last executing test programs: 4.957401041s ago: executing program 2 (id=2657): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)="c2c363a4556375c31d302a0057b4cdce804a3470c25b3f3928dccdbc7aeb4b83f5f77f74087d6ce26359d1a2255a45a5a9bc8762fd654807ceb390a9fa877133d92e808bfe92ff878a5aabee", 0x4c}], 0x1}, 0x40000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'nicvf0\x00', 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900c13832c99c7ef1bf00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf43951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc0f00d6e4edef3d93452a", 0xd8}], 0x1}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0xc040480) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000700", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200"], 0x2c}}, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040), 0xc) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r9, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, &(0x7f0000000000)) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000050) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@mcast2, r3}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0xac}}, 0x0) r11 = accept$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @remote}, &(0x7f0000000640)=0x10) getsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000680)={@broadcast}, &(0x7f0000000840)=0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000580)={0x4, [0x4, 0x101, 0x8, 0x7]}, &(0x7f00000005c0)=0xffffffffffffffcc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 4.560335212s ago: executing program 2 (id=2665): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000854000000800000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000107010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}]}}]}, 0x45c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@i, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.256931023s ago: executing program 2 (id=2670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], "f8"}]}}, &(0x7f0000000300)=""/2, 0x2a, 0x2, 0x1}, 0x20) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) 2.80586376s ago: executing program 3 (id=2690): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x18, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x4}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x810) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 2.69667253s ago: executing program 4 (id=2691): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x2) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x40000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x40000000000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000080), &(0x7f0000000340)=r3}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 810.248106ms ago: executing program 0 (id=2692): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x3c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004"], 0xec}}, 0x8050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fcdbdf250400000005000b00000000f9e1a468e8d8b4c6bd267cf22227e20caa238e85365c6401dce996450a2fde5d42ed32ba664e3c7a991857a743f3734107a265582967bac78ff353a2692d85c188dadffeb16fb1524e1d99cc391d20b59f6e59cb56127907fff875cb26f6f1074268a1674828c16a745c3ae568e27429078ffa073b0b08d0f5c197a1"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x3c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004"], 0xec}}, 0x8050) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fcdbdf250400000005000b00000000f9e1a468e8d8b4c6bd267cf22227e20caa238e85365c6401dce996450a2fde5d42ed32ba664e3c7a991857a743f3734107a265582967bac78ff353a2692d85c188dadffeb16fb1524e1d99cc391d20b59f6e59cb56127907fff875cb26f6f1074268a1674828c16a745c3ae568e27429078ffa073b0b08d0f5c197a1"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) 809.290039ms ago: executing program 4 (id=2693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 807.837226ms ago: executing program 3 (id=2694): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000040)="f9bbed22382c56f242cc6c8db26be39c87decbe22831279c0f6ed1e51d9bb8f95caa55d73157bdbbb5372937bd617ea4216cf9b08bf94262f8d9610f686eb21a152f8199abd43a49ea6a2b30a2cb6b65c4cdfcc8c77aad8758212d6519c12b2733ede91b4d629c63009d934c4941373f680b32ff81df4c61ea035577ecdcf6") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x800}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local, {[@generic={0x0, 0x4, 'Z\x00'}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@private}, {@broadcast}]}]}}}}}) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000002280)={@private0={0xfc, 0x0, '\x00', 0x10}, 0x200000, 0x0, 0x3, 0x3, 0x0, 0xfff5}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {0xe, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) write(r0, &(0x7f0000000000)="240000001a00110414f9f4070009040080fffffffe110001000000000800040001000000", 0x24) 800.2618ms ago: executing program 2 (id=2696): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getpeername$netrom(r0, 0x0, &(0x7f0000000300)) (async) getpeername$netrom(r0, 0x0, &(0x7f0000000300)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0xe, 0x800) (async) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0xe, 0x800) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000540)=0x8, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x4c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x3, 0x6}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x3}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xe7}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c810}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 798.981082ms ago: executing program 4 (id=2697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r3, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000002c0)={0xb0000000}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}, {0x8}]}}]}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000000002fe00"], 0x1c}}, 0x0) socket$inet(0x2, 0x4, 0xe4) 798.026889ms ago: executing program 0 (id=2699): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x2b, 0xb, 0x1, 0x0, {0x6}, [@typed={0x8, 0x3, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x28}}, 0xc00) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) 795.738485ms ago: executing program 1 (id=2700): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000040)=0x84) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r1, 0x100) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000040ac1414aa000000009f470eb5ebd7a8dcb14222aa14e121a29e8b2eeb230693b4f58c4c962608000000528c8bc10d61b24df796cbd0eb25f543f031a5082a9aef685cd3bfbfb9ea5da5902ecebda3b0377b2259c3dbf0a12aa06a27a78b71c670579817cf9befe764712f57bc4c06caf0eb9299d61c95f19dcb7762022d99306b2de8d9530a0f389d21705be4581a317368edcec86cde2856451fa76b44beba7652af72fad129f3f31266fd"], 0x18, 0x8000}, 0x20000000) 790.707276ms ago: executing program 0 (id=2701): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) r3 = socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000840)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) (async) r8 = getuid() (async) r9 = getpid() (async) r10 = getuid() (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0}, &(0x7f0000000a80)=0xc) sendmmsg$unix(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000000c0)="689e22ef86f227e1dd488ee59640fe8a25765d65ca48055300c3a29f6ebb794c8c20d4db68a0a0e92ea43744612f7744e93c2b3ce6f4b4b0e2fc366770db183f07c26959805f370b53a89835ca9b2597283985a854b201eea516bd94a0b4ad044c9ecfc05c3c83c07d", 0x69}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000000140)="50154e16d00589db3cedb5feca43469a65ad73ccdc2d2b31a9703b3a03734cc67c04553f21d8958ae1c19d37f920098f0920b14fe4a6fb68c2ecc7378305665b47cbc2a1966bbc3696ee38cb5442de78ea36c4518fb275fb5512c6dbcfb94672aa273f41b10b222cddb9080f1b52df39fb4cedab5bf7b076cc30acb406bf34d014e8aabf1a0f35ab1b35c9728af434340a3f318d863f08508b86ea070a342a395391acfb8631eed449f29e101a3e2d324658dcf8b19a95f69793f39957ae4c17b05068012e68ddd874c4316017faea1d6f38464f926e0675cf5839999464e46d01f4", 0xe2}, {&(0x7f00000005c0)="b2fb1d443ff989012fa72ffdd71f881b65879013f9177572021d20fe728a363f30cda8a86ae25d0b5eb6ddfa10a24504bbf53a9d16891dfc344854e61307f46e1585a904ff55de5544a77084eb932b653b5b73be129b14de5d09b7ad71ea30c13b3ed01af480974324d8fc6798f67f9b5a5d29f20949007a5a93344c4114fac3b01cf5895adcd020754466130574d2a1fd0e17af79d0286d1ec382263d8d3321a482e608bbf31bd43e7f2e1174b9b0f04169bea82bb4cf52682a06", 0xbb}, {&(0x7f0000000680)="65fdfddc0991b65ea8dd01aad8f4ea1151c0b1e6a81ad4e57670d04d56037701e3869254a6204b97dab04bf0591d7e9af3483c3994570af1a259466fb8ca6f77a502127d90b84bc69ea5eed437b49e831fed87429e25b962dda590ab07e89b2485e88d7933f886a87b451531850bbc296a0963040fd7136b8436f0f01a7d73ef94f41771bedae20c34775d636ba6918799ccd1aae69e3fc5ab5beea4574de0e574f2d0f5213ac7825782ffd448cca97274ee2e8bafb1dfb43fff22062912b6", 0xbf}], 0x5, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee00, 0xee00}}}], 0xb8, 0x44000}}, {{&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000000c00)="875f6f7ed011979b010643809ad445de9778fb317ab93bf2187e0acd5660cc58d5998e0eb36aa4ee0770825b61e9f1b4cc41a535ddbef477628e1286d2031db96020a38934a01f0e4782f8d8f8feb76066d5fc12c29dd5a7893894bc1aec45f886f7c1820c1b8cb8c8422b579599a15817f5175cf3b1eaaf7bbcb5af9608cccfd0e00d4982f23b30c956bb219585dea17fc2c531ea9b1110d2a6d08d60ea4120abef8ce6128956ac5383d34bc3899dc8bead1649888c6ca1783bc3577ad4a6544d8c67e466aa0939ff2e4ddb81c5e69cb7e8942418e9fd9e340f178b9670a693a79c72e7e34bf55d58012b61bf8c0f08a7", 0xf1}, {&(0x7f0000000d00)="e33ca0427d43bf56237334d2c3400c444121657ea016ed51bfe99024196ed6b438a6d11efb4507c16c58ee1fbdeb1966d04cb7884fb801a1dce02d21273f2a1cdbc90f2571a517571e8779f27f37f3bc178d0f1c70947971c10ba8bba44256606e0e5418bb205274ae254755dd6bf045658e5297ffdf98248820f25efa19359bd2ee72d8a60e40ed0a07db625d454209b1fc07d34f0816bcc57019d18077d2c5523e7cf38c6453dd8d", 0xa9}, {&(0x7f0000000dc0)="1bb52b8369ee61325912230b9904a9585c3ba2ac3f71e024ee58bd713cfca1eb600262742ab40628e9460f477ec2af", 0x2f}, {&(0x7f0000001ec0)="4a90d355a7946eb775ecd8c39eda41a33e19048cdb960f163651fe6203d968c83be5e69e090a5ddfce38a213f79b27cd114061fea68dae997848d2ce3d35026101f583fd2658fc4e07fc250a8cde5b858cc7388a7b1f604d032e429be5714072b22eb45f5a0c0f7ec825efeb3cb341a9a31ebd2845ed6c4c77860f739e56c2cb351903131597f83c4fa5ad1bfc301a14c0277205aa551eff", 0x98}, {&(0x7f0000000e00)="f303deced99d6afea0816a150aacee845579c7f88827e80677dd7a48296aa1d6fbbca7a4037b1fc7a5736961618fe8bfe3297af123000766714dc375843d4cdc4520470517c7ed21", 0x48}, {&(0x7f0000001f80)="6aeece3df7defc2f501ebeaec7cc29a8671aaf530ade55b8e0775f5625156381e59ef6a5504b917f1abbe2cc830f8571eb29d90b72b7651d9c07d429b5159cad3cdfa3963b4083afc8f5ae4d6e3c4a5c8d312b91c13fdbb6493d169acdcea01ec971f0f31c79228bc26a46689f8d362687492989c20ca644c6efaaa4b03629af2f78d89a9fe92e8d0eb35a957aa9bdb20d3adf87b2fef3e3066853875b5d6ac3312ca29bfa44456297ce0f763a6992b5ade68e0e8e3e40169ef1c9f9cd4323a59b26c10d463713c0cae7406eb6b628d02317ac89cfb277a00722a502b1169c4e1f6081882850ee3cdf98c0", 0xeb}, {&(0x7f0000002080)="c1e4fedad250f3689ecebd48846e16ba8908e4c8f9eb71239afeb3f55d2d7c73d696ca0213575eea3df64886ba919d3aa4d0b7a708ba5be540b2fe238010522de8b28afb5abc156a1c11f7ec80340bff0212d63f0666cc53e680d3c78a3e181748f6bf60ea3d9ae499dfeb6ba1eebe4e6039b54aa2688e622a3bb8acb2414fd3f78965d8b96fb5cbb2d0240cfa1abd4722a5ddfd36024d61e6e8e70509ae318bcc38c666c9d7fca2c297554998403483b41a92dc73829ba99a1ab018a8b58501eb195da9747569387948c398c3937461c18e03b4e2b318", 0xd7}, {&(0x7f0000002180)}], 0x8, 0x0, 0x0, 0x4000890}}], 0x2, 0x20000000) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x5c, r15, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x191}], @NL80211_ATTR_FRAME={0x2e, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @broadcast, @device_b, @initial, {0xe, 0x503}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0xac, 0xc}}, @val={0x3e, 0x1, 0x1}, @val={0x76, 0x6, {0x3, 0x0, 0x12, 0x6}}}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000005) 788.771271ms ago: executing program 1 (id=2702): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x40010, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0x50) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 785.345266ms ago: executing program 2 (id=2703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0c00238006001600609f00"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x810) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x8040) 784.193059ms ago: executing program 3 (id=2704): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) unshare(0x28020480) r3 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x22) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000", 0x12}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000740)={'tunl0\x00', r7, 0x8020, 0x7, 0x7, 0x1, {{0xa, 0x4, 0x2, 0x7, 0x28, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x13, 0x4c, [@loopback, @rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="7b7ab8d23c0440e0789267648a13888fbdb4f0efe6ac0e1c2045dcec532c77d55c6b271d0180a36e1e6c9fc45fc75c97246206e8d5936f3dce02f470ec354dcceb88505a272a8fe0f27c3bdc65614161c29f8911b7d5092b9e2c212646d1041dae29db4defd9c227e027", 0x6a}, {&(0x7f0000000400)="75d06397d54af55f0251adaa0d3a955121359b7a0deb322fa7a159c2ef3a731571994e1e80ae81239933620ac6c9a9270d50230067ffb39c585b47d8d003511e12e4c3f29173eaeaf0b4b07d5139ba7348ce6d23504a63f7a518d54125a48d8bd8fc4bf5abed6c4a7597673ba7faf36b0e2c3e570ebdd25b18f9be67239aaf25739639bc0d7c7d8ce8e1eda47df4b7419a75c3058661d80e2f1ad9e2cb37308e41def7ea6f9c691684713670678f6f0d7fe4366e83847c5384c09eb98bf00c24c1fbc7ee9a8edc3693", 0xc9}, {&(0x7f0000000640)="c4f6190ff2939fee8127b24163632f5d92f62be0f97f2b492dafc05514bf7291da8b4f69dd803c30e58960b83a12e89ae22c1532da6a2d02b5110974038d0902622ffd9cffb6ffbe8c30504b3f8f3a0a9edac2c15e19f5ddb85e845900eec128b1c16cb91ee9167228077c61112d8f42201fae70abcff1cd5624af447a2e700328e6862d65b73a635342011f868e79f1dfc4efb152dfff415eecb120e06931e3706ec6513c552a8598402fa82c78fa4091cc18b920804036c71bcd173e76e7069967847bb1d8877898d71e62508dfab07efec90dc8a783348e3409", 0xdb}, {&(0x7f0000000500)="38805b39b15ee70fa2eef7ed11d35dfc2e6dd88530bfee49e9f2e5286e68fc7cb01470b6c0af321284c4303e4c9b1e5903cf408b8a948e0ddcf37e290c237b04b32c5c9f22068563faa60200ebc596f53804f93e1662f26c3ef021d46f0cc656332d77ce8042aab0c6992ad3138a1771ac76a1278fc5f897da62c57406e4ba7c5e3dfe0fc7f80e2b047e2e1286aee9e1e03e648d26cdfa7fabb6fb39bf516a3dccbb6447667f75c97d1ba9a4148807a20e97b6c1affbfd", 0xb7}], 0x4, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010102, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc8}}], 0x70}}, {{&(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000880)="968e60ec91a2146dd317ec67abd2677a93991679d8fa41c2b8597d364f7ec052b407167994b7a5dfc2a707950c14e58a4bd2a165ae5366e6616e8c3583f53deb9608b42278dbe6000b6ba727e4026141ccf0684eb54542a59fb7f1398d74df444f4a218aee590865c70af9a01bec2d3543f4f8dd2370626ce1481ca93767430067a7f2c2c932f65844ee9f16739d613a52b38a2d4269cc0fb0b742ff76cc52895a73d133a720cd18dfc8a629608d134d84d64a02be70010b14624f1a7c0fa511f7916352995d9f1fe6bd977891077d8c8b8541a70af1dcb444a14e775ae0a0b28d340640e6ac63b417e8a048d9aa845bd1c51e8dbb9dc35be7", 0xf9}, {&(0x7f0000000980)="85a865e68a1a05233943e9d04c5e8d46779a267677cd212068966e412b95c0045d43b0132ae619dbeee69366eb6e75f8465d6db4a4f1dd1f420aa50e76023fa8f93e238dd311afc42dda59b91a1ab26c0eb0c253ba65afe1392961377032e8c9586c0ff0257fc50aabd2b9846f633788ee72e306cab6d15b82cf4fea1240109d95a26f1f638572eb7c33bb67c39a76737fca6dec9dcd8853e3f937e52cff773e3d18327c800a1d2c1a5d546de2e0a3ee0b69312493d2b980da7d2e8bec0c6f4a9f", 0xc1}], 0x3, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}}], 0x2, 0x4000000) (async) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000f5070303000200140000004510002800000000390b6627ac1414aaffffffff4e2088a8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000590780000"], 0x36) 783.255402ms ago: executing program 4 (id=2705): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000a54955317628d650000000000049e4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000180)={r1, &(0x7f0000000080), 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x1f, &(0x7f0000000180)=[{&(0x7f0000000540)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x4080) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0xb2f7e973b0d0ad39, 0xf8, 0xe, 0x2, 0x40, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8000, 0x8, 0x1}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000440)}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040026bd7000ffdbdf2509000000080002000100080008000300820000000400068004000680"], 0x2c}}, 0x55) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 625.586459ms ago: executing program 2 (id=2706): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x21, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) socketpair(0x27, 0x3, 0x104539e6, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@multicast1, @dev, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000a40)={0x610, 0x13, 0x200, 0x70bd27, 0x25dfdbfc, {0x2b, 0x20, 0x9, 0x4, {0x4e21, 0x4e21, [0x8, 0x7d, 0x2, 0x9], [0xffff, 0xf149, 0xff, 0x5], r8, [0x800, 0xffff8000]}, 0xd, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "386a89118b6731ee4505d77609b89e1cbd122e06633c2bd98d50ac89fea08ec4289a52918489e5676daac4fc7847a2ad9d6073b0a17edbcdb630c32d525cab3a24ec624b4bd5a9208d8b5b7e01be99b7a968a38f020c246ada"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "5002023b3b92ff53b61f87d7c97f958c9d5e7c15d04f9d3db53303e91442567abceca9edb40e81b34acfac2bf09ad23269f5d70c0f4073a40690bbdfd04de1d17cbab583e2a45ca53112cb5f7a2f3b5a33e5c34ba8f31fa991e02d6a0bfdb76ca99b9b1ad201e7a21261adb8fb68d92ee16f5e3611ae8fea86b33c356938f2ca43a804483c9bde20d0288796bd155e99290ff8f66f9acacf7d56d1be7b5c33d47492510ca8e24934fdbf3b80e961c929a4502789fd543ba52ae94781"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "79a3eab5acdc50034bb0a849f342b28ea2111245a88766d87a687520f6b007e1d576561333ea6feda9a25eeb2e24ba79af09fdfaa11b3c0203816cb8892fb595ade717cb71c46277ca282fca69cee2b498fed51f40dce85c38bcc66133f54ced9e9ed536830ce33e3e0721c9f619a3077d"}, @INET_DIAG_REQ_BYTECODE={0x71, 