last executing test programs: 3.088486933s ago: executing program 4 (id=4533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x48, r3, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x48}}, 0x20000000) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x48, r3, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x48}}, 0x20000000) (async) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) (async) 2.711181806s ago: executing program 4 (id=4536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000014680)={0x0, 0x0, &(0x7f0000014640)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a30000000050a010200000000000000000300000a040004800900010073797a3000000000090003007303000000000000000000001100010000000000000000000700000a"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x48000) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) r12 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r12, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x10001}, 0xc) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="000128bd7000fedbdf25e7abe2032a0ef4fb0960ee5a0c1c6fff9a0800010000000000b9780f9aa880c900543427c3b6cfd4a75dfac225bd411dca"], 0x1c}, 0x1, 0x0, 0x0, 0x400c041}, 0x2400c000) socket$inet_udp(0x2, 0x2, 0x0) 2.309530719s ago: executing program 4 (id=4545): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@ipv4, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x21c, 0x15, 0x20, 0xfffffffc, 0x0, {0x8e}, [@nested={0x208, 0x14c, 0x0, 0x1, [@nested={0x202, 0xb7, 0x0, 0x1, [@typed={0x8, 0x153, 0x0, 0x0, @uid=r1}, @nested={0xcf, 0xca, 0x0, 0x1, [@generic="78cef8ce6a58fced3fb8c7da68f375d641bffdbe83e33c075803892463650d5b9f123ddd699a2428fc4496b35b4f3c727acc4ae2efe5e011fae5aaa3f884f469efd5ef3ad6b8b75621d60d69edd7c735a07ca1a51a768d89f6ca86589dddf58bb4d9cd9055450ed7d94105526906840b9ca6e5fda12f7ea494bc0b1311c5b54cb26292cef0c0800b3cc86c7440e494f46e7c87ab4923d29fe8489ca3c632c7a8bc59ab34095662661f936db4d533594ebdded8cc307c6226fce9138d9a54c3a0148e13", @typed={0x6, 0xfc, 0x0, 0x0, @str='/\x00'}]}, @generic="0f0929d37a71c2d6deb6c25aff989184b6e0f7b6ac1d2e81a397e915cf1f51011133ce95b55f91dd5e452e98d3c040f97d45cbe2abcaadc01952ee443c519fc73bcdfe605902ad084ea031877f952b2a8bb86f1a2a4974b32f1f30", @typed={0x8, 0x78, 0x0, 0x0, @uid=0xee01}, @generic="5dc36b444898069a8b6679dc015817c6621c65f1192b87c75926836ae5ad4b9991f1476dcc6e0116a56de0ede7e4daf7e6530cce20c94a755f880a1602a5f5363cb39442946c25467fb64be44eb1753514ce4ccbf82d79f633cc7ff1", @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@mcast1}, @generic="1a5504585937b391faa86cbdeaf066d74ed636174c400cce2361a29001a9ef0e19d9b2775ab45358f7fd37fbeef9f849f56253ae043fffe5aa68840ef89d365a2f5a0fc0e6c79f650356dc", @nested={0x4, 0x48}, @nested={0x4, 0x84}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4800}, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010004200000000000000b0000000c000580040001"], 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)={0x194, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "2569fd3227506fc4f0a5db9a83e06e45fac35b261e56e2a8a799cdf19d1a"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7d4d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x2008894}, 0x80) 2.243406551s ago: executing program 4 (id=4546): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x4}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4000}) r2 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r4, 0xffffffffffffffff, 0x2) getsockopt$bt_hci(r6, 0x84, 0x84, &(0x7f0000002100)=""/4111, &(0x7f0000000000)=0x100f) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'veth1_to_bond\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000003c0)=r5}, 0x20) close(r7) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) 2.061375021s ago: executing program 2 (id=4550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000006000a0001000000080001006b9838"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) 1.733375092s ago: executing program 2 (id=4556): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) (async) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000001177fbac141416e000030a89079f03b180004408050300845013f2325f009409050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044851}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.572538501s ago: executing program 1 (id=4557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r4) (async) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000380)) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x1}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x141, 0x4, 0x1}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}], 0x1, 0x4000090) (async) shutdown(r8, 0x1) (async) getsockopt$bt_hci(r8, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bind$tipc(r6, 0x0, 0x0) close(r6) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) 1.572027663s ago: executing program 0 (id=4558): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r1) (async, rerun: 64) write$cgroup_int(r1, 0x0, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0, r1}) 1.4820634s ago: executing program 2 (id=4560): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b40500000900000061108d00000000000700200000000000950000000000000057399ac7bbf14fd5072a19b34d059b82095c10c57e841dcccc35b451c175022a66e6de158780bd50b1d87d78c44b23e5ab0c7c66ac75481ee7dab0701ff57bd8891da47f9a4124f4da83ec9dcd3abd5cea92d58f347ae09b2b419961c47f3ce4b4b7d8308f454a4c5d518718f6d1a99b2b5ad4f194dc56eb202fd118faced037430d8ff5efedd5c76ffd79f8e6e2e37836e736b7778f7d6891f8a22b77dc0898db43d040fc350037d75d047b0402fee2eb4b42539e69922dfd677d9565102eedd3b05bc8bf36f2a84fb40cd1bb02f5d81ace17e60fa3935c002236223b80f0be2dde29013ccd83a35696d88c150300dd534a78ddbe6b52609f5929f6aa0cbd9ef79fe50fc195f22d79eb0ec945ca59eca9e3a37ac549b8a0dec9872d02604bb6b190c4a34836b20dbecef2ffbd0d59e020b9ee5f9c9fb57bb6bcbbff72430bda"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="380000001000030400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8808000000000000000e000100776972656775618c6400000004000280"], 0x38}}, 0x404c840) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0x1e0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x800, 0x4c8, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x7, 0xc13, 0x2, 0x3, 0x8, 0xa5, 0x791]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xe, 0x80000001, 0x9, 0x81, 0x6ff, 0x1, 0xa, 0x7]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 1.285023337s ago: executing program 0 (id=4562): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000001340)=""/4051, 0xfd3}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) recvmmsg(r1, &(0x7f0000007140)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/93, 0x5d}, {&(0x7f00000033c0)=""/86, 0x56}, {&(0x7f0000003440)=""/45, 0x2d}, {&(0x7f0000003480)=""/4, 0x4}, {&(0x7f00000034c0)=""/4096, 0x1000}], 0x6, &(0x7f0000004540)=""/43, 0x2b}, 0x40}, {{&(0x7f0000004580)=@can, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004600)=""/254, 0xfe}, {&(0x7f0000004700)=""/162, 0xa2}, {&(0x7f00000047c0)=""/162, 0xa2}, {&(0x7f0000004880)=""/96, 0x60}, {&(0x7f0000004900)=""/97, 0x61}, {&(0x7f0000004980)=""/81, 0x51}, {&(0x7f0000004a00)=""/202, 0xca}, {&(0x7f0000004b00)=""/218, 0xda}, {&(0x7f0000004c00)=""/248, 0xf8}, {&(0x7f0000004d00)=""/57, 0x39}], 0xa}, 0x3}, {{&(0x7f0000004e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000004e80)=""/56, 0x38}, {&(0x7f0000004ec0)=""/150, 0x96}, {&(0x7f0000004f80)=""/37, 0x25}, {&(0x7f0000004fc0)=""/182, 0xb6}, {&(0x7f0000005080)=""/142, 0x8e}, {&(0x7f0000005140)=""/61, 0x3d}, {&(0x7f0000005180)=""/36, 0x24}], 0x7, &(0x7f0000005240)=""/10, 0xa}, 0x2}, {{&(0x7f0000005280)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000005800)=[{&(0x7f0000005300)=""/10, 0xa}, {&(0x7f0000005340)=""/219, 0xdb}, {&(0x7f0000005440)=""/127, 0x7f}, {&(0x7f00000054c0)=""/104, 0x68}, {&(0x7f0000005540)=""/92, 0x5c}, {&(0x7f00000055c0)=""/105, 0x69}, {&(0x7f0000005640)=""/172, 0xac}, {&(0x7f0000005700)=""/220, 0xdc}], 0x8, &(0x7f0000005880)=""/185, 0xb9}, 0xd14}, {{&(0x7f0000005940)=@qipcrtr, 0x80, &(0x7f0000007100)=[{&(0x7f00000059c0)=""/241, 0xf1}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/128, 0x80}], 0x3}, 0x9}], 0x5, 0x10000, &(0x7f0000007280)={0x0, 0x3938700}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xb, 0xd8, 0x0, 0x1, 0x9, 0x9, 0xb407, 0xc8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4085}, 0x24040084) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) 1.284233077s ago: executing program 4 (id=4563): r0 = socket$inet6(0xa, 0x4, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0xa, @in=@empty, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e657665000020000280060005004e22"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.159050184s ago: executing program 3 (id=4564): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x54, @local, 0x9}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x4e21, @local}], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffff076}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x8000) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x8000a4ff, 0xfc3b) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3fab00000000000000002e00"], 0x50}}, 0x80) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f00000003c0)="58f6", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000040)={0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x3, 0x0, 0x3}, 0xe) shutdown(r9, 0x1) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r9, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x30, r5, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) 1.094532105s ago: executing program 1 (id=4565): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@RTM_NEWNSID={0x14, 0x58, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x20004804) 964.356701ms ago: executing program 2 (id=4566): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a8018000180140003000012"], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x274, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x480d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdfb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x796d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5413, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff85170202}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb3c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x573f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9f}, @TIPC_NLA_NODE_ID={0x40, 0x3, "64b34f529b2015fbb60e9b9aa7eb0bf87d757998b30cfa954c8a678499ce534c719ab22918437a79e8500f117254a6d4fa0dc57278a51327807b4b45"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfb05}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x4e22, 0x0, @private0}}}, 0x108) 936.396196ms ago: executing program 3 (id=4567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x5, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x0, 0x1}}}}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x0) 933.19371ms ago: executing program 0 (id=4568): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002abd7000fcdbdf250100000008000500e0000002"], 0x1c}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000184d218c3212349e48cc082973cf7efdd3c9208b7928fd6922cf72acdba57e3c1fd952b96d89736e070d15125a0bb7df85412ed156b5a7b5", @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a801800018014000300000000000000ffff0100000000000000"], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@loopback]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x62}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x2c}, {0x80000006}]}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r8, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x47}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) 873.113436ms ago: executing program 1 (id=4569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic="750ec696b5"]}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e65766500002000028014000700fe8000000000000000000000000000bb080001000100000004001a80140014007465616d300000000000000000000000080004"], 0x78}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) 838.647679ms ago: executing program 4 (id=4570): syz_emit_ethernet(0xa9, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x89}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x9b, 0x0, 0x0, 0xd9, 0x6, 0x0, @empty, @local, {[@generic={0x7, 0x7, "04030e5c61"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80, 0x0, 0x0, 0xffff}, {"56c10c8f0cfc935ae552c3140e509772534e0bfcc41b84efb9a0d00b1f81ae9162e32b0a6ca98dab1982ca4c852ac6af8b73523521952e523e267dd7c8af6f3e86be95b9958cc34adc4bf6f324d21f4ff34066194313e79cc4b45c95700f6edbb996b07d6acee2c434bec1"}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x214400, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r6, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001040)={0x98, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10000000}, 0x15) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x2, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) vmsplice(r13, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r11, r13, 0x8f5, 0x0) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0x25, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xac}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xfffffff8, 0x86, &(0x7f0000000680)=""/134, 0x41100, 0x66, '\x00', r6, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x1, 0x5, 0x1}, 0x10, 0x15f52, r11, 0x3, &(0x7f0000000880)=[r14, r15], &(0x7f0000000e80)=[{0x2, 0x2, 0xd, 0x7}, {0x5, 0x4, 0x40, 0xa}, {0x2, 0x2, 0x3, 0x1}], 0x10, 0x9}, 0x94) 677.560018ms ago: executing program 1 (id=4571): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r1, 0x1, 0x14, &(0x7f0000003ec0)=""/210, &(0x7f0000003fc0)=0xd2) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xce0}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20068080}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 552.217447ms ago: executing program 2 (id=4572): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f0000000480)='})\x00', 0x40001, &(0x7f00000004c0)={@_ha_fsid={[0x65f]}, {0x81, 0x2, 0x5, 0x9}}, 0x6, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x4}, {[0x3, 0x80, 0x2, 0x200000]}, 0x0, 0x4a, &(0x7f0000000580)=""/74}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000700)={r0, r1}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7a, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x48, &(0x7f0000000080)={0xa, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000200)=""/27, 0x1b}], 0x3}, 0x100) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='macsec0\x00', 0x10) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000600)={{r0, &(0x7f0000000480)='})\x00', 0x40001, &(0x7f00000004c0)={@_ha_fsid={[0x65f]}, {0x81, 0x2, 0x5, 0x9}}, 0x6, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0x4}, {[0x3, 0x80, 0x2, 0x200000]}, 0x0, 0x4a, &(0x7f0000000580)=""/74}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000700)={r0, r1}) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7a, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket(0x840000000002, 0x3, 0xfa) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x48, &(0x7f0000000080)={0xa, 0x0}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000040)=@l2, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000200)=""/27, 0x1b}], 0x3}, 0x100) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='macsec0\x00', 0x10) (async) 550.556607ms ago: executing program 3 (id=4573): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000ac0)={0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000900)={0xb0, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_SEC_KEY={0x88, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c70fd630fb25a4612477bd2c3a9377dcb8d4a8b0cf83d71230b50640980ef758"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1130e95f49311be6ef7969e724eb9439648143ed3889dad68117fbffb97d0f25"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 549.689909ms ago: executing program 0 (id=4574): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001640)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0xc0800, &(0x7f0000000040)={@_ha_fsid={[0x7ff, 0x10fa]}, {0x2, 0x5c2, 0x8, 0x8}}, 0x9, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1}, 0x6, &(0x7f0000001580)=[{0x2, 0x11a8, &(0x7f0000000100)=')\x00', &(0x7f0000000140)="995598d0ed62173a00ba471d140cf7", 0xf, 0x20}, {0x2, 0x0, &(0x7f0000000180)='$\x00', &(0x7f00000001c0)="424c56911df37d177bd2ca358386e69b15de844b515e1f4db2f212efae9ea40280101aa03e428e8eb5a75cd086bd44ef38431463ce2180ff7738becb93ed6e5577736dbd22208758c119be1e5ea4600d5c29f9b8ea6afeb08d", 0x59, 0x8}, {0x2, 0x1, &(0x7f0000000240)='\x00', &(0x7f0000000280)="ede3fb8f9bf8f5a0440eb9d10f11493bc44fa78f073256a10ceba62b15153e79e00fa91aa87085e79d81a2acb8d92908715e01376521a2e395e8d7a7e806c7536251ec95c6030950bb6bd622f102abe7bf04dc277ca7b4b9ac13c12687c0b44ed3617e07d8f92f3c400dd14636bf4ff0ece0614a8616ed687b0bb22ba39ea4b5c3965073f1db4eeee3e118b179f9cfb552c5663366f4d9ad97172f2a4bea07dc262d745d813681cfc80808350fbb951f44ce1392eaf335e2630321828d0f081fcbea5b386f5083cad1045e4eaaa6eecbd9ef35ccac318a07c14af5480555dd4e42ce00", 0xe3, 0x10}, {0x0, 0x6, &(0x7f0000000380)='%-+!\'\x00', &(0x7f00000003c0)="dfed6b766a32761fbb8dac3165cfd13a1a5e28ed6d0ae646a34443a395e5bf537b0808989c0035c79dc0688bb21627ffe1ae8905e26cc32b38223a8954ea74e3a9353236dae85a0ef07b6ad2d6df1b36826c7570624306a0a6474d5b84de3057226c678d42263f4094be5b785376d78cd854c2bc9d5bbbb4fdf7dceac9787d13c1b9748401901af47be919942f513c80413b6037164b324ac1718423398b5d06", 0xa0, 0x8}, {0x3, 0x2, &(0x7f0000000480)=')\x00', &(0x7f00000004c0)="562634d7e2465bf2d1cd9dce3c79c740a1951eddfb33c6ffb13d71d5dbf82f10ae209a995f1e776da24d1d0c9e07ed084f578755512f95eaf6fcbc0bbd6b332d10f71824411d2ffa", 0x48, 0x20}, {0x2, 0x6, &(0x7f0000000540)='\\([&}[}\x00', &(0x7f0000000580)="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", 0x1000, 0x30}]}) sendmsg$kcm(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000016c0)="6ad9d764db56", 0x6}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="0c95f8f5f8a867152add4ae955b16fcb2e2c4492e5780222c6543a36dfe60c683ef09ac12ffb5b23295b5e4180a6f5b9b7cb3f98c10799805e196d377044781e88a31a4c61f6383dc2eb9778", 0x4c}, {&(0x7f0000002780)="4cc536115f30b0c8884d0c916ab0a72b822de41ad082076949f13fead59a72b14d45500055a81a3bd297a0647d6ac9d1fc28e626a151b1433faf810817dd1fabb53f0ef21df0e8252dfe6a70a3", 0x4d}, {&(0x7f0000002800)="0ca7b8778476d8f3a853e77fce2acbef74fd0362b8340c155d896eb36b7ed163dc2e1dbac6b31aaa38d593a2969a40c8b8f3f990d07dcbb881bf144ec1ed20da043adf3e5166d1bb9cbd643d5089bff2c95441f9d67cfcc57e8e8b335e2ed393deb8b86f7fe1ecd287923da8778ee97d", 0x70}, {&(0x7f0000002880)="37fc76e785ff657eb16e1c0afa911bf41bd74fb9d0ebdcbce78d1de9454caa64e949e82935bece3555def3fcf28c2e13199ad94090602be828ab4a73deff703457d05faa1c79574a08de4812a615184ddeb5e295f7e3aeacfe92ecd93329664a0d816c16a6a9ad23e9cd8d7b0c0db6db176c6dadf6eba44283afc0a36ec460963af9918766542e73f40ddcbf17cda5c3943dc738faae237da41f79c2e83e4c38aa2f470197cddf963caa9525355bc9dcff58d2fd093588e00472ec07b9410c6a0bc4351def21a1117e812f58e9947d496738d6dc8039d23d87402f3d33c048aaf274e0d72311aa99f9cb3919626a91e6ae52e0", 0xf3}, {&(0x7f0000002980)="8ceed2f03f8b7df8750861b28f2fb65bec6e3e1fa672d3947c58638f508cdd308797b89688ebced930c647840960ed3c18681a88c3f7f62d426a08652c7775a6ebf673d5103e8f48930e978fc65b74569786dc447de7c0ea95692a5079c7c04756a2335d90b8ddd5415ce0c32ee5b8be38e8e2dd79f8427119000b3c7cc73acf050b646a738235c3d9f573", 0x8b}, {&(0x7f0000002a40)="2e5505127af4f4", 0x7}, {&(0x7f0000002a80)="677be29cefc9c42940c5ec3fad2a0bdd03b723c5ee90c147bab4e755c7a545152266082d37b04a890cca6bd61c46727aabc932a7720ed0a1d5ed5d6f3cbe04e227330b5d76795c9fa2a9285ca1db0e29a370675720fc0a7fa442e07658a049da78c02f694cd47f76f829672397298e5f6df49fe25ff5305ffa405951c1a267ab1530ce15cd39678bef8f05d8606e2bc68d0c28e15b090d9c44d658a6b662f008b86e18ad56c4fcaaa055b9a447b5c04b6e3c408461f1f504311e54a1a8a31d4801038d787c99e207933ffd6b2dfb2717decc66a037fec626c508104f688b4af9c95d332f7dffd1957b207600c7be45ecd5034af466b1", 0xf6}], 0x9, &(0x7f0000002c40)=[{0xa0, 0x112, 0x5, "4d190368593d2dbec467d238332abe4c42470c421c7348a434515440242ae26d065be5736ff3b847d32ffbcfac602fe87443dd5af7acf697f95228542956c336a05569f975e4589d1e13ab826578622c9de4dccd8b1296b7051bb8a8b4ec37ad2e901baa2dfd49625a3940de961322f0776ae4a15f0d34d3fc48cc84573c6d4c72df682ab840ffb346587be3731521"}, {0xb8, 