last executing test programs: 5m43.203712115s ago: executing program 1 (id=3031): writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000280)="3986c2d48cf8c83702fb70f5a5a23d944bacc4a2db953e112d8eb30c9201b8152738018f166c52b74cf381b67e42b52177e60cbb6161cd623a34e4af8c089e872072820fffc518e02191ca97f0430f39d4136e3131afea10b8ea1c08160b29a97555e91176ae7370f726717842cf76a06a4092a0b6987feb0aeb79dd84035c6eb2e2", 0x82}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) 5m43.187528899s ago: executing program 1 (id=3033): setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000000)=0x2, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f00000000c0)={0x1128, 0x31, 0x20, 0x70bd29, 0x25dfdbfd, {0x1d}, [@generic="cd929d40cfc4494a8b708d92a99091aba165dd0fe7fa1b65d0eaa81616d12d3c8b3ea4fb59b363fa2c8b7cbf91c5297df28cea4ee9552df9d35d9ac4df29cc8c572550dd4800ff34bcee7458ef24b1a4415e475ebf1d10f121e23a54d8923225f9692a0bcd4f3d37e5ef846d", @typed={0x8, 0xb0, 0x0, 0x0, @fd=r1}, @generic="03aa7447847ee6210b4d5ebfdb22084e31dfab0f3aa90f564d324bc22cc5ce3a5ad8ef2cd6cb01de7c4c0f0db2f5b5e86a682f284335dbd263276222d090c9f571b77abc35fcbdddc06c0d8ab4ab6063d581f3bf9fdaa890e8df6a8ec60fde2bd9788ceaa2d5799ee95c0d9037ecf501314fe8ae929e0853cb34b72c3e868092fdb13eb66f908cbeccea62db364ed7a8f470abde4616be567fd7c55cb0722f", @generic="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"]}, 0x1128}, 0x1, 0x0, 0x0, 0xb9617ece3a3301e}, 0x40000004) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000012c0), r0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001300)={0x0, @initdev, @local}, &(0x7f0000001340)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001380)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001440)={'syztnl1\x00', &(0x7f00000013c0)={'syztnl0\x00', 0x0, 0x29, 0x81, 0x6f, 0xfffffbff, 0x44, @local, @mcast2, 0x41, 0x8080, 0x7, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001580)={'syztnl2\x00', &(0x7f0000001480)={'syztnl1\x00', 0x0, 0x1, 0x1, 0xf3c, 0x8, {{0x2b, 0x4, 0x2, 0x5, 0xac, 0x64, 0x0, 0x9, 0x2f, 0x0, @remote, @private=0xa010101, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0x57, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @local, @broadcast, @rand_addr=0x64010100, @loopback, @empty]}, @generic={0x7, 0xb, "225e3b96b0b6fc9f0d"}, @ssrr={0x89, 0x2b, 0x85, [@loopback, @broadcast, @remote, @multicast2, @loopback, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x7, 0xf, "bfd5c8786c5f5aff761a256c9a"}, @ssrr={0x89, 0x1f, 0x9f, [@private=0xa010100, @private=0xa010100, @empty, @local, @private=0xa010102, @empty, @rand_addr=0x64010101]}, @ssrr={0x89, 0xb, 0x6a, [@empty, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000015c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001800)={&(0x7f0000001280), 0xc, &(0x7f00000017c0)={&(0x7f0000001600)={0x1b4, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1b4}}, 0x40010) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001840)={r0}) sendmsg$nl_route_sched(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)=@gettfilter={0x3c, 0x2e, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x7, 0xfffe}, {0xfff2, 0x6}, {0xfff2, 0x8}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x7}]}, 0x3c}}, 0x810) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001980)={'sit0\x00', r6, 0x0, 0x8000, 0x0, 0x6, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x65, 0x0, 0x8, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @end]}}}}}) (async) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0}, &(0x7f0000001a80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000001ac0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private0}}, &(0x7f0000001bc0)=0xe8) sendmsg$nl_xfrm(r8, &(0x7f00000020c0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002080)={&(0x7f0000001c00)=@allocspi={0x45c, 0x16, 0x20, 0x70bd2a, 0x25dfdbff, {{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4e22, 0xd, 0x4e21, 0x5, 0xa, 0x20, 0xa0, 0xc5, r4, r10}, {@in=@multicast1, 0x4d6, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x1, 0x2, 0x7, 0xd50, 0x9, 0x25e, 0x100, 0x5}, {0x100000000, 0x3, 0x7, 0x7}, {0x2, 0x6, 0xfff}, 0x70bd28, 0x3506, 0x2, 0x3, 0xff, 0x20}, 0x7, 0x7}, [@etimer_thresh={0x8}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2c, 0xb6}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffffffff}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e21, 0x7, 0x4e20, 0x8, 0x2, 0x20, 0x20, 0x73, r7, r11}, {@in6=@private2, 0x4d3, 0xff}, @in6=@empty, {0x9, 0x7, 0x8, 0x3, 0x7, 0x1, 0x10000, 0x4}, {0x3, 0xc39, 0x0, 0x340000000}, {0x6, 0x6, 0x9}, 0x70bd26, 0x3507, 0x2, 0x0, 0x6}}, @algo_aead={0x64, 0x12, {{'aegis256\x00'}, 0xc0, 0x200, "9d803514010bcf1c6274d6625c29018052a964bd605de43f"}}, @algo_auth={0xbe, 0x1, {{'xcbc(cast5-generic)\x00'}, 0x3b0, "4b45655a9da8497a2267a2671d0a1eb7c3a4a583e51ed79822c069810d71d184f9d5d47b60f2f4ae0281f5b0f1c84c7d4bec71c3905d624c934ef76f1f2ca52ba652640c3410badf970621a56b5a9d3bed3ba1de2a5fff32113a9dcd06feae752ce747f25fc703313bb2d8de96a3e5be66e5fbddcf6f"}}, @migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@empty, @in6=@rand_addr=' \x01\x00', @in=@private=0xa010100, 0xff, 0x4, 0x0, 0x0, 0x2, 0xa}, {@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x33, 0x0, 0x0, 0x3500, 0xa, 0x2}, {@in=@multicast1, @in=@private=0xa010101, @in6=@loopback, @in6=@empty, 0x2b, 0x3, 0x0, 0x3505, 0x2}, {@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private, @in6=@loopback, 0xe, 0x0, 0x0, 0x34ff, 0x2, 0xa}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) (async) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002140)=@buf={0x36, &(0x7f0000002100)="aa8031e617d4531c722b187dea130c17312cd11ea6ac92168c50f8070f81fdab05b1f592b08ada3c0ca7d15c0629c1d02d6c143d3f07"}) (async, rerun: 64) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000002180)=0x7b, 0x4) (rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) epoll_create1(0x80000) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)=@ipv4_deladdr={0x9c, 0x15, 0x400, 0x70bd28, 0x25dfdbfb, {0x2, 0x78, 0x80, 0x0, r5}, [@IFA_LABEL={0x14, 0x3, 'pim6reg0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x40}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_LABEL={0x14, 0x3, 'wg2\x00'}, @IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_LABEL={0x14, 0x3, 'wg0\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x6, 0x3, 0x2}}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x8, 0x4, 0x2}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20040010) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000002440)={'tunl0\x00', &(0x7f0000002340)={'ip_vti0\x00', r6, 0x7800, 0x40, 0x10000, 0x7, {{0x31, 0x4, 0x2, 0x4, 0xc4, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0xc, 0x8e, 0x1, 0xe, [{@empty, 0xc}]}, @cipso={0x86, 0x18, 0x1, [{0x7, 0x12, "1c2dae1229976bdb453eb7e9f3719e61"}]}, @generic={0x86, 0x7, "31b880121d"}, @timestamp_addr={0x44, 0xc, 0xda, 0x1, 0x8, [{@multicast2, 0x2}]}, @end, @ra={0x94, 0x4}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x7, "206aafd43d"}, {0x5, 0x9, "848bd64dad3bc7"}, {0x2, 0x8, "ac91b8f9e5b1"}]}, @cipso={0x86, 0x53, 0x2, [{0x5, 0xc, "bb935595c66ddddcad8e"}, {0x2, 0xf, "89e0f2245d15e174ae3a31f9a4"}, {0x0, 0xf, "5ad4ef1090666a7b885dcea584"}, {0x7, 0xa, "2d7972f853363293"}, {0x6, 0x8, "2b110471a740"}, {0x7, 0x11, "dd775df9385bf0147020939890ee7e"}]}]}}}}}) (async, rerun: 64) r13 = socket(0x1e, 0x4, 0x4c5d) (rerun: 64) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), r13) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x98800080}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x1c, r14, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x4000010) sendmsg$NL80211_CMD_DISCONNECT(r12, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x24, r14, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) (async) getsockname$inet6(r13, &(0x7f00000026c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000002700)=0x1c) 5m42.810627792s ago: executing program 1 (id=3038): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x48, r2, 0x8, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf14, 0x5af, 0x5, 0x9e66, 0xfffe, 0x14, 0x2, 0xb]}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m42.577524821s ago: executing program 1 (id=3040): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) 5m42.439769192s ago: executing program 1 (id=3046): r0 = socket(0xa, 0x6, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000006a890001ca27bd7000fcdbdf25004f5c6475678e80d700"/39], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000880)=0xb8, 0x4) socket(0x1e, 0x805, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x15, 0x4, 0xfffffffd) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000080)=0x88, 0x4) r8 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540)=0x60) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000580)={0x5, 0x1, 0xd, 0x200, 0x9}) socket$inet_mptcp(0x2, 0x1, 0x106) 5m41.481392506s ago: executing program 1 (id=3055): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12, 0x3010, 0xffffffffffffffff, 0xfffffffe}, 0xfffffca3) (async, rerun: 64) r2 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) bind$rds(r2, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) (async) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e26, @multicast2}], 0x10) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x23130c82}, 0x1c) (async) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="68020000000503000000000000000000030000005402010000000000080000000607ff000800180073797a300000000000000000000000000000000000000000000000000000000086bca39346212f86291651efda89f97eae0791a8937518b16a2af4d30592156d8a75bdacf9205e94b1affc4118e64c993c59ca1f8ac4bbb9fd263d6a7335d3e804000800236f475b030000008500d60001000000070000000300060003000000030000004000010002000000090000009b1a040002000000169d773cff0006000300000006000000cdc500000200000000010000020001000300000000100000030003000300000001040000b5000400000000000500000001808000030000000300000005000000010000000000000000000500010000007f000000090032790100000006000000f801040001000000400000000700070001000000018000000100ad0e03000000070000000100f1fd02000000050000000900030001000000060000000100f8ff010000008cc6000004000000030000009a0d00007f0006000100000009000000400003000000000008000000020004000300000003000000a2f33f0001000000070000000600070003000000040000004001df45000000000800000005000a00000000000300000040000400020000000900000000005b0c01000000050000000d00d38102000000c8ffffff07000a0b0100000004000000000003000000000007000000010008000200000009000000000015030300000010000000080007000200000002000000070001000300000000000100e40006000100000002000000ffff0700346ae0ba05000000060003000100000021280000ad7091f776629c47db37533123b5de879697a778ba29bf8a30d6b7a53f41c870667390bcdd7acc44c7c5b66c698555f777587bb93a7604b26c7745bb754b88b1617cb5224850366e343a1f7ec7ee4ac03d25b1707a624f6e422a3b230bec89878b3a1dcde393b993b927298262c25b2cb1efd12b7ff94ec88ae7630714c71819e893bf48c4feca4c56"], 0x268}}, 0x840) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 5m26.426419597s ago: executing program 32 (id=3055): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12, 0x3010, 0xffffffffffffffff, 0xfffffffe}, 0xfffffca3) (async, rerun: 64) r2 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) bind$rds(r2, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) (async) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e26, @multicast2}], 0x10) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x81, @private1={0xfc, 0x1, '\x00', 0x1}, 0x23130c82}, 0x1c) (async) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x268}}, 0x840) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m25.365046265s ago: executing program 5 (id=6173): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0xfffffffffffffffd, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r7}}], 0x20, 0x2400e044}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x70, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}]}, 0x70}}, 0x20040011) r10 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x34, 0x0, 0x404, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x73}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8010) 2m25.353602074s ago: executing program 5 (id=6179): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0xf4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x90, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa00}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}]}], {0x14}}, 0x11c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0xf8, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8}, 0x40000) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0xf8, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8}, 0x40000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4010) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4010) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f0000000400)='ns/cgroup\x00') (async) syz_open_procfs$namespace(r5, &(0x7f0000000400)='ns/cgroup\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, 0x0, 0x2}, 0x94) 2m25.271496619s ago: executing program 5 (id=6184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="dc0000000a0a030000000000000000000a0000090900010073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x0, 0x0, 0x200003, {0x0, 0x0, 0x0, r4, 0x42024}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848) 2m25.064324861s ago: executing program 5 (id=6189): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x100010, r0, 0x43d6c000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m24.861943954s ago: executing program 5 (id=6194): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 2m24.848835334s ago: executing program 5 (id=6199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) unshare(0x20000400) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x29, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x1, 0x2, 0x8, 0xe, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9b76}}, @ldst={0x1, 0x3, 0x0, 0x1, 0xa, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, &(0x7f0000000380), 0x41000, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x37, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r6, r4, 0x2f, 0x4, 0x0, @void, @value, @void, @void, r5}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) unshare(0x20000400) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r1, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) (async) socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x29, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x1, 0x2, 0x8, 0xe, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9b76}}, @ldst={0x1, 0x3, 0x0, 0x1, 0xa, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, &(0x7f0000000380), 0x41000, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x37, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0]}, 0x40) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r6, r4, 0x2f, 0x4, 0x0, @void, @value, @void, @void, r5}, 0x20) (async) 1m57.077624102s ago: executing program 33 (id=6199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) unshare(0x20000400) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x29, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x1, 0x2, 0x8, 0xe, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9b76}}, @ldst={0x1, 0x3, 0x0, 0x1, 0xa, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, &(0x7f0000000380), 0x41000, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x37, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r6, r4, 0x2f, 0x4, 0x0, @void, @value, @void, @void, r5}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) unshare(0x20000400) (async) socket$l2tp(0x2, 0x2, 0x73) (async) bind$inet(r1, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) (async) socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x29, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x1, 0x2, 0x8, 0xe, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9b76}}, @ldst={0x1, 0x3, 0x0, 0x1, 0xa, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, &(0x7f0000000380), 0x41000, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x37, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0]}, 0x40) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r6, r4, 0x2f, 0x4, 0x0, @void, @value, @void, @void, r5}, 0x20) (async) 1.215735608s ago: executing program 3 (id=8403): r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x3, 0xddc0}}], 0x18}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@remote, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x10, 0x3a, 0x0, @remote, @local, {[], @ni={0x8b, 0x0, 0x0, 0x7, 0x7e20, 0x200000080}}}}}}, 0x0) 1.20777961s ago: executing program 3 (id=8404): r0 = socket$kcm(0x10, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x30, 0x13, 0x1, 0x2070bd27, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040898}, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x40000000, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 1.034169926s ago: executing program 3 (id=8408): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000680)={&(0x7f0000000640)=[{&(0x7f0000000340)="3bb30bfeacb78e54a8aa472352d392b7f90d01807d4b5ea8bb0eff6eebe7e04aaf99257e106da117c85bb33b31fe3b4224b36388c9b9f29b28904ea9018b518f5c7edc025e9b", 0x46}, {&(0x7f00000003c0)="f3691d6629c89f5a20953fc81855b1720a414a9b377c4c5ee5bf952199f8db41ea0ba26d03b99b5d96ecfab07e23d436a8ca38daddbf98c8d67faf29d8ac4ed4a46e2277907e93cdc55f3967db524fdbb4873f40248a8fbdc808ea5273f6632f3011c396817f869bf563628faf58a55af378a00e76bfbd17d21465abd6cab61a5b06f172ab645b1edbf220c52328d745d84188cefc264ddeb7a820a45d94d38f65f43b6c323743c2f6d45b3639458b20103dcfa11ffc78e4f634a5de4fa7e3ad00b9b55797f0dc05cc8efdae81c7bf", 0xcf}, {&(0x7f00000004c0)="16f4e7748d6fc2847b4d5ce4703ec62105be7c4fe3b31f89795ba544f9ee8eeca27ebeccc09b1aa5f9510128e64c170fb3dad23c34209c10351405264067d8d198eac95fc4e6fc025c69f45067a14c67b5dcf5f784f6be7edfd51228898e7a4966be91f0e317c13cb4ecc83d08ec38c95540f9f47f75acc9af4cc926f5c1c997f464609b2c3ecff57dd71765f2f25dc825775aceddbeb7e98fa6faffcb5425408f9c55cf545d05efc1fc187a80da02dd51cc8063144982553e749bb4a4", 0xbd}, {&(0x7f0000000580)="5cb047742faa28e242be7631c87b3b876d983b6d9de5d8b7efd3ed4626a76f92c3e5930e71c1c04e6bf0e94ea5a6c1185a1b94258cfa0be0937cf9a0dd2e011472f89764ec1f498e7f6270310fdd41da064c1d365ed52d62a35feb0ade05ae8c46f540dc1d06ffbba681b4d2d4dcce5735a0dc5363cbfa7be23e6e873a02211203c1e01977e82c9abceda259ceebaffc246c7c8159d2e87d80a7c89c0b76a1ba529dbd3fa71e1c3c8e4c762af1e442b67b65f9d415967a49056ddf", 0xbb}], 0x4, 0x100000000, 0x0, 0x7fffffff, 0x10, 0x8000, 0x3, 0x5}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e23, 0x4004, @empty, 0xc}}, 0x9, 0xb73}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000140)) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000140)) 920.767856ms ago: executing program 6 (id=8410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff02"], 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x701, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 862.121632ms ago: executing program 4 (id=8412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0x2c}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x800, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={0x1, &(0x7f0000000400)="33743d976e57027ac75e16e4b98b6438e139e721e84056ff9475c5129687734cfae8f1696a44cb6c7556d179c17ea3051d88c02e51d9832dc1360121980c7dd14377ad9f3555096c1690fb5997676a53fd20b99d6ccb838728da835fc2f27a0f347ae34499c99294f9a91de252c541db2b00e8060a137dc11fe171c00bc6b490f761c2b561b7c19983e10d01374188cefcd269063eb71dbfbff3ef25842219c765e19dbb44e9987ba2733886e756b13bb4814183a98c967048cf1bbcabe4d0cb95edb3d083256f1c98c9fd3d4927edafe4b4bfd086456cf3e77b7ab765da35e81196e2e9c6d4", &(0x7f0000000580)=""/95}, 0x20) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="000000000000f5128df9080000000000000008b348db0000140012800900010076657468000000000400028008002000090000004fb6180bf6fd164bf6ec0c8948aaef19a59456c59b70f91bf2c87f6f2c841ec44997295b2a984d5ad2a676b5"], 0x3c}}, 0x0) 772.028377ms ago: executing program 6 (id=8414): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x107}}], 0x18}, 0x404c840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 771.605852ms ago: executing program 3 (id=8415): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x20000800) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="19e7af30cd56"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040001) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0) socket(0x1d, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffa, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@private0, @in6=@loopback, @in=@broadcast, 0x3c, 0x3, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f0000000340)=0x400, 0x4) close(0x3) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x48000) 745.285585ms ago: executing program 2 (id=8416): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000000)='-\x00', 0x13d001, &(0x7f0000000040)={@_ha_fsid={[0x7, 0xff3e]}, {0xe, 0x32, 0x2, 0x8000}}, 0x0, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x2}, {[0x1, 0x3, 0x6, 0x5]}, 0x0, 0xd5, &(0x7f0000000200)=""/213}) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pread64(r2, &(0x7f0000000500)=""/74, 0x4a, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x84, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xd}}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6900, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x85ba, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x2b96}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x84}}, 0x0) socket$inet(0x2, 0xa, 0x2) 724.257343ms ago: executing program 0 (id=8417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="99cc6a27d9685c66b6dc476a3dd9c7af61e29d8168b55116c6710445eee400542c40b9319e855c7c6b95a3d67d6b1df6a2a8caf13728d2f90366324e30f5ae53097ce2980d1fcd7ada3d08003577642cd10a0d01d9cd1b4582f4fb018eb90e037334", 0x62}, {&(0x7f0000000980)="437ef70cd5d9cf21c0e515ab0c9a381b21f11c01", 0x14}], 0x2}}], 0x1, 0x20005040) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4e20, 0x8000, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x4007, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@mcast2, 0x3505, 0x0, 0x2, 0x7, 0x5, 0x1, 0x80000001}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x3502, 0x4, 0x1, 0x7f, 0x6, 0x0, 0x55}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 644.527561ms ago: executing program 6 (id=8418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3800}}, @NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000040)="2a000000010000", 0x7) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0xdc, r4, 0x11d, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_APDU={0xb8, 0x19, "f1faf80ac1334fffbb4ae258dc0f6b4fb21ac061952167ae9b03fc61627678daba13a69b4e1dba9fdf0baef97c00d0ea477a8e7635be64eaa23cc79a41bbd4a0cb82ffb9da36dabed1cad1622408ff85edfa335a97adb0289cf3e713c3c1fb028382ea3dcc69e02b74127853898c496a3c3681d421c6a28c8474e506521080a309f0921fd21426addd23203ff7a696fa2216d96cf4415934747f59a28f0a428649ffed988ea06541a932948103de0515428ccce7"}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000881}, 0x48094) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 642.900614ms ago: executing program 4 (id=8419): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x3, 'wg2\x00', {0x10}, 0x2}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x3, 'wg2\x00', {0x10}, 0x2}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 616.784809ms ago: executing program 3 (id=8420): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00b7f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000093c0b077000200000000000000000000000000000000000000000000000000b06b7e000000000000000000000000000000000000000000000000000c0008000800080000316b"], 0x134}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) sendmsg$AUDIT_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x2, 0x70bd29, 0x25dfdbff, {0x10, 0x1, 0x0, r3, 0x4, 0x3, 0xffffffff, 0x7, 0x0, 0x55, 0x80000001}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x84040) 612.289307ms ago: executing program 2 (id=8421): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0xffffff81}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(0x3) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="e31b723c0c19038c423471ff3f713431a474c3eb9b5493f60119f9c61fe042ddf7392b2e7fb8ec530cb9d5341810dc5d28b5655f38c831b4bc3d5870855c97e90a11e09333a7ef1310a30ded5b86a81da388d0e72d14842b74c2782394bc137392081778ee6e20ee72ea91d6e11909dbd37c6f1e", 0x74}, {&(0x7f00000000c0)="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", 0xfb}, {&(0x7f00000001c0)="a0cb13e7405e7e490aca6ae411c9798e17c1919deb9de3edd6b17896e4e02c1564f6ac5948ff7ec2134e3d05161e8eba05afe657a54f43c2bab32d1c1bf66343535b8bfee92d6bf531709a9cc91e9a64068b8076ab", 0x55}, {&(0x7f0000000240)="ddf1f207d8a4562b2a634c6bb980281ba05f61b63d038d5c7e715d68ec163780f1729e5acdc0e6f104fca4c5ec97e2e546e0bf0f04540bbe20a5f84f03bb37215644cb1825561c913165f9afb1a09d091caa69822f307fd51e391373dbc926d2c57f14507eba8c9f2ebe281a9737e72bc68d66cf6d77828ed431bbe88462f0fc62d5e2f194b9e6800c6f5e8f3eeaf443688f49b499ca84d57d67024729ca5cc8d078e41082752b9edbc54240f5ec4a2123680bd2d86a4579", 0xb8}, {&(0x7f0000000300)="ccbd75768e2667f32049700241bfcb7ecef65c234085bfbc89777713d40477064f67365a046b31f2c5d6fd4ba23e3024a8d0c9e400d52d46353494e5d16441ce758fc00f84fe0c44160ce7982e5fe15234facf11d1d05cf0aa80db89c183ae792d1f7993c41ee36194c06c5bf84b9e7a6630952fbb16085929d9841d5c824787033ebd441cfed7091067bf1d076f36d88031957b105739283cab7c08e2a9153809ce47599eb604411b3fb0d45020bd07a9c5d05e96d3c0f667f42a31037d277bc11e8ba96c73d04496adc00f7bba6d67f8c4fafc98f5b2", 0xd7}], 0x5}, 0xc0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0x6, @local, 0x4}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)="8aadf1edb72f08c22c9e3ca6125be977b34e2660a831f620b67457ea6f4325751f3cc870b80d467031a9b3758d9874d32e02242492f0ac83b1484e58024a4101e002a73246f681f18af762f9fd18bb7e1fcc0d52c17d26f3bffd515009721ac427da1b36ff21ed67590071ef4d32df48ebb87e2f21b2bd6ab3fb1b52ddc0caa761498044882f44d73df016d82d670970d07e0f7ec8069c90046ee55406b7b8db006d30bf2fa7801a0f772aefcc94bf1606b10ca47782f4f7fb25e9c4ef46fc675ab2f95569fa46cc2c296009cdefd3801485096f", 0xd4}, {&(0x7f0000000700)="599dca86a218281771f080be1fe027a522361c32ccd71f42b2ed406f2b797544e6844a9d3081438a3ac5e2c6357b6fbf759af51e42a73fd26b4c9d81f565be7f6ff887a3a7d70521bf75fff16591ccdac6e99b752d17b6795909040e2cb286", 0x5f}], 0x2}, 0x4) 528.688882ms ago: executing program 6 (id=8422): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0x6}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) 528.348756ms ago: executing program 0 (id=8423): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x2, 0x2, {0xa, 0x4e23, 0x7, @mcast1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="3c84198aac87962c1b4a68725185e10aa1e6d45b6d8427b7dca3404c4b3894b55bb6f864480e2860523cace93299c53b0cff85969292d435edf8e63468d47b15ed126781dbfd6015b91c1bc9218a2842c1b6c087dfa0bf34200204edc7fac2c8e7855000fc2b40d0426f8e9ab21c6c5d7558db", 0x73}, {&(0x7f0000000240)="a2dff729d9b47d8048ab241069daab0ad8a75e5c210ed24a3a29ae55d2af47a1ee6c246ca09ae327f0b17b5b0e6a66592dabf3966c68ec9c56a95414126b0541570312a03cca31b5", 0x48}, {&(0x7f0000000300)="18d14f3fb8710bece0207362b87c65994ca95b3f0f2b73450a544a6fe6071aa09d", 0x21}], 0x3}, 0x4040040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 526.999146ms ago: executing program 3 (id=8424): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r3, 0x2, 0x10}, &(0x7f0000000240)=0xc) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100005ff00000000f5ffffff0000004a", @ANYRES32=0x0, @ANYBLOB="4a840200000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="c6d91a7e694438edc37a8510385e218b69978ffd342a10055e93efa82710290054a5adb47a9fff3bf43f424ca649e792a6e94bfc37436af91b9b172eb73ed44343bdcb5106f2ff889ddfa12b5d9d42518a1480c321ff54a94d19a06ab2ec00000000000000"], 0x3c}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000a14010026bd7000fedbdf250800010000000000080015"], 0x20}}, 0x20000010) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0x6}}}, 0x24}}, 0x0) 500.057463ms ago: executing program 2 (id=8425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000001240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f00000000c0)=0x3, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) (async) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) (async) bind$alg(r8, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r10 = accept4(r8, 0x0, 0x0, 0x0) (async) r11 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) getsockname$l2tp(r11, 0x0, &(0x7f0000000100)) (async) sendmmsg$alg(r10, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x4012}], 0x1, 0x0) recvmmsg$unix(r10, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x20, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000080)=0x1f, 0x4) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f0000000dc0)='team_slave_0\x00') (async) sendto$packet(r6, &(0x7f00000002c0)="f657a8aa7f4da44a239500000000000000000000ea0ec689041a4c39fa2cbd034782508c895442ceaca9d0a551244f0e48196d423936b40017c7321660790d365f7bba4ef34dccb6c039c9ddc78db55857fe93", 0x53, 0x4004001, &(0x7f0000000080)={0x11, 0x16, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) (async) r12 = socket$inet(0xa, 0x801, 0x84) connect$inet(r12, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 477.250072ms ago: executing program 0 (id=8426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 392.000649ms ago: executing program 6 (id=8427): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) socket(0x10, 0x2, 0x0) (async) r2 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8929, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000200), 0x4) close(r0) (async) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000001500)=[0x0, 0x0], 0x0, 0x38, &(0x7f0000001540)=[{}, {}], 0x10, 0x10, &(0x7f0000001580), &(0x7f00000015c0), 0x8, 0x30, 0x8, 0x8, &(0x7f0000001600)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x11, 0x5, 0x2, 0xf, 0x4d1d, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x8000004, 0x1}, 0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x11, 0x5, 0x2, 0xf, 0x4d1d, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x8000004, 0x1}, 0x4) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)="99cd8c906943e0b775c54c80feb5af1643dbd8def710f8fa57d7c5779fc04d803e0ae009c7", 0x25}, 0x1, 0x0, 0x0, 0x4090}, 0x40040c4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000020000007321150000d80d9a8eb73c0000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) close(r5) (async) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800004000000000001e00000000020061590ed61e3bb9b01449d7b718112000110468e1157659692d85943e2955a9d1c5d673face26f5405602ebddfb7dca47eb", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x43, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000001900)={r0, &(0x7f0000001800)='%^.\x00', 0x2580, &(0x7f0000001840)={@align=0xfffffffffffffffb, {0xf001, 0x0, 0x978, 0x10}}, 0x49, &(0x7f0000000340)={@_ha_fsid}, &(0x7f00000018c0)=0x5}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001940)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001940)={0x1}, 0x4) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r8], 0xb) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, 0xffffffffffffffff, 0xffffc000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 386.713961ms ago: executing program 0 (id=8428): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b73440e68d480300000000000085000000c4000000bcbebe6e88d31435950003840b905d68abd0cb5059d0679dd0cb313141da8b2afe6ab32593e6ee29dc7be19b3298e06b5e4dca31fe99c6a68277c566628da22d7e0a8c1837588074fdf86113823431297af5178279f95c4238c43e6dd7cefe75c99efd2f3f1ba4d4fbdf47a7cae647732accfb7f846adc2c78ff8e13bb72820b4efaea42c304728373908e911d35b6d20a1e9f0d573a90c5ab492aa37bc311838e2a4017e822295b63de2f453a4ff1bb80e20cfec28276433b0fdb2991"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x4000850) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYRES8, @ANYRES32=r6, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r7}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r7}, 0x38) (async, rerun: 32) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000080)=""/177, &(0x7f0000000c40)=0xb1) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001080)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) socket$kcm(0x29, 0x4, 0x0) 355.501048ms ago: executing program 2 (id=8429): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 292.943206ms ago: executing program 2 (id=8430): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000e00000000000000008500000053000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000009c0), &(0x7f0000000a00)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090000004000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003}, 0x94) 200.255902ms ago: executing program 0 (id=8431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x40010) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, r2, 0x25, 0x0, @val=@perf_event={0x5}}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x22ed}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x50}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000000f0000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2c00128014000180090001006c6173740000000004000280140001800c000100636f756e74657200040002800800034000000130140000001100010000000000000000000100000a"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 193.684302ms ago: executing program 4 (id=8432): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x48, 0x1}, 0x18}}, 0x0) 134.224515ms ago: executing program 4 (id=8433): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff00000000731143000000000085100014028b0000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r1, r2, 0x25, 0x1, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1800d, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x6, @val=@tracing={r4, 0x3}}, 0x20) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0xfffffffd, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1, 0x2, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}}]}, 0x190) 106.330366ms ago: executing program 6 (id=8434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x3d8, 0x230, 0x700001b, 0x148, 0x230, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x88, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x4, 0x4], 0x4, 0x2}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x2, 0x80805, 0xffffffff) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg$unix(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/220, 0xdc}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYBLOB="1106da53957c705967e496db4b7e9cfef931e2e90417d3960bd1f76438cab099030cfae136318b942ff7f569a39491d96f3f6c32431b4900a7508237d2bfb9585531fc4b2baf0cdaf54748bc1e47e362922929e0c8633017fb1269d0c0fd6e86beafcf8127fa4df6500535996176881ffac7d406dd8683d2ea510e93", @ANYRES32=r0, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="cef683463972d04257b80a8f27ad2cdff68c73221902879f9bf93c8ce6b4aca393eb6b0cd8883985a09d5e9c14c4328512ce91262cce76e99c20002f63323787e19bcde2c7fb6b5827d970089cc00114d5cb8208571c331d5479681e0fcbcaee0cbbaf6b40bc34e964a805274ff3cc570d32e727c2881ce93bacabdaba2ebb6c4db3c22610ffff951e1414355bf247f904204719a693b4018898576cc87be9f88d"], 0x58}, 0x1, 0x0, 0x0, 0x400c081}, 0x4040010) 36.597049ms ago: executing program 4 (id=8435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) getsockname$packet(r1, 0x0, &(0x7f0000000640)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 20.499102ms ago: executing program 2 (id=8436): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000080)=0x2, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast2, 0xffff0000}}, 0xffff, 0xc4}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)={r3, 0xfe, "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"}, &(0x7f0000000300)=0x106) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0xe23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 18.871095ms ago: executing program 0 (id=8437): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB='f\n\x00\x00\x00\x00\x00\x00a\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r1, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r4}, &(0x7f0000000540), 0x0}, 0x20) pipe(&(0x7f0000000140)) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x26, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b6, 0x0, 0x0, 0x0, 0x1022}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x1, 0x61, &(0x7f0000000640)=""/97, 0x41100, 0x18, '\x00', 0x0, @fallback=0x33, r5, 0x8, &(0x7f0000000700)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x3, 0x1, 0xfffffff9}, 0x10, 0xffffffffffffffff, r3, 0x9, &(0x7f00000007c0)=[r1, r2, r1], &(0x7f0000000800)=[{0x2, 0x5, 0x1, 0x1}, {0x1, 0x4, 0x6, 0x7}, {0x1, 0x5, 0x9, 0x8}, {0x5, 0x1, 0xe, 0x8}, {0x1, 0x3, 0xf, 0xc}, {0x5, 0x4, 0x6, 0x6}, {0x1, 0x2, 0x1}, {0x2, 0x4, 0x7, 0x5}, {0x5, 0x5, 0x3, 0x5}], 0x10, 0x200}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB='&'], 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=@newtfilter={0x4c, 0x2c, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xe, 0xf}, {0x10, 0x7ff4}, {0x6, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x7}}, @TCA_RATE={0x6, 0x5, {0x13, 0xc2}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}, @TCA_RATE={0x6, 0x5, {0x7f, 0xb6}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xb, 0xfff2}, {0xf, 0xffff}, {0x10, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24044010) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x18}, 0x40c0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) 0s ago: executing program 4 (id=8438): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r3, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000015c0)="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", 0x430}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c268", 0x1b}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000680), 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000080)={'ip6gretap0\x00'}) kernel console output (not intermixed with test programs): 2][T25713] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.384413][T25713] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.469934][T28937] Bluetooth: MGMT ver 1.23 [ 678.527102][T25713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.565678][T25713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.625010][T24919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.642568][T24919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.787448][T28954] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6237'. [ 678.814881][T28954] bond0: Error: CAN devices cannot be enslaved [ 678.844977][T28957] Bluetooth: MGMT ver 1.23 [ 679.090743][T28980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.191119][T28980] syzkaller0: entered promiscuous mode [ 679.211618][T28980] syzkaller0: entered allmulticast mode [ 679.223711][ T50] Bluetooth: hci2: command tx timeout [ 679.341492][T29004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6344'. [ 679.387503][T29006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6345'. [ 679.484909][T29013] netlink: 'syz.6.6347': attribute type 1 has an invalid length. [ 679.509822][T29013] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.6347'. [ 679.525231][T29015] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 679.669219][T29025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6351'. [ 679.743582][T29035] netlink: 'syz.6.6352': attribute type 32 has an invalid length. [ 679.764897][T29035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6352'. [ 679.805668][T29035] bond1: Setting coupled_control to off (0) [ 680.136876][T29054] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6358'. [ 680.170107][T29058] netlink: 'syz.4.6360': attribute type 1 has an invalid length. [ 680.372391][T29070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 680.384301][T29070] bridge0: port 4(bond2) entered blocking state [ 680.390726][T29070] bridge0: port 4(bond2) entered disabled state [ 680.398520][T29070] bond2: entered allmulticast mode [ 680.405797][T29070] bond2: entered promiscuous mode [ 680.509606][T29088] netlink: 'syz.4.6367': attribute type 1 has an invalid length. [ 680.630014][T29097] syzkaller1: entered promiscuous mode [ 680.652326][T29097] syzkaller1: entered allmulticast mode [ 680.782633][T29113] netlink: 'syz.3.6372': attribute type 2 has an invalid length. [ 680.890014][T29123] netlink: 'syz.6.6374': attribute type 1 has an invalid length. [ 680.910669][T29123] No such timeout policy "syz1" [ 681.072860][T29134] netlink: 'syz.6.6378': attribute type 21 has an invalid length. [ 