0x1, "f7ab4459ac43678bbb788745ec7aa0c967e5620de71302d74e03a6eb4ed7535b81f4c512fd7f1efc460d29b3e3dce87e1e3fe0796c21e92e53d1818d717fa3fa729779874bbbc33c8f8e82d92bbcacf83c761f803c9430a5e95e098bd0f5cf9c87aa8bd5b71823f387be34602f"}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "6c608afc3c2a085059c87860001a385eea0f18d3d8a223ab015cb3d2bf94e540c0b39c8eb8bc7476e6cdaac031bf42f9643b75371d40592e3e25e8c242fcff48b74b71fb6aafc2bacb44796df7806dd093ee1b885c2402c094642c8f6041da7a8a2456a6ecc7c4b44b54f64a52b3235327d0592ef77c0729835f05a849932034340d04e092ad614e3f541150c313016b5a7e75313e8f69c89b38ad2e04f95329461745fb11f45f08895110e47bbe60e2aa98a46405d9893f38eba18e72e358bd44a7891c"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "21911c82075423cfe7ddd6d84086900f24ca73a69e8714597e25b8149c9dc24dd0c33db31c476c620e10eb5b6d40ade77626e168e724bb11124c08b6d2672880d999389281a2c123cc3398d745da51416a"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "c43dfa4236d9355990473a86fcca4e78b37ee036bc05b012c4ed7be8b855ff0fc3d49e461537c8c909f5651913bb7aa5ea1fe58dbbbc6a9c1579772c330157315c18bfd884ae0015d0095779a8c394213a1ef517666bae69f730474e9d63cc9d1b120cbc998e196e2be66b81c4fb95542bbe0cc26823b761733e813e6cb55f5689a22fabed9967c33d54ea31087bbfe1d047fa90bfdc76d3fa16735b45e78fad136786199dd75f5e78c78aebaa9f1e1f789dd60a1a163114fc5d04cf5b8a291d1ae98be45328"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "1eebf73457c10ae0319be18a3ced992b2316292e8065e55fee01598f843bd2a8d52efa213a2f0e9215e0864b046858b77873fb0fe20dfb876958d24bd1e465fd59275a8082877a89d0b8b260153d4077fc1b4b8a0de323ca95c5918107948a0292432bb727e6c725044a98f8d0615a7db0d728db30e65b10960c1533147679916591eb67492ff061fc2faf5dc9a3c9eb5ee88448bec8d7b28cdd517c14b861069196c8071252304d16c8cc3f57ee2968800cb3e0c62628bb8422effcdbe03602ac"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}]}, 0x610}, 0x1, 0x0, 0x0, 0x84}, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)='>', 0x1}], 0x1}, 0x4000040) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r10, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000003300405e8effe856ce49090000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003000000006e30000000000000000000000014000000110001"], 0xa4}}, 0x0) 624.989151ms ago: executing program 1 (id=2707): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, "001863718e9bf703"}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, &(0x7f0000000080)={0x7, 0x1, 0x6537, 0x9, 0x339, 0x9, 0x3, 0x6}, 0x0, &(0x7f0000000140), 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040), 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6}}, 0x20}}, 0x0) 601.051796ms ago: executing program 0 (id=2708): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) 534.152034ms ago: executing program 1 (id=2709): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x21, 0x800000}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x10000}]}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRESOCT=r4, @ANYBLOB="334f1ebb7e53dcae7a317439aadd429f34f50bae26ec2161b65191ce9de9c6e4fb8c5feb41cb67b50f81bd3ee6d1057f7eb6d5df2d0756ed8015204344418a3ace7c32228ba1162fd94edfaa0c7d4dcc94", @ANYRESOCT=r3, @ANYBLOB="0f5f1746a403130d4b88f46cfc4cac24ae39f197e83110c46881ddfb91a29aaa00a8f52d5f71a86276fccd5252eaa0cbe6046e32b0ff839f3ba43f577567c11a604d14e3781588dde1f6754d862f307cf3cfe1bf1ab8c9967ca101bf20f540e5ab60fa36fbb78d1ff0323c5713dc9c1a9cde585f6b99ac258dc928f8b5821064e4175d25d5ccf278b5ae0693c8001a530fe2a77b5035790488a687243bfe89eddbca5f48cb797b8de3da4de703be93f08ff55f0200b87925f74918976f6f8fd99e6ee66a476cea88ac756772f0d02d9a1031ad2b82d29cf2c444073a29686af5e555e0f622c3824b6a93214ddc46", @ANYRES8=r2, @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r5) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000400000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="050034008b0000001400490006ac0f0009ac0f00"], 0x38}}, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg(r10, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x50000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a30000000000900010073797a300000000008000a400400000420000000080a01040000000000000000010000000900010073797a30"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), r11) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000004, 0x810, 0xffffffffffffffff, 0x7e7f8000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r11, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)={0x1c, r13, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 457.956539ms ago: executing program 3 (id=2710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000080611250000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x44884) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x2000c800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getnetconf={0x3c, 0x52, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x40}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x5}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1}, @NETCONFA_IFINDEX={0x8, 0x1, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 451.767379ms ago: executing program 4 (id=2711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="100000000000000000000000e73800001000000000000000100100000a000000"], 0x20, 0xe000}, 0x5}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r7, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xffe0}}]}}]}, 0x3c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000040)={@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x1, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000340)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r11, &(0x7f0000000400), &(0x7f00000003c0)=@udp, 0x1}, 0x20) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xa2}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_deladdr={0x40, 0x15, 0x0, 0x70bd25, 0x25dfdbfe, {0x2, 0x19, 0xa, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0x5b, 0xffffff00, 0x4, 0x3800}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x2, 0x9, 0x8}}]}, 0x40}}, 0x0) 436.893638ms ago: executing program 0 (id=2712): r0 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x81800) sendmmsg$unix(r2, &(0x7f0000000100), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000002f00)={@any, 0xffffffff, 0x59, 0x84bc, 0x5, 0x1000, "3f8a6283e984ce35ae72c90ffdf6281be562af6664a9fc4744e26712e127a6409acf16a3c820cf21aa451306b76a0c000000000000001ae2c88208f395080000761c8fc1ab7c2d2415303e51a42a1bb7b5f2145b4469bb8be30f62a1365f591fe48a90568e24865bf6fc7cee0d08499e27cb1354e89fdf99a1b5b2adc0307f44"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1a) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0xff85}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000840)) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.bfq.empty_time\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x4, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000580)={@rand_addr=0x64010101, 0x1, 0x0, 0x30, 0x0, [{@broadcast}, {@multicast2}, {@dev}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000100)={0x1, 0x6, 0x6}) 361.967114ms ago: executing program 3 (id=2713): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000004, 0x12, r0, 0xc08ba000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r0, 0xe93f6000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 305.774408ms ago: executing program 1 (id=2714): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket(0x22, 0x5, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) 74.363067ms ago: executing program 4 (id=2715): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x1000042, 0xa, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c}, 0x20) close(0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000004400128009000100766c616e00000000340002800600010002000000280003800c00010000000000050000000c00010000000000800000000c000100030000000101000008000500", @ANYRES32=r1, @ANYBLOB="45fa4bfdf7856520194b035fd143f5a323347cb9f99c5804cd80a769fcca413e39a246b3075407ab4263ae62fbaab201e220b72e6005df6bcb85fdba397e512a198cd489729189347f76b1db1a209ab67f02e63648298059fd3d519889a514"], 0x6c}}, 0x0) 56.120513ms ago: executing program 0 (id=2716): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800024000000016080001400000000008000440000000080900010073797a30000000000900020073797a3200000000140000000300010080000000000000000000000a"], 0x80}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cb"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x8080) 55.759643ms ago: executing program 3 (id=2717): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="08002600b40900000800270000000000050018013c0000000800a100000000e5a5af15"], 0x3c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r4, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x60, r5, 0xd13, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}]}, 0x60}}, 0x20044000) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2718): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00000c000180060006008e0a0000"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x14, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002240)={0x30, 0x1410, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) kernel console output (not intermixed with test programs): ess `syz.4.722'. [ 163.979739][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 164.050848][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'. [ 164.273484][ T8457] netlink: 72 bytes leftover after parsing attributes in process `syz.3.726'. [ 164.346757][ T8461] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 164.836089][ T8493] netlink: 13 bytes leftover after parsing attributes in process `syz.1.735'. [ 165.058550][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 165.072656][ T8500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.737'. [ 165.170574][ T8502] bond0: entered promiscuous mode [ 165.176827][ T8502] macvlan2: entered promiscuous mode [ 165.206315][ T8502] batadv0: entered promiscuous mode [ 165.225887][ T8502] bond0: left promiscuous mode [ 165.238353][ T8502] macvlan2: left promiscuous mode [ 165.244655][ T8502] batadv0: left promiscuous mode [ 165.575340][ T8517] netlink: 'syz.0.742': attribute type 21 has an invalid length. [ 165.675198][ T8524] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 166.223093][ T8544] netlink: 'syz.1.750': attribute type 11 has an invalid length. [ 166.257290][ T8544] netlink: 'syz.1.750': attribute type 11 has an invalid length. [ 166.365964][ T8548] RDS: rds_bind could not find a transport for ::ffff:10.1.1.5, load rds_tcp or rds_rdma? [ 166.452675][ T8555] netlink: 'syz.2.753': attribute type 10 has an invalid length. [ 166.487291][ T8555] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 166.642189][ T8562] sctp: [Deprecated]: syz.2.755 (pid 8562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.642189][ T8562] Use struct sctp_sack_info instead [ 166.852998][ T8570] netlink: 'syz.2.758': attribute type 29 has an invalid length. [ 166.872463][ T8570] netlink: 'syz.2.758': attribute type 29 has an invalid length. [ 166.930046][ T8574] ieee802154 phy1 wpan1: encryption failed: -22 [ 167.079489][ T8578] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 167.102719][ T8581] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 167.118116][ T8578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.167913][ T8581] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 167.464167][ T8601] vlan3: entered allmulticast mode [ 167.505113][ T8601] bond0: entered allmulticast mode [ 167.634151][ T8609] tipc: Enabling of bearer rejected, failed to enable media [ 168.550059][ T8645] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 168.642249][ T8651] netlink: 'syz.4.778': attribute type 142 has an invalid length. [ 168.651373][ T8656] netlink: 'syz.4.778': attribute type 142 has an invalid length. [ 168.858837][ T8659] __nla_validate_parse: 7 callbacks suppressed [ 168.858857][ T8659] netlink: 6 bytes leftover after parsing attributes in process `syz.1.781'. [ 168.894180][ T8668] Bluetooth: MGMT ver 1.23 [ 168.916017][ T8668] netlink: 108 bytes leftover after parsing attributes in process `syz.4.785'. [ 168.935382][ T8659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.961363][ T8664] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 168.985771][ T8673] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.784'. [ 169.656681][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 169.717984][ T8710] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 169.725692][ T8710] netlink: 'syz.1.790': attribute type 1 has an invalid length. [ 169.800243][ T8710] netlink: 'syz.1.790': attribute type 2 has an invalid length. [ 169.850207][ T8710] netlink: 68 bytes leftover after parsing attributes in process `syz.1.790'. [ 170.065143][ T8725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.796'. [ 170.113904][ T8723] syz.4.795 uses old SIOCAX25GETINFO [ 170.621479][ T8750] ip6gre2: entered allmulticast mode [ 171.083248][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 171.129557][ T8763] Dead loop on virtual device ip6_vti0, fix it urgently! [ 171.137420][ T8763] Dead loop on virtual device ip6_vti0, fix it urgently! [ 171.144975][ T8763] Dead loop on virtual device ip6_vti0, fix it urgently! [ 171.152382][ T8763] Dead loop on virtual device ip6_vti0, fix it urgently! [ 171.159790][ T8763] Dead loop on virtual device ip6_vti0, fix it urgently! [ 171.167229][ T8763] Dead loop on virtual device ip6_vti0, fix it urgently! [ 171.357210][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'. [ 171.361821][ T8775] netlink: 'syz.0.808': attribute type 14 has an invalid length. [ 171.382694][ T8773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'. [ 171.417776][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 171.447971][ T8776] bond0: entered promiscuous mode [ 171.453083][ T8776] bond_slave_0: entered promiscuous mode [ 171.484364][ T8776] bond_slave_1: entered promiscuous mode [ 171.492413][ T8776] bond0: left allmulticast mode [ 171.497310][ T8776] bond_slave_0: left allmulticast mode [ 171.506536][ T8776] bond_slave_1: left allmulticast mode [ 171.655836][ T8790] bridge0: entered promiscuous mode [ 171.676325][ T8795] veth0: entered promiscuous mode [ 171.713493][ T8782] veth0: left promiscuous mode [ 171.731242][ T8782] bridge0: left promiscuous mode [ 171.834391][ T8802] ieee802154 phy1 wpan1: encryption failed: -22 [ 171.850441][ T8798] openvswitch: netlink: Actions may not be safe on all matching packets [ 171.895202][ T8797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.026211][ T8797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.157041][ T8813] TCP: TCP_TX_DELAY enabled [ 172.198829][ T8816] dvmrp1 (unregistering): left allmulticast mode [ 172.280278][ T8797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.510431][ T8797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.577033][ T8843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.595091][ T8843] gretap2: entered promiscuous mode [ 172.604256][ T8843] gretap2: entered allmulticast mode [ 172.852357][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.060353][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.166652][ T78] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.280446][ T78] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.592788][ T8875] vlan4: entered allmulticast mode [ 173.608092][ T8875] bridge0: entered allmulticast mode [ 173.615579][ T8875] bridge3: port 1(vlan4) entered blocking state [ 173.655004][ T8875] bridge3: port 1(vlan4) entered disabled state [ 173.719190][ T8875] vlan4: entered promiscuous mode [ 173.750146][ T8887] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 174.210818][ T8910] __nla_validate_parse: 11 callbacks suppressed [ 174.210836][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 174.304872][ T8910] vlan0: entered allmulticast mode [ 174.336422][ T8910] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 174.539124][ T8925] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 174.578302][ T8925] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 174.615486][ T8925] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 174.681027][ T8925] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 174.698836][ T8925] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 174.710289][ T8925] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 174.719052][ T8925] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 174.766733][ T8925] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 174.795407][ T8925] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 174.829368][ T8925] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 174.984429][ T8938] netlink: 76 bytes leftover after parsing attributes in process `syz.4.845'. [ 175.243554][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 175.299297][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.851'. [ 175.307999][ T8958] openvswitch: netlink: Duplicate or invalid key (type 0). [ 175.363840][ T8962] netlink: 244 bytes leftover after parsing attributes in process `syz.2.854'. [ 175.387360][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 175.420710][ T8956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.435885][ T8966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.854'. [ 175.490115][ T8967] syzkaller1: entered promiscuous mode [ 175.513030][ T8967] syzkaller1: entered allmulticast mode [ 175.688928][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.856'. [ 175.709203][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 175.761635][ T8973] tipc: Enabling of bearer rejected, failed to enable media [ 175.797224][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 176.018652][ T8991] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 176.350461][ T9003] gretap2: entered promiscuous mode [ 176.355740][ T9003] gretap2: entered allmulticast mode [ 176.924681][ T6531] udevd[6531]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 176.971877][ T6531] udevd[6531]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 177.201623][ T9052] hsr0 speed is unknown, defaulting to 1000 [ 177.361445][ T9066] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 177.727913][ T9085] net_ratelimit: 2 callbacks suppressed [ 177.727932][ T9085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.761862][ T9085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.796768][ T9085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.891607][ T9085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.947083][ T9085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.991967][ T9085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.093314][ T9085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.109170][ T9085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.136930][ T9085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.167284][ T9085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.465234][ T9112] sctp: [Deprecated]: syz.2.895 (pid 9112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.465234][ T9112] Use struct sctp_sack_info instead [ 179.408180][ T9153] __nla_validate_parse: 27 callbacks suppressed [ 179.408198][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 179.600436][ T9163] netlink: 96 bytes leftover after parsing attributes in process `syz.1.913'. [ 179.614460][ T9163] 8021q: VLANs not supported on sit0 [ 179.647410][ T9164] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.912'. [ 179.716980][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 180.071845][ T9177] net veth1_virt_wifi .: renamed from virt_wifi0 [ 180.164719][ T9184] syzkaller0: entered promiscuous mode [ 180.275284][ T9184] syzkaller0: entered allmulticast mode [ 180.465085][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.924'. [ 180.871797][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 180.887360][ T9234] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 180.968268][ T9245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.984574][ T9245] IPv6: NLM_F_CREATE should be set when creating new route [ 181.211316][ T9253] hsr0 speed is unknown, defaulting to 1000 [ 182.269009][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.942'. [ 182.440306][ T9299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.943'. [ 183.184198][ T9333] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 183.231267][ T9338] net_ratelimit: 25 callbacks suppressed [ 183.231287][ T9338] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 183.395583][ T9346] netlink: 256 bytes leftover after parsing attributes in process `syz.2.960'. [ 183.409767][ T9346] unsupported nlmsg_type 40 [ 183.702736][ T9354] ieee802154 phy1 wpan1: encryption failed: -22 [ 183.910415][ T9362] validate_nla: 63 callbacks suppressed [ 183.910435][ T9362] netlink: 'syz.0.964': attribute type 1 has an invalid length. [ 183.937774][ T9362] netlink: 224 bytes leftover after parsing attributes in process `syz.0.964'. [ 184.114556][ T9371] netlink: 'syz.4.966': attribute type 1 has an invalid length. [ 184.322967][ T9371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.424709][ T9386] IPv6: sit1: Disabled Multicast RS [ 184.706888][ T9405] netlink: 'syz.4.970': attribute type 1 has an invalid length. [ 184.801170][ T9405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.870289][ T9414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.972'. [ 184.902217][ T9409] bond3: (slave gretap3): making interface the new active one [ 184.955850][ T9409] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 185.077040][ T9423] netlink: 'syz.0.974': attribute type 10 has an invalid length. [ 185.190977][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.975'. [ 185.272685][ T9428] team_slave_0: entered promiscuous mode [ 185.278738][ T9428] team_slave_1: entered promiscuous mode [ 185.308461][ T9428] macsec1: entered promiscuous mode [ 185.321555][ T9428] team0: entered promiscuous mode [ 185.335151][ T9428] macsec1: entered allmulticast mode [ 185.346934][ T9428] team0: entered allmulticast mode [ 185.357343][ T9437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.978'. [ 185.386035][ T9428] team_slave_0: entered allmulticast mode [ 185.394975][ T9428] team_slave_1: entered allmulticast mode [ 185.405308][ T9428] team0: Device macsec1 is already an upper device of the team interface [ 185.421888][ T9428] team0: left allmulticast mode [ 185.432589][ T9428] team_slave_0: left allmulticast mode [ 185.446834][ T9428] team_slave_1: left allmulticast mode [ 185.456652][ T9428] team0: left promiscuous mode [ 185.465478][ T9428] team_slave_0: left promiscuous mode [ 185.471034][ T9428] team_slave_1: left promiscuous mode [ 185.525980][ T9432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.608934][ T9444] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.979'. [ 185.881356][ T9457] netlink: 36 bytes leftover after parsing attributes in process `syz.4.982'. [ 185.934522][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.958864][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.968221][ T9466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.983'. [ 185.993269][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.112796][ T9472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 186.180050][ T9475] netlink: 'syz.2.987': attribute type 4 has an invalid length. [ 186.218439][ T9478] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 186.245863][ T9472] netlink: 'syz.2.987': attribute type 1 has an invalid length. [ 186.259108][ T9472] netlink: 15 bytes leftover after parsing attributes in process `syz.2.987'. [ 186.528541][ T9485] syzkaller0: entered promiscuous mode [ 186.534938][ T9485] syzkaller0: entered allmulticast mode [ 188.154033][ T24] IPVS: starting estimator thread 0... [ 188.248215][ T9519] IPVS: using max 30 ests per chain, 72000 per kthread [ 188.320942][ T9523] IPVS: set_ctl: invalid protocol: 98 172.20.20.42:20002 [ 189.503380][ T9512] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 189.511439][ T9512] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 189.522002][ T9512] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 189.531063][ T9512] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 189.539363][ T9512] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 189.552436][ T9512] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 189.562049][ T9512] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 189.574357][ T9512] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 189.586579][ T9512] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 189.602251][ T9512] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 189.612344][ T9547] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1006'. [ 189.623770][ T9529] tipc: Started in network mode [ 189.631023][ T9529] tipc: Node identity 2af457e3e18c, cluster identity 4711 [ 189.638973][ T9529] tipc: Enabled bearer , priority 0 [ 189.647343][ T9530] syzkaller0: entered promiscuous mode [ 189.667835][ T9530] syzkaller0: entered allmulticast mode [ 189.711207][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 189.728331][ T9548] bridge0: port 3(batadv2) entered blocking state [ 189.736720][ T9548] bridge0: port 3(batadv2) entered disabled state [ 189.778947][ T9548] batadv2: entered allmulticast mode [ 189.786338][ T9548] batadv2: entered promiscuous mode [ 189.840477][ T9540] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 189.959585][ T9559] vlan2: entered allmulticast mode [ 189.968320][ T9559] bridge0: entered allmulticast mode [ 189.988696][ T9559] bridge4: port 1(vlan2) entered blocking state [ 190.028164][ T9559] bridge4: port 1(vlan2) entered disabled state [ 190.059289][ T9559] vlan2: entered promiscuous mode [ 190.082806][ T9559] bridge0: entered promiscuous mode [ 190.108389][ T9538] tipc: Resetting bearer [ 190.183893][ T9538] tipc: Disabling bearer [ 190.245493][ T3534] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 190.255172][ T3534] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 190.453247][ T9587] __nla_validate_parse: 4 callbacks suppressed [ 190.453267][ T9587] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1015'. [ 190.482115][ T9588] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1011'. [ 191.237453][ T9588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.251451][ T9588] bond_slave_0: left allmulticast mode [ 191.269453][ T9588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.280171][ T9588] bond_slave_1: left allmulticast mode [ 191.293396][ T9588] bond0 (unregistering): Released all slaves [ 191.531073][ T9627] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1021'. [ 191.725079][ T9639] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1026'. [ 192.101150][ T9656] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.112415][ T9656] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.152169][ T24] hsr0 speed is unknown, defaulting to 1000 [ 192.210952][ T9656] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.222993][ T9656] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.322619][ T9656] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.343581][ T9656] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.677306][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.687141][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.712740][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.714339][ T9666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.721806][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.741747][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 192.779863][ T1159] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.789145][ T1159] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.859073][ T3547] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.873014][ T3547] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.883807][ T9673] atomic_op ffff88807e3db198 conn xmit_atomic 0000000000000000 [ 193.383262][ T9696] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1044'. [ 193.851241][ T9714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1049'. [ 193.946396][ T9717] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1051'. [ 193.972939][ T9721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1052'. [ 193.992695][ T9722] netem: incorrect ge model size [ 193.998314][ T9722] netem: change failed [ 194.020137][ T9721] nbd: must specify a size in bytes for the device [ 194.030733][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'. [ 194.835977][ T9761] can: request_module (can-proto-0) failed. [ 195.291147][ T9776] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 195.522718][ T9793] __nla_validate_parse: 4 callbacks suppressed [ 195.522737][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'. [ 196.051912][ T9815] bridge_slave_0: left allmulticast mode [ 196.057803][ T9815] bridge_slave_0: left promiscuous mode [ 196.063757][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.146044][ T9815] bridge_slave_1: left allmulticast mode [ 196.182686][ T9815] bridge_slave_1: left promiscuous mode [ 196.223442][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.240418][ T9836] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1083'. [ 196.317317][ T9836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1083'. [ 196.341584][ T9815] bond0: (slave bond_slave_0): Releasing backup interface [ 196.381365][ T9815] bond_slave_0: left promiscuous mode [ 196.414292][ T9815] bond0: (slave bond_slave_1): Releasing backup interface [ 196.438801][ T9815] bond_slave_1: left promiscuous mode [ 196.466857][ T9815] team0: Port device team_slave_0 removed [ 196.549194][ T9815] team0: Port device team_slave_1 removed [ 196.591392][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.600626][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.611170][ T9815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.619385][ T9815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.627319][ T9819] openvswitch: netlink: EtherType 257 is less than min 600 [ 196.644540][ T9815] bond1: (slave bond2): Releasing backup interface [ 196.652474][ T9815] bond1: (slave bond2): the permanent HWaddr of slave - 56:ed:9a:2b:2a:9a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 196.670599][ T9815] bond1: (slave gretap1): making interface the new active one [ 196.686045][ T9815] bond1: (slave gretap1): Releasing backup interface [ 196.709380][ T9815] team0: Port device bond3 removed [ 196.716453][ T9815] batadv2: left allmulticast mode [ 196.722075][ T9815] batadv2: left promiscuous mode [ 196.732274][ T9815] bridge0: port 3(batadv2) entered disabled state [ 196.767902][ T9815] syz.1.1082 (9815) used greatest stack depth: 16304 bytes left [ 197.570221][ T9900] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1103'. [ 197.603159][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1103'. [ 197.617951][ T9901] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1103'. [ 197.635470][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1103'. [ 197.767153][ T9910] openvswitch: netlink: Unknown key attributes 2 [ 198.067893][ T9915] syzkaller0: entered promiscuous mode [ 198.099895][ T9915] syzkaller0: entered allmulticast mode [ 198.107292][ T9918] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 198.114053][ T9918] syzkaller0: Linktype set failed because interface is up [ 198.144205][ T3534] syzkaller0: tun_net_xmit 48 [ 198.221000][ T9930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.251828][ T9930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.605273][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.924122][ T9930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.934864][ T9930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.992854][ T9945] tipc: Enabled bearer , priority 0 [ 200.025916][ T9948] syzkaller0: entered promiscuous mode [ 200.050909][ T9948] syzkaller0: entered allmulticast mode [ 200.086482][ T9953] tipc: Resetting bearer [ 200.166721][ T9967] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1120'. [ 200.185490][ T9930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.192153][ T9971] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 200.216611][ T9930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.253526][ T9953] tipc: Resetting bearer [ 200.258744][ T9971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.315004][ T9953] tipc: Disabling bearer [ 200.380165][ T9930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.391406][ T9930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.509016][ T3572] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.518115][ T3572] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.602808][ T3572] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.625750][ T3572] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.700181][ T3572] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.746466][ T3572] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.878148][ T3534] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.895592][ T3534] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.103272][ T9997] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1126'. [ 201.155442][T10017] macvtap1: entered promiscuous mode [ 201.182671][T10017] macvtap1: entered allmulticast mode [ 201.198340][T10017] veth0_macvtap: entered allmulticast mode [ 201.251207][T10022] tipc: Enabled bearer , priority 0 [ 201.422817][T10021] tipc: Disabling bearer [ 203.423627][T10083] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1149'. [ 203.450321][T10083] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1149'. [ 203.804787][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1156'. [ 203.838155][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 203.971186][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 204.082614][T10129] ieee802154 phy1 wpan1: encryption failed: -90 [ 204.320760][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 204.330111][T10146] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1164'. [ 204.384632][ T49] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 205.868860][T10200] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 205.916748][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 205.942045][T10198] hsr0 speed is unknown, defaulting to 1000 [ 206.018631][T10191] ifb1: entered promiscuous mode [ 206.078551][T10191] ifb1: entered allmulticast mode [ 206.195530][T10216] validate_nla: 44 callbacks suppressed [ 206.195549][T10216] netlink: 'syz.1.1174': attribute type 2 has an invalid length. [ 206.242780][T10217] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 206.259358][T10216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.683106][T10227] netlink: 'syz.4.1177': attribute type 29 has an invalid length. [ 206.695174][T10227] netlink: 'syz.4.1177': attribute type 29 has an invalid length. [ 206.703245][T10236] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 206.719188][T10227] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1177'. [ 206.740420][T10237] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 206.964250][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 207.005395][T10249] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1183'. [ 207.072783][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1185'. [ 207.140155][T10256] gtp1: entered promiscuous mode [ 207.145265][T10256] gtp1: entered allmulticast mode [ 207.274283][T10260] tipc: Enabling of bearer rejected, failed to enable media [ 207.298126][T10260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1187'. [ 