last executing test programs: 4.969915004s ago: executing program 0 (id=6571): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) recvmmsg(r0, &(0x7f0000005a00)=[{{&(0x7f0000002980)=@tipc=@name, 0x80, 0x0}, 0x6}], 0x1, 0x20, 0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xffff, 0x6}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xd, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000040)=0xfffffffc, 0x4) 4.797460051s ago: executing program 0 (id=6573): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0xb) unshare(0x40020080) r1 = socket(0xa, 0x5, 0x0) listen(r1, 0x8) sendmmsg$inet_sctp(r1, &(0x7f0000001440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@sndinfo={0x20, 0x84, 0x2, {0x11ab, 0x800d, 0x1, 0xffffffff}}], 0x20}], 0x1, 0x5) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x19, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000080000000011fc000600000018110000d2ea81041c4b581c4ed8f8cf0601370c36522ff3d699ba1d0c82a0f73d0b", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018560000100000000000000000000000186a00000a0000000000000081000000852000000500000018420000f8ffffff0000000000000000186600000d00000000000000ff030000850000000e000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x9b, &(0x7f0000000200)=""/155, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x4, 0x7, 0x8}, 0x10, 0x20310, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x5, 0x2, 0xa, 0x9}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pB \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r2, r3}, 0xc) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x104}}, 0x200080c0) 4.545907897s ago: executing program 3 (id=6575): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_netdev_private(r3, 0x8948, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x296ad8a36be72053, &(0x7f0000000000)={0x11, 0x4, r5, 0x1, 0xd8, 0x6, @local}, 0x14) 4.302572089s ago: executing program 0 (id=6577): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000030000000100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000500030006"], 0x5c}, 0x1, 0xf000, 0x0, 0x40c0}, 0x35aa2dae0099c8e0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000001c0)='team\x00', 0x200080, &(0x7f0000000200)={@_ha_fsid={[0x3, 0x4]}, {0x4, 0x6, 0xffffffff, 0x81}}, 0x5, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000300)=0x3}) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0xdc, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1}, [@CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff8}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4008000}, 0x44800) setsockopt$sock_timeval(r0, 0x1, 0x4b, &(0x7f0000000180)={0x0, 0xea60}, 0x10) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000030000000100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000500030006"], 0x5c}, 0x1, 0xf000, 0x0, 0x40c0}, 0x35aa2dae0099c8e0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000001c0)='team\x00', 0x200080, &(0x7f0000000200)={@_ha_fsid={[0x3, 0x4]}, {0x4, 0x6, 0xffffffff, 0x81}}, 0x5, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000300)=0x3}) (async) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0xdc, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1}, [@CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff8}]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4008000}, 0x44800) (async) setsockopt$sock_timeval(r0, 0x1, 0x4b, &(0x7f0000000180)={0x0, 0xea60}, 0x10) (async) 3.931439718s ago: executing program 4 (id=6580): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000005c0)={@private0, 0x0}, &(0x7f0000000600)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@deltfilter={0x86c, 0x2d, 0x400, 0x70bd29, 0x7, {0x0, 0x0, 0x0, r0, {0x6, 0xffff}, {0xc, 0x2}, {0x7, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x81c, 0x2, [@TCA_ROUTE4_POLICE={0x818, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x683, 0x4, 0x5, 0x6, 0x61, 0x42, 0xff, 0x8, 0x8, 0x33f, 0x0, 0x5, 0x1, 0x6, 0x1, 0x0, 0x7, 0x2bc8, 0x4, 0xe3f, 0xb, 0x0, 0x5, 0x5, 0xc885, 0x80, 0x101, 0x8, 0x101, 0x404, 0x7fffffff, 0x5, 0x8001, 0x3, 0xffff, 0x1444, 0xb, 0xf, 0x9, 0x0, 0x81, 0x81, 0xa, 0x5, 0x10, 0x8, 0xf, 0x0, 0x1, 0x5, 0x2, 0x0, 0x80, 0x10000, 0x200, 0x5, 0xf, 0x3, 0xffff0001, 0xb9, 0x400, 0xffffffff, 0x0, 0x1, 0x1, 0x6, 0xf654, 0x80000000, 0xb42, 0x5, 0x6e, 0xffffffff, 0x10000, 0x1, 0x3, 0x7f, 0x8, 0x5, 0x8a, 0x3, 0x4, 0xa, 0xef1, 0x10000, 0x9, 0x5, 0x1, 0x9e38, 0xfffff001, 0x2, 0xf, 0xd0, 0x1, 0xc, 0x10000, 0x2, 0x7c7b, 0x3ff, 0x7, 0x3, 0x1, 0x401, 0x1, 0x3, 0x320, 0xacaf, 0x3, 0x8000, 0x800, 0xffff, 0xff, 0x3ff, 0x81, 0x0, 0x3, 0xffffff2b, 0xffff, 0x5, 0x4, 0x6, 0x2, 0x9, 0x0, 0x5, 0x8, 0x3, 0x6, 0xfffffffb, 0x401, 0x5, 0x4, 0x0, 0x3, 0x1, 0x1, 0x5, 0x3ac, 0x0, 0x7fffffff, 0xcc08, 0x0, 0xff, 0x0, 0x1ff, 0x8, 0x3, 0x7, 0x9, 0x851, 0x8, 0x4, 0x36, 0x8, 0x5, 0x8, 0x1000, 0x7fffffff, 0x8a5, 0xfad2, 0xc5d6, 0xcc0, 0x7, 0x2bd, 0xffffffff, 0xffff86fd, 0xfff, 0x66, 0x9, 0x3, 0x2, 0x1, 0x8, 0x2, 0xffffffff, 0x700, 0xfe, 0x75a, 0x200, 0xd5, 0x8c, 0x9, 0x0, 0x43bd, 0x5, 0x0, 0x800, 0x6, 0xffff, 0x8001, 0x10000, 0x100, 0xfffffff9, 0x1, 0x5, 0x401, 0x3d2, 0x80000000, 0x4, 0x4, 0x9, 0x8001, 0x7, 0xfffffff8, 0x401, 0x100, 0x80000001, 0x5, 0x2, 0x0, 0x5, 0xa90, 0x8, 0x400, 0x0, 0x1, 0x42c, 0x0, 0x4, 0x0, 0xfffffffd, 0x10000, 0x2, 0x8, 0xef5, 0x4, 0x8, 0x10001, 0x6, 0x4, 0x339, 0x8, 0x7, 0x8, 0x9, 0x526e, 0xff, 0x3ff, 0x46, 0x9, 0x8, 0xc8, 0x7, 0x0, 0x4, 0xe, 0x1, 0x8, 0xfffffffe, 0xee, 0xf3, 0x9, 0x7c1, 0x6, 0x801, 0x3, 0xad13]}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x3ff, 0x0, 0x5, 0xb, 0x7, 0x4, 0x7f, 0x3, 0x7fff, 0x3, 0x1, 0x0, 0x9, 0x8, 0x200, 0x0, 0x5, 0x10000, 0x7fffffff, 0x3, 0x800000, 0x0, 0x3, 0xae, 0x8, 0x7f, 0xcb, 0xf70, 0x101, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x7, 0x5, 0xa0000000, 0x2, 0x5, 0x0, 0x5, 0x3, 0x7ff, 0x5, 0xc, 0x10000, 0x92, 0x9, 0xc, 0x1000, 0x9, 0x9, 0x9, 0x7, 0xfffffffa, 0x4, 0x80000000, 0x7, 0x9, 0x3, 0x8, 0x3, 0x3, 0x8, 0x6, 0x24a, 0x1, 0x1, 0xffff, 0x10000, 0x30a, 0x6, 0x5, 0x5, 0x1, 0x0, 0x8c, 0x5, 0x5, 0x8, 0x9, 0x8, 0x0, 0x0, 0x0, 0x9, 0x4, 0x5, 0x4, 0x9, 0x0, 0x1, 0x4, 0x6, 0x8, 0x2, 0x2, 0x200, 0x8, 0x7, 0x1000, 0x0, 0x2, 0x80, 0x5, 0x4, 0x8, 0x95, 0x1, 0x45, 0x0, 0xa733, 0x2, 0x0, 0x7f, 0x2, 0xfff, 0x65, 0xb20b, 0x9, 0x4, 0x1, 0xa, 0xfffffffb, 0x7, 0xfffffffe, 0x0, 0x80000001, 0x8, 0x100, 0x0, 0x3, 0x0, 0xe, 0xfffffffd, 0x1ff, 0x7f2, 0x0, 0x7, 0x8001, 0x1, 0x0, 0x3, 0x4, 0x0, 0x0, 0x4, 0x3, 0x4, 0x3, 0x6, 0x7, 0x2d6e, 0x95, 0x80, 0x6, 0x8, 0x100, 0x1, 0x0, 0x0, 0xfffffffb, 0x6, 0x800, 0x7c0566ca, 0xfffffffe, 0x1, 0x20a, 0x0, 0x200, 0x4, 0x3ff, 0x0, 0x4, 0x1, 0x9, 0x7, 0x46, 0x5, 0x7, 0x5, 0x7, 0x6, 0x40, 0x30e7ef56, 0xfffffffa, 0x0, 0xfffffff9, 0x5, 0x3, 0x4, 0x7, 0xa8e3, 0xfffff001, 0x4, 0x5, 0x10, 0x9, 0x6, 0x7ec2, 0x2, 0x3, 0x7, 0x1, 0x4, 0x0, 0x3ff, 0x6, 0x9, 0x5, 0x0, 0x0, 0x2, 0x1, 0x3, 0x6, 0x6, 0x71a1a3ee, 0x100, 0x9, 0x7, 0x10000, 0x2, 0xf3, 0x40, 0x3, 0x9, 0x6, 0x9, 0x10, 0xe, 0x1, 0x5, 0x8, 0x7, 0x8, 0x1ff, 0x3, 0x4, 0x5, 0x2, 0x1000, 0x40, 0xc, 0x1, 0x1, 0x100, 0xc0, 0x7ff, 0x5, 0x7, 0xe, 0xe, 0x4]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5de}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x8}}, @TCA_CHAIN={0x8}]}, 0x86c}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r1 = socket(0x3, 0x80000, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004600070128bd700000010000017c0f8707000480362c"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000580)={0x2, 0x7f, 0x1000, &(0x7f0000000f40)=""/4096}) bind$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x0, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff], 'pim6reg\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x360}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x360}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xc, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44810) 2.711846632s ago: executing program 1 (id=6581): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x81000) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f00000000c0)={0x0, r1, r2, 0x7, 0x0, '\x00', {0x1, 0x8000, 0x0, 0x400, 0x7b5, 0xebf, 0x2, 0xff, {0x10001, 0x6}, {0x2, 0x400}, {0x9, 0x5}, 0x1, 0x1, 0x80000000, 0x2, 0x0, 0xef2e, 0x8, 0xfff8, 0x8, 0x81, '\x00', 0x8, 0xfffffffd, 0x7, 0xff}}) r3 