last executing test programs: 6.450082261s ago: executing program 4 (id=1115): socket$kcm(0x29, 0x7, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10, 0x800) r1 = epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x80000002}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000f14b909"], 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000003500090027bd700000000000040000000c0018000aac0f000dac0f00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f0000000340)={0x0, 0x0, "e382f61182fa927ab4dfc3ae6ee7c71d"}) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x20000001}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93a3f853e9bdd667}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x22, 0x5}, 0x0, 0x0, 0x2, 0x0, 0x10}}, 0xf0}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000300)={0x2c, 0x2, r10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'tunl0\x00', r10, 0x7, 0x7, 0x1, 0x80000000, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x67, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x1c}, {[@noop, @noop, @timestamp_addr={0x44, 0xc, 0xb0, 0x1, 0x5, [{@local, 0x32}]}, @timestamp_addr={0x44, 0x3c, 0x2c, 0x1, 0x9, [{@private=0xa010101, 0x141}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xda}, {@local, 0x414}, {@remote, 0x1}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xe}, {@remote, 0xffffff57}]}]}}}}}) 3.325517354s ago: executing program 3 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socket$packet(0x11, 0x2, 0x300) (async) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x4}, 0x8) (async) r2 = socket(0x1, 0x803, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, 0x0, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="85fcad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="e24e99632778f164d84b45e900455b3ed0f565d5026e3ccd1d8089d77e7600de7ebe0333e74f902a1652afdf36f27e0caa45d3d1d75ad1c099d8d0941ecd2e4ba5a86295cc486657bb1bdde38363505cb57fb3147039c1d44ae914bb7017a5088da75f241f9d16cca2a4e1c23d5487396df2d7d7a4ba27c15be919ea51b29f232f605aa90926fdfad5119e8d95e31531e4811554e0ffb0b0866eba32b3c31b84e28f1ea48e39c6f679556132b64aa673c348db8498d932dd3d18960fffa18615f6106cc1303dcb627dd8149a07147e37c994910d5f0f8dfffc"], 0x44}}, 0x0) 3.079611241s ago: executing program 3 (id=1145): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x79}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9e, 0xac, "f65f418448296bb92b069f5616788d5159a83ac2cd4e27de3737547fadcdc2d198ec8f37db82f04db14df3a5d7f6c50ef9272336073870d4093f528dbd61cabdb3815b9071cba4b3e3e4737951374e4830d76e59ec918a2cb21af2757d00fbd269cc9257aa62451fb5ecb720534022836d5cb40193129d3da1e5f8c4a78c32ae510f9a61630ded889db5c3c29178a31a8281751e72e3f0eadb7b"}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x65}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x104}, 0x1, 0x0, 0x0, 0x20040000}, 0x4080) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40082, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000280)) readv(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)=""/182, 0xb6}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/242, 0xf2}], 0x6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x20, 0x700, 0x5, 0x10, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x65, 0x0, 0x10, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@lsrr={0x83, 0x1b, 0x28, [@empty, @remote, @multicast2, @empty, @remote, @private=0xa010101]}, @rr={0x7, 0xb, 0xe3, [@multicast1, @remote]}, @end, @timestamp={0x44, 0x18, 0x1d, 0x0, 0x5, [0x401, 0x7, 0x8001, 0x5, 0x20002000]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000780)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x23, r3}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x54b8606f, '\x00', r3, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x2, 0x1, &(0x7f00000007c0)=@raw=[@call={0x85, 0x0, 0x0, 0x78}], &(0x7f0000000800)='GPL\x00', 0x1c, 0x0, 0x0, 0x41000, 0x20, '\x00', r3, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000900)=[0xffffffffffffffff, r4], &(0x7f0000000940)=[{0x0, 0x3, 0xb, 0x8}, {0x1, 0x3, 0x8}, {0x5, 0x2, 0x6, 0xf}, {0x1, 0x5, 0x10, 0x4}, {0x3, 0x3, 0x5, 0x5}, {0x1, 0x2, 0xc, 0xa}, {0x3, 0x1, 0x6, 0x2}, {0x5, 0x5, 0xb, 0x1}, {0x5, 0x2, 0x7, 0xb}, {0x5, 0x5, 0x7, 0xb}], 0x10, 0x9}, 0x94) pwrite64(r5, &(0x7f0000000ac0)="acdea4adc79af87a84ce3e98a98bad8d27e345631ca13bdfb1916c30a475938085e45d3a7193e710cdacb5eb824d18abcfe616e548b3bc181905ec9fd538473979ee9b89f20173104de1401e253d6333a7afe9ef6711f631643a4833301e6c7b23972544ac4b2f2a8e6b7ccf16aff56be73b687b32fe6358a99fe82e06b0720a2d4bba0ae9d94e1c4d21d3bcd37946386c59d71d964436aa48547c", 0x9b, 0x5) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee01) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c40)={'tunl0\x00', 0x0, 0x700, 0x80, 0x3, 0x77d7, {{0x1b, 0x4, 0x3, 0x2b, 0x6c, 0x67, 0x0, 0x8, 0x29, 0x0, @remote, @private=0xa010101, {[@generic={0x88, 0x8, "f13eb18f292a"}, @ssrr={0x89, 0xb, 0xa9, [@dev={0xac, 0x14, 0x14, 0x2c}, @local]}, @rr={0x7, 0x13, 0xaa, [@multicast1, @multicast1, @rand_addr=0x64010100, @broadcast]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x2b, 0xd3, [@local, @broadcast, @multicast1, @loopback, @local, @private=0xa010100, @multicast2, @empty, @multicast2, @remote]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000000fc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x1bc, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1bc}}, 0x4000008) sendmsg$kcm(r6, &(0x7f00000013c0)={&(0x7f0000001000)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x4, 0x2, 0x2, {0xa, 0x4e23, 0x1000, @empty, 0x8}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)="ce444f6d1b5d309b5253c96d8cc75a475c4956decf7761d11711cfdde41d86cf1ec87f", 0x23}, {&(0x7f00000010c0)="e5d09c0b4b4bee0f80f8890879f299f3731516fdb45d5f511e5bb45a340e2f53235046932cd9304332b1c3d275d6c8dee4a3ce320c6d883ba5d2eb477f685bd6160a9fb0fdee6042b1851bf8f2ef644e22974a42eac3902c0315955460684cb96294669c9ce9e284fb54183335798fcff2e4b7563fe82337afe50d3fc88a8e9eddbfe67bca5b8c", 0x87}, {&(0x7f0000001180)="943e196dfaa55290ca4e07f33cbc89305b85aa19e795998a86c67a25f756dc37eca0247090dfe2c4597ee42ab563e75ae40602dd1d1d11d3d4faf68046fcaf4ea4209ecfea845b7067b6fad9b1c9431b59b317856c4c60111ad12dde515a082c", 0x60}, {&(0x7f0000001200)="887b1a10c6e8b06f600c5de66d7a9ce9faead0af9db35a24bcdc8ef3a56f252c82cdad4a9eea73804db50d9e32db67896895113ea91f34a62fc68e39481ca0246cd0618ebf9fb78bb3d2d7cd0c060a3335819c101cf6415565a26408f7d16b33ef63f7b2929c353d96d67adad7e6a462d4a75de2fec33fe765040c36b2371fb6ad97fd77eea2581d89a5794aa03962955d49775147453b32d6cb621fda0a29f42d0c43107c55eb25ce8f5123f6777d1cdde0b0b5f9e926b14694509a38180e67de5cc7e0d2d0f848e4c5bba20e37205d69a82bbacaa3af0b67d856e6426255bf21447f632eaaada9587a5d6d90fb2d409c1528510746", 0xf6}, {&(0x7f0000001300)="49c43cda8fc818f32db8", 0xa}], 0x5}, 0x4010) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0x8c, r7, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8001}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001840)={&(0x7f0000001580)="466f6de12a69c110bb416c9aed399a0f7220e2982f9f883cf3822bdf4dbf223f49aa750835ffb4be02cf159a3b4168b81b564d0e51c6d2f5976039e20089c743a65ddb3bfecf9ee153023e76d535738e558766bfbfbbc7c3354b3e3b", &(0x7f0000001600)=""/129, &(0x7f00000016c0)="79a0b4a324ccff8be60392df549479cb025f78b99d1827c6bbf8276422a905cc328ef086bc7b97fb83f4885adbc7e59182ca3175609b99c53e57d4d25d8120825282fbc876cea34decd33821c1e7b2c11e34363945894eca6ac82b0d05c4922da2a864d5f06c838b32d8fe478e7aee740d8104259ae43119a6e4bafa4d4b1061cfb84b1f1b6706765579f548b6b6eae56ae9b000", &(0x7f0000001780)="e3503e14de0f010a3f2238ee4da94b9d4f43270eb20eaefe9e8df687a3b3614a1ed7cae4648be255ad52b96391be62471d7758ec91d09f9435cf43988723ab367febf37aebf661a2410793a3a2600b0ea6c7173ec8699a149ea6c000ba72ad197460a71e01f03d310593cd9716a109258a0b5f80712db0391d3ed11b1210b5c72ccc8218ba305cda95e00ca93cf577a8f0deaf26df85ba0b1bd3ab509bed1f949d40d9855356e4487a9bdaa99bc6a6d6f89aebc78e6ef80341eff9f778", 0x5, r6}, 0x38) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001980)=0x0) sendto(r10, &(0x7f0000001880)="ce5cb386f7f9f09972a2fe446f8d579a25fb3144c4398e02a9929e687578d67f093b7452422857e1c9f03e0f0554d166968f06734ff81d7a4c052f5108fd83dd6aef11b59558097d2928c800cb30cdd0dbc45fcec2d4f9563506127fab5ca8560dcbd4c5ca84d1afc75d0fe081cce70f5555d95e6399a0ec6c1f7d33f69d752b49073c089198881d7caffd24b0098180d029c2cb2dee860e4de1b911625d149dc26c2052958b5069591fa3b0775bae2673d1d0d01384dcc607c480734cb228a432d27b318dd7e2d2de38ed23", 0xcc, 0x1, &(0x7f00000019c0)=@nfc_llcp={0x27, r11, 0x0, 0x6, 0x3, 0x9, "20f0aea2f19801c72b4c2e1ee8bbade7ac6efdccfbd1bd54182f1df37ce422cd7dc62a011022cb9b5cccde8978e5d67cf01f89f7cb587ad2b142f690142b19", 0xc}, 0x80) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000001a80)={0x8, &(0x7f0000001a40)=[{0x1, 0xff, 0x5}, {0x3, 0x2, 0x7c, 0x3}, {0x0, 0x3, 0x0, 0x7}, {0x0, 0x6, 0x8, 0x3}, {0x8, 0x6f, 0x80, 0x5}, {0x0, 0x40, 0x8, 0x8}, {0x6, 0x1, 0x0, 0x81}, {0x4, 0x9, 0x3, 0x5}]}, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b00), r6) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b40)={0x118, r12, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d40)={0xfc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffff000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x8801) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000001ec0)=0x7) 2.9523231s ago: executing program 3 (id=1146): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) read(r0, 0x0, 0xf2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r4, 0x0, 0x4f, 0x40002021, 0x0, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000280)={0x0}, 0x7, 0x0, 0x0, 0x4008845}, 0x240408c0) 2.858831691s ago: executing program 2 (id=1147): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2a, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xd}, {0xa}}, [@TCA_RATE={0x6, 0x5, {0x52, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r4, r5}, 0x5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @loopback, 0x7}, @in6={0xa, 0x4e23, 0x40000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x81}], 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000000010104000000000000576c0b7ef8cd1a2575fbde9c000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008ac1e0001080007400000040014001080080002400000000000000000000000779393c2e25308e5e03f4d8552bda6de29fe2d0c854df2228ead0fc4d950b0d47b4e17fed040d71d897976565e1070269e1ef5c74f208ae90acba990dd443fc31696839d6f7e08fc6b0f127ec46d461258b4565f0abff34836b3d9b91ecd9e66558b1005c971e3d74a9a5389e82794a5ac996f8ef025ad"], 0x78}}, 0x0) 2.787503433s ago: executing program 1 (id=1149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000190001000000000003000000e00000020000431c1d6a377128b09749813b2a21651e000000fe8000005d570557f7cef2d16d740002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e00000010000000000000000000000000735000004030700080000000400000002000000fe80000000000000000000000000000c000004d36c00000002000000fe8800000000000000000000000001010135000002007300008000000400000007000000e0000002000000000000000000000000800000013c0000000a000000ac1414bb000000000000000000000000000000000101090008000000e700000007000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) r9 = socket$netlink(0x10, 0x3, 0x6) writev(r9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'veth1_to_bridge\x00'}) 2.391735352s ago: executing program 0 (id=1150): r0 = socket(0x840000000002, 0x3, 0x100) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 2.204034031s ago: executing program 0 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c01000011002300"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB], 0x14c}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000) 2.177064476s ago: executing program 0 (id=1152): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r1, 0x6, 0x7}, &(0x7f00000002c0)=0xc) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xac}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.950216069s ago: executing program 2 (id=1153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r2, 0x8}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e20, 0x34, @rand_addr=' \x01\x00', 0x2}}}, &(0x7f0000000440)=0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x1c4, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x1b0, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5b8ba256cdac970100000006db8fe637"}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x14c, 0x0, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x40, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7f}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffff8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfff}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xf, 0x60, 0x0, 0x2}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}, {0xbb, 0x6, "4ad010c6dbd2dbf0ace2ef56581cdb098f0d3ab095d6e5841d93f289191a622f5f5b7bcdea24f772ac5b7d9d7a6357019ae1048ce57d05b3059a4a5f2f83b964a452fcc0f9599d00e30bef2eae6b24b4e0c7a61617a13c5f2ac95427330d701c5e13925c1daeccba846bdcf2e0c43a301ebc9cd6d41fe95d96448c0e36e61f3b063b0248d6a37b0065c6fe7add31565b276bf73a7b5637d41cb53e0765a6809089c75f353dd14a9fc120937ee3b7e98871a88d8ee1df5d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1c4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x5, 0x2}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r2, 0x8}, &(0x7f0000000340)=0x8) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e20, 0x34, @rand_addr=' \x01\x00', 0x2}}}, &(0x7f0000000440)=0x84) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x1c4, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x1b0, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5b8ba256cdac970100000006db8fe637"}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x14c, 0x0, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x40, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x7f}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffff8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfff}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xf, 0x60, 0x0, 0x2}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}, {0xbb, 0x6, "4ad010c6dbd2dbf0ace2ef56581cdb098f0d3ab095d6e5841d93f289191a622f5f5b7bcdea24f772ac5b7d9d7a6357019ae1048ce57d05b3059a4a5f2f83b964a452fcc0f9599d00e30bef2eae6b24b4e0c7a61617a13c5f2ac95427330d701c5e13925c1daeccba846bdcf2e0c43a301ebc9cd6d41fe95d96448c0e36e61f3b063b0248d6a37b0065c6fe7add31565b276bf73a7b5637d41cb53e0765a6809089c75f353dd14a9fc120937ee3b7e98871a88d8ee1df5d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1c4}}, 0x0) (async) 1.949549756s ago: executing program 3 (id=1154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x76b60f1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20004000) r6 = accept(r5, &(0x7f00000000c0)=@l2, &(0x7f0000000180)=0x80) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x8}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xf9}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x400}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000) 1.813899217s ago: executing program 1 (id=1155): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000009fd577df33a424947b23612660d3a8ba34db2ec84c7e7a8e6be87e1a2c84e4872a11e0d98cca002ed78f6e5a3b1a06fb72e87f576c26bf1379ad04330875e55e27a49f5e7667", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c000280"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.606589607s ago: executing program 1 (id=1156): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000004a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.605241975s ago: executing program 2 (id=1157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@struct={0x0, 0x7, 0x0, 0x4, 0x1, 0x9, [{0x2, 0x1, 0x1}, {0x6, 0x1, 0x3}, {0xf, 0x4, 0x26}, {0x10, 0x4, 0x2}, {0xc, 0x5, 0x8}, {0xe, 0x101, 0x8ff}, {0xe, 0x2, 0xfff}]}, @fwd={0x10}]}, {0x0, [0x61, 0x61, 0x2e, 0x2e, 0x61, 0x2e, 0x5f, 0x61]}}, &(0x7f00000002c0)=""/4, 0x8e, 0x4, 0x1, 0xfffffff8}, 0x28) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 1.571038368s ago: executing program 4 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, r5, 0x80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @val=@iter={0x0}}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, r5, 0x80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) (async) 1.460057712s ago: executing program 1 (id=1159): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="750a0000000000006111b80000000000950000000061adec00e6d3d5005231f81361598a52d4eaed07f5f8a88dee769245c6350bd340effa9045b17ef6514137c0d696672e2c973d53f219421b8e4100"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x1, 0x10000}) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x1, 0x10000}) r1 = socket$nl_route(0x10, 0x3, 0x0) getpid() (async) r2 = getpid() sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x19, 0x800, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x0, 0x20, 0xf0, 0xfd, 0x3, 0xc8, 0x6, 0x800}, [@RTA_VIA={0x14, 0x12, {0x23, "dd80213a13f0866b3056658e3a73"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000050) 1.326282738s ago: executing program 4 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_emit_ethernet(0x10ca, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv4={0x800, @generic={{0x2f, 0x4, 0x2, 0x0, 0x10bc, 0x64, 0x0, 0x7, 0x33, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x2, 0xc, "6cb77dc3eecfb74eebb9"}, {0x1, 0x3, 'y'}, {0x1, 0x9, "c99ab901c1693a"}, {0x0, 0xb, "44615d388fb16e5d42"}, {0x5, 0xb, "93e5008bb06b325ffd"}, {0x1, 0x3, "bb"}, {0x6, 0x2}, {0x2, 0xc, "59ffb45d39c99004181e"}, {0x0, 0x5, "0a6688"}]}, @timestamp_addr={0x44, 0x24, 0x26, 0x1, 0x4, [{@multicast2, 0x51}, {@multicast2, 0x4}, {@broadcast, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}]}, @cipso={0x86, 0x16, 0x0, [{0x7, 0x10, "375b3c794c0796cce72263d7f866"}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x52, 0x0, 0x3, [0x4, 0x2, 0x8, 0x8, 0x8000]}]}}, "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"}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x20008080) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r4, &(0x7f0000001440)="f7e3288edec5b934d94fe519bc996beed26a3180bbe1b31dfc7d138619194fde52ba5ff21d0ad9da507da948ed0051fb2a379033f505aeefd104b8531f84753c65f17d2f8c73bf245eb110088145bafada7b33cc21950733edbe242fabdf4a19e559418a795f6e8ccf4c26b3acc31a5cfb653b21c95b02bb44172013eb9182b9a75345c15d9d85b80d5446ab2c562f5518", 0x91, 0x8000, &(0x7f0000001500)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x27}, 0xffff, 0x3}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000001540)={0xc, 0xa, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x3, 0x3, [0x1, 0x7, 0x8, 0x1, 0x8, 0xcc, 0x9, 