207.345409][T10264] netlink: 'syz.4.1186': attribute type 1 has an invalid length. [ 207.354560][T10264] netlink: 'syz.4.1186': attribute type 4 has an invalid length. [ 207.376100][T10264] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1186'. [ 207.389406][T10263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1188'. [ 207.611935][T10261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.637208][T10261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.766323][T10261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.782180][T10261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.805219][ T30] audit: type=1800 audit(1754549487.520:3): pid=10275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1192" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1244 res=0 errno=0 [ 207.845831][T10277] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 207.934047][T10277] macvlan2: entered promiscuous mode [ 207.951859][T10277] macvlan2: entered allmulticast mode [ 207.998450][T10277] bond4: entered promiscuous mode [ 208.008770][T10277] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.033052][T10277] bond4: left promiscuous mode [ 208.137466][T10261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.177867][T10261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.238802][T10293] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 208.264525][T10297] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 208.276026][T10261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.296974][T10261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.327947][ T5842] Bluetooth: hci1: command 0x0401 tx timeout [ 208.487126][T10307] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 208.554309][ T3547] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.566902][ T3547] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.607524][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.623144][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.630399][T10315] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1204'. [ 208.651856][T10309] tipc: Enabled bearer , priority 0 [ 208.673803][T10309] syzkaller0: entered promiscuous mode [ 208.682433][T10309] syzkaller0: entered allmulticast mode [ 208.697377][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.706927][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.730702][ T5842] Bluetooth: hci0: command tx timeout [ 208.753443][T10309] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1202'. [ 208.765489][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.786335][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.803239][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 208.814971][T10324] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 208.842384][T10319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.851476][T10308] tipc: Resetting bearer [ 208.890092][T10308] tipc: Disabling bearer [ 208.944942][T10321] gretap1: entered promiscuous mode [ 208.981528][T10321] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 209.001344][T10322] syzkaller0: entered promiscuous mode [ 209.007140][T10322] syzkaller0: entered allmulticast mode [ 209.042946][ T24] IPVS: starting estimator thread 0... [ 209.051818][T10331] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 209.123869][T10322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.138876][T10333] IPVS: using max 27 ests per chain, 64800 per kthread [ 209.155005][T10322] team0: Device gtp2 is up. Set it down before adding it as a team port [ 209.357395][T10345] nbd: must specify a device to reconfigure [ 209.443493][ T800] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.457360][ T800] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.470301][ T800] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.482158][ T800] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.624812][T10357] macvlan0: entered promiscuous mode [ 209.640365][T10357] macvlan0: entered allmulticast mode [ 209.874894][T10372] netlink: 'syz.4.1223': attribute type 1 has an invalid length. [ 209.886289][T10372] netlink: 'syz.4.1223': attribute type 2 has an invalid length. [ 209.894172][T10372] netlink: 'syz.4.1223': attribute type 1 has an invalid length. [ 209.935572][T10365] bond4: entered promiscuous mode [ 209.947944][T10365] bond4: entered allmulticast mode [ 209.964665][T10365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.004288][T10379] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 210.225239][T10390] NCSI netlink: No device for ifindex 0 [ 210.798515][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 210.903425][T10396] lec:lec_atm_close: lec0: Shut down! [ 210.983539][T10434] syzkaller1: entered promiscuous mode [ 210.991608][T10434] syzkaller1: entered allmulticast mode [ 211.437159][T10449] validate_nla: 2 callbacks suppressed [ 211.437178][T10449] netlink: 'syz.2.1242': attribute type 3 has an invalid length. [ 211.607201][T10459] netlink: 'syz.0.1246': attribute type 8 has an invalid length. [ 211.993464][T10481] netlink: 'syz.0.1254': attribute type 1 has an invalid length. [ 212.564481][T10519] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 212.573867][T10519] __nla_validate_parse: 74 callbacks suppressed [ 212.573885][T10519] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1268'. [ 212.589721][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'. [ 212.877153][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'. [ 213.626607][T10537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1273'. [ 213.780727][T10516] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 213.791027][T10516] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 213.905707][T10527] hsr_slave_1 (unregistering): left promiscuous mode [ 213.928945][T10544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1274'. [ 214.051742][T10540] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1274'. [ 214.131710][T10557] netlink: 'syz.3.1277': attribute type 10 has an invalid length. [ 214.244517][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'. [ 214.282834][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'. [ 214.385361][T10573] 8021q: VLANs not supported on ipvlan0 [ 214.497237][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 214.522123][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'. [ 214.866002][T10608] netlink: 'syz.1.1297': attribute type 19 has an invalid length. [ 214.892139][T10610] netlink: 'syz.1.1297': attribute type 19 has an invalid length. [ 214.902923][T10611] tipc: Enabled bearer , priority 0 [ 214.928459][T10609] tipc: Enabling of bearer rejected, already enabled [ 215.097024][T10609] syzkaller0: entered promiscuous mode [ 215.111673][T10609] syzkaller0: entered allmulticast mode [ 215.135328][T10609] tipc: Resetting bearer [ 215.235648][T10609] tipc: Resetting bearer [ 215.468830][T10656] netlink: 'syz.2.1307': attribute type 83 has an invalid length. [ 215.487679][T10657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.761619][T10671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.701594][T10609] tipc: Disabling bearer [ 216.739568][T10671] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 217.040804][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 217.040822][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 217.040863][ T5847] Bluetooth: hci1: command 0x0401 tx timeout [ 217.217214][T10699] veth5: entered allmulticast mode [ 217.588718][T10723] __nla_validate_parse: 12 callbacks suppressed [ 217.588738][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1325'. [ 217.681274][T10727] pimreg3: entered allmulticast mode [ 217.824503][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1332'. [ 218.053264][T10761] bridge_slave_0: entered promiscuous mode [ 218.092529][ T30] audit: type=1800 audit(1754549497.810:4): pid=10758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1334" name="memory.events" dev="tmpfs" ino=1206 res=0 errno=0 [ 218.313514][T10771] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1337'. [ 218.772390][T10777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1340'. [ 218.788248][T10777] netlink: 15360 bytes leftover after parsing attributes in process `syz.2.1340'. [ 218.969751][T10789] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1344'. [ 218.989743][T10789] gretap0: entered promiscuous mode [ 219.000713][T10789] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1344'. [ 219.018248][T10789] 0ªî{X¹¦: renamed from gretap0 [ 219.041362][T10789] 0ªî{X¹¦: left promiscuous mode [ 219.056840][T10789] 0ªî{X¹¦: entered allmulticast mode [ 219.079388][T10789] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 219.156820][T10790] netlink: 'syz.4.1345': attribute type 39 has an invalid length. [ 219.188902][T10803] netlink: 'syz.3.1350': attribute type 24 has an invalid length. [ 219.208153][T10801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1345'. [ 219.326414][T10813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1349'. [ 219.373155][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 219.473253][T10820] batadv_slave_1: entered promiscuous mode [ 219.479776][T10820] batadv_slave_1: entered allmulticast mode [ 219.562265][T10827] sctp: [Deprecated]: syz.4.1359 (pid 10827) Use of int in max_burst socket option deprecated. [ 219.562265][T10827] Use struct sctp_assoc_value instead [ 219.816536][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'. [ 220.012503][T10842] vlan2 (unregistering): left promiscuous mode [ 220.021733][T10842] bridge0 (unregistering): left promiscuous mode [ 220.029464][T10842] bridge4: port 1(vlan2) entered disabled state [ 220.078480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.207082][T10857] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 220.207108][ T5831] IPVS: starting estimator thread 0... [ 220.321169][T10863] IPVS: using max 25 ests per chain, 60000 per kthread [ 220.487333][T10877] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 220.701749][T10899] pim6reg1: entered promiscuous mode [ 220.710814][T10899] pim6reg1: entered allmulticast mode [ 220.781445][T10906] Bluetooth: MGMT ver 1.23 [ 220.808232][T10906] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 220.898216][T10914] IPv4: Oversized IP packet from 172.20.20.24 [ 220.906090][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 220.912184][T10915] IPv4: Oversized IP packet from 172.20.20.24 [ 220.912671][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 220.919001][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 220.930837][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 220.965188][T10919] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 221.465747][T10928] tunl0: entered promiscuous mode [ 221.486885][T10928] netlink: 'syz.4.1386': attribute type 3 has an invalid length. [ 221.511865][T10928] netlink: 'syz.4.1386': attribute type 10 has an invalid length. [ 221.525740][T10933] netlink: 'syz.3.1388': attribute type 29 has an invalid length. [ 221.541231][T10928] team0: Device veth1_macvtap failed to register rx_handler [ 221.564735][T10933] netlink: 'syz.3.1388': attribute type 29 has an invalid length. [ 221.580338][T10937] netlink: 'syz.4.1386': attribute type 3 has an invalid length. [ 221.652716][T10933] netlink: 'syz.3.1388': attribute type 29 has an invalid length. [ 221.685295][T10933] netlink: 'syz.3.1388': attribute type 29 has an invalid length. [ 222.653721][T10991] __nla_validate_parse: 12 callbacks suppressed [ 222.653740][T10991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1408'. [ 222.691828][T10991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1408'. [ 222.786723][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 222.797848][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 222.807791][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 222.839486][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 223.350183][T11026] macvtap2: entered allmulticast mode [ 223.592346][T11054] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1423'. [ 223.612915][T11054] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1423'. [ 224.575661][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1427'. [ 224.597716][T11093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.834148][T11105] openvswitch: netlink: Unknown key attributes 2 [ 224.854517][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 224.879409][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 224.891909][T11112] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1436'. [ 225.027961][T11118] Bluetooth: MGMT ver 1.23 [ 225.224283][T11134] sctp: [Deprecated]: syz.0.1444 (pid 11134) Use of int in max_burst socket option deprecated. [ 225.224283][T11134] Use struct sctp_assoc_value instead [ 225.244436][T11136] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 226.853247][T11144] hsr_slave_0: left promiscuous mode [ 226.859810][T11144] hsr_slave_1: left promiscuous mode [ 226.942797][T11156] atomic_op ffff888028f80198 conn xmit_atomic 0000000000000000 [ 226.951886][T11156] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 226.975944][T11148] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.062560][T11158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.214515][T11171] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 227.329092][ T3547] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 228.270124][T11226] validate_nla: 3 callbacks suppressed [ 228.270143][T11226] netlink: 'syz.2.1464': attribute type 8 has an invalid length. [ 228.716020][T11230] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 228.755011][T11257] gtp0: entered promiscuous mode [ 228.786237][T11268] __nla_validate_parse: 8 callbacks suppressed [ 228.786256][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 228.905408][T11276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1477'. [ 228.914816][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 228.916081][T11276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1477'. [ 228.974478][T11280] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 229.028678][T11276] tipc: Enabling of bearer rejected, failed to enable media [ 229.055396][T11280] hsr0 speed is unknown, defaulting to 1000 [ 229.250030][T11293] netlink: 'syz.3.1481': attribute type 39 has an invalid length. [ 229.465140][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 229.633772][T11309] netlink: 'syz.3.1485': attribute type 11 has an invalid length. [ 229.956127][T11327] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.980727][T11327] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.988425][T11331] netlink: 'syz.4.1493': attribute type 16 has an invalid length. [ 230.053571][T11331] netlink: 'syz.4.1493': attribute type 17 has an invalid length. [ 230.054946][T11338] netlink: 'syz.4.1493': attribute type 16 has an invalid length. [ 230.167157][T11338] netlink: 'syz.4.1493': attribute type 17 has an invalid length. [ 230.218803][T11331] tunl0: left promiscuous mode [ 230.246290][T11331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.278922][T11338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.539996][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'. [ 230.745222][T11364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.776602][T11364] netlink: 'syz.3.1501': attribute type 2 has an invalid length. [ 231.209733][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1506'. [ 231.223265][T11379] netlink: 'syz.2.1506': attribute type 11 has an invalid length. [ 231.231379][T11379] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1506'. [ 231.309344][T11384] netlink: 'syz.2.1508': attribute type 1 has an invalid length. [ 231.352964][T11384] bond1: entered promiscuous mode [ 231.365139][T11384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.470087][T11386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.489784][T11386] bond1: (slave bond2): making interface the new active one [ 231.497137][T11386] bond2: entered promiscuous mode [ 231.548915][T11386] bond1: (slave bond2): Enslaving as an active interface with an up link [ 231.643937][T11398] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 231.664057][T11400] vlan1: entered allmulticast mode [ 231.687853][T11400] veth0_vlan: entered allmulticast mode [ 231.689584][T11403] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1513'. [ 231.703667][T11400] ieee802154 phy1 wpan1: encryption failed: -22 [ 231.752685][T11405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1513'. [ 231.756456][T11407] netlink: 'syz.2.1516': attribute type 19 has an invalid length. [ 231.958510][T11423] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 231.967675][T11423] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 232.753841][T11446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.302869][T11510] validate_nla: 2 callbacks suppressed [ 233.302888][T11510] netlink: 'syz.3.1541': attribute type 21 has an invalid length. [ 233.341654][T11510] netlink: 'syz.3.1541': attribute type 22 has an invalid length. [ 233.362962][T11510] netlink: 'syz.3.1541': attribute type 23 has an invalid length. [ 233.387719][T11510] netlink: 'syz.3.1541': attribute type 25 has an invalid length. [ 234.145486][T11538] tipc: Enabled bearer , priority 24 [ 234.395446][T11547] netlink: 'syz.3.1550': attribute type 1 has an invalid length. [ 234.551153][T11553] netlink: 'syz.2.1552': attribute type 8 has an invalid length. [ 234.591841][T11560] netlink: 'syz.2.1552': attribute type 8 has an invalid length. [ 234.624989][T11551] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.649708][T11551] bond5: (slave bond6): making interface the new active one [ 234.657729][T11551] bond5: (slave bond6): Enslaving as an active interface with an up link [ 234.678680][T11556] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 234.697414][T11551] __nla_validate_parse: 6 