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000180)="f15d030f07000c22959ceaa26cee4459ed84b8c471ff4fa54498ce5b80c7f8f043cfc7d7d8dafbc514933b3da2f8d1b66b3ab22f072ba2c13d998d0011eaf3abcfae944596fbe6b306fdde8c4b2cc66b55a40c3624b9ad909c1d9c60ef885636c2b85ba1a2f69208357d9ab3c028699606ff6ae9264dda7d552556a222dc3ed7efd1a1c7f692a6f9ec555a5a70562d51e9f3bdffc1e11436fbaa836e7f3c7241c172d9412c73b7ae1afd3114ec8f722ba5fc6bbb2ee461a70e41c54d4b5469cb91e58d8e79f2037d6244f45bd20e88e4e2c7bd5550ba80dde85440f9a5", 0xdd}, {&(0x7f0000000280)="b66d84e040f29d23ca573bc960ae77f13c05b4ff77c2486e2dfefc9b418c51bfc95d42c71a804c5c50c91094fb6ac557d6d58f293f1277573e6911cfbc5274e2441f70799aca99444d5b3bd949657a", 0x4f}], 0x2, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={r2, 0x8000000000000000, 0x7, 0x2f3f}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x7, 0x0, 0x5, 0x2, {{0x48, 0x4, 0x0, 0x26, 0x120, 0x64, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x48, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x40}, {@broadcast, 0x1}, {@loopback}]}, @rr={0x7, 0xb, 0x36, [@multicast1, @multicast2]}, @cipso={0x86, 0x23, 0xffffffffffffffff, [{0x2, 0xe, "149558c87bcb4020f8c47234"}, {0x0, 0xd, "a5bc0d6a942d85d7dcd3ab"}, {0x0, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xa0, [@multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0xfe, 0x3, 0x1, [{@empty, 0x8}]}, @generic={0x94, 0xe, "5324103f9c514e98ba70378e"}, @cipso={0x86, 0x57, 0x1, [{0x5, 0x3, "14"}, {0x5, 0xb, "c73cf91f341c7d9d35"}, {0x5, 0xc, "45ff8f8fc3cdb2cf7960"}, {0x1, 0x4, "3893"}, {0x7, 0x12, "de70af44571fcd215cfaabb0532135d3"}, {0x7, 0x8, "587c9ab7071b"}, {0x5, 0x8, "d21ea16b4788"}, {0x1, 0x11, "cf0ca144646ba5e338071bf259b99e"}]}, @timestamp_addr={0x44, 0x2c, 0x43, 0x1, 0x7, [{@multicast1, 0x4}, {@remote}, {@broadcast, 0x7}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}]}]}}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1c, 0xa6a, 0x8000000, 0x4, 0x60112, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%-010d \x00'}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffff00, '\x00', 0x0, r0, 0x0, 0x0, 0x3}, 0x50) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0xffffffffffffffff, 0x10, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x25, &(0x7f0000000440)=@raw=[@alu={0x4, 0x1, 0xd, 0x0, 0x7, 0x100, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @generic={0xf, 0xe, 0x3, 0x9, 0x1ff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x7, 0x0, 0x7, 0x6, 0x2, 0x46, 0x4}], &(0x7f0000000580)='GPL\x00', 0xee4c, 0xe4, &(0x7f00000005c0)=""/228, 0x40f00, 0x10, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[r8, r9, 0x1, 0x1, r10, r11, r12, r3, 0x1, r13], 0x0, 0x10, 0x7}, 0x94) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000c00)={@mcast2, 0x0}, &(0x7f0000000c40)=0x14) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000d80)={r3, &(0x7f0000000c80)='\x00', 0x240000, &(0x7f0000000cc0)={@align=0x8, {0x482e, 0x3, 0x2, 0x5}}, 0x80, &(0x7f0000000d00), &(0x7f0000000d40)=0x8}) sendmsg$nl_route_sched(r15, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@deltclass={0x40, 0x29, 0x100, 0x7, 0x25dfdbff, {0x0, 0x0, 0x0, r14, {0xf, 0x5}, {0xffff, 0xfff1}, {0xf, 0x9}}, [@tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d4}, 0x8100) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r16, 0x84, 0x6b, &(0x7f0000000ec0)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x401}], 0x2c) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000f00)={0x5, 0xc4}) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r15) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r15, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r17, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x800) r18 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r18, 0xc0c0583b, &(0x7f0000001080)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x3, 0x0, 0x35, 0x8001, 0x9, 0x7}, {0x200, 0x0, 0xfffffffffffffff8, 0x9, 0x9, 0x5}], ['\x00', '\x00']}) r19 = syz_open_procfs$namespace(0x0, &(0x7f0000001200)='ns/time\x00') sendmsg$nl_route(r3, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)=@bridge_getlink={0x70, 0x12, 0x4, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r14, 0x7, 0x4048}, [@IFLA_IFALIAS={0x14, 0x14, 'geneve1\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r19}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xb86b}, @IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3b061}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1ebf9}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x10}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x2004c010) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r15, 0x84, 0x8, &(0x7f0000001340), &(0x7f0000001380)=0x4) 2.646802865s ago: executing program 4 (id=6582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40004) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xa}, {0xffff, 0xffe0}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r9, @ANYBLOB="010000000000fedbdf250a0000001800048013000500"], 0x2c}, 0x1, 0x0, 0x0, 0x4400}, 0x0) setsockopt$packet_int(r7, 0x107, 0xc, &(0x7f00000001c0)=0x2, 0x4) unshare(0x2c020400) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r10, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r12 = accept(r10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000940)=@tcp=r2}, 0x20) poll(&(0x7f0000000900)=[{r0}, {0xffffffffffffffff, 0x1}, {r2, 0x10}, {r12, 0x8}, {r5, 0x3008}], 0x5, 0x9) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$inet(r6, &(0x7f00000008c0)={&(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000002c0)="bcb0259041790435f3eb4f6a046eacc2e7685fcec1c580488e77a2b5800ff3b629d1a10de94351e4d78ef055e8a90ddd2b96b7add86d76ed199cb20127caa193aa63c3dced087b5510ab4c1dcd9f076b72399003696ce36af109fb2e0f28193a1971429097dfa515513ae3822d25d633d8ab4f9b9c05a534e7167c9ae4464ac3aae674776fca68b65c306da82dafe1e86d7ad2d724889774e5f5c8d241d0c8cb8ce603e29b84", 0xa6}, {&(0x7f0000000440)="3d6d08a18094b083d21225cbf4cd7a1545e764ef2bdce1ad9bd8c84942f05d703f1d88dcdbf2181801120797d9a5700da32499f4992648df413ad8f400bba89a3a4b8c1ff31197a5ea791813fc5b7b8926ead1e9d7aed04497d03cbc27aa56f95f079608f2f15d6134a1a384c777374bafdacdc688400478b6822ef852ff5154c30049", 0x83}, {&(0x7f0000000500)="cfe4708c21da40ba9e9db4f557345c7c0ca0eb75a4267506d23f2fa661dbd29a8971b5a0523967940c97168e3ae851a4bdd65b6c4855e1c9a25a85ddb08aa16de82fc5226819ed6a887cd134a1bd28c8209cc402d70b94398b6822b62beb75dc26d670992b9ee56e24212465f8bf601e34de8eebb507ff56171d1d7a69feb57ffa6086f00952731e251f14c0e8cf80f20927638c256de2c574244c9230793f67952c9c7f1340d31516d3f6a3a1709f78e973c8b4fad8c2c0ff6187ff7eebf4c5901236d515f8d6a9cd8264046db4846f128567578f237f805323c2397602c4210d8a5fd3018d07", 0xe7}, {&(0x7f0000000600)="ad939f826ac8411970337553c9b113daf84f31f681fb29f2dd384519d926b38e54e0f6d462ab0242006cc2e2106e6f2ee66f11bcd7693065e17712234af0b45c98c584387079573a9745e1cc3d9c87f8e68092a994148b25352a2e0ed5295719fd3a5ebf7e5797bad0d20cab6bd141176d271d4acb05f3b65472db45818253281a24ddf68c08868a9a4d8633193b7ed06d423397c7cc916e6f915522eb6a4821184b899117ef986ba21687e9f78870600397ed0ea5b3cbb476fe292a1316ac8aa0e67777c303127ca013eedda88a7246419e", 0xd2}, {&(0x7f0000000380)="88e564469fd9836f37a6f52959414fb3bf5177161970997fc72c0bef6da6ee4834f3e5988c2383f0f995990b2629a1dfa6cea962281c437e648b88ef356f7a7583e0432b78cb4ff83abeb6fe9144ca1ccadb", 0x52}, {&(0x7f0000000700)="2c45d582c1eed9e000eae5fa50ecbb187fbe3d8bf79618b758e96aa7adc7351e333acda0ea14642ecd7629ceda8bdb3bcaa84475e837d2b3461be9998c42a86422800e277e1b1a47bf2ca64d3c0847f2ac4d65096ff50dc55c79c7d8a5df2bf898514b54c183cf7c00b090167a3b2aed86eec825d2945ea82a843b84a2eddab7e637eb8dc4cdffc9d62aff001f5d8e0b30745480054294a45415d6c65090b74e0abd649f7ecf40ccd1ec53eada8215cbb1d44bcdab97", 0xb6}], 0x6, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x60}, 0x4042) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2.556499219s ago: executing program 1 (id=6584): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140), 0x0) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x40060) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) (fail_nth: 32) shutdown(r2, 0x1) 1.629302768s ago: executing program 1 (id=6586): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x4c, 0x1a, 0x1, 0x0, 0xfffffffd, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_PROBES={0x8, 0x4, 0xffffffff}]}, 0x4c}}, 0x0) 1.530548356s ago: executing program 3 (id=6587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x403, 