0x103, 0xeaf5, "0ff445ffbddc42dfdacc1688e3ea2239b3aae3f8847ad6a7449a21f2bdaa2051311c8f2057377d82f2040e942c269b935062b51ca732f4cf76d15fa4dd008fa36f425cb62c152f4ebd7e9e993b36647abf11e13c906a3ceafe95a839f7beec8857de69776bdb5871fe782ffa96f6aea3726e8256a98e5a00e01a713cab28bdcd9c550fc609075499bea7a634ec2f2a82800ba59beb13a4ab57d696c0cc716de9ac6b6c643c7ead5f"}, {0xe0, 0x84, 0x1, "9ca9a884befe875e4d9156d5a1e9e05afe1c67a9060d51fed565302795ac6b0ffd9bbe516265e2e59e29007e5600fd1b502727b46dae29790bf043bb4730216e15bf80b00900a69d6ff0055d5d0ba7217e6a7d8f5bfdb2c5cab1114073a619764c65fbc85be622bb436f282dc59bf9e3142fcd04f1ced1abbdb91c4b098e46d1ffee16879777c24c56d03694d1b1c31e7782560fbde35e7baabf1208c71cb09823b7bf3ab27425162555fb2b3f1ce9d7be38018c15dc3fb73af0eeb7095bc49863cb6961e08a905319"}, {0x50, 0x6, 0xa774, "de859f37d23f9c9a03f547c4cf2d19a2cff70ec03728f4dfb43a229bbda91fcbcdd75e7e125e42ecf75fd216c286b2baec69c8718aedc220af17b6ad10ddfc"}, {0x40, 0x10c, 0x5, "9d4529a9c57956f53327b9704bc08ed915588132c0561e29b9cd25cf2ab630e590940581ac1aa5c1725e1897e5"}, {0xd0, 0x108, 0x10000, "829b88c2d56dd3be63474b1a6e9369cbe569b9f45fdec6a5dc80a6f5593084157caf07c3d8bee95a7e136e63fe03a5a80685a0a346fb9343de574140d7777593af4c1a08e7d3b823aa3fb1175a516eb1dc0916b0d611f598e193021a8c403c9f093f1e64f3c7ccd043b2d834597761aaf79a0f093b7854b9bb02e6e3d28e9fe746fe3a488f115b1c8f31e45b0bbf9f8263a0c676afdef6ba225cf41eeb984169324524b1e805c1f1ca8dd7a7a7b57407ce1c6a9ab521566ecbae6e"}, {0x70, 0x88, 0x9, "31a305c0440710be179d82cddc215ca621b8f3a64c7d438420fc2a2057e3f3cccb3475016c26de182db4e9863f92b8d7229d4acc12b2e1af2b06ccede604c504679001b6eee878ad4ca6d412583d72a3306bf0250c4d586b6d69cefc0dff66"}, {0xe8, 0xbf46b66f3ef5af6d, 0x0, "3eceae15fa0608c1f40e118133811d8d780e95ecc2ccd1c4b41152c38e6141e675e665980ca926af095122a0399baec9201b20c21d7cbcca4d5d5b94aaefe93c4784abc73605b95ed6dcfc9d47a3a60605341ac643a49d4f0c7742d0429a5ea51fe4701edad0eb0cae89de729eeec8ba876a5e946b67e3264702ae795d0f684302be97655e84409bc0c3f9f357a2b4e75eef65f58625c65f4e8521d72c8ef8c4d844c285b4fdced45f19a2f54ddaf5509c9c3db9a01cbdf6a917ffb8767997e654170bea5780d7d280055710bf1545a9e5041368989ed5"}], 0x4f0}, 0x2004c840) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000003180)=[@in={0x2, 0x4e22, @broadcast}], 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000031c0)={0xe, 0x207, 0x4, 0x7, 0x0}, &(0x7f0000003200)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000003240)={r3, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000003300)=0x84) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000003340)="acae3b9f67e6ea99e250559a118272d51bb294bc39e3b7bfc4d1331e24b6491929384767aa1c3ef41be0e4427c779ba87fa1c7d783c27708689006abcb8cfb2b4808e7ff0490603eb3074024be0f618764c08bc0bffd8de0307ca8d3d9a9e5b4ef1effdd8016cb9bed633a5cac94653027bd4a510e0968dc9372d0e4e866bdfa1eedd32fd33354f6fb3d4d1fd0c21e8f8683958d5ca633f889b93f8bb5d78afb42753c375afe072bd3c4", 0xaa) syz_emit_ethernet(0x22, &(0x7f0000003400)={@link_local, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "734b76f35667bf46"}}}}, &(0x7f0000003440)={0x1, 0x2, [0xa99, 0xc2a, 0xcff, 0x204]}) sendto$inet6(r2, &(0x7f0000003480)="67e68b5276748e3265b3e32d2a69fddc3d214ee4642e4e4f7292006062cf2aa4a2e06db5f6d882be1cb5816cd5de6691ab093b690eee47c2a1636c1f4db26b45643c139e9bdd976b14d767eebf22a8d54fa429a08d6528869c4e1bea83e35a559992a27c1c157aaec987f6d448084a8b2b7a93122cae8c65ab2826987f2fdd5317f5b143d27cea772efaaaffb77619684433a69081bf45b7501eec6cf153167a3a43cb624653df4d2e812b5c995850277a2e604f9bcb4137495a540a9b38e62247ad437eb08cbd927df320183c8b556848d8add0abd8ec55f970787e844158201e1062", 0xe3, 0x40000, &(0x7f0000003580)={0xa, 0x7, 0x0, @loopback, 0x9}, 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000035c0)={'veth0_vlan\x00', @random="bf01777d8c52"}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000003600), &(0x7f0000003640)=0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x5, 0x3, 0x5, 0x656, 0x6a, 0x8000}, {0x4, 0x8, 0x3, 0x7, 0x8000000000000001, 0x6}]}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000003740)={@multicast2, @multicast2, 0x0, 0x2, [@dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010101]}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000003780)={0x8, 0x4, 0x7f, 0xfffffffe, r4}, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000039c0)={{r2, &(0x7f00000037c0)='%:+*!/^!{-}\x00', 0x0, &(0x7f0000003800)={@align=0x1, {0x6, 0x8, 0x7, 0x1}}, 0x5, &(0x7f0000003840)={@_ha_fsid}, &(0x7f0000003880)=0x7fffffff}, {[0x6c3, 0x3, 0x6, 0xffff]}, 0x1ff, 0xd3, &(0x7f00000038c0)=""/211}) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000003a40)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000003a80)={'ipvlan1\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003ac0)=@bloom_filter={0x1e, 0x7, 0x5, 0x2, 0x4000, r0, 0x61e, '\x00', r6, r0, 0x5, 0x5, 0x3, 0x8}, 0x50) socket$netlink(0x10, 0x3, 0x12) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000003c40)={r5, &(0x7f0000003b40)='{\x00', 0x0, &(0x7f0000003b80)={@_ha_fsid={[0x80, 0xffffffff]}, {0x496e, 0x3, 0x0, 0x5}}, 0x7, &(0x7f0000003bc0)={@_ha_fsid}, &(0x7f0000003c00)=0x1}) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000005240)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005200)={&(0x7f0000003cc0)={0x1508, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0x80}, 0xa, 0x4, 0x100, 0xfffa, 0x17, 'syz1\x00', "1a8496a153fd4293afa43497da2442c04a0b651e80eb240d49041f15e16333e8", "b712fa71673f456b84920baa2288d72c0431d3d3eb10df69f0914104dbcba9f9", [{0x9, 0x1, {0x2, 0x80000001}}, {0x624, 0x5, {0x2, 0x2}}, {0xffff, 0x5, {0x3, 0x2288}}, {0x36, 0x40, {0x0, 0x5}}, {0x0, 0x7, {0x2, 0x101}}, {0x0, 0x0, {0x0, 0x4}}, {0x80, 0xfffb, {0x3, 0x40}}, {0x9, 0x0, {0x3, 0x10}}, {0x50c, 0x9, {0x1, 0x10001}}, {0x5, 0xa, {0x3, 0x9}}, {0x9c, 0x6, {0x3, 0x9}}, {0x7f3, 0x0, {0x1, 0x7}}, {0x401, 0xb04, {0x2, 0xbd7}}, {0x7, 0xe1, {0x3, 0xa}}, {0x3, 0x5, {0x2}}, {0x7, 0x3, {0x2}}, {0x5, 0x2179, {0x1, 0xc}}, {0x2, 0x7ff, {0x2, 0x2}}, {0x9, 0x5, {0x0, 0x400}}, {0xdcb9, 0x9, {0x1, 0x7}}, {0x9658, 0x4, {0x1, 0xb23}}, {0x9, 0x5, {0x2, 0x1}}, {0xa, 0xfffc, {0x2, 0x101}}, {0xda, 0x5, {0x3, 0xfffffffc}}, {0xfff8, 0x1, {0x40faeba3382fffcb, 0x9fde}}, {0x7f, 0x8, {0x2, 0x4}}, {0x5, 0x5, {0x3, 0x7fffffff}}, {0x81, 0x4, {0x0, 0x9}}, {0xa, 0x0, {0x0, 0xdcc}}, {0xfff0, 0x4, {0x0, 0x4}}, {0x3, 0x9c9, {0x3, 0x8}}, {0x2a89, 0x10, {0x1, 0x8}}, {0x2, 0x0, {0x3, 0x8}}, {0x7ff, 0xbc5, {0x2, 0x4}}, {0xd, 0x7, {0x2, 0x9e78}}, {0x7, 0x8, {0x0, 0x3b68}}, {0x3, 0x2, {0x1, 0x400}}, {0x81, 0x9, {0x1, 0x5}}, {0x6f, 0x3ff, {0x1, 0x80000001}}, {0x0, 0x8000, {0x3, 0x6b}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x5, 0x3, 0x3bb, 0x2, 0x13, 'syz1\x00', "aa15a159f16ddd0aa065e4468bb5a5175668be16767db6c629c35d928703c2bd", "a18a95fd7747262a6c053e564ccf9353b330d0eb3518f8aae6a5cf11374e5e69", [{0x3, 0xc557, {0x1, 0x4}}, {0x3ff, 0x8001, {0x2, 0xe}}, {0x5, 0x390, {0x2, 0x200}}, {0xe98, 0x8, {0x1, 0x4}}, {0xfff8, 0x9, {0x2, 0x6c}}, {0x8, 0xa, {0x1, 0x100}}, {0x1, 0x2, {0x3, 0x800}}, {0x7, 0x1, {0x1, 0x2}}, {0x10, 0x8, {0x3, 0x7}}, {0x9, 0x30, {0x1, 0x7}}, {0x8000, 0x8, {0x2, 0xfff}}, {0x238, 0x5, {0x3, 0xffffffff}}, {0x2, 0x54, {0x2, 0x6}}, {0x0, 0x800, {0x1, 0x10001}}, {0x10, 0x4, {0x3, 0x8}}, {0x5, 0xff}, {0x8, 0x8, {0x2, 0x73d9}}, {0x3, 0x5, {0x2, 0x80000001}}, {0x4, 0x921, {0x2, 0x7}}, {0x2, 0x4, {0x2, 0x80000001}}, {0x78c, 0xf20, {0x1, 0x4}}, {0xb7, 0xe, {0x1, 0xe15}}, {0x1ff, 0x6, {0x1, 0x6}}, {0x3, 0x2, {0x2, 0x9}}, {0xb, 0x0, {0x0, 0x9}}, {0x0, 0x4, {0x2, 0xfffffff7}}, {0x7, 0x2, {0x2, 0xbe2}}, {0x5e3, 0xc, {0x0, 0x4}}, {0xed03, 0x4, {0x1, 0x40}}, {0xa, 0xc3b3, {0x0, 0x4}}, {0x3, 0x1, {0x2, 0x3}}, {0xf4, 0x4, {0x3}}, {0xf, 0x8000, {0x1, 0x4}}, {0x4, 0x81e, {0x1, 0x8000}}, {0x7, 0xff, {0x2, 0x1d905b35}}, {0x4, 0x5, {0x2, 0x4}}, {0xfffa, 0x0, {0x3, 0xa}}, {0xfbd, 0x400, {0x3, 0x8}}, {0x7, 0x0, {0x1, 0x8000}}, {0x4, 0x9, {0x1, 0x73}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x4, 0xb, 0xfff9, 0x2, 0x1c, 'syz0\x00', "a5538c6f62d90fc402147228d042e0e36aaf179adcf27fb8d59a3168aca9fcbe", "061126eae3fe38e844fb8351e4105dff35070d93aa9c7a175118fa796cd6f9bf", [{0x4e, 0x1, {0x1, 0x16}}, {0x1, 0x80, {0x2, 0x8}}, {0xc64, 0xd68, {0x2, 0x7}}, {0x40, 0x9c83, {0x3, 0x9}}, {0x2, 0x5, {0x3, 0x1}}, {0x6, 0x2, {0x1}}, {0x6, 0xb, {0x0, 0x3}}, {0x8, 0x1, {0x2}}, {0xb04e, 0x1, {0x2, 0x40}}, {0xf, 0x10, {0x0, 0x2}}, {0x0, 0xb839, {0x2, 0x7}}, {0x1, 0x9, {0x1, 0x9}}, {0x3, 0x9b2, {0x3}}, {0xae, 0x101, {0x2, 0x3}}, {0x5, 0xd, {0x2, 0xb}}, {0x1ff, 0x4, {0x2, 0xffff}}, {0x3, 0x101}, {0x5, 0x7, {0x1, 0x4}}, {0x9, 0x8, {0x2, 0x4}}, {0x93, 0x5, {0x2, 0x6}}, {0x3, 0x3, {0x1, 0x2}}, {0x7, 0x6, {0x3, 0xffffffff}}, {0xb, 0x0, {0x2, 0xe}}, {0x4, 0x0, {0x1, 0x5}}, {0xc67a, 0x8, {0x0, 0x4f22}}, {0x101, 0x1, {0x0, 0x2}}, {0x3, 0x3, {0x2, 0x1000}}, {0x2, 0x6f0, {0x0, 0x18}}, {0xfffe, 0x100, {0x0, 0x4e}}, {0x9, 0x0, {0x0, 0x953}}, {0x5829, 0x7, {0x0, 0x401}}, {0x1, 0xfd60, {0x2, 0x3}}, {0xf586, 0x4, {0x2, 0x5}}, {0x9, 0x7, {0x1}}, {0x800, 0x8000, {0x1, 0xffffffff}}, {0x7, 0x3, {0x2, 0x8}}, {0x583, 0x9, {0x3, 0x4}}, {0x565, 0x1c, {0x0, 0x10}}, {0xd, 0x101, {0x2, 0x9}}, {0x8, 0xec1, {0x3, 0x86a}}]}}}, {{0x254, 0x1, {{0x3}, 0xfd, 0x9, 0x1, 0x6502, 0xe, 'syz0\x00', "f927ae080e1c25c0493e31f6c6c274173042240054653790d57b2ad9ca2af9a3", "02505094c2b942bfa49728eb0376e4435415918e893d73ba4811b42cf0b26fbf", [{0x0, 0xf, {0x1, 0x2}}, {0xc2, 0x80, {0x2}}, {0x5, 0x5, {0x3, 0x2}}, {0xfa7a, 0x3, {0x1, 0x4b}}, {0x0, 0x0, {0x3, 0x4}}, {0xffff, 0x0, {0x1, 0x4}}, {0x5, 0xc9, {0x0, 0xf}}, {0xc9, 0x2, {0x0, 0x3}}, {0x0, 0x8, {0x2, 0x500000}}, {0x5, 0x4, {0x0, 0xd4db}}, {0xfc00, 0x400, {0x0, 0x7ecd}}, {0x4, 0xa79, {0x3, 0xfdf}}, {0x5, 0x8, {0x0, 0xff25}}, {0x3, 0x3, {0x3, 0x7ff}}, {0x5, 0xfff2, {0x3, 0x3e}}, {0x3, 0xcfb, {0x2, 0x9}}, {0x3, 0x9, {0x3, 0x5}}, {0x9, 0x3, {0x0, 0xfffffffa}}, {0xa, 0x200, {0x1, 0x5}}, {0x40, 0x7, {0x3, 0x4}}, {0x8, 0x1d46, {0x0, 0x866}}, {0x3, 0x101, {0x2, 0x1}}, {0x4, 0xfff, {0x0, 0x3}}, {0x5432, 0x2, {0x1, 0x8}}, {0x8, 0x5, {0x0, 0xb}}, {0x0, 0x4, {0x1, 0x80}}, {0x5, 0xffff, {0x1, 0x8}}, {0x1, 0xa5e, {0x2, 0x7}}, {0x80, 0x1, {0x0, 0x8}}, {0x852, 0x301e, {0x2, 0xfffffff1}}, {0x4c70, 0x400, {0x3, 0x9}}, {0xffff, 0x0, {0x0, 0x4f1a2d88}}, {0x7fff, 0x0, {0x2, 0x8e0}}, {0x6, 0xcdc0, {0x0, 0x9}}, {0x9, 0x1, {0x2, 0x1fffc000}}, {0x333e, 0x6, {0x1}}, {0x7f, 0x7, {0x1, 0x7ff}}, {0x1000, 0x8, {0x2, 0x10001}}, {0x9f99, 0x0, {0x0, 0x8}}, {0x4, 0x3ff, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0xd, 0x4, 0xfb30, 0x8, 0xa, 'syz1\x00', "be8907e9dbdc97cc82432dd8d63cdce9e183d3f9f5be29b1fce3d9fd7d14ed17", "cfdc6898686b5c5a373a66e3895e9513a3e599b142147134db2bd3fb9c5ad86f", [{0xf4, 0x6, {0x3, 0xff}}, {0xbdf, 0x4cc3, {0x2, 0x1a3}}, {0x4, 0x9, {0x3, 0xe}}, {0x3, 0x468a, {0x3, 0xd}}, {0xb7, 0x8b, {0x1, 0xa0}}, {0x41, 0x8, {0x0, 0x3}}, {0x430b, 0x2, {0x2, 0xd}}, {0x5, 0x5, {0x3}}, {0x2, 0x3, {0x2, 0x10000}}, {0xa, 0x40, {0x1}}, {0xfff, 0xff, {0x3, 0x10001}}, {0xfffe, 0xd296, {0x2, 0x2}}, {0x742, 0x8, {0x0, 0x1}}, {0xe, 0x0, {0x0, 0x81}}, {0x1, 0x2, {0x1, 0x200}}, {0xfff7, 0xe, {0x3, 0x80000000}}, {0xa3, 0x1, {0x3, 0x8}}, {0x1, 0x100, {0x2, 0xd}}, {0x7ff, 0x6, {0x2, 0x1}}, {0x5, 0x5, {0x2, 0x6}}, {0x7f, 0x8, {0x3, 0x5}}, {0x7, 0xfff6, {0x0, 0xfffffffc}}, {0x6, 0x200, {0x1, 0x6}}, {0x4, 0x4, {0x0, 0xd}}, {0x2, 0x2, {0x2, 0x80000000}}, {0x2, 0xd9, {0x0, 0x227}}, {0xfff4, 0x39a, {0x1, 0x1}}, {0x8f5, 0x5, {0x3, 0x4}}, {0x1dc3, 0x9f8b, {0x2, 0x8}}, {0xfff7, 0x7ff, {0x0, 0x9}}, {0x0, 0x4, {0x2, 0x9}}, {0xbf1, 0x8, {0x1, 0x2}}, {0x1, 0xec3, {0x0, 0x2}}, {0x60, 0x8, {0x0, 0x800000}}, {0x0, 0xccc, {0x1, 0x1}}, {0x200, 0x5, {0x1, 0x38}}, {0x6, 0x7, {0x0, 0x5}}, {0xfff7, 0x2800, {0x1, 0x2}}, {0xe, 0x33, {0x1, 0xe4}}, {0x1, 0x9}]}}}, {{0x254, 0x1, {{0x2, 0x81}, 0x80, 0x9, 0x5d, 0x8, 0x17, 'syz1\x00', "fe29406d7cd3ac9ff7720f95b46cc1ffce1cce5517a75fbee290373915f6c647", "2f575832f38111956e8d31439b22bb85b3e123e8dee8f73b5c337d460dca043f", [{0x4, 0x0, {0x2, 0x7}}, {0xab75, 0x7c, {0x0, 0x7}}, {0x6, 0x8, {0x3, 0xbf7}}, {0xc, 0x6, {0x1, 0x2}}, {0x7, 0xb957, {0x2, 0xfffffffb}}, {0x622e, 0x3, {0x1, 0x1}}, {0xfeb2, 0x4, {0x3, 0x1}}, {0x7, 0x4, {0x3, 0x3}}, {0x2, 0x200, {0x1}}, {0x0, 0x7, {0x0, 0x3}}, {0x2, 0x3, {0x3, 0x5}}, {0xfff9, 0x8, {0x1, 0x81}}, {0x18c0, 0x1, {0x2, 0x3}}, {0xe, 0x7, {0x0, 0x3}}, {0x6, 0xfffb, {0x0, 0x7fffffff}}, {0x6, 0x3, {0x3, 0x5e2}}, {0xff00, 0x0, {0x0, 0xc}}, {0x48, 0x0, {0x3, 0x4}}, {0x5, 0x1, {0x1, 0xfffffffa}}, {0x7fff, 0x100, {0x3, 0x1000}}, {0x9, 0xffca, {0x1, 0xfff}}, {0x2ce, 0x7, {0x1, 0x6}}, {0x5, 0x8, {0x1, 0x9000}}, {0xa, 0x34a, {0x0, 0x7ff}}, {0x80, 0xd, {0x1, 0x1}}, {0xff, 0x3, {0x1, 0x1}}, {0x5, 0x433, {0x0, 0x1ff}}, {0x2, 0x8, {0x1, 0xabe}}, {0x5, 0x4, {0x1, 0x400}}, {0x7, 0x4, {0x0, 0x1}}, {0x2, 0x1, {0x3}}, {0xfff, 0xffff, {0x2}}, {0x3, 0x800, {0x2, 0x1}}, {0x1, 0xfffe, {0x1, 0x3ff}}, {0xbc9, 0x5, {0x2, 0x91}}, {0x2, 0xee5, {0x1}}, {0x400, 0x2, {0x872186366514c5ea, 0x9000000}}, {0x0, 0x0, {0x1, 0x9}}, {0x200, 0x7fff, {0x2, 0x6c80}}, {0xcc, 0xc5, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0xf8, 0x8, 0x9, 0x3, 0x4, 'syz1\x00', "2cc97ba243a34cf0131c2e2654f575e4905555e3ae7f9e6088146fe40f371350", "cd2ff55947e67f6ece2eea07931958ff2188cb98c8657e7d06b002c8ac12dd07", [{0x6, 0x2, {0x0, 0x10000}}, {0x4, 0x1, {0x0, 0x3}}, {0x1, 0x380, {0x3, 0x2bcaae18}}, {0x1000, 0x7, {0x2, 0x101}}, {0xeb63, 0x4, {0x3, 0xc}}, {0x9, 0x6, {0x2, 0x4}}, {0x8a3, 0x6962, {0x1, 0x9}}, {0xa, 0x8, {0x0, 0x9}}, {0x8000, 0x2, {0x1, 0x7000000}}, {0xfeff, 0x9, {0x0, 0x8}}, {0x40, 0x8001, {0x2, 0x9}}, {0x3, 0x8303, {0x2, 0x7fffffff}}, {0x8000, 0x200, {0x0, 0x8}}, {0x1, 0x9, {0x0, 0x3}}, {0xfffe, 0x1, {0x1, 0x8}}, {0x630, 0x8, {0x2, 0x80}}, {0x75e, 0x7f, {0x0, 0x4}}, {0x7f, 0x7, {0x1, 0x3}}, {0x9, 0x4, {0x2, 0x48}}, {0x1, 0x5, {0x1, 0x7}}, {0x40, 0x7, {0x3, 0x200}}, {0x200, 0x1, {0x0, 0x168d}}, {0x600, 0x5, {0x1, 0xfff}}, {0x8, 0x8, {0x3, 0xffffe30f}}, {0x0, 0x6, {0x2, 0x4}}, {0x0, 0x6, {0x3, 0x8}}, {0x7ff, 0x6, {0x2, 0x7ff}}, {0x1d, 0x10, {0x0, 0x401}}, {0x6, 0x3eca, {0x3, 0x662}}, {0x7ff, 0x3, {0x2, 0xffff12d1}}, {0x8001, 0x7, {0x0, 0xf14}}, {0x1, 0x2}, {0x2, 0x8d, {0x1, 0x8}}, {0x401, 0x8, {0x1, 0x9}}, {0x4, 0x80, {0x3, 0xf2}}, {0xfff, 0x8, {0x2, 0x4}}, {0x7, 0x2, {0xa2f0e09442aa0ff5, 0x101}}, {0x5, 0xb1, {0x2, 0xbed1d1f}}, {0x0, 0x7c68, {0x3, 0xd2aa}}, {0xf6, 0x3, {0x1, 0xba1}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x52, 0x4, 0x1, 0x8887, 0x7, 'syz1\x00', "5bce9352dae781ca3045f6013a565ce7293226ccfa3bc6f3f0508e8fff76c8da", "bd18ea36ff2c4b86bc379bb4939b92e42df843c7784075fa5d42284f431c779f", [{0x8, 0x6}, {0x5, 0xdba, {0x1, 0x2}}, {0xab5, 0x3, {0x0, 0x5}}, {0xcaf6, 0x7, {0x2, 0x4}}, {0x7f, 0x8, {0x2, 0x4}}, {0x5, 0x9, {0x2, 0x7}}, {0x1000, 0x4b3, {0x2, 0x4}}, {0x3, 0x30, {0x2, 0x9}}, {0x8, 0x80, {0x0, 0x1}}, {0x8, 0x8f, {0x0, 0xdae}}, {0x3, 0x9, {0x0, 0xe6f}}, {0x10, 0x0, {0x2, 0x4}}, {0xdfff, 0x5, {0x1}}, {0x4, 0xfa, {0x1, 0xd193}}, {0x400, 0x3ff, {0x2, 0x10001}}, {0x1ff, 0x5, {0x3, 0x7}}, {0x68f, 0x2, {0x0, 0xfffffffa}}, {0x0, 0xcca0, {0x3}}, {0x1, 0x5, {0x2, 0xc6b}}, {0x2, 0x7, {0x3, 0x4}}, {0x67d, 0x1, {0x2, 0xdd1}}, {0x893, 0x4, {0x2, 0x4}}, {0x1, 0x7, {0x2, 0x7ff}}, {0x7, 0x8, {0x0, 0x2}}, {0x5, 0x100, {0x3, 0x8001}}, {0x6, 0x9, {0x0, 0x401}}, {0xc9da, 0xe24, {0x3, 0x2}}, {0x8001, 0x3ff, {0x1, 0x1ff}}, {0xffc0, 0xc, {0x0, 0xb2f}}, {0x80, 0x0, {0x2, 0x3}}, {0x4, 0x5, {0x2, 0x3}}, {0xfffc, 0xfffc, {0x3, 0x692}}, {0x400, 0x0, {0x1}}, {0x9, 0xff, {0x2, 0x8000}}, {0x0, 0xf4, {0x2, 0x5}}, {0x1, 0xfff, {0x2, 0x81}}, {0x7, 0x1b, {0x1, 0x4}}, {0x1c, 0x3, {0x0, 0x4}}, {0xff0c, 0x0, {0x1, 0x90000}}, {0x9, 0xf8, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x3, 0x1, 0xb, 0xc, 0x23, 'syz0\x00', "d15092aade72c19d578ed4c2475263cd934aee2cf2b1f6783e7a50e10c4008f7", "3c91912caa88ab1d715c60201547f476fa770802f7c53957c51c7546b876efc7", [{0x3fe, 0x0, {0x2}}, {0xff01, 0x1295, {0x3, 0x83}}, {0xdf36, 0x7, {0x3, 0x4}}, {0x81, 0x401, {0x0, 0x60000000}}, {0x7, 0x2, {0x3, 0x3}}, {0x9, 0x8, {0x2, 0xfffffffb}}, {0x1, 0x9, {0x2, 0x3}}, {0x1, 0x4, {0x2, 0x7}}, {0x8000, 0x3, {0x0, 0x2}}, {0xfe, 0x81, {0x3, 0x80000000}}, {0x5, 0xffff, {0x3, 0x4}}, {0xe, 0x9, {0x0, 0x101}}, {0x7, 0xfffa, {0x1, 0x8}}, {0x9, 0x4, {0x4, 0x2}}, {0x5, 0x7f, {0x1, 0x8}}, {0x1, 0x7f, {0x2, 0x7}}, {0x975f, 0x8e0, {0x2, 0xfffffc01}}, {0x9, 0x8001, {0x2, 0x1}}, {0x824, 0xb, {0x2, 0xe}}, {0x9, 0xfc01, {0x1, 0x5}}, {0x5, 0x3ff, {0x2, 0x9}}, {0x8, 0xc, {0x0, 0x9}}, {0x6, 0x8, {0x1, 0xcc38}}, {0x800, 0xfff0, {0x0, 0x7}}, {0x7, 0x800, {0x3, 0xffffffbe}}, {0x3, 0xa0, {0x3, 0xe92}}, {0x6, 0xd0df, {0x2, 0x10000}}, {0xfffa, 0x80, {0x0, 0x3}}, {0xaf4b, 0x1, {0x1, 0xe}}, {0xfffc, 0x400, {0x0, 0x45}}, {0x6, 0x8, {0x2, 0xf}}, {0x776a, 0xafe, {0x3, 0xfffffff0}}, {0xf47, 0xa88d, {0x1, 0x3000}}, {0x0, 0x401, {0x1, 0x2}}, {0xf, 0xe8f, {0xa3312df02ed5f42f, 0x8}}, {0xfffa, 0xc, {0x3, 0x7}}, {0xa, 0x7, {0x2, 0x3}}, {0x6, 0x10, {0x3, 0xa}}, {0x2, 0x0, {0x1, 0x2}}, {0x6b, 0xb}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$netrom(r8, &(0x7f0000005280)={{0x3, @null, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000005300)={0xa, 0x4e21, 0x33, @private2, 0x80}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000005340)={'bond_slave_1\x00', {0x2, 0x4e24, @broadcast}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000005380)={'veth1_to_team\x00', 0x10}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000053c0), &(0x7f0000005400)=0x4) r9 = accept4$inet(r8, &(0x7f0000005440)={0x2, 0x0, @remote}, &(0x7f0000005480)=0x10, 0x80800) clock_gettime(0x0, &(0x7f0000005500)={0x0, 0x0}) ppoll(&(0x7f00000054c0)=[{r0, 0x9201}, {r1, 0x1400}, {r9, 0x1532}, {r2, 0x2}], 0x4, &(0x7f0000005540)={r10, r11+60000000}, &(0x7f0000005580)={[0x2]}, 0x8) 395.181838ms ago: executing program 2 (id=4575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f00000004c0), 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x7fff, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xf6, 0x8, 0x9}, {0x1, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, r8, 0x1, 0x0, 0xffffffff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$SOCK_DESTROY(r4, &(0x7f00000023c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002380)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x110c}, 0x1, 0x0, 0x0, 0x8040000}, 0x40004) close(0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 380.751389ms ago: executing program 0 (id=4576): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2d, 0x204, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8014) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@deltclass={0x58, 0x29, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0x1}, {0x10, 0x10}, {0x8, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x28, 0x50}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) 380.493375ms ago: executing program 1 (id=4577): socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r3 = socket$caif_seqpacket(0x25, 0x5, 0x2) read(r3, &(0x7f0000000300)=""/93, 0x5d) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) (async) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r2}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r10, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 176.522915ms ago: executing program 3 (id=4578): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3fffd, 0x0, 0x0, 0xffffffff, '\x00', 0x0, r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) 143.296894ms ago: executing program 3 (id=4579): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 81.808965ms ago: executing program 3 (id=4580): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x5c, r3, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000b00)=[{0x3, 0x1, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x1}, 0xfd, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x9ac8546e0387b197}, {0x1, 0xf0, 0x4}, 0x2}, {0x1, 0x0, {0x1, 0xff, 0x2}, {0x0, 0xff, 0x1}, 0x1}, {0x3, 0x0, {0x0, 0x0, 0x4}, {0x1, 0x1}, 0x1, 0x2}], 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa2, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r9], 0x7c}}, 0x20000000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r11, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r13 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r13, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r10, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x48000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x2000000, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x80010) 