callbacks suppressed [ 234.697434][T11551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1550'. [ 234.738717][T11551] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.935693][T11583] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 234.963519][T11583] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1558'. [ 234.997674][T11583] nbd: couldn't find device at index 1048576 [ 235.162675][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 235.260595][ T1216] tipc: Node number set to 417110213 [ 235.279758][T11607] sctp: [Deprecated]: syz.2.1566 (pid 11607) Use of int in max_burst socket option. [ 235.279758][T11607] Use struct sctp_assoc_value instead [ 235.286896][T11605] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1565'. [ 235.382380][T11610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1567'. [ 235.414207][T11610] netlink: 39 bytes leftover after parsing attributes in process `syz.0.1567'. [ 235.515026][T11616] syzkaller1: entered promiscuous mode [ 235.556427][T11619] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.557966][T11616] syzkaller1: entered allmulticast mode [ 235.564449][T11619] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.577726][T11619] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.585651][T11619] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.593645][T11619] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.601607][T11619] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.609605][T11619] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.617539][T11619] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.625522][T11619] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.633499][T11619] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 235.976007][T11638] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1577'. [ 236.007092][T11638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1577'. [ 236.023344][T11638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1577'. [ 236.702028][T11686] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1589'. [ 237.315277][T11723] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 237.426067][T11730] netlink: 'syz.4.1605': attribute type 5 has an invalid length. [ 237.459837][T11733] bridge_slave_0: default FDB implementation only supports local addresses [ 237.625625][T11741] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (61440) [ 237.646368][T11741] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 237.663064][ T51] Bluetooth: hci4: link tx timeout [ 237.669024][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.806412][T11752] tipc: Started in network mode [ 237.821941][T11752] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 237.855452][T11752] tipc: Enabling of bearer rejected, failed to enable media [ 238.164865][T11773] netlink: 'syz.0.1616': attribute type 10 has an invalid length. [ 239.587480][T11848] validate_nla: 1 callbacks suppressed [ 239.587500][T11848] netlink: 'syz.0.1638': attribute type 1 has an invalid length. [ 239.767970][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 239.775025][T11848] __nla_validate_parse: 14 callbacks suppressed [ 239.775043][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 239.855849][T11850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 239.897518][T11853] bond1: (slave gretap1): making interface the new active one [ 240.008438][T11853] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 240.241634][T11881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1645'. [ 240.384201][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 240.465411][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1651'. [ 240.530690][T11892] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1652'. [ 240.775143][T11922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1658'. [ 240.887689][T11926] net_ratelimit: 50 callbacks suppressed [ 240.887709][T11926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.952204][T11928] netlink: 'syz.3.1661': attribute type 4 has an invalid length. [ 241.003303][T11932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 241.315850][T11950] IPVS: Unknown mcast interface: pim6reg [ 241.333643][T11951] IPVS: Unknown mcast interface: pim6reg [ 241.393098][T11954] netlink: 'syz.3.1668': attribute type 8 has an invalid length. [ 241.697647][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 241.730476][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1675'. [ 241.801263][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 241.817419][T11977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.926447][T11983] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 242.216247][T12005] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 242.289795][T12009] dvmrp1: entered allmulticast mode [ 242.340682][T12017] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 243.224379][T12066] Unsupported ieee802154 address type: 0 [ 243.340559][T12072] hsr0 speed is unknown, defaulting to 1000 [ 243.350122][T12078] veth1_macvtap: left promiscuous mode [ 243.757859][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 243.949315][T12099] tipc: Enabled bearer , priority 0 [ 243.956988][T12099] syzkaller0: entered promiscuous mode [ 243.962795][T12099] syzkaller0: entered allmulticast mode [ 243.983355][T12099] syzkaller0: mtu less than device minimum [ 244.026146][T12098] tipc: Resetting bearer [ 244.065029][T12098] tipc: Disabling bearer [ 244.084519][T12105] lo: entered promiscuous mode [ 244.100179][T12105] tunl0: entered promiscuous mode [ 244.107173][T12105] gre0: entered promiscuous mode [ 244.114606][T12105] gretap0: entered promiscuous mode [ 244.144618][T12105] erspan0: entered promiscuous mode [ 244.165999][T12105] ip_vti0: entered promiscuous mode [ 244.174800][T12113] netlink: 'syz.4.1712': attribute type 58 has an invalid length. [ 245.407049][T12174] __nla_validate_parse: 12 callbacks suppressed [ 245.407068][T12174] netlink: 808 bytes leftover after parsing attributes in process `syz.4.1728'. [ 245.428595][T12173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1725'. [ 245.767707][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 245.864042][T12207] erspan0: entered allmulticast mode [ 245.933276][T12213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1740'. [ 245.987524][T12219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1743'. [ 246.155097][T12232] netlink: 'syz.4.1746': attribute type 24 has an invalid length. [ 246.302924][T12238] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 246.404489][T12241] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1749'. [ 246.626644][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 246.645440][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 246.654791][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 246.666372][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 246.849646][T12242] lec:lec_atm_close: lec0: Shut down! [ 246.875229][T12267] openvswitch: netlink: Unknown key attributes 2 [ 246.918678][T12267] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 246.947101][T12269] syzkaller1: entered allmulticast mode [ 247.026607][T12267] veth11: entered promiscuous mode [ 247.869260][T12315] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 248.073039][T12328] netlink: 'syz.2.1773': attribute type 28 has an invalid length. [ 248.087850][T12328] netlink: 'syz.2.1773': attribute type 3 has an invalid length. [ 248.137244][ T30] audit: type=1107 audit(1754549527.850:5): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙªp”þƒ¯~â0ä™l…t¿Ý•/Öÿ Ž6ò' [ 248.342190][ T800] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 248.381989][ T5831] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 248.390143][ T800] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 248.621302][T12350] hsr_slave_1 (unregistering): left promiscuous mode [ 248.816975][T12373] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 248.828267][T12370] netlink: 'syz.2.1784': attribute type 4 has an invalid length. [ 248.857957][ T5831] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 248.957055][T12385] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004 [ 249.191811][T12398] gtp2: entered promiscuous mode [ 249.196832][T12398] gtp2: entered allmulticast mode [ 249.217987][ T5831] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 250.075829][T12452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.345828][T12475] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 250.355909][T12475] netlink: 'syz.4.1812': attribute type 2 has an invalid length. [ 250.367416][T12475] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 250.415792][T12468] tipc: Enabling of bearer rejected, failed to enable media [ 250.622331][T12485] sch_tbf: peakrate 256 is lower than or equals to rate 16489339487178637767 ! [ 251.093254][T12498] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 251.102720][T12498] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.110515][T12498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.139274][T12503] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.148687][T12503] netlink: 'syz.2.1820': attribute type 2 has an invalid length. [ 251.154426][T12501] hsr0 speed is unknown, defaulting to 1000 [ 251.239781][T12510] __nla_validate_parse: 45 callbacks suppressed [ 251.239800][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1821'. [ 251.372655][T12515] netlink: 808 bytes leftover after parsing attributes in process `syz.0.1825'. [ 251.488725][T12521] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 251.588493][T12525] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 251.959955][T12503] vxcan1 speed is unknown, defaulting to 1000 [ 251.967309][T12503] vxcan1 speed is unknown, defaulting to 1000 [ 251.996339][T12503] vxcan1 speed is unknown, defaulting to 1000 [ 252.036069][T12537] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1830'. [ 252.049993][T12537] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1830'. [ 252.113259][T12537] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 252.237824][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 252.402595][T12543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1832'. [ 252.544341][T12550] tipc: Cannot configure node identity twice [ 252.566207][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 252.735499][T12503] infiniband syz2: set active [ 252.768992][T12503] infiniband syz2: added vxcan1 [ 252.774849][T12503] syz2: rxe_create_cq: returned err = -12 [ 252.784686][T12503] infiniband syz2: Couldn't create ib_mad CQ [ 252.791074][T12503] infiniband syz2: Couldn't open port 1 [ 252.822367][ T5932] vxcan1 speed is unknown, defaulting to 1000 [ 252.834768][T12564] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 252.866545][T12503] RDS/IB: syz2: added [ 252.879374][T12503] smc: adding ib device syz2 with port count 1 [ 252.888720][T12503] smc: ib device syz2 port 1 has pnetid [ 252.961646][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 253.128175][T12574] netlink: 'syz.1.1838': attribute type 6 has an invalid length. [ 253.145552][T12574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1838'. [ 254.218761][T12564] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 254.219328][ T5932] vxcan1 speed is unknown, defaulting to 1000 [ 254.242794][T12503] vxcan1 speed is unknown, defaulting to 1000 [ 254.424830][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 254.455588][T12582] veth0: entered promiscuous mode [ 254.466768][T12583] netlink: 18 bytes leftover after parsing attributes in process `syz.0.1841'. [ 254.555189][T12587] geneve0: entered promiscuous mode [ 254.663877][T12581] veth0: left promiscuous mode [ 254.731032][T12503] vxcan1 speed is unknown, defaulting to 1000 [ 255.005712][T12602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.046658][T12602] team0: Failed to send port change of device bond3 via netlink (err -105) [ 255.087972][T12602] team0: Failed to send options change via netlink (err -105) [ 255.103676][T12602] team0: Port device bond3 added [ 255.154819][T12503] vxcan1 speed is unknown, defaulting to 1000 [ 255.326531][T12626] netem: change failed [ 255.435675][T12629] veth0_to_team: entered promiscuous mode [ 255.448009][T12629] veth0_to_team: entered allmulticast mode [ 255.533937][T12633] sctp: [Deprecated]: syz.1.1853 (pid 12633) Use of int in max_burst socket option deprecated. [ 255.533937][T12633] Use struct sctp_assoc_value instead [ 255.745751][T12503] vxcan1 speed is unknown, defaulting to 1000 [ 255.766580][T12643] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 255.806483][T12643] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 256.030100][T12656] netlink: 'syz.0.1859': attribute type 4 has an invalid length. [ 256.083742][T12503] vxcan1 speed is unknown, defaulting to 1000 [ 256.626150][T12681] __nla_validate_parse: 7 callbacks suppressed [ 256.626172][T12681] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1868'. [ 257.013504][T12705] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1873'. [ 257.043864][T12710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1875'. [ 257.181403][T12723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1877'. [ 257.280401][T12727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1877'. [ 257.650982][T12755] sctp: [Deprecated]: syz.2.1889 (pid 12755) Use of int in max_burst socket option. [ 257.650982][T12755] Use struct sctp_assoc_value instead [ 257.712486][T12758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1890'. [ 257.808969][T12758] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1890'. [ 258.209209][T12783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1898'. [ 258.233725][T12780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1898'. [ 258.258239][T12780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1898'. [ 258.340298][T12790] netlink: 'syz.3.1900': attribute type 32 has an invalid length. [ 258.348956][T12790] (unnamed net_device) (uninitialized): option coupled_control: invalid value (255) [ 258.518615][T12795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.580724][T12800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.665911][T12806] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 258.677277][T12803] netlink: 'syz.0.1905': attribute type 2 has an invalid length. [ 259.083678][T12835] netlink: 'syz.0.1918': attribute type 23 has an invalid length. [ 259.293356][T12846] netlink: 'syz.4.1920': attribute type 30 has an invalid length. [ 259.534771][T12854] syzkaller1: entered promiscuous mode [ 259.540454][T12854] syzkaller1: entered allmulticast mode [ 259.550817][T12854] netlink: 'syz.2.1924': attribute type 1 has an invalid length. [ 259.563024][T12854] netlink: 'syz.2.1924': attribute type 11 has an invalid length. [ 259.691368][T12867] tap0: tun_chr_ioctl cmd 2148553947 [ 259.757781][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 260.179428][T12897] syzkaller0: entered promiscuous mode [ 260.185151][T12897] syzkaller0: entered allmulticast mode [ 260.355862][T12912] netlink: 'syz.0.1942': attribute type 1 has an invalid length. [ 260.477901][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 261.052073][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.182955][T12903] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 262.194037][T12903] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 262.202396][T12903] gretap4: entered promiscuous mode [ 262.207913][T12903] gretap4: entered allmulticast mode [ 262.240214][T12912] geneve2: entered promiscuous mode [ 262.245494][T12912] geneve2: entered allmulticast mode [ 262.320330][ T3534] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 262.336856][ T3534] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 262.377086][ T3534] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 262.395605][ T3534] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 262.805259][T12954] __nla_validate_parse: 19 callbacks suppressed [ 262.805281][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1955'. [ 262.846351][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 262.870712][T12960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1958'. [ 262.888179][T12954] netlink: 'syz.3.1955': attribute type 12 has an invalid length. [ 262.927521][T12954] netlink: 'syz.3.1955': attribute type 11 has an invalid length. [ 263.045880][T12968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1961'. [ 263.090463][T12966] team0: Mode changed to "loadbalance" [ 263.218574][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 263.270215][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 263.763025][T13012] syz.3.1975 (13012) used obsolete PPPIOCDETACH ioctl [ 263.886628][T13024] vlan0: entered promiscuous mode [ 263.896162][T13024] vlan0: left allmulticast mode [ 263.903273][T13024] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 263.929850][T13024] team0: Port device vlan0 added [ 264.076258][T13036] netlink: 'syz.3.1983': attribute type 11 has an invalid length. [ 264.157424][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 264.175353][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 264.306702][T13048] netlink: 'syz.0.1988': attribute type 2 has an invalid length. [ 264.342505][T13051] netlink: 'syz.4.1987': attribute type 29 has an invalid length. [ 264.353937][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 264.365355][T13051] netlink: 'syz.4.1987': attribute type 29 has an invalid length. [ 264.378554][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1987'. [ 264.395607][T13052] netlink: 'syz.0.1988': attribute type 2 has an invalid length. [ 264.423217][T13051] team0: No ports can be present during mode change [ 264.440583][T13055] syzkaller0: entered promiscuous mode [ 264.453091][T13055] syzkaller0: entered allmulticast mode [ 