0x3]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}, 0x60) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f00000015c0)=0x400, 0x4) r6 = accept4$netrom(0xffffffffffffffff, &(0x7f0000001600)={{0x3, @bcast}, [@netrom, @bcast, @rose, @default, @rose, @default, @null]}, &(0x7f0000001680)=0x48, 0x800) bind$netrom(r6, &(0x7f00000016c0)={{0x3, @null, 0x3}, [@null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001740)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000017c0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x54, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x40) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000001900)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x5, &(0x7f0000001940)=""/185, &(0x7f0000001a00)=0xb9) r9 = socket(0x2a, 0x1, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a80), r9) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x30, r10, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x47, @bearer=@l2={'ib', 0x3a, 'syz_tun\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}}, 0x24004011) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001bc0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000001cc0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001d00)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000001e00)=0xe8) r13 = getgid() setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f00000024c0)=@broute={'broute\x00', 0x20, 0x5, 0x64e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001e40], 0x0, &(0x7f0000001b80), &(0x7f0000001e40)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0xca, 0xf7, 'erspan0\x00', 'bond0\x00', 'ip6erspan0\x00', 'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, [0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xae, 0xde, 0x126, [@owner={{'owner\x00', 0x0, 0x18}, {{r11, r12, r13, 0x0, 0x1, 0x3}}}], [@common=@AUDIT={'AUDIT\x00', 0x8}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x7, {0xb4}}}}}, {0x9, 0x21, 0xa01, 'erspan0\x00', 'rose0\x00', 'gre0\x00', 'macsec0\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x9, 0x18, 0x22eb, 'bridge_slave_1\x00', 'virt_wifi0\x00', 'bridge_slave_1\x00', 'macvlan1\x00', @broadcast, [0xb3a7c7e9ec26670e, 0x0, 0x0, 0xff, 0xff, 0xff], @link_local, [0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x1, 0xc, {0x8}}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x3, 0x20, 0x8808, 'caif0\x00', 'geneve0\x00', 'team_slave_0\x00', 'veth1_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff], 0xe6, 0x176, 0x1be, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x1}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0x30, 0x3, 0xe, 0x8, 0x7, 0x989}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3, 0x5, {0x1}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xfc, 0xd, {0x3}}}}], @common=@ERROR={'ERROR\x00', 0x20, {"9bdb1690152c291a77360283a9c83f9e6fa9cfe254de05a7364d2b1b8626"}}}, {0x9, 0x14, 0x8035, 'erspan0\x00', 'dummy0\x00', 'netpci0\x00', 'veth0_to_hsr\x00', @multicast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xde, 0x10e, 0x156, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x42, 0xfff7, 0x4, 0x3}}}, @time={{'time\x00', 0x0, 0x18}, {{0x4, 0x5, 0xe344, 0x73d8, 0x8, 0x96, 0x2}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xd, 0x8, {0x4}}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffe}]}, 0x6c6) 1.325361414s ago: executing program 2 (id=1161): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3100000000140000001100010000000000000000000100000a"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0xff40) pread64(r1, 0x0, 0x0, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x9, 0x5, 0x9, 0x4400, r3, 0xfffffff7, '\x00', r4, r1, 0x3, 0x3, 0x1, 0xe}, 0x50) write$ppp(r1, &(0x7f0000000200)="bc72", 0x2) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000200), 0x4) 1.288917692s ago: executing program 1 (id=1162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c01000011002300"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB], 0x14c}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000) 1.234898964s ago: executing program 0 (id=1163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000200)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0x6}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x9}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 1.138480994s ago: executing program 4 (id=1164): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2000, 0xfffffffd}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f00000006000100fe0f000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.13455235s ago: executing program 1 (id=1165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x20008050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000190001000000000003000000e00000020000431c1d6a377128b09749813b2a21651e000000fe8000005d570557f7cef2d16d740002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e00000010000000000000000000000000735000004030700080000000400000002000000fe80000000000000000000000000000c000004d36c00000002000000fe8800000000000000000000000001010135000002007300008000000400000007000000e0000002000000000000000000000000800000013c0000000a000000ac1414bb000000000000000000000000000000000101090008000000e700000007000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0xa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) r9 = socket$netlink(0x10, 0x3, 0x6) writev(r9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'veth1_to_bridge\x00'}) 982.559856ms ago: executing program 3 (id=1166): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r8, 0x8937, &(0x7f0000000100)="b468153a") (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000080)={r4, 0x7, 0x3b7, 0x3}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)={0xa0000004}) (async) r10 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r10, 0x0, 0x20000004) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 668.351642ms ago: executing program 4 (id=1167): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x4, 0xe, 0x200, 0x9, 0xffc7}, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 642.243908ms ago: executing program 3 (id=1168): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="3a7f15000000000000140012800b0001e16161746164760000040002840a000100bbbbbbbbbbbb0000"], 0x40}}, 0x20000840) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff87) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000140004800500030000000000050003000700000008000100010000000800020002000000d35e2260849cdccc6882c1545f6064dd81bd08f90182b3b7b8867710e1fb813280b22e5f02dc4224166108136a7f021e1d"], 0x38}, 0x1, 0x0, 0x0, 0x20008086}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c", @ANYBLOB, @ANYRES64=r2], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f00000014c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) 308.853145ms ago: executing program 0 (id=1169): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)={0x2c, 0x140f, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xe52}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0xb, 0x0, 0x0, 0xe, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x40}}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000003a00)=""/4096, 0x44, 0x1000, 0x1, 0x1}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) r9 = socket(0x10, 0x803, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async, rerun: 32) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) close(0x3) (async, rerun: 64) recvmmsg(r0, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000002040)=""/4118, 0x1016}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1f, 0x2040, 0x0) (rerun: 64) 201.348291ms ago: executing program 2 (id=1170): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000007111770000000000851000000200000085000000c400000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r4 = accept4$alg(r1, 0x0, 0x0, 0xc0800) sendmmsg$alg(r4, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x80, 0x117, 0x2, 0x66, "fed9eb47fa86f6f3aacb48d8ec332b44ae095420974202907aa737603a4a32ea602f436e76b37358a999323865de8c20bd4cfa28612e7da4ae7ca077ba82f70e341e56b3486802b8f8131c56267737e172c85b852892d9f6cab0dd395c30bd4674d756278ba4"}], 0x98, 0x404c880}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="13400e072fe299a19db31fcab552b4e23e4b1fba113cdff2e5065483a83f3935154c170a991b4adfc9680caffb57e7e066ee3b27f99e30dabcfae6bc834af0311a6fed06ed6628db", 0x48}], 0x1, &(0x7f00000004c0)=[@op={0x18}], 0x18, 0x800}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="8332917fa862a635a3691e39c97b00be50f2aba12c8fe4cb00a901193d58a7bd21e63009921097325a75604898840e63d60f51c08dde37d98617be94e255f69f6ac1a725441f16c7770acf3c0559cfe009e5d1208d7709b8a91746db032c690952c3878587ca559e43f59fd252440a942ab6", 0x72}, {&(0x7f0000000640)="78703c80f76dec3f3c4e16fc1d974924aa5e1b2ebb6d5dfdf87fdd2b5c4e290df5bd5b3c234439a700fd4a738e3966d0791324a58553bff9ae764a7323cf6f054e01303b96bbfdd3f3835d5a5edc5215b5f33ee444f61d025c9c78b0c2a27af48d50c1d56efc1739c4246c6e1efbea367a925ce85f110c33", 0x78}], 0x2, &(0x7f0000000800)=[@iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x52, "db51374215cfe7c647de9c9cc419810ee4e0e5c2772eb99ecdafab60fe19fa0e95f4aaa38b58926ec57fd8f8066d1321cef54b3472ec9a9d097fb039d87b3dd00187b1ca1ed359c58c721029a03eb94a52b5"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x40, "c4f572902572e463539caad847a3e5bcc07635855c31b0654b3d39d9f5c6c02c6be78a0442ce8a1a4ccb0187d5821bfd65ab9b812e01c20dd77e51a677c4cfa9"}], 0x108, 0x10}, {0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="35d4f6816273d3497bf9703e61082e7bef210bd9de8bfc0b32daa3a973411779026c36ebc62bc53911ad5f1782fb855d54240fba8c71e6b084591c4d458d00cb0a842aaee2d60f37d86014f42ad4e35b306129088e4c6a7e57e03ac34d4629a85cc0cc48504e14a95a983df47905570dcb219ba8852abb57d6556000c9e639451f6df3d3e2fbc36a973444ed5f5cb75286af7a4f2c6d131fff0c43fc8bf032f0f5368acf24ef9e40c6e265ab8bb4b22b95d90e8e4a79907af5ccee4aeccbdad2a013295b3be6f998dbaf5f3b606412ed9c84e8cf75a08c76de86756e080d095f1f0afe59d1c39e4200658b670e29b0a111d8", 0xf2}, {&(0x7f0000000940)="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", 0xfa}, {&(0x7f0000000a40)="147e090a9c197fd0661318d84783fad665081f24d57decfd93784b6772f893c426ddcde331b6920cba3043a7442dfd7aecb1446ea0b1da92723bc0a803eb760537d3fe8bbe2e82cf5cc642b97f5d17b2f08e140fd2ea753241a776d222b9f93fba17915a7a93a456a4838ef2b6a0001eda10ab77eaad46cb5bfac422a40f78f443a5857faca3eaa7551374883d93090118f6fd5c8c8ffd9f2d180c6c5ab8d57b6200224429edfab81ab8f15d316a6e3271cbbe716b95f8ed88765295de", 0xbd}, {&(0x7f0000000b00)="8a28fd343d22dcb9d466bda3a03ab1263ec4e6e96f76ec210d38bd3adb95a3ae03a617e53e14ff5c047bb569f462768012c3d4ca067d48d7d7a4b09d56761bfa5b76d5bb8ca606cdfde05aec2d752c848c386ea84b62fce47cf2c7ca04dd5c0864af81b09ecb49da477f43253a130bbc2062c4c77b0d65f1481a945694e1b1e54a6152d1e57f384f007b48c90823f5755e09969ccdbe930e366a", 0x9a}], 0x4, &(0x7f0000000c00)=[@assoc={0x18, 0x117, 0x4, 0x33}], 0x18, 0x40408a4}], 0x4, 0x5) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x14010016) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x80000000, 0x8, 0xad4b}, &(0x7f0000000100)=0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007440000000c0a01020000000000000000010000000900020073797a320000000018000380140000800400018008000340000000019a930b800900010073797a3000"], 0xd0}}, 0x0) r7 = socket(0x26, 0x5, 0x8) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r8, 0x10c, 0x1, &(0x7f0000000080), &(0x7f0000000480)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000035c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) getsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @empty, @loopback}, &(0x7f0000000d40)=0xc) write(r0, &(0x7f0000000140)="05000000010000", 0x7) 54.162448ms ago: executing program 2 (id=1171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 2.601665ms ago: executing program 4 (id=1172): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf850100000080ed5687e921a12556c53b9bc529ea7e15fdcd56a00c514a"], 0x14}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6de9608e9ceab21f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x6de5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="000125bd7800ffdbdf250a0000000800040080ffffff080003000200000040000180060005004e2200000500020000000000050002007f000000060001cfe7000000080007002b0b2eeb8aa5a8231eb73a341f4443421174f30b8cb24f9f166eda006708de25f2101df5ddce82cc7c0f0f44370094a4be041bd610a037b54841000000000000", @ANYRES32=r7, @ANYBLOB="14000400ff0100000000000000000000000000011c000680060005004e23000008000700", @ANYRES32=r8, @ANYBLOB="0800060016000000050005009c0000001c000680060005004e230000060001000a00000008000600070000000800020008000000"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x40000800) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4, r2}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f0000000500)="86fc390161d8823d34e1f69bd2f57a9b77d9b3874d2d42b3131109d56cd4c30f5bf47c06457700ec15af1e69b320ff4a816200e876124f61f2452757d0b8928ceb89f7938190f5ceb1afdd307d1d75d24000c32c666e69ba07fdac325897b06a40e56983b9afa3b6f2889ba3ffe3b4a40eecb83fa5355a443bbe6e53d394", &(0x7f0000000580)=""/105, &(0x7f0000000900)="179ce0292bd09c7890ce6764c3aae81dd61b46f98b0cbced2852b476724f5b22c4dee84160b5098c7dbfe56be72f25b77dbef283b7379deee209412b2bf9f6452ffe6e784b528776b8becde04638df7d3ce6fea7e322", &(0x7f0000000680)="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", 0x263, r6, 0x4}, 0x38) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r10, 0x6}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r11 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r11, 0x111, 0x4, 0x0, 0x4) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000006a2886214c891167d72828d23334e2337d3a7b79"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=1173): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r1, 0x6, 0x7}, &(0x7f00000002c0)=0xc) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xac}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): atman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.951982][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.978582][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.010641][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.017633][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.043698][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.097887][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.104943][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.131611][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.143465][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.151022][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.177124][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.210250][ T5838] hsr_slave_0: entered promiscuous mode [ 91.216726][ T5838] hsr_slave_1: entered promiscuous mode [ 91.223098][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 91.228906][ T5838] Cannot create hsr debugfs directory [ 91.243729][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.251852][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.277842][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.382795][ T5827] hsr_slave_0: entered promiscuous mode [ 91.390374][ T5827] hsr_slave_1: entered promiscuous mode [ 91.397257][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 91.403659][ T5827] Cannot create hsr debugfs directory [ 91.535549][ T5833] hsr_slave_0: entered promiscuous mode [ 91.542386][ T5833] hsr_slave_1: entered promiscuous mode [ 91.548569][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 91.554915][ T5833] Cannot create hsr debugfs directory [ 91.582531][ T5841] hsr_slave_0: entered promiscuous mode [ 91.588929][ T5841] hsr_slave_1: entered promiscuous mode [ 91.595451][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 91.601501][ T5841] Cannot create hsr debugfs directory [ 92.011565][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.037742][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.056878][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.082757][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.131407][ T914] cfg80211: failed to load regulatory.db [ 92.148143][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.172915][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.194041][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.219266][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.309804][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.326552][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.354033][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.377007][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.483286][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.495997][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.506664][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.533229][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.587695][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.599636][ T5844] Bluetooth: hci1: command tx timeout [ 92.656186][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.679598][ T52] Bluetooth: hci2: command tx timeout [ 92.680288][ T5839] Bluetooth: hci0: command tx timeout [ 92.685372][ T5844] Bluetooth: hci3: command tx timeout [ 92.690647][ T5831] Bluetooth: hci4: command tx timeout [ 92.704061][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.717000][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.727479][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.748973][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.765548][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.791804][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.799171][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.837952][ T3663] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.845157][ T3663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.865967][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.907677][ T3663] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.914862][ T3663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.934692][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.965057][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.972256][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.045125][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.076414][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.083753][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.127158][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.134550][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.161728][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.232115][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.285674][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.292926][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.350316][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.357438][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.381725][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.464834][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.476631][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.514146][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.521388][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.567588][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.574858][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.851035][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.979001][ T5838] veth0_vlan: entered promiscuous mode [ 94.002757][ T5838] veth1_vlan: entered promiscuous mode [ 94.154347][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.172307][ T5838] veth0_macvtap: entered promiscuous mode [ 94.198551][ T5838] veth1_macvtap: entered promiscuous mode [ 94.211609][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.275932][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.308660][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.357288][ T2995] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.368994][ T2995] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.385154][ T5827] veth0_vlan: entered promiscuous mode [ 94.394197][ T2995] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.403724][ T2995] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.425648][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.456332][ T5828] veth0_vlan: entered promiscuous mode [ 94.463638][ T5833] veth0_vlan: entered promiscuous mode [ 94.488075][ T5827] veth1_vlan: entered promiscuous mode [ 94.498648][ T5833] veth1_vlan: entered promiscuous mode [ 94.511619][ T5828] veth1_vlan: entered promiscuous mode [ 94.614750][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.624899][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.658523][ T5841] veth0_vlan: entered promiscuous mode [ 94.680416][ T5844] Bluetooth: hci1: command tx timeout [ 94.703798][ T5827] veth0_macvtap: entered promiscuous mode [ 94.714636][ T5841] veth1_vlan: entered promiscuous mode [ 94.720845][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.728699][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.750422][ T5833] veth0_macvtap: entered promiscuous mode [ 94.761482][ T5844] Bluetooth: hci0: command tx timeout [ 94.761593][ T5831] Bluetooth: hci3: command tx timeout [ 94.766948][ T52] Bluetooth: hci2: command tx timeout [ 94.772681][ T5839] Bluetooth: hci4: command tx timeout [ 94.788749][ T5828] veth0_macvtap: entered promiscuous mode [ 94.798864][ T5827] veth1_macvtap: entered promiscuous mode [ 94.811842][ T5833] veth1_macvtap: entered promiscuous mode [ 94.821031][ T5828] veth1_macvtap: entered promiscuous mode [ 94.878506][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.911674][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.923328][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.945829][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.955735][ T5841] veth0_macvtap: entered promiscuous mode [ 94.991029][ T5841] veth1_macvtap: entered promiscuous mode [ 95.006596][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.023539][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.042155][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.074634][ T4570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.086027][ T4570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.106578][ T4570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.116249][ T4570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.132216][ T4570] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.142063][ T4570] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.178554][ T5947] syzkaller0: entered promiscuous mode [ 95.184390][ T5947] syzkaller0: entered allmulticast mode [ 95.194984][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.217586][ T4570] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.227164][ T4570] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.048153][ T4570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.073707][ T4570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.090289][ T4570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.111280][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.141282][ T4570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.232050][ T4570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.245637][ T4570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.275868][ T4570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.285149][ T4570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.318994][ T3940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.330203][ T3940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.374351][ T5952] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6'. [ 96.557453][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.588178][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.622849][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.633667][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.716054][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.726534][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.759941][ T5839] Bluetooth: hci1: command tx timeout [ 96.839592][ T5839] Bluetooth: hci2: command tx timeout [ 96.839773][ T52] Bluetooth: hci0: command tx timeout [ 96.850951][ T52] Bluetooth: hci4: command tx timeout [ 96.851517][ T5839] Bluetooth: hci3: command tx timeout [ 96.862115][ T3940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.879760][ T3940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.956935][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.996236][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.049409][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.057278][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.078967][ T5956] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.162550][ T5958] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.185450][ T5956] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.197817][ T3744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.207866][ T3744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.446250][ T5966] netlink: 'syz.1.7': attribute type 13 has an invalid length. [ 97.496785][ T5966] netlink: 'syz.1.7': attribute type 17 has an invalid length. [ 97.589879][ T5967] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 97.868554][ T5966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.348396][ T5991] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10'. [ 98.687496][ T5997] netlink: 196 bytes leftover after parsing attributes in process `syz.0.9'. [ 99.767967][ T6004] ip6tnl1: entered promiscuous mode [ 99.804398][ T5889] IPVS: starting estimator thread 0... [ 99.919429][ T6007] IPVS: using max 26 ests per chain, 62400 per kthread [ 100.148223][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 100.176665][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 100.203052][ T6012] Bluetooth: MGMT ver 1.23 [ 100.231233][ T6015] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 100.367516][ T6017] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 100.403859][ T6017] netlink: 'syz.0.15': attribute type 8 has an invalid length. [ 100.443196][ T6020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.636467][ T6020] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17'. [ 101.142294][ T6053] Zero length message leads to an empty skb [ 101.150638][ T6046] netlink: 196 bytes leftover after parsing attributes in process `syz.2.18'. [ 101.972427][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 102.079379][ T6065] netlink: 'syz.2.22': attribute type 11 has an invalid length. [ 102.280512][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.281593][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 102.404770][ T6074] netlink: 196 bytes leftover after parsing attributes in process `syz.2.23'. [ 102.416411][ T73] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.777809][ T6060] syz.0.20 (6060) used greatest stack depth: 17688 bytes left [ 102.873891][ T6086] netlink: 196 bytes leftover after parsing attributes in process `syz.1.26'. [ 103.016439][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 103.146366][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 103.201092][ T6093] tipc: Enabling of bearer rejected, failed to enable media [ 103.643803][ T6097] veth2: entered allmulticast mode [ 104.210909][ T9] IPVS: starting estimator thread 0... [ 104.319211][ T6113] IPVS: using max 27 ests per chain, 64800 per kthread [ 105.111479][ T6155] netlink: 136 bytes leftover after parsing attributes in process `syz.4.34'. [ 105.759852][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 106.408221][ T6196] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 106.424388][ T6196] bond1 (unregistering): Released all slaves [ 106.876568][ T6181] netlink: 'syz.1.41': attribute type 4 has an invalid length. [ 107.390822][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 107.469193][ T6233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.47'. [ 107.478038][ T6233] netlink: 40 bytes leftover after parsing attributes in process `syz.4.47'. [ 107.579503][ T6233] netlink: 540 bytes leftover after parsing attributes in process `syz.4.47'. [ 107.876054][ T6242] tipc: Enabling of bearer rejected, failed to enable media [ 108.235887][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.55'. [ 108.272464][ T6262] syzkaller0: entered promiscuous mode [ 108.288362][ T6262] syzkaller0: entered allmulticast mode [ 108.481325][ T6269] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 108.869529][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 110.765108][ T914] IPVS: starting estimator thread 0... [ 110.879426][ T6300] IPVS: using max 24 ests per chain, 57600 per kthread [ 111.346188][ T6317] netlink: 'syz.3.59': attribute type 10 has an invalid length. [ 111.371921][ T6317] netlink: 2 bytes leftover after parsing attributes in process `syz.3.59'. [ 111.817399][ T6317] bond0: entered promiscuous mode [ 111.859942][ T6317] bond_slave_0: entered promiscuous mode [ 111.883704][ T6317] bond_slave_1: entered promiscuous mode [ 111.934961][ T6317] bridge0: port 3(bond0) entered blocking state [ 111.967387][ T6317] bridge0: port 3(bond0) entered disabled state [ 111.974030][ T6317] bond0: entered allmulticast mode [ 111.985957][ T6317] bond_slave_0: entered allmulticast mode [ 111.992435][ T6317] bond_slave_1: entered allmulticast mode [ 112.002058][ T6317] bridge0: port 3(bond0) entered blocking state [ 112.008631][ T6317] bridge0: port 3(bond0) entered forwarding state [ 112.393169][ T6355] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 112.411439][ T6355] netlink: 224 bytes leftover after parsing attributes in process `syz.3.63'. [ 112.663525][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'. [ 112.710391][ T6363] netlink: 'syz.3.66': attribute type 13 has an invalid length. [ 112.836876][ T6369] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 112.863682][ T6369] netlink: 224 bytes leftover after parsing attributes in process `syz.2.68'. [ 112.976588][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.69'. [ 113.033083][ T6378] sctp: [Deprecated]: syz.4.67 (pid 6378) Use of int in maxseg socket option. [ 113.033083][ T6378] Use struct sctp_assoc_value instead [ 113.121825][ T6377] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 113.196740][ T6363] bridge0: port 3(bond0) entered disabled state [ 113.203462][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.211582][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.423563][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.440638][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.672900][ T2995] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.724481][ T2995] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.744787][ T2995] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.795532][ T2995] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.941671][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.957277][ T6395] bond0: (slave rose0): Enslaving as an active interface with an up link [ 114.207557][ T6407] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 114.250755][ T6407] bond1 (unregistering): Released all slaves [ 114.281877][ T6410] netlink: 88 bytes leftover after parsing attributes in process `syz.4.75'. [ 114.292237][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 114.316532][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.75'. [ 114.663602][ T6429] xt_limit: Overflow, try lower: 271964/0 [ 114.700835][ T6429] netlink: 25 bytes leftover after parsing attributes in process `syz.1.81'. [ 114.891652][ T6436] netlink: 'syz.4.83': attribute type 1 has an invalid length. [ 114.942221][ T6436] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.83'. [ 115.072666][ T6440] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 115.122934][ T6440] bond1 (unregistering): Released all slaves [ 115.171200][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.87'. [ 115.227153][ T6450] batadv0: entered promiscuous mode [ 115.267963][ T6450] team0: entered promiscuous mode [ 115.331799][ T6450] team_slave_0: entered promiscuous mode [ 115.337744][ T6450] team_slave_1: entered promiscuous mode [ 115.381061][ T6450] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 115.437995][ T6454] syzkaller0: entered promiscuous mode [ 115.459316][ T6454] syzkaller0: entered allmulticast mode [ 116.039316][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.049209][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 116.269575][ T6479] netlink: 'syz.2.95': attribute type 7 has an invalid length. [ 116.277519][ T6479] netlink: 'syz.2.95': attribute type 8 has an invalid length. [ 116.311284][ T6479] team0: entered promiscuous mode [ 116.316638][ T6479] team_slave_0: entered promiscuous mode [ 116.322700][ T6479] team_slave_1: entered promiscuous mode [ 116.333502][ T6479] ip6gretap0: entered promiscuous mode [ 116.354642][ T6479] gretap0: entered promiscuous mode [ 116.380760][ T6479] debugfs: 'hsr1' already exists in 'hsr' [ 116.399209][ T6479] Cannot create hsr debugfs directory [ 116.735302][ T6493] wg1 speed is unknown, defaulting to 1000 [ 116.742134][ T6493] wg1 speed is unknown, defaulting to 1000 [ 116.763797][ T6493] wg1 speed is unknown, defaulting to 1000 [ 116.821248][ T6493] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.828817][ T6496] syzkaller0: entered promiscuous mode [ 116.841947][ T6496] syzkaller0: entered allmulticast mode [ 116.865147][ T6493] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 116.907546][ T6500] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 116.958740][ T6493] wg1 speed is unknown, defaulting to 1000 [ 116.972507][ T6493] wg1 speed is unknown, defaulting to 1000 [ 116.988281][ T6493] wg1 speed is unknown, defaulting to 1000 [ 117.064749][ T6493] wg1 speed is unknown, defaulting to 1000 [ 117.076078][ T6493] wg1 speed is unknown, defaulting to 1000 [ 117.124384][ T6505] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 117.130196][ T10] syzkaller1: tun_net_xmit 90 [ 117.135416][ T6505] syzkaller1: Linktype set failed because interface is up [ 117.506794][ T6524] __nla_validate_parse: 5 callbacks suppressed [ 117.506812][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 117.559275][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 117.645934][ T5889] IPVS: starting estimator thread 0... [ 117.742014][ T6531] IPVS: using max 31 ests per chain, 74400 per kthread [ 118.637027][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 119.153454][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 119.385699][ T6598] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.455124][ T6610] tipc: Started in network mode [ 119.469120][ T6610] tipc: Node identity 4a61a47f5f77, cluster identity 4711 [ 119.490047][ T6610] tipc: Enabled bearer , priority 0 [ 119.536342][ T6611] syzkaller0: entered promiscuous mode [ 119.549384][ T6611] syzkaller0: entered allmulticast mode [ 119.569817][ T6617] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 119.587245][ T6617] netlink: 224 bytes leftover after parsing attributes in process `syz.1.129'. [ 119.594280][ T6608] tipc: Resetting bearer [ 119.639296][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 119.642583][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.694331][ T6607] tipc: Resetting bearer [ 119.746381][ T6607] tipc: Disabling bearer [ 119.966932][ T6630] netlink: 'syz.2.133': attribute type 1 has an invalid length. [ 119.994920][ T6630] netlink: 224 bytes leftover after parsing attributes in process `syz.2.133'. [ 120.298537][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 120.689857][ T6649] wg1 speed is unknown, defaulting to 1000 [ 120.707002][ T6649] wg1 speed is unknown, defaulting to 1000 [ 120.727955][ T6649] wg1 speed is unknown, defaulting to 1000 [ 120.761385][ T6649] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 120.801176][ T6649] wg1 speed is unknown, defaulting to 1000 [ 120.811705][ T6649] wg1 speed is unknown, defaulting to 1000 [ 120.820634][ T6649] wg1 speed is unknown, defaulting to 1000 [ 120.828422][ T6649] wg1 speed is unknown, defaulting to 1000 [ 120.847479][ T6649] wg1 speed is unknown, defaulting to 1000 [ 120.974186][ T6657] wg1 speed is unknown, defaulting to 1000 [ 120.984332][ T6657] wg1 speed is unknown, defaulting to 1000 [ 121.245442][ T6664] C: renamed from team_slave_0 [ 121.312521][ T6664] netlink: 'syz.3.140': attribute type 4 has an invalid length. [ 121.355327][ T6664] netlink: 116 bytes leftover after parsing attributes in process `syz.3.140'. [ 121.379860][ T6664] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 121.937122][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'. [ 121.959397][ T6676] netlink: 'syz.3.144': attribute type 7 has an invalid length. [ 121.967130][ T6676] netlink: 'syz.3.144': attribute type 8 has an invalid length. [ 122.040102][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 122.445648][ T6681] wg1 speed is unknown, defaulting to 1000 [ 122.456320][ T6681] wg1 speed is unknown, defaulting to 1000 [ 123.205913][ T6700] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 123.235179][ T6700] __nla_validate_parse: 2 callbacks suppressed [ 123.235198][ T6700] netlink: 224 bytes leftover after parsing attributes in process `syz.3.150'. [ 123.387094][ T6709] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 123.731719][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 123.804749][ T6730] erspan0: entered promiscuous mode [ 123.834706][ T6730] erspan0: left promiscuous mode [ 123.865802][ T6732] syzkaller0: entered promiscuous mode [ 123.872119][ T6732] syzkaller0: entered allmulticast mode [ 124.447735][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 124.568178][ T6747] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 124.609217][ T6747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.166'. [ 124.717225][ T6754] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.167'. [ 125.216780][ T6769] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 125.970035][ T6798] xt_TCPMSS: Only works on TCP SYN packets [ 125.995512][ T6803] netlink: 112 bytes leftover after parsing attributes in process `syz.4.178'. [ 126.224381][ T6807] syzkaller0: entered promiscuous mode [ 126.232600][ T6807] syzkaller0: entered allmulticast mode [ 126.542683][ T6832] netlink: 'syz.1.187': attribute type 1 has an invalid length. [ 126.550632][ T6832] netlink: 224 bytes leftover after parsing attributes in process `syz.1.187'. [ 127.007309][ T6842] netlink: 14 bytes leftover after parsing attributes in process `syz.0.190'. [ 128.027905][ T6842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.042410][ T6842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.055410][ T6842] bond0 (unregistering): Released all slaves [ 128.103502][ T6852] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 128.131633][ T6852] bridge1: entered allmulticast mode [ 128.170998][ T6857] netlink: 'syz.3.194': attribute type 4 has an invalid length. [ 128.526803][ T6877] netlink: 68 bytes leftover after parsing attributes in process `syz.1.199'. [ 128.556191][ T6877] netlink: 68 bytes leftover after parsing attributes in process `syz.1.199'. [ 128.684458][ T6883] netlink: 'syz.3.200': attribute type 10 has an invalid length. [ 128.704230][ T6883] bond0: (slave wlan1): Opening slave failed [ 128.723721][ T6885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.201'. [ 129.191681][ T5889] wg1 speed is unknown, defaulting to 1000 [ 129.642879][ T6915] nbd4: detected capacity change from 0 to 63 [ 129.667704][ T5839] block nbd4: Receive control failed (result -32) [ 129.684723][ T5837] block nbd4: Dead connection, failed to find a fallback [ 129.710579][ T5837] block nbd4: shutting down sockets [ 129.735474][ T5837] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.760056][ T5837] Buffer I/O error on dev nbd4, logical block 0, async page read [ 129.782046][ T5837] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.792348][ T5837] Buffer I/O error on dev nbd4, logical block 1, async page read [ 129.841407][ T5837] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.868152][ T5837] Buffer I/O error on dev nbd4, logical block 2, async page read [ 129.895445][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 129.914568][ T5837] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 129.959610][ T5837] Buffer I/O error on dev nbd4, logical block 3, async page read [ 129.969526][ T5837] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.004612][ T5837] Buffer I/O error on dev nbd4, logical block 0, async page read [ 130.031782][ T5837] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.048430][ T5837] Buffer I/O error on dev nbd4, logical block 1, async page read [ 130.056840][ T5837] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.066456][ T5837] Buffer I/O error on dev nbd4, logical block 2, async page read [ 130.083556][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 130.092517][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 130.114636][ T5837] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.133060][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 130.142099][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 130.145985][ T5837] Buffer I/O error on dev nbd4, logical block 3, async page read [ 130.179177][ T5837] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.208176][ T5837] Buffer I/O error on dev nbd4, logical block 0, async page read [ 130.240582][ T5837] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.265126][ T5837] Buffer I/O error on dev nbd4, logical block 1, async page read [ 130.276334][ T5837] ldm_validate_partition_table(): Disk read failed. [ 130.309631][ T5837] Dev nbd4: unable to read RDB block 0 [ 130.329815][ T5837] nbd4: unable to read partition table [ 130.428373][ T6953] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.219'. [ 130.624536][ T6957] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 130.637716][ T6957] bond0 (unregistering): Released all slaves [ 131.110966][ T7008] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 131.334295][ T7008] wg1 speed is unknown, defaulting to 1000 [ 131.357979][ T7008] wg1 speed is unknown, defaulting to 1000 [ 131.738230][ T7032] syzkaller0: entered promiscuous mode [ 131.744406][ T7032] syzkaller0: entered allmulticast mode [ 132.057552][ T7048] bond1: option arp_validate: invalid value (18446744073491447809) [ 132.082272][ T7048] bond1 (unregistering): Released all slaves [ 132.155113][ T7057] vlan0: entered promiscuous mode [ 132.199714][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.205964][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 132.217274][ T7063] netlink: 'syz.1.235': attribute type 13 has an invalid length. [ 132.408939][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.416897][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.621937][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.640345][ T7085] netlink: 196 bytes leftover after parsing attributes in process `syz.2.240'. [ 132.667733][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.974288][ T7081] bond0 (unregistering): Released all slaves [ 133.016483][ T2995] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.043804][ T2995] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.066849][ T2995] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.187012][ T7092] "syz.4.242" (7092) uses obsolete ecb(arc4) skcipher [ 133.214303][ T7099] ipvlan0: entered promiscuous mode [ 133.432521][ T7112] batadv0: entered promiscuous mode [ 133.438903][ T7112] team0: entered promiscuous mode [ 133.487178][ T7112] team_slave_0: entered promiscuous mode [ 133.498399][ T7112] team_slave_1: entered promiscuous mode [ 133.522648][ T7112] debugfs: 'hsr1' already exists in 'hsr' [ 133.529975][ T7119] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 133.538797][ T7112] Cannot create hsr debugfs directory [ 133.545099][ T7112] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 133.555469][ T7112] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 133.570800][ T7112] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 133.655703][ T7124] bond1: (slave gretap1): making interface the new active one [ 133.668378][ T7124] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 133.695050][ T7119] vlan0: entered allmulticast mode [ 133.729247][ T7119] bond1: entered allmulticast mode [ 133.772830][ T7119] gretap1: entered allmulticast mode [ 133.805852][ T7119] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 133.894080][ T7115] syzkaller0: entered promiscuous mode [ 133.900057][ T7115] syzkaller0: entered allmulticast mode [ 134.560359][ T7155] __nla_validate_parse: 4 callbacks suppressed [ 134.560376][ T7155] netlink: 88 bytes leftover after parsing attributes in process `syz.4.256'. [ 134.575811][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.256'. [ 134.943466][ T7166] netlink: 36 bytes leftover after parsing attributes in process `syz.4.257'. [ 135.530131][ T7141] wg1 speed is unknown, defaulting to 1000 [ 135.537247][ T7141] wg1 speed is unknown, defaulting to 1000 [ 135.913515][ T7188] netlink: 196 bytes leftover after parsing attributes in process `syz.3.261'. [ 136.113325][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'. [ 136.372351][ T7192] wg1 speed is unknown, defaulting to 1000 [ 136.381703][ T7192] wg1 speed is unknown, defaulting to 1000 [ 136.963998][ T7224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 136.987984][ T7224] netlink: 112 bytes leftover after parsing attributes in process `syz.3.271'. [ 137.154557][ T7230] netem: incorrect gi model size [ 137.187038][ T7230] netem: change failed [ 137.307446][ T7241] batadv1: entered promiscuous mode [ 137.438776][ T7242] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 137.634378][ T7252] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.278'. [ 137.648140][ T7254] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 137.711137][ T7254] bond1: entered promiscuous mode [ 137.717325][ T7254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.774207][ T7256] bond1: entered promiscuous mode [ 137.790862][ T7256] vcan1: entered promiscuous mode [ 137.791029][ T7254] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 137.795941][ T7256] vcan1: entered allmulticast mode [ 137.797645][ T7256] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 137.804422][ T7254] netlink: 'syz.1.280': attribute type 2 has an invalid length. [ 137.826124][ T7256] bond1: (slave vcan1): Error -95 calling set_mac_address [ 137.829146][ T7254] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 137.851234][ T7263] netlink: 196 bytes leftover after parsing attributes in process `syz.2.282'. [ 137.861683][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.280'. [ 138.057211][ T7269] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 138.216242][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.223213][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.385247][ T7284] tipc: Enabling of bearer rejected, failed to enable media [ 138.420651][ T7285] siw: device registration error -23 [ 138.506223][ T7287] netlink: 'syz.4.291': attribute type 15 has an invalid length. [ 138.536568][ T7289] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 138.537268][ T7287] netlink: 'syz.4.291': attribute type 15 has an invalid length. [ 138.563913][ T6151] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 138.575452][ T6151] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 138.639469][ T6151] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 138.654970][ T6151] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 138.679415][ T7289] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 138.697324][ T7296] netlink: 'syz.1.292': attribute type 6 has an invalid length. [ 138.772067][ T7302] syzkaller0: entered promiscuous mode [ 138.787861][ T7302] syzkaller0: entered allmulticast mode [ 138.798367][ T6151] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 139.017350][ T7313] netlink: 'syz.4.300': attribute type 2 has an invalid length. [ 139.053575][ T7313] : entered promiscuous mode [ 139.316488][ T7324] wg1 speed is unknown, defaulting to 1000 [ 139.374248][ T7324] wg1 speed is unknown, defaulting to 1000 [ 139.881366][ T7343] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 140.108787][ T7357] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 140.182070][ T7361] __nla_validate_parse: 6 callbacks suppressed [ 140.182092][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'. [ 140.208540][ T7357] bond0 (unregistering): Released all slaves [ 140.371646][ T7365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.312'. [ 140.386970][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'. [ 140.401564][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 140.431576][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.314'. [ 140.514564][ T7369] bond2: entered promiscuous mode [ 140.524972][ T7369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.606999][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.317'. [ 141.247698][ T7409] netlink: 68 bytes leftover after parsing attributes in process `syz.1.326'. [ 141.592345][ T7424] nbd2: detected capacity change from 0 to 63 [ 141.634718][ T7430] block nbd2: NBD_DISCONNECT [ 141.663821][ T7430] block nbd2: Disconnected due to user request. [ 141.704226][ T7430] block nbd2: shutting down sockets [ 141.794475][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 142.076058][ T7464] netlink: 32 bytes leftover after parsing attributes in process `syz.3.332'. [ 142.135675][ T7465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.333'. [ 142.174360][ T7463] bond0: (slave rose0): Releasing backup interface [ 142.215154][ T7463] delete_channel: no stack [ 142.228825][ T7463] delete_channel: no stack [ 142.268715][ T7461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.290445][ T7471] sctp: [Deprecated]: syz.2.337 (pid 7471) Use of int in maxseg socket option. [ 142.290445][ T7471] Use struct sctp_assoc_value instead [ 142.428960][ T7461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.577691][ T7461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.766551][ T7495] validate_nla: 8 callbacks suppressed [ 142.766570][ T7495] netlink: 'syz.1.345': attribute type 7 has an invalid length. [ 142.780629][ T7495] netlink: 'syz.1.345': attribute type 8 has an invalid length. [ 142.832927][ T7494] netlink: 'syz.2.343': attribute type 1 has an invalid length. [ 142.927045][ T7461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.077063][ T2995] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.122427][ T2995] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.172278][ T2995] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.245841][ T6991] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.330909][ T7511] netlink: 'syz.2.349': attribute type 15 has an invalid length. [ 143.457929][ T7518] bridge0: port 3(erspan0) entered blocking state [ 143.465134][ T7518] bridge0: port 3(erspan0) entered disabled state [ 143.472134][ T7518] erspan0: entered allmulticast mode [ 143.490203][ T7518] erspan0: entered promiscuous mode [ 143.501374][ T7518] bridge0: port 3(erspan0) entered blocking state [ 143.508226][ T7518] bridge0: port 3(erspan0) entered forwarding state [ 143.553724][ T7523] erspan0: left allmulticast mode [ 143.560245][ T7523] erspan0: left promiscuous mode [ 143.566783][ T7523] bridge0: port 3(erspan0) entered disabled state [ 143.576648][ T7522] netlink: 'syz.2.352': attribute type 1 has an invalid length. [ 144.527618][ T7555] IPv6: sit1: Disabled Multicast RS [ 144.570240][ T7555] sit1: entered promiscuous mode [ 144.610113][ T7555] sit1: entered allmulticast mode [ 144.676971][ T7564] team0: Caught tx_queue_len zero misconfig [ 144.738468][ T7565] netlink: 'syz.0.358': attribute type 5 has an invalid length. [ 144.752362][ T7569] netlink: 'syz.4.363': attribute type 1 has an invalid length. [ 145.166677][ T7596] bridge0: port 3(erspan0) entered blocking state [ 145.197628][ T7596] bridge0: port 3(erspan0) entered disabled state [ 145.221548][ T7596] erspan0: entered allmulticast mode [ 145.244551][ T7596] erspan0: entered promiscuous mode [ 145.263919][ T7596] bridge0: port 3(erspan0) entered blocking state [ 145.270584][ T7596] bridge0: port 3(erspan0) entered forwarding state [ 145.301868][ T7602] block nbd0: server does not support multiple connections per device. [ 145.324601][ T7603] erspan0: left allmulticast mode [ 145.334831][ T7602] block nbd0: shutting down sockets [ 145.379216][ T7603] erspan0: left promiscuous mode [ 145.406084][ T7603] bridge0: port 3(erspan0) entered disabled state [ 145.706788][ T7636] __nla_validate_parse: 14 callbacks suppressed [ 145.706810][ T7636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.379'. [ 145.736548][ T7636] netlink: 'syz.0.379': attribute type 7 has an invalid length. [ 145.756879][ T7636] netlink: 'syz.0.379': attribute type 8 has an invalid length. [ 145.775710][ T7639] netlink: 56 bytes leftover after parsing attributes in process `syz.4.380'. [ 145.781689][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 145.802279][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 145.827149][ T7636] team0: entered promiscuous mode [ 145.836297][ T7636] team_slave_0: entered promiscuous mode [ 145.843032][ T7636] team_slave_1: entered promiscuous mode [ 145.852570][ T7636] ip6gretap0: entered promiscuous mode [ 145.884463][ T7636] gretap0: entered promiscuous mode [ 145.920000][ T7636] debugfs: 'hsr1' already exists in 'hsr' [ 145.946106][ T7636] Cannot create hsr debugfs directory [ 146.062542][ T7642] wg1 speed is unknown, defaulting to 1000 [ 146.070503][ T7642] wg1 speed is unknown, defaulting to 1000 [ 146.152359][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'. [ 146.162148][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'. [ 146.518151][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 146.836503][ T7677] syzkaller0: entered promiscuous mode [ 146.859076][ T7677] syzkaller0: entered allmulticast mode [ 148.012171][ T7728] netlink: 'syz.3.394': attribute type 10 has an invalid length. [ 148.023249][ T7728] netlink: 2 bytes leftover after parsing attributes in process `syz.3.394'. [ 148.723020][ T7728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.856658][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.396'. [ 148.865743][ T7735] netlink: 'syz.2.396': attribute type 7 has an invalid length. [ 148.879233][ T7735] netlink: 'syz.2.396': attribute type 8 has an invalid length. [ 148.907033][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 148.921303][ T7734] : entered promiscuous mode [ 149.157906][ T7748] vlan0: entered promiscuous mode [ 149.391429][ T7765] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 149.411304][ T7765] bond0 (unregistering): Released all slaves [ 149.744001][ T7787] wg1: entered promiscuous mode [ 149.756562][ T7787] wg1: entered allmulticast mode [ 150.420193][ T7808] syzkaller1: entered promiscuous mode [ 150.429146][ T7808] syzkaller1: entered allmulticast mode [ 150.540932][ T7819] af_packet: tpacket_rcv: packet too big, clamped from 3960 to 3942. macoff=106 [ 150.593190][ T7816] wg1 speed is unknown, defaulting to 1000 [ 150.666699][ T7816] wg1 speed is unknown, defaulting to 1000 [ 150.883500][ T7836] __nla_validate_parse: 5 callbacks suppressed [ 150.883520][ T7836] netlink: 132 bytes leftover after parsing attributes in process `syz.2.422'. [ 151.084177][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.422'. [ 151.516205][ T7856] wg1 speed is unknown, defaulting to 1000 [ 151.537886][ T7856] wg1 speed is unknown, defaulting to 1000 [ 152.198310][ T914] IPVS: starting estimator thread 0... [ 