681.376216][T29158] netlink: 'syz.3.6385': attribute type 1 has an invalid length. [ 681.432675][T29158] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 681.485343][T29168] netlink: 'syz.2.6384': attribute type 1 has an invalid length. [ 681.535810][T29171] __nla_validate_parse: 8 callbacks suppressed [ 681.535830][T29171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6388'. [ 681.872362][T29189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6393'. [ 681.935318][T29175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.977138][T29175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.060657][T29181] openvswitch: netlink: Missing key (keys=40, expected=100) [ 682.147170][T29175] geneve3: left promiscuous mode [ 682.152474][T29175] geneve3: left allmulticast mode [ 682.161058][T29175] bond1: left promiscuous mode [ 682.192314][T29201] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6391'. [ 682.200555][T29207] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 682.236299][T25712] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.276662][T25712] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 682.300269][T25712] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.325852][T25712] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 682.353783][T29209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6396'. [ 682.370378][T25712] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.391622][T25712] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 682.411727][T25712] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.439244][T25712] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 682.487705][T29228] xt_hashlimit: size too large, truncated to 1048576 [ 682.583392][ T5630] Bluetooth: hci2: command 0x0405 tx timeout [ 682.609935][T29236] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6398'. [ 682.756151][T29244] v: renamed from vlan0 (while UP) [ 683.357086][T29286] validate_nla: 1 callbacks suppressed [ 683.357106][T29286] netlink: 'syz.0.6417': attribute type 8 has an invalid length. [ 683.438164][T29288] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 683.477096][T29288] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 683.500602][T29288] gretap1: entered promiscuous mode [ 683.516152][T29288] gretap1: entered allmulticast mode [ 683.568008][T29303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6422'. [ 683.635064][T29303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 683.833705][T29320] tipc: Started in network mode [ 683.846074][T29320] tipc: Node identity 7af21c6b3a17, cluster identity 4711 [ 683.867593][T29320] tipc: Enabled bearer , priority 0 [ 683.894075][T29320] syzkaller0: entered promiscuous mode [ 683.921200][T29320] syzkaller0: entered allmulticast mode [ 683.947659][T29324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6429'. [ 683.959954][T29336] netlink: 'syz.6.6431': attribute type 1 has an invalid length. [ 683.983873][T29320] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 684.044741][T29320] tipc: Resetting bearer [ 684.074278][T29319] tipc: Resetting bearer [ 684.090589][T29319] tipc: Disabling bearer [ 684.149991][T29354] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6435'. [ 684.386316][T29365] netlink: 'syz.6.6440': attribute type 4 has an invalid length. [ 684.518081][T29380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.541857][T29380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.566379][T29380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.588390][T29380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.606155][T29390] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 684.624776][T29390] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 684.657187][T29389] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 684.663414][T29390] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 684.672945][ T809] IPVS: starting estimator thread 0... [ 684.774346][T29397] IPVS: using max 55 ests per chain, 132000 per kthread [ 684.881863][T29406] netlink: 'syz.2.6455': attribute type 5 has an invalid length. [ 685.006191][T29403] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6453'. [ 685.100263][T29417] syzkaller0: entered promiscuous mode [ 685.125741][T29417] syzkaller0: entered allmulticast mode [ 685.357694][T29436] veth0: entered promiscuous mode [ 685.379784][T29434] veth0: left promiscuous mode [ 685.425498][T24919] tipc: Subscription rejected, illegal request [ 685.462664][T29444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6465'. [ 685.660931][T29448] syzkaller0: entered promiscuous mode [ 685.668805][T29448] syzkaller0: entered allmulticast mode [ 686.102196][T29490] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 686.486451][T29506] syzkaller0: entered promiscuous mode [ 686.502344][T29506] syzkaller0: entered allmulticast mode [ 686.649105][T29518] __nla_validate_parse: 5 callbacks suppressed [ 686.649124][T29518] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6489'. [ 686.651649][T29519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6490'. [ 687.001980][T29535] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 687.017630][T29535] bond1 (unregistering): Released all slaves [ 687.130156][T29549] netlink: 14524 bytes leftover after parsing attributes in process `syz.6.6499'. [ 687.182056][T29554] xt_ecn: cannot match TCP bits for non-tcp packets [ 687.228079][T29554] netlink: 'syz.0.6500': attribute type 1 has an invalid length. [ 687.408136][T29585] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.6510'. [ 687.508023][T29591] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.538081][T29602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6515'. [ 687.595956][T29608] bridge1: entered promiscuous mode [ 687.605163][T29608] bridge1: entered allmulticast mode [ 687.620229][T29608] team0: Port device bridge1 added [ 687.648199][T29616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6518'. [ 687.931235][T29657] netlink: 'syz.4.6525': attribute type 1 has an invalid length. [ 687.971751][T29657] 8021q: adding VLAN 0 to HW filter on device bond4 [ 688.077952][T29677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6533'. [ 688.160022][T29688] x_tables: ip_tables: osf match: only valid for protocol 6 [ 688.181467][T29690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6532'. [ 688.279206][T29698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6540'. [ 688.362861][T29708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6542'. [ 688.431325][T29703] gtp0: entered promiscuous mode [ 688.443327][T29703] gtp0: entered allmulticast mode [ 688.502154][T29718] 8021q: adding VLAN 0 to HW filter on device bond6 [ 688.520447][T29718] macvlan2: entered promiscuous mode [ 688.528587][T29718] macvlan2: entered allmulticast mode [ 688.535537][T29718] bond6: entered promiscuous mode [ 688.543264][T29718] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 688.550327][T29723] smc: removing ib device syz0 [ 688.557264][T29718] bond6: left promiscuous mode [ 688.577516][T29723] smbdirect: ib_dev[syz0] removed [ 688.610855][T29724] netlink: 'syz.0.6544': attribute type 1 has an invalid length. [ 688.814407][T29737] IPVS: length: 8 != 1152 [ 689.026674][T29743] Cannot find del_set index 2 as target [ 689.395165][T29777] sctp: [Deprecated]: syz.4.6563 (pid 29777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.395165][T29777] Use struct sctp_sack_info instead [ 690.096603][T29821] syzkaller0: entered promiscuous mode [ 690.110736][T29821] syzkaller0: entered allmulticast mode [ 690.400030][T29829] syzkaller1: entered promiscuous mode [ 690.432681][T29829] syzkaller1: entered allmulticast mode [ 690.586479][T29826] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 690.617150][T29840] netlink: 'syz.6.6578': attribute type 1 has an invalid length. [ 690.694317][T29838] xt_hashlimit: size too large, truncated to 1048576 [ 690.755137][T29851] netlink: 'syz.0.6581': attribute type 1 has an invalid length. [ 690.798819][T29856] xt_ecn: cannot match TCP bits for non-tcp packets [ 690.816455][T29857] 8021q: VLANs not supported on gre0 [ 690.936310][T29862] syzkaller0: entered promiscuous mode [ 690.953681][T29862] syzkaller0: entered allmulticast mode [ 690.969094][T29867] netlink: 'syz.6.6587': attribute type 4 has an invalid length. [ 691.160582][T29874] netlink: 'syz.3.6589': attribute type 1 has an invalid length. [ 691.218644][T29881] netlink: 'syz.0.6591': attribute type 1 has an invalid length. [ 691.236770][T29874] bond2: entered promiscuous mode [ 691.242197][T29874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 691.249283][T29884] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 691.249557][T29884] IPVS: sh: FWM 3 0x00000003 - no destination available [ 691.482243][T29909] netlink: 'syz.6.6599': attribute type 7 has an invalid length. [ 691.483523][T29908] openvswitch: netlink: Multiple metadata blocks provided [ 691.500122][T29903] tipc: Started in network mode [ 691.506337][T29903] tipc: Node identity 7e3eafe09a09, cluster identity 4711 [ 691.518288][T29903] tipc: Enabled bearer , priority 0 [ 691.527304][T29904] syzkaller0: entered promiscuous mode [ 691.540952][T29904] syzkaller0: entered allmulticast mode [ 691.596014][T29904] tipc: Resetting bearer [ 691.648460][T29904] tipc: Disabling bearer [ 691.973557][T29952] __nla_validate_parse: 16 callbacks suppressed [ 691.973573][T29952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6614'. [ 692.025551][T29956] vlan0: entered allmulticast mode [ 692.032835][T29956] bond0: entered allmulticast mode [ 692.045432][T29956] bond_slave_0: entered allmulticast mode [ 692.051367][T29956] bond_slave_1: entered allmulticast mode [ 692.056495][T29966] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 692.089301][T29958] bond7 (unregistering): Released all slaves [ 692.125885][T29952] syzkaller0: entered promiscuous mode [ 692.137729][T29952] syzkaller0: entered allmulticast mode [ 692.149049][T29974] netlink: 'syz.3.6619': attribute type 2 has an invalid length. [ 692.173080][T29972] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6618'. [ 692.194696][T29972] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6618'. [ 692.209092][T29976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6620'. [ 692.379476][T29985] bond7: Unable to set peer notification delay as MII monitoring is disabled [ 692.416288][T29985] bond7 (unregistering): Released all slaves [ 692.661125][T30009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6631'. [ 692.694860][T30001] x_tables: duplicate underflow at hook 2 [ 692.893914][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6628'. [ 692.996977][T30047] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20004 [ 693.060313][T30051] IPVS: set_ctl: invalid protocol: 67 255.255.255.255:20004 [ 693.220718][T30058] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21 [ 693.260584][T30064] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 693.270652][T30063] ip6tnl1: entered allmulticast mode [ 693.312712][T30066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6644'. [ 693.366644][T30075] No such timeout policy "syz0" [ 693.400547][T30078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6649'. [ 693.410321][T30078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6649'. [ 693.425747][T30078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6649'. [ 693.662938][T30101] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 693.910645][T30111] infiniband syz0: set down [ 693.924411][T30111] infiniband syz0: added ipvlan0 [ 693.954715][T30111] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 693.970970][T30111] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 693.991066][T30111] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 694.014895][T30111] RDS/IB: syz0: added [ 694.022815][T30111] smc: adding ib device syz0 with port count 1 [ 694.025567][T30125] bridge3: entered promiscuous mode [ 694.029413][T30111] smc: ib device syz0 port 1 has no pnetid [ 694.041184][T30125] bridge3: entered allmulticast mode [ 694.190163][T30132] openvswitch: netlink: Flow actions attr not present in new flow. [ 694.517397][T30160] syzkaller0: entered promiscuous mode [ 694.531655][T30160] syzkaller0: entered allmulticast mode [ 694.542848][T30161] netlink: 'syz.6.6676': attribute type 1 has an invalid length. [ 694.852565][T30187] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 694.921954][T30191] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.929443][T30191] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.976941][T30191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.987729][T30191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.040693][T30191] gtp0: left promiscuous mode [ 695.045889][T30191] gtp0: left allmulticast mode [ 695.052110][T30191] bridge3: left promiscuous mode [ 695.057852][T30191] bridge3: left allmulticast mode [ 695.076818][T13892] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.102140][T13892] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.130375][T13892] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.141826][T13892] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.174398][T30201] smc: net device team0 applied user defined pnetid SYZ2 [ 695.430850][T30218] bond7: option lp_interval: invalid value (0) [ 695.455658][T30218] bond7: option lp_interval: allowed values 1 - 2147483647 [ 695.465594][T30230] netlink: 'syz.6.6697': attribute type 7 has an invalid length. [ 695.475364][T30230] netlink: 'syz.6.6697': attribute type 8 has an invalid length. [ 695.485263][T30218] bond7 (unregistering): Released all slaves [ 695.619221][T30240] "syz.6.6700" (30240) uses obsolete ecb(arc4) skcipher [ 695.679885][T30243] IPVS: Error connecting to the multicast addr [ 696.251583][T30281] sctp: [Deprecated]: syz.0.6711 (pid 30281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 696.251583][T30281] Use struct sctp_sack_info instead [ 696.497573][T30293] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 696.518815][T30293] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 696.689995][T30323] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 696.702361][T30323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.719200][T30324] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 696.730200][T30324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.948903][T30341] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 696.999801][T30348] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 696.999801][T30348] Please contact the netfilter-devel mailing list or update your nftables rules. [ 697.081775][T30352] __nla_validate_parse: 27 callbacks suppressed [ 697.081793][T30352] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6734'. [ 697.195946][T30364] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6736'. [ 697.232108][T30364] dvmrp0: entered allmulticast mode [ 697.254698][T30366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6737'. [ 697.269447][T30366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6737'. [ 697.342510][T30370] netlink: 15 bytes leftover after parsing attributes in process `syz.2.6739'. [ 697.482742][T30383] can: request_module (can-proto-0) failed. [ 697.496842][T30383] netlink: 'syz.6.6741': attribute type 1 has an invalid length. [ 697.559445][T30383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 697.574038][ T50] block nbd0: Receive control failed (result -32) [ 697.686663][T30397] bond3: (slave geneve2): making interface the new active one [ 697.741304][T30397] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 697.772898][T30406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6747'. [ 697.898762][T30417] netlink: 'syz.2.6751': attribute type 1 has an invalid length. [ 697.997425][T30429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6755'. [ 698.112471][T30441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6758'. [ 698.157333][T30448] netlink: 'syz.6.6759': attribute type 21 has an invalid length. [ 698.203928][T30448] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6759'. [ 698.522600][T30476] netlink: 'syz.4.6767': attribute type 1 has an invalid length. [ 698.546896][T30476] netlink: 280 bytes leftover after parsing attributes in process `syz.4.6767'. [ 698.641718][T30489] vlan2: entered promiscuous mode [ 698.649405][T30489] bridge0: entered promiscuous mode [ 698.791839][T30508] netlink: 'syz.0.6774': attribute type 7 has an invalid length. [ 698.828937][T30495] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 698.884584][T13892] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.891816][T13892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.969380][T30517] syzkaller0: entered promiscuous mode [ 698.999609][T30517] syzkaller0: entered allmulticast mode [ 699.056119][T30517] veth0_macvtap: entered allmulticast mode [ 699.074654][T30517] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 699.132612][T30524] bridge2: entered promiscuous mode [ 699.149796][T30524] bridge2: entered allmulticast mode [ 699.187747][T30540] netlink: 'syz.2.6786': attribute type 1 has an invalid length. [ 699.425842][T30567] smc: net device team0 applied user defined pnetid SYZ2 [ 699.736349][T30597] netlink: 'syz.6.6806': attribute type 1 has an invalid length. [ 699.784488][T30600] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 699.879885][T30608] hsr0: entered promiscuous mode [ 699.998469][T30615] IPv6: NLM_F_CREATE should be specified when creating new route [ 700.417699][T30661] 0: reclassify loop, rule prio 0, protocol 700 [ 700.435487][T30661] ip6erspan0: entered allmulticast mode [ 700.457942][T30661] bond3: entered promiscuous mode [ 700.637471][T30676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.917022][T30698] FAULT_INJECTION: forcing a failure. [ 700.917022][T30698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.930860][T30698] CPU: 0 UID: 0 PID: 30698 Comm: syz.0.6839 Not tainted syzkaller #0 PREEMPT(full) [ 700.930883][T30698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 700.930901][T30698] Call Trace: [ 700.930982][T30698] [ 700.931054][T30698] dump_stack_lvl+0xe8/0x150 [ 700.931208][T30698] should_fail_ex+0x40c/0x560 [ 700.931298][T30698] _copy_from_user+0x2d/0xb0 [ 700.931378][T30698] ___sys_sendmsg+0x1c6/0x360 [ 700.931534][T30698] ? rcu_is_watching+0x15/0xb0 [ 700.931600][T30698] ? get_pid_task+0x20/0x1f0 [ 700.931631][T30698] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.931662][T30698] ? rcu_is_watching+0x15/0xb0 [ 700.931689][T30698] ? __fget_files+0x2a/0x420 [ 700.931729][T30698] ? __fget_files+0x3a2/0x420 [ 700.931749][T30698] __x64_sys_sendmsg+0x1b1/0x290 [ 700.931770][T30698] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 700.931794][T30698] ? rcu_is_watching+0x15/0xb0 [ 700.931809][T30698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.931841][T30698] do_syscall_64+0x174/0x580 [ 700.931955][T30698] ? trace_irq_disable+0x3b/0x140 [ 700.931990][T30698] ? clear_bhb_loop+0x40/0x90 [ 700.932008][T30698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.932022][T30698] RIP: 0033:0x7fb156b9ce59 [ 700.932045][T30698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.932088][T30698] RSP: 002b:00007fb157abd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.932137][T30698] RAX: ffffffffffffffda RBX: 00007fb156e15fa0 RCX: 00007fb156b9ce59 [ 700.932148][T30698] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000009 [ 700.932157][T30698] RBP: 00007fb157abd090 R08: 0000000000000000 R09: 0000000000000000 [ 700.932165][T30698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.932174][T30698] R13: 00007fb156e16038 R14: 00007fb156e15fa0 R15: 00007fff7d40cee8 [ 700.932193][T30698] [ 701.190173][T30704] syzkaller1: entered promiscuous mode [ 701.195960][T30704] syzkaller1: entered allmulticast mode [ 701.285541][T30710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.416663][T30736] FAULT_INJECTION: forcing a failure. [ 701.416663][T30736] name failslab, interval 1, probability 0, space 0, times 1 [ 701.443333][T30736] CPU: 0 UID: 0 PID: 30736 Comm: syz.2.6850 Not tainted syzkaller #0 PREEMPT(full) [ 701.443358][T30736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 701.443367][T30736] Call Trace: [ 701.443374][T30736] [ 701.443382][T30736] dump_stack_lvl+0xe8/0x150 [ 701.443406][T30736] should_fail_ex+0x40c/0x560 [ 701.443426][T30736] should_failslab+0xa8/0x100 [ 701.443486][T30736] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 701.443512][T30736] ? rcu_is_watching+0x15/0xb0 [ 701.443528][T30736] ? __alloc_skb+0x1d7/0x7a0 [ 701.443599][T30736] ? trace_irq_enable+0x3b/0x140 [ 701.443621][T30736] __alloc_skb+0x1d7/0x7a0 [ 701.443642][T30736] netlink_sendmsg+0x5d4/0xb40 [ 701.443737][T30736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.443758][T30736] ? aa_sock_msg_perm+0xf1/0x1b0 [ 701.443866][T30736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 701.443898][T30736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.443919][T30736] ____sys_sendmsg+0x9b9/0xa20 [ 701.443942][T30736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.443961][T30736] ? lock_release+0x4b/0x3c0 [ 701.443992][T30736] ? import_iovec+0x73/0xa0 [ 701.444044][T30736] ___sys_sendmsg+0x2a5/0x360 [ 701.444064][T30736] ? rcu_is_watching+0x15/0xb0 [ 701.444078][T30736] ? get_pid_task+0x20/0x1f0 [ 701.444093][T30736] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.444115][T30736] ? rcu_is_watching+0x15/0xb0 [ 701.444142][T30736] ? __fget_files+0x2a/0x420 [ 701.444158][T30736] ? __fget_files+0x3a2/0x420 [ 701.444179][T30736] __x64_sys_sendmsg+0x1b1/0x290 [ 701.444202][T30736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 701.444224][T30736] ? rcu_is_watching+0x15/0xb0 [ 701.444236][T30736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.444249][T30736] do_syscall_64+0x174/0x580 [ 701.444269][T30736] ? trace_irq_disable+0x3b/0x140 [ 701.444289][T30736] ? clear_bhb_loop+0x40/0x90 [ 701.444306][T30736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.444322][T30736] RIP: 0033:0x7f8ba839ce59 [ 701.444336][T30736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.444350][T30736] RSP: 002b:00007f8ba65f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.444368][T30736] RAX: ffffffffffffffda RBX: 00007f8ba8615fa0 RCX: 00007f8ba839ce59 [ 701.444379][T30736] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000009 [ 701.444390][T30736] RBP: 00007f8ba65f6090 R08: 0000000000000000 R09: 0000000000000000 [ 701.444400][T30736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.444410][T30736] R13: 00007f8ba8616038 R14: 00007f8ba8615fa0 R15: 00007ffc3cbe0598 [ 701.444429][T30736] [ 701.751259][T30743] xfrm0 speed is unknown, defaulting to 1000 [ 701.778555][T30743] lo speed is unknown, defaulting to 1000 [ 701.797073][T30746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.840471][T30750] erspan0: entered promiscuous mode [ 701.951981][T30743] lo speed is unknown, defaulting to 1000 [ 702.111078][T30768] __nla_validate_parse: 17 callbacks suppressed [ 702.111095][T30768] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6862'. [ 702.280148][T30784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6869'. [ 702.368822][T30797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6872'. [ 702.370137][T30798] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6871'. [ 702.413654][T30798] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6871'. [ 702.423934][T30801] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6871'. [ 702.538088][T30807] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6874'. [ 703.311150][T30822] FAULT_INJECTION: forcing a failure. [ 703.311150][T30822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.338391][T30822] CPU: 1 UID: 0 PID: 30822 Comm: syz.4.6877 Not tainted syzkaller #0 PREEMPT(full) [ 703.338416][T30822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 703.338425][T30822] Call Trace: [ 703.338432][T30822] [ 703.338439][T30822] dump_stack_lvl+0xe8/0x150 [ 703.338461][T30822] should_fail_ex+0x40c/0x560 [ 703.338481][T30822] _copy_from_iter+0x1d3/0x1660 [ 703.338501][T30822] ? rcu_is_watching+0x15/0xb0 [ 703.338521][T30822] ? __pfx__copy_from_iter+0x10/0x10 [ 703.338537][T30822] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 703.338560][T30822] ? netlink_sendmsg+0x650/0xb40 [ 703.338588][T30822] ? skb_put+0x112/0x210 [ 703.338609][T30822] netlink_sendmsg+0x6c0/0xb40 [ 703.338637][T30822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.338659][T30822] ? aa_sock_msg_perm+0xf1/0x1b0 [ 703.338683][T30822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 703.338703][T30822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 703.338724][T30822] ____sys_sendmsg+0x9b9/0xa20 [ 703.338768][T30822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 703.338790][T30822] ? lock_release+0x4b/0x3c0 [ 703.338813][T30822] ? import_iovec+0x73/0xa0 [ 703.338833][T30822] ___sys_sendmsg+0x2a5/0x360 [ 703.338853][T30822] ? rcu_is_watching+0x15/0xb0 [ 703.338868][T30822] ? get_pid_task+0x20/0x1f0 [ 703.338884][T30822] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.338907][T30822] ? rcu_is_watching+0x15/0xb0 [ 703.338932][T30822] ? __fget_files+0x2a/0x420 [ 703.338949][T30822] ? __fget_files+0x3a2/0x420 [ 703.338968][T30822] __x64_sys_sendmsg+0x1b1/0x290 [ 703.338990][T30822] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 703.339017][T30822] ? rcu_is_watching+0x15/0xb0 [ 703.339033][T30822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.339048][T30822] do_syscall_64+0x174/0x580 [ 703.339068][T30822] ? trace_irq_disable+0x3b/0x140 [ 703.339088][T30822] ? clear_bhb_loop+0x40/0x90 [ 703.339104][T30822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.339119][T30822] RIP: 0033:0x7f0e2599ce59 [ 703.339134][T30822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.339147][T30822] RSP: 002b:00007f0e2684c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.339165][T30822] RAX: ffffffffffffffda RBX: 00007f0e25c15fa0 RCX: 00007f0e2599ce59 [ 703.339176][T30822] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000009 [ 703.339187][T30822] RBP: 00007f0e2684c090 R08: 0000000000000000 R09: 0000000000000000 [ 703.339196][T30822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.339206][T30822] R13: 00007f0e25c16038 R14: 00007f0e25c15fa0 R15: 00007fffd8f7a7a8 [ 703.339225][T30822] [ 703.398067][T30831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6881'. [ 703.415844][T30827] netlink: 'syz.3.6880': attribute type 1 has an invalid length. [ 703.614271][T30834] netlink: 'syz.4.6882': attribute type 1 has an invalid length. [ 703.698390][T30834] 8021q: adding VLAN 0 to HW filter on device bond7 [ 703.762177][T30834] syzkaller0: entered promiscuous mode [ 703.773579][T30834] syzkaller0: entered allmulticast mode [ 703.962783][T30846] policy can only be matched on NF_INET_PRE_ROUTING [ 703.962802][T30846] unable to load match [ 704.099000][T30873] FAULT_INJECTION: forcing a failure. [ 704.099000][T30873] name failslab, interval 1, probability 0, space 0, times 0 [ 704.142090][T30873] CPU: 1 UID: 0 PID: 30873 Comm: syz.4.6892 Not tainted syzkaller #0 PREEMPT(full) [ 704.142113][T30873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.142122][T30873] Call Trace: [ 704.142128][T30873] [ 704.142134][T30873] dump_stack_lvl+0xe8/0x150 [ 704.142170][T30873] should_fail_ex+0x40c/0x560 [ 704.142189][T30873] should_failslab+0xa8/0x100 [ 704.142211][T30873] __kmalloc_noprof+0xe8/0x750 [ 704.142230][T30873] ? lock_release+0x4b/0x3c0 [ 704.142251][T30873] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 704.142273][T30873] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 704.142296][T30873] genl_family_rcv_msg_doit+0xda/0x340 [ 704.142316][T30873] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 704.142337][T30873] ? apparmor_capable+0x126/0x170 [ 704.142357][T30873] ? bpf_lsm_capable+0x9/0x20 [ 704.142372][T30873] ? security_capable+0x7e/0x2c0 [ 704.142526][T30873] genl_rcv_msg+0x614/0x7a0 [ 704.142544][T30873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 704.142560][T30873] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 704.142621][T30873] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 704.142665][T30873] ? __pfx_nl80211_post_doit+0x10/0x10 [ 704.142680][T30873] ? __netlink_lookup+0xc6/0x8b0 [ 704.142694][T30873] ? rcu_is_watching+0x15/0xb0 [ 704.142715][T30873] netlink_rcv_skb+0x226/0x4a0 [ 704.142737][T30873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 704.142753][T30873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 704.142777][T30873] ? down_read+0x2be/0x330 [ 704.142854][T30873] genl_rcv+0x28/0x40 [ 704.142869][T30873] netlink_unicast+0x7bb/0x940 [ 704.142891][T30873] netlink_sendmsg+0x813/0xb40 [ 704.142915][T30873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.142935][T30873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 704.142951][T30873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 704.142967][T30873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.142988][T30873] ____sys_sendmsg+0x9b9/0xa20 [ 704.143013][T30873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.143033][T30873] ? lock_release+0x4b/0x3c0 [ 704.143055][T30873] ? import_iovec+0x73/0xa0 [ 704.143076][T30873] ___sys_sendmsg+0x2a5/0x360 [ 704.143095][T30873] ? rcu_is_watching+0x15/0xb0 [ 704.143109][T30873] ? get_pid_task+0x20/0x1f0 [ 704.143124][T30873] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.143155][T30873] ? rcu_is_watching+0x15/0xb0 [ 704.143179][T30873] ? __fget_files+0x2a/0x420 [ 704.143195][T30873] ? __fget_files+0x3a2/0x420 [ 704.143216][T30873] __x64_sys_sendmsg+0x1b1/0x290 [ 704.143238][T30873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 704.143265][T30873] ? rcu_is_watching+0x15/0xb0 [ 704.143281][T30873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.143298][T30873] do_syscall_64+0x174/0x580 [ 704.143317][T30873] ? trace_irq_disable+0x3b/0x140 [ 704.143336][T30873] ? clear_bhb_loop+0x40/0x90 [ 704.143352][T30873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.143366][T30873] RIP: 0033:0x7f0e2599ce59 [ 704.143381][T30873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.143394][T30873] RSP: 002b:00007f0e2684c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.143411][T30873] RAX: ffffffffffffffda RBX: 00007f0e25c15fa0 RCX: 00007f0e2599ce59 [ 704.143422][T30873] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000009 [ 704.143431][T30873] RBP: 00007f0e2684c090 R08: 0000000000000000 R09: 0000000000000000 [ 704.143441][T30873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.143450][T30873] R13: 00007f0e25c16038 R14: 00007f0e25c15fa0 R15: 00007fffd8f7a7a8 [ 704.143467][T30873] [ 704.627969][T30893] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6899'. [ 704.663740][T30899] netlink: 'syz.2.6898': attribute type 21 has an invalid length. [ 704.681267][T30899] IPv6: NLM_F_CREATE should be specified when creating new route [ 704.692363][T30899] netlink: 'syz.2.6898': attribute type 1 has an invalid length. [ 704.714685][T30896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6900'. [ 704.815843][T30917] FAULT_INJECTION: forcing a failure. [ 704.815843][T30917] name failslab, interval 1, probability 0, space 0, times 0 [ 704.828540][T30917] CPU: 1 UID: 0 PID: 30917 Comm: syz.6.6906 Not tainted syzkaller #0 PREEMPT(full) [ 704.828563][T30917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.828572][T30917] Call Trace: [ 704.828578][T30917] [ 704.828584][T30917] dump_stack_lvl+0xe8/0x150 [ 704.828607][T30917] should_fail_ex+0x40c/0x560 [ 704.828627][T30917] should_failslab+0xa8/0x100 [ 704.828647][T30917] ? skb_clone+0x212/0x3a0 [ 704.828661][T30917] kmem_cache_alloc_noprof+0x87/0x650 [ 704.828679][T30917] ? lock_acquire+0x5f/0x350 [ 704.828703][T30917] skb_clone+0x212/0x3a0 [ 704.828715][T30917] ? dev_queue_xmit_nit+0x25c/0xac0 [ 704.828843][T30917] dev_queue_xmit_nit+0x28d/0xac0 [ 704.828863][T30917] ? dev_queue_xmit_nit+0x2d/0xac0 [ 704.828884][T30917] dev_hard_start_xmit+0x1c1/0x830 [ 704.828911][T30917] __dev_queue_xmit+0x1435/0x37f0 [ 704.828925][T30917] ? ____sys_sendmsg+0x9b9/0xa20 [ 704.828945][T30917] ? ___sys_sendmsg+0x2a5/0x360 [ 704.828969][T30917] ? __dev_queue_xmit+0x29b/0x37f0 [ 704.828987][T30917] ? __pfx___dev_queue_xmit+0x10/0x10 [ 704.829007][T30917] ? __copy_skb_header+0xa3/0x4a0 [ 704.829031][T30917] ? __skb_clone+0x449/0x6c0 [ 704.829053][T30917] ? skb_clone+0x246/0x3a0 [ 704.829076][T30917] __netlink_deliver_tap+0x5b4/0x860 [ 704.829103][T30917] ? netlink_deliver_tap+0x2e/0x1b0 [ 704.829124][T30917] netlink_deliver_tap+0x19c/0x1b0 [ 704.829146][T30917] netlink_unicast+0x77f/0x940 [ 704.829169][T30917] netlink_sendmsg+0x813/0xb40 [ 704.829195][T30917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.829217][T30917] ? aa_sock_msg_perm+0xf1/0x1b0 [ 704.829234][T30917] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 704.829252][T30917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.829275][T30917] ____sys_sendmsg+0x9b9/0xa20 [ 704.829299][T30917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.829320][T30917] ? lock_release+0x4b/0x3c0 [ 704.829341][T30917] ? import_iovec+0x73/0xa0 [ 704.829363][T30917] ___sys_sendmsg+0x2a5/0x360 [ 704.829383][T30917] ? rcu_is_watching+0x15/0xb0 [ 704.829398][T30917] ? get_pid_task+0x20/0x1f0 [ 704.829414][T30917] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.829435][T30917] ? rcu_is_watching+0x15/0xb0 [ 704.829460][T30917] ? __fget_files+0x2a/0x420 [ 704.829475][T30917] ? __fget_files+0x3a2/0x420 [ 704.829492][T30917] __x64_sys_sendmsg+0x1b1/0x290 [ 704.829514][T30917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 704.829539][T30917] ? rcu_is_watching+0x15/0xb0 [ 704.829555][T30917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.829569][T30917] do_syscall_64+0x174/0x580 [ 704.829587][T30917] ? trace_irq_disable+0x3b/0x140 [ 704.829605][T30917] ? clear_bhb_loop+0x40/0x90 [ 704.829622][T30917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.829635][T30917] RIP: 0033:0x7f44a879ce59 [ 704.829651][T30917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.829664][T30917] RSP: 002b:00007f44a9742028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.829681][T30917] RAX: ffffffffffffffda RBX: 00007f44a8a15fa0 RCX: 00007f44a879ce59 [ 704.829692][T30917] RDX: 0000000000028000 RSI: 0000200000006000 RDI: 0000000000000009 [ 704.829703][T30917] RBP: 00007f44a9742090 R08: 0000000000000000 R09: 0000000000000000 [ 704.829713][T30917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.829722][T30917] R13: 00007f44a8a16038 R14: 00007f44a8a15fa0 R15: 00007ffd09cc50f8 [ 704.829741][T30917] [ 705.236052][T30926] xt_TPROXY: Can be used only with -p tcp or -p udp [ 705.254648][T30927] netlink: 'syz.3.6908': attribute type 24 has an invalid length. [ 705.434643][T30941] netlink: 'syz.4.6915': attribute type 17 has an invalid length. [ 705.469686][T30945] netlink: 'syz.0.6912': attribute type 1 has an invalid length. [ 705.478454][T30941] erspan0: entered promiscuous mode [ 705.492424][T30941] erspan0: left promiscuous mode [ 705.632192][T30960] netlink: 'syz.6.6919': attribute type 10 has an invalid length. [ 705.699576][T30968] netlink: 'syz.3.6916': attribute type 10 has an invalid length. [ 705.719559][T30970] FAULT_INJECTION: forcing a failure. [ 705.719559][T30970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.739852][T30970] CPU: 0 UID: 0 PID: 30970 Comm: syz.4.6921 Not tainted syzkaller #0 PREEMPT(full) [ 705.739883][T30970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 705.739893][T30970] Call Trace: [ 705.739900][T30970] [ 705.739907][T30970] dump_stack_lvl+0xe8/0x150 [ 705.739931][T30970] should_fail_ex+0x40c/0x560 [ 705.739951][T30970] _copy_from_user+0x2d/0xb0 [ 705.739972][T30970] kstrtouint_from_user+0xd6/0x180 [ 705.739989][T30970] ? __might_fault+0xaf/0x130 [ 705.740043][T30970] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 705.740062][T30970] ? __mutex_trylock_common+0x15f/0x270 [ 705.740081][T30970] ? vfs_write+0x22b/0xba0 [ 705.740106][T30970] ? rcu_is_watching+0x15/0xb0 [ 705.740125][T30970] proc_fail_nth_write+0x8e/0x210 [ 705.740166][T30970] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 705.740186][T30970] ? preempt_count_add+0x91/0x190 [ 705.740208][T30970] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 705.740227][T30970] vfs_write+0x296/0xba0 [ 705.740250][T30970] ? __pfx_vfs_write+0x10/0x10 [ 705.740272][T30970] ? __fget_files+0x3a2/0x420 [ 705.740289][T30970] ? __fget_files+0x2a/0x420 [ 705.740309][T30970] ksys_write+0x150/0x270 [ 705.740329][T30970] ? __pfx_ksys_write+0x10/0x10 [ 705.740350][T30970] ? rcu_is_watching+0x15/0xb0 [ 705.740365][T30970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.740381][T30970] do_syscall_64+0x174/0x580 [ 705.740402][T30970] ? trace_irq_disable+0x3b/0x140 [ 705.740422][T30970] ? clear_bhb_loop+0x40/0x90 [ 705.740440][T30970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.740455][T30970] RIP: 0033:0x7f0e2595d68e [ 705.740470][T30970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 705.740484][T30970] RSP: 002b:00007f0e2684bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 705.740501][T30970] RAX: ffffffffffffffda RBX: 00007f0e2684c6c0 RCX: 00007f0e2595d68e [ 705.740512][T30970] RDX: 0000000000000001 RSI: 00007f0e2684c0a0 RDI: 000000000000000c [ 705.740522][T30970] RBP: 00007f0e2684c090 R08: 0000000000000000 R09: 0000000000000000 [ 705.740532][T30970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.740541][T30970] R13: 00007f0e25c16038 R14: 00007f0e25c15fa0 R15: 00007fffd8f7a7a8 [ 705.740559][T30970] [ 705.764716][T30968] team0: Port device geneve1 added [ 706.159072][T30984] netlink: 'syz.2.6925': attribute type 1 has an invalid length. [ 706.210090][T30984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 706.212590][T30989] x_tables: duplicate underflow at hook 2 [ 706.324502][T30994] can: request_module (can-proto-0) failed. [ 706.514705][T31024] bridge4: entered promiscuous mode [ 706.520083][T31024] bridge4: entered allmulticast mode [ 706.598609][T31035] netlink: 'syz.3.6941': attribute type 1 has an invalid length. [ 706.659314][T31037] netlink: 'syz.6.6942': attribute type 5 has an invalid length. [ 706.724942][T31043] xfrm0 speed is unknown, defaulting to 1000 [ 706.742868][T31043] lo speed is unknown, defaulting to 1000 [ 706.932809][T31043] lo speed is unknown, defaulting to 1000 [ 707.122366][T31082] __nla_validate_parse: 9 callbacks suppressed [ 707.122384][T31082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6955'. [ 707.144732][T31082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6955'. [ 707.179393][T31084] netlink: 'syz.6.6957': attribute type 1 has an invalid length. [ 707.181798][T31081] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6956'. [ 707.342258][T31093] netlink: 'syz.6.6961': attribute type 18 has an invalid length. [ 707.372768][T24908] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.409075][T31095] tipc: Enabling of bearer rejected, media not registered [ 707.422162][T24908] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.458719][T24908] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.499497][T13892] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.522194][T31116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6967'. [ 707.551857][T31116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6967'. [ 707.602647][T31100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6964'. [ 707.677868][T31116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6967'. [ 707.689921][T31116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6967'. [ 707.708428][T31116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6967'. [ 707.718197][T31116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6967'. [ 707.929908][T31141] openvswitch: netlink: IP tunnel TTL not specified. [ 708.112920][T31155] x_tables: unsorted underflow at hook 1 [ 708.182242][T31154] tipc: Started in network mode [ 708.194800][T31154] tipc: Node identity 562587758179, cluster identity 4711 [ 708.202846][T31154] tipc: Enabled bearer , priority 11 [ 708.269632][T31163] 8021q: adding VLAN 0 to HW filter on device bond4 [ 708.295482][T31163] bond4: (slave veth3): Enslaving as an active interface with a down link [ 708.398632][T31163] bond4: (slave veth0_to_bond): making interface the new active one [ 708.436157][T31163] veth0_to_bond: entered promiscuous mode [ 708.442371][T31163] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 708.688482][T31197] lo: entered allmulticast mode [ 708.708510][T31197] tunl0: entered allmulticast mode [ 708.730428][T31197] gre0: entered allmulticast mode [ 