504.785µs ago: executing program 1 (id=4581): syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[], 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8d00000007060f91f99cb189c4d7a221ea50c23f89dfc2559e767ce89141bb0b775bb04dc2aee874ecbad13e828efb3188b7a119706b1b469218f248124ca96b19aeeef3086c5f0b48b3db4c84b0cf8f2063317b86ca9e30b2e6f95d395cdd8a19793be636683c8d007cc9850fb032a4bf56ab1dd1b41e2c6f8e48", @ANYRES16=r5, @ANYBLOB="200027bd7000ffdbdf25150000000c009900040000000f0000000a001a0008021100000100000a001a0008021100000000000a00060008021100000000000a00060008021100000000000a001a00ffffffffffff00000a001a0008021100000000000a000600ffffffffffff00000a001a0008021100000100000a001a00ffffffffffff0000"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f00000004c0)) (async) socketpair(0x2, 0x800, 0x81, &(0x7f0000000540)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r3, @ANYRES64=r3, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x10008024}, 0x0) (async) accept4(r1, &(0x7f0000000200)=@phonet, &(0x7f0000000280)=0x80, 0x80800) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010003b150a00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c000280050005000100000008000a00", @ANYRES32], 0x40}}, 0x48010) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r12, @ANYRES32=r12], 0x44}}, 0x2000800) (async) socket$l2tp(0x2, 0x2, 0x73) 0s ago: executing program 0 (id=4582): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x7, 0x100}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r1) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x6, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xffffffff}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000480)={0x1f, 0x0, @fixed}, &(0x7f00000004c0)=0xe, 0x180800) ioctl$int_out(r5, 0x0, &(0x7f0000000500)) pread64(r4, &(0x7f0000000540)=""/247, 0xf7, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r7, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x1a}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x100}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4de}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r8 = accept4$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14, 0x80000) getsockname$packet(r8, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000880)=0x14) socket$kcm(0x29, 0xa, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x80, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x80}}, 0x110) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r7, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x88}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40045}, 0xc0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r6) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000f40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c00)={0x2cc, r10, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8dc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x243}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x234b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfe6}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "16fb559bbe572af0892c18c54c0603c2b2f872a289379cf8cedfe7a087c26e394c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xbe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffc00}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffff801}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "cf8111a4a09d2bc9cb91e5663992ae9ac6f0bb7b08982863c8a0c8fd"}}]}, @TIPC_NLA_MEDIA={0x128, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff26e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x734}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6ecf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4c6}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x14040cc4}, 0x8800) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000fc0), r6) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, r11, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004010) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, r7, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x48041}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c855) kernel console output (not intermixed with test programs): known binding: 66,1,1/26986162:3948267771/3948267773 [ 295.177946][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2956'. [ 295.191224][T16537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.349652][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 295.396614][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 295.413656][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2961'. [ 295.629008][T16299] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 36732 - 0 [ 295.693080][T16571] C: Caught tx_queue_len zero misconfig [ 295.707404][ T5836] Bluetooth: hci5: command tx timeout [ 295.778746][T16579] netlink: 'syz.3.2968': attribute type 4 has an invalid length. [ 295.836635][T16299] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 36732 - 0 [ 295.959752][T16593] netlink: 'syz.1.2972': attribute type 1 has an invalid length. [ 295.990804][T16594] netlink: 'syz.1.2972': attribute type 1 has an invalid length. [ 296.076569][T16299] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 36732 - 0 [ 296.175016][T16593] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 296.175803][T16594] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 296.314483][T16299] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 36732 - 0 [ 296.740992][T16645] IPVS: ip_vs_add_dest(): server weight less than zero [ 296.887886][T16299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 296.945363][T16299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 296.995617][T16663] sctp: [Deprecated]: syz.1.2988 (pid 16663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.995617][T16663] Use struct sctp_sack_info instead [ 297.047705][T16299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.079864][T16299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.121286][T16661] bond0: (slave gre0): refused to change device type [ 297.158234][T16299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.186625][T16299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.202337][T16299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.222515][T16299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.230757][T16661] syzkaller0: entered promiscuous mode [ 297.251053][T16661] syzkaller0: entered allmulticast mode [ 297.312183][T16686] netlink: 'syz.2.2991': attribute type 21 has an invalid length. [ 297.365236][T16694] xt_l2tp: invalid flags combination: 0 [ 297.390934][T16694] netlink: 'syz.2.2991': attribute type 1 has an invalid length. [ 297.466603][T16686] __nla_validate_parse: 2 callbacks suppressed [ 297.466620][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'. [ 297.708575][T16714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2995'. [ 297.777269][ T5836] Bluetooth: hci5: command tx timeout [ 297.805578][T16718] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2997'. [ 298.123803][ T12] hsr_slave_0: left promiscuous mode [ 298.147218][ T12] 0: left promiscuous mode [ 298.152849][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.206616][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.442767][ T13] smc: removing ib device syz1 [ 298.657765][ T12] team0 (unregistering): Port device team_slave_1 removed [ 298.686113][ T12] team0 (unregistering): Port device team_slave_0 removed [ 298.800855][ T12] team0 (unregistering): Port device dummy0 removed [ 298.859948][T16749] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 299.052369][T16747] syzkaller0: entered promiscuous mode [ 299.062921][T16774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3007'. [ 299.073483][T16747] syzkaller0: entered allmulticast mode [ 299.073998][T16772] syz.3.3006 uses old SIOCAX25GETINFO [ 299.080197][T16774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3007'. [ 301.521917][T16299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.531730][T16782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3009'. [ 301.548613][T16782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3009'. [ 301.638263][T16299] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.683438][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.690624][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.740644][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.747861][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.868367][T16850] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 301.943907][ T12] IPVS: stop unused estimator thread 0... [ 302.250584][T16875] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3019'. [ 302.412427][T16877] xt_CT: No such helper "netbios-ns" [ 302.539372][T16892] bond6: invalid ARP target 0.0.0.0 specified for addition [ 302.558193][T16892] bond6: option arp_ip_target: invalid value (0) [ 302.581637][T16892] bond6 (unregistering): Released all slaves [ 302.668799][T16897] netlink: 'syz.2.3024': attribute type 1 has an invalid length. [ 302.700934][T16903] netlink: 'syz.2.3024': attribute type 1 has an invalid length. [ 302.811833][T16299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.913584][T16926] ip6gre0: Master is either lo or non-ether device [ 302.926513][T16924] netlink: 'syz.3.3027': attribute type 13 has an invalid length. [ 303.086860][ T9] hid-generic 0005:15C2:0006.0002: item fetching failed at offset 0/2 [ 303.127823][ T9] hid-generic 0005:15C2:0006.0002: probe with driver hid-generic failed with error -22 [ 303.198783][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3031'. [ 303.257842][T16944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3031'. [ 303.323577][T16955] netlink: 'syz.3.3032': attribute type 6 has an invalid length. [ 303.364724][T16955] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3032'. [ 303.503212][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3033'. [ 303.539292][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3033'. [ 303.573795][T16299] veth0_vlan: entered promiscuous mode [ 303.625115][T16299] veth1_vlan: entered promiscuous mode [ 303.702089][T16299] veth0_macvtap: entered promiscuous mode [ 303.769710][T16299] veth1_macvtap: entered promiscuous mode [ 303.852014][T16299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.877120][T16986] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.3037'. [ 303.881688][T16299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.946507][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.956844][T16995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3040'. [ 303.969498][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.997859][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.044548][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.351692][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.378173][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.473563][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.489748][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.618988][T17035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2903'. [ 304.703427][T17041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.856327][T17041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.925394][T17045] ip6tnl0: entered promiscuous mode [ 304.967386][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3051'. [ 305.171281][T17055] netlink: 'syz.3.3053': attribute type 21 has an invalid length. [ 305.235933][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.247394][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.256733][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.277931][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.285952][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.431373][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3057'. [ 306.001217][T17081] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 306.124172][T17103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.134854][T17104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.266401][T17063] chnl_net:caif_netlink_parms(): no params data found [ 306.458196][T17063] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.465422][T17063] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.474075][T17063] bridge_slave_0: entered allmulticast mode [ 306.481978][T17063] bridge_slave_0: entered promiscuous mode [ 306.491162][T17063] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.500073][T17063] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.508226][T17063] bridge_slave_1: entered allmulticast mode [ 306.516274][T17063] bridge_slave_1: entered promiscuous mode [ 306.575157][T17130] syzkaller1: entered promiscuous mode [ 306.597070][T17130] syzkaller1: entered allmulticast mode [ 306.659475][T17063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.673595][T17143] syzkaller0: entered promiscuous mode [ 306.679412][T17143] syzkaller0: entered allmulticast mode [ 306.695619][T17143] 0: reclassify loop, rule prio 0, protocol 800 [ 306.713034][T17063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.724911][T17147] nbd: nbd64 already in use [ 306.921836][T14428] udevd[14428]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 306.980559][T17063] team0: Port device team_slave_0 added [ 306.989412][T17063] team0: Port device team_slave_1 added [ 307.052098][T17063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.070655][T17063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.102536][T17063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.135457][T17063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.145579][T17063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.180575][T17063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.211397][T17164] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 307.220358][T17164] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.240378][T17167] netlink: 'syz.2.3077': attribute type 3 has an invalid length. [ 307.270997][T17168] netlink: 'syz.4.3076': attribute type 1 has an invalid length. [ 307.343399][T17063] hsr_slave_0: entered promiscuous mode [ 307.371952][T17063] hsr_slave_1: entered promiscuous mode [ 307.378294][ T5836] Bluetooth: hci3: command tx timeout [ 307.407916][T17063] debugfs: 'hsr0' already exists in 'hsr' [ 307.413690][T17063] Cannot create hsr debugfs directory [ 307.420913][T17173] bond0: Master is either lo or non-ether device [ 307.471880][T17176] sctp: [Deprecated]: syz.4.3081 (pid 17176) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.471880][T17176] Use struct sctp_sack_info instead [ 307.726511][T17189] netlink: 'syz.2.3085': attribute type 9 has an invalid length. [ 307.774311][T17063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.787556][T17063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.799028][T17063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 307.826555][T17192] netlink: 'syz.1.3086': attribute type 21 has an invalid length. [ 307.870288][T17192] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 307.880858][T17194] netlink: 'syz.1.3086': attribute type 15 has an invalid length. [ 307.897499][T17192] bond11 (unregistering): Released all slaves [ 307.956191][T17063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.977180][T17063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.997367][T17063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 308.021152][T17194] netlink: 'syz.1.3086': attribute type 15 has an invalid length. [ 308.032129][ T13] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 308.042765][ T13] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 308.067530][ T13] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 308.138894][T17063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.149497][T17063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.167322][T17063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 308.183902][ T13] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 308.200058][T17210] gretap4: entered promiscuous mode [ 308.205361][T17210] gretap4: entered allmulticast mode [ 308.292307][T17063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.314071][T17063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.334167][T17221] netlink: 'syz.2.3091': attribute type 11 has an invalid length. [ 308.342840][T17221] __nla_validate_parse: 22 callbacks suppressed [ 308.342858][T17221] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3091'. [ 308.344292][T17063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 308.438786][T17229] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3094'. [ 308.539093][T17231] syzkaller0: entered promiscuous mode [ 308.544854][T17231] syzkaller0: entered allmulticast mode [ 308.653712][T17063] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 308.665552][T17063] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.674021][T17063] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.685041][T17239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3096'. [ 308.697694][T17063] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.705809][T17063] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.727823][T17063] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 308.736275][T17063] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.759641][T17063] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 308.802240][T17247] netlink: 169832 bytes leftover after parsing attributes in process `syz.1.3097'. [ 308.845313][T17253] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3098'. [ 308.852865][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3099'. [ 308.999161][T17063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.012860][T17258] netlink: 'syz.4.3101': attribute type 1 has an invalid length. [ 309.035425][T17063] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.094381][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.101540][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.175774][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.183211][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.220512][T17264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3101'. [ 309.247461][T17270] netlink: 'syz.1.3104': attribute type 75 has an invalid length. [ 309.365347][T17063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.379679][T17063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.381119][T17274] netlink: 'syz.1.3106': attribute type 21 has an invalid length. [ 309.459740][ T5836] Bluetooth: hci3: command tx timeout [ 309.473499][T17274] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3106'. [ 309.530635][T17274] netlink: 'syz.1.3106': attribute type 5 has an invalid length. [ 309.543795][T17274] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3106'. [ 309.639261][T17274] delete_channel: no stack [ 309.645628][T17287] netlink: 'syz.2.3109': attribute type 63 has an invalid length. [ 309.676003][T17287] netlink: 'syz.2.3109': attribute type 63 has an invalid length. [ 309.830303][T17063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.885149][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3112'. [ 309.893733][T17063] veth0_vlan: entered promiscuous mode [ 309.915295][T17305] ipvlan2: entered allmulticast mode [ 309.949974][T17305] syz_tun: entered allmulticast mode [ 310.023734][T17297] ipvlan2: entered allmulticast mode [ 310.043106][T17063] veth1_vlan: entered promiscuous mode [ 310.132114][T17063] veth0_macvtap: entered promiscuous mode [ 310.174998][T17063] veth1_macvtap: entered promiscuous mode [ 310.209758][T17314] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 310.221936][T17314] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 310.230617][T17314] gretap5: entered promiscuous mode [ 310.235915][T17314] gretap5: entered allmulticast mode [ 310.281981][T17063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.345472][T17314] macvtap1: entered promiscuous mode [ 310.358107][T17314] macvtap1: entered allmulticast mode [ 310.363536][T17314] veth1_vlan: entered allmulticast mode [ 310.435975][T17063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.463501][ T132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.473833][ T132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.545518][ T132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.603087][ T132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.616830][T17337] veth0: entered promiscuous mode [ 310.731724][T17337] xt_TCPMSS: Only works on TCP SYN packets [ 310.796688][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.829104][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.923719][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.938095][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.458396][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.472575][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.483222][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.492372][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.501219][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.537590][ T5828] Bluetooth: hci3: command tx timeout [ 311.639524][T17380] nbd1: detected capacity change from 0 to 63 [ 311.667615][ T5832] block nbd1: Receive control failed (result -104) [ 311.668583][ T5828] block nbd1: Receive control failed (result -32) [ 312.011374][T17383] chnl_net:caif_netlink_parms(): no params data found [ 312.148503][T17426] tunl0: entered promiscuous mode [ 312.293052][T17383] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.304558][T17383] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.314508][T17383] bridge_slave_0: entered allmulticast mode [ 312.327555][T17383] bridge_slave_0: entered promiscuous mode [ 312.410406][T17383] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.427200][T17383] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.434723][T17383] bridge_slave_1: entered allmulticast mode [ 312.451799][T17383] bridge_slave_1: entered promiscuous mode [ 312.496248][ T4270] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.505953][ T4270] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.530845][T17383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.541861][ T4270] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.552225][ T4270] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.565766][T17383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.603188][T17446] tipc: Enabled bearer , priority 0 [ 312.620469][T17445] tipc: Disabling bearer [ 312.639181][T17383] team0: Port device team_slave_0 added [ 312.653947][T17383] team0: Port device team_slave_1 added [ 312.760461][T17383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.768046][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.798786][T17383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.819222][T17383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.826812][T17383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.858662][T17458] validate_nla: 4 callbacks suppressed [ 312.858683][T17458] netlink: 'syz.0.3157': attribute type 1 has an invalid length. [ 312.914021][T17383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.109224][T17383] hsr_slave_0: entered promiscuous mode [ 313.124517][T17383] hsr_slave_1: entered promiscuous mode [ 313.132425][T17383] debugfs: 'hsr0' already exists in 'hsr' [ 313.138614][T17383] Cannot create hsr debugfs directory [ 313.166760][T17482] netlink: 'syz.0.3160': attribute type 1 has an invalid length. [ 313.533185][T17511] __nla_validate_parse: 25 callbacks suppressed [ 313.533202][T17511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3170'. [ 313.618120][ T5832] Bluetooth: hci3: command tx timeout [ 313.619618][T17383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.623852][ T5828] Bluetooth: hci2: command tx timeout [ 313.639413][T17383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 313.697355][T17383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 36032 - 0 [ 313.853228][T17383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.877365][T17383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 313.907039][T17383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 36032 - 0 [ 313.926194][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3173'. [ 313.953305][T17524] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3174'. [ 314.018277][T17383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.031998][T17527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3174'. [ 314.042212][T17383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 314.067081][T17383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 36032 - 0 [ 314.106768][T17536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.196489][T17383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.218536][T17383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 314.245524][T17383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 36032 - 0 [ 314.321814][T17543] ip_vti0: entered promiscuous mode [ 314.329118][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3179'. [ 314.409220][T17552] syzkaller0: entered promiscuous mode [ 314.414733][T17552] syzkaller0: entered allmulticast mode [ 314.431278][T17552] dvmrp0: entered allmulticast mode [ 314.702887][T17567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3186'. [ 314.803707][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3188'. [ 315.103925][T17383] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.118813][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3189'. [ 315.125865][T17383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.145824][T17383] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 315.159070][T17383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.186053][T17383] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.212744][T17383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.228164][T17580] tc_dump_action: action bad kind [ 315.243406][T17383] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.292855][T17383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.492482][T17383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.541247][T17383] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.562909][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.570306][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.606276][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.613542][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.629653][T17598] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3193'. [ 315.655297][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3193'. [ 315.697285][ T5828] Bluetooth: hci2: command tx timeout [ 315.736075][T17600] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 315.836936][T17383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 315.867072][T17383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.315807][T17383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.349051][T17628] netlink: 'syz.1.3199': attribute type 4 has an invalid length. [ 316.378147][T17630] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 316.384194][T17630] syzkaller1: linktype set to 823 [ 317.150215][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.779706][ T5828] Bluetooth: hci2: command tx timeout [ 318.041667][T17613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.103016][ T5193] udevd[5193]: worker [14241] /devices/virtual/block/nbd0 is taking a long time [ 318.148366][T17383] veth0_vlan: entered promiscuous mode [ 318.232872][T17383] veth1_vlan: entered promiscuous mode [ 318.313977][T17383] veth0_macvtap: entered promiscuous mode [ 318.338741][T17383] veth1_macvtap: entered promiscuous mode [ 318.387656][T17383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.425446][T17383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.466047][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.486607][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.506594][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.559448][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.782177][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.797042][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.875381][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.922459][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.006527][T17712] __nla_validate_parse: 4 callbacks suppressed [ 319.006547][T17712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3217'. [ 319.043142][ T5840] IPVS: starting estimator thread 0... [ 319.112872][T17719] netlink: 'syz.1.3221': attribute type 1 has an invalid length. [ 319.187192][T17715] IPVS: using max 38 ests per chain, 91200 per kthread [ 319.509142][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3228'. [ 319.563878][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.574680][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.599734][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.609508][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.620590][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.857597][ T5828] Bluetooth: hci2: command tx timeout [ 319.922039][T17746] chnl_net:caif_netlink_parms(): no params data found [ 320.036782][ T132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.057105][ T132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 320.101185][T17769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'. [ 320.155996][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3233'. [ 320.179478][ T132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.190151][ T132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 320.249222][T17746] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.256566][T17746] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.271569][T17746] bridge_slave_0: entered allmulticast mode [ 320.279442][T17746] bridge_slave_0: entered promiscuous mode [ 320.287922][T17746] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.295152][T17746] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.302611][T17746] bridge_slave_1: entered allmulticast mode [ 320.312680][T17746] bridge_slave_1: entered promiscuous mode [ 320.360329][ T132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.377104][ T132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 320.434912][T17746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.462621][ T132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.477159][ T132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 320.506921][T17746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.630785][T17746] team0: Port device team_slave_0 added [ 320.658291][T17746] team0: Port device team_slave_1 added [ 320.730995][T17746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.743119][T17746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.772621][T17746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.826521][T17746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.844838][T17746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.888439][T17746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.900331][ T4270] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 36732 - 0 [ 320.943712][ T127] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 36732 - 0 [ 321.046023][ T127] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 36732 - 0 [ 321.078761][T17746] hsr_slave_0: entered promiscuous mode [ 321.085679][T17746] hsr_slave_1: entered promiscuous mode [ 321.092485][T17746] debugfs: 'hsr0' already exists in 'hsr' [ 321.102462][T17746] Cannot create hsr debugfs directory [ 321.138013][T17814] netlink: 'syz.0.3246': attribute type 1 has an invalid length. [ 321.186217][ T4270] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 36732 - 0 [ 321.479640][ T132] batman_adv: batadv0: Removing interface: gretap2 [ 321.526274][ T132] bond6 (unregistering): (slave geneve3): Releasing active interface [ 321.546286][ T132] bond4 (unregistering): (slave geneve2): Releasing active interface [ 321.671887][ T132] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 321.697298][ T5828] Bluetooth: hci4: command tx timeout [ 321.763749][ T132] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 321.773375][ T132] bond0 (unregistering): Released all slaves [ 321.784715][ T132] bond1 (unregistering): Released all slaves [ 321.798925][ T132] bond2 (unregistering): Released all slaves [ 321.811575][ T132] bond3 (unregistering): Released all slaves [ 321.824968][ T132] bond4 (unregistering): Released all slaves [ 321.846502][ T132] bond5 (unregistering): Released all slaves [ 321.861704][ T132] bond6 (unregistering): Released all slaves [ 321.874286][ T132] bond7 (unregistering): Released all slaves [ 321.889633][ T132] bond8 (unregistering): Released all slaves [ 321.904823][ T132] bond9 (unregistering): Released all slaves [ 321.926423][ T132] bond10 (unregistering): Released all slaves [ 321.962317][T17821] bond1: (slave geneve2): making interface the new active one [ 321.970440][T17821] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 322.160127][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 322.171072][ T132] tipc: Left network mode [ 322.173219][T17843] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3255'. [ 322.175491][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 322.194361][ T127] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 322.234039][ T127] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 322.544786][T17858] syzkaller0: entered promiscuous mode [ 322.577400][T17858] syzkaller0: entered allmulticast mode [ 323.224970][T17746] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 36732 - 0 [ 323.411034][T17907] netlink: 'syz.3.3267': attribute type 1 has an invalid length. [ 323.428861][T17746] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 36732 - 0 [ 323.480596][T17911] netlink: 'syz.4.3269': attribute type 1 has an invalid length. [ 323.490554][T17913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3271'. [ 323.503472][T17914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3267'. [ 323.516359][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 323.572000][T17907] bond12: entered promiscuous mode [ 323.578872][T17907] 8021q: adding VLAN 0 to HW filter on device bond12 [ 323.685677][T17914] bond12: entered allmulticast mode [ 323.717106][T17907] bond12: (slave bridge12): making interface the new active one [ 323.724822][T17907] bridge12: entered promiscuous mode [ 323.730573][T17907] bridge12: entered allmulticast mode [ 323.738248][T17907] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 323.777574][ T5828] Bluetooth: hci4: command tx timeout [ 323.784859][T17927] bond2 (unregistering): Released all slaves [ 323.830320][T17746] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 36732 - 0 [ 323.874708][T17938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3276'. [ 323.930377][T17941] xfrm1: entered allmulticast mode [ 323.958979][T17938] tipc: Started in network mode [ 323.963995][T17938] tipc: Node identity 4, cluster identity 4711 [ 323.973706][T17938] tipc: Node number set to 4 [ 324.030243][T17746] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 36732 - 0 [ 324.046757][T17946] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 324.175540][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 324.194910][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 324.279266][ T132] veth1_vlan: left allmulticast mode [ 324.279331][T17961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3279'. [ 324.733540][T17969] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3282'. [ 324.761811][T17746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.784515][T17746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.806503][T17746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.843242][T17746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.871916][T17746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.908596][T17746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.952714][T17746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.988996][T17746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.052693][ T132] IPVS: stop unused estimator thread 0... [ 325.295172][T17746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.350930][T18005] syzkaller1: entered promiscuous mode [ 325.357428][T18005] syzkaller1: entered allmulticast mode [ 325.404033][T17746] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.432985][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.440182][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.624022][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.631252][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.857235][ T5828] Bluetooth: hci4: command tx timeout [ 326.029210][T17746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.075509][T18053] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 326.121667][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3301'. [ 326.191510][T18052] veth0_macvtap: left promiscuous mode [ 326.338244][T17746] veth0_vlan: entered promiscuous mode [ 326.368753][T17746] veth1_vlan: entered promiscuous mode [ 326.402233][T18066] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3304'. [ 326.415272][T17746] veth0_macvtap: entered promiscuous mode [ 326.424093][T18068] netlink: 'syz.2.3305': attribute type 51 has an invalid length. [ 326.442537][T17746] veth1_macvtap: entered promiscuous mode [ 326.488018][T17746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.513131][T17746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.545482][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.575451][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.598758][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.613312][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.615171][T18087] syz.3.3310: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 326.627478][T18079] openvswitch: netlink: Invalid VLAN frame [ 326.644845][T18087] ,cpuset=/,mems_allowed=0-1 [ 326.663186][T18087] CPU: 1 UID: 0 PID: 18087 Comm: syz.3.3310 Not tainted syzkaller #0 PREEMPT(full) [ 326.663210][T18087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 326.663220][T18087] Call Trace: [ 326.663227][T18087] [ 326.663233][T18087] dump_stack_lvl+0xe8/0x150 [ 326.663259][T18087] warn_alloc+0x249/0x340 [ 326.663279][T18087] ? stack_trace_save+0xa9/0x100 [ 326.663299][T18087] ? __pfx_warn_alloc+0x10/0x10 [ 326.663324][T18087] ? kasan_save_track+0x4f/0x80 [ 326.663342][T18087] ? kasan_save_track+0x3e/0x80 [ 326.663358][T18087] ? __kasan_kmalloc+0x93/0xb0 [ 326.663375][T18087] ? __kmalloc_cache_noprof+0x31c/0x660 [ 326.663393][T18087] ? xskq_create+0x56/0x170 [ 326.663414][T18087] ? xsk_setsockopt+0x54c/0x990 [ 326.663431][T18087] ? do_sock_setsockopt+0x17c/0x1b0 [ 326.663449][T18087] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 326.663469][T18087] ? do_syscall_64+0x14d/0xf80 [ 326.663496][T18087] __vmalloc_node_range_noprof+0x132/0x1730 [ 326.663548][T18087] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 326.663574][T18087] ? __kasan_kmalloc+0x93/0xb0 [ 326.663598][T18087] vmalloc_user_noprof+0xad/0xe0 [ 326.663618][T18087] ? xskq_create+0xbf/0x170 [ 326.663638][T18087] xskq_create+0xbf/0x170 [ 326.663657][T18087] xsk_init_queue+0x8a/0xe0 [ 326.663676][T18087] xsk_setsockopt+0x54c/0x990 [ 326.663693][T18087] ? __pfx_xsk_setsockopt+0x10/0x10 [ 326.663709][T18087] ? __pfx_aa_sk_perm+0x10/0x10 [ 326.663732][T18087] ? aa_sock_opt_perm+0xff/0x1a0 [ 326.663748][T18087] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 326.663765][T18087] ? __pfx_xsk_setsockopt+0x10/0x10 [ 326.663784][T18087] do_sock_setsockopt+0x17c/0x1b0 [ 326.663809][T18087] __x64_sys_setsockopt+0x13d/0x1b0 [ 326.663835][T18087] do_syscall_64+0x14d/0xf80 [ 326.663855][T18087] ? trace_irq_disable+0x3b/0x150 [ 326.663870][T18087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.663885][T18087] ? clear_bhb_loop+0x40/0x90 [ 326.663903][T18087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.663917][T18087] RIP: 0033:0x7f6a9099c819 [ 326.663932][T18087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.663953][T18087] RSP: 002b:00007f6a9181f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 326.663969][T18087] RAX: ffffffffffffffda RBX: 00007f6a90c16090 RCX: 00007f6a9099c819 [ 326.663979][T18087] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 326.663987][T18087] RBP: 00007f6a90a32c91 R08: 0000000000000004 R09: 0000000000000000 [ 326.663995][T18087] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.664003][T18087] R13: 