152.320680][ T7882] IPVS: using max 27 ests per chain, 64800 per kthread [ 152.421172][ T7896] netlink: 68 bytes leftover after parsing attributes in process `syz.1.438'. [ 152.707889][ T7915] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 152.715936][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 152.840982][ T7917] batadv0: entered promiscuous mode [ 152.846681][ T7917] vlan0: entered promiscuous mode [ 153.394538][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 153.409207][ T7937] netlink: 'syz.3.446': attribute type 7 has an invalid length. [ 153.416921][ T7937] netlink: 'syz.3.446': attribute type 8 has an invalid length. [ 153.429181][ T7936] syzkaller0: entered promiscuous mode [ 153.433221][ T7939] netlink: 'syz.2.447': attribute type 13 has an invalid length. [ 153.434733][ T7936] syzkaller0: entered allmulticast mode [ 153.450097][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 153.493869][ T7937] team0: entered promiscuous mode [ 153.502550][ T7937] C: entered promiscuous mode [ 153.512937][ T7937] team_slave_1: entered promiscuous mode [ 153.525471][ T7937] ip6gretap0: entered promiscuous mode [ 153.534048][ T7937] gretap0: entered promiscuous mode [ 153.560784][ T7937] debugfs: 'hsr1' already exists in 'hsr' [ 153.575748][ T7937] Cannot create hsr debugfs directory [ 153.601658][ T7937] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 153.630824][ T7937] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 153.647885][ T7949] netlink: 92 bytes leftover after parsing attributes in process `syz.0.450'. [ 153.676875][ T7937] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 154.085837][ T7959] Bluetooth: MGMT ver 1.23 [ 155.575847][ T7975] sctp: [Deprecated]: syz.4.456 (pid 7975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.575847][ T7975] Use struct sctp_sack_info instead [ 155.815358][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 155.855622][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 156.461798][ T7988] netlink: 196 bytes leftover after parsing attributes in process `syz.4.459'. [ 157.271386][ T7965] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 157.473333][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 157.652862][ T7996] netlink: 'syz.2.461': attribute type 13 has an invalid length. [ 157.857580][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.865391][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.879210][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.882186][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 157.919276][ T8002] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 157.948930][ T8005] netlink: zone id is out of range [ 157.969155][ T8005] netlink: zone id is out of range [ 157.994801][ T7996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.010689][ T7996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.205860][ T145] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.219873][ T145] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.236486][ T145] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.262213][ T145] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.308481][ T7998] wg1 speed is unknown, defaulting to 1000 [ 158.316700][ T7998] wg1 speed is unknown, defaulting to 1000 [ 158.889222][ T8019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.467'. [ 159.058748][ T8023] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 159.535252][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 159.560907][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 159.719439][ T8033] syzkaller0: entered promiscuous mode [ 159.725174][ T8033] syzkaller0: entered allmulticast mode [ 159.774226][ T8033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.470'. [ 159.811673][ T8033] netlink: 56 bytes leftover after parsing attributes in process `syz.3.470'. [ 160.078089][ T8041] wg1 speed is unknown, defaulting to 1000 [ 160.085715][ T8041] wg1 speed is unknown, defaulting to 1000 [ 160.224247][ T8053] Bluetooth: MGMT ver 1.23 [ 160.248024][ T8053] netlink: 280 bytes leftover after parsing attributes in process `syz.0.477'. [ 160.455907][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.472'. [ 161.472785][ T8091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.484'. [ 161.500473][ T8092] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 161.518681][ T8091] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 161.640924][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 161.647411][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.050562][ T8109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.489'. [ 162.075164][ T8106] wg1 speed is unknown, defaulting to 1000 [ 162.107789][ T8106] wg1 speed is unknown, defaulting to 1000 [ 162.234481][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'. [ 162.263337][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'. [ 162.308973][ T8126] batadv0: entered promiscuous mode [ 162.324739][ T8126] batadv0: left promiscuous mode [ 162.649557][ T8147] netlink: 64 bytes leftover after parsing attributes in process `syz.0.497'. [ 162.659781][ T8135] wg1 speed is unknown, defaulting to 1000 [ 162.681402][ T8135] wg1 speed is unknown, defaulting to 1000 [ 162.782175][ T8145] delete_channel: no stack [ 162.965351][ T8161] netlink: 'syz.0.499': attribute type 16 has an invalid length. [ 162.973671][ T8161] netlink: 'syz.0.499': attribute type 17 has an invalid length. [ 163.170166][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.177965][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.282160][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'. [ 163.323033][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.502'. [ 163.382430][ T8178] netlink: 196 bytes leftover after parsing attributes in process `syz.1.500'. [ 163.417425][ T8161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.442768][ T8161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.693598][ T8154] wg1 speed is unknown, defaulting to 1000 [ 163.715613][ T10] wg1 speed is unknown, defaulting to 1000 [ 163.722637][ T8170] syzkaller1: entered promiscuous mode [ 163.728177][ T8170] syzkaller1: entered allmulticast mode [ 163.744151][ T10] syz: Port: 1 Link DOWN [ 163.784137][ T8177] vxcan3: entered allmulticast mode [ 163.811423][ T60] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.820435][ T60] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.829817][ T8154] wg1 speed is unknown, defaulting to 1000 [ 163.835912][ T8183] syz_tun: entered allmulticast mode [ 163.847030][ T60] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.857413][ T60] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.904033][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 164.239188][ T8196] netlink: 'syz.2.508': attribute type 39 has an invalid length. [ 164.284731][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 164.316767][ T8196] hsr_slave_1 (unregistering): left promiscuous mode [ 164.501041][ T8180] syz_tun: left allmulticast mode [ 164.599514][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.605663][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 164.679570][ T8219] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 164.683809][ T8218] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 164.990163][ T8237] macvlan0: tun_chr_ioctl cmd 2148553947 [ 165.014394][ T8237] macvlan0: tun_chr_ioctl cmd 2147767521 [ 165.031647][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.043724][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.085205][ T8237] batadv0 (unregistering): left promiscuous mode [ 165.333902][ T8247] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 165.389508][ T8247] bond3: entered promiscuous mode [ 165.395962][ T8247] bond3: entered allmulticast mode [ 165.402318][ T8247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.571070][ T8258] syzkaller0: entered promiscuous mode [ 165.576614][ T8258] syzkaller0: entered allmulticast mode [ 165.667285][ T8262] xt_hashlimit: size too large, truncated to 1048576 [ 165.728799][ T8267] –: renamed from veth1_to_team [ 165.804343][ T8260] netlink: 'syz.1.526': attribute type 16 has an invalid length. [ 165.851193][ T8260] netlink: 'syz.1.526': attribute type 17 has an invalid length. [ 165.909853][ T8270] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 165.990466][ T8273] x_tables: duplicate underflow at hook 1 [ 165.998329][ T8260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.033521][ T8260] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.065438][ T8260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.588702][ T8296] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 167.702178][ T8296] bond2: entered promiscuous mode [ 167.707658][ T8296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.779276][ T8309] sctp: [Deprecated]: syz.4.539 (pid 8309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.779276][ T8309] Use struct sctp_sack_info instead [ 167.780327][ T8312] __nla_validate_parse: 11 callbacks suppressed [ 167.780367][ T8312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'. [ 167.814846][ T8313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.540'. [ 167.825232][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 167.841658][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 167.845304][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.534'. [ 167.851583][ T8307] tipc: Started in network mode [ 167.866717][ T8307] tipc: Node identity a6c0e305bd63, cluster identity 4711 [ 167.874272][ T8307] tipc: Enabled bearer , priority 0 [ 167.901235][ T8310] wg1 speed is unknown, defaulting to 1000 [ 167.906089][ T8315] syzkaller0: entered promiscuous mode [ 167.937782][ T8315] syzkaller0: entered allmulticast mode [ 167.965645][ T8321] netlink: 88 bytes leftover after parsing attributes in process `syz.4.541'. [ 167.986316][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.541'. [ 167.993005][ T8296] bond2: (slave bridge1): making interface the new active one [ 168.019693][ T8296] bridge1: entered promiscuous mode [ 168.027587][ T8296] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 168.059836][ T8310] wg1 speed is unknown, defaulting to 1000 [ 168.078744][ T8322] tipc: Resetting bearer [ 168.109599][ T8322] tipc: Disabling bearer [ 168.136252][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 168.188916][ T8329] vlan1: entered promiscuous mode [ 168.630907][ T8360] netlink: 88 bytes leftover after parsing attributes in process `syz.1.554'. [ 168.640105][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.554'. [ 168.761354][ T8367] netlink: 'syz.2.552': attribute type 12 has an invalid length. [ 168.938287][ T8370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.693257][ T8389] wg1 speed is unknown, defaulting to 1000 [ 169.740271][ T8389] wg1 speed is unknown, defaulting to 1000 [ 169.743486][ T8398] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 169.849936][ T8405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.011413][ T8415] Cannot find set identified by id 2 to match [ 170.082708][ T8417] xt_connbytes: Forcing CT accounting to be enabled [ 170.106882][ T8417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.198235][ T8424] netlink: 'syz.2.574': attribute type 30 has an invalid length. [ 170.208001][ T8425] netlink: 'syz.2.574': attribute type 30 has an invalid length. [ 170.235031][ T8424] netlink: 'syz.2.574': attribute type 30 has an invalid length. [ 170.237177][ T6984] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.243192][ T8425] netlink: 'syz.2.574': attribute type 30 has an invalid length. [ 170.267840][ T6984] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.282977][ T6984] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.301179][ T6984] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.324922][ T8429] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 170.399618][ T8433] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 170.483136][ T8435] IPVS: persistence engine module ip_vs_pe_ not found [ 170.688077][ T8447] batadv0: entered promiscuous mode [ 170.715975][ T8447] batadv0: left promiscuous mode [ 171.334518][ T8476] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 171.365072][ T8483] wireguard0: entered promiscuous mode [ 171.370736][ T8483] wireguard0: entered allmulticast mode [ 171.391560][ T8483] team0: Device wireguard0 is of different type [ 171.471727][ T8480] wg1 speed is unknown, defaulting to 1000 [ 171.489811][ T8480] wg1 speed is unknown, defaulting to 1000 [ 171.600086][ T8494] wg1 speed is unknown, defaulting to 1000 [ 171.628542][ T8494] wg1 speed is unknown, defaulting to 1000 [ 171.724147][ T8500] wg1 speed is unknown, defaulting to 1000 [ 171.745646][ T8500] wg1 speed is unknown, defaulting to 1000 [ 172.594750][ T8532] wg1 speed is unknown, defaulting to 1000 [ 172.660312][ T8532] wg1 speed is unknown, defaulting to 1000 [ 172.661898][ T8531] wg1 speed is unknown, defaulting to 1000 [ 172.680774][ T8542] netlink: 'syz.4.604': attribute type 2 has an invalid length. [ 172.704052][ T8542] @„;: entered promiscuous mode [ 172.733500][ T8531] wg1 speed is unknown, defaulting to 1000 [ 173.193049][ T8568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.262586][ T8570] __nla_validate_parse: 20 callbacks suppressed [ 173.262607][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 173.301931][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 173.903134][ T8589] x_tables: duplicate underflow at hook 1 [ 174.145985][ T8602] netlink: 232 bytes leftover after parsing attributes in process `syz.4.615'. [ 174.198026][ T8602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.615'. [ 174.503181][ T8624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.621'. [ 174.576901][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 174.631042][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 174.661655][ T8630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.678928][ T8634] bridge0: port 4(erspan0) entered blocking state [ 174.702002][ T8634] bridge0: port 4(erspan0) entered disabled state [ 174.712277][ T8634] erspan0: entered allmulticast mode [ 174.730573][ T8634] erspan0: entered promiscuous mode [ 174.747817][ T8643] erspan0: left allmulticast mode [ 174.775431][ T8643] erspan0: left promiscuous mode [ 174.813748][ T8643] bridge0: port 4(erspan0) entered disabled state [ 175.204720][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 175.225440][ T8657] netlink: 32 bytes leftover after parsing attributes in process `syz.4.628'. [ 175.276669][ T8657] ip6gre1: entered promiscuous mode [ 175.298314][ T8657] ip6gre1: entered allmulticast mode [ 175.546879][ T8667] netlink: 152 bytes leftover after parsing attributes in process `syz.2.631'. [ 175.800235][ T8685] netlink: 'syz.2.633': attribute type 12 has an invalid length. [ 175.929397][ T8686] wg1 speed is unknown, defaulting to 1000 [ 175.947349][ T8686] wg1 speed is unknown, defaulting to 1000 [ 176.448349][ T8707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.499247][ T8714] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 177.222472][ T8745] wg1 speed is unknown, defaulting to 1000 [ 177.242477][ T8745] wg1 speed is unknown, defaulting to 1000 [ 177.779342][ T8763] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 177.837182][ T8765] syzkaller0: entered promiscuous mode [ 177.843105][ T8765] syzkaller0: entered allmulticast mode [ 178.013790][ T8780] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.027867][ T8779] bridge0: port 3(erspan0) entered blocking state [ 178.035211][ T8779] bridge0: port 3(erspan0) entered disabled state [ 178.042240][ T8779] erspan0: entered allmulticast mode [ 178.050756][ T8779] erspan0: entered promiscuous mode [ 178.064091][ T8785] erspan0: left allmulticast mode [ 178.069767][ T8785] erspan0: left promiscuous mode [ 178.075327][ T8785] bridge0: port 3(erspan0) entered disabled state [ 178.275252][ T8787] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 178.331635][ T8787] wg1 speed is unknown, defaulting to 1000 [ 178.344534][ T8787] wg1 speed is unknown, defaulting to 1000 [ 178.445528][ T8795] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 178.593772][ T8795] wg1 speed is unknown, defaulting to 1000 [ 178.613919][ T8795] wg1 speed is unknown, defaulting to 1000 [ 178.841284][ T8809] __nla_validate_parse: 13 callbacks suppressed [ 178.841304][ T8809] netlink: 88 bytes leftover after parsing attributes in process `syz.3.670'. [ 178.856808][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.670'. [ 178.995642][ T8816] netlink: 'syz.3.673': attribute type 1 has an invalid length. [ 179.012351][ T8816] netlink: 224 bytes leftover after parsing attributes in process `syz.3.673'. [ 179.434360][ T8841] netlink: 71 bytes leftover after parsing attributes in process `syz.0.679'. [ 179.521623][ T8848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 179.531128][ T8848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 179.541473][ T8843] wg1 speed is unknown, defaulting to 1000 [ 179.565842][ T8843] wg1 speed is unknown, defaulting to 1000 [ 179.708583][ T8856] netlink: 'syz.4.683': attribute type 1 has an invalid length. [ 179.767826][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.683'. [ 179.843586][ T8861] bond1: (slave bridge2): making interface the new active one [ 179.862764][ T8861] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 180.059187][ T8874] bridge0: port 3(erspan0) entered blocking state [ 180.065846][ T8874] bridge0: port 3(erspan0) entered disabled state [ 180.073358][ T8874] erspan0: entered allmulticast mode [ 180.080662][ T8874] erspan0: entered promiscuous mode [ 180.091227][ T8874] erspan0: left allmulticast mode [ 180.096340][ T8874] erspan0: left promiscuous mode [ 180.101863][ T8874] bridge0: port 3(erspan0) entered disabled state [ 180.516773][ T8889] tipc: Started in network mode [ 180.524915][ T8889] tipc: Node identity 3a61e91e6e9b, cluster identity 4711 [ 180.534029][ T8889] tipc: Enabled bearer , priority 0 [ 180.552964][ T8889] syzkaller0: entered promiscuous mode [ 180.558704][ T8889] syzkaller0: entered allmulticast mode [ 180.593651][ T8889] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 180.636727][ T8889] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 180.726798][ T8896] tipc: Resetting bearer [ 180.803011][ T8896] tipc: Disabling bearer [ 181.113768][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.692'. [ 181.347574][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.694'. [ 181.389154][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.694'. [ 