708.766394][T31197] gretap0: entered allmulticast mode [ 708.786774][T31197] erspan0: entered allmulticast mode [ 708.797693][T31197] ip_vti0: entered allmulticast mode [ 708.805539][T31197] ip6_vti0: entered allmulticast mode [ 708.819122][T31197] sit0: entered allmulticast mode [ 708.835296][T31197] ip6tnl0: entered allmulticast mode [ 708.845593][T31197] ip6gre0: entered allmulticast mode [ 708.855282][T31197] syz_tun: entered allmulticast mode [ 708.969494][T31212] bond5: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 708.982046][T31212] bond5 (unregistering): Released all slaves [ 709.013713][T31210] bond8: entered promiscuous mode [ 709.019120][T31210] 8021q: adding VLAN 0 to HW filter on device bond8 [ 709.038403][T31216] 8021q: adding VLAN 0 to HW filter on device bond8 [ 709.046190][T31216] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 709.058354][T31216] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 709.071770][T31216] bond8: (slave ip6gre1): making interface the new active one [ 709.082126][T31216] ip6gre1: entered promiscuous mode [ 709.090030][T31216] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 709.338318][T25980] tipc: Node number set to 3613165429 [ 709.364325][T31248] veth0_to_team: entered promiscuous mode [ 709.371204][T31248] gretap0: entered promiscuous mode [ 709.579230][T31276] xt_hashlimit: size too large, truncated to 1048576 [ 709.648177][ T30] audit: type=1107 audit(1782161864.136:26): pid=31283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 709.650417][T31280] tipc: Enabled bearer , priority 0 [ 709.692376][T31280] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 709.704834][T31285] tipc: Resetting bearer [ 709.721515][T31279] tipc: Disabling bearer [ 709.731753][T31288] syzkaller1: entered promiscuous mode [ 709.751599][T31288] syzkaller1: entered allmulticast mode [ 709.806923][T31291] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 709.938483][T31307] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.043763][T31316] macvtap1: entered allmulticast mode [ 710.143567][T31323] bond4: (slave bridge5): making interface the new active one [ 710.152455][T31323] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 710.282839][T31339] tipc: Failed to remove unknown binding: 66,0,0/3613165429:2017714195/2017714197 [ 710.303676][T31339] tipc: Failed to remove unknown binding: 66,0,0/3613165429:2017714195/2017714196 [ 710.326368][T31339] tipc: Failed to remove unknown binding: 66,0,0/3613165429:2017714195/2017714197 [ 710.345316][T31339] tipc: Failed to remove unknown binding: 66,0,0/3613165429:2017714195/2017714196 [ 710.887941][T31386] syzkaller0: entered promiscuous mode [ 710.902542][T31386] syzkaller0: entered allmulticast mode [ 711.124518][T31414] syzkaller1: entered promiscuous mode [ 711.130125][T31414] syzkaller1: entered allmulticast mode [ 711.248100][T31419] syzkaller0: entered promiscuous mode [ 711.254549][T31419] syzkaller0: entered allmulticast mode [ 711.379752][T31436] syzkaller1: entered promiscuous mode [ 711.387089][T31436] syzkaller1: entered allmulticast mode [ 711.434018][T31444] syzkaller0: entered promiscuous mode [ 711.439594][T31444] syzkaller0: entered allmulticast mode [ 711.448654][T31444] validate_nla: 71 callbacks suppressed [ 711.448666][T31444] netlink: 'syz.3.7074': attribute type 4 has an invalid length. [ 711.468675][T31444] netlink: 'syz.3.7074': attribute type 1 has an invalid length. [ 711.477026][T31444] netlink: 'syz.3.7074': attribute type 3 has an invalid length. [ 711.488786][T31444] netlink: 'syz.3.7074': attribute type 7 has an invalid length. [ 711.497281][T31444] netlink: 'syz.3.7074': attribute type 8 has an invalid length. [ 711.505831][T31444] NCSI netlink: No device for ifindex 131092 [ 711.621154][T31458] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 711.642452][T31457] syzkaller0: entered promiscuous mode [ 711.654724][T31457] syzkaller0: entered allmulticast mode [ 712.011423][T31487] bond0: option miimon: invalid value (18446744071829782528) [ 712.030733][T31487] bond0: option miimon: allowed values 0 - 2147483647 [ 712.051790][T31487] netlink: 'syz.4.7086': attribute type 12 has an invalid length. [ 712.062340][T31487] netlink: 'syz.4.7086': attribute type 29 has an invalid length. [ 712.140588][T31505] __nla_validate_parse: 125 callbacks suppressed [ 712.140607][T31505] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7092'. [ 712.208993][T31513] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7090'. [ 712.215893][T31512] batadv_slave_1: entered promiscuous mode [ 712.235134][T31513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7090'. [ 712.240899][T31512] tipc: Enabled bearer , priority 0 [ 712.252006][T31515] Cannot find add_set index 2 as target [ 712.258785][T31511] batadv_slave_1: left promiscuous mode [ 712.270070][T31511] tipc: Disabling bearer [ 712.495967][T31539] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7104'. [ 712.548858][T31545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7105'. [ 712.552309][T31548] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7106'. [ 712.569928][T31546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7105'. [ 712.733855][T31567] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7111'. [ 712.745974][T31568] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7111'. [ 712.808739][T31567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7111'. [ 712.847698][T31577] bond2: entered promiscuous mode [ 713.181930][T31610] syzkaller0: entered promiscuous mode [ 713.189308][T31610] syzkaller0: entered allmulticast mode [ 713.324416][T31625] xt_ecn: cannot match TCP bits for non-tcp packets [ 713.627612][T31652] nbd: nbd0 already in use [ 713.904686][T31683] syzkaller0: entered promiscuous mode [ 713.910417][T31683] syzkaller0: entered allmulticast mode [ 713.973874][T31686] netlink: 'syz.4.7154': attribute type 1 has an invalid length. [ 713.981849][T31685] netlink: 'syz.4.7154': attribute type 1 has an invalid length. [ 714.030177][T31686] 8021q: adding VLAN 0 to HW filter on device bond10 [ 714.119068][T31690] tipc: Started in network mode [ 714.125613][T31690] tipc: Node identity 5638b8ffcd68, cluster identity 4711 [ 714.132900][T31690] tipc: Enabled bearer , priority 0 [ 714.141650][T31690] syzkaller0: entered promiscuous mode [ 714.148094][T31690] syzkaller0: entered allmulticast mode [ 714.156470][T31690] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 714.172504][T31690] tipc: Resetting bearer [ 714.180908][T31689] tipc: Resetting bearer [ 714.196274][T31689] tipc: Disabling bearer [ 714.291081][T31707] syzkaller0: entered promiscuous mode [ 714.297784][T31707] syzkaller0: entered allmulticast mode [ 714.328241][T31714] veth1_to_bond: entered allmulticast mode [ 714.420199][T31723] netlink: 'syz.6.7161': attribute type 10 has an invalid length. [ 714.450474][T31713] veth1_to_bond: left allmulticast mode [ 714.682727][T31750] xt_CONNSECMARK: invalid mode: 0 [ 714.738316][T31754] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 714.874237][T31767] bond5: (slave geneve2): making interface the new active one [ 714.882712][T31767] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 714.893205][T13892] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 714.908202][T31767] 8021q: adding VLAN 0 to HW filter on device bond5 [ 714.926847][T13892] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 714.964159][T13892] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 715.002452][T13892] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 715.052539][T31783] veth1_macvtap: left promiscuous mode [ 715.058979][T31783] macsec0: entered allmulticast mode [ 718.043537][T31783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.190373][T31826] xfrm0 speed is unknown, defaulting to 1000 [ 718.199984][T31824] syzkaller0: entered promiscuous mode [ 718.209033][T31824] syzkaller0: entered allmulticast mode [ 718.225713][T31826] lo speed is unknown, defaulting to 1000 [ 719.030695][T31826] lo speed is unknown, defaulting to 1000 [ 719.463861][T12137] veth0_to_bond: left promiscuous mode [ 721.186565][T31830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.390392][T31898] __nla_validate_parse: 16 callbacks suppressed [ 721.390410][T31898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7209'. [ 721.554528][T31920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7216'. [ 721.775876][T31943] syzkaller0: entered promiscuous mode [ 721.781503][T31943] syzkaller0: entered allmulticast mode [ 721.829050][T31950] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7227'. [ 721.905335][T31956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7228'. [ 721.942763][T31956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7228'. [ 721.996586][T31967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7232'. [ 722.327967][T31999] syzkaller0: entered promiscuous mode [ 722.343948][T31999] syzkaller0: entered allmulticast mode [ 722.568954][T31996] validate_nla: 4 callbacks suppressed [ 722.568972][T31996] netlink: 'syz.2.7242': attribute type 1 has an invalid length. [ 722.753807][T32021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7250'. [ 722.881855][T32021] hsr_slave_1 (unregistering): left promiscuous mode [ 722.900367][T32029] netlink: 'syz.4.7252': attribute type 4 has an invalid length. [ 723.142226][T32053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7256'. [ 723.186542][T32058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7257'. [ 723.209274][T32061] bridge_slave_0: left allmulticast mode [ 723.233482][T32061] bridge_slave_0: left promiscuous mode [ 723.255108][T32061] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.338179][T32061] bridge_slave_1: left allmulticast mode [ 723.365153][T32061] bridge_slave_1: left promiscuous mode [ 723.379909][T32061] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.397960][T32073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7260'. [ 723.439091][T32061] bond0: (slave bond_slave_0): Releasing backup interface [ 723.479644][T32061] bond0: (slave bond_slave_1): Releasing backup interface [ 723.499824][T32061] team0: Port device team_slave_0 removed [ 723.508174][T32061] team0: Port device team_slave_1 removed [ 723.520889][T32061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.529499][T32061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.544660][T32061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 723.573524][T32053] veth1_to_bridge: entered allmulticast mode [ 723.611046][T32073] gretap0: entered promiscuous mode [ 723.638061][T32073] gretap0: left promiscuous mode [ 724.016578][T32087] syzkaller0: entered promiscuous mode [ 724.039368][T32087] syzkaller0: entered allmulticast mode [ 724.608865][T32154] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR [ 724.785867][T32203] netlink: 'syz.0.7289': attribute type 58 has an invalid length. [ 727.626314][T32186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.752744][T32228] openvswitch: netlink: Message has 1 unknown bytes. [ 727.754004][T32225] __nla_validate_parse: 15 callbacks suppressed [ 727.754023][T32225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7297'. [ 727.772546][T32228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.792881][T32228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7300'. [ 727.880597][T32225] 8021q: adding VLAN 0 to HW filter on device bond5 [ 727.956428][T32250] netlink: 'syz.3.7308': attribute type 1 has an invalid length. [ 727.965455][T32250] netlink: 'syz.3.7308': attribute type 2 has an invalid length. [ 727.976084][T32247] : entered promiscuous mode [ 728.081939][T32261] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7312'. [ 728.095150][T32261] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 728.172904][T32274] veth0_to_bridge: entered promiscuous mode [ 728.266502][T13887] tipc: Subscription rejected, illegal request [ 728.329457][T32286] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 728.337704][T32273] veth0_to_bridge: left promiscuous mode [ 728.398673][T32299] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 728.425772][T32304] syzkaller0: entered promiscuous mode [ 728.431762][T32304] syzkaller0: entered allmulticast mode [ 728.431813][T32299] xt_TPROXY: Can be used only with -p tcp or -p udp [ 728.498874][T32305] bond3: Removing last ns target with arp_interval on [ 728.532105][T32311] bridge58: entered promiscuous mode [ 728.541049][T32311] bridge58: entered allmulticast mode [ 728.600375][T32320] netlink: 'syz.3.7330': attribute type 29 has an invalid length. [ 728.612041][T32320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7330'. [ 728.625758][T32320] tipc: Enabled bearer , priority 0 [ 728.633325][T32320] syzkaller0: entered promiscuous mode [ 728.638945][T32320] syzkaller0: entered allmulticast mode [ 728.647701][T32320] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 728.660816][T32320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7330'. [ 728.689661][T32320] tipc: Resetting bearer [ 728.715464][T32319] tipc: Resetting bearer [ 728.734488][T32319] tipc: Disabling bearer [ 729.039449][T32351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7338'. [ 729.051893][T32351] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7338'. [ 729.061558][T32353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7338'. [ 729.074080][T32353] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7338'. [ 729.149642][T32361] veth0: entered promiscuous mode [ 729.159027][T32361] veth0: left promiscuous mode [ 729.159955][T32360] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 729.261173][T32366] syzkaller1: entered promiscuous mode [ 729.276999][T32366] syzkaller1: entered allmulticast mode [ 729.288433][T32379] netlink: 'syz.2.7348': attribute type 4 has an invalid length. [ 729.328338][T32375] bond3: entered promiscuous mode [ 729.334307][T32375] bond3: entered allmulticast mode [ 729.341044][T32375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 729.341147][T32384] netlink: 'syz.2.7348': attribute type 4 has an invalid length. [ 729.359149][T32366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7344'. [ 729.481493][T32394] netlink: 'syz.3.7353': attribute type 1 has an invalid length. [ 729.552933][T32399] sctp: [Deprecated]: syz.4.7354 (pid 32399) Use of int in maxseg socket option. [ 729.552933][T32399] Use struct sctp_assoc_value instead [ 729.617574][T32399] netlink: 'syz.4.7354': attribute type 5 has an invalid length. [ 729.819217][T32429] nbd: socks must be embedded in a SOCK_ITEM attr [ 729.828382][T32429] xt_hashlimit: size too large, truncated to 1048576 [ 729.840354][T32434] netlink: 'syz.4.7363': attribute type 9 has an invalid length. [ 730.067313][T32451] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.110551][T32451] bridge_slave_0 (unregistering): left allmulticast mode [ 730.154531][T32451] bridge_slave_0 (unregistering): left promiscuous mode [ 730.161980][T32451] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.314223][T32479] netlink: 'syz.4.7374': attribute type 33 has an invalid length. [ 730.331561][T32482] tipc: Trying to set illegal importance in message [ 730.336301][T32479] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 730.341346][T32482] tipc: Trying to set illegal importance in message [ 730.357980][T32482] tipc: Trying to set illegal importance in message [ 730.358259][T32479] bond12 (unregistering): Released all slaves [ 730.774108][T32516] 8021q: adding VLAN 0 to HW filter on device bond5 [ 730.825030][T32516] bond5 (unregistering): Released all slaves [ 730.838129][T32529] openvswitch: netlink: Missing valid actions attribute. [ 730.851654][T32529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.992163][T32542] tipc: Enabled bearer , priority 0 [ 731.000148][T32542] syzkaller0: entered promiscuous mode [ 731.007596][T32542] syzkaller0: entered allmulticast mode [ 731.022339][T32542] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 731.068609][T32542] tipc: Resetting bearer [ 731.086793][T32541] tipc: Resetting bearer [ 731.088383][T32548] netlink: 'syz.3.7394': attribute type 1 has an invalid length. [ 731.118467][T32541] tipc: Disabling bearer [ 731.135256][T32554] netlink: 'syz.2.7398': attribute type 11 has an invalid length. [ 731.178189][T32554] netlink: 'syz.2.7398': attribute type 11 has an invalid length. [ 731.186296][T32548] bond6: entered promiscuous mode [ 731.186623][T32548] 8021q: adding VLAN 0 to HW filter on device bond6 [ 731.199063][T32563] bond6: (slave bridge1): making interface the new active one [ 731.199089][T32563] bridge1: entered promiscuous mode [ 731.206826][T32563] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 731.320082][T32576] openvswitch: netlink: Message has -2 unknown bytes. [ 731.447583][T32596] netlink: 'syz.2.7409': attribute type 11 has an invalid length. [ 731.471276][T32595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 731.492883][T32595] 8021q: VLANs not supported on lo [ 731.506018][T32602] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 731.632341][T32609] 8021q: adding VLAN 0 to HW filter on device bond5 [ 731.766763][T32631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 732.236269][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805768cc00: rx timeout, send abort [ 732.245583][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805768cc00: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 732.304742][T32655] vti0: entered promiscuous mode [ 732.310493][T32655] vti0: entered allmulticast mode [ 732.651156][T32692] syzkaller0: entered promiscuous mode [ 732.671578][T32692] syzkaller0: entered allmulticast mode [ 732.723371][T12137] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.767280][T32696] 8021q: adding VLAN 0 to HW filter on device bond6 [ 732.790767][T12137] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.807642][T12137] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.826401][T32700] ip_vti0: entered promiscuous mode [ 732.853728][T12137] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.892646][T32708] veth5: entered allmulticast mode [ 732.958107][T32719] __nla_validate_parse: 20 callbacks suppressed [ 732.958125][T32719] netlink: 92 bytes leftover after parsing attributes in process `syz.6.7445'. [ 733.062900][T32725] validate_nla: 11 callbacks suppressed [ 733.062919][T32725] netlink: 'syz.4.7446': attribute type 1 has an invalid length. [ 733.084286][T32725] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7446'. [ 733.120810][T32727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7448'. [ 733.126957][T32725] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7446'. [ 733.150434][T32727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.211622][T32748] syzkaller0: entered promiscuous mode [ 733.218071][T32748] syzkaller0: entered allmulticast mode [ 733.229010][T32727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.292178][T32727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.293876][T32751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7453'. [ 733.408704][T32762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 733.416042][T32762] IPv6: NLM_F_CREATE should be set when creating new route [ 733.423349][T32762] IPv6: NLM_F_CREATE should be set when creating new route [ 733.430587][T32762] IPv6: NLM_F_CREATE should be set when creating new route [ 733.444014][T32762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 733.604809][ T308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7462'. [ 733.707201][ T314] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 733.714164][ T313] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 733.900441][ T335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7470'. [ 733.926958][ T335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7470'. [ 733.979946][ T340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7473'. [ 734.088926][ T343] netlink: 'syz.3.7472': attribute type 9 has an invalid length. [ 734.090219][ T354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.106653][ T354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.164932][ T356] syzkaller0: entered promiscuous mode [ 734.178571][ T356] syzkaller0: entered allmulticast mode [ 734.219517][ T363] netlink: 'syz.3.7480': attribute type 1 has an invalid length. [ 734.238150][ T363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7480'. [ 734.294539][ T368] bridge_slave_1 (unregistering): left allmulticast mode [ 734.310485][ T368] bridge_slave_1 (unregistering): left promiscuous mode [ 734.331031][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.821303][ T415] veth0_to_bond: left allmulticast mode [ 734.875692][ T415] vlan3: left allmulticast mode [ 734.893612][ T415] bond0: left allmulticast mode [ 734.906981][ T415] bond_slave_0: left allmulticast mode [ 734.912557][ T415] bond_slave_1: left allmulticast mode [ 734.923842][ T415] gretap1: left allmulticast mode [ 734.929835][ T415] ip6tnl1: left allmulticast mode [ 734.937832][ T411] syzkaller0: entered promiscuous mode [ 734.944144][ T411] syzkaller0: entered allmulticast mode [ 735.131397][ T448] netlink: 'syz.3.7502': attribute type 1 has an invalid length. [ 735.367639][ T464] netlink: 'syz.4.7506': attribute type 1 has an invalid length. [ 735.391371][ T464] netlink: 'syz.4.7506': attribute type 11 has an invalid length. [ 735.420270][ T464] ip6gre2: entered promiscuous mode [ 735.426103][ T464] ip6gre2: entered allmulticast mode [ 735.452583][ T464] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 735.588333][ T478] IPVS: Error connecting to the multicast addr [ 735.656451][T25712] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 735.670542][T25712] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 735.685627][T19784] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 735.704139][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 736.004222][T19784] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 736.034833][ T540] openvswitch: netlink: Key type 218 is out of range max 32 [ 736.083978][T19784] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 736.118637][ T547] netlink: 'syz.2.7530': attribute type 83 has an invalid length. [ 736.182018][ T543] syzkaller0: entered promiscuous mode [ 736.207001][ T543] syzkaller0: entered allmulticast mode [ 736.352009][ T574] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 736.448503][ T578] sctp: [Deprecated]: syz.2.7538 (pid 578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 736.448503][ T578] Use struct sctp_sack_info instead [ 736.921893][ T617] tipc: Enabled bearer , priority 10 [ 736.932242][ T617] tipc: Enabling of bearer rejected, already enabled [ 736.945809][ T620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 736.954385][ T617] tipc: Enabling of bearer rejected, already enabled [ 736.962376][ T617] tipc: Enabling of bearer rejected, already enabled [ 736.975403][ T617] tipc: Enabling of bearer rejected, already enabled [ 736.984129][ T617] tipc: Enabling of bearer rejected, already enabled [ 736.992738][ T622] netlink: 'syz.4.7547': attribute type 1 has an invalid length. [ 737.001695][ T622] netlink: 'syz.4.7547': attribute type 1 has an invalid length. [ 737.010972][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.021568][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.030303][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.043538][ T622] netlink: 'syz.4.7547': attribute type 83 has an invalid length. [ 737.052123][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.067604][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.078120][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.096790][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.121874][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.146724][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.159111][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.168853][ T632] bond2: left allmulticast mode [ 737.175111][ T632] bond2: left promiscuous mode [ 737.180499][ T632] bridge0: port 4(bond2) entered disabled state [ 737.366947][ T631] rdma_rxe: rxe_newlink: failed to add lo [ 737.380653][ T632] geneve2: left allmulticast mode [ 737.386870][ T632] geneve2: left promiscuous mode [ 737.392250][ T632] bridge0: port 3(geneve2) entered disabled state [ 737.417531][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.430448][ T633] smc: net device team0 applied user defined pnetid SYZ2 [ 737.451385][ T637] smc: net device team0 erased user defined pnetid SYZ2 [ 737.459808][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.468968][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.477773][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.492178][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.514150][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.529782][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.548371][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.565203][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.586473][ T644] erspan0: entered promiscuous mode [ 737.591965][ T644] vlan3: entered promiscuous mode [ 737.609350][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.617948][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.626946][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.637150][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.645761][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.655988][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.675098][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.690750][ T617] tipc: Enabling of bearer rejected, already enabled [ 737.746239][ T657] x_tables: duplicate underflow at hook 3 [ 737.786161][ T5630] Bluetooth: hci0: command 0x040f tx timeout [ 737.881483][ T669] syzkaller0: entered promiscuous mode [ 737.908130][ T669] syzkaller0: entered allmulticast mode [ 737.971614][ T673] xfrm0 speed is unknown, defaulting to 1000 [ 737.981633][ T673] lo speed is unknown, defaulting to 1000 [ 737.994955][ T685] __nla_validate_parse: 14 callbacks suppressed [ 737.994974][ T685] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7567'. [ 738.017271][ T685] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7567'. [ 738.033630][T19785] tipc: Node number set to 3828854752 [ 738.232587][ T704] syzkaller0: entered promiscuous mode [ 738.234925][ T708] IPv6: Can't replace route, no match found [ 738.254918][ T704] syzkaller0: entered allmulticast mode [ 738.357675][ T704] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 738.418221][ T673] lo speed is unknown, defaulting to 1000 [ 738.661081][ T742] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7588'. [ 738.784379][ T749] validate_nla: 1 callbacks suppressed [ 738.784398][ T749] netlink: 'syz.3.7591': attribute type 14 has an invalid length. [ 738.804863][ T749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7591'. [ 738.852810][ T749] netlink: 'syz.3.7591': attribute type 14 has an invalid length. [ 738.870897][ T749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7591'. [ 738.899333][ T749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.055018][ T759] netlink: 'syz.2.7594': attribute type 2 has an invalid length. [ 739.212465][ T781] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7600'. [ 739.260808][ T790] netlink: 13 bytes leftover after parsing attributes in process `syz.0.7602'. [ 739.279282][ T790] netlink: 'syz.0.7602': attribute type 8 has an invalid length. [ 739.331291][ T791] netlink: 'syz.3.7603': attribute type 1 has an invalid length. [ 739.344978][ T781] netlink: 'syz.2.7600': attribute type 2 has an invalid length. [ 739.358121][ T791] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 739.361850][ T795] netlink: 'syz.4.7604': attribute type 3 has an invalid length. [ 739.384244][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 739.605696][ T821] vlan3: entered promiscuous mode [ 739.700562][ T806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7607'. [ 739.864260][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 739.989755][ T852] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7617'. [ 740.009152][ T852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7617'. [ 740.112156][ T863] macvlan0: entered promiscuous mode [ 740.268658][ T887] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 740.327917][ T901] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:21 [ 740.396375][ T911] netlink: 'syz.0.7633': attribute type 39 has an invalid length. [ 740.412304][ T915] netlink: 'syz.4.7634': attribute type 1 has an invalid length. [ 740.441575][ T914] macvlan2: entered promiscuous mode [ 740.449054][ T914] macvlan2: entered allmulticast mode [ 740.456316][ T914] bond12: entered promiscuous mode [ 740.462087][ T914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 740.472627][ T914] bond12: left promiscuous mode [ 740.645771][ T944] netlink: 'syz.0.7640': attribute type 5 has an invalid length. [ 741.236537][ T1008] syzkaller0: entered promiscuous mode [ 741.242261][ T1008] syzkaller0: entered allmulticast mode [ 741.349035][ T1011] syzkaller0: entered promiscuous mode [ 741.370532][ T1011] syzkaller0: entered allmulticast mode [ 741.460535][ T1012] 8021q: adding VLAN 0 to HW filter on device bond6 [ 741.489599][ T1016] bond6: (slave veth0_to_bond): making interface the new active one [ 741.506981][ T1016] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 741.620142][ T1025] syzkaller0: entered promiscuous mode [ 741.649080][ T1025] syzkaller0: entered allmulticast mode [ 741.675636][ T1030] openvswitch: netlink: Missing key (keys=40, expected=80) [ 741.982629][ T1075] syzkaller0: entered promiscuous mode [ 741.989530][ T1075] syzkaller0: entered allmulticast mode [ 742.032263][ T1067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.040468][ T1087] ip6t_srh: unknown srh match flags 4000 [ 742.049901][ T1082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.350757][ T1109] 8021q: adding VLAN 0 to HW filter on device bond13 [ 742.408455][ T1115] syzkaller0: entered promiscuous mode [ 742.429720][ T1115] syzkaller0: entered allmulticast mode [ 742.899590][ T1156] xt_policy: output policy not valid in PREROUTING and INPUT [ 742.961281][T24908] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb5 [ 743.048160][ T1170] __nla_validate_parse: 17 callbacks suppressed [ 743.048178][ T1170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7691'. [ 743.071765][ T1172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7692'. [ 743.172838][ T1179] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7693'. [ 744.263613][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 745.642372][ T1137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.720449][ T1182] validate_nla: 4 callbacks suppressed [ 745.720468][ T1182] netlink: 'syz.2.7695': attribute type 3 has an invalid length. [ 745.821000][ T1189] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7696'. [ 745.849637][ T1193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7697'. [ 745.883838][ T1193] nbd: socks must be embedded in a SOCK_ITEM attr [ 746.137753][ T1221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 746.147652][ T1221] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 746.673181][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 746.814811][ T1231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7709'. [ 747.078427][ T1242] syzkaller0: entered promiscuous mode [ 747.084891][ T1242] syzkaller0: entered allmulticast mode [ 747.093828][ T1242] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 749.066017][ T1216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.081431][ T1228] netlink: 'syz.0.7708': attribute type 1 has an invalid length. [ 749.105059][ T1228] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.7708'. [ 749.161537][ T1246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7714'. [ 749.366569][ T1269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7721'. [ 749.380457][ T1269] netlink: 50 bytes leftover after parsing attributes in process `syz.0.7721'. [ 749.398423][ T1269] netlink: 50 bytes leftover after parsing attributes in process `syz.0.7721'. [ 749.417697][ T1276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7724'. [ 749.446758][ T1276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7724'. [ 749.475051][ T1277] netlink: 'syz.2.7724': attribute type 10 has an invalid length. [ 749.510741][ T1283] veth0_macvtap: Device is already in use. [ 749.706571][ T1297] bond7: option fail_over_mac: invalid value (16) [ 749.716959][ T1297] bond7 (unregistering): Released all slaves [ 749.800493][ T1307] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 749.908127][ T1315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7733'. [ 749.938977][ T1315] openvswitch: netlink: Missing key (keys=40, expected=80) [ 749.964515][ T1320] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7736'. [ 750.172617][ T1344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7739'. [ 750.330851][ T1356] netlink: 'syz.6.7743': attribute type 3 has an invalid length. [ 750.636677][ T1382] syzkaller0: entered promiscuous mode [ 750.662932][ T1382] syzkaller0: entered allmulticast mode [ 750.831031][ T1400] bond0: Error: Cannot enslave bond to itself. [ 750.970303][ T1418] syzkaller0: entered promiscuous mode [ 750.999532][ T1418] syzkaller0: entered allmulticast mode [ 751.182164][ T1437] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 751.464795][ T1461] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 751.499964][ T1461] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 751.524050][ T1461] gretap2: entered promiscuous mode [ 751.538311][ T1461] gretap2: entered allmulticast mode [ 751.612503][ T1479] bond5 (unregistering): Released all slaves [ 751.722671][ T1491] netlink: 'syz.4.7779': attribute type 2 has an invalid length. [ 751.735626][ T1493] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 751.751544][ T1491] netlink: 'syz.4.7779': attribute type 2 has an invalid length. [ 752.077617][ T1520] syzkaller0: entered promiscuous mode [ 752.099487][ T1520] syzkaller0: entered allmulticast mode [ 752.139440][ T1525] netlink: 'syz.4.7791': attribute type 1 has an invalid length. [ 752.178834][ T1528] netlink: 'syz.6.7792': attribute type 1 has an invalid length. [ 752.198384][ T1525] 8021q: adding VLAN 0 to HW filter on device bond14 [ 752.239626][ T1530] syzkaller0: entered promiscuous mode [ 752.267364][ T1530] syzkaller0: entered allmulticast mode [ 752.626807][ T1558] netlink: 'syz.3.7799': attribute type 11 has an invalid length. [ 752.629183][ T1557] syzkaller0: entered promiscuous mode [ 752.660733][ T1557] syzkaller0: entered allmulticast mode [ 752.932291][ T1577] netlink: 'syz.3.7806': attribute type 1 has an invalid length. [ 752.950882][ T1579] netlink: 'syz.4.7804': attribute type 11 has an invalid length. [ 752.998011][ T1577] bond4: (slave veth0_to_bond): Releasing active interface [ 753.172805][ T1603] bond15: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 753.189261][ T1603] bond15 (unregistering): Released all slaves [ 753.230978][ T1611] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 753.517848][ T1636] netlink: 'syz.6.7818': attribute type 266 has an invalid length. [ 753.557517][ T30] audit: type=1800 audit(1782161908.046:27): pid=1639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7821" name="memory.events" dev="tmpfs" ino=1514 res=0 errno=0 [ 753.589663][ T1639] syzkaller0: entered promiscuous mode [ 753.596526][ T1639] syzkaller0: entered allmulticast mode [ 753.819384][ T30] audit: type=1800 audit(1782161908.306:28): pid=1654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7826" name="memory.events" dev="tmpfs" ino=2306 res=0 errno=0 [ 753.820491][ T1654] netlink: 'syz.2.7826': attribute type 13 has an invalid length. [ 753.850798][ T1654] netlink: 'syz.2.7826': attribute type 58 has an invalid length. [ 754.129564][ T1688] __nla_validate_parse: 15 callbacks suppressed [ 754.129582][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7834'. [ 754.161200][ T1687] x_tables: duplicate underflow at hook 3 [ 754.188825][ T1688] team0: Port device team_slave_0 removed [ 754.402239][ T1700] netlink: 'syz.6.7838': attribute type 21 has an invalid length. [ 754.452083][ T1703] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 754.474173][ T1702] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 754.839278][ T1718] gretap2: entered promiscuous mode [ 754.851214][ T1718] batman_adv: batadv0: Adding interface: gretap2 [ 754.861997][ T1718] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.892165][ T1718] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 754.909599][ T1720] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7845'. [ 755.182217][ T1736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7851'. [ 755.235991][ T1744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7853'. [ 755.360395][ T1744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7853'. [ 755.403736][ T1752] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7854'. [ 755.418642][ T1752] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7854'. [ 755.711144][ T1777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7861'. [ 755.737830][ T1777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7861'. [ 755.738654][ T1780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7859'. [ 755.747839][ T1777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.895551][ T1777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.742482][ T1857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.756468][ T1857] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.802149][ T1857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.982244][ T1857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.011609][ T1857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 757.025295][ T1857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 757.059380][ T1857] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 757.101198][ T1857] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 757.158399][T12137] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.166072][T12137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.419132][ T1914] validate_nla: 1 callbacks suppressed [ 757.419151][ T1914] netlink: 'syz.2.7890': attribute type 29 has an invalid length. [ 757.928420][ T1955] vlan4: entered promiscuous mode [ 757.966396][ T1955] hsr0: entered promiscuous mode [ 757.990842][ T1955] vlan4: entered allmulticast mode [ 758.013956][ T1955] hsr0: entered allmulticast mode [ 758.031011][ T1955] hsr_slave_0: entered allmulticast mode [ 758.057918][ T1955] hsr_slave_1: entered allmulticast mode [ 758.325722][ T2002] veth1_to_bridge: left allmulticast mode [ 758.347719][ T2002] macvlan0: left promiscuous mode [ 758.361376][ T2002] bridge2: left promiscuous mode [ 758.374568][ T2002] bridge2: left allmulticast mode [ 758.401454][ T2002] bond8: left promiscuous mode [ 758.407277][ T2002] ip6gre1: left promiscuous mode [ 758.415545][ T2002] vti0: left promiscuous mode [ 758.420403][ T2002] vti0: left allmulticast mode [ 758.429897][ T2002] ip6gre2: left promiscuous mode [ 758.436623][ T2002] ip6gre2: left allmulticast mode [ 758.463995][ T5735] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 758.971650][ T2047] netlink: 'syz.0.7921': attribute type 1 has an invalid length. [ 759.084185][ T5735] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 759.342023][ T2076] IPVS: ip_vs_edit_dest(): server weight less than zero [ 759.359685][T19768] IPVS: starting estimator thread 0... [ 759.475438][ T2077] IPVS: using max 65 ests per chain, 156000 per kthread [ 759.479133][ T2084] veth0_to_bridge: entered promiscuous mode [ 759.577764][ T2074] veth0_to_bridge: left promiscuous mode [ 759.741975][ T2109] __nla_validate_parse: 16 callbacks suppressed [ 759.742021][ T2109] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7934'. [ 759.829401][ T2109] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7934'. [ 759.887765][ T2127] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7934'. [ 759.919440][ T2110] tipc: Enabling of bearer rejected, already enabled [ 760.136263][ T2142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.171681][ T2142] netlink: 277 bytes leftover after parsing attributes in process `syz.3.7941'. [ 760.192658][ T2139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7939'. [ 760.279856][ T2154] xt_hl: Unknown Hop Limit match mode: 206 [ 760.478277][ T2168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 760.535485][ T2184] sctp: [Deprecated]: syz.3.7948 (pid 2184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 