0x70bd2d, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88add369}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TOS={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @empty}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x40884) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x42, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x2}]}}}}}}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045f400340000400000069078640101019c1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c10000090780000080a00000000fffffffe0000"], 0x0) 1.529114924s ago: executing program 4 (id=6589): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x4008800) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x23, 0x0, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006340), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x88c1) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9000000}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000810) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r6) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r11], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000500)={'gretap0\x00', r8, 0x20, 0x40, 0x0, 0xaa05, {{0x2c, 0x4, 0x3, 0x6, 0xb0, 0x68, 0x0, 0x7f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x50, 0x2, [{0x5, 0xe, "f4c4ab195ce6e5836bf25e05"}, {0x0, 0x5, "f81e30"}, {0x7, 0xf, "4b5df4d50c0c91d99b245fd39f"}, {0x2, 0x8, "e21ab9b47965"}, {0x6, 0x9, "f6ec5b6a6d21c1"}, {0x2, 0x12, "f58b9c52305e47040127afe559ee4200"}, {0x1, 0x5, "cd8259"}]}, @end, @timestamp_addr={0x44, 0x2c, 0x31, 0x1, 0x1, [{@remote, 0x7}, {@rand_addr=0x64010101, 0x84}, {@loopback, 0xf3f}, {@loopback, 0xf}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}]}, @timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0xc, [{@broadcast, 0x6}, {@multicast2, 0x3}, {@multicast2, 0xe}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000009c0)={0x1c8, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x1}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}]}}]}, 0x1c8}}, 0x4040080) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x9}}, 0x14}}, 0x20006004) sendmsg$nl_route_sched(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@deltaction={0x18, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1.369175853s ago: executing program 1 (id=6590): unshare(0x40010200) unshare(0x14000400) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='!\x00', 0x4000, &(0x7f0000000040)={@align=0x8, {0x0, 0xb96, 0x5, 0x7}}, 0x800, &(0x7f0000000080), &(0x7f00000000c0)=0x2}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) unshare(0x8000a00) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x8006}, {0x5, 0x4}, {0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4048400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_conf_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008044}, 0x80044) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:clock_device_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r7 = socket(0x7, 0x80000, 0xb4) sendmsg$unix(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000580)="9f2c593e46e68a52fda079c8b0080b9184c68774cbf0bf0acc987cd26354a6aa42cb2175a200cb211e1cb6824aa47ec6d3575595685ac0cd798cad32e19a462ba45f616819e4c7643b034587530d67d2f37a0f6f7f4ec599cfe3657c538d2426d0ce2bf42fe40e87e8", 0x69}, {&(0x7f0000000600)="a2b59078e7a969fb754d6c91aab4d1b36871c9e1e061b700ede84250fdbdb6f01313959931e8b984b59dbb01bdb55354eb92cb17baf8eb570d2457a3c9d7bf746bd226f71656589a75cf67fa7a83cb8e44861b9934b04bc8ecc7d765d905904ea6ae0d5cabd4ae86c936562088e69e8e225a5d236e8cee2200af01ee38e4a02d802574e49b064a344f93b2d090557e4f7813ffdf4564ff76c720785d1ae2b023512a62c36a07d3d0abc8a70f4db13b26b2165cef8ec880ce57628ecc9f3c3d104f972bf371bb2eaeefe100f444c91654f685843b7b3b42764845d4", 0xdb}, {&(0x7f0000000700)="8db8ed55ed657395f9536f676f0d7ac780b8be2c1ad58ad671", 0x19}, {&(0x7f0000000740)="72d7fbb281b17401398f1b22fbdb62e3a3c11cde8f1ba39f789c78d906567deb236d8ca92b6b44164d3aa3fed453107d1f70327cb809b63c3e21464c96ef3dc4ab419597b05868f4ed2b8ae133b551bc6b11dc02f8f0caa634c723fb5d282de877813475220178298fbfa2d0f376dcf12add57c4abb80f26423b4bde74d2311798bf7a8e3d3e4be91757b0740256861975d5e9be2036522a98db0324b42873e0757150f2025afd135b2e1de0b752fa309dfed11150", 0xb5}, {&(0x7f0000000800)="f6f4aa1935db612941c1a37279d3c9f17ca234154f79a2fd0a0eabe6b227074fb1ebe32234b599ba186c0128f3567d35091a5df094ad9164999a0ea44692a5aebf8d91cdd33f3af9ba6dadf49030c1c9bd9f9b124b3d96c2c03e6f7785e5061bac7c5a3d979edc2d05c2ded260dabf22664cf3cd6e6fb03db99dfa39dc0c068a41f199", 0x83}, {&(0x7f00000008c0)="38d7e15b7378040c171e0e329b56bc163d035d7a24fb1404e68d1abefab5d562996044547768dd9aa65a1f1c718cf7d3759a79213606288b73410a6f2159d1e05e1e42289b0db5becba4bf742404622970ed195675cde328d11600d2509ccc107bddbc3eada9328c087921af325bbe2af8dbdbf0f51c8146e119ad90df68a9a319d1967704625ff6c5dae0a2c9599fff12b849c9a842009c2e2615eb2e22374f29a4ec43f34b13334c7b344df22e5684494b8ba8c27f776b6a7d154e7e5d675bcd09c2b37dbec797bd07722994659d7e07e109081ee91b43471db84b671be0a29f248e607bac88d47d320e1d38", 0xed}, {&(0x7f00000009c0)="7fdd22498bf4265760435de2873643b7b485a0b2b688f1ca62f4efb5869259d755a7e55c22f330c23931f399090dfbbfccb0da592da6ac89061f1c36e0f59138463d2260330784813a1ff697f577e374be990805cb62716da1c07cae6ef5ade15d7d8e74a554176cfb0ac605c0bbf39fee1b2eaeee26254b1cbf418ab383511ecde6ee9941a59a", 0x87}, {&(0x7f0000000a80)="4045ab8f83eb126f5c0f66171ef96f70d84f60d2de859544aeed3caf1a6f1c07162b803d2cd017ab78c358e5814c85467dc5603179be689e79d5011381", 0x3d}], 0x8, 0x0, 0x0, 0x4}, 0x800) sendmmsg$alg(r7, &(0x7f00000010c0)=[{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000b80)="ad7b98bce435c4bfed61b69582a0aa333a472ed48f232f1ef23f6c3e8541984a24727e4ba48d695ebbd21be4d51b4d20af57fc1a9778218181825ad293d110159351b324f18cf7d08eab544a92818dee4ad0b28bb3a4b29c767378946e654bff003294e143a3a06bea6564e694b27836023fa76e77f7e2b216b3d6e3e5b83fd802eca9602e8a0a3d625b7dd231a24c9652a9022a0bd9377d3b3f88e6eb7e113b66021e", 0xa3}, {&(0x7f0000000c40)="525ab1d2a262f9868b9193158fa3913b7ae0f9a931b23ca4d76c49fbf16ee614db7b3a30e3679cbd3001ed903b0d52628518cd612d42f49b25dd267f34a08ae07f9489922fd14fa440afb2f71c0bbb8e2c558a9ad8dac8", 0x57}, {&(0x7f0000000cc0)="0cf524c49a6ffb56c676e2ca52b8f1134bef7b34eb0a4ab0ee0f9906be268ced26855b61210b577c102095f188d1cc400ca4eaeab621a2b7dd183a77b1dfde019d6d1f94d89fea4b16e620d8da75da18337c6cf66c0f454337aa8bf7e9b610ed6af7588708e5b2cfd4005fff144b88958bf559eb41870182f220a81b9b19532aec8a3171d16ce79839a90dad398d9e9cfbf51d6c9a5f7da3466f573c9fe17da5c3f8568b312bf56d5d31d1c02c29a1716f6d86a07a604dea4f29b51721928e915cf587fc4452b8284fef571310b9334c119d125d69f0dae03cf6238355b8ebdeef14b5", 0xe3}, {&(0x7f0000000dc0)="a30fcb50b34b0fdb8abe1ecc1931d3c820c4", 0x12}, {&(0x7f0000000e00)="1be3bf014f16ca16167b2c667cb65d785e6f0de1101f", 0x16}, {&(0x7f0000000e40)="e0a18526d703a2b2e1fd30b56b3071c8b931880f102089576e5ca062ee3907c1bf05638eedb7775f56478ea8dcd17e5f687bcdd4e713c79b041de771c66b42b4af8c9c088ee026208023188793cc39512c30cf32a4ee3f0e9793e94a3498cbe8aa3704a50e413fe441ac95ac070a41fd78aae5bc550e047e36e93a0282e8a5c9eaf2ed691a937ba07f49a231edae1a0ff9912f0b", 0x94}, {&(0x7f0000000f00)="e9be2cd0c77675840930e3c86ce1d5c63f267729a2a4034fca441acb374fb4104aca99c890d10464fff42704cedc26d33dcc50923539bbfe40e8742d3d3cb9c85426a14e3e88f23ec160618fdf4f54369fca2017f0c03d0c5a882622d197e27c0fa16f509565a56da752f50d6025e80fb50247792b0c112bf6a8bc1dc057ba6a3f7011fe1e45a63dc32a3f4a55713d627df3943ac7e123da92a13f9aed211d88c70396f741a0f8dd3aed94d1586fbfee90ce2700f467eb2fdc24", 0xba}, {&(0x7f0000000fc0)="7e70ab79d8713663770f00245c76e0bd423ef4fd35248110d08ffaecf402b415c5a433c7b60eeda250f1f4f71f1b62c2d48f86b65d14ead770a17c7e68d43e03503b6b56155962d6ae5aa5861e3ed467b5db92a3a0cf1a3abfcefd8defe2b39c6c41", 0x62}], 0x8, 0x0, 0x0, 0x80}], 0x1, 0x50) sendto(r6, &(0x7f0000001100)="dcbf3d77e9d30cca6aec8d2a5728989f651774ac93f66736a3461136df7e6fec55cfed11201463c86b92865e47dd86bad61072fa4cfa9ea23000ad8beca1b2f90a1e5d4f7dfb206f35948bc91e6f95e7839d5ab67a3dc0f75bf0ee32fb2e67d6ce4f15a6258971597d5258", 0x6b, 0x0, &(0x7f0000001180)=@pptp={0x18, 0x2, {0x1, @multicast1}}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)=@gettaction={0x2c, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0xc0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000001300), &(0x7f0000001340)=0x4) write(r3, &(0x7f0000001380)="deab2616871f5b14bfd9fb683b3701f1cd5c7606949e21479dc1cb5f285845dad1f38a53556d9cda3c4566212acf70670f677cb494066bbc87bae9ae53b4c1b0c3d7603bdbf20e368aae1121a1860d60260b96c4376ac1d2b1efeb95d9fed9fa8322bac770016bce46c75f570915c0d9147fcf6361459979e071bd8ec965ae9e6addc45492706e1395a056ddd47e939bbb8346dbdbd79a4bb2795d614e75b53670c49d20a517db4431dd6e28cc9b6a2875d060939e76286c48d1ac01faa03af82f", 