264.567490][T13059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.574837][T13059] IPv6: NLM_F_CREATE should be set when creating new route [ 264.582373][T13059] IPv6: NLM_F_CREATE should be set when creating new route [ 264.589887][T13059] IPv6: NLM_F_CREATE should be set when creating new route [ 264.653605][T13059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.732011][T13075] tipc: Enabling of bearer rejected, failed to enable media [ 265.047508][T13091] macvlan0: entered allmulticast mode [ 265.079432][T13091] macvlan0 (unregistering): left allmulticast mode [ 265.347164][T13104] tipc: Resetting bearer [ 265.574574][T13115] netlink: 'syz.3.2007': attribute type 4 has an invalid length. [ 265.617156][T13115] netlink: 'syz.3.2007': attribute type 4 has an invalid length. [ 265.915309][T13139] ip6tnl0: mtu less than device minimum [ 266.037718][T13142] netlink: 'syz.4.2014': attribute type 9 has an invalid length. [ 266.479212][T13168] netlink: 'syz.4.2021': attribute type 8 has an invalid length. [ 266.875072][T13190] netlink: 'syz.2.2028': attribute type 2 has an invalid length. [ 267.163201][T13202] sctp: [Deprecated]: syz.2.2031 (pid 13202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.163201][T13202] Use struct sctp_sack_info instead [ 267.500425][T13214] syzkaller0: entered promiscuous mode [ 267.505965][T13214] syzkaller0: entered allmulticast mode [ 268.159506][T13224] vlan1 (unregistering): left allmulticast mode [ 268.181757][T13224] veth0_vlan: left allmulticast mode [ 268.258428][T13236] lo: left promiscuous mode [ 268.286609][T13236] tunl0: left promiscuous mode [ 268.305606][T13236] gre0: left promiscuous mode [ 268.424348][T13236] erspan0: left promiscuous mode [ 268.434646][T13236] ip_vti0: left promiscuous mode [ 268.446177][T13236] bond0: left promiscuous mode [ 268.462260][T13236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.474630][T13236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.525843][T13254] pim6reg1: entered promiscuous mode [ 268.531644][T13254] pim6reg1: entered allmulticast mode [ 269.369742][T13301] validate_nla: 1 callbacks suppressed [ 269.369763][T13301] netlink: 'syz.1.2060': attribute type 83 has an invalid length. [ 269.370653][T13303] __nla_validate_parse: 13 callbacks suppressed [ 269.370673][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2064'. [ 269.434773][T13304] netlink: 'syz.2.2061': attribute type 21 has an invalid length. [ 269.500392][T13304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2061'. [ 269.571343][T13315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2065'. [ 269.676700][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2065'. [ 269.942991][T13332] syzkaller1: entered promiscuous mode [ 269.967429][T13332] syzkaller1: entered allmulticast mode [ 270.376514][T13363] netlink: 'syz.3.2077': attribute type 13 has an invalid length. [ 270.487110][T13369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.658200][T13363] macvtap0: entered allmulticast mode [ 270.685322][T13363] macvtap0: refused to change device tx_queue_len [ 270.924059][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'. [ 271.134874][T13401] netlink: 'syz.2.2087': attribute type 1 has an invalid length. [ 271.161175][T13401] netlink: 'syz.2.2087': attribute type 11 has an invalid length. [ 271.177237][T13401] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2087'. [ 271.411136][T13413] netlink: 'syz.4.2091': attribute type 33 has an invalid length. [ 271.456471][T13413] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2091'. [ 271.501531][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 271.549430][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2092'. [ 271.590115][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2092'. [ 271.875961][T13436] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 271.901183][T13434] syzkaller1: entered promiscuous mode [ 271.918193][T13434] syzkaller1: entered allmulticast mode [ 273.024340][T13493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.065436][T13501] netlink: 'syz.3.2117': attribute type 1 has an invalid length. [ 273.182692][T13505] netlink: 'syz.0.2118': attribute type 1 has an invalid length. [ 273.265279][T13512] netlink: 'syz.3.2121': attribute type 178 has an invalid length. [ 273.494984][T13524] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 273.619885][T13525] delete_channel: no stack [ 273.709464][T13528] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.721296][T13528] bond0: (slave bond4): making interface the new active one [ 273.729826][T13528] bond0: (slave bond4): Enslaving as an active interface with an up link [ 273.750942][T13532] bond0: (slave gretap5): Enslaving as a backup interface with an up link [ 273.766923][T13524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.407034][T13586] sctp: [Deprecated]: syz.1.2140 (pid 13586) Use of int in max_burst socket option. [ 274.407034][T13586] Use struct sctp_assoc_value instead [ 274.448775][T13586] validate_nla: 1 callbacks suppressed [ 274.448796][T13586] netlink: 'syz.1.2140': attribute type 2 has an invalid length. [ 274.477716][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 274.508262][T13587] vlan0: entered promiscuous mode [ 274.536036][T13587] team0: Port device vlan0 added [ 274.971753][T13605] macvlan0: entered allmulticast mode [ 274.982552][T13605] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 275.100341][T13618] netlink: 'syz.0.2147': attribute type 10 has an invalid length. [ 275.139825][T13620] __nla_validate_parse: 11 callbacks suppressed [ 275.139847][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'. [ 275.170323][T13620] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 275.202799][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'. [ 275.249540][T13627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2151'. [ 276.070615][T13642] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2153'. [ 276.072557][T13640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2154'. [ 276.094780][T13640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2154'. [ 276.118669][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2154'. [ 276.139983][T13645] veth0: entered promiscuous mode [ 276.160082][T13637] veth0: left promiscuous mode [ 276.464262][T13655] netlink: 'syz.4.2161': attribute type 10 has an invalid length. [ 276.527444][T13655] batman_adv: batadv0: Adding interface: team0 [ 276.554113][T13655] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.595471][T13655] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 276.640203][T13662] tipc: Resetting bearer [ 276.958790][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'. [ 277.003424][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'. [ 277.197189][T13689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2172'. [ 277.626788][T13712] bridge0: port 1(batadv0) entered blocking state [ 277.641018][T13712] bridge0: port 1(batadv0) entered disabled state [ 277.650284][T13712] batadv0: entered allmulticast mode [ 277.661580][T13712] batadv0: entered promiscuous mode [ 278.017151][T13734] ip6gre2: entered allmulticast mode [ 278.119625][ T800] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 278.129035][ T800] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 278.170941][T13743] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 278.767497][T13782] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 278.815685][T13782] veth0_to_hsr: mtu less than device minimum [ 279.076083][ T1216] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1 [ 279.102484][T13794] tipc: Enabling of bearer rejected, failed to enable media [ 279.132151][ T1216] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 279.295819][T13812] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 279.315823][T13813] netlink: 'syz.2.2211': attribute type 13 has an invalid length. [ 279.332103][T13812] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 279.345115][T13813] veth0_macvtap: left promiscuous mode [ 279.362129][T13813] macvtap0: entered allmulticast mode [ 279.394002][T13813] macvtap0: refused to change device tx_queue_len [ 279.646453][T13827] netlink: ct family unspecified [ 279.666423][T13827] openvswitch: netlink: Actions may not be safe on all matching packets [ 279.696613][T13827] openvswitch: netlink: Missing valid actions attribute. [ 279.730624][T13827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.861438][T13829] : entered promiscuous mode [ 279.985033][T13848] tipc: Enabled bearer , priority 0 [ 279.996307][T13848] syzkaller0: entered promiscuous mode [ 280.006830][T13848] syzkaller0: entered allmulticast mode [ 280.060989][T13848] tipc: Resetting bearer [ 280.073282][T13852] sctp: [Deprecated]: syz.3.2226 (pid 13852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.073282][T13852] Use struct sctp_sack_info instead [ 280.097004][T13847] tipc: Resetting bearer [ 280.126785][T13847] tipc: Disabling bearer [ 280.166102][T13857] __nla_validate_parse: 13 callbacks suppressed [ 280.166125][T13857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2228'. [ 280.215582][T13857] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2228'. [ 280.261868][T13860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2229'. [ 280.289092][T13857] gretap2: entered promiscuous mode [ 280.306167][T13857] gretap2: entered allmulticast mode [ 280.464900][T13874] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 280.504809][T13867] netlink: 'syz.1.2232': attribute type 13 has an invalid length. [ 280.546105][T13867] eql: remember to turn off Van-Jacobson compression on your slave devices [ 280.700635][T13873] netlink: zone id is out of range [ 280.702213][T13878] netlink: zone id is out of range [ 280.706837][T13867] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 280.715511][T13878] netlink: zone id is out of range [ 280.919725][T13895] syz_tun: entered allmulticast mode [ 281.012205][T13902] veth1_to_hsr: entered allmulticast mode [ 281.280333][T13909] hsr0 speed is unknown, defaulting to 1000 [ 281.351306][T13917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2247'. [ 281.536801][T13928] C: renamed from team_slave_0 [ 281.581457][T13928] netlink: 'syz.2.2250': attribute type 1 has an invalid length. [ 281.811526][T13909] vxcan1 speed is unknown, defaulting to 1000 [ 281.871669][T13950] Bluetooth: MGMT ver 1.23 [ 281.879235][T13951] netlink: 'syz.2.2255': attribute type 13 has an invalid length. [ 282.291371][T13964] netlink: 'syz.3.2261': attribute type 1 has an invalid length. [ 282.384479][T13970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2261'. [ 283.176823][T13980] netlink: 512 bytes leftover after parsing attributes in process `syz.0.2265'. [ 284.157980][ T1216] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec [ 304.557915][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.483427][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.839843][ C1] net_ratelimit: 12 callbacks suppressed [ 337.839865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.433696][T14023] syzkaller1: entered promiscuous mode [ 357.439975][T14023] syzkaller1: entered allmulticast mode [ 357.492394][T14030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2284'. [ 357.506970][T14034] netlink: 'syz.0.2285': attribute type 21 has an invalid length. [ 357.516792][T14034] netlink: 'syz.0.2285': attribute type 22 has an invalid length. [ 357.528497][T14034] netlink: 'syz.0.2285': attribute type 23 has an invalid length. [ 357.536379][T14034] netlink: 'syz.0.2285': attribute type 25 has an invalid length. [ 357.547045][T14034] netlink: 'syz.0.2285': attribute type 26 has an invalid length. [ 357.564209][T14034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2285'. [ 357.591678][T14032] netlink: 'syz.0.2285': attribute type 21 has an invalid length. [ 357.618734][T14032] netlink: 'syz.0.2285': attribute type 22 has an invalid length. [ 357.618884][T14038] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2286'. [ 357.643717][T14032] netlink: 'syz.0.2285': attribute type 23 has an invalid length. [ 357.686211][T14032] netlink: 'syz.0.2285': attribute type 25 has an invalid length. [ 357.698052][T14032] netlink: 'syz.0.2285': attribute type 26 has an invalid length. [ 357.730660][T14032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2285'. [ 357.856221][T14051] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2288'. [ 357.953554][T14047] rose0: entered allmulticast mode [ 358.015313][T14059] rose0: left allmulticast mode [ 358.034281][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2288'. [ 358.357140][T14080] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2296'. [ 358.504023][ T800] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 358.645984][T14109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2301'. [ 358.774055][T14113] bond8: (slave bridge6): making interface the new active one [ 358.780880][T14115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2303'. [ 358.783235][T14113] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 358.833413][T14116] bond8: (slave bridge7): Enslaving as an active interface with a down link [ 358.890761][T14119] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2305'. [ 359.739665][T14151] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.291388][T14174] vlan1: entered allmulticast mode [ 360.302046][T14174] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 360.647805][T14184] vxcan1: tx drop: invalid da for name 0x0000000000000014 [ 361.209325][T14212] macsec2: entered promiscuous mode [ 361.225304][T14212] team0: entered promiscuous mode [ 361.246606][T14212] team_slave_0: entered promiscuous mode [ 361.270656][T14212] team_slave_1: entered promiscuous mode [ 361.288890][T14212] macsec2: entered allmulticast mode [ 361.294257][T14212] team0: entered allmulticast mode [ 361.308426][T14212] team_slave_0: entered allmulticast mode [ 361.319972][T14212] team_slave_1: entered allmulticast mode [ 361.326197][T14212] vlan0: entered allmulticast mode [ 361.331530][T14212] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 361.342086][T14212] team0: Device macsec2 is already an upper device of the team interface [ 361.406784][T14212] team0: left allmulticast mode [ 361.426757][T14212] team_slave_0: left allmulticast mode [ 361.443614][T14212] team_slave_1: left allmulticast mode [ 361.458450][T14212] vlan0: left allmulticast mode [ 361.478665][T14212] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 361.493402][T14212] team0: left promiscuous mode [ 361.504581][T14212] team_slave_0: left promiscuous mode [ 361.524095][T14212] team_slave_1: left promiscuous mode [ 361.632677][T14227] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 361.800130][T14240] syzkaller1: entered promiscuous mode [ 361.814056][T14240] syzkaller1: entered allmulticast mode [ 362.031408][T14254] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 362.214406][T14265] dvmrp1: entered allmulticast mode [ 362.502975][T14285] __nla_validate_parse: 9 callbacks suppressed [ 362.502996][T14285] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2356'. [ 362.596627][T14285] NCSI netlink: No device for ifindex 0 [ 362.750750][T14295] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2360'. [ 362.900325][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2362'. [ 363.031758][T14316] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 3, id = 0 [ 363.062755][T14303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2363'. [ 363.073172][T14303] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 363.083770][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 363.086785][T14303] validate_nla: 8 callbacks suppressed [ 363.086806][T14303] netlink: 'syz.2.2363': attribute type 2 has an invalid length. [ 363.093103][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 363.104693][T14303] netlink: 'syz.2.2363': attribute type 8 has an invalid length. [ 363.125733][T14303] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2363'. [ 363.633136][T14338] tap0: tun_chr_ioctl cmd 1074025673 [ 363.646671][T14340] tap0: tun_chr_ioctl cmd 1074025678 [ 363.653577][T14340] tap0: group set to 0 [ 363.730397][T14344] netlink: 'syz.4.2373': attribute type 1 has an invalid length. [ 363.768038][T14342] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.809965][T14344] 8021q: adding VLAN 0 to HW filter on device bond6 [ 363.819387][T14342] tipc: Enabled bearer , priority 0 [ 363.825860][T14347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2375'. [ 363.880321][T14352] netlink: 'syz.3.2376': attribute type 4 has an invalid length. [ 363.892384][T14345] 8021q: adding VLAN 0 to HW filter on device bond6 [ 363.900585][T14345] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 363.913574][T14345] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 363.929351][T14353] netlink: 'syz.3.2376': attribute type 4 has an invalid length. [ 363.939799][T14344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2373'. [ 363.975090][T14342] syzkaller0: entered promiscuous mode [ 363.981708][T14342] syzkaller0: entered allmulticast mode [ 364.043488][T14341] tipc: Resetting bearer [ 364.094259][T14341] tipc: Disabling bearer [ 364.354694][T14375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2379'. [ 364.613696][ T5932] hid (null): global environment stack underflow [ 364.621673][ T5932] hid (null): unknown global tag 0xe [ 364.631057][ T5932] hid-generic 0005:0B57:000F.0002: reserved main item tag 0xe [ 364.639310][ T5932] hid-generic 0005:0B57:000F.0002: global environment stack underflow [ 364.648383][ T5932] hid-generic 0005:0B57:000F.0002: item 0 1 1 11 parsing failed [ 364.656949][ T5932] hid-generic 0005:0B57:000F.0002: probe with driver hid-generic failed with error -22 [ 364.721993][T14393] netlink: 'syz.0.2386': attribute type 10 has an invalid length. [ 364.774010][T14395] netlink: 