760.535485][ T2184] Use struct sctp_sack_info instead [ 760.743142][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 760.877556][ T2213] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7953'. [ 760.909178][ T2211] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7953'. [ 760.942752][ T2219] netlink: 'syz.0.7956': attribute type 1 has an invalid length. [ 761.060095][ T2226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7957'. [ 761.090820][ T2223] bond5: (slave veth3): Enslaving as an active interface with a down link [ 761.099569][ T2226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.112608][ T2226] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7957'. [ 761.120710][ T2219] 8021q: adding VLAN 0 to HW filter on device bond5 [ 761.136771][ T2226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7957'. [ 761.611788][ T30] audit: type=1800 audit(1782161916.096:29): pid=2259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7965" name="memory.events" dev="tmpfs" ino=1593 res=0 errno=0 [ 761.666384][ T30] audit: type=1804 audit(1782161916.096:30): pid=2259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.7965" name="/newroot/307/memory.events" dev="tmpfs" ino=1593 res=1 errno=0 [ 761.708211][ T2267] netlink: 'syz.3.7966': attribute type 1 has an invalid length. [ 761.747154][ T2257] bond15: entered promiscuous mode [ 761.755675][ T2257] bond15: entered allmulticast mode [ 761.762739][ T2257] 8021q: adding VLAN 0 to HW filter on device bond15 [ 761.795249][ T2267] bond7: entered promiscuous mode [ 761.800747][ T2267] 8021q: adding VLAN 0 to HW filter on device bond7 [ 761.826583][ T2278] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 761.853986][ T2278] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 761.868262][ T2278] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 761.901305][ T5630] block nbd1: Receive control failed (result -107) [ 761.931796][ T2267] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 761.941257][ T2287] netlink: 'syz.0.7974': attribute type 10 has an invalid length. [ 761.953656][ T2267] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 761.975525][ T2287] team0: entered allmulticast mode [ 761.980699][ T2287] team_slave_1: entered allmulticast mode [ 761.986808][ T2287] bridge0: port 2(team0) entered blocking state [ 761.993413][ T2287] bridge0: port 2(team0) entered disabled state [ 762.001053][ T2287] team0: entered promiscuous mode [ 762.006119][ T2287] team_slave_1: entered promiscuous mode [ 762.012291][ T2287] bridge0: port 2(team0) entered blocking state [ 762.019003][ T2287] bridge0: port 2(team0) entered forwarding state [ 762.045312][ T2270] nbd1: detected capacity change from 0 to 63 [ 762.057466][ T2290] netlink: 'syz.4.7975': attribute type 1 has an invalid length. [ 762.059136][T28804] block nbd1: Send control failed (result -32) [ 762.067140][ T50] block nbd1: Receive control failed (result -32) [ 762.094923][T28804] block nbd1: Request send failed, requeueing [ 762.102029][ T1977] block nbd1: Dead connection, failed to find a fallback [ 762.113116][ T1977] block nbd1: shutting down sockets [ 762.120084][ T1977] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.131126][ T1977] Buffer I/O error on dev nbd1, logical block 0, async page read [ 762.140287][T28804] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.150532][T28804] Buffer I/O error on dev nbd1, logical block 1, async page read [ 762.160407][T28804] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.171810][T28804] Buffer I/O error on dev nbd1, logical block 2, async page read [ 762.181563][T28804] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.194281][T28804] Buffer I/O error on dev nbd1, logical block 3, async page read [ 762.203875][T28804] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.215312][T28804] Buffer I/O error on dev nbd1, logical block 0, async page read [ 762.229677][T28804] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.242818][T28804] Buffer I/O error on dev nbd1, logical block 1, async page read [ 762.252800][T28804] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.267002][T28804] Buffer I/O error on dev nbd1, logical block 2, async page read [ 762.280339][T28804] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.290859][T28804] Buffer I/O error on dev nbd1, logical block 3, async page read [ 762.300035][T28804] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.311952][T28804] Buffer I/O error on dev nbd1, logical block 0, async page read [ 762.321070][T28804] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.332274][T28804] Buffer I/O error on dev nbd1, logical block 1, async page read [ 762.353961][T28804] ldm_validate_partition_table(): Disk read failed. [ 762.367031][T28804] Dev nbd1: unable to read RDB block 0 [ 762.388794][T28804] nbd1: unable to read partition table [ 762.401441][ T2311] vlan2: entered allmulticast mode [ 762.417670][T28804] ldm_validate_partition_table(): Disk read failed. [ 762.428230][T28804] Dev nbd1: unable to read RDB block 0 [ 762.442508][T28804] nbd1: unable to read partition table [ 762.626841][ T2337] netlink: 'syz.3.7988': attribute type 3 has an invalid length. [ 762.650328][ T2337] netlink: 'syz.3.7988': attribute type 1 has an invalid length. [ 762.882159][ T2359] netlink: 'syz.2.7994': attribute type 1 has an invalid length. [ 763.106978][ T2386] netlink: 'syz.6.8003': attribute type 1 has an invalid length. [ 763.177546][ T2386] bond9: entered promiscuous mode [ 763.185218][ T2386] 8021q: adding VLAN 0 to HW filter on device bond9 [ 763.231789][ T2400] netlink: 'syz.6.8006': attribute type 1 has an invalid length. [ 763.286212][ T2404] netlink: 'syz.2.8007': attribute type 1 has an invalid length. [ 763.378987][ T2411] netlink: 'syz.2.8009': attribute type 22 has an invalid length. [ 763.409907][T12140] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.420930][ T2411] netlink: 'syz.2.8009': attribute type 22 has an invalid length. [ 763.430118][T12140] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.467442][ T2414] bond6: Removing last arp target with arp_interval on [ 763.480285][T12140] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.491924][T12140] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.502850][ T2420] 8021q: VLANs not supported on ip6_vti0 [ 763.514534][ T2411] tc action pedit offset must be on 32 bit boundaries [ 763.521364][ T2411] tc action pedit offset must be on 32 bit boundaries [ 763.528193][ T2411] tc action pedit offset must be on 32 bit boundaries [ 763.535008][ T2411] tc action pedit offset must be on 32 bit boundaries [ 763.541781][ T2411] tc action pedit offset must be on 32 bit boundaries [ 763.546172][ T2427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.548596][ T2411] tc action pedit offset must be on 32 bit boundaries [ 763.548610][ T2411] tc action pedit offset must be on 32 bit boundaries [ 763.548619][ T2411] tc action pedit offset must be on 32 bit boundaries [ 763.548627][ T2411] tc action pedit offset must be on 32 bit boundaries [ 763.548636][ T2411] tc action pedit offset must be on 32 bit boundaries [ 763.548661][ T2411] TC_ACT_REPEAT abuse ? [ 763.687530][ T2437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 763.897626][ T2457] tipc: Failed to remove unknown binding: 66,1,1/0:1894906778/1894906780 [ 763.976189][ T2467] xfrm1: entered promiscuous mode [ 763.994797][ T2467] xfrm1: entered allmulticast mode [ 764.309548][T13892] bond0: (slave bond_slave_0): interface is now down [ 764.331090][T13892] bond0: (slave bond_slave_1): interface is now down [ 764.389109][ T2509] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 764.537661][ T2523] Unsupported xt match [ 764.537680][ T2523] unable to load match [ 764.695244][ T2527] netlink: 'syz.0.8040': attribute type 4 has an invalid length. [ 764.734633][ T2527] netlink: 'syz.0.8040': attribute type 4 has an invalid length. [ 764.922258][ T2557] __nla_validate_parse: 24 callbacks suppressed [ 764.922278][ T2557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8047'. [ 764.942853][ T2558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.338426][ T2581] bond11 (unregistering): Released all slaves [ 765.369635][ T2583] netlink: 232 bytes leftover after parsing attributes in process `syz.6.8053'. [ 765.407144][ T2585] syzkaller0: entered promiscuous mode [ 765.416007][ T2585] syzkaller0: entered allmulticast mode [ 765.667040][ T2619] netlink: 14544 bytes leftover after parsing attributes in process `syz.6.8061'. [ 765.691523][ T2622] set match dimension is over the limit! [ 765.775808][ T50] block nbd2: Receive control failed (result -32) [ 765.825144][ T2633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8067'. [ 766.020426][ T2647] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8071'. [ 766.040178][ T2647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8071'. [ 766.282638][ T2670] syzkaller0: entered promiscuous mode [ 766.289183][ T2670] syzkaller0: entered allmulticast mode [ 766.334268][ T2668] syzkaller0: entered promiscuous mode [ 766.339984][ T2668] syzkaller0: entered allmulticast mode [ 766.381767][ T2687] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8079'. [ 766.455818][ T2687] vlan3: entered allmulticast mode [ 766.461049][ T2687] erspan0: entered allmulticast mode [ 766.558417][ T2702] xt_l2tp: v2 doesn't support IP mode [ 766.566374][ T2707] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8084'. [ 766.696731][ T2713] bond17: Removing last arp target with arp_interval on [ 766.738065][ T2717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8088'. [ 766.794886][ T2717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8088'. [ 766.904282][T12137] bond0: (slave bond_slave_0): interface is now down [ 766.918029][T12137] bond0: (slave bond_slave_1): interface is now down [ 766.926915][T12137] bond0: now running without any active interface! [ 767.132865][ T2750] 8021q: adding VLAN 0 to HW filter on device bond18 [ 767.150358][ T2750] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 767.178282][ T2750] 8021q: adding VLAN 0 to HW filter on device bond19 [ 767.189022][ T2750] bond18: (slave bond19): Enslaving as an active interface with a down link [ 767.228727][ T2759] macvtap1: entered promiscuous mode [ 767.234224][ T2759] macvtap1: entered allmulticast mode [ 767.239883][ T2759] veth1_vlan: entered allmulticast mode [ 767.249788][ T2759] macvtap2: entered promiscuous mode [ 767.255282][ T2759] macvtap2: entered allmulticast mode [ 767.517439][ T2777] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 767.838009][ T2802] syzkaller0: entered promiscuous mode [ 767.849093][ T2802] syzkaller0: entered allmulticast mode [ 767.921475][ T2803] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 768.012446][ T2822] validate_nla: 10 callbacks suppressed [ 768.012466][ T2822] netlink: 'syz.3.8112': attribute type 16 has an invalid length. [ 768.044427][ T2822] veth0_macvtap: entered allmulticast mode [ 768.106513][ T5630] Bluetooth: hci2: command 0x0405 tx timeout [ 768.209301][ T2834] xt_CT: No such helper "netbios-ns" [ 768.254883][ T2854] syzkaller0: entered promiscuous mode [ 768.265077][ T2854] syzkaller0: entered allmulticast mode [ 768.276922][ T2849] netlink: 'syz.3.8117': attribute type 4 has an invalid length. [ 768.288508][ T2859] netlink: 'syz.6.8120': attribute type 1 has an invalid length. [ 768.299141][ T2859] netlink: 'syz.6.8120': attribute type 3 has an invalid length. [ 768.311966][ T2849] 8021q: adding VLAN 0 to HW filter on device bond8 [ 768.457188][ T2876] macvlan3: entered allmulticast mode [ 768.468604][ T2876] dummy0: entered allmulticast mode [ 768.470648][ T2878] netlink: 'syz.0.8125': attribute type 1 has an invalid length. [ 768.475478][ T2876] dummy0: entered promiscuous mode [ 768.592768][ T2891] netlink: 'syz.4.8128': attribute type 10 has an invalid length. [ 768.605727][ T2887] xfrm0 speed is unknown, defaulting to 1000 [ 768.615637][ T2887] lo speed is unknown, defaulting to 1000 [ 768.640487][ T2891] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 768.987401][ T2893] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 769.005894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.029015][T12140] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.036231][T12140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.061122][ T2887] lo speed is unknown, defaulting to 1000 [ 769.785456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 769.865959][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 769.999903][ T2963] __nla_validate_parse: 11 callbacks suppressed [ 769.999920][ T2963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8145'. [ 770.031959][ T2964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8145'. [ 770.050913][ T2963] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 770.158816][ T2971] 8021q: VLANs not supported on ip6tnl0 [ 770.258871][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8150'. [ 770.366284][ T2985] syzkaller0: entered promiscuous mode [ 770.388159][ T2986] IPv6: Can't replace route, no match found [ 770.408895][ T2985] syzkaller0: entered allmulticast mode [ 770.429656][ T2986] IPv6: Can't replace route, no match found [ 770.446726][ T2993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8156'. [ 770.457886][ T2989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8153'. [ 770.577621][ T2994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.618071][ T2994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.722898][ T2994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.736454][ T2994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.779754][ T3020] syzkaller0: entered promiscuous mode [ 770.795813][ T3020] syzkaller0: entered allmulticast mode [ 770.810178][ T3028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8163'. [ 770.820796][ T3028] openvswitch: netlink: Key type 31 is not supported [ 770.855884][ T2994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.881339][ T2994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.915058][ T3007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.979219][ T2994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.994919][ T2994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.210385][ T3056] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.8171'. [ 771.285691][T13887] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.294913][T13887] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.314120][T13887] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.344148][T13887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.382064][T13885] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.412046][T13885] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.455292][T13887] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.466040][T13887] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.478161][ T3074] netlink: 'syz.6.8175': attribute type 9 has an invalid length. [ 771.478802][ T3078] netlink: 'syz.6.8175': attribute type 9 has an invalid length. [ 771.518380][ T3076] tipc: New replicast peer: 255.255.255.255 [ 771.534431][ T3076] tipc: Enabled bearer , priority 10 [ 771.536031][ T3080] netlink: 'syz.4.8177': attribute type 1 has an invalid length. [ 771.589511][ T3080] 8021q: adding VLAN 0 to HW filter on device bond20 [ 771.611995][ T3080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8177'. [ 771.685655][ T3089] syzkaller1: entered promiscuous mode [ 771.694837][ T3089] syzkaller1: entered allmulticast mode [ 771.837435][ T3100] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8182'. [ 771.877890][ T3100] bridge7: port 1(veth3) entered blocking state [ 771.886590][ T3100] bridge7: port 1(veth3) entered disabled state [ 771.889798][ T3104] IPv6: NLM_F_CREATE should be specified when creating new route [ 771.894688][ T3100] veth3: entered allmulticast mode [ 771.904393][ T3104] netlink: 'syz.2.8184': attribute type 1 has an invalid length. [ 771.911775][ T3100] veth3: entered promiscuous mode [ 771.929831][ T3105] bridge7: port 2(veth0_to_bond) entered blocking state [ 771.938267][ T3105] bridge7: port 2(veth0_to_bond) entered disabled state [ 771.950831][ T3105] veth0_to_bond: entered allmulticast mode [ 771.959451][ T3105] veth0_to_bond: entered promiscuous mode [ 771.967767][ T3105] bridge7: port 2(veth0_to_bond) entered blocking state [ 771.975300][ T3105] bridge7: port 2(veth0_to_bond) entered forwarding state [ 772.085304][ T3114] syzkaller0: entered promiscuous mode [ 772.091454][ T3114] syzkaller0: entered allmulticast mode [ 772.304309][ T3130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8191'. [ 772.371864][ T3139] openvswitch: netlink: Missing key (keys=40, expected=100) [ 772.431668][ T3134] bond7 (unregistering): Released all slaves [ 772.653912][ T5735] tipc: Node number set to 1088756843 [ 772.857765][ T3160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 772.933197][ T3191] sock: sock_set_timeout: `syz.3.8206' (pid 3191) tries to set negative timeout [ 773.051897][ T3197] 8021q: adding VLAN 0 to HW filter on device bond10 [ 773.065558][ T3197] bond9: (slave bond10): making interface the new active one [ 773.078775][ T3197] bond9: (slave bond10): Enslaving as an active interface with an up link [ 773.109308][ T3202] bridge_slave_1: left allmulticast mode [ 773.116820][ T3202] bridge_slave_1: left promiscuous mode [ 773.122913][ T3202] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.141024][ T3202] veth0_to_bond: left allmulticast mode [ 773.151050][ T3202] veth0_to_bond: left promiscuous mode [ 773.158174][ T3202] bridge7: port 2(veth0_to_bond) entered disabled state [ 773.170550][ T3202] bond0: (slave bond_slave_0): Releasing backup interface [ 773.178637][ T3202] bond_slave_0: left allmulticast mode [ 773.190779][ T3202] bond0: (slave bond_slave_1): Releasing backup interface [ 773.200340][ T3202] bond_slave_1: left allmulticast mode [ 773.215624][ T3202] team0: Port device team_slave_0 removed [ 773.232299][ T3202] team0: Port device team_slave_1 removed [ 773.239480][ T3202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.247865][ T3202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.257452][ T3202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 773.282242][ T3197] bond9: (slave gretap2): Enslaving as a backup interface with an up link [ 773.426236][ T3227] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 773.561848][ T3232] syzkaller0: entered promiscuous mode [ 773.568640][ T3232] syzkaller0: entered allmulticast mode [ 773.848465][ T3269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.911191][ T3274] 8021q: adding VLAN 0 to HW filter on device bond12 [ 773.970504][ T3279] 8021q: adding VLAN 0 to HW filter on device bond13 [ 774.161681][ T3282] syzkaller0: entered promiscuous mode [ 774.176704][ T3282] syzkaller0: entered allmulticast mode [ 774.199583][ T3282] 0: reclassify loop, rule prio 0, protocol 800 [ 774.330507][ T3304] xt_ecn: cannot match TCP bits for non-tcp packets [ 774.345563][ T3306] validate_nla: 1 callbacks suppressed [ 774.345581][ T3306] netlink: 'syz.3.8234': attribute type 10 has an invalid length. [ 774.382900][ T3304] netlink: 'syz.6.8233': attribute type 11 has an invalid length. [ 774.439862][ T3311] nft_compat: unsupported protocol 5 [ 774.460434][ T3313] netlink: 'syz.3.8234': attribute type 21 has an invalid length. [ 774.468721][ T3311] veth0_to_bond: entered allmulticast mode [ 774.492479][ T3316] ipvlan3: entered allmulticast mode [ 774.508129][ T3316] batadv_slave_1: entered allmulticast mode [ 774.571537][ T3321] team0: Port device xfrm0 added [ 774.862782][ T3353] netlink: 'syz.4.8240': attribute type 2 has an invalid length. [ 775.246433][ T30] audit: type=1800 audit(1782161929.736:31): pid=3361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8245" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1918 res=0 errno=0 [ 775.340154][ T3365] __nla_validate_parse: 16 callbacks suppressed [ 775.340173][ T3365] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.8247'. [ 775.357320][ T3365] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.8247'. [ 775.625377][ T3371] syzkaller0: entered promiscuous mode [ 775.630914][ T3371] syzkaller0: entered allmulticast mode [ 777.609708][ T3324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 