistering): left promiscuous mode [ 213.749122][T11227] team0: Port device geneve0 added [ 213.875274][T11232] bridge0: port 1(ipvlan2) entered blocking state [ 213.882748][T11232] bridge0: port 1(ipvlan2) entered disabled state [ 213.892506][T11232] ipvlan2: entered allmulticast mode [ 213.898810][T11232] bridge0: entered allmulticast mode [ 213.907255][T11232] ipvlan2: left allmulticast mode [ 213.913282][T11232] bridge0: left allmulticast mode [ 213.990034][T11241] nbd: device at index 4 is going down [ 214.055647][T11241] tipc: Enabling of bearer rejected, failed to enable media [ 214.367875][T11256] 8021q: VLANs not supported on sit0 [ 215.210879][T11304] dvmrp6: entered allmulticast mode [ 215.482908][T10895] IPVS: starting estimator thread 0... [ 215.495649][T11320] netlink: 'syz.1.1466': attribute type 10 has an invalid length. [ 215.542706][T11326] netlink: 'syz.4.1468': attribute type 1 has an invalid length. [ 215.605870][T11319] IPVS: using max 35 ests per chain, 84000 per kthread [ 215.669790][T11326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.760990][T11336] gretap2: entered promiscuous mode [ 215.782625][T11336] bond6: (slave gretap2): making interface the new active one [ 215.830859][T11336] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 216.023860][T11356] tipc: New replicast peer: 255.255.255.255 [ 216.063769][T11356] tipc: Enabled bearer , priority 10 [ 216.239531][T11369] __nla_validate_parse: 20 callbacks suppressed [ 216.239547][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 216.348145][T11353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1475'. [ 216.393870][T11375] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 216.961737][T11408] netlink: 'syz.2.1489': attribute type 12 has an invalid length. [ 217.175616][T10886] tipc: Node number set to 1400545946 [ 217.187906][T11425] tipc: Enabled bearer , priority 0 [ 217.230490][T11425] syzkaller0: entered promiscuous mode [ 217.258843][T11425] syzkaller0: entered allmulticast mode [ 217.307457][T11425] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.399061][T11450] netlink: 'syz.4.1498': attribute type 9 has an invalid length. [ 217.435580][T11425] tipc: Resetting bearer [ 217.472941][T11423] tipc: Resetting bearer [ 217.492701][T11442] xt_recent: Unsupported userspace flags (000000b1) [ 217.544331][T11423] tipc: Disabling bearer [ 217.761131][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1505'. [ 218.784479][T11496] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1511'. [ 218.817646][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 218.845419][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'. [ 218.845538][T11502] bridge0: entered allmulticast mode [ 219.014124][T11519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1519'. [ 219.025222][T11519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.082077][T11523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1519'. [ 219.124828][T11525] netlink: 'syz.3.1521': attribute type 1 has an invalid length. [ 219.242301][T11525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.337774][T11538] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.352713][T11547] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 219.372480][T11538] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 219.401761][T11538] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 219.464098][T11546] syzkaller0: entered promiscuous mode [ 219.474896][T11546] syzkaller0: entered allmulticast mode [ 219.525370][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1531'. [ 219.559437][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1531'. [ 219.710201][T11563] netlink: 'syz.3.1532': attribute type 2 has an invalid length. [ 220.033902][T11582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.538228][T11617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.778126][T11628] geneve3: entered promiscuous mode [ 220.784509][T11628] geneve3: entered allmulticast mode [ 221.283271][T11667] netlink: 'syz.2.1566': attribute type 10 has an invalid length. [ 221.352617][T11667] bond0: (slave ÿ): Opening slave failed [ 221.572230][T11689] netlink: 'syz.2.1575': attribute type 29 has an invalid length. [ 221.585336][T11689] netlink: 'syz.2.1575': attribute type 29 has an invalid length. [ 221.619595][T11689] netlink: 'syz.2.1575': attribute type 29 has an invalid length. [ 221.653905][T11689] netlink: 'syz.2.1575': attribute type 29 has an invalid length. [ 221.738127][T11702] netlink: 'syz.1.1579': attribute type 2 has an invalid length. [ 221.864016][T11706] __nla_validate_parse: 6 callbacks suppressed [ 221.864041][T11706] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1581'. [ 221.892427][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'. [ 221.906146][T11710] xt_addrtype: ipv6 does not support BROADCAST matching [ 221.906330][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 221.916631][T11710] netlink: 'syz.0.1583': attribute type 25 has an invalid length. [ 221.994552][T11715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.017662][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1585'. [ 222.133805][T11729] xt_ecn: cannot match TCP bits for non-tcp packets [ 222.171224][T11725] lo: entered promiscuous mode [ 222.181908][T11725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.281473][T11731] syz_tun: entered allmulticast mode [ 222.299444][T11723] syz_tun: left allmulticast mode [ 222.471995][T11745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1591'. [ 222.506810][T11745] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 222.701185][T11762] validate_nla: 1 callbacks suppressed [ 222.701203][T11762] netlink: 'syz.1.1595': attribute type 23 has an invalid length. [ 223.349754][T11798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1606'. [ 223.768741][T11846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1617'. [ 223.878098][T11849] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1619'. [ 223.988315][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1621'. [ 224.127881][T11868] netlink: 'syz.2.1624': attribute type 3 has an invalid length. [ 224.159128][T11869] tipc: Enabled bearer , priority 0 [ 224.182895][T11869] syzkaller0: entered promiscuous mode [ 224.197650][T11869] syzkaller0: entered allmulticast mode [ 224.215571][T11869] tipc: Resetting bearer [ 224.238726][T11869] xt_l2tp: v2 sid > 0xffff: 1114112 [ 224.258229][T11866] tipc: Resetting bearer [ 224.291427][T11866] tipc: Disabling bearer [ 224.595143][T11900] bond0: Error: Cannot enslave bond to itself. [ 224.831964][T11923] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1638'. [ 225.243451][T11948] netlink: 'syz.2.1644': attribute type 1 has an invalid length. [ 225.366737][T11948] netlink: 'syz.2.1644': attribute type 30 has an invalid length. [ 225.409970][T11953] bond7: (slave bridge5): making interface the new active one [ 225.418974][T11953] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 225.432654][T11948] netlink: 'syz.2.1644': attribute type 30 has an invalid length. [ 225.736911][T11968] syzkaller0: entered promiscuous mode [ 225.742521][T11968] syzkaller0: entered allmulticast mode [ 227.391847][T11998] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 227.589098][T12016] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 227.718321][T12016] __nla_validate_parse: 4 callbacks suppressed [ 227.718338][T12016] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1660'. [ 227.732603][T12021] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.747721][T12021] bond7: (slave bond8): making interface the new active one [ 227.758546][T12021] bond7: (slave bond8): Enslaving as an active interface with an up link [ 227.803225][T12016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1660'. [ 227.865249][T12016] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.301622][T12066] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1673'. [ 228.310862][T12066] nbd: couldn't find a device at index 0 [ 228.323093][T12067] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1672'. [ 228.379085][T12071] netlink: 'syz.4.1674': attribute type 83 has an invalid length. [ 228.407433][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'. [ 228.448561][T12073] team1: entered promiscuous mode [ 228.463946][T12073] team1: entered allmulticast mode [ 228.536479][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 228.600716][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 228.909243][T12110] veth1_macvtap: left promiscuous mode [ 228.970984][T12113] openvswitch: netlink: Key type 16370 is out of range max 32 [ 229.088402][T12117] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1690'. [ 229.348123][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'. [ 229.638259][T12167] veth0: entered promiscuous mode [ 229.672682][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1701'. [ 229.770320][T12177] x_tables: duplicate entry at hook 1 [ 229.808451][T12174] netlink: 'syz.4.1704': attribute type 4 has an invalid length. [ 229.818699][T12175] netlink: 'syz.4.1704': attribute type 4 has an invalid length. [ 230.084198][T12195] netlink: 'syz.2.1708': attribute type 10 has an invalid length. [ 230.099081][T12194] tipc: Enabled bearer , priority 0 [ 230.121206][T12194] syzkaller0: entered promiscuous mode [ 230.132063][T12194] syzkaller0: entered allmulticast mode [ 230.158809][T12194] tipc: Resetting bearer [ 230.182316][T12193] tipc: Resetting bearer [ 230.189895][T12198] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 230.221274][T12193] tipc: Disabling bearer [ 230.253287][T12198] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 230.738249][T12237] netlink: 'syz.0.1721': attribute type 1 has an invalid length. [ 230.916768][T12247] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 230.975565][T12253] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.013865][T12253] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20002 [ 232.172704][T12327] GUP no longer grows the stack in syz.1.1746 (12327): 200000003000-20000000a000 (200000001000) [ 232.202243][T12327] CPU: 1 UID: 0 PID: 12327 Comm: syz.1.1746 Not tainted syzkaller #0 PREEMPT(full) [ 232.202269][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.202280][T12327] Call Trace: [ 232.202288][T12327] [ 232.202296][T12327] dump_stack_lvl+0x189/0x250 [ 232.202340][T12327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.202364][T12327] ? __pfx__printk+0x10/0x10 [ 232.202379][T12327] ? find_vma+0xe7/0x160 [ 232.202416][T12327] __get_user_pages+0x2470/0x2a00 [ 232.202444][T12327] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 232.202489][T12327] ? rcu_is_watching+0x15/0xb0 [ 232.202515][T12327] __gup_longterm_locked+0xde4/0x1660 [ 232.202544][T12327] ? try_grab_folio_fast+0x1bf/0x6a0 [ 232.202578][T12327] ? gup_fast_fallback+0x1b86/0x22d0 [ 232.202603][T12327] gup_fast_fallback+0x1d65/0x22d0 [ 232.202664][T12327] ? __pfx_gup_fast_fallback+0x10/0x10 [ 232.202684][T12327] ? __mutex_lock+0x335/0x1350 [ 232.202717][T12327] ? is_valid_gup_args+0x11f/0x200 [ 232.202742][T12327] ? get_user_pages_fast+0x4d/0xb0 [ 232.202767][T12327] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 232.202798][T12327] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 232.202816][T12327] ? wait_for_space+0x248/0x2d0 [ 232.202835][T12327] iov_iter_get_pages2+0x5e/0xa0 [ 232.202861][T12327] __se_sys_vmsplice+0x548/0x10d0 [ 