181.416045][ T8916] batadv0: entered promiscuous mode [ 181.499855][ T8916] batadv0: left promiscuous mode [ 181.934999][ T8936] syzkaller0: entered promiscuous mode [ 181.975324][ T8936] syzkaller0: entered allmulticast mode [ 183.799227][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.805756][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 184.564319][ T8957] bridge0: port 3(erspan0) entered blocking state [ 184.599325][ T8957] bridge0: port 3(erspan0) entered disabled state [ 184.605995][ T8957] erspan0: entered allmulticast mode [ 184.640829][ T8957] erspan0: entered promiscuous mode [ 184.662963][ T8958] erspan0: left allmulticast mode [ 184.668072][ T8958] erspan0: left promiscuous mode [ 184.705726][ T8958] bridge0: port 3(erspan0) entered disabled state [ 184.747721][ T8965] netlink: 'syz.4.706': attribute type 1 has an invalid length. [ 184.761375][ T8966] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 184.847225][ T8972] gretap1: entered allmulticast mode [ 184.939396][ T8972] bond2: (slave gretap1): making interface the new active one [ 184.948238][ T8972] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 185.085039][ T8987] __nla_validate_parse: 3 callbacks suppressed [ 185.085059][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.712'. [ 185.101699][ T8987] netlink: 'syz.2.712': attribute type 7 has an invalid length. [ 185.109915][ T8987] netlink: 'syz.2.712': attribute type 8 has an invalid length. [ 185.120795][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 185.316954][ T8993] netlink: 'syz.4.714': attribute type 5 has an invalid length. [ 185.487670][ T8993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.714'. [ 185.507058][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.515495][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.558665][ T9001] bridge0: port 3(erspan0) entered blocking state [ 185.572832][ T8999] netlink: 71 bytes leftover after parsing attributes in process `syz.2.715'. [ 185.589206][ T9001] bridge0: port 3(erspan0) entered disabled state [ 185.626529][ T9001] erspan0: entered allmulticast mode [ 185.646207][ T9001] erspan0: entered promiscuous mode [ 185.678428][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.717'. [ 186.289993][ T9025] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 186.574837][ T5839] Bluetooth: hci4: link tx timeout [ 186.580671][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.606528][ T9030] netlink: 196 bytes leftover after parsing attributes in process `syz.0.723'. [ 186.690229][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 186.700215][ T9041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.726'. [ 187.657713][ T9072] netlink: 71 bytes leftover after parsing attributes in process `syz.0.732'. [ 188.067392][ T9083] netlink: 296 bytes leftover after parsing attributes in process `syz.2.734'. [ 188.241719][ T9096] bridge0: port 3(erspan0) entered blocking state [ 188.252170][ T9096] bridge0: port 3(erspan0) entered disabled state [ 188.258855][ T9096] erspan0: entered allmulticast mode [ 188.272633][ T9096] erspan0: entered promiscuous mode [ 188.290566][ T9096] erspan0: left allmulticast mode [ 188.299237][ T9096] erspan0: left promiscuous mode [ 188.308050][ T9096] bridge0: port 3(erspan0) entered disabled state [ 188.429582][ T9103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.437226][ T9103] IPv6: NLM_F_CREATE should be set when creating new route [ 188.444652][ T9103] IPv6: NLM_F_CREATE should be set when creating new route [ 188.451977][ T9103] IPv6: NLM_F_CREATE should be set when creating new route [ 188.599356][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 188.667993][ T9111] wg1 speed is unknown, defaulting to 1000 [ 188.675938][ T9111] wg1 speed is unknown, defaulting to 1000 [ 188.810121][ T9114] bridge4: entered promiscuous mode [ 188.816436][ T9114] bridge4: entered allmulticast mode [ 189.293454][ T9112] netlink: 'syz.0.741': attribute type 2 has an invalid length. [ 189.393603][ T9132] syzkaller0: entered promiscuous mode [ 189.406061][ T9132] syzkaller0: entered allmulticast mode [ 190.408159][ T9177] __nla_validate_parse: 9 callbacks suppressed [ 190.408173][ T9177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.758'. [ 190.455326][ T9179] netlink: 88 bytes leftover after parsing attributes in process `syz.4.759'. [ 190.464591][ T9179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.759'. [ 190.922740][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 190.953753][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 191.011571][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 191.033040][ T9198] team0: entered allmulticast mode [ 191.038291][ T9198] team_slave_0: entered allmulticast mode [ 191.044285][ T9198] team_slave_1: entered allmulticast mode [ 191.142373][ T9203] FAULT_INJECTION: forcing a failure. [ 191.142373][ T9203] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 191.157824][ T9203] CPU: 1 UID: 0 PID: 9203 Comm: syz.2.767 Not tainted syzkaller #0 PREEMPT(full) [ 191.157855][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.157883][ T9203] Call Trace: [ 191.157892][ T9203] [ 191.157901][ T9203] dump_stack_lvl+0xe8/0x150 [ 191.157935][ T9203] should_fail_ex+0x414/0x560 [ 191.157975][ T9203] _copy_from_user+0x2d/0xb0 [ 191.158003][ T9203] do_ipv6_setsockopt+0x23e/0x2eb0 [ 191.158033][ T9203] ? get_pid_task+0x20/0x1f0 [ 191.158060][ T9203] ? aa_label_sk_perm+0x4c4/0x610 [ 191.158093][ T9203] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 191.158122][ T9203] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 191.158147][ T9203] ? get_pid_task+0x20/0x1f0 [ 191.158171][ T9203] ? get_pid_task+0x20/0x1f0 [ 191.158221][ T9203] ? __lock_acquire+0x6b6/0x2cf0 [ 191.158277][ T9203] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 191.158301][ T9203] ? aa_sk_perm+0x15f/0x920 [ 191.158328][ T9203] ? aa_sk_perm+0x7ee/0x920 [ 191.158359][ T9203] ? __pfx_aa_sk_perm+0x10/0x10 [ 191.158388][ T9203] ? __fget_files+0x2a/0x420 [ 191.158413][ T9203] ? aa_sock_opt_perm+0xff/0x1a0 [ 191.158445][ T9203] ipv6_setsockopt+0x59/0x170 [ 191.158473][ T9203] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 191.158510][ T9203] do_sock_setsockopt+0x17c/0x1b0 [ 191.158541][ T9203] __x64_sys_setsockopt+0x13f/0x1b0 [ 191.158572][ T9203] do_syscall_64+0xec/0xf80 [ 191.158594][ T9203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.158615][ T9203] ? trace_irq_disable+0x37/0x100 [ 191.158643][ T9203] ? clear_bhb_loop+0x60/0xb0 [ 191.158669][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.158690][ T9203] RIP: 0033:0x7f762c78f749 [ 191.158716][ T9203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.158734][ T9203] RSP: 002b:00007f762d60c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.158761][ T9203] RAX: ffffffffffffffda RBX: 00007f762c9e5fa0 RCX: 00007f762c78f749 [ 191.158781][ T9203] RDX: 0000000000000037 RSI: 0000000000000029 RDI: 0000000000000003 [ 191.158793][ T9203] RBP: 00007f762d60c090 R08: 0000000000000008 R09: 0000000000000000 [ 191.158806][ T9203] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 191.158819][ T9203] R13: 00007f762c9e6038 R14: 00007f762c9e5fa0 R15: 00007ffde57ac208 [ 191.158854][ T9203] [ 191.465266][ T9211] netlink: 88 bytes leftover after parsing attributes in process `syz.2.770'. [ 191.475110][ T9211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.770'. [ 191.542022][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.771'. [ 191.733920][ T9217] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 191.786581][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 191.814824][ T9223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.927401][ T9223] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 191.961050][ T9223] bond4 (unregistering): Released all slaves [ 192.083395][ T9237] bridge0: port 3(bond0) entered blocking state [ 192.089842][ T9237] bridge0: port 3(bond0) entered forwarding state [ 192.105309][ T9237] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.121608][ T9237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.198763][ T9243] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.325135][ T9246] tipc: Started in network mode [ 192.330745][ T9246] tipc: Node identity 2af2162535f9, cluster identity 4711 [ 192.338165][ T9246] tipc: Enabled bearer , priority 0 [ 192.349254][ T9246] syzkaller0: entered promiscuous mode [ 192.355085][ T9246] syzkaller0: entered allmulticast mode [ 192.380050][ T9246] team_slave_0: mtu greater than device maximum [ 192.417282][ T9245] tipc: Resetting bearer [ 192.459108][ T9245] tipc: Disabling bearer [ 192.627286][ T9250] xt_connbytes: Forcing CT accounting to be enabled [ 192.999681][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.005950][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 193.380878][ T9292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.428147][ T9292] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 193.441788][ T9292] bond4 (unregistering): Released all slaves [ 193.469277][ T9295] batadv0: entered promiscuous mode [ 193.475707][ T9295] batadv0: left promiscuous mode [ 193.955694][ T9311] ip6_vti0 speed is unknown, defaulting to 1000 [ 193.988444][ T9311] ip6_vti0 speed is unknown, defaulting to 1000 [ 194.011294][ T9311] ip6_vti0 speed is unknown, defaulting to 1000 [ 194.044909][ T9317] FAULT_INJECTION: forcing a failure. [ 194.044909][ T9317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.059528][ T9317] CPU: 1 UID: 0 PID: 9317 Comm: syz.0.802 Not tainted syzkaller #0 PREEMPT(full) [ 194.059559][ T9317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.059573][ T9317] Call Trace: [ 194.059582][ T9317] [ 194.059601][ T9317] dump_stack_lvl+0xe8/0x150 [ 194.059636][ T9317] should_fail_ex+0x414/0x560 [ 194.059677][ T9317] _copy_from_user+0x2d/0xb0 [ 194.059706][ T9317] memdup_sockptr_noprof+0x95/0x100 [ 194.059742][ T9317] ipv6_set_opt_hdr+0x1e7/0x6b0 [ 194.059779][ T9317] do_ipv6_setsockopt+0x135a/0x2eb0 [ 194.059808][ T9317] ? get_pid_task+0x20/0x1f0 [ 194.059846][ T9317] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 194.059890][ T9317] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 194.059914][ T9317] ? get_pid_task+0x20/0x1f0 [ 194.059938][ T9317] ? get_pid_task+0x20/0x1f0 [ 194.059976][ T9317] ? __lock_acquire+0x6b6/0x2cf0 [ 194.060015][ T9317] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 194.060037][ T9317] ? aa_sk_perm+0x15f/0x920 [ 194.060064][ T9317] ? aa_sk_perm+0x7ee/0x920 [ 194.060094][ T9317] ? __pfx_aa_sk_perm+0x10/0x10 [ 194.060122][ T9317] ? __fget_files+0x2a/0x420 [ 194.060146][ T9317] ? aa_sock_opt_perm+0xff/0x1a0 [ 194.060176][ T9317] ipv6_setsockopt+0x59/0x170 [ 194.060204][ T9317] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 194.060240][ T9317] do_sock_setsockopt+0x17c/0x1b0 [ 194.060270][ T9317] __x64_sys_setsockopt+0x13f/0x1b0 [ 194.060304][ T9317] do_syscall_64+0xec/0xf80 [ 194.060325][ T9317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.060345][ T9317] ? trace_irq_disable+0x37/0x100 [ 194.060372][ T9317] ? clear_bhb_loop+0x60/0xb0 [ 194.060396][ T9317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.060414][ T9317] RIP: 0033:0x7f8a42d8f749 [ 194.060433][ T9317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.060449][ T9317] RSP: 002b:00007f8a43d0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 194.060471][ T9317] RAX: ffffffffffffffda RBX: 00007f8a42fe5fa0 RCX: 00007f8a42d8f749 [ 194.060485][ T9317] RDX: 0000000000000037 RSI: 0000000000000029 RDI: 0000000000000003 [ 194.060497][ T9317] RBP: 00007f8a43d0f090 R08: 0000000000000008 R09: 0000000000000000 [ 194.060509][ T9317] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 194.060527][ T9317] R13: 00007f8a42fe6038 R14: 00007f8a42fe5fa0 R15: 00007ffd0a085ae8 [ 194.060551][ T9317] [ 194.484352][ T9311] infiniband syz2: set down [ 194.489252][ T9311] infiniband syz2: added ip6_vti0 [ 194.500467][ T43] ip6_vti0 speed is unknown, defaulting to 1000 [ 194.544765][ T9311] RDS/IB: syz2: added [ 194.549840][ T9311] smc: adding ib device syz2 with port count 1 [ 194.556299][ T9311] smc: ib device syz2 port 1 has no pnetid [ 194.565806][ T43] ip6_vti0 speed is unknown, defaulting to 1000 [ 194.575073][ T9311] ip6_vti0 speed is unknown, defaulting to 1000 [ 194.866282][ T9334] vlan0: entered promiscuous mode [ 194.871856][ T9334] veth0: entered promiscuous mode [ 195.025997][ T9342] netlink: 'syz.2.809': attribute type 3 has an invalid length. [ 195.133304][ T9311] ip6_vti0 speed is unknown, defaulting to 1000 [ 195.273849][ T9353] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 195.285577][ T9355] netlink: 'syz.1.814': attribute type 1 has an invalid length. [ 195.450655][ T9361] wg1 speed is unknown, defaulting to 1000 [ 195.470915][ T9361] wg1 speed is unknown, defaulting to 1000 [ 195.781463][ T9361] ip6_vti0 speed is unknown, defaulting to 1000 [ 195.958364][ T9379] FAULT_INJECTION: forcing a failure. [ 195.958364][ T9379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.980239][ T9379] CPU: 0 UID: 0 PID: 9379 Comm: syz.0.822 Not tainted syzkaller #0 PREEMPT(full) [ 195.980269][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.980283][ T9379] Call Trace: [ 195.980291][ T9379] [ 195.980301][ T9379] dump_stack_lvl+0xe8/0x150 [ 195.980334][ T9379] should_fail_ex+0x414/0x560 [ 195.980371][ T9379] _copy_from_iter+0x1cd/0x1630 [ 195.980405][ T9379] ? __pfx__copy_from_iter+0x10/0x10 [ 195.980428][ T9379] ? __build_skb_around+0x22d/0x3c0 [ 195.980453][ T9379] ? __alloc_skb+0x198/0x3a0 [ 195.980486][ T9379] ? netlink_sendmsg+0x642/0xb30 [ 195.980513][ T9379] ? skb_put+0x11b/0x210 [ 195.980540][ T9379] netlink_sendmsg+0x6b2/0xb30 [ 195.980579][ T9379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.980611][ T9379] ? aa_sock_msg_perm+0xf1/0x1b0 [ 195.980676][ T9379] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.980698][ T9379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.980728][ T9379] __sock_sendmsg+0x21c/0x270 [ 195.980787][ T9379] ____sys_sendmsg+0x505/0x820 [ 195.980827][ T9379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.980863][ T9379] ? import_iovec+0x74/0xa0 [ 195.980892][ T9379] ___sys_sendmsg+0x21f/0x2a0 [ 195.980920][ T9379] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.980988][ T9379] ? __fget_files+0x2a/0x420 [ 195.981015][ T9379] ? __fget_files+0x3a0/0x420 [ 195.981052][ T9379] __x64_sys_sendmsg+0x19b/0x260 [ 195.981082][ T9379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.981119][ T9379] ? __pfx_ksys_write+0x10/0x10 [ 195.981150][ T9379] do_syscall_64+0xec/0xf80 [ 195.981174][ T9379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.981194][ T9379] ? trace_irq_disable+0x37/0x100 [ 195.981220][ T9379] ? clear_bhb_loop+0x60/0xb0 [ 195.981279][ T9379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.981315][ T9379] RIP: 0033:0x7f8a42d8f749 [ 195.981342][ T9379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.981368][ T9379] RSP: 002b:00007f8a43d0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.981428][ T9379] RAX: ffffffffffffffda RBX: 00007f8a42fe5fa0 RCX: 00007f8a42d8f749 [ 195.981488][ T9379] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 195.981552][ T9379] RBP: 00007f8a43d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 195.981587][ T9379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.981600][ T9379] R13: 00007f8a42fe6038 R14: 00007f8a42fe5fa0 R15: 00007ffd0a085ae8 [ 195.981665][ T9379] [ 196.337524][ T9311] ip6_vti0 speed is unknown, defaulting to 1000 [ 196.649138][ T9396] __nla_validate_parse: 16 callbacks suppressed [ 196.649158][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. [ 196.668029][ T9397] netlink: 'syz.0.824': attribute type 3 has an invalid length. [ 196.679196][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. [ 196.696201][ T9397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.824'. [ 196.707718][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'. [ 196.829146][ T9401] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 196.857494][ T9401] netlink: 224 bytes leftover after parsing attributes in process `syz.0.827'. [ 196.966674][ T9311] ip6_vti0 speed is unknown, defaulting to 1000 [ 197.240742][ T9416] FAULT_INJECTION: forcing a failure. [ 197.240742][ T9416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.257412][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.832'. [ 197.277050][ T9416] CPU: 0 UID: 0 PID: 9416 Comm: syz.2.831 Not tainted syzkaller #0 PREEMPT(full) [ 197.277081][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.277095][ T9416] Call Trace: [ 197.277103][ T9416] [ 197.277112][ T9416] dump_stack_lvl+0xe8/0x150 [ 197.277146][ T9416] should_fail_ex+0x414/0x560 [ 197.277186][ T9416] _copy_to_user+0x31/0xb0 [ 197.277216][ T9416] simple_read_from_buffer+0xe1/0x170 [ 197.277248][ T9416] proc_fail_nth_read+0x1b3/0x220 [ 197.277275][ T9416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.277302][ T9416] ? rw_verify_area+0x2a6/0x4d0 [ 197.277335][ T9416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.277359][ T9416] vfs_read+0x200/0xa30 [ 197.277378][ T9416] ? fdget_pos+0x247/0x320 [ 197.277410][ T9416] ? __pfx___mutex_lock+0x10/0x10 [ 197.277435][ T9416] ? __pfx_vfs_read+0x10/0x10 [ 197.277457][ T9416] ? __fget_files+0x2a/0x420 [ 197.277499][ T9416] ? __fget_files+0x3a0/0x420 [ 197.277524][ T9416] ? __fget_files+0x2a/0x420 [ 197.277559][ T9416] ksys_read+0x145/0x250 [ 197.277581][ T9416] ? __pfx_ksys_read+0x10/0x10 [ 197.277613][ T9416] do_syscall_64+0xec/0xf80 [ 197.277635][ T9416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.277654][ T9416] ? trace_irq_disable+0x37/0x100 [ 197.277681][ T9416] ? clear_bhb_loop+0x60/0xb0 [ 197.277706][ T9416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.277726][ T9416] RIP: 0033:0x7f762c78e15c [ 197.277745][ T9416] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.277762][ T9416] RSP: 002b:00007f762d60c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.277784][ T9416] RAX: ffffffffffffffda RBX: 00007f762c9e5fa0 RCX: 00007f762c78e15c [ 197.277799][ T9416] RDX: 000000000000000f RSI: 00007f762d60c0a0 RDI: 0000000000000004 [ 197.277811][ T9416] RBP: 00007f762d60c090 R08: 0000000000000000 R09: 0000000000000000 [ 197.277824][ T9416] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 197.277836][ T9416] R13: 00007f762c9e6038 R14: 00007f762c9e5fa0 R15: 00007ffde57ac208 [ 197.277870][ T9416] [ 197.688487][ T9311] ip6_vti0 speed is unknown, defaulting to 1000 [ 197.994978][ T9439] netlink: 71 bytes leftover after parsing attributes in