'syz.0.2386': attribute type 10 has an invalid length. [ 364.838499][T14399] FAULT_INJECTION: forcing a failure. [ 364.838499][T14399] name failslab, interval 1, probability 0, space 0, times 0 [ 364.876249][T14399] CPU: 1 UID: 0 PID: 14399 Comm: syz.2.2387 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 364.876283][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.876305][T14399] Call Trace: [ 364.876314][T14399] [ 364.876328][T14399] dump_stack_lvl+0x189/0x250 [ 364.876357][T14399] ? __pfx____ratelimit+0x10/0x10 [ 364.876390][T14399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.876413][T14399] ? __pfx__printk+0x10/0x10 [ 364.876447][T14399] ? __pfx___might_resched+0x10/0x10 [ 364.876479][T14399] ? fs_reclaim_acquire+0x7d/0x100 [ 364.876509][T14399] should_fail_ex+0x414/0x560 [ 364.876550][T14399] should_failslab+0xa8/0x100 [ 364.876572][T14399] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 364.876607][T14399] ? __alloc_skb+0x112/0x2d0 [ 364.876646][T14399] __alloc_skb+0x112/0x2d0 [ 364.876683][T14399] netlink_ack+0x146/0xa50 [ 364.876713][T14399] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.876743][T14399] ? ref_tracker_free+0x63a/0x7d0 [ 364.876767][T14399] ? __asan_memcpy+0x40/0x70 [ 364.876793][T14399] ? __pfx_ref_tracker_free+0x10/0x10 [ 364.876829][T14399] netlink_rcv_skb+0x28c/0x470 [ 364.876861][T14399] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.876896][T14399] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.876942][T14399] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.876983][T14399] netlink_unicast+0x82c/0x9e0 [ 364.877021][T14399] ? __pfx_netlink_unicast+0x10/0x10 [ 364.877050][T14399] ? netlink_sendmsg+0x642/0xb30 [ 364.877080][T14399] ? skb_put+0x11b/0x210 [ 364.877103][T14399] netlink_sendmsg+0x805/0xb30 [ 364.877150][T14399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.877182][T14399] ? aa_sock_msg_perm+0x94/0x160 [ 364.877213][T14399] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 364.877236][T14399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.877269][T14399] __sock_sendmsg+0x21c/0x270 [ 364.877301][T14399] ____sys_sendmsg+0x505/0x830 [ 364.877329][T14399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.877362][T14399] ? import_iovec+0x74/0xa0 [ 364.877397][T14399] ___sys_sendmsg+0x21f/0x2a0 [ 364.877422][T14399] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.877508][T14399] ? __fget_files+0x2a/0x420 [ 364.877529][T14399] ? __fget_files+0x3a0/0x420 [ 364.877562][T14399] __x64_sys_sendmsg+0x19b/0x260 [ 364.877588][T14399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.877623][T14399] ? __pfx_ksys_write+0x10/0x10 [ 364.877652][T14399] ? rcu_is_watching+0x15/0xb0 [ 364.877691][T14399] ? do_syscall_64+0xbe/0x3b0 [ 364.877728][T14399] do_syscall_64+0xfa/0x3b0 [ 364.877774][T14399] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.877813][T14399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.877840][T14399] ? clear_bhb_loop+0x60/0xb0 [ 364.877875][T14399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.878072][T14399] RIP: 0033:0x7f04fb78ebe9 [ 364.878115][T14399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.878136][T14399] RSP: 002b:00007f04fc52c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.878161][T14399] RAX: ffffffffffffffda RBX: 00007f04fb9b5fa0 RCX: 00007f04fb78ebe9 [ 364.878177][T14399] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 364.878191][T14399] RBP: 00007f04fc52c090 R08: 0000000000000000 R09: 0000000000000000 [ 364.878204][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.878217][T14399] R13: 00007f04fb9b6038 R14: 00007f04fb9b5fa0 R15: 00007ffc27999db8 [ 364.878252][T14399] [ 364.884591][T14400] tipc: New replicast peer: 0.0.0.0 [ 365.075792][T14403] netlink: 'syz.3.2388': attribute type 16 has an invalid length. [ 365.146959][T14400] tipc: Enabled bearer , priority 10 [ 365.162972][T14403] netlink: 'syz.3.2388': attribute type 17 has an invalid length. [ 365.288663][T14384] hsr0 speed is unknown, defaulting to 1000 [ 365.398329][T14403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.777841][ T5932] hsr0 speed is unknown, defaulting to 1000 [ 365.783838][ T5932] syz1: Port: 1 Link DOWN [ 365.792657][ T5831] hsr0 speed is unknown, defaulting to 1000 [ 365.942572][T14384] vxcan1 speed is unknown, defaulting to 1000 [ 366.139318][ T5831] tipc: Node number set to 3986477224 [ 367.247252][T14491] FAULT_INJECTION: forcing a failure. [ 367.247252][T14491] name failslab, interval 1, probability 0, space 0, times 0 [ 367.273088][T14491] CPU: 1 UID: 0 PID: 14491 Comm: syz.2.2413 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 367.273122][T14491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.273135][T14491] Call Trace: [ 367.273144][T14491] [ 367.273153][T14491] dump_stack_lvl+0x189/0x250 [ 367.273182][T14491] ? __pfx____ratelimit+0x10/0x10 [ 367.273215][T14491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.273238][T14491] ? __pfx__printk+0x10/0x10 [ 367.273262][T14491] ? netlink_unicast+0x82c/0x9e0 [ 367.273291][T14491] ? ___sys_sendmsg+0x21f/0x2a0 [ 367.273313][T14491] ? do_syscall_64+0xfa/0x3b0 [ 367.273358][T14491] should_fail_ex+0x414/0x560 [ 367.273404][T14491] should_failslab+0xa8/0x100 [ 367.273428][T14491] kmem_cache_alloc_noprof+0x73/0x3c0 [ 367.273459][T14491] ? skb_clone+0x212/0x3a0 [ 367.273487][T14491] skb_clone+0x212/0x3a0 [ 367.273516][T14491] __netlink_deliver_tap+0x404/0x850 [ 367.273563][T14491] ? netlink_deliver_tap+0x2e/0x1b0 [ 367.273597][T14491] netlink_deliver_tap+0x19c/0x1b0 [ 367.273631][T14491] netlink_sendskb+0x68/0x140 [ 367.273662][T14491] netlink_unicast+0x397/0x9e0 [ 367.273688][T14491] ? __asan_memcpy+0x40/0x70 [ 367.273725][T14491] ? __pfx_netlink_unicast+0x10/0x10 [ 367.273765][T14491] netlink_rcv_skb+0x28c/0x470 [ 367.273799][T14491] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 367.273834][T14491] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 367.273880][T14491] ? netlink_deliver_tap+0x2e/0x1b0 [ 367.273923][T14491] netlink_unicast+0x82c/0x9e0 [ 367.273970][T14491] ? __pfx_netlink_unicast+0x10/0x10 [ 367.274013][T14491] ? netlink_sendmsg+0x642/0xb30 [ 367.274043][T14491] ? skb_put+0x11b/0x210 [ 367.274068][T14491] netlink_sendmsg+0x805/0xb30 [ 367.274113][T14491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.274150][T14491] ? aa_sock_msg_perm+0x94/0x160 [ 367.274182][T14491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.274207][T14491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.274242][T14491] __sock_sendmsg+0x21c/0x270 [ 367.274275][T14491] ____sys_sendmsg+0x505/0x830 [ 367.274305][T14491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.274340][T14491] ? import_iovec+0x74/0xa0 [ 367.274375][T14491] ___sys_sendmsg+0x21f/0x2a0 [ 367.274401][T14491] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.274469][T14491] ? __fget_files+0x2a/0x420 [ 367.274497][T14491] ? __fget_files+0x3a0/0x420 [ 367.274531][T14491] __x64_sys_sendmsg+0x19b/0x260 [ 367.274558][T14491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.274593][T14491] ? __pfx_ksys_write+0x10/0x10 [ 367.274622][T14491] ? rcu_is_watching+0x15/0xb0 [ 367.274662][T14491] ? do_syscall_64+0xbe/0x3b0 [ 367.274699][T14491] do_syscall_64+0xfa/0x3b0 [ 367.274730][T14491] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.274761][T14491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.274782][T14491] ? clear_bhb_loop+0x60/0xb0 [ 367.274809][T14491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.274830][T14491] RIP: 0033:0x7f04fb78ebe9 [ 367.274849][T14491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.274869][T14491] RSP: 002b:00007f04fc52c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.274894][T14491] RAX: ffffffffffffffda RBX: 00007f04fb9b5fa0 RCX: 00007f04fb78ebe9 [ 367.274910][T14491] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 367.274923][T14491] RBP: 00007f04fc52c090 R08: 0000000000000000 R09: 0000000000000000 [ 367.274937][T14491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.274955][T14491] R13: 00007f04fb9b6038 R14: 00007f04fb9b5fa0 R15: 00007ffc27999db8 [ 367.274992][T14491] [ 367.844297][T14505] __nla_validate_parse: 4 callbacks suppressed [ 367.844347][T14505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2418'. [ 367.876391][T14502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2418'. [ 367.892837][T14502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2418'. [ 367.911218][T14502] erspan0: entered promiscuous mode [ 367.919252][T14505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2418'. [ 367.929273][T14502] erspan0: left promiscuous mode [ 367.949492][T14505] erspan0: entered promiscuous mode [ 367.958099][T14505] erspan0: left promiscuous mode [ 368.051329][T14515] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2420'. [ 368.381893][T14529] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2422'. [ 368.422273][T14529] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2422'. [ 368.435016][T14529] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2422'. [ 368.456980][T14537] FAULT_INJECTION: forcing a failure. [ 368.456980][T14537] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 368.472243][T14537] CPU: 0 UID: 0 PID: 14537 Comm: syz.2.2426 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 368.472275][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.472288][T14537] Call Trace: [ 368.472296][T14537] [ 368.472304][T14537] dump_stack_lvl+0x189/0x250 [ 368.472332][T14537] ? __pfx____ratelimit+0x10/0x10 [ 368.472364][T14537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.472387][T14537] ? __pfx__printk+0x10/0x10 [ 368.472429][T14537] should_fail_ex+0x414/0x560 [ 368.472470][T14537] _copy_to_user+0x31/0xb0 [ 368.472504][T14537] simple_read_from_buffer+0xe1/0x170 [ 368.472545][T14537] proc_fail_nth_read+0x1b3/0x220 [ 368.472576][T14537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.472605][T14537] ? rw_verify_area+0x258/0x650 [ 368.472635][T14537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.472662][T14537] vfs_read+0x1fd/0x980 [ 368.472691][T14537] ? fdget_pos+0x247/0x320 [ 368.472717][T14537] ? __pfx___mutex_lock+0x10/0x10 [ 368.472750][T14537] ? __pfx_vfs_read+0x10/0x10 [ 368.472782][T14537] ? __fget_files+0x2a/0x420 [ 368.472808][T14537] ? __fget_files+0x3a0/0x420 [ 368.472827][T14537] ? __fget_files+0x2a/0x420 [ 368.472869][T14537] ksys_read+0x145/0x250 [ 368.472903][T14537] ? __pfx_ksys_read+0x10/0x10 [ 368.472930][T14537] ? rcu_is_watching+0x15/0xb0 [ 368.472969][T14537] ? do_syscall_64+0xbe/0x3b0 [ 368.473005][T14537] do_syscall_64+0xfa/0x3b0 [ 368.473035][T14537] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.473065][T14537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.473085][T14537] ? clear_bhb_loop+0x60/0xb0 [ 368.473112][T14537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.473133][T14537] RIP: 0033:0x7f04fb78d5fc [ 368.473152][T14537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 368.473171][T14537] RSP: 002b:00007f04fc52c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 368.473195][T14537] RAX: ffffffffffffffda RBX: 00007f04fb9b5fa0 RCX: 00007f04fb78d5fc [ 368.473211][T14537] RDX: 000000000000000f RSI: 00007f04fc52c0a0 RDI: 0000000000000005 [ 368.473224][T14537] RBP: 00007f04fc52c090 R08: 0000000000000000 R09: 0000000000000000 [ 368.473236][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.473248][T14537] R13: 00007f04fb9b6038 R14: 00007f04fb9b5fa0 R15: 00007ffc27999db8 [ 368.473284][T14537] [ 368.718723][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.836486][T14539] macvlan0: entered allmulticast mode [ 368.867077][T14539] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2427'. [ 368.910663][T14539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2427'. [ 369.033080][T14550] tipc: Enabled bearer , priority 0 [ 369.060104][T14550] syzkaller0: entered promiscuous mode [ 369.066673][T14550] syzkaller0: entered allmulticast mode [ 369.081001][T14553] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌ' [ 369.090567][T14553] CPU: 0 UID: 0 PID: 14553 Comm: syz.0.2433 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 369.090599][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.090613][T14553] Call Trace: [ 369.090622][T14553] [ 369.090631][T14553] dump_stack_lvl+0x189/0x250 [ 369.090672][T14553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.090695][T14553] ? __pfx__printk+0x10/0x10 [ 369.090723][T14553] ? kernfs_path_from_node+0x2c/0x260 [ 369.090749][T14553] ? kernfs_path_from_node+0x2c/0x260 [ 369.090771][T14553] ? kernfs_path_from_node+0x2c/0x260 [ 369.090798][T14553] ? kernfs_path_from_node+0x22c/0x260 [ 369.090821][T14553] ? kernfs_path_from_node+0x2c/0x260 [ 369.090850][T14553] sysfs_warn_dup+0x8e/0xa0 [ 369.090875][T14553] sysfs_do_create_link_sd+0xc0/0x110 [ 369.090903][T14553] device_add_class_symlinks+0x1cf/0x240 [ 369.090936][T14553] device_add+0x475/0xb50 [ 369.090967][T14553] wiphy_register+0x1ba6/0x28d0 [ 369.091019][T14553] ? __pfx_wiphy_register+0x10/0x10 [ 369.091048][T14553] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 369.091081][T14553] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 369.091110][T14553] ieee80211_register_hw+0x3425/0x4080 [ 369.091154][T14553] ? ieee80211_register_hw+0x1411/0x4080 [ 369.091189][T14553] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 369.091218][T14553] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.091257][T14553] ? __hrtimer_setup+0x187/0x210 [ 369.091288][T14553] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 369.091326][T14553] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 369.091392][T14553] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 369.091418][T14553] ? trace_kmalloc+0x1f/0xd0 [ 369.091447][T14553] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 369.091480][T14553] ? kstrndup+0xbf/0x160 [ 369.091516][T14553] hwsim_new_radio_nl+0xea4/0x1b10 [ 369.091549][T14553] ? __pfx___nla_validate_parse+0x10/0x10 [ 369.091593][T14553] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 369.091639][T14553] ? __nla_parse+0x40/0x60 [ 369.091673][T14553] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 369.091710][T14553] genl_family_rcv_msg_doit+0x215/0x300 [ 369.091744][T14553] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.091786][T14553] ? bpf_lsm_capable+0x9/0x20 [ 369.091815][T14553] ? security_capable+0x7e/0x2e0 [ 369.091852][T14553] genl_rcv_msg+0x60e/0x790 [ 369.091885][T14553] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.091909][T14553] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 369.091957][T14553] netlink_rcv_skb+0x208/0x470 [ 369.091986][T14553] ? __lock_acquire+0xab9/0xd20 [ 369.092017][T14553] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.092044][T14553] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.092100][T14553] ? down_read+0x1ad/0x2e0 [ 369.092123][T14553] genl_rcv+0x28/0x40 [ 369.092145][T14553] netlink_unicast+0x82c/0x9e0 [ 369.092185][T14553] ? __pfx_netlink_unicast+0x10/0x10 [ 369.092217][T14553] ? netlink_sendmsg+0x642/0xb30 [ 369.092247][T14553] ? skb_put+0x11b/0x210 [ 369.092272][T14553] netlink_sendmsg+0x805/0xb30 [ 369.092317][T14553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.092354][T14553] ? aa_sock_msg_perm+0x94/0x160 [ 369.092385][T14553] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.092409][T14553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.092443][T14553] __sock_sendmsg+0x21c/0x270 [ 369.092476][T14553] ____sys_sendmsg+0x505/0x830 [ 369.092505][T14553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.092540][T14553] ? import_iovec+0x74/0xa0 [ 369.092575][T14553] ___sys_sendmsg+0x21f/0x2a0 [ 369.092602][T14553] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.092676][T14553] ? __fget_files+0x2a/0x420 [ 369.092696][T14553] ? __fget_files+0x3a0/0x420 [ 369.092730][T14553] __x64_sys_sendmsg+0x19b/0x260 [ 369.092757][T14553] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.092793][T14553] ? rcu_is_watching+0x15/0xb0 [ 369.092834][T14553] ? do_syscall_64+0xbe/0x3b0 [ 369.092870][T14553] do_syscall_64+0xfa/0x3b0 [ 369.092900][T14553] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.092930][T14553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.092951][T14553] ? clear_bhb_loop+0x60/0xb0 [ 369.092978][T14553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.092998][T14553] RIP: 0033:0x7f201278ebe9 [ 369.093018][T14553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.093037][T14553] RSP: 002b:00007f20135dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.093061][T14553] RAX: ffffffffffffffda RBX: 00007f20129b5fa0 RCX: 00007f201278ebe9 [ 369.093077][T14553] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 369.093090][T14553] RBP: 00007f2012811e19 R08: 0000000000000000 R09: 0000000000000000 [ 369.093103][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.093115][T14553] R13: 00007f20129b6038 R14: 00007f20129b5fa0 R15: 00007ffcfd116ff8 [ 369.093152][T14553] [ 369.581631][T14550] tipc: Resetting bearer [ 369.647252][T14549] tipc: Resetting bearer [ 369.672296][T14549] tipc: Disabling bearer [ 369.684967][T14563] x_tables: ip_tables: udp match: only valid for protocol 17 [ 369.870014][T14574] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 370.330834][T14594] netlink: 'syz.0.2445': attribute type 11 has an invalid length. [ 370.360692][T14595] atomic_op ffff88802714a198 conn xmit_atomic 0000000000000000 [ 370.380712][T14594] netlink: 'syz.0.2445': attribute type 11 has an invalid length. [ 370.407846][T14595] atomic_op ffff88807c939998 conn xmit_atomic 0000000000000000 [ 370.416066][T14595] atomic_op ffff88807c93e998 conn xmit_atomic 0000000000000000 [ 370.439309][T14595] atomic_op ffff88807c93f998 conn xmit_atomic 0000000000000000 [ 370.489082][T14595] atomic_op ffff88807aca3198 conn xmit_atomic 