777.672654][ T3398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 777.680310][ T3398] IPv6: NLM_F_CREATE should be set when creating new route [ 777.687757][ T3398] IPv6: NLM_F_CREATE should be set when creating new route [ 777.765619][ T3399] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 777.787907][ T3399] bond7 (unregistering): Released all slaves [ 777.891325][ T3404] netlink: 'syz.3.8260': attribute type 11 has an invalid length. [ 777.916001][ T3404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8260'. [ 777.960360][ T3404] syzkaller0: entered promiscuous mode [ 777.978726][ T3404] syzkaller0: entered allmulticast mode [ 778.010900][ T3404] tipc: Enabled bearer , priority 0 [ 778.038692][ T3403] tipc: Resetting bearer [ 778.042400][ T3421] sctp: [Deprecated]: syz.2.8264 (pid 3421) Use of int in maxseg socket option. [ 778.042400][ T3421] Use struct sctp_assoc_value instead [ 778.107956][ T3403] tipc: Disabling bearer [ 778.502015][ T3452] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8275'. [ 778.570288][ T3452] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8275'. [ 778.738370][ T3471] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8279'. [ 778.784667][ T3471] tcf_pedit_act: 22 callbacks suppressed [ 778.784793][ T3471] tc action pedit offset must be on 32 bit boundaries [ 778.843886][ T3476] tc action pedit offset must be on 32 bit boundaries [ 778.881027][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8284'. [ 778.914333][ T3490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8280'. [ 778.945927][ T3490] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8280'. [ 779.701052][ T3511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8287'. [ 779.966835][ T3542] xt_ecn: cannot match TCP bits for non-tcp packets [ 780.021439][ T3549] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 780.058095][ T3554] xt_ecn: cannot match TCP bits for non-tcp packets [ 780.345891][ T3571] __nla_validate_parse: 2 callbacks suppressed [ 780.345911][ T3571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8305'. [ 780.351857][ T3575] netlink: 'syz.2.8306': attribute type 1 has an invalid length. [ 780.469742][ T3575] 8021q: adding VLAN 0 to HW filter on device bond7 [ 780.490840][ T3587] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8307'. [ 780.555100][ T3587] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 780.927920][ T3604] netlink: 248 bytes leftover after parsing attributes in process `syz.3.8310'. [ 781.038695][ T3607] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8311'. [ 781.214723][ T3613] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 781.259653][ T3613] syzkaller0: entered promiscuous mode [ 781.283855][ T3613] syzkaller0: entered allmulticast mode [ 781.329861][ T3610] netlink: 211864 bytes leftover after parsing attributes in process `syz.3.8312'. [ 781.602071][ T3623] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8315'. [ 781.726837][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8318'. [ 781.770198][ T3639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8318'. [ 781.995105][ T3658] netlink: 'syz.3.8322': attribute type 5 has an invalid length. [ 782.037909][ T3665] xt_l2tp: missing protocol rule (udp|l2tpip) [ 782.178973][ T3671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8326'. [ 782.216180][ T3677] netlink: 232 bytes leftover after parsing attributes in process `syz.6.8327'. [ 782.368306][ T3688] syzkaller0: entered promiscuous mode [ 782.372129][ T3693] netlink: 'syz.0.8332': attribute type 33 has an invalid length. [ 782.386489][ T3688] syzkaller0: entered allmulticast mode [ 782.449664][ T3693] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 782.472396][ T3693] bond7 (unregistering): Released all slaves [ 782.777861][ T3716] netlink: 'syz.6.8334': attribute type 1 has an invalid length. [ 783.590831][ T5282] veth0_vlan: left promiscuous mode [ 783.620475][ T5282] veth0_vlan: entered promiscuous mode [ 783.775603][ T3732] tipc: Enabled bearer , priority 0 [ 783.889463][ T3732] syzkaller0: entered promiscuous mode [ 783.906875][ T3732] syzkaller0: entered allmulticast mode [ 783.929146][ T3732] tipc: Resetting bearer [ 783.954756][ T3736] vlan2: entered allmulticast mode [ 783.960172][ T3736] bond0: entered allmulticast mode [ 783.965293][ T3736] bond_slave_0: entered allmulticast mode [ 783.982820][ T3744] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 784.023232][ T3736] bond_slave_1: entered allmulticast mode [ 784.030765][ T3737] macvlan0: entered promiscuous mode [ 784.048799][ T3730] tipc: Resetting bearer [ 784.146853][ T3730] tipc: Disabling bearer [ 784.159201][ T3744] v: renamed from vlan0 [ 784.841557][ T3819] netlink: 'syz.3.8360': attribute type 4 has an invalid length. [ 785.096900][ T3839] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 785.176540][ T3843] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 785.340464][ T3856] x_tables: unsorted entry at hook 3 [ 785.466867][ T3867] __nla_validate_parse: 12 callbacks suppressed [ 785.466890][ T3867] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8374'. [ 785.533680][ T3876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8378'. [ 785.695192][ T3886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8382'. [ 785.701868][ T3889] syzkaller1: entered promiscuous mode [ 785.710626][ T3889] syzkaller1: entered allmulticast mode [ 785.722071][ T3886] openvswitch: netlink: Multiple metadata blocks provided [ 785.841565][ T3893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8385'. [ 785.887456][ T3893] syzkaller0: entered promiscuous mode [ 785.893879][ T3893] syzkaller0: entered allmulticast mode [ 785.966059][ T3902] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8389'. [ 785.976183][ T3902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8389'. [ 786.052913][ T3906] netlink: zone id is out of range [ 786.061126][ T3906] netlink: zone id is out of range [ 786.067400][ T3906] netlink: zone id is out of range [ 786.081061][ T3906] netlink: zone id is out of range [ 786.102195][ T3906] netlink: zone id is out of range [ 786.116524][ T3906] netlink: zone id is out of range [ 786.134289][ T3906] netlink: zone id is out of range [ 786.210180][ T3918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8394'. [ 786.246660][ T3923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8396'. [ 786.324921][ T3918] 8021q: adding VLAN 0 to HW filter on device bond7 [ 786.332847][ T3918] bridge0: port 3(bond7) entered blocking state [ 786.340553][ T3918] bridge0: port 3(bond7) entered disabled state [ 786.355282][ T3918] bond7: entered allmulticast mode [ 786.362558][ T3918] bond7: entered promiscuous mode [ 786.369284][ T3918] bridge0: port 3(bond7) entered blocking state [ 786.375868][ T3918] bridge0: port 3(bond7) entered forwarding state [ 786.442459][ T3940] netlink: 'syz.3.8401': attribute type 1 has an invalid length. [ 786.451576][ T3940] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8401'. [ 786.467056][ T3935] syzkaller0: entered promiscuous mode [ 786.498502][ T3935] syzkaller0: entered allmulticast mode [ 786.511940][ T3929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8398'. [ 786.551283][ T3938] syzkaller1: entered promiscuous mode [ 786.557328][ T3938] syzkaller1: entered allmulticast mode [ 786.608297][ T3949] dummy0 (unregistering): left allmulticast mode [ 786.763010][T12137] bridge0: port 3(bond7) entered disabled state [ 786.837050][ T3962] netlink: 'syz.6.8410': attribute type 83 has an invalid length. [ 787.040568][ T3980] vlan5: entered promiscuous mode [ 787.057934][ T3980] geneve1: entered promiscuous mode [ 787.068737][ T3980] vlan5: entered allmulticast mode [ 787.084329][ T3980] geneve1: entered allmulticast mode [ 787.109311][ T3983] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 787.151243][ T3987] netlink: 'syz.4.8419': attribute type 1 has an invalid length. [ 787.211861][ T3995] netlink: 'syz.0.8423': attribute type 1 has an invalid length. [ 787.222735][ T3995] netlink: 'syz.0.8423': attribute type 4 has an invalid length. [ 787.280816][ T3987] bond21: entered promiscuous mode [ 787.314926][ T3987] 8021q: adding VLAN 0 to HW filter on device bond21 [ 787.367555][ T3992] bond21: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 787.406138][ T3992] bond21: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 787.413899][ T4020] netlink: 'syz.2.8429': attribute type 1 has an invalid length. [ 787.424933][ T4020] netlink: 'syz.2.8429': attribute type 4 has an invalid length. [ 787.435157][ T3992] bond21: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 787.498435][ T4004] 8021q: adding VLAN 0 to HW filter on device bond11 [ 787.536306][ T4013] 8021q: adding VLAN 0 to HW filter on device bond12 [ 787.548931][ T4013] bond11: (slave bond12): Enslaving as an active interface with an up link [ 787.608865][ T4022] bond11 (unregistering): (slave bond12): Releasing backup interface [ 787.651718][ T4022] bond11 (unregistering): Released all slaves [ 787.816950][ T4045] netlink: 'syz.0.8437': attribute type 2 has an invalid length. [ 787.911144][ T4050] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 787.949862][ T4050] bond11 (unregistering): Released all slaves [ 787.977911][ T4070] net_ratelimit: 708 callbacks suppressed [ 787.977929][ T4070] openvswitch: netlink: IP tunnel dst address not specified [ 787.991285][ T4070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.265816][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 793.410413][T24912] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 793.419771][T24912] ip6gre1 (unregistering): left promiscuous mode [ 793.466748][T12140] smbdirect: ib_dev[syz2] removed [ 793.487013][T24912] tipc: Disabling bearer [ 793.519392][T24912] bond3 (unregistering): (slave geneve2): Releasing active interface [ 793.552016][T24912] team0: Port device bridge4 removed [ 793.564450][T24912] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 793.572589][T24912] bridge5 (unregistering): left promiscuous mode [ 793.602510][T24912] bond1 (unregistering): Released all slaves [ 793.616624][T24912] bond2 (unregistering): Released all slaves [ 793.628737][T24912] bond3 (unregistering): Released all slaves [ 793.650109][T24912] vlan0 (unregistering): Released all slaves [ 793.661767][T24912] bond4 (unregistering): Released all slaves [ 793.674462][T24912] bond5 (unregistering): Released all slaves [ 793.694427][T24912] bond6 (unregistering): Released all slaves [ 793.710135][T24912] bond7 (unregistering): Released all slaves [ 793.722276][T24912] bond8 (unregistering): Released all slaves [ 793.734678][T24912] bond0 (unregistering): Released all slaves [ 793.746994][T24912] bond9 (unregistering): Released all slaves [ 793.759709][T24912] bond10 (unregistering): Released all slaves [ 793.774606][T24912] bond11 (unregistering): Released all slaves [ 793.785755][T24912] bond12 (unregistering): Released all slaves [ 793.855910][T24912] tipc: Left network mode [ 794.024246][ T31] INFO: task syz.5.6199:28434 blocked for more than 143 seconds. [ 794.032702][ T31] Not tainted syzkaller #0 [ 794.038547][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.048530][ T31] task:syz.5.6199 state:D stack:26248 pid:28434 tgid:28433 ppid:17672 task_flags:0x400140 flags:0x00080002 [ 794.061007][ T31] Call Trace: [ 794.065601][ T31] [ 794.068592][ T31] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 794.073553][ T31] ? rcu_is_watching+0x15/0xb0 [ 794.078738][ T31] ? lock_release+0x4b/0x3c0 [ 794.084111][ T31] ? unwind_next_frame+0x8f/0x2550 [ 794.089319][ T31] ? rcu_is_watching+0x15/0xb0 [ 794.094404][ T31] ? __pfx___schedule+0x10/0x10 [ 794.099303][ T31] ? rcu_is_watching+0x15/0xb0 [ 794.109244][ T31] ? rcu_is_watching+0x15/0xb0 [ 794.153675][ T31] ? lock_release+0x4b/0x3c0 [ 794.159647][ T31] ? rcu_is_watching+0x15/0xb0 [ 794.185102][ T31] schedule+0x164/0x360 [ 794.189376][ T31] schedule_preempt_disabled+0x13/0x30 [ 794.213540][ T31] __mutex_lock+0x7bf/0x1550 [ 794.225866][ T31] ? __mutex_lock+0x5d4/0x1550 [ 794.263940][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 794.271094][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 794.295516][ T31] ? stack_trace_save+0xa9/0x100 [ 794.306174][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 794.333693][ T31] ? stack_depot_save_flags+0x33/0x800 [ 794.351473][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x13b0 [ 794.377196][ T31] ? kasan_save_track+0x4f/0x80 [ 794.425379][ T31] ? kasan_save_track+0x3e/0x80 [ 794.430335][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 794.463862][ T31] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 794.483486][ T31] ? __alloc_skb+0x2bd/0x7a0 [ 794.505041][ T31] ? __netlink_dump_start+0x589/0x7b0 [ 794.518001][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 794.543528][ T31] ? genl_rcv_msg+0x5e1/0x7a0 [ 794.563565][ T31] ? netlink_rcv_skb+0x226/0x4a0 [ 794.570422][ T31] ? genl_rcv+0x28/0x40 [ 794.583970][ T31] ? netlink_unicast+0x7bb/0x940 [ 794.613766][ T31] ? netlink_sendmsg+0x813/0xb40 [ 794.619390][ T31] ? ____sys_sendmsg+0x9b9/0xa20 [ 794.629669][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 794.637283][ T31] ? __x64_sys_sendmsg+0x1b1/0x290 [ 794.642461][ T31] ? do_syscall_64+0x174/0x580 [ 794.648458][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.655058][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 794.661634][ T31] ? rcu_is_watching+0x15/0xb0 [ 794.668540][ T31] ? trace_kmalloc+0x2a/0xf0 [ 794.683756][ T31] ? __kmalloc_node_track_caller_noprof+0x4f5/0x7b0 [ 794.696188][ T31] genl_dumpit+0x10b/0x1b0 [ 794.713786][ T31] netlink_dump+0x711/0xee0 [ 794.718392][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 794.733928][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 794.738781][ T31] ? genl_start+0x497/0x6d0 [ 794.753574][ T31] __netlink_dump_start+0x589/0x7b0 [ 794.760043][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 794.774844][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 794.794036][ T31] ? genl_get_cmd+0x523/0x960 [ 794.798804][ T31] ? __pfx_genl_start+0x10/0x10 [ 794.806482][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 794.811483][ T31] ? __pfx_genl_done+0x10/0x10 [ 794.816814][ T31] ? __dev_queue_xmit+0x29b/0x37f0 [ 794.821977][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 794.827562][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 794.832632][ T31] ? ref_tracker_free+0x689/0x830 [ 794.838330][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 794.845349][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 794.850767][ T31] netlink_rcv_skb+0x226/0x4a0 [ 794.856943][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 794.862025][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 794.867913][ T31] ? down_read+0x2be/0x330 [ 794.872373][ T31] genl_rcv+0x28/0x40 [ 794.877212][ T31] netlink_unicast+0x7bb/0x940 [ 794.882065][ T31] netlink_sendmsg+0x813/0xb40 [ 794.887674][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.893721][ T31] ? futex_unqueue+0x22/0x240 [ 794.898480][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 794.904195][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 794.909610][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.915858][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 794.920686][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.926465][ T31] ? lock_release+0x4b/0x3c0 [ 794.931105][ T31] ? import_iovec+0x73/0xa0 [ 794.936277][ T31] ___sys_sendmsg+0x2a5/0x360 [ 794.940996][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.946608][ T31] ? futex_wait+0x2a2/0x390 [ 794.951155][ T31] ? __pfx_do_futex+0x10/0x10 [ 794.956004][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 794.961092][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 794.966663][ T31] ? rcu_is_watching+0x15/0xb0 [ 794.971454][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.978358][ T31] do_syscall_64+0x174/0x580 [ 794.985631][ T31] ? trace_irq_disable+0x3b/0x140 [ 794.990879][ T31] ? clear_bhb_loop+0x40/0x90 [ 794.996221][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.002162][ T31] RIP: 0033:0x7feeecf9ce59 [ 795.007477][ T31] RSP: 002b:00007feeeddf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.016556][ T31] RAX: ffffffffffffffda RBX: 00007feeed215fa0 RCX: 00007feeecf9ce59 [ 795.025030][ T31] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000005 [ 795.033876][ T31] RBP: 00007feeed032e6f R08: 0000000000000000 R09: 0000000000000000 [ 795.041888][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.050416][ T31] R13: 00007feeed216038 R14: 00007feeed215fa0 R15: 00007ffd54f4bae8 [ 795.058963][ T31] [ 795.062176][ T31] INFO: lockdep is turned off. [ 795.069992][ T31] NMI backtrace for cpu 0 [ 795.070010][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 795.070028][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 795.070037][ T31] Call Trace: [ 795.070044][ T31] [ 795.070050][ T31] dump_stack_lvl+0xe8/0x150 [ 795.070092][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 795.070186][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 795.070220][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 795.070237][ T31] sys_info+0x135/0x170 [ 795.070251][ T31] watchdog+0xfd7/0x1030 [ 795.070281][ T31] ? watchdog+0x1c7/0x1030 [ 795.070303][ T31] kthread+0x388/0x470 [ 795.070319][ T31] ? __pfx_watchdog+0x10/0x10 [ 795.070336][ T31] ? __pfx_kthread+0x10/0x10 [ 795.070356][ T31] ret_from_fork+0x514/0xb70 [ 795.070384][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 795.070397][ T31] ? __switch_to+0xc89/0x1420 [ 795.070417][ T31] ? __pfx_kthread+0x10/0x10 [ 795.070431][ T31] ret_from_fork_asm+0x1a/0x30 [ 795.070457][ T31] [ 795.070533][ T31] Sending NMI from CPU 0 to CPUs 1: [ 795.202018][ C1] NMI backtrace for cpu 1 [ 795.202037][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 795.202060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 795.202071][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 795.202100][ C1] Code: ec 7f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 87 21 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 795.202115][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 795.202131][ C1] RAX: ffff88812537c000 RBX: ffffffff819a5170 RCX: 0000000080000001 [ 795.202145][ C1] RDX: 0000000000000001 RSI: ffffffff8c291100 RDI: ffffffff819a5170 [ 795.202157][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 795.202170][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 795.202182][ C1] R13: 1ffff11003b5f000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 795.202196][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 795.202210][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.202222][ C1] CR2: 0000556e51857ee8 CR3: 000000000e746000 CR4: 00000000003526f0 [ 795.202238][ C1] Call Trace: [ 795.202245][ C1] [ 795.202251][ C1] default_idle+0x9/0x20 [ 795.202276][ C1] default_idle_call+0x72/0xb0 [ 795.202302][ C1] do_idle+0x2e0/0x540 [ 795.202328][ C1] ? __pfx_do_idle+0x10/0x10 [ 795.202356][ C1] cpu_startup_entry+0x43/0x60 [ 795.202381][ C1] start_secondary+0x101/0x110 [ 795.202406][ C1] common_startup_64+0x13e/0x157 [ 795.202436][ C1] [ 795.385255][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 795.392322][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 795.401944][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 795.412001][ T31] Call Trace: [ 795.415282][ T31] [ 795.418208][ T31] vpanic+0x56c/0xa60 [ 795.422213][ T31] ? __pfx___schedule+0x10/0x10 [ 795.427058][ T31] ? __pfx_vpanic+0x10/0x10 [ 795.431558][ T31] ? rcu_is_watching+0x15/0xb0 [ 795.436425][ T31] ? trace_irq_enable+0x3b/0x140 [ 795.441376][ T31] panic+0xc5/0xd0 [ 795.445093][ T31] ? __pfx_panic+0x10/0x10 [ 795.449679][ T31] watchdog+0x1030/0x1030 [ 795.454006][ T31] ? watchdog+0x1c7/0x1030 [ 795.458411][ T31] kthread+0x388/0x470 [ 795.462465][ T31] ? __pfx_watchdog+0x10/0x10 [ 795.467144][ T31] ? __pfx_kthread+0x10/0x10 [ 795.471731][ T31] ret_from_fork+0x514/0xb70 [ 795.476320][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 795.481602][ T31] ? __switch_to+0xc89/0x1420 [ 795.486309][ T31] ? __pfx_kthread+0x10/0x10 [ 795.491085][ T31] ret_from_fork_asm+0x1a/0x30 [ 795.495953][ T31] [ 795.499134][ T31] Kernel Offset: disabled [ 795.503463][ T31] Rebooting in 86400 seconds..