process `syz.1.834'. [ 198.062900][ T9447] netlink: 88 bytes leftover after parsing attributes in process `syz.2.836'. [ 198.245822][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 198.256961][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 198.441894][ T9461] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 198.544267][ T9462] wg1 speed is unknown, defaulting to 1000 [ 198.570203][ T9462] wg1 speed is unknown, defaulting to 1000 [ 198.586915][ T9466] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 198.612124][ T9462] ip6_vti0 speed is unknown, defaulting to 1000 [ 199.679762][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.217170][ T9500] FAULT_INJECTION: forcing a failure. [ 200.217170][ T9500] name failslab, interval 1, probability 0, space 0, times 1 [ 200.248670][ T9500] CPU: 0 UID: 0 PID: 9500 Comm: syz.2.848 Not tainted syzkaller #0 PREEMPT(full) [ 200.248701][ T9500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.248715][ T9500] Call Trace: [ 200.248730][ T9500] [ 200.248741][ T9500] dump_stack_lvl+0xe8/0x150 [ 200.248775][ T9500] should_fail_ex+0x414/0x560 [ 200.248815][ T9500] should_failslab+0xa8/0x100 [ 200.248845][ T9500] __kmalloc_cache_noprof+0x84/0x700 [ 200.248869][ T9500] ? nfnetlink_rcv+0xf97/0x2590 [ 200.248900][ T9500] nfnetlink_rcv+0xf97/0x2590 [ 200.248972][ T9500] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 200.249041][ T9500] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.249069][ T9500] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.249112][ T9500] netlink_unicast+0x82f/0x9e0 [ 200.249145][ T9500] ? __pfx_netlink_unicast+0x10/0x10 [ 200.249168][ T9500] ? __alloc_skb+0x198/0x3a0 [ 200.249190][ T9500] ? netlink_sendmsg+0x642/0xb30 [ 200.249214][ T9500] ? skb_put+0x11b/0x210 [ 200.249239][ T9500] netlink_sendmsg+0x805/0xb30 [ 200.249277][ T9500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.249307][ T9500] ? aa_sock_msg_perm+0xf1/0x1b0 [ 200.249336][ T9500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.249352][ T9500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.249376][ T9500] __sock_sendmsg+0x21c/0x270 [ 200.249404][ T9500] ____sys_sendmsg+0x505/0x820 [ 200.249429][ T9500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.249456][ T9500] ? import_iovec+0x74/0xa0 [ 200.249479][ T9500] ___sys_sendmsg+0x21f/0x2a0 [ 200.249501][ T9500] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.249550][ T9500] ? __fget_files+0x2a/0x420 [ 200.249570][ T9500] ? __fget_files+0x3a0/0x420 [ 200.249598][ T9500] __x64_sys_sendmsg+0x19b/0x260 [ 200.249639][ T9500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.249668][ T9500] ? __pfx_ksys_write+0x10/0x10 [ 200.249694][ T9500] do_syscall_64+0xec/0xf80 [ 200.249712][ T9500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.249736][ T9500] ? trace_irq_disable+0x37/0x100 [ 200.249758][ T9500] ? clear_bhb_loop+0x60/0xb0 [ 200.249779][ T9500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.249795][ T9500] RIP: 0033:0x7f762c78f749 [ 200.249812][ T9500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.249826][ T9500] RSP: 002b:00007f762d60c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.249844][ T9500] RAX: ffffffffffffffda RBX: 00007f762c9e5fa0 RCX: 00007f762c78f749 [ 200.249857][ T9500] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 200.249867][ T9500] RBP: 00007f762d60c090 R08: 0000000000000000 R09: 0000000000000000 [ 200.249877][ T9500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.249887][ T9500] R13: 00007f762c9e6038 R14: 00007f762c9e5fa0 R15: 00007ffde57ac208 [ 200.249914][ T9500] [ 200.579198][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.638622][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 201.118394][ T9514] raw_sendmsg: syz.2.851 forgot to set AF_INET. Fix it! [ 201.157936][ T9514] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 201.272805][ T9516] ip6tnl0: entered allmulticast mode [ 201.356682][ T9519] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 201.464821][ T9519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.565155][ T9525] bond1: (slave veth3): Enslaving as an active interface with a down link [ 201.679905][ T9532] __nla_validate_parse: 6 callbacks suppressed [ 201.679926][ T9532] netlink: 14 bytes leftover after parsing attributes in process `syz.4.856'. [ 201.845300][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.857'. [ 202.220175][ T9538] FAULT_INJECTION: forcing a failure. [ 202.220175][ T9538] name failslab, interval 1, probability 0, space 0, times 0 [ 202.249236][ T9538] CPU: 0 UID: 0 PID: 9538 Comm: syz.4.859 Not tainted syzkaller #0 PREEMPT(full) [ 202.249263][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.249275][ T9538] Call Trace: [ 202.249283][ T9538] [ 202.249291][ T9538] dump_stack_lvl+0xe8/0x150 [ 202.249322][ T9538] should_fail_ex+0x414/0x560 [ 202.249357][ T9538] should_failslab+0xa8/0x100 [ 202.249382][ T9538] __kmalloc_noprof+0xdf/0x800 [ 202.249402][ T9538] ? nla_strdup+0x9d/0x140 [ 202.249422][ T9538] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 202.249445][ T9538] nla_strdup+0x9d/0x140 [ 202.249468][ T9538] nf_tables_newtable+0x491/0x1890 [ 202.249498][ T9538] ? nfnetlink_subsys_unregister+0x172/0x1b0 [ 202.249540][ T9538] nfnetlink_rcv+0x11d9/0x2590 [ 202.249602][ T9538] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 202.249641][ T9538] ? ref_tracker_free+0x63a/0x7d0 [ 202.249688][ T9538] ? __netlink_deliver_tap+0x807/0x850 [ 202.249713][ T9538] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.249756][ T9538] netlink_unicast+0x82f/0x9e0 [ 202.249788][ T9538] ? __pfx_netlink_unicast+0x10/0x10 [ 202.249810][ T9538] ? __alloc_skb+0x198/0x3a0 [ 202.249831][ T9538] ? netlink_sendmsg+0x642/0xb30 [ 202.249854][ T9538] ? skb_put+0x11b/0x210 [ 202.249880][ T9538] netlink_sendmsg+0x805/0xb30 [ 202.249915][ T9538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.249945][ T9538] ? aa_sock_msg_perm+0xf1/0x1b0 [ 202.249972][ T9538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.249990][ T9538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.250017][ T9538] __sock_sendmsg+0x21c/0x270 [ 202.250050][ T9538] ____sys_sendmsg+0x505/0x820 [ 202.250080][ T9538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.250113][ T9538] ? import_iovec+0x74/0xa0 [ 202.250140][ T9538] ___sys_sendmsg+0x21f/0x2a0 [ 202.250167][ T9538] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.250226][ T9538] ? __fget_files+0x2a/0x420 [ 202.250249][ T9538] ? __fget_files+0x3a0/0x420 [ 202.250282][ T9538] __x64_sys_sendmsg+0x19b/0x260 [ 202.250309][ T9538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.250342][ T9538] ? __pfx_ksys_write+0x10/0x10 [ 202.250372][ T9538] do_syscall_64+0xec/0xf80 [ 202.250393][ T9538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.250411][ T9538] ? trace_irq_disable+0x37/0x100 [ 202.250437][ T9538] ? clear_bhb_loop+0x60/0xb0 [ 202.250460][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.250479][ T9538] RIP: 0033:0x7f460ad8f749 [ 202.250496][ T9538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.250512][ T9538] RSP: 002b:00007f460bcce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.250532][ T9538] RAX: ffffffffffffffda RBX: 00007f460afe5fa0 RCX: 00007f460ad8f749 [ 202.250546][ T9538] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 202.250558][ T9538] RBP: 00007f460bcce090 R08: 0000000000000000 R09: 0000000000000000 [ 202.250578][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.250590][ T9538] R13: 00007f460afe6038 R14: 00007f460afe5fa0 R15: 00007ffd828b57a8 [ 202.250639][ T9538] [ 202.459662][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 202.729084][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.861'. [ 202.949293][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.864'. [ 202.982838][ T9554] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 202.990860][ T9554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.159450][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 203.166696][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.248961][ T9559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.865'. [ 203.258243][ T9559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.865'. [ 203.267477][ T9559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.865'. [ 203.336832][ T9559] wg1 speed is unknown, defaulting to 1000 [ 203.359207][ T9559] wg1 speed is unknown, defaulting to 1000 [ 203.379382][ T9559] ip6_vti0 speed is unknown, defaulting to 1000 [ 203.636287][ T9565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.867'. [ 203.846715][ T9569] wg1 speed is unknown, defaulting to 1000 [ 203.896098][ T9569] wg1 speed is unknown, defaulting to 1000 [ 204.035644][ T9573] wg1 speed is unknown, defaulting to 1000 [ 204.049431][ T9569] ip6_vti0 speed is unknown, defaulting to 1000 [ 204.126522][ T9573] wg1 speed is unknown, defaulting to 1000 [ 204.396060][ T9583] netlink: 71 bytes leftover after parsing attributes in process `syz.0.871'. [ 204.585010][ T9588] netlink: 'syz.3.873': attribute type 16 has an invalid length. [ 204.614538][ T9588] netlink: 'syz.3.873': attribute type 17 has an invalid length. [ 204.680178][ T9588] bridge0: port 3(bond0) entered disabled state [ 204.819759][ T9573] ip6_vti0 speed is unknown, defaulting to 1000 [ 205.308164][ T9612] wg1 speed is unknown, defaulting to 1000 [ 205.345131][ T9612] wg1 speed is unknown, defaulting to 1000 [ 205.399265][ T9612] ip6_vti0 speed is unknown, defaulting to 1000 [ 205.630662][ T9618] tipc: Can't bind to reserved service type 2 [ 206.712759][ T9655] __nla_validate_parse: 5 callbacks suppressed [ 206.712780][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.890'. [ 206.770743][ T9655] netlink: 'syz.0.890': attribute type 5 has an invalid length. [ 206.908808][ T9661] Cannot find set identified by id 0 to match [ 206.967363][ T9658] wg1 speed is unknown, defaulting to 1000 [ 206.993369][ T9658] wg1 speed is unknown, defaulting to 1000 [ 207.014272][ T9658] ip6_vti0 speed is unknown, defaulting to 1000 [ 207.110719][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.893'. [ 207.156350][ T9666] netlink: 108 bytes leftover after parsing attributes in process `syz.0.893'. [ 207.165996][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.893'. [ 207.263327][ T9672] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 207.279486][ T9672] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 207.622716][ T9680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.807738][ T9680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.923590][ T9685] wg1 speed is unknown, defaulting to 1000 [ 207.944944][ T9682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.898'. [ 207.958222][ T9680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.985719][ T9685] wg1 speed is unknown, defaulting to 1000 [ 208.064336][ T9685] ip6_vti0 speed is unknown, defaulting to 1000 [ 208.120482][ T9680] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.341910][ T6981] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.412863][ T6988] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.568590][ T6985] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.683971][ T6985] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.997457][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.902'. [ 209.009149][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.902'. [ 209.022279][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.903'. [ 209.044513][ T9703] batadv0: entered promiscuous mode [ 209.090649][ T9703] batadv0: left promiscuous mode [ 209.490866][ T9717] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 209.547998][ T9719] wg1 speed is unknown, defaulting to 1000 [ 209.549234][ T9717] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 209.576986][ T9719] wg1 speed is unknown, defaulting to 1000 [ 209.627283][ T9719] ip6_vti0 speed is unknown, defaulting to 1000 [ 209.693236][ T9723] netlink: 71 bytes leftover after parsing attributes in process `syz.1.909'. [ 210.289932][ T9739] netlink: 5 bytes leftover after parsing attributes in process `syz.3.913'. [ 210.320080][ T9739] 0ªî{X¹¦: renamed from gretap0 [ 210.354353][ T9739] 0ªî{X¹¦: entered allmulticast mode [ 210.388957][ T9739] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 211.442919][ T9774] wg1 speed is unknown, defaulting to 1000 [ 211.491456][ T9774] wg1 speed is unknown, defaulting to 1000 [ 211.531924][ T9774] ip6_vti0 speed is unknown, defaulting to 1000 [ 211.959537][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.966051][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 211.972323][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 211.978456][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 212.541197][ T9807] netlink: 'syz.2.926': attribute type 83 has an invalid length. [ 212.931852][ T9814] __nla_validate_parse: 4 callbacks suppressed [ 212.931870][ T9814] netlink: 71 bytes leftover after parsing attributes in process `syz.2.928'. [ 213.064658][ T9818] netlink: 'syz.4.930': attribute type 1 has an invalid length. [ 213.114846][ T9818] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 213.551412][ T9825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.932'. [ 213.566072][ T9825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.932'. [ 213.715223][ T9832] wg1 speed is unknown, defaulting to 1000 [ 213.733201][ T9832] wg1 speed is unknown, defaulting to 1000 [ 213.750644][ T9832] ip6_vti0 speed is unknown, defaulting to 1000 [ 214.154290][ T9856] netlink: 'syz.4.939': attribute type 1 has an invalid length. [ 214.231748][ T9858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'. [ 214.490660][ T9861] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 214.504732][ T9861] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.559493][ T9868] netlink: 'syz.1.942': attribute type 1 has an invalid length. [ 214.585450][ T9865] lo: Caught tx_queue_len zero misconfig [ 214.648965][ T9868] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 214.713061][ T9838] lec:lec_atm_close: lec0: Shut down! [ 214.761471][ T9861] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 214.776956][ T9861] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.813384][ T9865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.941'. [ 214.899550][ T9861] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 214.932054][ T9861] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.006972][ T9870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.941'. [ 215.131365][ T9861] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 215.174953][ T9861] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.271365][ T9885] syzkaller0: entered promiscuous mode [ 215.277311][ T9885] syzkaller0: entered allmulticast mode [ 215.333099][ T9892] wg1 speed is unknown, defaulting to 1000 [ 215.402571][ T9897] netlink: 71 bytes leftover after parsing attributes in process `syz.3.945'. [ 215.514686][ T9900] netlink: 176 bytes leftover after parsing attributes in process `syz.0.947'. [ 215.852744][ T9905] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 216.775200][ T9892] wg1 speed is unknown, defaulting to 1000 [ 216.811272][ T9901] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 216.818308][ T9901] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 216.864617][ T9904] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.910194][ T9905] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 216.917078][ T9905] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 216.925472][ T9892] ip6_vti0 speed is unknown, defaulting to 1000 [ 217.010390][ T2995] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 217.018642][ T2995] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.062873][ T2995] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 217.071407][ T2995] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.110987][ T2995] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 217.122169][ T2995] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.173747][ T2995] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 217.191004][ T2995] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.219909][ T9918] wg1 speed is unknown, defaulting to 1000 [ 217.410422][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 217.471983][ T9925] netlink: 'syz.4.952': attribute type 23 has an invalid length. [ 217.516136][ T9929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.853905][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 218.046145][ T9943] syzkaller0: entered promiscuous mode [ 218.052451][ T9943] syzkaller0: entered allmulticast mode [ 218.211859][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'. [ 218.229642][ T9955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.450872][ T9959] netlink: 71 bytes leftover after parsing attributes in process `syz.4.960'. [ 218.524252][ T9955] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 218.595632][ T9955] bond4 (unregistering): Released all slaves [ 219.137720][ T9958] netlink: 'syz.0.959': attribute type 30 has an invalid length. [ 219.187840][ T9958] bond2: option arp_missed_max: invalid value (0) [ 219.196232][ T9958] bond2: option arp_missed_max: allowed values 1 - 255 [ 219.206108][ T9958] bond2 (unregistering): Released all slaves [ 219.240801][ T9969] lo speed is unknown, defaulting to 1000 [ 219.284455][ T9969] lo speed is unknown, defaulting to 1000 [ 219.336760][ T9969] lo speed is unknown, defaulting to 1000 [ 219.425504][ T9969] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 219.454345][ T9969] lo speed is unknown, defaulting to 1000 [ 219.464963][ T9969] lo speed is unknown, defaulting to 1000 [ 219.473007][ T9969] lo speed is unknown, defaulting to 1000 [ 219.481942][ T9969] lo speed is unknown, defaulting to 1000 [ 219.489893][ T9969] lo speed is unknown, defaulting to 1000 [ 220.035865][ T9999] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.353561][ T914] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 220.385599][ T914] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 220.413825][ T914] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 220.435893][ T914] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 220.454028][ T914] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 220.469612][ T914] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 220.488958][ T914] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 220.506761][ T914] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 220.524693][ T914] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 