00007f6a90c16128 R14: 00007f6a90c16090 R15: 00007ffc95096338 [ 326.664026][T18087] [ 326.664031][T18087] Mem-Info: [ 327.026262][T18087] active_anon:6326 inactive_anon:0 isolated_anon:0 [ 327.026262][T18087] active_file:3210 inactive_file:40044 isolated_file:0 [ 327.026262][T18087] unevictable:768 dirty:75 writeback:0 [ 327.026262][T18087] slab_reclaimable:12483 slab_unreclaimable:109480 [ 327.026262][T18087] mapped:29406 shmem:1363 pagetables:1518 [ 327.026262][T18087] sec_pagetables:0 bounce:0 [ 327.026262][T18087] kernel_misc_reclaimable:0 [ 327.026262][T18087] free:1313554 free_pcp:9872 free_cma:0 [ 327.119726][T18087] Node 0 active_anon:25104kB inactive_anon:0kB active_file:12840kB inactive_file:159968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117524kB dirty:296kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14804kB pagetables:5944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 327.155703][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.167563][T18107] netlink: 'syz.4.3313': attribute type 33 has an invalid length. [ 327.176090][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.197478][T18087] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 327.249632][T18107] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 327.260393][T18087] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 327.260459][T18087] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 327.260499][T18087] Node 0 DMA32 free:1297164kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25104kB inactive_anon:0kB active_file:12840kB inactive_file:159968kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:39460kB local_pcp:20196kB free_cma:0kB [ 327.260549][T18087] lowmem_reserve[]: 0 0 0 0 0 [ 327.260587][T18087] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 327.367956][T18107] bond2 (unregistering): Released all slaves [ 327.397816][T18087] lowmem_reserve[]: 0 0 0 0 0 [ 327.407955][T18087] Node 1 Normal free:3940092kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 327.507273][T18087] lowmem_reserve[]: 0 0 0 0 0 [ 327.512062][T18087] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 327.529269][T18087] Node 0 DMA32: 6283*4kB (UM) 4188*8kB (UM) 1651*16kB (UME) 236*32kB (UME) 350*64kB (UME) 480*128kB (UME) 360*256kB (UM) 284*512kB (UME) 190*1024kB (UM) 92*2048kB (UM) 122*4096kB (UM) = 1296700kB [ 327.563977][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.572648][T18087] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 327.575210][T18117] xt_NFQUEUE: number of total queues is 0 [ 327.611760][T18087] Node 1 Normal: 1*4kB (U) 7*8kB (UM) 8*16kB (UM) 12*32kB (UM) 9*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3940092kB [ 327.621258][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.685657][T18119] smc: net device team0 applied user defined pnetid SYZ2 [ 327.687477][T18087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.737237][T18087] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 327.746573][T18087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.797367][T18087] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 327.820968][T18087] 44613 total pagecache pages [ 327.825687][T18087] 0 pages in swap cache [ 327.849447][T18087] Free swap = 124996kB [ 327.853644][T18087] Total swap = 124996kB [ 327.854771][T18127] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3319'. [ 327.868788][T18124] syzkaller1: entered promiscuous mode [ 327.877299][T18087] 2097051 pages RAM [ 327.881130][T18087] 0 pages HighMem/MovableOnly [ 327.886028][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3319'. [ 327.907158][T18124] syzkaller1: entered allmulticast mode [ 327.937200][ T5828] Bluetooth: hci4: command tx timeout [ 327.952930][T18087] 427072 pages reserved [ 327.967088][T18087] 0 pages cma reserved [ 328.413104][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.428187][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.437938][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 328.445871][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 328.461872][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.463410][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'. [ 328.633454][T18170] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3329'. [ 328.764047][T18182] syzkaller1: entered promiscuous mode [ 328.773014][T18182] syzkaller1: entered allmulticast mode [ 329.054669][T18159] chnl_net:caif_netlink_parms(): no params data found [ 329.086509][T18203] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 329.241346][T18159] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.248773][T18159] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.256365][T18159] bridge_slave_0: entered allmulticast mode [ 329.266091][T18159] bridge_slave_0: entered promiscuous mode [ 329.278863][T18159] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.286195][T18159] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.294933][T18159] bridge_slave_1: entered allmulticast mode [ 329.306412][T18215] __nla_validate_parse: 2 callbacks suppressed [ 329.306432][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'. [ 329.319706][T18159] bridge_slave_1: entered promiscuous mode [ 329.391831][T18159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.431826][T18225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3345'. [ 329.438747][T18159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.442690][T18226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3345'. [ 329.561483][T18229] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 329.667821][T18159] team0: Port device team_slave_0 added [ 329.683980][T18159] team0: Port device team_slave_1 added [ 329.716072][T18234] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 329.797589][T18159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.805278][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.834400][T18159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.847438][T18159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.854396][T18159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.917836][T18159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.998371][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 330.133362][T18159] hsr_slave_0: entered promiscuous mode [ 330.142278][T18159] hsr_slave_1: entered promiscuous mode [ 330.149514][T18159] debugfs: 'hsr0' already exists in 'hsr' [ 330.155445][T18159] Cannot create hsr debugfs directory [ 330.177882][T18270] netlink: 'syz.0.3358': attribute type 3 has an invalid length. [ 330.235742][T18267] syzkaller0: entered promiscuous mode [ 330.244000][T18269] block nbd2: NBD_DISCONNECT [ 330.250258][T18267] syzkaller0: entered allmulticast mode [ 330.448517][T18278] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3362'. [ 330.551300][T18159] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.563511][T18159] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.581418][ T5828] Bluetooth: hci1: command tx timeout [ 330.592174][T18159] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 330.700456][T18159] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.728139][T18159] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.747601][T18293] netlink: 'syz.0.3366': attribute type 12 has an invalid length. [ 330.769429][T18159] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 330.845324][T18293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3366'. [ 330.915645][T18296] netlink: 'syz.1.3367': attribute type 10 has an invalid length. [ 330.940604][T18159] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.951124][T18159] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.963032][T18159] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 330.990587][T18296] batman_adv: batadv0: Adding interface: netdevsim0 [ 331.002543][T18296] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.030586][T18296] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 331.092426][T18159] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.108710][T18159] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.140136][T18159] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 331.189410][T18306] syzkaller0: entered promiscuous mode [ 331.195006][T18306] syzkaller0: entered allmulticast mode [ 331.206031][T18306] 0: reclassify loop, rule prio 0, protocol 800 [ 331.491943][T18159] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.527693][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.543437][T18159] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.576008][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.656734][T18159] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.669761][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.686139][T18335] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.700974][T18335] bridge_slave_0 (unregistering): left allmulticast mode [ 331.708318][T18335] bridge_slave_0 (unregistering): left promiscuous mode [ 331.715358][T18335] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.739119][T18159] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.750378][T18159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.890506][T18351] wg1 speed is unknown, defaulting to 1000 [ 331.905346][T18351] wg1 speed is unknown, defaulting to 1000 [ 331.923945][T18351] wg1 speed is unknown, defaulting to 1000 [ 331.932670][T18159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.970418][T18159] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.999404][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.006583][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.007684][T18351] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 332.026540][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.033762][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.143414][T18362] netlink: 'syz.0.3388': attribute type 11 has an invalid length. [ 332.155563][T18351] wg1 speed is unknown, defaulting to 1000 [ 332.175506][T18351] wg1 speed is unknown, defaulting to 1000 [ 332.191622][T18365] netlink: 'syz.1.3386': attribute type 1 has an invalid length. [ 332.195770][T18351] wg1 speed is unknown, defaulting to 1000 [ 332.228405][T18351] wg1 speed is unknown, defaulting to 1000 [ 332.233913][T18365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3386'. [ 332.235944][T18351] wg1 speed is unknown, defaulting to 1000 [ 332.258870][T18351] wg1 speed is unknown, defaulting to 1000 [ 332.268915][T18351] wg1 speed is unknown, defaulting to 1000 [ 332.282184][T18351] wg1 speed is unknown, defaulting to 1000 [ 332.362478][T18372] pimreg: entered allmulticast mode [ 332.553064][T18159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.658918][ T5828] Bluetooth: hci1: command tx timeout [ 332.660707][T18159] veth0_vlan: entered promiscuous mode [ 332.715771][T18159] veth1_vlan: entered promiscuous mode [ 332.752706][T18392] xt_ecn: cannot match TCP bits for non-tcp packets [ 332.760208][T18393] siw: device registration error -23 [ 332.803176][T18159] veth0_macvtap: entered promiscuous mode [ 332.829395][T18159] veth1_macvtap: entered promiscuous mode [ 333.003273][T18405] sock: sock_timestamping_bind_phc: sock not bind to device [ 333.082968][T18408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3396'. [ 333.110093][T18411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3396'. [ 333.136247][T18159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.176238][T18159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.194145][ T132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.219463][ T132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.250203][ T132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.273221][ T132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.320449][T18418] x_tables: duplicate underflow at hook 2 [ 333.422302][T18423] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3399'. [ 333.436555][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.462256][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.502456][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.514474][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.854039][T18445] netlink: 'syz.3.3408': attribute type 1 has an invalid length. [ 334.249720][T18483] netlink: 'syz.2.3418': attribute type 11 has an invalid length. [ 334.320846][T18483] __nla_validate_parse: 4 callbacks suppressed [ 334.320867][T18483] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3418'. [ 334.610686][T18510] "syz.0.3426" (18510) uses obsolete ecb(arc4) skcipher [ 334.621324][T18510] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3426'. [ 334.639225][T18510] "syz.0.3426" (18510) uses obsolete ecb(arc4) skcipher [ 334.738745][ T5828] Bluetooth: hci1: command tx timeout [ 334.825125][T18503] wg1 speed is unknown, defaulting to 1000 [ 334.836335][T18517] netlink: 'syz.3.3427': attribute type 16 has an invalid length. [ 334.862814][T18517] netlink: 'syz.3.3427': attribute type 17 has an invalid length. [ 335.024838][T18517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.249865][T18548] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3431'. [ 335.424154][T18556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3432'. [ 335.469315][T18561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3432'. [ 335.707677][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3436'. [ 335.844896][T18578] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 335.896378][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3439'. [ 335.961935][T18589] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 335.973059][T18589] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3439'. [ 336.155985][T18608] netlink: 'syz.0.3441': attribute type 6 has an invalid length. [ 336.206278][T18608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3441'. [ 336.249463][T18608] Cannot find add_set index 2 as target [ 336.373113][T18617] netlink: 'syz.1.3444': attribute type 29 has an invalid length. [ 336.396277][T18617] xt_hashlimit: size too large, truncated to 1048576 [ 336.441775][T18621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3445'. [ 336.467735][T18625] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.580899][T18625] bridge_slave_0 (unregistering): left allmulticast mode [ 336.623930][T18625] bridge_slave_0 (unregistering): left promiscuous mode [ 336.650760][T18625] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.677942][T18635] netlink: 'syz.1.3444': attribute type 32 has an invalid length. [ 336.765737][T18627] netlink: 'syz.1.3444': attribute type 29 has an invalid length. [ 336.819631][ T5828] Bluetooth: hci1: command tx timeout [ 336.992156][T18659] netlink: 'syz.4.3452': attribute type 12 has an invalid length. [ 337.013720][T18658] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 337.081950][T18667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.514181][T18696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.943502][T18723] bridge0: entered allmulticast mode [ 338.260903][T13532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.525106][T18755] xt_hashlimit: size too large, truncated to 1048576 [ 338.551205][T18759] bridge0: port 3(syz_tun) entered blocking state [ 338.572914][T18759] bridge0: port 3(syz_tun) entered disabled state [ 338.580730][T13533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.616304][T18759] syz_tun: entered allmulticast mode [ 338.668894][T18759] syz_tun: entered promiscuous mode [ 338.674828][T18759] bridge0: port 3(syz_tun) entered blocking state [ 338.681406][T18759] bridge0: port 3(syz_tun) entered forwarding state [ 338.854520][T18778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.864749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.140814][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.212611][T18811] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 339.287853][T18817] FAULT_INJECTION: forcing a failure. [ 339.287853][T18817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.332228][T18817] CPU: 0 UID: 0 PID: 18817 Comm: syz.1.3489 Not tainted syzkaller #0 PREEMPT(full) [ 339.332255][T18817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.332265][T18817] Call Trace: [ 339.332272][T18817] [ 339.332280][T18817] dump_stack_lvl+0xe8/0x150 [ 339.332309][T18817] should_fail_ex+0x412/0x560 [ 339.332340][T18817] _copy_from_user+0x2d/0xb0 [ 339.332363][T18817] ___sys_sendmsg+0x1c6/0x360 [ 339.332389][T18817] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.332443][T18817] ? __fget_files+0x2a/0x420 [ 339.332460][T18817] ? __fget_files+0x3a0/0x420 [ 339.332485][T18817] __x64_sys_sendmsg+0x1bd/0x2a0 [ 339.332510][T18817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.332553][T18817] ? __pfx_ksys_write+0x10/0x10 [ 339.332589][T18817] do_syscall_64+0x14d/0xf80 [ 339.332610][T18817] ? trace_irq_disable+0x3b/0x150 [ 339.332627][T18817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.332643][T18817] ? clear_bhb_loop+0x40/0x90 [ 339.332664][T18817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.332682][T18817] RIP: 0033:0x7f304279c819 [ 339.332699][T18817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.332714][T18817] RSP: 002b:00007f3043596028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.332734][T18817] RAX: ffffffffffffffda RBX: 00007f3042a16090 RCX: 00007f304279c819 [ 339.332746][T18817] RDX: 0000000004004000 RSI: 0000200000000780 RDI: 0000000000000004 [ 339.332757][T18817] RBP: 00007f3043596090 R08: 0000000000000000 R09: 0000000000000000 [ 339.332768][T18817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.332777][T18817] R13: 00007f3042a16128 R14: 00007f3042a16090 R15: 00007ffd4e61a828 [ 339.332806][T18817] [ 339.731929][T18829] __nla_validate_parse: 15 callbacks suppressed [ 339.731950][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3496'. [ 339.844556][T18831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3497'. [ 339.959576][T18838] xt_policy: too many policy elements [ 339.961148][T18842] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3502'. [ 340.209907][T13529] net_ratelimit: 2 callbacks suppressed [ 340.209926][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.346289][T18876] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004 [ 340.531560][T18888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.732552][T18904] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3520'. [ 340.820154][T13533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.932937][T18918] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3524'. [ 340.933216][T18915] delete_channel: no stack [ 341.219120][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.311880][T18945] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3534'. [ 341.457350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.494240][T18955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3537'. [ 341.529169][T18958] netlink: 'syz.2.3540': attribute type 8 has an invalid length. [ 341.566888][T18955] netlink: 'syz.1.3537': attribute type 1 has an invalid length. [ 341.574802][T18955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.688097][T18966] FAULT_INJECTION: forcing a failure. [ 341.688097][T18966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.707629][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 341.750668][T18966] CPU: 1 UID: 0 PID: 18966 Comm: syz.2.3542 Not tainted syzkaller #0 PREEMPT(full) [ 341.750696][T18966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 341.750707][T18966] Call Trace: [ 341.750715][T18966] [ 341.750723][T18966] dump_stack_lvl+0xe8/0x150 [ 341.750757][T18966] should_fail_ex+0x412/0x560 [ 341.750789][T18966] _copy_from_iter+0x1d3/0x1670 [ 341.750812][T18966] ? rcu_is_watching+0x15/0xb0 [ 341.750842][T18966] ? __pfx__copy_from_iter+0x10/0x10 [ 341.750869][T18966] ? netlink_sendmsg+0x650/0xb40 [ 341.750888][T18966] ? skb_put+0x11b/0x210 [ 341.750913][T18966] netlink_sendmsg+0x6c0/0xb40 [ 341.750943][T18966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.750967][T18966] ? aa_sock_msg_perm+0xf1/0x1b0 [ 341.750995][T18966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 341.751020][T18966] ____sys_sendmsg+0x972/0x9f0 [ 341.751053][T18966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.751085][T18966] ? import_iovec+0x73/0xa0 [ 341.751110][T18966] ___sys_sendmsg+0x2a5/0x360 [ 341.751139][T18966] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.751197][T18966] ? __fget_files+0x2a/0x420 [ 341.751213][T18966] ? __fget_files+0x3a0/0x420 [ 341.751240][T18966] __x64_sys_sendmsg+0x1bd/0x2a0 [ 341.751267][T18966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.751300][T18966] ? __pfx_ksys_write+0x10/0x10 [ 341.751331][T18966] do_syscall_64+0x14d/0xf80 [ 341.751353][T18966] ? trace_irq_disable+0x3b/0x150 [ 341.751365][T18966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.751379][T18966] ? clear_bhb_loop+0x40/0x90 [ 341.751396][T18966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.751413][T18966] RIP: 0033:0x7fbd0499c819 [ 341.751431][T18966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.751447][T18966] RSP: 002b:00007fbd02bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.751467][T18966] RAX: ffffffffffffffda RBX: 00007fbd04c16090 RCX: 00007fbd0499c819 [ 341.751480][T18966] RDX: 0000000004004000 RSI: 0000200000000780 RDI: 0000000000000004 [ 341.751492][T18966] RBP: 00007fbd02bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 341.751503][T18966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.751514][T18966] R13: 00007fbd04c16128 R14: 00007fbd04c16090 R15: 00007ffd79edf688 [ 341.751544][T18966] [ 342.026251][T18973] netlink: 'syz.3.3544': attribute type 13 has an invalid length. [ 342.059787][T18973] gretap0: refused to change device tx_queue_len [ 342.066584][T18973] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 342.261038][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.305273][T18988] syzkaller0: entered promiscuous mode [ 342.311455][T18988] syzkaller0: entered allmulticast mode [ 342.659446][T13533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.665102][T19012] wg1 speed is unknown, defaulting to 1000 [ 342.910188][T19026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3560'. [ 343.225519][T19026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3560'. [ 343.230159][T19052] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3561'. [ 343.273309][T19026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.560547][T19026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.642020][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.893598][T19058] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.045526][T19058] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.219544][T19058] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.321541][T19058] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.512619][ T127] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.522583][T19095] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 344.583232][ T132] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.634566][ T132] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.655886][ T132] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.745325][T19103] syzkaller0: entered promiscuous mode [ 344.758575][T19103] syzkaller0: entered allmulticast mode [ 345.173858][T19134] __nla_validate_parse: 3 callbacks suppressed [ 345.173879][T19134] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3575'. [ 345.256228][T19125] net_ratelimit: 1 callbacks suppressed [ 345.256249][T19125] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 345.421808][T19145] pim6reg: entered allmulticast mode [ 345.588960][T19163] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3584'. [ 345.638696][T19163] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3584'. [ 345.648925][T19163] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3584'. [ 345.698152][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.706675][T13537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.817904][T19180] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3589'. [ 346.070165][T19195] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3594'. [ 346.669819][T19232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3602'. [ 346.742016][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.886572][T19243] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3605'. [ 346.998539][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3606'. [ 347.054409][T19260] x_tables: duplicate underflow at hook 1 [ 347.055125][T19254] can: request_module (can-proto-4) failed. [ 347.082199][T19260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.092132][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.535079][T19293] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 347.652070][T19301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3622'. [ 348.501187][T19354] netlink: 'syz.1.3637': attribute type 1 has an invalid length. [ 348.523352][T19354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.656601][T19362] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.995592][T19383] erspan0: entered promiscuous mode [ 349.015786][T19383] vlan2: entered promiscuous mode [ 349.620823][T19403] netlink: 'syz.0.3652': attribute type 8 has an invalid length. [ 349.652927][T19405] bridge2: entered promiscuous mode [ 349.658399][T19405] bridge2: entered allmulticast mode [ 349.765597][T19412] netlink: 'syz.1.3654': attribute type 4 has an invalid length. [ 349.767757][T19411] netlink: 'syz.1.3654': attribute type 4 has an invalid length. [ 349.774281][T19412] netlink: 'syz.1.3654': attribute type 1 has an invalid length. [ 349.782849][T19411] netlink: 'syz.1.3654': attribute type 1 has an invalid length. [ 351.756890][T19371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.934053][T19417] __nla_validate_parse: 8 callbacks suppressed [ 351.934074][T19417] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3656'. [ 352.370737][T19420] gre1: entered promiscuous mode [ 352.375837][T19420] gre1: entered allmulticast mode [ 352.462588][T19430] syzkaller0: entered promiscuous mode [ 352.480101][T19430] syzkaller0: entered allmulticast mode [ 352.626523][T19440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3662'. [ 352.635968][T19436] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.666832][T19436] bridge_slave_0 (unregistering): left allmulticast mode [ 352.677435][T19436] bridge_slave_0 (unregistering): left promiscuous mode [ 352.727139][T19436] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.815735][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3667'. [ 352.849568][T19475] netlink: 'syz.4.3667': attribute type 3 has an invalid length. [ 352.941722][T19482] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3670'. [ 352.980271][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 353.090024][T19484] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3670'. [ 353.284169][T19502] syzkaller0: entered promiscuous mode [ 353.290458][T19502] syzkaller0: entered allmulticast mode [ 353.531768][T19515] netlink: 'syz.1.3680': attribute type 8 has an invalid length. [ 353.540006][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'. [ 353.552779][T19515] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.568325][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3682'. [ 353.694077][T19519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3683'. [ 353.910505][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3686'. [ 354.055521][T19537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3689'. [ 354.264403][T19543] syzkaller0: entered promiscuous mode [ 354.274118][T19543] syzkaller0: entered allmulticast mode [ 354.282067][T19540] wg1 speed is unknown, defaulting to 1000 [ 354.561247][T19556] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 354.686611][T19558] netlink: 'syz.2.3696': attribute type 21 has an invalid length. [ 354.715332][T13529] IPVS: starting estimator thread 0... [ 354.818533][T19592] IPVS: using max 33 ests per chain, 79200 per kthread [ 355.093486][T19629] vlan2: entered allmulticast mode [ 355.550714][T19647] syzkaller0: entered promiscuous mode [ 355.556232][T19647] syzkaller0: entered allmulticast mode [ 356.209527][T19660] sock: sock_timestamping_bind_phc: sock not bind to device [ 357.599878][T19561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.752171][T19667] __nla_validate_parse: 6 callbacks suppressed [ 357.752193][T19667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3711'. [ 357.799979][T19667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3711'. [ 357.811135][T19667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3711'. [ 357.864103][T19678] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3712'. [ 358.150705][T19694] bond2: option miimon: invalid value (18446744073709551585) [ 358.162767][T19694] bond2: option miimon: allowed values 0 - 2147483647 [ 358.172458][T19694] bond2 (unregistering): Released all slaves [ 358.189565][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3722'. [ 358.269228][T19700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.365166][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 358.435522][T19718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3726'. [ 358.484828][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3727'. [ 358.519346][T19722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3728'. [ 358.700989][T19733] netlink: 'syz.1.3732': attribute type 1 has an invalid length. [ 358.769376][T19733] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3732'. [ 358.918318][T19747] netlink: 'syz.1.3737': attribute type 62 has an invalid length. [ 358.961698][T19751] bridge0: port 3(syz_tun) entered blocking state [ 358.973358][T19751] bridge0: port 3(syz_tun) entered disabled state [ 358.988375][T19751] syz_tun: entered promiscuous mode [ 358.994121][T19751] bridge0: port 3(syz_tun) entered blocking state [ 359.000764][T19751] bridge0: port 3(syz_tun) entered forwarding state [ 359.328085][T19773] sctp: [Deprecated]: syz.1.3747 (pid 19773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.328085][T19773] Use struct sctp_sack_info instead [ 359.335917][T19771] veth5: entered promiscuous mode [ 359.390348][T19771] veth5: entered allmulticast mode [ 359.421317][T19782] tipc: Started in network mode [ 359.437338][T19782] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 359.454844][T19787] netlink: 'syz.1.3751': attribute type 21 has an invalid length. [ 359.464960][T19782] tipc: Enabling of bearer rejected, failed to enable media [ 359.498399][T19783] tipc: Enabling of bearer rejected, failed to enable media [ 359.826403][T19809] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 359.938280][T19815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.945572][T19815] IPv6: NLM_F_CREATE should be set when creating new route [ 359.971401][T19813] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 359.985368][T19813] CPU: 1 UID: 0 PID: 19813 Comm: syz.4.3760 Not tainted syzkaller #0 PREEMPT(full) [ 359.985401][T19813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 359.985413][T19813] Call Trace: [ 359.985420][T19813] [ 359.985428][T19813] dump_stack_lvl+0xe8/0x150 [ 359.985460][T19813] sysfs_warn_dup+0x8e/0xa0 [ 359.985494][T19813] sysfs_do_create_link_sd+0xc0/0x110 [ 359.985521][T19813] device_add_class_symlinks+0x1cf/0x240 [ 359.985551][T19813] device_add+0x475/0xb70 [ 359.985579][T19813] wiphy_register+0x1d73/0x2d50 [ 359.985619][T19813] ? __pfx_wiphy_register+0x10/0x10 [ 359.985640][T19813] ? __pfx_netdev_run_todo+0x10/0x10 [ 359.985665][T19813] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 359.985700][T19813] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 359.985730][T19813] ieee80211_register_hw+0x3562/0x4200 [ 359.985771][T19813] ? ieee80211_register_hw+0x14b1/0x4200 [ 359.985808][T19813] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 359.985851][T19813] ? __hrtimer_setup+0x181/0x200 [ 359.985875][T19813] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 359.985897][T19813] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 359.985954][T19813] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 359.985977][T19813] ? kstrndup+0xbf/0x160 [ 359.986010][T19813] hwsim_new_radio_nl+0xf35/0x1bd0 [ 359.986057][T19813] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 359.986092][T19813] ? rcu_is_watching+0x15/0xb0 [ 359.986117][T19813] ? trace_kmalloc+0x2a/0x110 [ 359.986144][T19813] ? __nla_parse+0x40/0x60 [ 359.986168][T19813] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 359.986200][T19813] genl_family_rcv_msg_doit+0x22a/0x330 [ 359.986232][T19813] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 359.986268][T19813] ? bpf_lsm_capable+0x9/0x20 [ 359.986290][T19813] ? security_capable+0x7e/0x2c0 [ 359.986323][T19813] genl_rcv_msg+0x61c/0x7a0 [ 359.986354][T19813] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.986381][T19813] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 359.986405][T19813] ? __lock_acquire+0x6b5/0x2cf0 [ 359.986441][T19813] netlink_rcv_skb+0x232/0x4b0 [ 359.986462][T19813] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.986494][T19813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.986534][T19813] ? down_read+0x272/0x2e0 [ 359.986549][T19813] ? genl_rcv+0xd/0x40 [ 359.986574][T19813] genl_rcv+0x28/0x40 [ 359.986596][T19813] netlink_unicast+0x80f/0x9b0 [ 359.986624][T19813] ? __pfx_netlink_unicast+0x10/0x10 [ 359.986641][T19813] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 359.986665][T19813] ? netlink_sendmsg+0x650/0xb40 [ 359.986683][T19813] ? skb_put+0x11b/0x210 [ 359.986710][T19813] netlink_sendmsg+0x813/0xb40 [ 359.986741][T19813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.986765][T19813] ? aa_sock_msg_perm+0xf1/0x1b0 [ 359.986793][T19813] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.986818][T19813] ____sys_sendmsg+0x972/0x9f0 [ 359.986840][T19813] ? futex_unqueue+0x211/0x240 [ 359.986871][T19813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.986905][T19813] ? import_iovec+0x73/0xa0 [ 359.986930][T19813] ___sys_sendmsg+0x2a5/0x360 [ 359.986964][T19813] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.986992][T19813] ? futex_wait+0x29a/0x380 [ 359.987038][T19813] ? __fget_files+0x2a/0x420 [ 359.987055][T19813] ? __fget_files+0x3a0/0x420 [ 359.987081][T19813] __x64_sys_sendmsg+0x1bd/0x2a0 [ 359.987106][T19813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.987136][T19813] ? rcu_is_watching+0x15/0xb0 [ 359.987171][T19813] do_syscall_64+0x14d/0xf80 [ 359.987194][T19813] ? trace_irq_disable+0x3b/0x150 [ 359.987207][T19813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.987222][T19813] ? clear_bhb_loop+0x40/0x90 [ 359.987245][T19813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.987263][T19813] RIP: 0033:0x7f2763f9c819 [ 359.987280][T19813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.987292][T19813] RSP: 002b:00007f27621b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.987311][T19813] RAX: ffffffffffffffda RBX: 00007f2764216180 RCX: 00007f2763f9c819 [ 359.987324][T19813] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 000000000000000a [ 359.987336][T19813] RBP: 00007f2764032c91 R08: 0000000000000000 R09: 0000000000000000 [ 359.987346][T19813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.987357][T19813] R13: 00007f2764216218 R14: 00007f2764216180 R15: 00007ffeb047d528 [ 359.987388][T19813] [ 360.483395][T19815] netlink: 'syz.0.3762': attribute type 32 has an invalid length. [ 360.555055][T19815] bond2: option coupled_control: invalid value (192) [ 360.570600][T19815] bond2 (unregistering): Released all slaves [ 360.622986][T19820] tipc: Started in network mode [ 360.630219][T19820] tipc: Node identity ac14140f, cluster identity 4711 [ 360.637540][T19820] tipc: New replicast peer: 255.255.255.255 [ 360.645848][T19820] tipc: Enabled bearer , priority 10 [ 360.664936][ T5832] Bluetooth: hci1: command 0x0405 tx timeout [ 360.873826][T19843] netlink: 'syz.4.3773': attribute type 12 has an invalid length. [ 360.882505][T19843] netlink: 'syz.4.3773': attribute type 29 has an invalid length. [ 360.891255][T19843] netlink: 'syz.4.3773': attribute type 2 has an invalid length. [ 361.053445][T19857] macvtap1: entered promiscuous mode [ 361.080179][T19862] ip6t_srh: unknown srh invflags 4000 [ 361.091089][T19857] macvtap1: entered allmulticast mode [ 361.109681][T19857] veth1_vlan: entered allmulticast mode [ 361.139598][T19862] macvtap2: entered promiscuous mode [ 361.144946][T19862] macvtap2: entered allmulticast mode [ 361.173273][T19867] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 361.277517][T19872] bridge3: entered promiscuous mode [ 361.282970][T19872] bridge3: entered allmulticast mode [ 361.444764][T19887] veth1_to_bond: entered allmulticast mode [ 361.455413][T19887] veth1_to_bond: left allmulticast mode [ 361.659475][ T9] tipc: Node number set to 2886997007 [ 363.828901][T19846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.013957][T19906] veth5: entered allmulticast mode [ 364.078750][T19915] __nla_validate_parse: 12 callbacks suppressed [ 364.078772][T19915] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3790'. [ 364.371821][T19943] netlink: 'syz.1.3799': attribute type 8 has an invalid length. [ 364.380449][T19945] netlink: 'syz.2.3800': attribute type 1 has an invalid length. [ 364.394267][T19943] sch_fq: defrate 0 ignored. [ 364.406468][T19943] netlink: 'syz.1.3799': attribute type 1 has an invalid length. [ 364.481402][T19943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.563861][T19952] vlan2: entered allmulticast mode [ 364.596902][T19952] bond2: entered allmulticast mode [ 364.649558][T19943] bond2: (slave geneve2): making interface the new active one [ 364.658596][T19943] geneve2: entered allmulticast mode [ 364.667578][T19943] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 364.819316][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3808'. [ 364.911651][T19975] hsr_slave_0 (unregistering): left promiscuous mode [ 365.124419][T19992] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3812'. [ 365.152537][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3812'. [ 365.329310][T20006] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3814'. [ 365.388732][T20006] netlink: 'syz.0.3814': attribute type 11 has an invalid length. [ 365.406895][T20006] netlink: 'syz.0.3814': attribute type 4 has an invalid length. [ 365.416619][T20006] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.3814'. [ 365.635258][T20025] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3820'. [ 365.901417][T20045] openvswitch: netlink: EtherType 50a is less than min 600 [ 365.926038][T20045] openvswitch: netlink: EtherType 50a is less than min 600 [ 366.171068][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3829'. [ 366.237043][T20063] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3830'. [ 366.343724][T20065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.579214][T20086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3836'. [ 366.972956][T20110] tipc: New replicast peer: 255.255.255.255 [ 367.000682][T20110] tipc: Enabled bearer , priority 10 [ 367.178960][T20137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.215895][T20142] bridge0: entered promiscuous mode [ 367.222786][T20142] macsec1: entered promiscuous mode [ 367.228874][T20142] macsec1: entered allmulticast mode [ 367.237557][T20142] bridge0: entered allmulticast mode [ 367.244267][T20142] bridge0: port 1(macsec1) entered blocking state [ 367.292340][T20142] bridge0: port 1(macsec1) entered disabled state [ 367.378446][T20142] bridge0: left allmulticast mode [ 367.393924][T20142] bridge0: left promiscuous mode [ 367.430107][T20154] unsupported nlmsg_type 40 [ 367.709668][T20175] xt_hashlimit: size too large, truncated to 1048576 [ 367.797626][T13533] IPVS: starting estimator thread 0... [ 367.891560][T20191] xt_hashlimit: size too large, truncated to 1048576 [ 367.898313][T20185] IPVS: using max 36 ests per chain, 86400 per kthread [ 367.916419][T20190] geneve2: entered promiscuous mode [ 367.954393][T19599] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 59047 - 0 [ 367.970125][T19599] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 59047 - 0 [ 368.038220][T19599] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 59047 - 0 [ 368.074795][T19599] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 59047 - 0 [ 368.330150][T20195] syzkaller0: entered promiscuous mode [ 368.354422][T20195] syzkaller0: entered allmulticast mode [ 368.421969][T13533] tipc: Node number set to 4269801504 [ 368.430171][T20223] : renamed from vxcan1 (while UP) [ 370.215118][T20253] 8021q: VLANs not supported on lo [ 370.342301][T20264] __nla_validate_parse: 9 callbacks suppressed [ 370.342319][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3883'. [ 370.365445][T20265] netlink: 'syz.3.3883': attribute type 10 has an invalid length. [ 370.399753][T20265] veth0_vlan: left promiscuous mode [ 370.406045][T20265] veth0_vlan: entered promiscuous mode [ 370.414853][T20265] team0: Device veth0_vlan failed to register rx_handler [ 370.617954][T20287] netlink: 'syz.3.3890': attribute type 21 has an invalid length. [ 370.618097][T20289] sctp: [Deprecated]: syz.0.3887 (pid 20289) Use of int in max_burst socket option deprecated. [ 370.618097][T20289] Use struct sctp_assoc_value instead [ 370.636295][T20290] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3891'. [ 370.966086][T20308] x_tables: duplicate underflow at hook 2 [ 371.317721][T20332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3904'. [ 371.400379][T20339] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3907'. [ 371.440210][T20338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.759248][T20364] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3915'. [ 372.002403][T20385] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3921'. [ 372.166324][T20401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.231658][T20404] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3927'. [ 372.425231][T20419] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3929'. [ 372.478341][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3931'. [ 372.891402][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3941'. [ 373.110819][T20473] syzkaller1: entered promiscuous mode [ 373.117442][T20473] syzkaller1: entered allmulticast mode [ 373.797612][T20512] openvswitch: netlink: Message has -2 unknown bytes. [ 373.853270][T20514] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.161929][T20544] ip6tnl2: entered allmulticast mode [ 374.385791][T20560] IPv6: sit1: Disabled Multicast RS [ 374.483915][T20564] syzkaller0: entered promiscuous mode [ 374.497053][T20564] syzkaller0: entered allmulticast mode [ 374.760981][ T5193] udevd[5193]: worker [14428] /devices/virtual/block/nbd1 is taking a long time [ 374.892955][T20587] netlink: 'syz.3.3986': attribute type 13 has an invalid length. [ 374.919315][T20587] gretap0: refused to change device tx_queue_len [ 374.978147][T20587] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 375.012866][T20592] ip6tnl1: entered allmulticast mode [ 375.066088][T20595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.242695][T20603] delete_channel: no stack [ 375.518367][T20626] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 375.538967][T20614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.561008][T20619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.651222][T20629] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 375.655221][T20635] __nla_validate_parse: 44 callbacks suppressed [ 375.655271][T20635] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3999'. [ 375.682459][T20630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3998'. [ 375.766594][T20640] netlink: 'syz.4.4002': attribute type 1 has an invalid length. [ 375.781825][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4002'. [ 375.809572][T20644] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4003'. [ 375.869606][T20636] nbd2: detected capacity change from 0 to 63 [ 375.906591][T20649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4004'. [ 375.963971][ T5828] block nbd2: Receive control failed (result -104) [ 375.967602][ T5832] block nbd2: Receive control failed (result -32) [ 376.279754][T20673] netlink: 'syz.4.4011': attribute type 1 has an invalid length. [ 376.292607][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4011'. [ 376.375472][T20680] x_tables: unsorted underflow at hook 4 [ 376.445582][T20685] xt_hashlimit: size too large, truncated to 1048576 [ 376.458952][T20688] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.4016'. [ 376.599827][T20679] Cannot find del_set index 0 as target [ 376.603791][T20696] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.4018'. [ 376.653793][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4018'. [ 376.706601][T20703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4020'. [ 376.789424][T20706] x_tables: duplicate underflow at hook 1 [ 377.215396][T20739] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 377.333651][T20741] openvswitch: netlink: Flow actions attr not present in new flow. [ 377.713510][T20760] vlan3: entered allmulticast mode [ 377.720281][T20760] bridge4: entered allmulticast mode [ 377.746247][T20760] bridge4: port 1(erspan0) entered blocking state [ 377.774459][T20760] bridge4: port 1(erspan0) entered disabled state [ 377.798500][T20760] erspan0: entered allmulticast mode [ 377.821835][T20760] erspan0: entered promiscuous mode [ 377.831073][T20760] bridge4: port 1(erspan0) entered blocking state [ 377.837706][T20760] bridge4: port 1(erspan0) entered forwarding state [ 377.909147][T20783] netlink: 'syz.4.4048': attribute type 10 has an invalid length. [ 377.925469][T20783] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.988143][T20783] bridge_slave_1: left allmulticast mode [ 377.993836][T20783] bridge_slave_1: left promiscuous mode [ 378.037911][T20783] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.076848][T20783] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 378.358177][T20811] tipc: New replicast peer: 255.255.255.255 [ 378.379255][T20811] tipc: Enabled bearer , priority 10 [ 378.402064][T20811] tipc: Disabling bearer [ 378.526482][T20824] netlink: 'syz.0.4063': attribute type 1 has an invalid length. [ 378.539659][T20827] netlink: 'syz.2.4061': attribute type 2 has an invalid length. [ 378.608255][T20823] netlink: 'syz.0.4063': attribute type 1 has an invalid length. [ 378.657826][T20835] block nbd3: Unsupported socket: should be TCP or UNIX. [ 378.873772][T20850] openvswitch: netlink: IP tunnel TTL not specified. [ 378.877345][T20854] netlink: zone id is out of range [ 378.934473][T20854] netlink: zone id is out of range [ 378.944816][T20854] netlink: zone id is out of range [ 378.964190][T20854] netlink: zone id is out of range [ 378.978327][T20854] netlink: zone id is out of range [ 378.993724][T20854] netlink: zone id is out of range [ 379.003152][T20854] netlink: zone id is out of range [ 379.412000][T20883] veth0: entered promiscuous mode [ 379.417953][T20883] veth0: entered allmulticast mode [ 379.425760][T20883] netlink: 'syz.3.4081': attribute type 3 has an invalid length. [ 379.434194][T20883] netlink: 'syz.3.4081': attribute type 2 has an invalid length. [ 379.746609][T20902] netlink: 'syz.4.4086': attribute type 2 has an invalid length. [ 379.761650][T20902] netlink: 'syz.4.4086': attribute type 2 has an invalid length. [ 379.899007][T20907] Cannot find add_set index 0 as target [ 380.021323][T20918] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 380.061508][T20924] sctp: [Deprecated]: syz.3.4095 (pid 20924) Use of int in maxseg socket option. [ 380.061508][T20924] Use struct sctp_assoc_value instead [ 380.077874][T20918] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 380.085297][T20918] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 380.140187][T20918] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 380.197299][T20918] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 380.235168][T20918] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 380.285115][T20918] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 380.303836][T20918] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 380.357645][T20918] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 380.382587][T20918] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 380.521920][T20951] syzkaller0: entered promiscuous mode [ 380.528978][T20951] syzkaller0: entered allmulticast mode [ 380.730270][T20968] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 382.612133][T21000] x_tables: duplicate underflow at hook 3 [ 382.752370][T21014] net_ratelimit: 1741 callbacks suppressed [ 382.752392][T21014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.789629][T21011] __nla_validate_parse: 149 callbacks suppressed [ 382.789649][T21011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4117'. [ 382.876389][T21015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4117'. [ 382.982728][T21027] netlink: 'syz.3.4120': attribute type 1 has an invalid length. [ 383.134037][T21027] bond1: (slave vxcan2): The slave device specified does not support setting the MAC address [ 383.139895][T21043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4120'. [ 383.149902][T21027] bond1: (slave vxcan2): Error -95 calling set_mac_address [ 383.210028][T21047] Cannot find add_set index 0 as target [ 383.221271][T21032] tunl0: entered promiscuous mode [ 383.242452][T21032] netlink: 'syz.4.4121': attribute type 3 has an invalid length. [ 383.280765][T21032] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4121'. [ 383.303392][T21054] netlink: 'syz.0.4125': attribute type 1 has an invalid length. [ 383.315675][T21054] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4125'. [ 383.351654][T21043] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 383.371024][T21045] macvlan2: entered promiscuous mode [ 383.376752][T21045] macvlan2: entered allmulticast mode [ 383.384649][T21045] bond1: entered promiscuous mode [ 383.399332][T21045] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 383.409278][T21045] bond1: left promiscuous mode [ 383.666688][T21073] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.4128'. [ 383.667057][T21072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4129'. [ 383.927154][T21089] netlink: 'syz.0.4135': attribute type 4 has an invalid length. [ 383.940083][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4134'. [ 383.962194][T21091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4134'. [ 383.997008][T21099] netlink: 'syz.0.4135': attribute type 4 has an invalid length. [ 384.319248][T21117] syzkaller1: entered promiscuous mode [ 384.350325][T21117] syzkaller1: entered allmulticast mode [ 384.760121][T21148] ip6t_srh: unknown srh match flags 5F28 [ 385.290046][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4159'. [ 385.329736][T21202] netlink: 'syz.1.4155': attribute type 105 has an invalid length. [ 385.342666][T13533] IPVS: starting estimator thread 0... [ 385.438276][T21204] IPVS: using max 31 ests per chain, 74400 per kthread [ 385.505026][T21213] netlink: 'syz.2.4165': attribute type 23 has an invalid length. [ 385.559285][T21215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.643036][T21218] veth0: entered promiscuous mode [ 385.662762][T21217] veth0: left promiscuous mode [ 385.770563][T21232] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 385.860848][T21240] netlink: 'syz.4.4174': attribute type 1 has an invalid length. [ 385.883006][T21233] wg1 speed is unknown, defaulting to 1000 [ 386.028218][T21248] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 386.152789][T21255] Cannot find add_set index 0 as target [ 386.360405][T21255] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 386.382234][T21255] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 386.395129][T21255] team0: Failed to send options change via netlink (err -105) [ 386.414014][T21255] team0: Port device batadv1 added [ 386.733877][T21282] netlink: 'syz.1.4182': attribute type 4 has an invalid length. [ 386.761045][T21287] openvswitch: netlink: Flow key attr not present in new flow. [ 386.781632][T21284] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.830815][T21291] netlink: 'syz.0.4188': attribute type 10 has an invalid length. [ 386.893095][T21291] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 387.002516][T21304] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 387.015419][T21304] bond2 (unregistering): Released all slaves [ 387.042032][T21307] openvswitch: netlink: IP tunnel dst address not specified [ 389.849616][T21295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.860634][T21302] netlink: 'syz.1.4191': attribute type 1 has an invalid length. [ 390.005142][T21354] __nla_validate_parse: 14 callbacks suppressed [ 390.005162][T21354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4205'. [ 390.058199][T21353] delete_channel: no stack [ 390.117896][T21358] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 390.130772][T21358] bond2 (unregistering): Released all slaves [ 390.139502][T21366] netlink: 'syz.3.4209': attribute type 2 has an invalid length. [ 390.152414][T21366] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4209'. [ 390.165519][T21366] netlink: 'syz.3.4209': attribute type 29 has an invalid length. [ 390.187540][T21362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4207'. [ 390.240833][T21370] netlink: 'syz.3.4209': attribute type 29 has an invalid length. [ 390.252155][T21366] netlink: 'syz.3.4209': attribute type 29 has an invalid length. [ 390.299162][T21366] netlink: 'syz.3.4209': attribute type 29 has an invalid length. [ 390.319753][T21366] netlink: 'syz.3.4209': attribute type 29 has an invalid length. [ 390.320469][T21374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'. [ 390.340367][T21366] netlink: 'syz.3.4209': attribute type 29 has an invalid length. [ 390.359889][T21366] netlink: 'syz.3.4209': attribute type 29 has an invalid length. [ 390.450715][T21379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4213'. [ 390.472252][T21381] netlink: 'syz.4.4214': attribute type 1 has an invalid length. [ 390.497224][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4214'. [ 390.523903][T21381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4214'. [ 390.530817][T21385] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4216'. [ 390.550510][T21383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4215'. [ 390.648409][T21393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4217'. [ 390.681109][T21388] bond2: option resend_igmp: invalid value (32767) [ 390.688918][T21388] bond2: option resend_igmp: allowed values 0 - 255 [ 390.705973][T21388] bond2 (unregistering): Released all slaves [ 391.114653][T21409] syzkaller0: entered promiscuous mode [ 391.120342][T21409] syzkaller0: entered allmulticast mode [ 391.141287][T21416] syzkaller1: entered promiscuous mode [ 391.149495][T21416] syzkaller1: entered allmulticast mode [ 393.168402][T21434] veth1_vlan (unregistering): left allmulticast mode [ 393.466360][T21447] SET target dimension over the limit! [ 393.970768][T21474] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 394.199179][T21487] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 394.208423][T21487] bond1: option packets_per_slave: allowed values 0 - 65535 [ 394.217761][T21487] bond1 (unregistering): Released all slaves [ 394.329651][T21493] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 394.493197][T21490] wg1 speed is unknown, defaulting to 1000 [ 394.539353][T21497] erspan0: left allmulticast mode [ 394.544456][T21497] erspan0: left promiscuous mode [ 394.576607][T21497] bridge4: port 1(erspan0) entered disabled state [ 394.674224][T21497] bridge_slave_1: left allmulticast mode [ 394.700312][T21497] bridge_slave_1: left promiscuous mode [ 394.716465][T21497] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.241160][T21518] Cannot find add_set index 3 as target [ 395.348396][T21497] bond0: (slave bond_slave_0): Releasing backup interface [ 395.369021][T21497] bond0: (slave bond_slave_1): Releasing backup interface [ 395.406989][T21497] team0: Port device team_slave_0 removed [ 395.435756][T21497] team0: Port device team_slave_1 removed [ 395.449956][T21497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.459436][T21497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.472865][T21497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.481726][T21497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.502189][T21497] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.543817][T21501] veth5: entered allmulticast mode [ 395.565756][T21515] __nla_validate_parse: 5 callbacks suppressed [ 395.565776][T21515] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4253'. [ 395.972853][T21544] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4260'. [ 396.020390][T21544] validate_nla: 2 callbacks suppressed [ 396.020411][T21544] netlink: 'syz.2.4260': attribute type 1 has an invalid length. [ 396.076284][T21555] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4260'. [ 396.149152][T21544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.389607][T21568] netlink: 'syz.4.4264': attribute type 1 has an invalid length. [ 396.538927][T21568] 8021q: adding VLAN 0 to HW filter on device bond3 [ 396.575116][T21587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4266'. [ 396.600932][T21568] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4264'. [ 396.653276][T21574] bond3: (slave veth3): Enslaving as an active interface with a down link [ 396.759726][T21576] netlink: 'syz.2.4267': attribute type 10 has an invalid length. [ 396.899983][T21609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4274'. [ 397.114566][T21616] bridge0: port 1(ipvlan2) entered blocking state [ 397.132648][T21616] bridge0: port 1(ipvlan2) entered disabled state [ 397.142889][T21616] ipvlan2: entered allmulticast mode [ 397.149400][T21616] bridge0: entered allmulticast mode [ 397.151815][T21625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4276'. [ 397.157960][T21616] ipvlan2: left allmulticast mode [ 397.169498][T21616] bridge0: left allmulticast mode [ 397.215254][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4280'. [ 397.325892][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4282'. [ 397.975388][T21657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.378221][T21628] team0: Port device team_slave_0 removed [ 398.411179][T19597] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.430537][T21659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4285'. [ 398.440994][T19597] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.450794][T19597] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.472067][T19597] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.681326][T21676] netlink: 'syz.0.4291': attribute type 1 has an invalid length. [ 398.953280][T21691] netlink: 'syz.3.4296': attribute type 10 has an invalid length. [ 399.001513][T21691] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.034891][T21691] bridge_slave_1: left allmulticast mode [ 399.040773][T21699] TCP: TCP_TX_DELAY enabled [ 399.046100][T21691] bridge_slave_1: left promiscuous mode [ 399.052499][T21691] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.113387][T21691] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 399.126100][T21704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.448547][T21727] syzkaller0: entered allmulticast mode [ 399.611830][T21739] : entered promiscuous mode [ 399.672149][T21744] netlink: 'syz.4.4315': attribute type 10 has an invalid length. [ 400.020535][T21763] netlink: 'syz.1.4318': attribute type 1 has an invalid length. [ 400.190453][T21783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.295100][T21791] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 400.451966][T21795] vlan2: entered allmulticast mode [ 400.954319][T21814] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 401.489424][T21855] xt_TCPMSS: Only works on TCP SYN packets [ 401.570363][T21858] syzkaller0: entered promiscuous mode [ 401.590385][T21858] 0: reclassify loop, rule prio 0, protocol 800 [ 401.733844][T21878] __nla_validate_parse: 19 callbacks suppressed [ 401.733862][T21878] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4360'. [ 401.760695][T21881] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 401.797648][T21878] netlink: 'syz.2.4360': attribute type 9 has an invalid length. [ 401.883147][T21890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4363'. [ 402.028840][T21897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4363'. [ 402.067638][T21897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4363'. [ 