0xc1) r9 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000001740)={&(0x7f0000001480)=@phonet={0x23, 0x0, 0xa2, 0x3}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)="97acb2b749f21f4fb89aeadecd77aba979094d661173dc2474c2ac06b4d01a839ef9d6815312d31b7f7591e8193f3334665c95153c499facb8444a35e2cb855fff362642a20b1c83", 0x48}, {&(0x7f0000001580)="8b8447d89106512ef298b2ebeae8a7a5347a3f62673d446559f5b6fbe3fc1fdcd427255671983b50e357", 0x2a}], 0x2, &(0x7f0000001600)=[{0xa0, 0x10b, 0x4, "6d6c0ae70607a857d0585ee1a9e49853bfbf7f408dc024f7cd5a732710b3e5f18ee8b521e90bdc852537532c576c6cd205b36ce40c563aa2a462a07255ab69f621a3b39157ef8f645a67763982d049b6e01db9b1a2064aed3264e8d2c7b5fe654be9f9c18b0c0613920dd2a9719303cdf9462722caa8e9f4eb661c820c24a7a8cc7c611c673e835326"}, {0x60, 0x118, 0x8, "ac4df5d628e4c3308769033a1bd58b6a9b8221da3e357c5712440672e8d073abdee619a130b8443f454a381133410c7128c3ce8eade732e1b48173d0788c1b2ccd42a69dfd14b5432c0ccd19c8"}, {0x40, 0x17, 0x2, "11c2d0fc4b990543bc9ea0874eafb7730d436daa85f2ce37ccdb8d908bce2d8899d4e9bf7b0c7265de8b410d345ea6"}], 0x140}, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001780), 0xc, &(0x7f0000001d00)=[{&(0x7f00000017c0)=""/69, 0x45}, {&(0x7f0000001840)=""/127, 0x7f}, {&(0x7f00000018c0)=""/84, 0x54}, {&(0x7f0000001940)=""/54, 0x36}, {&(0x7f0000001980)=""/233, 0xe9}, {&(0x7f0000001a80)=""/69, 0x45}, {&(0x7f0000001b00)=""/39, 0x27}, {&(0x7f0000001b40)=""/85, 0x55}, {&(0x7f0000001bc0)=""/9, 0x9}, {&(0x7f0000001c00)=""/193, 0xc1}], 0xa, &(0x7f0000001dc0)=[{0x58, 0x0, 0x0, ""/67}], 0x58, 0x40000001}, 0x38, 0x20) recvmsg$can_bcm(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000001e80)=""/58, 0x3a}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/225, 0xe1}, {&(0x7f0000002fc0)=""/38, 0x26}, {&(0x7f0000003000)=""/68, 0x44}, {&(0x7f0000003080)=""/142, 0x8e}, {&(0x7f0000003140)=""/156, 0x9c}, {&(0x7f0000003200)=""/187, 0xbb}], 0x8}, 0x40000002) r10 = accept4$packet(r0, &(0x7f0000003380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000033c0)=0x14, 0x0) getpeername$packet(r10, &(0x7f0000003400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003440)=0x14) unshare(0x24000000) 1.237608257s ago: executing program 0 (id=6592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'caif0\x00', 0x200}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r3, 0x2) r4 = accept(r3, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000002240)="ee", 0x1, 0x4404c06d, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) unshare(0x6020480) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @sched_cls=0x36}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="2f0000001400000083bc7bc7", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8000}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x40) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x1) close(r0) 1.119814378s ago: executing program 4 (id=6593): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000203010800000000000000000a000000090002000005000902"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x9bd2e45169aa59f0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"/441], 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffe, 0x0, 0x32, 0x1}, 0x9c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x68}], 0x2c) 1.119358381s ago: executing program 1 (id=6594): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) shutdown(r4, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdc02, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) sendmmsg$alg(r8, &(0x7f0000001e80)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="b5760da4b7fdc960", 0x8}, {&(0x7f00000002c0)}, {&(0x7f00000003c0)}, {&(0x7f0000000500)="68ab74e597f57c502f445658731de49ad5a3e4364c185ef4131dac0727d0e0035d7a12f0bdde65c197e2e879b45103d76b766adab242ce48de450d13b0b56a4337a7fb7a11e5630806e2376320e31c32b94361c571aadbcd10877243db695f6ab4c8f3438a72a93c47d79da705542f6d736fcebf8e994757f56f88e1b6827df2914099c276cb89da32a0b7c38bdb27ed79651ac41a4e512bbb66aaed7f39bf42865cef0defeede626faf21b1eabc3e64144b3ee6b32d7cae41d94cfdb5f847bb21b4143323508c453b", 0xc9}], 0x4, &(0x7f0000000900)=[@iv={0xd0, 0x117, 0x2, 0xb9, "17a5c1855c49cd6667010cb1ce31653f312f2c07be44f1861c18806ae32beaaf96cbb10b2cdd79ab0586de14e36e04bafdc184102ceb514abdf5debd8438ddec4e0ef3600059f84538aad256030f25214834ad363eb8004b67152b918032e32cf6b3feb8567763a00afbd0b55f43a53180b33d44147150e602b96743ab29f53d0620a7b165eb7a0e1a73b7f29060a96225e83051057c6f743b5555b49aadf967fcf8bdc391e021b367483171ca71433573d88ab0f6e68ce5e8"}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd8, 0x117, 0x2, 0xc4, "132e12bfe7cc99946d01f9e0672907b372eb832269ca8d8b38295b507caf3955d61928f77f84e72a111fa65358aae7e1bfcdc9fe8fd6ecfb08c515d1f8144010e4000057b9764859edc1aaec722d0692818555f5d7fea53401ca882188a05a7ab593c9b6b0a117569bd7ed1157cfedd49111b04443d37b02df9996a02af967a9e63cfce810ed9d555e905b8e1a0f92e656f23cac90d1583bb89c20c52b297a66da199abe5bec8d325f2e5f0cb5dbad853ee63f657f9d737db5918a4fbe76528c5d5f7e36"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1f0, 0x2048811}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f0000000b00)="79e5fe0b1f9e694279b4ea828fbf9884b0c32f6124e40f50de1b0091eecb4df5cede2e57d5b31fb78e2b71c6c464c67c1be21161293825428fece787ab96dfd689ea8f48a80b26ca9551bf305a9f5ee79b9ae8d5a05a5f675c92715e97cc72cc571dc618fec56512244bf55a7c447231fb1a019c7f9f3aac7e1a6ca71170257bbba2390eeaba4066cfa9862e", 0x8c}], 0x2, 0x0, 0x0, 0x80}], 0x2, 0x40880) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x118, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1.048403609s ago: executing program 3 (id=6595): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000840)={0x9, 0x2000, 0x3, 0x40, 0xc, 0x6, 0xffff, 0x7}, 0x20) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x800) 1.03466755s ago: executing program 4 (id=6596): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140), 0x0) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x40060) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) (fail_nth: 33) shutdown(r2, 0x1) 941.885949ms ago: executing program 3 (id=6598): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x5, 0x12, 0x0, &(0x7f0000000280)="71000000224354191668a444702ba8d664da", 0x0, 0xcfe, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000009552a78b18f6a423e6871bdd197b60000000000000000009a000000000000000005000000000000004256d1168d"], 0x20}, 0x1, 0x0, 0x0, 0x4040035}, 0x6000000) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003740)={0x20, 0x1a, 0x1, 0x20000, 0x0, {0x81, 0x2}, [@typed={0x8, 0x9f, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}}, @nested={0x4, 0x2a}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 923.866992ms ago: executing program 2 (id=6599): syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x891e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000061186b000000000095"], &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r1, r1, 0x2f, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000004c0), 0x0, 0x81, 0x0, 0x1}}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) 801.34788ms ago: executing program 3 (id=6600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x9, 0x4, 0x3}, 0x50) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') (async, rerun: 32) listen(r2, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f00000000c0)}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x2}) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) listen(r4, 0x3841b273) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9) (async) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async, rerun: 64) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0) getsockopt$inet_mreqsrc(r9, 0x0, 0x26, &(0x7f0000000140)={@multicast1, @multicast2, @loopback}, &(0x7f0000000040)=0xc) (async) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7040fbdbdf250f00000008000300f13e157bb681048c2a919dd1a0afdee6da79dcaf", @ANYRES32=r8, @ANYBLOB="05002f000000000005002e0001000000"], 0x2c}}, 0x18) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) (rerun: 64) 483.064764ms ago: executing program 2 (id=6601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000004b510de3000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000170000009500000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) 451.465992ms ago: executing program 3 (id=6602): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0={0xfc, 0x0, '\x00', 0x8}, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000280)='\t', 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x150}}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x1e, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000b80)={@val={0xa, 0x1a}, @val={0x0, 0x3, 0x100, 0x9, 0xff81, 0x9}, @mpls={[{0x175}, {0x27, 0x0, 0x1}], @ipv6=@udp={0x6, 0x6, ',X/', 0x303, 0x11, 0xff, @remote, @mcast1, {[@dstopts={0x33, 0x7, '\x00', [@pad1, @jumbo, @generic={0x54, 0x2e, "8d4bf29752670587f72dd9d03c4e7949dd431d1c8cc686cf4e86596ea3936040bc77f359cd245d502225985e6743"}]}, @srh={0x1d, 0xa, 0x4, 0x5, 0x8, 0x18, 0x4f10, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @remote, @remote]}, @dstopts={0x2e, 0x0, '\x00', [@ra={0x5, 0x2, 0x8001}, @enc_lim={0x4, 0x1, 0x5}]}, @hopopts={0x3a, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0xfb}, @ra={0x5, 0x2, 0x3ff}, @jumbo={0xc2, 0x4, 0x3a}, @jumbo={0xc2, 0x4, 0x10000}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0xdf36, [0x9, 0x6, 0x10, 0x8001]}}, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x4}]}, @srh={0x2c, 0x10, 0x4, 0x8, 0x9, 0x18, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @local]}, @hopopts={0x29, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x200}, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x5, 0x5}}, @enc_lim={0x4, 0x1, 0x3}, @pad1]}, @srh={0x84, 0xa, 0x4, 0x5, 0xb, 0x8, 0x800, [@loopback, @remote, @mcast1, @empty, @empty]}, @fragment={0x33, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x66}, @hopopts={0x2f, 0xb, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x4, 0x6, [0xffffffff, 0x4, 0x9, 0x8001, 0x9, 0x3, 0xc]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x7}]}], {0x4e20, 0x4e20, 0x83, 0x0, @gue={{0x1, 0x1, 0x3, 0xe, 0x0, @void}, "d3c29e9fe5bea04229a28d313882c8ed5036568497a36983b5a73fcf5cc98f8f47b0dbac5da1812afd34a7e4e5222b96a7f43b596c53a3cf1e47536ea02ab19b5569b0ce30dcae2ed32aff1aeeca9e63fc043e6ec9815efac02a8766004e7316dc53a218d0834f77257a68d54e848759dfdf97ce7cb050"}}}}}}, 0x341) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) r9 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r10, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40840) write(r9, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r8, 0x701, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10000080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) socketpair(0x29, 0x1, 0x3, &(0x7f0000000080)) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x84, &(0x7f0000000040)={r13, @in={{0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5}, 0x90) 281.833731ms ago: executing program 2 (id=6603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0xfe63, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f01640000000500530001000000080005000c"], 0x54}}, 0x0) 281.53588ms ago: executing program 0 (id=6604): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x6e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9145}, 0x1c) listen(r5, 0x5) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r4, 0x5) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) sendto$inet6(r0, &(0x7f0000000480)="b663", 0x2, 0x24004001, &(0x7f0000000280)={0xa, 0x0, 0xe8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x85}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delnexthop={0x40, 0x69, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x80) 252.634554ms ago: executing program 2 (id=6605): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff000000000000850000007000000095bb11f9b1d389e38933da4c1d6c47e9a7ab39fa3c7fd2f5313eaee6e2d35b534994158690a0df661997689e54dfab05961b624eb5562ce1e7b7a92a9d6f47612dfae198a8555fddac4412df68ac7845e68e5d17047677947720ad7e7b6b957195a8ff8e5b57df80cea762e5ecd60dd086b949e8e29d71eba578b16129269f73c21a6a804800"/232], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x1, 0x0}, 0x200400c0) 152.807483ms ago: executing program 2 (id=6606): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x1ff}) (async) socket$isdn(0x22, 0x3, 0x23) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) 45.322537ms ago: executing program 4 (id=6607): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) 44.230663ms ago: executing program 1 (id=6608): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x3, 0x1, {{0xa, 0x4, 0x2, 0x3b, 0x28, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, {[@generic={0x7, 0xd, "2b52fe82b5c92014c366a4"}, @ra={0x94, 0x4}, @noop]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000001840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001800)={&(0x7f0000000180)=@delchain={0x167c, 0x65, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0xfff3}, {0x8, 0x2}, {0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1634, 0x2, [@TCA_CGROUP_POLICE={0x494, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0xfffff001, 0xff, 0x0, {0x4, 0x2, 0x8, 0x4, 0x7, 0x52be89c6}, {0x2, 0x1, 0xfffa, 0x5, 0xff55, 0x862}, 0x1344, 0xfffffff7, 0xd25d794b}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc0000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xbcee, 0x2, 0x2, 0x9, 0x800, 0xf0bb, 0xd, 0x1000, 0xfffffffe, 0x0, 0x1, 0x7, 0x3, 0x3ff, 0x8c, 0x10, 0x22, 0x4, 0x7474, 0x892c, 0x80000000, 0x8, 0x2, 0xfffffffa, 0xda5, 0xa9fe, 0x7f, 0xfffffff7, 0x1, 0xfffffff4, 0x3cd8, 0x6c5, 0x3, 0xf6e, 0xf6, 0xf, 0xffff, 0x5, 0x40, 0x8, 0x2, 0x3, 0x3, 0x3, 0x8, 0x9, 0x8, 0x7fff, 0xa1, 0x81, 0x5, 0x7, 0x4, 0x5, 0x4, 0x7, 0x8, 0x3, 0x2fd, 0x4, 0x6cc7, 0xe99, 0x2b, 0x3, 0x3, 0x5, 0x7fffffff, 0xfffffffd, 0x0, 0xfffffff9, 0x3, 0x6, 0x0, 0x8, 0x400, 0x1, 0x0, 0x2, 0x2, 0x7fb0, 0x9, 0x152, 0x2, 0x7b, 0x0, 0x7, 0x4, 0x794086f8, 0x6, 0xfffffff7, 0x735, 0x1, 0x7c77f546, 0x3, 0xb, 0xd, 0x7, 0xecc, 0x9, 0x1, 0x2c0, 0xe4c, 0xffff0000, 0x7, 0x48, 0x2, 0x8, 0x7, 0x99, 0xe, 0x0, 0x1, 0xffff, 0x7, 0x1ff, 0x37d5, 0x98de, 0x19, 0x0, 0x8, 0x2, 0x1, 0x9, 0x3, 0x8, 0xfffffff7, 0x9, 0x2, 0x2, 0x9, 0x10, 0x80, 0xfffffff8, 0x1, 0x3f84, 0xffffffff, 0xe, 0xfffffff7, 0x8, 0xfff, 0x8, 0x582d, 0x6, 0x9, 0x1, 0xfc23, 0x2, 0x7, 0x2, 0x6, 0x207, 0x9, 0x0, 0xad, 0x1ff, 0x8, 0x80000000, 0x2, 0xe, 0x3, 0x5, 0x8, 0xff, 0x2, 0x0, 0x8, 0x2, 0x8001, 0x8, 0x5b1, 0x7, 0x2, 0x8, 0x8, 0x4, 0x7799, 0x8, 0xf490, 0xd02, 0xfe, 0x4, 0x23675366, 0x9, 0x8, 0x10, 0x101, 0x101, 0xffffffe0, 0x9, 0x3, 0x5040f44b, 0x4, 0x8, 0x5, 0x8001, 0x1ff, 0x0, 0x10000, 0x7fffffff, 0x9, 0x2, 0xc, 0xe7f, 0x7fffffff, 0x81, 0x3, 0x8, 0x2, 0xfffffffd, 0x7d3, 0x9, 0x3, 0x81, 0x67, 0xfffffff8, 0xdd80, 0x1, 0xffff6ad4, 0x0, 0x5b60253, 0xfffffffb, 0x7, 0xe, 0x2, 0x10000, 0x1, 0x0, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x101, 0x0, 0x6, 0x3, 0x3ff, 0x5, 0xbb2, 0x48, 0xc672, 0x6, 0x5, 0x2, 0x6, 0x6, 0xfffffff8, 0xffffffe7, 0x40b6, 0x1fa5, 0x2, 0x8065, 0x3760]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x3, 0x7fffffff, 0x10001, {0x9, 0x2, 0xf704, 0x1, 0x7, 0x8}, {0x6, 0x3, 0xfff9, 0x289, 0xf, 0x3}, 0x1c0dc2e, 0x1, 0x80}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2c66}]}, @TCA_CGROUP_EMATCHES={0x119c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xac26}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1170, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x800, 0x2, 0x9}, {0x6, 0x1, 0x0, 'g'}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x10, 0x7, 0x5}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xd6f6, 0x1, 0x9}, {0x8000, 0x800, 0x5460, 0x1, 0x5, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x3}, {0x3, 0x3, 0x2}}}, @TCF_EM_IPT={0x1020, 0x2, 0x0, 