220.547845][ T914] hid-generic 0005:046D:0401.0001: unknown main item tag 0x0 [ 220.567702][ T914] hid-generic 0005:046D:0401.0001: unexpected long global item [ 220.588514][ T914] hid-generic 0005:046D:0401.0001: probe with driver hid-generic failed with error -22 [ 220.704888][T10008] wg1 speed is unknown, defaulting to 1000 [ 220.739613][T10008] wg1 speed is unknown, defaulting to 1000 [ 220.790718][T10008] ip6_vti0 speed is unknown, defaulting to 1000 [ 221.065065][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.975'. [ 221.284600][T10032] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 221.636187][T10008] lo speed is unknown, defaulting to 1000 [ 221.983624][T10054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'. [ 222.292290][T10060] netlink: 'syz.2.986': attribute type 1 has an invalid length. [ 222.364738][T10063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.403593][T10061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.681472][T10071] netlink: 71 bytes leftover after parsing attributes in process `syz.0.988'. [ 222.704981][T10070] veth0: entered promiscuous mode [ 222.749750][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 222.890758][T10069] veth0: left promiscuous mode [ 223.343403][T10085] x_tables: duplicate underflow at hook 1 [ 223.660077][T10093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.680027][T10093] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 223.690020][T10093] bond2: (slave macvlan0): Enslaving as a backup interface with a down link [ 223.700921][T10093] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 223.855126][T10105] netlink: 'syz.2.1000': attribute type 2 has an invalid length. [ 223.868212][T10104] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1001'. [ 223.878348][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'. [ 224.588274][T10135] netlink: 'syz.3.1011': attribute type 3 has an invalid length. [ 224.806002][T10151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.862450][T10151] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 224.892067][T10151] bond5 (unregistering): Released all slaves [ 224.926993][T10161] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1017'. [ 225.342489][T10177] tipc: Started in network mode [ 225.348849][T10177] tipc: Node identity c6cb1c3ab458, cluster identity 4711 [ 225.358841][T10177] tipc: Enabled bearer , priority 0 [ 225.366170][T10178] syzkaller0: entered promiscuous mode [ 225.372469][T10178] syzkaller0: entered allmulticast mode [ 225.409363][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 225.478341][T10182] wg1 speed is unknown, defaulting to 1000 [ 225.486965][T10182] wg1 speed is unknown, defaulting to 1000 [ 225.495253][T10182] ip6_vti0 speed is unknown, defaulting to 1000 [ 225.589233][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 225.922569][T10193] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1029'. [ 225.928495][T10194] xt_hashlimit: size too large, truncated to 1048576 [ 225.948778][T10194] xt_hashlimit: max too large, truncated to 1048576 [ 225.994743][T10182] lo speed is unknown, defaulting to 1000 [ 226.101842][T10194] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 226.295408][T10210] Can't find ip_set type hash:ip$mec [ 226.480983][ T9595] tipc: Node number set to 1922243642 [ 226.652943][T10229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.743599][T10229] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 226.756475][T10229] bond4 (unregistering): Released all slaves [ 226.792839][T10234] tipc: Enabled bearer , priority 10 [ 226.801827][T10236] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1039'. [ 227.471190][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 227.597318][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 227.634172][T10262] [†’Ì: entered promiscuous mode [ 227.650957][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 227.669652][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'. [ 227.711254][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 227.909141][ T5889] tipc: Node number set to 463725317 [ 227.969747][T10276] x_tables: duplicate underflow at hook 3 [ 228.475469][ T5889] lo speed is unknown, defaulting to 1000 [ 228.483094][ T43] wg1 speed is unknown, defaulting to 1000 [ 228.675183][T10294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.765716][T10294] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 228.790557][T10294] bond3 (unregistering): Released all slaves [ 228.922170][T10305] __nla_validate_parse: 31 callbacks suppressed [ 228.922192][T10305] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1057'. [ 229.019441][T10311] tipc: Enabled bearer , priority 0 [ 229.038680][T10311] syzkaller0: entered promiscuous mode [ 229.056895][T10311] syzkaller0: entered allmulticast mode [ 229.105699][T10311] tipc: Resetting bearer [ 229.114208][T10313] syzkaller0: entered promiscuous mode [ 229.119840][T10313] syzkaller0: entered allmulticast mode [ 229.150987][T10311] ip6tnl0: Caught tx_queue_len zero misconfig [ 229.223983][T10310] tipc: Resetting bearer [ 229.260372][T10310] tipc: Disabling bearer [ 229.301037][T10324] tipc: Enabling of bearer rejected, failed to enable media [ 229.422996][T10331] tipc: Enabled bearer , priority 0 [ 229.504283][T10331] syzkaller0: entered promiscuous mode [ 229.513081][T10331] syzkaller0: entered allmulticast mode [ 229.523901][T10331] tipc: Resetting bearer [ 229.611167][ T6975] tipc: Resetting bearer [ 229.620422][T10330] tipc: Resetting bearer [ 229.928575][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1076'. [ 229.945492][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1076'. [ 230.029249][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1072'. [ 230.807020][T10330] tipc: Disabling bearer [ 230.816978][T10341] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 230.836635][T10357] batadv0: entered promiscuous mode [ 230.853939][T10357] batadv0: left promiscuous mode [ 230.927342][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1072'. [ 230.952207][ T6975] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 230.969227][ T6975] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 231.033360][ T6975] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 231.056275][ T6975] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 231.096159][T10367] bridge0: port 3(erspan0) entered blocking state [ 231.116564][T10367] bridge0: port 3(erspan0) entered disabled state [ 231.139570][T10367] erspan0: entered allmulticast mode [ 231.154463][T10367] erspan0: entered promiscuous mode [ 231.199862][T10381] nbd: must specify a size in bytes for the device [ 231.667149][T10400] netlink: 'syz.1.1086': attribute type 16 has an invalid length. [ 231.693482][T10400] netlink: 'syz.1.1086': attribute type 17 has an invalid length. [ 231.752793][T10406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.762055][T10405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1087'. [ 232.101286][T10417] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1089'. [ 232.250764][T10422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1091'. [ 232.269194][T10422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1091'. [ 232.622654][T10427] tipc: Failed to remove unknown binding: 66,0,0/1922243642:2240913616/2240913617 [ 232.648126][T10427] tipc: Failed to remove unknown binding: 66,0,0/1922243642:2240913616/2240913617 [ 232.942786][T10434] wg1 speed is unknown, defaulting to 1000 [ 232.954252][T10437] netlink: 'syz.0.1097': attribute type 2 has an invalid length. [ 232.962920][T10434] wg1 speed is unknown, defaulting to 1000 [ 232.983779][T10434] ip6_vti0 speed is unknown, defaulting to 1000 [ 232.994573][T10437] netlink: 'syz.0.1097': attribute type 11 has an invalid length. [ 233.027142][T10437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1097'. [ 233.118091][T10442] netlink: 'syz.2.1099': attribute type 1 has an invalid length. [ 233.375994][T10434] lo speed is unknown, defaulting to 1000 [ 233.441987][T10444] bond0: Caught tx_queue_len zero misconfig [ 233.548106][T10456] netlink: 'syz.3.1100': attribute type 29 has an invalid length. [ 233.650020][T10444] netlink: 'syz.3.1100': attribute type 29 has an invalid length. [ 234.222871][T10477] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 234.442311][T10491] __nla_validate_parse: 4 callbacks suppressed [ 234.442331][T10491] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1109'. [ 234.807074][T10517] syzkaller1: entered promiscuous mode [ 234.831286][T10517] syzkaller1: entered allmulticast mode [ 235.282245][T10538] netlink: 'syz.1.1121': attribute type 29 has an invalid length. [ 235.361673][T10538] wg1 speed is unknown, defaulting to 1000 [ 235.376638][T10538] wg1 speed is unknown, defaulting to 1000 [ 235.384737][T10538] ip6_vti0 speed is unknown, defaulting to 1000 [ 235.444452][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 235.466780][T10542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1123'. [ 235.663276][T10551] x_tables: duplicate underflow at hook 1 [ 235.745627][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1125'. [ 235.756066][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1125'. [ 235.775055][T10555] batadv0: entered promiscuous mode [ 235.790670][T10555] batadv0: left promiscuous mode [ 236.035336][T10538] lo speed is unknown, defaulting to 1000 [ 236.238141][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 236.247228][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 236.352284][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 236.751269][T10589] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1133'. [ 236.853010][T10591] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1135'. [ 236.955076][T10594] bridge0: port 4(erspan0) entered blocking state [ 236.969089][T10594] bridge0: port 4(erspan0) entered disabled state [ 236.983478][T10594] erspan0: entered allmulticast mode [ 236.998535][T10594] erspan0: entered promiscuous mode [ 237.850770][T10605] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 237.904967][T10619] xt_hashlimit: max too large, truncated to 1048576 [ 238.359249][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.365403][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 239.235450][T10657] sctp: [Deprecated]: syz.2.1153 (pid 10657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.235450][T10657] Use struct sctp_sack_info instead [ 239.315824][T10660] sctp: [Deprecated]: syz.2.1153 (pid 10660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.315824][T10660] Use struct sctp_sack_info instead [ 239.380615][T10654] nbd0: detected capacity change from 0 to 127 [ 239.442601][T10512] Set syz1 is full, maxelem 65536 reached [ 239.567939][T10670] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 239.602995][T10669] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 239.612543][T10669] syzkaller1: linktype set to 768 [ 239.750009][T10679] geneve2: entered promiscuous mode [ 239.757471][ T6981] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.767064][ T6981] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.782172][ T6981] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.800847][ T6981] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.913145][T10687] __nla_validate_parse: 4 callbacks suppressed [ 239.913166][T10687] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1162'. [ 239.931215][T10688] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1161'. [ 240.024331][ T5839] block nbd0: Receive control failed (result -32) [ 240.084161][T10698] wg1 speed is unknown, defaulting to 1000 [ 240.087464][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'. [ 240.101300][T10698] wg1 speed is unknown, defaulting to 1000 [ 240.105995][T10698] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.125675][T10701] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1165'. [ 240.138882][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1164'. [ 240.212439][T10705] tipc: Enabled bearer , priority 0 [ 240.215453][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1164'. [ 240.266202][T10697] vlan0: entered promiscuous mode [ 240.302128][T10697] veth0: entered promiscuous mode [ 240.370041][T10702] tipc: Disabling bearer [ 240.413037][T10698] lo speed is unknown, defaulting to 1000 [ 240.515752][T10709] netlink: 'syz.4.1167': attribute type 13 has an invalid length. [ 240.528715][T10714] pim6reg1: entered promiscuous mode [ 240.535224][T10713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1168'. [ 240.544366][T10714] pim6reg1: entered allmulticast mode [ 240.552228][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1167'. [ 240.662594][T10713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1168'. [ 240.682332][T10712] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 240.715733][T10712] bond3 (unregistering): Released all slaves [ 240.970322][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 241.202721][T10713] wg1 speed is unknown, defaulting to 1000 [ 241.275899][T10713] wg1 speed is unknown, defaulting to 1000 [ 241.366033][T10713] ip6_vti0 speed is unknown, defaulting to 1000 [ 242.104866][ T6988] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.154991][T10713] lo speed is unknown, defaulting to 1000 [ 242.209924][ T6988] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.290210][ T6988] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.343722][ T6988] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.526798][ T6988] bridge_slave_1: left allmulticast mode [ 242.537077][ T6988] bridge_slave_1: left promiscuous mode [ 242.544397][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.559623][ T6988] bridge_slave_0: left allmulticast mode [ 242.565386][ T6988] bridge_slave_0: left promiscuous mode [ 242.571328][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.001518][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 243.001579][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.030953][ T6988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.045298][ T6988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.054917][ T6988] bond0 (unregistering): Released all slaves [ 243.129339][ T6988] bond1 (unregistering): Released all slaves [ 243.210205][ T6988] bond2 (unregistering): Released all slaves [ 243.288400][ T6988] bond3 (unregistering): Released all slaves [ 243.373991][ T6988] : left promiscuous mode [ 243.419875][ T6988] tipc: Disabling bearer [ 243.431974][ T6988] tipc: Left network mode [ 243.681486][T10425] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 243.693641][T10425] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 243.702096][T10425] CPU: 0 UID: 0 PID: 10425 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) [ 243.711346][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.721532][T10425] RIP: 0010:klist_del+0x49/0x110 [ 243.726527][T10425] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 d3 d6 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b d3 d6 f6 4d 8b 7e 58 4c 89 f7 e8 5f 11 [ 243.746175][T10425] RSP: 0018:ffffc90003b8f7a8 EFLAGS: 00010202 [ 243.752289][T10425] RAX: 000000000000000b RBX: ffff88802e98b860 RCX: ffff88807b558000 [ 243.760306][T10425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 243.768320][T10425] RBP: ffffc90003b8f8d0 R08: ffff88807bdd4f03 R09: 1ffff1100f7ba9e0 [ 243.776450][T10425] R10: dffffc0000000000 R11: ffffed100f7ba9e1 R12: dffffc0000000000 [ 243.784457][T10425] R13: 1ffff11005d3170c R14: 0000000000000000 R15: ffff88807da06758 [ 243.792495][T10425] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 243.801465][T10425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.808056][T10425] CR2: 00002000001e6000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 243.816057][T10425] Call Trace: [ 243.819349][T10425] [ 243.822315][T10425] device_del+0x280/0x8e0 [ 243.826690][T10425] ? _raw_spin_unlock_irq+0x2e/0x50 [ 243.831923][T10425] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 243.838002][T10425] ? __pfx_device_del+0x10/0x10 [ 243.842861][T10425] ? netdev_unregister_kobject+0x344/0x450 [ 243.848690][T10425] unregister_netdevice_many_notify+0x1ddd/0x2340 [ 243.855147][T10425] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 243.861945][T10425] ? rtnl_net_dev_lock+0x36/0x2f0 [ 243.867014][T10425] ? rtnl_net_dev_lock+0x36/0x2f0 [ 243.872051][T10425] unregister_netdev+0x157/0x1f0 [ 243.877021][T10425] ? __pfx_unregister_netdev+0x10/0x10 [ 243.882501][T10425] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 243.888330][T10425] bnep_session+0x29a5/0x2bd0 [ 243.893039][T10425] ? __lock_acquire+0x6b6/0x2cf0 [ 243.898109][T10425] ? __pfx_bnep_session+0x10/0x10 [ 243.903141][T10425] ? __pfx_woken_wake_function+0x10/0x10 [ 243.908787][T10425] ? __kthread_parkme+0x7b/0x200 [ 243.913734][T10425] ? __kthread_parkme+0x1a1/0x200 [ 243.918767][T10425] kthread+0x711/0x8a0 [ 243.922850][T10425] ? __pfx_bnep_session+0x10/0x10 [ 243.927966][T10425] ? __pfx_kthread+0x10/0x10 [ 243.932606][T10425] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.937844][T10425] ? __pfx_kthread+0x10/0x10 [ 243.942445][T10425] ret_from_fork+0x510/0xa50 [ 243.947042][T10425] ? __pfx_ret_from_fork+0x10/0x10 [ 243.952154][T10425] ? __switch_to+0xc9e/0x1480 [ 243.956850][T10425] ? __pfx_kthread+0x10/0x10 [ 243.961454][T10425] ret_from_fork_asm+0x1a/0x30 [ 243.966241][T10425] [ 243.969264][T10425] Modules linked in: [ 243.974182][T10425] ---[ end trace 0000000000000000 ]--- [ 243.980238][T10425] RIP: 0010:klist_del+0x49/0x110 [ 243.985225][T10425] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 d3 d6 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b d3 d6 f6 4d 8b 7e 58 4c 89 f7 e8 5f 11 [ 244.005030][T10425] RSP: 0018:ffffc90003b8f7a8 EFLAGS: 00010202 [ 244.011192][T10425] RAX: 000000000000000b RBX: ffff88802e98b860 RCX: ffff88807b558000 [ 244.019483][T10425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 244.027504][T10425] RBP: ffffc90003b8f8d0 R08: ffff88807bdd4f03 R09: 1ffff1100f7ba9e0 [ 244.035588][T10425] R10: dffffc0000000000 R11: ffffed100f7ba9e1 R12: dffffc0000000000 [ 244.043782][T10425] R13: 1ffff11005d3170c R14: 0000000000000000 R15: ffff88807da06758 [ 244.051846][T10425] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 244.060855][T10425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.067491][T10425] CR2: 00002000001e6000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 244.075513][T10425] Kernel panic - not syncing: Fatal exception [ 244.082214][T10425] Kernel Offset: disabled [ 244.086641][T10425] Rebooting in 86400 seconds..