402.112638][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.112784][T21897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4363'. [ 402.148430][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.173210][T21897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4363'. [ 402.233794][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.283298][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.433436][T21911] netlink: 'syz.0.4369': attribute type 1 has an invalid length. [ 402.550370][T21911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4369'. [ 402.622038][T21918] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 402.699256][T19595] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 402.702510][T21911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.823771][T19599] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 403.072888][T21955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4380'. [ 403.563239][T21990] netlink: 'syz.3.4388': attribute type 1 has an invalid length. [ 403.568097][T21992] openvswitch: netlink: Flow actions attr not present in new flow. [ 403.599343][T21990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.654419][T21990] gtp1: entered promiscuous mode [ 403.670886][T21990] gtp1: entered allmulticast mode [ 403.769211][T22001] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4394'. [ 403.807696][T21997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4392'. [ 403.817570][T22009] syz_tun: left allmulticast mode [ 403.822709][T22009] syz_tun: left promiscuous mode [ 403.830800][T22009] bridge0: port 3(syz_tun) entered disabled state [ 403.848648][T22009] bridge_slave_0: left promiscuous mode [ 403.854598][T22009] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.871088][T22009] bridge_slave_1: left allmulticast mode [ 403.886644][T22009] bridge_slave_1: left promiscuous mode [ 403.911458][T22009] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.958678][T22009] bond0: (slave bond_slave_0): Releasing backup interface [ 404.013997][T22009] bond0: (slave bond_slave_1): Releasing backup interface [ 404.096009][T22009] team0: Port device team_slave_0 removed [ 404.130642][T22009] team0: Port device team_slave_1 removed [ 404.139260][T22009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.148840][T22009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.160245][T22009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.169204][T22009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.185132][T22009] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 404.282318][T22030] team0: No ports can be present during mode change [ 405.138856][T22085] vlan2: entered allmulticast mode [ 405.152123][T22085] gretap0: entered allmulticast mode [ 405.822039][T22130] tipc: Enabled bearer , priority 0 [ 405.916648][T22130] tipc: Disabling bearer [ 406.097865][T16018] block nbd2: Connection timed out, retrying (0/2 alive) [ 406.105224][T16018] block nbd2: Connection timed out, retrying (0/2 alive) [ 406.114211][ T25] block nbd2: Dead connection, failed to find a fallback [ 406.126386][ T25] block nbd2: shutting down sockets [ 406.133066][T16018] block nbd2: Connection timed out, retrying (0/2 alive) [ 406.142325][T16018] block nbd2: Connection timed out, retrying (0/2 alive) [ 406.150384][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.163008][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 406.172744][ T25] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.183434][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 406.191949][ T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.202419][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 406.210880][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.221860][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 406.231598][T16303] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.246838][T16303] Buffer I/O error on dev nbd2, logical block 0, async page read [ 406.255848][T16303] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.262567][T22155] xt_hashlimit: size too large, truncated to 1048576 [ 406.270035][T16303] Buffer I/O error on dev nbd2, logical block 1, async page read [ 406.283665][T16303] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.298890][T16303] Buffer I/O error on dev nbd2, logical block 2, async page read [ 406.307427][T22148] netlink: 'syz.3.4423': attribute type 1 has an invalid length. [ 406.307676][T16303] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.326648][T16303] Buffer I/O error on dev nbd2, logical block 3, async page read [ 406.336617][T16303] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.346802][T16303] Buffer I/O error on dev nbd2, logical block 0, async page read [ 406.355232][T16303] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 406.365423][T16303] Buffer I/O error on dev nbd2, logical block 1, async page read [ 406.376759][T16303] ldm_validate_partition_table(): Disk read failed. [ 406.387998][T16303] Dev nbd2: unable to read RDB block 0 [ 406.403965][T16303] nbd2: unable to read partition table [ 406.503329][T16303] ldm_validate_partition_table(): Disk read failed. [ 406.539922][T16303] Dev nbd2: unable to read RDB block 0 [ 406.561863][T16303] nbd2: unable to read partition table [ 406.600260][T22172] Cannot find del_set index 0 as target [ 406.612490][T22169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.751379][T22179] __nla_validate_parse: 12 callbacks suppressed [ 406.751401][T22179] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4433'. [ 406.809181][T22179] 0: renamed from hsr_slave_1 [ 406.845258][T22179] 0: entered allmulticast mode [ 406.855714][T22179] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 406.894236][T22184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.931529][T22189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4436'. [ 406.982133][T22196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4436'. [ 407.015757][T19599] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.022977][T19599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.322476][T22220] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4442'. [ 407.384293][T22224] ksmbd: Unknown IPC event: 3, ignore. [ 407.409199][T22224] netlink: 185620 bytes leftover after parsing attributes in process `syz.3.4447'. [ 407.509224][T22226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4448'. [ 407.746797][T22244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4454'. [ 407.778265][T22245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4454'. [ 407.866669][T22247] netlink: 'syz.0.4455': attribute type 4 has an invalid length. [ 407.892841][T22247] netlink: 'syz.0.4455': attribute type 4 has an invalid length. [ 407.927624][T22251] netlink: 'syz.1.4458': attribute type 10 has an invalid length. [ 407.936043][T22251] veth0_vlan: left promiscuous mode [ 407.951132][T22251] veth0_vlan: entered promiscuous mode [ 407.960067][T22251] team0: Device veth0_vlan failed to register rx_handler [ 408.568482][T22283] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4465'. [ 408.577979][T22290] netlink: 'syz.2.4466': attribute type 178 has an invalid length. [ 408.811304][T22306] mac80211_hwsim hwsim50 : renamed from wlan1 (while UP) [ 408.935972][T22319] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4475'. [ 408.936813][T22312] team0: Device gtp0 is up. Set it down before adding it as a team port [ 408.993038][T22306] netlink: 'syz.2.4470': attribute type 24 has an invalid length. [ 411.931573][T22324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.139807][T22374] netlink: 'syz.1.4488': attribute type 12 has an invalid length. [ 412.148178][T22374] __nla_validate_parse: 1 callbacks suppressed [ 412.148193][T22374] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.4488'. [ 412.295041][T22386] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4491'. [ 412.360715][T22392] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4492'. [ 412.397685][T22392] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4492'. [ 412.508416][T22399] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4495'. [ 412.523885][T22404] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4497'. [ 412.663503][T22407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4496'. [ 412.681804][T22407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4496'. [ 412.741484][T22413] syzkaller0: entered promiscuous mode [ 412.754687][T22413] syzkaller0: entered allmulticast mode [ 413.182718][T22450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4513'. [ 413.195044][T22450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4513'. [ 413.248296][T22453] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 413.554337][T22478] syzkaller0: entered promiscuous mode [ 413.567317][T22478] syzkaller0: entered allmulticast mode [ 413.801807][T22499] tipc: Enabled bearer , priority 0 [ 413.848957][T22504] syzkaller0: entered promiscuous mode [ 413.854596][T22504] syzkaller0: entered allmulticast mode [ 413.897536][T22504] tipc: Resetting bearer [ 413.926118][T22504] tipc: Disabling bearer [ 414.031989][T22518] delete_channel: no stack [ 414.086879][T22523] netlink: 'syz.0.4530': attribute type 39 has an invalid length. [ 414.156650][T22529] xt_nfacct: accounting object `syz1' does not exist [ 414.365121][T22514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.464032][T22541] wg1 speed is unknown, defaulting to 1000 [ 414.610736][T22546] pim6reg: entered allmulticast mode [ 414.852889][T22572] delete_channel: no stack [ 415.170401][T22584] netlink: 'syz.2.4550': attribute type 10 has an invalid length. [ 415.240709][T22584] veth0_macvtap: left promiscuous mode [ 415.678417][T22614] tipc: Enabled bearer , priority 0 [ 415.695360][T22614] syzkaller0: entered promiscuous mode [ 415.727367][T22614] syzkaller0: entered allmulticast mode [ 415.875921][T22616] tipc: Resetting bearer [ 415.986081][T22616] tipc: Disabling bearer [ 416.442064][T22666] veth1_macvtap: left promiscuous mode [ 416.453112][T22666] netlink: 'syz.4.4570': attribute type 1 has an invalid length. [ 416.669791][T22679] netlink: 'syz.2.4572': attribute type 6 has an invalid length. [ 416.720320][T19597] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.750644][T19597] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.782691][T19597] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.811024][T19597] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.044829][T22704] netlink: 'syz.3.4579': attribute type 10 has an invalid length. [ 417.185221][T22706] team0: No ports can be present during mode change [ 417.283746][T22720] sctp: [Deprecated]: syz.2.4583 (pid 22720) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.283746][T22720] Use struct sctp_sack_info instead [ 417.345062][T22726] __nla_validate_parse: 19 callbacks suppressed [ 417.345077][T22726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4585'. [ 417.417964][T22706] nbd3: detected capacity change from 0 to 63 [ 417.436851][ T5828] block nbd3: Receive control failed (result -104) [ 417.445843][ T5832] block nbd3: Receive control failed (result -32) [ 417.593605][T22735] syzkaller0: entered promiscuous mode [ 417.636559][T22735] syzkaller0: entered allmulticast mode [ 417.654128][T22745] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4591'. [ 431.867752][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 434.257808][ T30] INFO: task kworker/1:1H:1167 blocked for more than 143 seconds. [ 434.265864][ T30] Not tainted syzkaller #0 [ 434.270976][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.280017][ T30] task:kworker/1:1H state:D stack:26504 pid:1167 tgid:1167 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 434.292167][ T30] Workqueue: kblockd blk_mq_requeue_work [ 434.297941][ T30] Call Trace: [ 434.301312][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 434.304245][ T30] __schedule+0x15dd/0x52d0 [ 434.309717][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 434.314777][ T30] ? __pfx___schedule+0x10/0x10 [ 434.320132][ T30] ? schedule+0x90/0x360 [ 434.324415][ T30] schedule+0x164/0x360 [ 434.347141][ T30] schedule_timeout+0x158/0x2c0 [ 434.352147][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 434.426447][ T30] ? __pfx_process_timeout+0x10/0x10 [ 434.432092][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 434.446974][ T30] ? prepare_to_wait_event+0x436/0x480 [ 434.452506][ T30] nbd_queue_rq+0x857/0x1100 [ 434.467864][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 434.472955][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 434.487780][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 434.493401][ T30] ? sbitmap_get+0x229/0x390 [ 434.517080][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 434.523137][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 434.536968][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 434.543567][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 434.557339][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 434.563451][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 434.577524][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 434.582713][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 434.597415][ T30] blk_mq_requeue_work+0x71c/0x780 [ 434.602595][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 434.627099][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 434.632886][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 434.647803][ T30] process_scheduled_works+0xb6e/0x18c0 [ 434.653449][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 434.677319][ T30] ? assign_work+0x3d5/0x5e0 [ 434.681983][ T30] worker_thread+0xa53/0xfc0 [ 434.686628][ T30] kthread+0x388/0x470 [ 434.717884][ T30] ? __pfx_worker_thread+0x10/0x10 [ 434.723070][ T30] ? __pfx_kthread+0x10/0x10 [ 434.738104][ T30] ret_from_fork+0x51e/0xb90 [ 434.742759][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 434.767559][ T30] ? __switch_to+0xc7d/0x1450 [ 434.772301][ T30] ? __pfx_kthread+0x10/0x10 [ 434.787402][ T30] ret_from_fork_asm+0x1a/0x30 [ 434.792241][ T30] [ 434.798473][ T30] [ 434.798473][ T30] Showing all locks held in the system: [ 434.806220][ T30] 1 lock held by khungtaskd/30: [ 434.882730][ T30] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 434.937572][ T30] 4 locks held by kworker/1:1H/1167: [ 434.970758][ T30] #0: ffff88801e2c8148 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 434.992299][ T30] #1: ffffc90004c9fc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 435.007743][ T30] #2: ffff888024cb7018 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 435.018121][ T30] #3: ffff8880266d8380 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 435.027930][ T30] 2 locks held by getty/5581: [ 435.032630][ T30] #0: ffff888036bd30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 435.043406][ T30] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 435.054289][ T30] 1 lock held by udevd/14241: [ 435.059758][ T30] #0: ffff8880265bd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 435.069831][ T30] 1 lock held by udevd/14428: [ 435.074518][ T30] #0: ffff8880266a1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 435.086104][ T30] 3 locks held by syz-executor/16299: [ 435.092199][ T30] #0: ffff888022b70ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 435.104677][ T30] #1: ffff888022b700c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 435.115892][ T30] #2: ffffffff8fd5e368 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 435.126816][ T30] 1 lock held by udevd/16303: [ 435.132305][ T30] #0: ffff888026782358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 435.142583][ T30] 1 lock held by syz-executor/17063: [ 435.148784][ T30] 5 locks held by syz-executor/17383: [ 435.154181][ T30] #0: ffff88808934cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 435.165107][ T30] #1: ffff88808934c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 435.176394][ T30] #2: ffffffff8fd5e368 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 435.188941][ T30] #3: ffff88808b7e4300 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 435.199120][ T30] #4: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 435.212383][ T30] 3 locks held by syz-executor/17746: [ 435.219006][ T30] #0: ffff888091850ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 435.230264][ T30] #1: ffff8880918500c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 435.240718][ T30] #2: ffffffff8fd5e368 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 435.276255][ T30] [ 435.295024][ T30] ============================================= [ 435.295024][ T30] [ 435.304387][ T30] NMI backtrace for cpu 0 [ 435.304407][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 435.304427][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 435.304437][ T30] Call Trace: [ 435.304444][ T30] [ 435.304452][ T30] dump_stack_lvl+0xe8/0x150 [ 435.304481][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 435.304502][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 435.304526][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 435.304547][ T30] sys_info+0x135/0x170 [ 435.304562][ T30] watchdog+0xfd9/0x1030 [ 435.304583][ T30] ? watchdog+0x21a/0x1030 [ 435.304603][ T30] kthread+0x388/0x470 [ 435.304620][ T30] ? __pfx_watchdog+0x10/0x10 [ 435.304633][ T30] ? __pfx_kthread+0x10/0x10 [ 435.304650][ T30] ret_from_fork+0x51e/0xb90 [ 435.304675][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 435.304696][ T30] ? __switch_to+0xc7d/0x1450 [ 435.304720][ T30] ? __pfx_kthread+0x10/0x10 [ 435.304739][ T30] ret_from_fork_asm+0x1a/0x30 [ 435.304776][ T30] [ 435.304785][ T30] Sending NMI from CPU 0 to CPUs 1: [ 435.416405][ C1] NMI backtrace for cpu 1 [ 435.416421][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 435.416438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 435.416453][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 435.416479][ C1] Code: 6e 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 82 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 435.416492][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 435.416506][ C1] RAX: 0000000000157e4d RBX: ffffffff819a9d1a RCX: 0000000080000001 [ 435.416516][ C1] RDX: 0000000000000001 RSI: ffffffff8defc649 RDI: ffffffff8c27d580 [ 435.416526][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 435.416537][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 435.416547][ C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000 [ 435.416558][ C1] FS: 0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 435.416569][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.416580][ C1] CR2: 000055e3c58d0ee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 435.416594][ C1] Call Trace: [ 435.416601][ C1] [ 435.416606][ C1] default_idle+0x9/0x20 [ 435.416620][ C1] default_idle_call+0x72/0xb0 [ 435.416636][ C1] do_idle+0x36a/0x5f0 [ 435.416657][ C1] ? __pfx_do_idle+0x10/0x10 [ 435.416680][ C1] cpu_startup_entry+0x43/0x60 [ 435.416699][ C1] start_secondary+0x101/0x110 [ 435.416716][ C1] common_startup_64+0x13e/0x147 [ 435.416738][ C1] [ 435.420778][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 435.420802][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 435.420823][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 435.420835][ T30] Call Trace: [ 435.420842][ T30] [ 435.420852][ T30] vpanic+0x56c/0xa60 [ 435.420879][ T30] ? __pfx___schedule+0x10/0x10 [ 435.420903][ T30] ? __pfx_vpanic+0x10/0x10 [ 435.420935][ T30] panic+0xc5/0xd0 [ 435.420965][ T30] ? __pfx_panic+0x10/0x10 [ 435.420989][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 435.421015][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 435.421040][ T30] watchdog+0x1023/0x1030 [ 435.421063][ T30] ? watchdog+0x21a/0x1030 [ 435.421086][ T30] kthread+0x388/0x470 [ 435.421105][ T30] ? __pfx_watchdog+0x10/0x10 [ 435.421120][ T30] ? __pfx_kthread+0x10/0x10 [ 435.421138][ T30] ret_from_fork+0x51e/0xb90 [ 435.421163][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 435.421184][ T30] ? __switch_to+0xc7d/0x1450 [ 435.421207][ T30] ? __pfx_kthread+0x10/0x10 [ 435.421226][ T30] ret_from_fork_asm+0x1a/0x30 [ 435.686479][ T30] [ 435.689866][ T30] Kernel Offset: disabled [ 435.694197][ T30] Rebooting in 86400 seconds..