232.202937][T12327] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 232.202956][T12327] ? bpf_send_signal_common+0x3b4/0x540 [ 232.203054][T12327] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 232.203096][T12327] ? bpf_trace_run2+0x322/0x4b0 [ 232.203161][T12327] ? rcu_is_watching+0x15/0xb0 [ 232.203192][T12327] do_syscall_64+0xfa/0xfa0 [ 232.203216][T12327] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.203241][T12327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.203261][T12327] ? clear_bhb_loop+0x60/0xb0 [ 232.203285][T12327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.203303][T12327] RIP: 0033:0x7fcb6838f6c9 [ 232.203333][T12327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.203349][T12327] RSP: 002b:00007fcb69179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 232.203375][T12327] RAX: ffffffffffffffda RBX: 00007fcb685e6090 RCX: 00007fcb6838f6c9 [ 232.203389][T12327] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f [ 232.203401][T12327] RBP: 00007fcb68411f91 R08: 0000000000000000 R09: 0000000000000000 [ 232.203414][T12327] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 232.203425][T12327] R13: 00007fcb685e6128 R14: 00007fcb685e6090 R15: 00007ffca9b0c738 [ 232.203457][T12327] [ 232.796326][T12348] __nla_validate_parse: 5 callbacks suppressed [ 232.796344][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 232.814794][T12348] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1754'. [ 232.993892][T12356] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 233.026364][T12359] vetè0_virt_wifi: renamed from lo [ 233.085577][T12360] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1758'. [ 233.117063][T12367] tipc: Enabled bearer , priority 0 [ 233.131526][T12367] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 233.222093][T12377] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1764'. [ 233.556825][T12399] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1769'. [ 233.656976][T12407] netlink: 'syz.3.1770': attribute type 18 has an invalid length. [ 233.700918][ T7252] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.729535][ T7252] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.765446][ T7252] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.805318][T12418] syzkaller0: entered promiscuous mode [ 233.811207][T12418] syzkaller0: entered allmulticast mode [ 233.820436][ T7252] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.842664][T12421] netlink: 'syz.4.1776': attribute type 1 has an invalid length. [ 233.867087][T12424] netlink: 'syz.4.1776': attribute type 1 has an invalid length. [ 233.885635][T12421] netlink: 16086 bytes leftover after parsing attributes in process `syz.4.1776'. [ 233.906837][T12424] netlink: 16086 bytes leftover after parsing attributes in process `syz.4.1776'. [ 234.058294][T12441] netlink: 'syz.4.1782': attribute type 5 has an invalid length. [ 234.246389][T10895] tipc: Node number set to 3758096386 [ 235.833014][T12481] netlink: zone id is out of range [ 235.843051][T12481] netlink: zone id is out of range [ 235.849000][T12481] netlink: zone id is out of range [ 235.856882][T12481] netlink: get zone limit has 4 unknown bytes [ 235.888637][T12481] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 235.993842][T12493] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 236.002259][T12493] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 236.098652][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 236.292357][T12521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1804'. [ 236.710763][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 236.809806][T12550] 8021q: VLANs not supported on tunl0 [ 237.132480][ T7252] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.175377][ T7252] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.184202][ T7252] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.225799][T12571] syzkaller0: entered promiscuous mode [ 237.231514][T12571] syzkaller0: entered allmulticast mode [ 237.243707][ T7252] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.322894][T12583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.556935][T12597] raw_sendmsg: syz.0.1826 forgot to set AF_INET. Fix it! [ 237.596258][T12597] netlink: 'syz.0.1826': attribute type 23 has an invalid length. [ 237.800795][T12613] xfrm3: entered allmulticast mode [ 237.830520][T12612] __nla_validate_parse: 8 callbacks suppressed [ 237.830668][T12612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1830'. [ 237.841097][T12616] tipc: Enabled bearer , priority 0 [ 237.868627][T12616] syzkaller0: entered promiscuous mode [ 237.874235][T12616] syzkaller0: entered allmulticast mode [ 237.914010][T12616] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 237.962576][T12615] tipc: Resetting bearer [ 238.015614][T12615] tipc: Disabling bearer [ 238.190236][T12638] pimreg: entered allmulticast mode [ 238.663202][T12664] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 238.696472][T12664] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 238.794344][T12673] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1845'. [ 238.897262][T12680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1846'. [ 238.950331][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'. [ 238.977358][T12685] sctp: [Deprecated]: syz.0.1849 (pid 12685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.977358][T12685] Use struct sctp_sack_info instead [ 238.978873][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 239.021754][T12691] netlink: 'syz.1.1851': attribute type 83 has an invalid length. [ 239.031550][T12690] netlink: 'syz.1.1851': attribute type 83 has an invalid length. [ 239.142960][T12697] SET target dimension over the limit! [ 239.240532][T12702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.313227][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 239.329921][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'. [ 239.455580][T12714] wlan0 speed is unknown, defaulting to 1000 [ 239.492631][T12717] ip6erspan0: entered promiscuous mode [ 239.499070][T12717] ip6erspan0: entered allmulticast mode [ 239.517108][T12719] syzkaller1: entered allmulticast mode [ 239.758725][T12727] syzkaller0: entered promiscuous mode [ 239.764376][T12727] syzkaller0: entered allmulticast mode [ 239.836685][T12732] netlink: 'syz.1.1864': attribute type 1 has an invalid length. [ 239.844457][T12732] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1864'. [ 239.917179][T12739] netlink: 'syz.2.1865': attribute type 30 has an invalid length. [ 239.962344][T12739] bond8: option arp_missed_max: invalid value (0) [ 239.970133][T12739] bond8: option arp_missed_max: allowed values 1 - 255 [ 239.983306][T12739] bond8 (unregistering): Released all slaves [ 240.018383][T12740] wlan0 speed is unknown, defaulting to 1000 [ 240.147147][T12748] netlink: 'syz.4.1868': attribute type 4 has an invalid length. [ 240.397631][T12757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1872'. [ 240.683381][T12769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1876'. [ 240.718007][T12765] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 241.249792][T12803] xt_hashlimit: invalid interval [ 241.891324][T12841] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 242.147512][T12864] netlink: 'syz.0.1906': attribute type 1 has an invalid length. [ 242.430931][T12887] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 242.598268][T12900] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 242.641261][T12900] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 242.677547][T12900] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 242.686263][T12900] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 243.000961][T12919] __nla_validate_parse: 14 callbacks suppressed [ 243.000981][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'. [ 243.025119][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'. [ 243.311360][T12891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.348201][T12891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.522697][ T1156] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.562685][ T1156] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.602715][ T1156] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.644560][ T1156] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.950715][T12942] syzkaller0: entered promiscuous mode [ 243.966111][T12942] syzkaller0: entered allmulticast mode [ 245.971750][T13001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1944'. [ 246.144289][T13014] validate_nla: 7 callbacks suppressed [ 246.144308][T13014] netlink: 'syz.4.1948': attribute type 1 has an invalid length. [ 246.181555][T13014] netlink: 'syz.4.1948': attribute type 7 has an invalid length. [ 246.199063][T13014] netlink: 'syz.4.1948': attribute type 8 has an invalid length. [ 246.212266][T13014] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1948'. [ 246.227681][T13014] NCSI netlink: No device for ifindex 65584 [ 246.289990][T13017] netlink: 'syz.3.1949': attribute type 4 has an invalid length. [ 246.302281][T13026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1952'. [ 246.429136][T13037] ipt_ECN: cannot use operation on non-tcp rule [ 246.569336][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'. [ 246.633739][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 246.638176][T13056] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 246.668951][T13060] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1962'. [ 246.683518][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 246.849854][T13074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1967'. [ 247.266911][T13105] netlink: 'syz.2.1980': attribute type 2 has an invalid length. [ 247.371505][T13115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.803242][T13140] netlink: 'syz.0.1993': attribute type 10 has an invalid length. [ 247.823143][T13140] veth1_macvtap: left promiscuous mode [ 247.838201][T13140] team0: Device veth1_macvtap failed to register rx_handler [ 248.018299][T13155] __nla_validate_parse: 8 callbacks suppressed [ 248.018316][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 248.083059][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'. [ 248.131575][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2002'. [ 248.153511][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2002'. [ 248.442354][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 248.453206][T13187] netlink: 'syz.3.2007': attribute type 22 has an invalid length. [ 248.466226][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 248.538497][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2007'. [ 248.549151][T13187] netlink: 'syz.3.2007': attribute type 22 has an invalid length. [ 248.558342][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 248.849003][T13203] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2013'. [ 248.888886][T13212] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 248.973043][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2019'. [ 249.329173][T13252] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20003 [ 249.354233][T13252] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20004 [ 249.388811][T13253] netlink: 'syz.3.2029': attribute type 2 has an invalid length. [ 249.441177][T13258] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 249.455104][T13260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.590201][T13260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.672522][T13260] batadv0 (unregistering): left promiscuous mode [ 249.694289][T13268] syzkaller0: entered promiscuous mode [ 249.701652][T13268] syzkaller0: entered allmulticast mode [ 250.063873][T13303] netlink: 'syz.2.2044': attribute type 3 has an invalid length. [ 250.207894][T13309] dvmrp0: entered allmulticast mode [ 250.286810][T13316] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 250.308431][T13316] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 250.474077][T13324] bond10: (slave gretap1): making interface the new active one [ 250.488142][T13324] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 250.589697][T13332] IPv6: sit3: Disabled Multicast RS [ 250.614178][T13332] sit3: entered allmulticast mode [ 251.340681][T13378] syzkaller0: entered promiscuous mode [ 251.347681][T13378] syzkaller0: entered allmulticast mode [ 251.446204][T13386] bridge0: left allmulticast mode [ 251.558185][T13386] xt_CT: No such helper "pptp" [ 251.596679][T13399] validate_nla: 2 callbacks suppressed [ 251.596699][T13399] netlink: 'syz.0.2075': attribute type 10 has an invalid length. [ 251.669029][T13406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.715403][T13409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.752356][T13410] : entered promiscuous mode [ 251.796095][T13410] nbd: couldn't find a device at index 0 [ 251.916877][T13420] tipc: Failed to remove unknown binding: 66,1,1/3758096386:3703736391/3703736393 [ 252.397702][T13456] tap0: tun_chr_ioctl cmd 1074025676 [ 252.411463][T13456] tap0: owner set to 0 [ 252.630004][T13473] netlink: 'syz.3.2093': attribute type 62 has an invalid length. [ 252.818062][T13483] tipc: Enabled bearer , priority 0 [ 252.830180][T13486] syzkaller0: entered promiscuous mode [ 252.830998][T13485] SET target dimension over the limit! [ 252.839017][T13486] syzkaller0: entered allmulticast mode [ 252.901732][T13486] tipc: Resetting bearer [ 252.973434][T13486] tipc: Disabling bearer [ 253.106629][T13502] __nla_validate_parse: 22 callbacks suppressed [ 253.106773][T13502] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2103'. [ 253.213005][T13513] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2107'. [ 253.357111][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 253.377443][T13527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2113'. [ 253.440760][T13525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2112'. [ 253.544553][T13536] netlink: 'syz.3.2117': attribute type 4 has an invalid length. [ 253.589648][T13542] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2119'. [ 253.701271][T13553] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 253.725138][T13553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2122'. [ 253.747682][T13553] IPVS: Error connecting to the multicast addr [ 253.775956][T13557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2122'. [ 253.797381][T13557] IPVS: Error connecting to the multicast addr [ 253.807779][T13556] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 253.828195][T13559] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2124'. [ 253.943911][T13561] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2126'. [ 254.025087][T13566] netlink: 'syz.2.2126': attribute type 13 has an invalid length. [ 254.190471][T13588] ip6_vti0: entered allmulticast mode [ 254.463443][T13606] syzkaller1: entered promiscuous mode [ 254.475091][T13606] syzkaller1: entered allmulticast mode [ 255.144371][T13655] Cannot find map_set index 0 as target [ 255.698735][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.786157][T13686] atomic_op ffff888077cb6998 conn xmit_atomic 0000000000000000 [ 256.690313][T13735] tipc: Enabling of bearer rejected, already enabled [ 256.723693][T13735] syzkaller0: mtu less than device minimum [ 257.168395][T13761] bond4: option lp_interval: invalid value (0) [ 257.176268][T13761] bond4: option lp_interval: allowed values 1 - 2147483647 [ 257.190822][T13761] bond4 (unregistering): Released all slaves [ 257.631909][T13797] bridge0: port 1(batadv1) entered blocking state [ 257.639537][T13797] bridge0: port 1(batadv1) entered disabled state [ 257.648431][T13797] batadv1: entered allmulticast mode [ 257.656573][T13797] batadv1: entered promiscuous mode [ 257.759043][T13812] tipc: Enabling of bearer rejected, failed to enable media [ 257.777249][T13815] netlink: 'syz.3.2199': attribute type 3 has an invalid length. [ 257.873280][T13823] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 258.003044][T13831] tipc: New replicast peer: 255.255.255.255 [ 258.010973][T13831] tipc: Enabled bearer , priority 10 [ 258.020951][T13831] xt_bpf: check failed: parse error [ 258.135300][ T1156] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 258.146737][ T1156] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 258.259086][T13841] __nla_validate_parse: 11 callbacks suppressed [ 258.259106][T13841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2208'. [ 258.284471][T13841] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2208'. [ 258.363309][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2210'. [ 258.828116][T13871] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2218'. [ 258.842988][T13872] netlink: 'syz.2.2217': attribute type 1 has an invalid length. [ 258.852912][T13872] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2217'. [ 258.989918][T13882] sch_fq: defrate 0 ignored. [ 259.007886][ T24] tipc: Node number set to 3972797876 [ 259.056172][T13885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.067517][T13884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2222'. [ 259.393752][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 259.496198][T13911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 259.508051][T13911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 259.519097][T13911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2229'. [ 259.703185][T13921] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 259.913571][T13929] netlink: 'syz.0.2233': attribute type 23 has an invalid length. [ 260.071602][T13942] Cannot find set identified by id 0 to match [ 260.286840][T13962] netlink: 'syz.3.2242': attribute type 11 has an invalid length. [ 260.300380][T13962] netlink: 'syz.3.2242': attribute type 11 has an invalid length. [ 261.049553][T13978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.109376][T13978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.614052][T11399] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.628321][T11399] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.652117][T11399] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.672488][T11399] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.755438][T11399] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.784323][T11399] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.835349][T11399] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.843945][T11399] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.089567][T14055] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 262.329165][T14074] TC_ACT_REPEAT abuse ? [ 262.468596][T14080] syzkaller0: entered promiscuous mode [ 262.478458][T14080] syzkaller0: entered allmulticast mode [ 262.673428][T14103] x_tables: duplicate underflow at hook 2 [ 264.283329][T14095] veth0: entered promiscuous mode [ 264.343241][T14094] veth0: left promiscuous mode [ 264.516360][T14128] ip6t_srh: unknown srh match flags 5F28 [ 264.688428][T14144] netlink: 'syz.0.2291': attribute type 29 has an invalid length. [ 264.744333][T14141] pim6reg527: entered allmulticast mode [ 264.756724][T14141] __nla_validate_parse: 108 callbacks suppressed [ 264.756743][T14141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2292'. [ 264.880801][T14157] netlink: 'syz.0.2291': attribute type 29 has an invalid length. [ 264.936396][T14159] netlink: 'syz.1.2297': attribute type 6 has an invalid length. [ 264.977267][T14159] netlink: 'syz.1.2297': attribute type 6 has an invalid length. [ 264.989401][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 265.001013][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 265.013477][T14162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 265.276268][T14182] netlink: 'syz.1.2303': attribute type 11 has an invalid length. [ 265.295371][T14182] netlink: 'syz.1.2303': attribute type 11 has an invalid length. [ 265.303685][T14182] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2303'. [ 265.527579][T14200] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2307'. [ 265.841094][T14214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'. [ 265.997673][T14227] netlink: 'syz.2.2314': attribute type 2 has an invalid length. [ 266.012263][T14227] netlink: 'syz.2.2314': attribute type 11 has an invalid length. [ 266.035786][T14227] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2314'. [ 266.186343][T14221] netlink: 'syz.2.2314': attribute type 10 has an invalid length. [ 266.289770][T14221] bond0: (slave ÿ): Opening slave failed [ 266.844383][T14268] netlink: 'syz.1.2324': attribute type 5 has an invalid length. [ 267.005419][T14281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2328'. [ 267.016432][T14281] netlink: 'syz.1.2328': attribute type 7 has an invalid length. [ 267.026791][T14281] netlink: 'syz.1.2328': attribute type 8 has an invalid length. [ 267.026818][T14283] IPVS: nq: FWM 3 0x00000003 - no destination available [ 267.035128][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2328'. [ 267.160417][T14278] bridge_slave_1: entered allmulticast mode [ 268.852343][T14381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.942273][T14381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.025203][T14381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.122911][T14381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.151574][T14393] xt_l2tp: v2 tid > 0xffff: 1114244 [ 269.261910][ T1156] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.304927][ T7252] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.353465][ T7252] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.388444][ T7252] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.695653][T14427] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.730168][T14429] validate_nla: 1 callbacks suppressed [ 269.730187][T14429] netlink: 'syz.1.2377': attribute type 12 has an invalid length. [ 269.754030][T14429] netlink: 'syz.1.2377': attribute type 11 has an invalid length. [ 269.808477][T14431] __nla_validate_parse: 8 callbacks suppressed [ 269.808579][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2379'. [ 269.905295][T14431] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.949185][T14439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.958002][T14439] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 269.970856][T14439] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 270.149125][T14457] IPVS: set_ctl: invalid protocol: 59 172.30.0.5:20004 [ 270.212265][T14460] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 270.580419][T14476] bridge0: port 1(ipvlan3) entered blocking state [ 270.596354][T14476] bridge0: port 1(ipvlan3) entered disabled state [ 270.613311][T14476] ipvlan3: entered allmulticast mode [ 270.633355][T14476] bridge0: entered allmulticast mode [ 270.647797][T14476] ipvlan3: left allmulticast mode [ 270.656887][T14476] bridge0: left allmulticast mode [ 270.706079][T14480] bridge_slave_0: invalid flags given to default FDB implementation [ 270.949167][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'. [ 271.093917][T14511] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2398'. [ 271.220151][T14519] siw: device registration error -23 [ 271.223513][T14520] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2400'. [ 271.571054][T14548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 271.644926][T14547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2406'. [ 271.703508][T14557] tipc: Enabling of bearer rejected, media not registered [ 271.864061][T14567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2413'. [ 271.882758][T14567] netlink: 'syz.4.2413': attribute type 7 has an invalid length. [ 271.893053][T14567] netlink: 'syz.4.2413': attribute type 8 has an invalid length. [ 271.902403][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 272.152558][T14579] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2417'. [ 272.212400][T14582] netlink: 'syz.1.2418': attribute type 21 has an invalid length. [ 272.221032][T14582] netlink: 'syz.1.2418': attribute type 22 has an invalid length. [ 272.236743][T14582] netlink: 'syz.1.2418': attribute type 23 has an invalid length. [ 272.245208][T14582] netlink: 'syz.1.2418': attribute type 25 has an invalid length. [ 272.254423][T14582] netlink: 'syz.1.2418': attribute type 26 has an invalid length. [ 272.265946][T14582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2418'. [ 273.049761][T14630] netlink: 'syz.2.2432': attribute type 12 has an invalid length. [ 273.125555][T14630] bond8: option primary_reselect: invalid value (255) [ 273.153547][T14630] bond8 (unregistering): Released all slaves [ 273.667392][T14660] tipc: Enabling of bearer rejected, already enabled [ 273.677420][T14661] tipc: Enabling of bearer rejected, already enabled [ 273.692546][T14660] tipc: Resetting bearer [ 273.730974][T14665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.751718][T14665] netlink: zone id is out of range [ 273.764194][T14665] netlink: zone id is out of range [ 273.772335][T14665] netlink: zone id is out of range [ 273.786477][T14665] netlink: zone id is out of range [ 273.792527][T14665] netlink: zone id is out of range [ 273.800502][T14665] netlink: zone id is out of range [ 273.806808][T14665] netlink: zone id is out of range [ 273.812574][T14665] netlink: zone id is out of range [ 273.818546][T14665] netlink: zone id is out of range [ 274.673296][T14729] tipc: Enabled bearer , priority 0 [ 274.706883][T14729] syzkaller0: entered promiscuous mode [ 274.724948][T14729] syzkaller0: entered allmulticast mode [ 274.783900][T14729] tipc: Resetting bearer [ 275.245996][T14728] tipc: Resetting bearer [ 275.273227][T14728] tipc: Disabling bearer [ 275.509998][T14769] RDS: rds_bind could not find a transport for ::ffff:172.20.20.43, load rds_tcp or rds_rdma? [ 275.599549][T14775] sctp: [Deprecated]: syz.2.2480 (pid 14775) Use of int in max_burst socket option deprecated. [ 275.599549][T14775] Use struct sctp_assoc_value instead [ 275.872412][T14785] __nla_validate_parse: 15 callbacks suppressed [ 275.872433][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2482'. [ 275.931011][T14785] netlink: 'syz.2.2482': attribute type 21 has an invalid length. [ 276.258725][T14807] bond0: Error: Cannot enslave bond to itself. [ 276.452521][T14824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2494'. [ 276.534462][T14825] tipc: Enabled bearer , priority 0 [ 277.291199][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2514'. [ 277.341749][T14885] team1: entered promiscuous mode [ 277.348457][T14885] team1: entered allmulticast mode [ 277.863733][T14910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2521'. [ 277.949462][T14905] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2520'. [ 277.998122][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2520'. [ 278.187943][T14927] syzkaller0: entered promiscuous mode [ 278.219161][T14927] syzkaller0: entered allmulticast mode [ 278.366683][T14933] syzkaller0: entered promiscuous mode [ 278.378593][T14933] syzkaller0: entered allmulticast mode [ 278.433219][T14933] tipc: Enabled bearer , priority 0 [ 278.486417][T14932] tipc: Resetting bearer [ 278.586294][T14951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2531'. [ 280.153415][T14932] tipc: Disabling bearer [ 280.478967][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2542'. [ 280.541258][T14995] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2544'. [ 280.546994][T14992] xfrm1: entered promiscuous mode [ 280.601299][T14992] xfrm1: entered allmulticast mode [ 280.795564][T15013] netlink: 'syz.4.2547': attribute type 1 has an invalid length. [ 280.807907][T15013] netlink: 'syz.4.2547': attribute type 1 has an invalid length. [ 280.967426][T15029] macvlan2: entered promiscuous mode [ 280.973145][T15029] macvlan2: entered allmulticast mode [ 280.979545][T15029] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 281.086783][T15042] xt_l2tp: missing protocol rule (udp|l2tpip) [ 281.292674][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2560'. [ 281.302463][T15058] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2560'. [ 281.493310][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'. [ 281.526792][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'. [ 281.539747][T15081] net_ratelimit: 20 callbacks suppressed [ 281.539765][T15081] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 281.592603][T15078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2564'. [ 281.700399][T15088] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2570'. [ 281.739343][T15092] netlink: 'syz.2.2567': attribute type 10 has an invalid length. [ 281.768016][T15092] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2567'. [ 281.839853][T15091] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2568'. [ 281.862880][T15091] nbd: couldn't find a device at index 0 [ 282.114409][T15117] syzkaller1: entered promiscuous mode [ 282.122799][T15117] syzkaller1: entered allmulticast mode [ 282.132017][T15120] netlink: 'syz.4.2577': attribute type 1 has an invalid length. [ 282.181983][T15128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2580'. [ 282.197671][T15130] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2580'. [ 282.237858][T15120] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 282.259421][T15129] bond7: (slave geneve3): making interface the new active one [ 282.283373][T15129] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 282.294095][ T1156] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.319749][ T1156] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.336339][T15129] syz.4.2577 (15129) used greatest stack depth: 15416 bytes left [ 282.346128][ T1156] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.364753][ T1156] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 282.469963][T15144] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 282.501015][T15144] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 282.696027][T15159] netlink: 'syz.4.2588': attribute type 1 has an invalid length. [ 282.704044][T15159] netlink: 'syz.4.2588': attribute type 3 has an invalid length. [ 282.729199][T15159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.733194][T15159] netlink: 'syz.4.2588': attribute type 29 has an invalid length. [ 282.897814][T15167] bond8 (unregistering): Released all slaves [ 282.921957][T15173] bridge: RTM_NEWNEIGH with invalid ether address [ 282.963517][T15176] pim6reg1: entered promiscuous mode [ 282.992880][T15176] pim6reg1: entered allmulticast mode [ 283.193122][T15191] wlan0 speed is unknown, defaulting to 1000 [ 283.350081][T15205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.559782][T15222] openvswitch: netlink: Flow key attr not present in new flow. [ 283.807566][T15236] x_tables: duplicate underflow at hook 2 [ 283.900145][T15242] netlink: 'syz.4.2617': attribute type 16 has an invalid length. [ 283.934841][T15246] netlink: zone id is out of range [ 283.945968][T15246] netlink: zone id is out of range [ 283.953298][T15246] netlink: set zone limit has 8 unknown bytes [ 283.962571][T15246] netlink: 'syz.3.2619': attribute type 1 has an invalid length. [ 284.289216][T15271] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 284.423675][T15280] syzkaller1: entered promiscuous mode [ 284.435023][T15280] syzkaller1: entered allmulticast mode [ 286.059908][T15296] netlink: 'syz.2.2631': attribute type 1 has an invalid length. [ 286.313144][T15315] __nla_validate_parse: 13 callbacks suppressed [ 286.313161][T15315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2636'. [ 286.344908][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2636'. [ 286.367922][T15321] netlink: 'syz.1.2636': attribute type 25 has an invalid length. [ 286.480436][T15324] netlink: 'syz.2.2641': attribute type 1 has an invalid length. [ 286.504795][T15324] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2641'. [ 286.537931][T15324] NCSI netlink: No device for ifindex 0 [ 286.618059][T15326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2640'. [ 286.830695][T15339] netlink: 'syz.1.2644': attribute type 10 has an invalid length. [ 286.862814][T15347] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 286.877736][T15339] geneve1: entered promiscuous mode [ 286.887693][T15339] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 286.897052][T15347] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2646'. [ 286.928569][ T7253] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.942886][ T7253] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.978571][ T7253] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.024917][ T7253] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.110723][T15362] netlink: 'syz.0.2648': attribute type 5 has an invalid length. [ 287.144948][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'. [ 287.485327][T15371] nbd: must specify a device to reconfigure [ 287.581076][T15379] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2655'. [ 287.591111][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 287.719292][T15387] netlink: 9256 bytes leftover after parsing attributes in process `syz.0.2657'. [ 287.734162][T15387] openvswitch: netlink: Flow key attr not present in new flow. [ 287.753590][T15387] netlink: 9256 bytes leftover after parsing attributes in process `syz.0.2657'. [ 287.775377][T15387] openvswitch: netlink: Flow key attr not present in new flow. [ 287.790982][T15387] openvswitch: netlink: Flow key attr not present in new flow. [ 287.819181][T15387] openvswitch: netlink: Flow key attr not present in new flow. [ 287.827993][T15387] openvswitch: netlink: Flow key attr not present in new flow. [ 287.836941][T15387] openvswitch: netlink: Flow key attr not present in new flow. [ 287.869650][T15387] openvswitch: netlink: Flow key attr not present in new flow. [ 287.879699][T15387] openvswitch: netlink: Flow key attr not present in new flow. [ 287.888229][T15387] openvswitch: netlink: Flow key attr not present in new flow. [ 287.899956][T15387] openvswitch: netlink: Flow key attr not present in new flow. [ 288.298911][T15434] pim6reg1: entered promiscuous mode [ 288.313702][T15434] pim6reg1: entered allmulticast mode [ 288.605582][T15453] tipc: Enabled bearer , priority 0 [ 288.639182][T15455] veth0: entered promiscuous mode [ 288.719442][T15455] veth0 (unregistering): left promiscuous