0x0, {{0x250, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "71c4cda7240f74880ad9d8040712121aed0251140a7b39659aa6f7e0aa07a30b0117894c15849b6b0616d03010a1dfdc9e35a5b9098c393b7dab1b3657cd432dd18fec412a91eb0d34c61fa54b6466c82c956d54d7c63ca6a46fe3dbfce354a329ab3d3bd086f8407218321112aa3504ca9cb22d19ca472da027e547bcb91bf63d1f8d25dfb6c0051bde84a97a8abe81e4e6c3fdd976efcb5fefe6021c2355cdfc35177ea52c1a42b9d97cf69d3ba2fa003eb8737063d7019a6b6daef3615219bdd23268143755c0e2832f1caf18e3900b256500e812e141807d8f513ed20a5a04f3e9ad0829723e7d10e9c2892c6549245354460d9d18b881cc2977f15d0a0fc81529e845d0630c4b6e80fa00a458775f9917746a46177fd953cbab775026fa15561162188cc24618f47df196f5eac49606e3e53302761ea9d0bf84d66eb028b7bb1472e6215c43d37c66ce7c4b1959033b6e057b832d579585e6699672cf1bf83871c2cce92b6463df7bdc5b98ba53662e4b3d0291dbb5033c7b7ab06a29c43cb582ad48be555163fd9e8c68417ca56d77ac12c9db6390bd5ef6bc145d8624e88e72ba53d11cb5bde6fbb16e7ff7b29995c5af00858d485f3beae3ecad4779945ea03be1d39fa5653ad76cb1a27c4d12d8be9aa8383b937277506830157b933ded27e7c1a591f85bfba2e7bac685c9cf66a10cc4cfd95d90669014ed51ab1183cc25bccc582551960477e85c57b4349233239b3c36559303962935c54b97c00c6762251f52f8e5305deda7f0af24cb404ef13344905f2ac0a10a7cecf6c39da4850c00c77f03cd69088bdacd89904828fce9615f81a3b2b5beaa43ba37998a1dd0e29315f00b38306e8aed7ca88dbd1e4a4c7c3e054ec50b5bc026e4ffa4bb6aef7b60c19efce2cbd36c8b1b8f47c8f9e16e8b3982fad3fd7e34f65aab6f4d3459b8d6a4b4e99756dc0441217a26b2ba56e24a808f77c025a0c1f894c223215dd6d19536f8c5ff60924cfc8d21b21216468bba0528003fcc4b819425cd99ba6c9ffd9e51683e5772f621cbf3ee97607900eb015eb170f1e741febf0a0f9381fee7e44739df1292370c5d2d4f904cac4f3c3f951fa359c0bc04b26b49af707207c59c37d391f7381633b2d84da8dba2e572684a3801937962c0ae2c79fa0928be29fcfa5db6cfdc3ba96493a85240e8f1f8cb1a9de038849a92807c37d799595d51e42e31c38eef2036b8aae713aef82335454dd92d70e58bfc1a023da3a3a2132fad6508014c67ba884c571bcfc43ac14dd5ae6237bca5b28a5843f9ccb7fe830e5454ad95c5cd4f634db04174047288a25f3459d10c7e1d3c469ab4f0951eea2b19af34abf3dba0a17d1d914f16894fa913d32711aec93cdb0cfc67b7e5eec898f4d3785b7a643c6bd8ead5a172063118b2c679b4f9fbb568b3352879127feeecbb3ed27b672dd8e2f36c3f02c12c17c496e5ccc62771ce22f049db970ae00aef772168be48bffb9470640dc6fd834ac55f44700e2569af679ce2eec93c19900d5a2aefcaf9ef7505a768f2ffc4d98e6036c1c936145f43ccbe52e55463c4b416b49872c331cf89117bdcd3ec0b2b8d81ed206587569185496b7ef67fd4bb60855b649fd212a04278a30ab1616ee3f10463f1f6672b0c08c404394edf6d68c0ce4d9c2e660526ae3d6425cd8a14e0fa6c6fb3d651477a8cf9a608e8dafe22436b35752465093deda729c24341adb36837a758b58271fe3661c7621c350b8179ca0ad57223f3799da867288caf7fdfd036242e55722e77e37061339545efa760e9ef567b634b4fd8baaad4af4f2bccd6d1363bcd493c8cce9ada882f62231f03e85accdd92c688041a1f7e6b8ea9202795aa7d4a69fd150a7d289532a6806a224863b0adae65975fd1328fd18529b5197b0eb8db5fbbe13173c4b2788680c2c073a76fa0dbc94b6ca1f90de23100b200f4acd43bcc83eed33c7cc58c445e13f129b9c0b25cbf6dc53821b927d121ba2dc9d09466334b7561f0a41c04ba8a2d0dedffc1a7c54466b66c58ac8b8ec75e608be8eb7c66ea9fb92eb99cfc66e37232df9ba177644068b044a48e1b96d3215888b80ea2944a953907a96666e7e3c0e3159cb05902e92b8683b9e331e16fcdce4e796d0c2ec9a604f5ec61f444ae03ed248bd1c31b407eda3021a2a79ab8784ac01e482888e2698b1e555ec4456d16f8f0816ae6c124dc2d4cb76cd746ec73c917bc81de8c5b026411178635507d71b81b6923d8c4ce3a80e367fe37a5adb283d50fdd65a6aa1bff13065b08e40518a2d5b9e133428d94c424df04b43ab3978757587436c84d976e5cebd5a5ec110aa277151592848b7f8343a1898b89c7a9d8516d29cfd7c66fd5611b108263eab2c888f3bf5e6022c07b0859971cc893198d44aec8f7bc25883274bf3d00ef527b7515245baeae3574b0340a8d88089270f320ff0128cdf5c6b11cc39a0def5133a7b4ed58e1b5358c0ddd125bc8d4cbd4c546069317840ff2f08bbc07c39f49309b1ceaa7d3125577e4691ab9eb0924a8705dd861230b95cc788138097da5bdfce47f3542ae32c5cf10b5e1989f72f9d64da04837ed58c05b3ef5afd4a1e2c7653dd4ec2ea4d205f9abcb3aa436b5304da8dd49bf96073cb1abe116fd44264c0d9c722b8a40b0f683d6a9e7b6ab33b0dbead810872b6fcf5c2e9fac0f66d85ab680e1233607fd5052b28dda56634e0d39a04cf45f7e909996fcacd8d3300cf3eaf13c011bd8356e254008f0ec95ac19042dd740ce1f1a41533440bbd11d9c8b548c35b34fa4c10791292c82a16e01a1526f21e95f27329d08b02df996d1e71b8399ace1b25ee73bbafed3d5ea6c2fa97ffc7748548b2c2a967db2f916165201d8c1c507ae585cebc55f483848958afdaabb8408670ebeb10ea59d06171fce7b57880cfe4fc6637446111d1054a050c715859d8ed7d7f8c7fed7ba1c48808333dcebea50a139d78347def7d9e1b511b096b3b741f95d6e790aee972c2fe8e4b91e7234ae0ddbd68616e1cc84be97fc9f96cdbaba5412221981a22b08acfb1849a9cb6b43f749504cfda8e60b8455524b23ce3c6202c263ffb464ca1410a6e0c0c6550970cd244dca1a7964ab0f79ddbe76bf001967c183516e384763f8d09ac4bbd9e7b87311acae057814446f0cd13412abe5a9ea17f25875ee1402278e800b44ca85367ce4b3b2214c51b785209990f4d407d5b08a2456101c19e3574e57e17207f037a6b4aeeda69fd64916dfa96b8f1d708eff6a7de51e3a1e863837e80672bfe0dfb71644326142b02b8e20b23f6e77870d261dbb292562d5b81e44f2846fca73f56f8d0c85d4dbe915e51d4b57f923f27d682648ca73d29bff9c80ff414bb29e5f150bb2e55d74085118380d8d297b4a96d21970a3fe981ad5026355f9831603fc6886d8f22a3783c3a81ef4ee974a14a2304f09ab8bf257bbac671cb889f7bb6b07d4c85cab7f9e6e4ac6d72e68a39fc906d560fe76fc9061ef36c5eb5ae8eb8b5a18b706271820fd0e2c8176ae94ea6fe3e3e109dca42423ab476687b5f4cf1cb0e767450a03c96a65769cbaab91bfe5b50d7e49aecd2424e79213838130d622aee6f94a97180c057904675c0f4948be56c0f50221e65aa867b26bfef8c4d1c032c0720f0e4bbcc0f43ad93b7694a93f07e9b44ce28f3c47fd753c35d81a583a6b0d587628f937c0254dee7181e612c7819cb8a30287d5002b371f2419be2aa1d5c5120e29bc0ae395277da9fdd0bb066dd4bdc08bfb7a2071e7b364153579995c358db6b51ca86f76522b6b7e20a5dad4614dd6c9e554cb432b51d1da819bb5dc08d2508a83cc3871bd17b26b4139b5c8754dd34a43accd562e7ff5a09d52ada4dd5c77df42814ef9ecd55cb914a33f9e7c3239a85220ccf927762b421ad7e1b8332fdeb1c3afa879fd938956f156d1de14e71ba9d417da114636620fb5018d0902d898c31278349ec5518942824a3de431376783de7c05d613c92336f701bcd0036efa7a352acab438e77ea9de6ebbd72518e8fd234de34f75451e05fbca2624ba9cd5993446c26796063009dff009c49064689341dd8f0e7c2f6079711eb87b2f895e43d8d0ebe0d5a3ae418a4c2a0c53aa30484842431b7d2df069ddb0721cb1061f033c260940232622dc9d43a0b6185fb3188ad4c6b368d79a35f1151568e0e622b2b3fa39e88f834bf4ccfe03dc25d24623258268b870fe63650aa04ec07a5bab475394c40664bba970eb3324c615805a0ffa1883b24ee55873bc110cc6766e5c712c15c8ebee160d7556bd0830c2dfbbd1097e5b1096b61d81115c5da6a770929b474261a0e8749f06ae7f086269004e955374686b64b1ac722e0da4559c385e7fa3db8b31578a77b72066e59fb10c4b9f9f59d5121ac09c7279fa1fa23f6a22ebc78eb359eb2ff1afc4e08033a2044aa3be582e557b1a8761e0029eefbddafb809f47569376d93fa9c23074797032ab449e81389e4bd49c73124a7fea7e62b97b0409377df4b8a384121db85cd1fee9ae4084237f7d59fe3d35d7afae0f8f87ad504af914a1d9598147b896b12084e8a988b3267007b39c091f6ed4c9ee34fc022d09178f361afb3321100d227e3be7a6c27306abb9c9d1dfea85905a54cc3677b7698ed6ddb964791997e56d144c3841c5f859f33dbff08f100c9a110312693e9d42ef192749215ebac625d2f47abad54715999020de153c595b24e5bfe1e09116a16d5540c06ac1156dab2088d6e1b0a070d5b2a883cc928f021f18cf8fbe0e4e48d2d3a6a4168ec84ad8338a5a14f702a1a0f9904e3ea6b151ea820c3bc75d1cf2f6f4a6045c09ab1de7d026255dd9fda51d6a5c990f36ab7e0178e86bade16f69357086c97e7ae1cd22a4036760dcc9e858acc313bd9e4e394173f8a7971df403ecb985ae63de2d3e9c3f127722c98adf5976440153ca9fff34c63b7ec8c17a7393fc14b6f52755497a28731e7c4544712494bc2683d9e4932dbf299d3f23cccbb429d1dca56e228a3ba8ba07e4c04b7e1cf6ae78ee568e2effc65437ffeb3cffe1e97688b4bd8d14e8bfe34a368fc005fb60188aae2bfe0987a02e9fc10d6a0c1bfe4cca4f01707d22396619f0dbaa9a53bc3a993426d22134218fe4470dc6685bc3c8b5f8224f9833e1f88a60c88daa586889c32527eb25f180a31cf65c3a6442896e2f54ed26b9b454835bd01ad2855d5aa553778b174f73830884a401b588d675f5d451309d901db284330a4c3a447b5031233bf7740070610f2652276b7c4244dcb4c2827fcf6de377434a5576235867d30d0f43e1cc2e591a0ef8c110e172cf4f83ab15fb1479a5f8e7c26743b312dfd0b0290772d434f88a2d9a814e7cee194d60aa96f69ceffebd134b7fa8f04a3182d019da45d2384a3741b5350b4592bed007fa360f25e01f4b3de1879f6370e99c1391d32b62ddd6f3e04c6398d895317a14bdd03c0c2c05db1545848170b8d5c71da9398600d876059c90a845387131769f124dbeb88f486ec7260d051f5c9983b845082fe9a937f461c8fd0a7cc47fb1ab21dfed10f8e5fa5ef23e71d4f46267846cae484a9e733564ece7bc40da9e1b0f148cf9c270fb5aea3545718a3b7ff8c166e032bda9ec42434259950d1822f447b103424d34fabc231d55c90b76d2921a5b74d46a52791e3fa167486d17ff6c3017bb61c89d547e77e7f5662e4bcf695fba5693fc8c6110a5c832d0792498a84e2a0bd594793760eb0a636aa728b22c0bfff9"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6b}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0xb}, {0x2, 0x2, 0x9, 0x492}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x4}, {0x313, 0x3, 0x1, "7f6db3"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x8001}, {0x800, 0x4ed1, 0x0, 0x2, 0x1}}}, @TCF_EM_META={0xb4, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xa5, 0xca}, {0x6, 0xc2, 0x2}}}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="885eb213", @TCF_META_TYPE_VAR="0566ef8d7fc9", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="bb1b1c2087340b", @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x10, 0x1}, {0x3, 0x5, 0x1}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR="b9200027a39b04c65ddd", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="93033fa1", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="18c73609f1f02cad6efc"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x6, 0x1}, {0x1, 0x5, 0x2}}}]}}]}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xd}}]}}]}, 0x167c}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) r4 