0000000000000000 [ 370.497058][T14595] atomic_op ffff88807aca3998 conn xmit_atomic 0000000000000000 [ 370.528919][T14595] atomic_op ffff88807aca2198 conn xmit_atomic 0000000000000000 [ 370.538377][T14595] atomic_op ffff88807aca2998 conn xmit_atomic 0000000000000000 [ 370.546519][T14595] atomic_op ffff88807aca1198 conn xmit_atomic 0000000000000000 [ 370.554895][T14595] atomic_op ffff88807aca1998 conn xmit_atomic 0000000000000000 [ 370.590886][T14604] netlink: 'syz.3.2450': attribute type 3 has an invalid length. [ 370.604229][T14604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.889693][T14622] netlink: 'syz.0.2454': attribute type 7 has an invalid length. [ 370.901213][T14622] netlink: 'syz.0.2454': attribute type 7 has an invalid length. [ 370.973704][T14622] netlink: 'syz.0.2454': attribute type 7 has an invalid length. [ 371.033239][T14633] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.044908][T14622] netlink: 'syz.0.2454': attribute type 7 has an invalid length. [ 371.074136][T14622] netlink: 'syz.0.2454': attribute type 7 has an invalid length. [ 371.088336][T14622] netlink: 'syz.0.2454': attribute type 7 has an invalid length. [ 371.096790][T14622] netlink: 'syz.0.2454': attribute type 7 has an invalid length. [ 371.120545][T14622] netlink: 'syz.0.2454': attribute type 7 has an invalid length. [ 371.152781][T14622] netlink: 'syz.0.2454': attribute type 7 has an invalid length. [ 371.295299][T14641] syzkaller0: entered promiscuous mode [ 371.303161][T14641] syzkaller0: entered allmulticast mode [ 371.378027][T14636] tipc: Enabled bearer , priority 0 [ 371.396567][T14641] tipc: Resetting bearer [ 371.450045][T14641] tipc: Disabling bearer [ 371.737115][T14667] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 371.973694][T14683] netlink: 'syz.0.2471': attribute type 11 has an invalid length. [ 371.984024][T14683] netlink: 'syz.0.2471': attribute type 11 has an invalid length. [ 372.942108][T14711] __nla_validate_parse: 12 callbacks suppressed [ 372.942129][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'. [ 372.990215][T14711] macvlan0: left promiscuous mode [ 372.995445][T14711] macvlan0: left allmulticast mode [ 373.022159][T14719] sctp: [Deprecated]: syz.3.2483 (pid 14719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.022159][T14719] Use struct sctp_sack_info instead [ 373.205812][T14730] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 373.224174][T14730] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 373.553514][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2493'. [ 373.589756][T14749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2493'. [ 373.676184][T14746] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2492'. [ 373.721007][T14746] nbd: illegal input index -8454144 [ 373.842177][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'. [ 373.861591][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'. [ 374.185060][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2500'. [ 374.432348][T14784] vxcan4: entered promiscuous mode [ 374.596491][T14781] 8021q: adding VLAN 0 to HW filter on device bond7 [ 374.627095][T14783] hsr0 speed is unknown, defaulting to 1000 [ 374.721755][T14802] ksmbd: Unknown IPC event: 3, ignore. [ 374.759770][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2507'. [ 374.826909][T14804] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 374.875550][T14804] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2509'. [ 374.934123][T14811] sctp: [Deprecated]: syz.4.2510 (pid 14811) Use of int in maxseg socket option. [ 374.934123][T14811] Use struct sctp_assoc_value instead [ 374.985749][T14814] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2511'. [ 375.006188][T14814] 0ªî{X¹¦: entered promiscuous mode [ 375.012342][T14814] 0ªî{X¹¦: left allmulticast mode [ 375.048669][T14814] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 375.083634][T14814] 1ªî{X¹¦: left promiscuous mode [ 375.099117][T14814] 1ªî{X¹¦: entered allmulticast mode [ 375.131612][T14814] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 375.283688][T14783] vxcan1 speed is unknown, defaulting to 1000 [ 375.713882][T14848] validate_nla: 61 callbacks suppressed [ 375.713903][T14848] netlink: 'syz.2.2519': attribute type 10 has an invalid length. [ 375.933832][T14848] batman_adv: batadv0: Adding interface: team0 [ 376.006461][T14848] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.032946][T14848] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 376.052880][T14862] veth0: entered promiscuous mode [ 376.075074][T14848] netlink: 'syz.2.2519': attribute type 10 has an invalid length. [ 376.100735][T14867] netlink: 'syz.1.2522': attribute type 72 has an invalid length. [ 376.283148][T14848] netlink: 'syz.2.2519': attribute type 10 has an invalid length. [ 376.310723][T14862] veth0: left promiscuous mode [ 376.382114][T14872] 8021q: adding VLAN 0 to HW filter on device bond7 [ 376.396528][T14848] netlink: 'syz.2.2519': attribute type 10 has an invalid length. [ 376.565433][T14891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.950412][T14914] tipc: Enabled bearer , priority 0 [ 376.988537][T14914] syzkaller0: entered promiscuous mode [ 377.006776][T14914] syzkaller0: entered allmulticast mode [ 377.040984][T14914] tipc: Resetting bearer [ 377.058203][T14912] tipc: Resetting bearer [ 377.082589][T14912] tipc: Disabling bearer [ 377.968843][T14943] nbd: must specify a size in bytes for the device [ 378.018545][T14946] __nla_validate_parse: 69 callbacks suppressed [ 378.018565][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2547'. [ 378.085767][T14950] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 378.086655][T14946] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.141049][T14946] bond3: (slave bridge9): Enslaving as an active interface with an up link [ 378.336165][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'. [ 378.366670][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 378.752702][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2561'. [ 378.777080][T14986] bond0: entered promiscuous mode [ 378.802054][T14983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2561'. [ 378.812393][T14986] bond0: entered allmulticast mode [ 378.820194][T14983] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2561'. [ 378.832099][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'. [ 378.843566][T14986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.114042][T14996] netlink: 'syz.1.2565': attribute type 21 has an invalid length. [ 381.123214][T14996] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.194347][T14998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2567'. [ 381.433177][T15015] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2573'. [ 381.439247][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'. [ 381.476068][T15018] netlink: 'syz.3.2571': attribute type 4 has an invalid length. [ 381.488332][T15014] netlink: 'syz.2.2572': attribute type 14 has an invalid length. [ 381.496307][T15014] netlink: 'syz.2.2572': attribute type 13 has an invalid length. [ 381.736489][T15033] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 381.764295][T15036] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 381.969281][T15045] netlink: 'syz.0.2583': attribute type 6 has an invalid length. [ 382.061686][T15049] netlink: 'syz.1.2585': attribute type 28 has an invalid length. [ 382.070628][T15049] netlink: 'syz.1.2585': attribute type 3 has an invalid length. [ 382.551601][T15088] bond0: entered promiscuous mode [ 382.559839][T15090] sctp: [Deprecated]: syz.3.2595 (pid 15090) Use of int in max_burst socket option deprecated. [ 382.559839][T15090] Use struct sctp_assoc_value instead [ 382.807084][T15110] netlink: 'syz.1.2601': attribute type 8 has an invalid length. [ 382.911209][T15107] bond9: entered promiscuous mode [ 382.916543][T15107] bond9: entered allmulticast mode [ 382.923106][T15107] 8021q: adding VLAN 0 to HW filter on device bond9 [ 383.064807][T15119] __nla_validate_parse: 12 callbacks suppressed [ 383.064837][T15119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2607'. [ 383.258543][T15130] batadv_slave_0: entered allmulticast mode [ 383.279268][T15130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 383.323304][T15130] delete_channel: no stack [ 383.496867][T15138] netlink: 'syz.4.2613': attribute type 2 has an invalid length. [ 383.507979][T15138] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2613'. [ 383.553095][T15138] netlink: 'syz.4.2613': attribute type 2 has an invalid length. [ 383.561168][T15138] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2613'. [ 383.721517][T15147] delete_channel: no stack [ 383.729989][T15147] tipc: Enabled bearer , priority 0 [ 383.740801][T15147] syzkaller0: entered promiscuous mode [ 383.746335][T15147] syzkaller0: entered allmulticast mode [ 383.773178][T15147] tipc: Resetting bearer [ 383.818267][T15146] tipc: Resetting bearer [ 383.865396][T15146] tipc: Disabling bearer [ 383.922901][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.145027][T15165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2622'. [ 384.202722][T15169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2623'. [ 384.215932][T15171] veth0: entered promiscuous mode [ 384.234908][T15171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2625'. [ 384.301352][T15176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.391223][T15176] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.407787][T15176] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.444873][T15170] veth0: left promiscuous mode [ 384.477891][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2627'. [ 384.488225][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2627'. [ 384.510821][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2627'. [ 384.573873][T15176] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 384.585126][T15176] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.595608][T15176] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.632690][T15179] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 384.642575][T15179] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 384.718068][T15176] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.733798][T15176] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.818861][T15176] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.835576][T15176] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.138597][ T3515] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.159114][ T3515] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.205802][ T3515] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.216929][ T3515] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.258445][T15224] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.261654][ T3534] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.273363][ T3534] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.292825][ T3534] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.301166][ T3534] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.138282][T15250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.173211][T15240] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.186275][T15240] batman_adv: batadv0: Interface activated: team0 [ 386.217289][T15240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.657723][T15277] nbd4: detected capacity change from 0 to 63 [ 386.664910][T15287] validate_nla: 3 callbacks suppressed [ 386.664931][T15287] netlink: 'syz.2.2657': attribute type 33 has an invalid length. [ 386.698448][T15284] block nbd4: NBD_DISCONNECT [ 386.710180][T15284] block nbd4: Disconnected due to user request. [ 386.735175][T15284] block nbd4: shutting down sockets [ 386.982838][T15307] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.093457][T15316] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 387.944386][T15362] netlink: 'syz.3.2680': attribute type 1 has an invalid length. [ 387.974752][T15362] netlink: 'syz.3.2680': attribute type 2 has an invalid length. [ 388.270990][T15378] __nla_validate_parse: 14 callbacks suppressed [ 388.271013][T15378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2685'. [ 388.766622][T15399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2690'. [ 388.958534][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'. [ 388.996087][T15405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2691'. [ 389.051144][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2692'. [ 389.082074][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2692'. [ 389.184154][T15420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2694'. [ 389.293431][T15425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2696'. [ 389.370321][T15432] netlink: 'syz.0.2699': attribute type 1 has an invalid length. [ 389.378984][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 390.754369][T15443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2703'. [ 390.765327][T15447] netlink: 'syz.1.2702': attribute type 1 has an invalid length. [ 390.791756][T15449] netlink: 'syz.4.2705': attribute type 21 has an invalid length. [ 390.886064][T15449] vlan1: entered promiscuous mode [ 390.892650][T15449] bridge0: entered promiscuous mode [ 391.157208][T15469] netlink: 'syz.4.2711': attribute type 62 has an invalid length. [ 391.388161][T15480] netlink: 'syz.0.2716': attribute type 1 has an invalid length. [ 391.396264][T15480] netlink: 'syz.0.2716': attribute type 2 has an invalid length. [ 391.470614][T15482] netlink: 'syz.3.2717': attribute type 11 has an invalid length. [ 391.485906][ T5838] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 391.497969][ T5838] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 391.507647][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 391.519734][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.529868][ T5838] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 391.535720][ T5838] Code: 01 48 c7 c7 40 51 98 8b be 4b 03 00 00 48 c7 c2 80 51 98 8b e8 a4 24 72 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 04 5d f7 ff 49 8b 07 a8 03 75 62 [ 391.555349][ T5838] RSP: 0018:ffffc90003f8fa40 EFLAGS: 00010006 [ 391.561439][ T5838] RAX: 000000001fffe000 RBX: ffffffff822b7619 RCX: 4521285f6196dd00 [ 391.569425][ T5838] RDX: 0000000000000000 RSI: ffffffff8be309e0 RDI: ffffffff8be309a0 [ 391.577418][ T5838] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822b7619 [ 391.586046][ T5838] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: dffffc0000000000 [ 391.594037][ T5838] R13: ffff8880b873b500 R14: 0000000000000001 R15: 00000000ffff0000 [ 391.602029][ T5838] FS: 000055555c7f9500(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 391.610993][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.617700][ T5838] CR2: 000000110c365fc1 CR3: 0000000074c20000 CR4: 00000000003526f0 [ 391.625708][ T5838] Call Trace: [ 391.629046][ T5838] [ 391.631995][ T5838] refill_obj_stock+0x254/0x850 [ 391.636871][ T5838] ? refill_obj_stock+0x116/0x850 [ 391.641919][ T5838] __memcg_slab_free_hook+0x127/0x3d0 [ 391.647318][ T5838] ? __dequeue_signal+0x487/0x5b0 [ 391.652358][ T5838] kmem_cache_free+0x223/0x400 [ 391.657142][ T5838] __dequeue_signal+0x487/0x5b0 [ 391.662015][ T5838] dequeue_signal+0x1a2/0x370 [ 391.666802][ T5838] get_signal+0x55f/0x1340 [ 391.671334][ T5838] arch_do_signal_or_restart+0x9a/0x750 [ 391.676907][ T5838] ? __pfx_get_timespec64+0x10/0x10 [ 391.682124][ T5838] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 391.688303][ T5838] ? exit_to_user_mode_loop+0x40/0x110 [ 391.693907][ T5838] exit_to_user_mode_loop+0x75/0x110 [ 391.699474][ T5838] do_syscall_64+0x2bd/0x3b0 [ 391.704191][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.709513][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.715602][ T5838] ? clear_bhb_loop+0x60/0xb0 [ 391.720310][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.727088][ T5838] RIP: 0033:0x7f20127c14a5 [ 391.731515][ T5838] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 391.751507][ T5838] RSP: 002b:00007ffcfd117310 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 391.759938][ T5838] RAX: fffffffffffffdfc RBX: 0000000000000673 RCX: 00007f20127c14a5 [ 391.768008][ T5838] RDX: 00007ffcfd117350 RSI: 0000000000000000 RDI: 0000000000000000 [ 391.776774][ T5838] RBP: 00007ffcfd1173bc R08: 0000000000000000 R09: 0000000000000000 [ 391.784779][ T5838] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 391.792786][ T5838] R13: 00000000000927c0 R14: 000000000005f8d9 R15: 00007ffcfd117410 [ 391.800780][ T5838] [ 391.803823][ T5838] Modules linked in: [ 391.807739][ T5838] ---[ end trace 0000000000000000 ]--- [ 391.813198][ T5838] RIP: 0010:percpu_ref_get_many+0x8d/0x140 [ 391.819021][ T5838] Code: 01 48 c7 c7 40 51 98 8b be 4b 03 00 00 48 c7 c2 80 51 98 8b e8 a4 24 72 ff 49 bc 00 00 00 00 00 fc ff df 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 04 5d f7 ff 49 8b 07 a8 03 75 62 [ 391.838666][ T5838] RSP: 0018:ffffc90003f8fa40 EFLAGS: 00010006 [ 391.844749][ T5838] RAX: 000000001fffe000 RBX: ffffffff822b7619 RCX: 4521285f6196dd00 [ 391.852728][ T5838] RDX: 0000000000000000 RSI: ffffffff8be309e0 RDI: ffffffff8be309a0 [ 391.860709][ T5838] RBP: 0000000000000078 R08: 0000000000000000 R09: ffffffff822b7619 [ 391.869126][ T5838] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: dffffc0000000000 [ 391.877111][ T5838] R13: ffff8880b873b500 R14: 0000000000000001 R15: 00000000ffff0000 [ 391.885107][ T5838] FS: 000055555c7f9500(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 391.894074][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.900669][ T5838] CR2: 000000110c365fc1 CR3: 0000000074c20000 CR4: 00000000003526f0 [ 391.908675][ T5838] Kernel panic - not syncing: Fatal exception [ 391.915059][ T5838] Kernel Offset: disabled [ 391.919392][ T5838] Rebooting in 86400 seconds..