mode [ 288.749432][T15461] netlink: 'syz.4.2683': attribute type 39 has an invalid length. [ 288.767888][T15453] tipc: Disabling bearer [ 289.138112][T15498] netlink: 'syz.3.2690': attribute type 2 has an invalid length. [ 289.239128][T15505] netlink: 'syz.0.2692': attribute type 23 has an invalid length. [ 289.923779][T15552] x_tables: duplicate entry at hook 1 [ 290.473498][T15593] netlink: 'syz.0.2716': attribute type 1 has an invalid length. [ 290.853940][T15623] syzkaller1: entered promiscuous mode [ 290.864711][T15623] syzkaller1: entered allmulticast mode [ 290.939759][T15627] netlink: 'syz.0.2727': attribute type 11 has an invalid length. [ 291.231167][T15656] tipc: Enabled bearer , priority 0 [ 291.243775][T15656] syzkaller0: entered promiscuous mode [ 291.266259][T15656] syzkaller0: entered allmulticast mode [ 291.370278][T15666] __nla_validate_parse: 50 callbacks suppressed [ 291.370304][T15666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2740'. [ 291.393312][T15670] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2739'. [ 291.442682][T15663] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 291.457294][T15663] bond9 (unregistering): Released all slaves [ 291.485820][T15656] tipc: Resetting bearer [ 291.508316][T15656] tipc: Disabling bearer [ 291.565587][T15677] macvtap1: entered allmulticast mode [ 291.571101][T15677] veth0_macvtap: entered allmulticast mode [ 291.593013][T15681] netlink: 'syz.3.2743': attribute type 1 has an invalid length. [ 291.660044][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2743'. [ 291.705268][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2743'. [ 291.747856][T15681] bond11: entered promiscuous mode [ 291.758694][T15681] 8021q: adding VLAN 0 to HW filter on device bond11 [ 291.763571][T15691] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2747'. [ 291.786985][T15694] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2748'. [ 291.900469][T15701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2750'. [ 292.146309][T15718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2755'. [ 292.173421][T15718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2755'. [ 292.241089][T15723] netlink: 'syz.3.2757': attribute type 3 has an invalid length. [ 292.335296][T15733] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2761'. [ 292.370660][T15728] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 292.378421][T15728] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 292.523866][T15741] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 292.721683][T15762] bond4: option xmit_hash_policy: invalid value (64) [ 292.752720][T15762] bond4 (unregistering): Released all slaves [ 292.797230][T15768] netlink: 'syz.3.2772': attribute type 12 has an invalid length. [ 292.809376][T15768] netlink: 'syz.3.2772': attribute type 12 has an invalid length. [ 293.263666][T15788] syz.1.2776: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 293.335557][T15788] CPU: 0 UID: 0 PID: 15788 Comm: syz.1.2776 Not tainted syzkaller #0 PREEMPT(full) [ 293.335584][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.335595][T15788] Call Trace: [ 293.335603][T15788] [ 293.335611][T15788] dump_stack_lvl+0x189/0x250 [ 293.335642][T15788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.335665][T15788] ? __pfx__printk+0x10/0x10 [ 293.335683][T15788] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 293.335707][T15788] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 293.335732][T15788] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 293.335757][T15788] warn_alloc+0x214/0x310 [ 293.335788][T15788] ? __pfx_warn_alloc+0x10/0x10 [ 293.335821][T15788] ? __get_vm_area_node+0x28f/0x300 [ 293.335844][T15788] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 293.335866][T15788] __vmalloc_node_range_noprof+0x690/0x12d0 [ 293.335918][T15788] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 293.335941][T15788] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 293.335962][T15788] ? rcu_is_watching+0x15/0xb0 [ 293.335983][T15788] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 293.336001][T15788] __kvmalloc_node_noprof+0x674/0x910 [ 293.336025][T15788] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 293.336042][T15788] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 293.336064][T15788] ? kfree+0x19a/0x6d0 [ 293.336080][T15788] ? bpf_uprobe_multi_link_attach+0x527/0xee0 [ 293.336104][T15788] bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 293.336146][T15788] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 293.336162][T15788] ? __fget_files+0x2a/0x420 [ 293.336181][T15788] ? __fget_files+0x2a/0x420 [ 293.336195][T15788] ? __fget_files+0x2a/0x420 [ 293.336214][T15788] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 293.336240][T15788] link_create+0x673/0x850 [ 293.336263][T15788] __sys_bpf+0x6be/0x860 [ 293.336283][T15788] ? __pfx___sys_bpf+0x10/0x10 [ 293.336320][T15788] ? rcu_is_watching+0x15/0xb0 [ 293.336346][T15788] __x64_sys_bpf+0x7c/0x90 [ 293.336371][T15788] do_syscall_64+0xfa/0xfa0 [ 293.336394][T15788] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.336417][T15788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.336433][T15788] ? clear_bhb_loop+0x60/0xb0 [ 293.336454][T15788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.336470][T15788] RIP: 0033:0x7fcb6838f6c9 [ 293.336486][T15788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.336501][T15788] RSP: 002b:00007fcb6919a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.336520][T15788] RAX: ffffffffffffffda RBX: 00007fcb685e5fa0 RCX: 00007fcb6838f6c9 [ 293.336532][T15788] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 293.336544][T15788] RBP: 00007fcb68411f91 R08: 0000000000000000 R09: 0000000000000000 [ 293.336555][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.336565][T15788] R13: 00007fcb685e6038 R14: 00007fcb685e5fa0 R15: 00007ffca9b0c738 [ 293.336596][T15788] [ 293.336603][T15788] Mem-Info: [ 293.373172][T15805] netlink: 'syz.0.2781': attribute type 1 has an invalid length. [ 293.383282][T15788] active_anon:4735 inactive_anon:0 isolated_anon:0 [ 293.383282][T15788] active_file:3206 inactive_file:39954 isolated_file:0 [ 293.383282][T15788] unevictable:768 dirty:136 writeback:0 [ 293.383282][T15788] slab_reclaimable:12357 slab_unreclaimable:128702 [ 293.383282][T15788] mapped:29134 shmem:1357 pagetables:1086 [ 293.383282][T15788] sec_pagetables:0 bounce:0 [ 293.383282][T15788] kernel_misc_reclaimable:0 [ 293.383282][T15788] free:1296549 free_pcp:14451 free_cma:0 [ 293.671809][T15816] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 293.749545][T15788] Node 0 active_anon:19240kB inactive_anon:0kB active_file:12824kB inactive_file:159612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124936kB dirty:544kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14092kB pagetables:4700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 293.870882][T15788] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 293.911843][T15820] veth9: entered promiscuous mode [ 293.929179][T15788] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.939815][T15820] bond9: (slave veth9): Enslaving as a backup interface with a down link [ 293.983303][T15788] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 294.010291][T15788] Node 0 DMA32 free:1278160kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19008kB inactive_anon:0kB active_file:12824kB inactive_file:159620kB unevictable:1536kB writepending:544kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:37940kB local_pcp:18336kB free_cma:0kB [ 294.013485][ T1164] net_ratelimit: 24 callbacks suppressed [ 294.013505][ T1164] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 294.068853][T15823] 8021q: adding VLAN 0 to HW filter on device bond9 [ 294.073696][T15788] lowmem_reserve[]: 0 0 0 0 0 [ 294.087767][T15788] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.125307][T15788] lowmem_reserve[]: 0 0 0 0 0 [ 294.194712][T15788] Node 1 Normal free:3891152kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19520kB local_pcp:14784kB free_cma:0kB [ 294.201566][ T1164] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 294.262185][T15788] lowmem_reserve[]: 0 0 0 0 0 [ 294.285882][T15788] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 294.303086][T15788] Node 0 DMA32: 206*4kB (UME) 363*8kB (ME) 212*16kB (M) 392*32kB (UME) 120*64kB (UME) 39*128kB (UME) 73*256kB (UME) 53*512kB (UME) 38*1024kB (UM) 11*2048kB (UME) 278*4096kB (UM) = 1278288kB [ 294.335705][T15846] netlink: 'syz.3.2790': attribute type 11 has an invalid length. [ 294.353849][T15788] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 294.386341][T15788] Node 1 Normal: 196*4kB (UE) 56*8kB (UME) 40*16kB (UME) 106*32kB (UME) 19*64kB (UME) 7*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891152kB [ 294.428081][T15788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.443485][T15849] dvmrp0: left allmulticast mode [ 294.459161][T15788] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 294.472931][T15788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.492282][T15788] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 294.503043][T15788] 44515 total pagecache pages [ 294.509551][T15788] 0 pages in swap cache [ 294.521683][T15788] Free swap = 124996kB [ 294.526662][T15788] Total swap = 124996kB [ 294.531164][T15788] 2097051 pages RAM [ 294.536975][T15788] 0 pages HighMem/MovableOnly [ 294.542409][T15788] 424119 pages reserved [ 294.547867][T15788] 0 pages cma reserved [ 294.715992][T15864] netlink: 'syz.4.2793': attribute type 10 has an invalid length. [ 294.731813][T15863] netlink: 'syz.0.2795': attribute type 13 has an invalid length. [ 294.736278][T15864] netlink: 'syz.4.2793': attribute type 3 has an invalid length. [ 294.799834][ T7253] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.799909][T15863] netlink: 'syz.0.2795': attribute type 13 has an invalid length. [ 294.834975][ T7253] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.865927][ T7253] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.886567][ T7253] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.098750][T15877] IPv6: NLM_F_REPLACE set, but no existing node found! [ 295.294202][T15886] xt_TCPMSS: Only works on TCP SYN packets [ 295.557853][T15899] syzkaller0: entered promiscuous mode [ 295.563531][T15899] syzkaller0: entered allmulticast mode [ 296.203844][T15940] tipc: Can't bind to reserved service type 2 [ 296.225216][T15947] batman_adv: batadv0: Adding interface: dummy0 [ 296.233208][T15946] netlink: 'syz.3.2817': attribute type 4 has an invalid length. [ 296.256972][T15947] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.292466][T15947] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 296.437335][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.449234][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.458649][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.471160][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.485398][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.507316][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.516810][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.524427][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.536761][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.544524][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.580149][ T1156] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 296.706293][ T1156] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 296.738534][T15954] wlan0 speed is unknown, defaulting to 1000 [ 296.800939][ T1156] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 296.896956][T15978] __nla_validate_parse: 15 callbacks suppressed [ 296.896977][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'. [ 296.928519][ T1156] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 296.978637][T15978] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 297.039844][T15978] team1: entered promiscuous mode [ 297.055355][T15978] team1: entered allmulticast mode [ 297.081013][T15980] netlink: 512 bytes leftover after parsing attributes in process `syz.2.2826'. [ 297.242124][T15982] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2827'. [ 297.500218][ T1156] bond5 (unregistering): (slave gretap1): Releasing active interface [ 297.526226][ T1156] bond6 (unregistering): (slave gretap2): Releasing active interface [ 297.609397][ T1156] dvmrp6 (unregistering): left allmulticast mode [ 297.627208][ T1156] bond7 (unregistering): (slave geneve3): Releasing active interface [ 297.750723][ T1156] bond2 (unregistering): (slave bridge2): Releasing active interface [ 297.931193][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.944220][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.962717][ T1156] bond0 (unregistering): (slave team0): Releasing backup interface [ 297.976443][ T1156] bond0 (unregistering): Released all slaves [ 298.159438][ T1156] bond1 (unregistering): Released all slaves [ 298.172628][ T1156] bond2 (unregistering): Released all slaves [ 298.186805][ T1156] bond3 (unregistering): (slave bond4): Releasing backup interface [ 298.195911][ T1156] bond3 (unregistering): Released all slaves [ 298.299926][ T1156] bond4 (unregistering): Released all slaves [ 298.314787][ T1156] bond5 (unregistering): Released all slaves [ 298.418051][ T1156] bond6 (unregistering): Released all slaves [ 298.434410][ T1156] bond7 (unregistering): Released all slaves [ 298.448278][ T1156] bond8 (unregistering): Released all slaves [ 298.580829][ T5847] Bluetooth: hci4: command tx timeout [ 298.716480][ T1156] tipc: Disabling bearer [ 298.744056][ T1156] tipc: Left network mode [ 298.817086][T16041] bond0: Caught tx_queue_len zero misconfig [ 298.936861][T16049] x_tables: duplicate underflow at hook 2 [ 299.062109][T16037] syzkaller0: entered promiscuous mode [ 299.073829][T16037] syzkaller0: entered allmulticast mode [ 299.101902][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2844'. [ 299.507968][T15954] chnl_net:caif_netlink_parms(): no params data found [ 299.868820][T16093] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 299.893243][T15954] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.920945][T15954] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.929361][T15954] bridge_slave_0: entered allmulticast mode [ 299.938639][T15954] bridge_slave_0: entered promiscuous mode [ 299.963162][T15954] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.972509][T15954] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.980306][T15954] bridge_slave_1: entered allmulticast mode [ 299.989495][T15954] bridge_slave_1: entered promiscuous mode [ 300.008811][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.032516][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.096074][ T1156] pim6reg527 (unregistering): left allmulticast mode [ 300.143221][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 300.153271][T16111] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 300.550425][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 300.656418][ T5847] Bluetooth: hci4: command tx timeout [ 300.935697][ T1156] vcan0 (unregistering): left allmulticast mode [ 301.012675][T15954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.043417][T15954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.166667][T15954] team0: Port device team_slave_0 added [ 301.185700][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2865'. [ 301.221013][T15954] team0: Port device team_slave_1 added [ 301.329449][T15954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.337561][T15954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.395407][T15954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.410664][T15954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.420561][T15954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.464171][T16152] netlink: 'syz.3.2869': attribute type 83 has an invalid length. [ 301.481482][T15954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.761226][T16172] Cannot find set identified by id 0 to match [ 301.761432][T15954] hsr_slave_0: entered promiscuous mode [ 301.791346][T15954] hsr_slave_1: entered promiscuous mode [ 301.807876][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2877'. [ 301.866760][ T1156] IPVS: stop unused estimator thread 0... [ 301.924189][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'. [ 301.946618][T16178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'. [ 301.962145][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'. [ 301.977523][T16176] netlink: 'syz.1.2879': attribute type 8 has an invalid length. [ 301.986991][T16178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'. [ 301.998607][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'. [ 302.030123][T16178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'. [ 302.045297][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'. [ 302.068315][T16178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'. [ 302.087555][T16182] netlink: 'syz.0.2881': attribute type 13 has an invalid length. [ 302.098770][T16177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'. [ 302.113437][T16178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'. [ 302.166603][T16182] macvtap0: entered allmulticast mode [ 302.187480][T16182] macvtap0: refused to change device tx_queue_len [ 302.333024][T16192] syzkaller0: entered promiscuous mode [ 302.339128][T16192] syzkaller0: entered allmulticast mode [ 302.734842][ T5847] Bluetooth: hci4: command tx timeout [ 303.268722][T15954] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.292309][T15954] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.308291][T15954] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.323008][T16253] syzkaller0: entered promiscuous mode [ 303.335215][T16253] syzkaller0: entered allmulticast mode [ 303.352395][T15954] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.612906][T15954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.665752][T15954] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.713378][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.720920][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.758611][ T3581] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.766438][ T3581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.376488][T16313] netlink: 'syz.2.2915': attribute type 1 has an invalid length. [ 304.385656][T16313] netlink: 'syz.2.2915': attribute type 1 has an invalid length. [ 304.427453][T15954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.708453][T16323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.817195][ T5847] Bluetooth: hci4: command tx timeout [ 304.829073][T16342] openvswitch: netlink: IP tunnel dst address not specified [ 305.073943][T15954] veth0_vlan: entered promiscuous mode [ 305.092784][T15954] veth1_vlan: entered promiscuous mode [ 305.162140][T15954] veth0_macvtap: entered promiscuous mode [ 305.174044][T15954] veth1_macvtap: entered promiscuous mode [ 305.194327][T15954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.210986][T15954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.229814][ T7252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.239585][ T7252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.258915][ T7252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.272467][ T7252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.357627][T11399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.371330][T11399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.418879][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.427841][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.651651][T16390] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 305.901456][T16405] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 305.919316][T16405] netlink: 'syz.2.2938': attribute type 3 has an invalid length. [ 305.951611][T16405] NCSI netlink: No device for ifindex 813332851 [ 306.384835][T16437] netlink: 'syz.3.2948': attribute type 2 has an invalid length. [ 306.845130][T16457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.934052][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.955835][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.965170][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.986269][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.013316][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.037399][T11398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.111538][T16465] wlan0 speed is unknown, defaulting to 1000 [ 307.149721][T11398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.207427][T16474] macvtap1: entered promiscuous mode [ 307.213054][T16474] vlan0: entered promiscuous mode [ 307.239889][T16474] macvtap1: entered allmulticast mode [ 307.247465][T16474] vlan0: entered allmulticast mode [ 307.253282][T16474] veth0_vlan: entered allmulticast mode [ 307.296356][T11398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.417597][T11398] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.714349][T16498] netlink: 'syz.3.2967': attribute type 29 has an invalid length. [ 307.725395][T16498] __nla_validate_parse: 68 callbacks suppressed [ 307.725414][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2967'. [ 307.789293][T11398] batadv1: left allmulticast mode [ 307.793730][T16508] sctp: [Deprecated]: syz.4.2969 (pid 16508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.793730][T16508] Use struct sctp_sack_info instead [ 307.794388][T11398] batadv1: left promiscuous mode [ 307.817629][T11398] bridge0: port 1(batadv1) entered disabled state [ 307.938286][T11398] bond9 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 307.949629][T11398] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface [ 307.959087][T11398] bond9 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - fe:ab:d7:ee:40:b4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 308.629384][T11398] bond1 (unregistering): Released all slaves [ 308.736159][T11398] bond2 (unregistering): Released all slaves [ 308.749276][T11398] bond3 (unregistering): Released all slaves [ 308.853944][T11398] bond0 (unregistering): (slave veth7): Releasing active interface [ 308.863657][T11398] bond0 (unregistering): Released all slaves [ 308.876685][T11398] bond4 (unregistering): Released all slaves [ 308.889449][T11398] bond5 (unregistering): Released all slaves [ 308.903435][T11398] bond6 (unregistering): Released all slaves [ 309.015006][T11398] bond7 (unregistering): Released all slaves [ 309.027959][T11398] bond8 (unregistering): Released all slaves [ 309.054837][ T5847] Bluetooth: hci2: command tx timeout [ 309.139462][T11398] bond9 (unregistering): (slave veth9): Releasing backup interface [ 309.149458][T11398] bond9 (unregistering): Released all slaves [ 309.347191][T11398] tipc: Disabling bearer [ 309.352697][T11398] tipc: Left network mode [ 309.373263][T16465] chnl_net:caif_netlink_parms(): no params data found [ 309.498779][T11398] IPVS: stopping backup sync thread 8782 ... [ 309.789121][T16465] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.797545][T16465] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.807658][T16465] bridge_slave_0: entered allmulticast mode [ 309.818972][T16465] bridge_slave_0: entered promiscuous mode [ 309.858690][T16465] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.870437][T16465] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.879970][T16465] bridge_slave_1: entered allmulticast mode [ 309.892659][T16465] bridge_slave_1: entered promiscuous mode [ 310.007154][T16465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.026595][T16465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.060854][T16558] bridge: RTM_NEWNEIGH with invalid ether address [ 310.115999][T16465] team0: Port device team_slave_0 added [ 310.152400][T16465] team0: Port device team_slave_1 added [ 310.190752][T16465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.198807][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.227457][T16465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.241568][T16465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.249176][T16465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.277219][T16465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.450219][T16569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2983'. [ 310.464007][T16569] openvswitch: netlink: Flow key attr not present in new flow. [ 310.581239][T16582] IPv6: NLM_F_REPLACE set, but no existing node found! [ 310.585236][T16581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2987'. [ 310.653585][T11398] hsr_slave_0: left promiscuous mode [ 310.667742][T11398] hsr_slave_1: left promiscuous mode [ 310.687711][T11398] batman_adv: batadv0: Removing interface: dummy0 [ 310.784403][T11398] pimreg (unregistering): left allmulticast mode [ 311.135452][ T5847] Bluetooth: hci2: command tx timeout [ 311.502951][T16465] hsr_slave_0: entered promiscuous mode [ 311.513410][T16465] hsr_slave_1: entered promiscuous mode [ 311.521500][T16465] debugfs: 'hsr0' already exists in 'hsr' [ 311.528559][T16465] Cannot create hsr debugfs directory [ 311.727823][T16609] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 312.058156][T11398] IPVS: stop unused estimator thread 0... [ 312.673942][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3000'. [ 312.773374][T16465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.865087][T16465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.917430][T16465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.937474][T16465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.146897][T16465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.189354][T16465] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.218441][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.218644][ T5847] Bluetooth: hci2: command tx timeout [ 313.225692][ T7256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.360847][T16677] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3010'. [ 313.380636][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.388053][ T7256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.443746][T16465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.462569][T16465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.532665][T16680] vlan1: entered allmulticast mode [ 313.538507][T16680] bridge_slave_0: entered allmulticast mode [ 313.847233][T16465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.878785][T16686] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.3012'. [ 313.944432][T16689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.952866][T16465] veth0_vlan: entered promiscuous mode [ 313.968426][T16465] veth1_vlan: entered promiscuous mode [ 314.023549][T16465] veth0_macvtap: entered promiscuous mode [ 314.056450][T16465] veth1_macvtap: entered promiscuous mode [ 314.096974][T16465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.124376][T16465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.162985][T16693] bridge9: entered promiscuous mode [ 314.195327][T16693] bridge9: entered allmulticast mode [ 314.248986][T16695] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.265804][T16695] netlink: 'syz.2.3015': attribute type 58 has an invalid length. [ 314.274213][T16695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3015'. [ 314.324152][T11399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.333499][T11399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.389897][T11399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.427880][T11399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.555524][T16698] team0: Device gtp1 is of different type [ 314.640750][T11398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.654346][T11398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.729610][T16700] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3017'. [ 314.768951][ T7256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.780860][ T7256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.058597][T16718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3022'. [ 315.296431][ T5847] Bluetooth: hci2: command tx timeout [ 315.918440][T16749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3033'. [ 315.968221][ T7256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.984200][ T7256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.997503][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.015810][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.026102][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.037837][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.047008][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.079660][T16749] veth2: entered allmulticast mode [ 316.157209][T16754] syz.3.3034 (16754) used obsolete PPPIOCDETACH ioctl [ 316.222137][ T7256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.233902][ T7256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.273532][T16750] wlan0 speed is unknown, defaulting to 1000 [ 316.376457][ T7256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.400025][ T7256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.433473][T16762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3037'. [ 316.528036][ T7256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.540833][ T7256] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.780525][T16774] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3039'. [ 316.790211][T16774] ksmbd: Unknown IPC event: 3, ignore. [ 316.816465][T16781] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3041'. [ 316.839343][ T3004] tipc: Resetting bearer [ 316.916743][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3041'. [ 317.103061][ T7256] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 317.113138][ T7256] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 66:3f:bf:f1:74:34 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 317.139498][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.277660][T16642] Set syz1 is full, maxelem 65536 reached [ 317.288057][T16779] SET target dimension over the limit! [ 317.423738][ T7256] team0: Port device geneve0 removed [ 317.575832][ T7256] bond1 (unregistering): (slave bridge2): Releasing active interface [ 317.833461][ T7256] bond7 (unregistering): (slave bridge5): Releasing active interface [ 318.058341][ T7256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.069783][ T7256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.080977][ T7256] bond0 (unregistering): Released all slaves [ 318.093823][ T7256] bond1 (unregistering): Released all slaves [ 318.105713][ T5847] Bluetooth: hci3: command tx timeout [ 318.119839][ T7256] bond2 (unregistering): Released all slaves [ 318.132932][ T7256] bond3 (unregistering): Released all slaves [ 318.147694][ T7256] bond4 (unregistering): Released all slaves [ 318.161775][ T7256] bond5 (unregistering): (slave veth5): Releasing backup interface [ 318.172310][ T7256] bond5 (unregistering): Released all slaves [ 318.268137][ T7256] bond6 (unregistering): Released all slaves [ 318.280957][ T7256] bond7 (unregistering): Released all slaves [ 318.293306][ T7256] bond8 (unregistering): Released all slaves [ 318.742447][T16750] chnl_net:caif_netlink_parms(): no params data found [ 318.923163][T16750] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.939752][T16750] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.948699][T16750] bridge_slave_0: entered allmulticast mode [ 318.957388][T16750] bridge_slave_0: entered promiscuous mode [ 318.983630][T16750] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.005335][T16750] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.023148][T16750] bridge_slave_1: entered allmulticast mode [ 319.038106][T16750] bridge_slave_1: entered promiscuous mode [ 319.146898][T16848] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20001 [ 319.149678][T16750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.170963][T16750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.185005][T16849] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 319.299844][T16750] team0: Port device team_slave_0 added [ 319.310248][T16750] team0: Port device team_slave_1 added [ 319.385610][T16858] __nla_validate_parse: 1 callbacks suppressed [ 319.385626][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3061'. [ 319.387224][T16750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.418531][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3061'. [ 319.438589][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.500256][T16750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.514229][T16750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.539498][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.571901][T16750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.840916][T16750] hsr_slave_0: entered promiscuous mode [ 319.865806][T16750] hsr_slave_1: entered promiscuous mode [ 319.878488][T16750] debugfs: 'hsr0' already exists in 'hsr' [ 319.900078][T16750] Cannot create hsr debugfs directory [ 320.041742][T16884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3064'. [ 320.059310][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3069'. [ 320.068502][ T7256] : left promiscuous mode [ 320.177078][ T5847] Bluetooth: hci3: command 0x041b tx timeout [ 320.210219][T16896] netlink: 'syz.4.3070': attribute type 11 has an invalid length. [ 320.218630][T16896] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3070'. [ 320.219536][ T7256] tipc: Disabling bearer [ 320.233906][T16896] netlink: 'syz.4.3070': attribute type 11 has an invalid length. [ 320.250957][T16896] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3070'. [ 320.264362][ T7256] tipc: Left network mode [ 320.480744][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3075'. [ 320.490168][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3075'. [ 321.207480][T16937] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 321.386236][ T7256] vlan0: left allmulticast mode [ 321.391146][ T7256] veth0_vlan: left allmulticast mode [ 321.401281][T16949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3085'. [ 321.402025][ T7256] vlan0: left promiscuous mode [ 321.416298][ T7256] veth1_macvtap: left promiscuous mode [ 321.422404][ T7256] veth1_vlan: left promiscuous mode [ 321.428379][ T7256] veth0_vlan: left promiscuous mode [ 321.756783][ T7252] smc: removing ib device syz1 [ 321.992427][ T7256] team0 (unregistering): Port device team_slave_1 removed [ 322.030714][ T7256] team0 (unregistering): Port device team_slave_0 removed [ 322.257145][ T5843] Bluetooth: hci3: command 0x041b tx timeout [ 322.336153][ T6004] ================================================================== [ 322.344286][ T6004] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 322.353059][ T6004] Read of size 8 at addr ffff88803151e2e8 by task kworker/0:8/6004 [ 322.361034][ T6004] [ 322.363382][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 322.363399][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.363409][ T6004] Workqueue: events smc_ib_port_event_work [ 322.363444][ T6004] Call Trace: [ 322.363451][ T6004] [ 322.363458][ T6004] dump_stack_lvl+0x189/0x250 [ 322.363477][ T6004] ? rcu_is_watching+0x15/0xb0 [ 322.363492][ T6004] ? __kasan_check_byte+0x12/0x40 [ 322.363506][ T6004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.363522][ T6004] ? rcu_is_watching+0x15/0xb0 [ 322.363536][ T6004] ? lock_release+0x4b/0x3e0 [ 322.363552][ T6004] ? __virt_addr_valid+0x1c8/0x5c0 [ 322.363570][ T6004] ? __virt_addr_valid+0x4a5/0x5c0 [ 322.363587][ T6004] print_report+0xca/0x240 [ 322.363602][ T6004] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 322.363618][ T6004] kasan_report+0x118/0x150 [ 322.363632][ T6004] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 322.363650][ T6004] __ethtool_get_link_ksettings+0x6e/0x190 [ 322.363667][ T6004] ib_get_eth_speed+0x15e/0x7b0 [ 322.363686][ T6004] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 322.363705][ T6004] ? do_raw_spin_unlock+0x122/0x240 [ 322.363725][ T6004] rxe_query_port+0x93/0x3b0 [ 322.363741][ T6004] ib_query_port+0x170/0x830 [ 322.363760][ T6004] smc_ib_port_event_work+0x15a/0x940 [ 322.363780][ T6004] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.363799][ T6004] ? process_scheduled_works+0x9ef/0x17b0 [ 322.363813][ T6004] ? process_scheduled_works+0x9ef/0x17b0 [ 322.363832][ T6004] process_scheduled_works+0xae1/0x17b0 [ 322.363854][ T6004] ? __pfx_process_scheduled_works+0x10/0x10 [ 322.363873][ T6004] worker_thread+0x8a0/0xda0 [ 322.363887][ T6004] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 322.363906][ T6004] ? __kthread_parkme+0x7b/0x200 [ 322.363923][ T6004] kthread+0x711/0x8a0 [ 322.363939][ T6004] ? __pfx_worker_thread+0x10/0x10 [ 322.363952][ T6004] ? __pfx_kthread+0x10/0x10 [ 322.363969][ T6004] ? _raw_spin_unlock_irq+0x23/0x50 [ 322.363983][ T6004] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.363999][ T6004] ? __pfx_kthread+0x10/0x10 [ 322.364014][ T6004] ret_from_fork+0x4bc/0x870 [ 322.364028][ T6004] ? __pfx_ret_from_fork+0x10/0x10 [ 322.364043][ T6004] ? __switch_to_asm+0x39/0x70 [ 322.364053][ T6004] ? __switch_to_asm+0x33/0x70 [ 322.364063][ T6004] ? __pfx_kthread+0x10/0x10 [ 322.364078][ T6004] ret_from_fork_asm+0x1a/0x30 [ 322.364095][ T6004] [ 322.364100][ T6004] [ 322.602245][ T6004] Allocated by task 5834: [ 322.606660][ T6004] kasan_save_track+0x3e/0x80 [ 322.611352][ T6004] __kasan_kmalloc+0x93/0xb0 [ 322.615941][ T6004] __kvmalloc_node_noprof+0x5cd/0x910 [ 322.621303][ T6004] alloc_netdev_mqs+0xa6/0x11b0 [ 322.626145][ T6004] rtnl_create_link+0x31f/0xd10 [ 322.630987][ T6004] rtnl_newlink_create+0x25c/0xb00 [ 322.636952][ T6004] rtnl_newlink+0x16e4/0x1c80 [ 322.641766][ T6004] rtnetlink_rcv_msg+0x7cf/0xb70 [ 322.646699][ T6004] netlink_rcv_skb+0x208/0x470 [ 322.651537][ T6004] netlink_unicast+0x82f/0x9e0 [ 322.656286][ T6004] netlink_sendmsg+0x805/0xb30 [ 322.661035][ T6004] __sock_sendmsg+0x21c/0x270 [ 322.665786][ T6004] __sys_sendto+0x3bd/0x520 [ 322.670281][ T6004] __x64_sys_sendto+0xde/0x100 [ 322.675030][ T6004] do_syscall_64+0xfa/0xfa0 [ 322.679609][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.685485][ T6004] [ 322.687802][ T6004] Freed by task 7256: [ 322.691761][ T6004] kasan_save_track+0x3e/0x80 [ 322.696437][ T6004] __kasan_save_free_info+0x46/0x50 [ 322.701623][ T6004] __kasan_slab_free+0x5c/0x80 [ 322.706381][ T6004] kfree+0x19a/0x6d0 [ 322.710269][ T6004] device_release+0x9c/0x1c0 [ 322.714848][ T6004] kobject_put+0x22b/0x480 [ 322.719256][ T6004] netdev_run_todo+0xd2e/0xea0 [ 322.724007][ T6004] default_device_exit_batch+0x81e/0x890 [ 322.729654][ T6004] ops_undo_list+0x525/0x990 [ 322.734343][ T6004] cleanup_net+0x4d8/0x820 [ 322.738833][ T6004] process_scheduled_works+0xae1/0x17b0 [ 322.744364][ T6004] worker_thread+0x8a0/0xda0 [ 322.748944][ T6004] kthread+0x711/0x8a0 [ 322.753007][ T6004] ret_from_fork+0x4bc/0x870 [ 322.757636][ T6004] ret_from_fork_asm+0x1a/0x30 [ 322.762499][ T6004] [ 322.764810][ T6004] The buggy address belongs to the object at ffff88803151e000 [ 322.764810][ T6004] which belongs to the cache kmalloc-cg-4k of size 4096 [ 322.779109][ T6004] The buggy address is located 744 bytes inside of [ 322.779109][ T6004] freed 4096-byte region [ffff88803151e000, ffff88803151f000) [ 322.792982][ T6004] [ 322.795307][ T6004] The buggy address belongs to the physical page: [ 322.801717][ T6004] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31518 [ 322.810553][ T6004] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 322.819127][ T6004] memcg:ffff888072bed841 [ 322.823451][ T6004] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 322.830987][ T6004] page_type: f5(slab) [ 322.834965][ T6004] raw: 00fff00000000040 ffff88801a030500 dead000000000100 dead000000000122 [ 322.843813][ T6004] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888072bed841 [ 322.852425][ T6004] head: 00fff00000000040 ffff88801a030500 dead000000000100 dead000000000122 [ 322.861186][ T6004] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888072bed841 [ 322.869854][ T6004] head: 00fff00000000003 ffffea0000c54601 00000000ffffffff 00000000ffffffff [ 322.878509][ T6004] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 322.887169][ T6004] page dumped because: kasan: bad access detected [ 322.893673][ T6004] page_owner tracks the page as allocated [ 322.899368][ T6004] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5831, tgid 5831 (syz-executor), ts 76331529397, free_ts 44637309024 [ 322.922988][ T6004] post_alloc_hook+0x240/0x2a0 [ 322.927767][ T6004] get_page_from_freelist+0x2365/0x2440 [ 322.933391][ T6004] __alloc_frozen_pages_noprof+0x181/0x370 [ 322.940134][ T6004] alloc_pages_mpol+0x232/0x4a0 [ 322.944980][ T6004] allocate_slab+0x96/0x350 [ 322.949483][ T6004] ___slab_alloc+0xf56/0x1990 [ 322.954144][ T6004] __slab_alloc+0x65/0x100 [ 322.958649][ T6004] __kvmalloc_node_noprof+0x6ba/0x910 [ 322.964111][ T6004] alloc_netdev_mqs+0xa6/0x11b0 [ 322.969058][ T6004] rtnl_create_link+0x31f/0xd10 [ 322.973918][ T6004] rtnl_newlink_create+0x25c/0xb00 [ 322.979161][ T6004] rtnl_newlink+0x16e4/0x1c80 [ 322.983844][ T6004] rtnetlink_rcv_msg+0x7cf/0xb70 [ 322.988779][ T6004] netlink_rcv_skb+0x208/0x470 [ 322.993545][ T6004] netlink_unicast+0x82f/0x9e0 [ 322.998300][ T6004] netlink_sendmsg+0x805/0xb30 [ 323.003232][ T6004] page last free pid 5485 tgid 5485 stack trace: [ 323.009813][ T6004] __free_frozen_pages+0xbc4/0xd30 [ 323.015018][ T6004] __slab_free+0x2e7/0x390 [ 323.019451][ T6004] qlist_free_all+0x97/0x140 [ 323.024118][ T6004] kasan_quarantine_reduce+0x148/0x160 [ 323.029565][ T6004] __kasan_slab_alloc+0x22/0x80 [ 323.034423][ T6004] kmem_cache_alloc_noprof+0x367/0x6e0 [ 323.039884][ T6004] vm_area_dup+0x2b/0x680 [ 323.044212][ T6004] __split_vma+0x1a9/0xa00 [ 323.048629][ T6004] vms_gather_munmap_vmas+0x2e2/0x12e0 [ 323.054095][ T6004] mmap_region+0x722/0x2110 [ 323.058647][ T6004] do_mmap+0xc45/0x10d0 [ 323.062895][ T6004] vm_mmap_pgoff+0x2a6/0x4d0 [ 323.067575][ T6004] ksys_mmap_pgoff+0x51f/0x760 [ 323.072340][ T6004] do_syscall_64+0xfa/0xfa0 [ 323.076856][ T6004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.082844][ T6004] [ 323.085162][ T6004] Memory state around the buggy address: [ 323.090967][ T6004] ffff88803151e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.099279][ T6004] ffff88803151e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.107611][ T6004] >ffff88803151e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.115655][ T6004] ^ [ 323.123275][ T6004] ffff88803151e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 323.131932][ T6004] ffff88803151e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 323.140147][ T6004] ================================================================== [ 323.350922][ T6004] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 323.358166][ T6004] CPU: 0 UID: 0 PID: 6004 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 323.367560][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.378241][ T6004] Workqueue: events smc_ib_port_event_work [ 323.384073][ T6004] Call Trace: [ 323.387462][ T6004] [ 323.390552][ T6004] dump_stack_lvl+0x99/0x250 [ 323.395168][ T6004] ? __asan_memcpy+0x40/0x70 [ 323.399797][ T6004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.405013][ T6004] ? __pfx__printk+0x10/0x10 [ 323.409619][ T6004] vpanic+0x237/0x6d0 [ 323.413600][ T6004] ? __pfx_vpanic+0x10/0x10 [ 323.418195][ T6004] ? preempt_schedule+0xae/0xc0 [ 323.423044][ T6004] ? __pfx_preempt_schedule+0x10/0x10 [ 323.428415][ T6004] panic+0xb9/0xc0 [ 323.432138][ T6004] ? __pfx_panic+0x10/0x10 [ 323.436633][ T6004] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 323.442630][ T6004] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 323.448601][ T6004] check_panic_on_warn+0x89/0xb0 [ 323.453551][ T6004] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 323.459624][ T6004] end_report+0x78/0x160 [ 323.463859][ T6004] kasan_report+0x129/0x150 [ 323.468350][ T6004] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 323.474322][ T6004] __ethtool_get_link_ksettings+0x6e/0x190 [ 323.480164][ T6004] ib_get_eth_speed+0x15e/0x7b0 [ 323.485009][ T6004] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 323.490374][ T6004] ? do_raw_spin_unlock+0x122/0x240 [ 323.495572][ T6004] rxe_query_port+0x93/0x3b0 [ 323.500177][ T6004] ib_query_port+0x170/0x830 [ 323.504760][ T6004] smc_ib_port_event_work+0x15a/0x940 [ 323.510137][ T6004] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.515411][ T6004] ? process_scheduled_works+0x9ef/0x17b0 [ 323.521120][ T6004] ? process_scheduled_works+0x9ef/0x17b0 [ 323.527004][ T6004] process_scheduled_works+0xae1/0x17b0 [ 323.532640][ T6004] ? __pfx_process_scheduled_works+0x10/0x10 [ 323.538706][ T6004] worker_thread+0x8a0/0xda0 [ 323.543288][ T6004] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 323.549610][ T6004] ? __kthread_parkme+0x7b/0x200 [ 323.554560][ T6004] kthread+0x711/0x8a0 [ 323.558926][ T6004] ? __pfx_worker_thread+0x10/0x10 [ 323.564138][ T6004] ? __pfx_kthread+0x10/0x10 [ 323.568813][ T6004] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.574008][ T6004] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.579196][ T6004] ? __pfx_kthread+0x10/0x10 [ 323.583787][ T6004] ret_from_fork+0x4bc/0x870 [ 323.588393][ T6004] ? __pfx_ret_from_fork+0x10/0x10 [ 323.593515][ T6004] ? __switch_to_asm+0x39/0x70 [ 323.598368][ T6004] ? __switch_to_asm+0x33/0x70 [ 323.603613][ T6004] ? __pfx_kthread+0x10/0x10 [ 323.608290][ T6004] ret_from_fork_asm+0x1a/0x30 [ 323.613071][ T6004] [ 323.617129][ T6004] Kernel Offset: disabled [ 323.621484][ T6004] Rebooting in 86400 seconds..