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000001880)=0x8, 0x4) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f00000018c0)={{0x2, 0x4e24, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x60, {0x2, 0x4e23, @broadcast}, 'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001940)={'dvmrp0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) listen(r4, 0x4) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000001980)={0x28, 0x0, 0xffffffff, @local}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000019c0)={r4}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001a40)=0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001a80)=0x0, &(0x7f0000001ac0)=0x4) r12 = getuid() sendmsg$nl_xfrm(r9, &(0x7f0000001ec0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001b00)=@getsadinfo={0x35c, 0x23, 0x100, 0x70bd28, 0x25dfdbff, 0x0, [@user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0xa}}, @sa={0xe4, 0x6, {{@in=@loopback, @in=@empty, 0x4e21, 0x4, 0x4e21, 0x0, 0x2, 0x80, 0x80, 0x62, r6, r10}, {@in6=@remote, 0x4d3, 0x33}, @in6=@mcast1, {0xfffffffffffff801, 0x8, 0x8, 0x3, 0xf20, 0x8000000000, 0xf192, 0x1}, {0x4, 0x8, 0xffffffff7fffffff, 0x1000}, {0xffffffc4, 0x72, 0x3aa72a3d}, 0x70bd2a, 0x3503, 0x2, 0x6, 0x7, 0x54}}, @sec_ctx={0x8d, 0x8, {0x89, 0x8, 0x0, 0x5, 0x81, "963fb93853f74aea8668c48f323fdf984c72a3fb27c59dda73a8e9fe284c672290c5d2f7ed5c572842b9f885252020497a6c88fa6137c64736553577f542e3ad7e5cd268b734d4824d61561c006e5513a6effb79105fe79b2b4d0036f30addc10394bb1f1330304ce684470806e87d8cb003f2be823b1d6ca27e8a03de99074325"}}, @tmpl={0xc4, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x6c}, 0x2, @in=@remote, 0x3500, 0x2, 0x0, 0x4, 0x3, 0xfffffffd, 0xd51}, {{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in=@private=0xa010101, 0x3500, 0x2, 0x1, 0x5, 0xfffffff7, 0x6985, 0x3}, {{@in6=@empty, 0x4d2, 0x5f}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x3503, 0x3, 0x2, 0xfe, 0x6}]}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00', @in=@remote, 0x2, 0x9, 0x1}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2a, 0x2}}, @policy={0xac, 0x7, {{@in6=@local, @in6=@local, 0x4e21, 0x1ff, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x3c, r11, r12}, {0x0, 0x1, 0x3, 0x100000000, 0x7f, 0x1000, 0x9, 0x3}, {0xdf4, 0x6, 0x401, 0x72b}, 0x7fff, 0x6e6bb8, 0x0, 0x0, 0x1}}]}, 0x35c}}, 0x4000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r9, 0xf507, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0x88, 0x1403, 0x400, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2}, 0x8000) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000020c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x28, r13, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4000010) r14 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r14, &(0x7f00000021c0)={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x10) sendmsg$nl_generic(r9, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x3c, 0x3b, 0x4, 0x70bd2c, 0x25dfdbff, {0x3}, [@typed={0x4, 0x4, 0x0, 0x0, @binary}, @generic="0deb92011f2031949d6c35df78c35c0fdfd08915be7e88f50518bfafcfb6a8dcb4a5f9"]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x64, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5b0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff0000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x8804) 33.327176ms ago: executing program 2 (id=6609): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fdffff03000b000018000180140002900b657468305f746f5f7465616d000000"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000004000100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffe4b702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 0 (id=6610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b41300002c0007012bbd7000ffdbdf25047c0000080001800400dd809813038014008400000000000000000000000000000000017f1303"], 0x13b4}}, 0xc010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88ca}}}}, 0x16) kernel console output (not intermixed with test programs): cast mode [ 809.482765][T27211] syz.0.5356 uses old SIOCAX25GETINFO [ 809.493132][T27211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 809.627087][T27216] virt_wifi0 speed is unknown, defaulting to 1000 [ 809.685294][T27216] lo speed is unknown, defaulting to 1000 [ 809.841449][T27229] netlink: 'syz.0.5361': attribute type 10 has an invalid length. [ 810.128213][T27246] virt_wifi0 speed is unknown, defaulting to 1000 [ 810.168610][T27246] lo speed is unknown, defaulting to 1000 [ 810.919075][T27241] __nla_validate_parse: 9 callbacks suppressed [ 810.919096][T27241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5365'. [ 810.942740][T27241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5365'. [ 810.955913][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5372'. [ 810.981944][T27262] virt_wifi0 speed is unknown, defaulting to 1000 [ 811.001602][T27262] lo speed is unknown, defaulting to 1000 [ 811.008181][T27264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5372'. [ 811.037389][T27264] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5372'. [ 811.175572][T27272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.304712][T27279] netlink: 'syz.3.5376': attribute type 3 has an invalid length. [ 811.318398][T27279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5376'. [ 811.446007][T27288] nbd: must specify at least one socket [ 811.463979][T27283] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5378'. [ 811.619505][T27297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5382'. [ 811.716228][T27305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5383'. [ 812.189457][T27331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5386'. [ 812.481609][T27354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.648612][T27359] openvswitch: netlink: Invalid VLAN frame [ 812.656730][T27363] bond0: option downdelay: invalid value (18446744073709551607) [ 812.665487][T27363] bond0: option downdelay: allowed values 0 - 2147483647 [ 812.706369][T27363] bond0: option downdelay: invalid value (18446744073709551607) [ 812.723877][T27363] bond0: option downdelay: allowed values 0 - 2147483647 [ 812.801831][T27369] netlink: 'syz.3.5401': attribute type 6 has an invalid length. [ 812.893820][T27374] netlink: 'syz.1.5403': attribute type 1 has an invalid length. [ 812.950531][T27374] bond8: (slave bridge7): making interface the new active one [ 812.959414][T27374] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 813.005866][T27374] bond8: (slave bridge8): Enslaving as an active interface with a down link [ 813.189956][T27378] bond0: entered promiscuous mode [ 813.197829][T27378] bond_slave_0: entered promiscuous mode [ 813.205538][T27378] bond_slave_1: entered promiscuous mode [ 813.216118][T27378] batadv0: entered promiscuous mode [ 813.222701][T27378] debugfs: 'hsr1' already exists in 'hsr' [ 813.229372][T27378] Cannot create hsr debugfs directory [ 813.236557][T27378] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 813.247549][T27378] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 813.260138][T27378] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 813.271066][T27378] bond0: left promiscuous mode [ 813.277678][T27378] bond_slave_0: left promiscuous mode [ 813.283986][T27378] bond_slave_1: left promiscuous mode [ 813.291818][T27378] batadv0: left promiscuous mode [ 813.348262][T27391] bond9: option broadcast_neighbor: invalid value (30) [ 813.364377][T27391] bond9 (unregistering): Released all slaves [ 813.533061][T27407] netlink: 'syz.0.5411': attribute type 29 has an invalid length. [ 813.555622][T27405] netlink: 'syz.0.5411': attribute type 29 has an invalid length. [ 813.614169][T27401] netlink: 'syz.1.5412': attribute type 39 has an invalid length. [ 813.630503][T27402] netlink: 'syz.1.5412': attribute type 5 has an invalid length. [ 813.833404][ T1294] lec:lec_start_xmit: lec0:No lecd attached [ 813.946908][T27423] virt_wifi0 speed is unknown, defaulting to 1000 [ 813.965320][T27423] lo speed is unknown, defaulting to 1000 [ 814.234849][T27445] netlink: 'syz.2.5422': attribute type 1 has an invalid length. [ 814.304582][T27445] bond3: entered promiscuous mode [ 814.329346][T27445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 814.357476][T27439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.382829][T27450] can: request_module (can-proto-4) failed. [ 814.400427][T27445] IPv6: Can't replace route, no match found [ 814.407447][T27445] IPv6: Can't replace route, no match found [ 814.476996][T27455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 814.489991][T27455] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 814.500995][T27455] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 814.521464][T27455] bond3: (slave wireguard0): making interface the new active one [ 814.530432][T27455] wireguard0: entered promiscuous mode [ 814.541138][T27455] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 814.981302][T27483] netlink: 'syz.2.5436': attribute type 21 has an invalid length. [ 814.996252][T27483] netlink: 'syz.2.5436': attribute type 21 has an invalid length. [ 815.179855][T27500] netlink: 'syz.0.5440': attribute type 1 has an invalid length. [ 815.304473][T27502] block nbd5: server does not support multiple connections per device. [ 815.313614][T27502] block nbd5: shutting down sockets [ 815.479178][T27511] virt_wifi0 speed is unknown, defaulting to 1000 [ 815.520536][T27511] lo speed is unknown, defaulting to 1000 [ 815.546757][T27521] siw: device registration error -23 [ 815.713147][T27529] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 816.222031][T27556] netlink: zone id is out of range [ 816.225008][T27557] __nla_validate_parse: 58 callbacks suppressed [ 816.225275][T27557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5452'. [ 816.256412][T27556] netlink: zone id is out of range [ 816.313508][T27556] netlink: zone id is out of range [ 816.360189][T27556] netlink: zone id is out of range [ 816.375947][T27556] netlink: zone id is out of range [ 816.381135][T27556] netlink: zone id is out of range [ 816.404544][T27556] netlink: zone id is out of range [ 816.434158][T27556] netlink: zone id is out of range [ 816.439355][T27556] netlink: zone id is out of range [ 816.478496][T27556] netlink: zone id is out of range [ 816.505296][T27566] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5456'. [ 816.539758][T27563] virt_wifi0 speed is unknown, defaulting to 1000 [ 816.549696][T27563] lo speed is unknown, defaulting to 1000 [ 816.677597][T27574] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5458'. [ 816.810469][T27585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5460'. [ 816.820822][T27580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5461'. [ 816.965802][T27593] netlink: 71 bytes leftover after parsing attributes in process `syz.4.5463'. [ 817.016282][T27595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5464'. [ 817.067767][T27595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5464'. [ 817.213130][T27601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5466'. [ 817.257530][T27608] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5468'. [ 817.355430][T27605] virt_wifi0 speed is unknown, defaulting to 1000 [ 817.382036][T27605] lo speed is unknown, defaulting to 1000 [ 817.765511][T27626] virt_wifi0 speed is unknown, defaulting to 1000 [ 817.795494][T27626] lo speed is unknown, defaulting to 1000 [ 818.312825][T27666] syzkaller0: entered promiscuous mode [ 818.318497][T27666] syzkaller0: entered allmulticast mode [ 818.589817][T27686] sctp: [Deprecated]: syz.2.5492 (pid 27686) Use of int in max_burst socket option. [ 818.589817][T27686] Use struct sctp_assoc_value instead [ 818.617274][T27694] validate_nla: 3 callbacks suppressed [ 818.617293][T27694] netlink: 'syz.2.5492': attribute type 10 has an invalid length. [ 818.652989][T27694] bond0: (slave dummy0): Releasing backup interface [ 818.668360][T27686] netlink: 'syz.2.5492': attribute type 10 has an invalid length. [ 818.707670][T27693] netlink: 'syz.2.5492': attribute type 10 has an invalid length. [ 818.758180][T27694] dummy0: left promiscuous mode [ 818.846133][T27693] dummy0: entered promiscuous mode [ 818.857824][T27693] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 818.892086][T27700] virt_wifi0 speed is unknown, defaulting to 1000 [ 818.943320][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 818.951394][ C0] lec:lec_tx_timeout: lec0 [ 818.965058][T27700] lo speed is unknown, defaulting to 1000 [ 819.155699][T27713] syzkaller0: entered promiscuous mode [ 819.183465][T27713] syzkaller0: entered allmulticast mode [ 819.477021][T27727] syzkaller0: entered promiscuous mode [ 819.482563][T27727] syzkaller0: entered allmulticast mode [ 819.891196][T27749] batman_adv: batadv0: Adding interface: macvlan3 [ 819.934451][T27749] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.977915][T27749] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 820.000108][T27752] vlan3: entered promiscuous mode [ 820.005872][T27752] geneve1: entered promiscuous mode [ 820.263058][T27763] ip6tnl1: entered promiscuous mode [ 820.272449][T27763] ip6tnl1: entered allmulticast mode [ 820.387156][T27770] netlink: 'syz.4.5518': attribute type 1 has an invalid length. [ 820.456470][T27770] gretap2: entered allmulticast mode [ 820.489846][T27770] bond10: (slave gretap2): making interface the new active one [ 820.498543][T27770] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 820.550490][T27779] sit0: entered promiscuous mode [ 820.555832][T27779] netlink: 'syz.3.5521': attribute type 1 has an invalid length. [ 820.677973][T27783] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 820.701112][T27788] sctp: [Deprecated]: syz.4.5525 (pid 27788) Use of int in max_burst socket option deprecated. [ 820.701112][T27788] Use struct sctp_assoc_value instead [ 821.172536][T27812] syzkaller0: entered promiscuous mode [ 821.178245][T27812] syzkaller0: entered allmulticast mode [ 821.408419][T27821] __nla_validate_parse: 25 callbacks suppressed [ 821.408439][T27821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5536'. [ 822.029820][T27846] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5544'. [ 822.205222][T27857] netlink: 'syz.1.5543': attribute type 1 has an invalid length. [ 822.236770][T27858] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.324359][T27858] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.418258][T27858] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.517439][T27858] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.680596][T18848] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.696960][T18848] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.740375][T18848] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.810817][ T6685] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.860994][T27882] syzkaller0: entered allmulticast mode [ 822.986097][T27887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5555'. [ 823.164544][T27898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5560'. [ 823.452417][T27921] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5568'. [ 823.717857][T27935] sock: sock_timestamping_bind_phc: sock not bind to device [ 823.742528][T27938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5573'. [ 823.900926][T27954] net_ratelimit: 394 callbacks suppressed [ 823.900948][T27954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.093428][ T1708] block nbd3: Possible stuck request ffff8880261fa400: control (read@0,1024B). Runtime 210 seconds [ 824.105060][ T1708] block nbd3: Possible stuck request ffff8880261fa600: control (read@1024,1024B). Runtime 210 seconds [ 824.119883][ T1708] block nbd3: Possible stuck request ffff8880261fa800: control (read@2048,1024B). Runtime 210 seconds [ 824.131402][ T1708] block nbd3: Possible stuck request ffff8880261faa00: control (read@3072,1024B). Runtime 210 seconds [ 824.144606][T27964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5581'. [ 824.164931][T27966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5582'. [ 824.574266][T27986] netlink: 'syz.3.5586': attribute type 3 has an invalid length. [ 824.611818][T27986] syzkaller1: entered promiscuous mode [ 824.621414][T27986] syzkaller1: entered allmulticast mode [ 824.677270][T27989] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5587'. [ 824.688593][T27990] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5587'. [ 824.803892][T27994] tipc: Invalid UDP bearer configuration [ 824.803947][T27994] tipc: Enabling of bearer rejected, failed to enable media [ 825.202870][T28014] virt_wifi0 speed is unknown, defaulting to 1000 [ 825.228150][T28014] lo speed is unknown, defaulting to 1000 [ 825.459718][T28034] netlink: 'syz.3.5600': attribute type 21 has an invalid length. [ 825.884238][T28045] syzkaller0: entered promiscuous mode [ 825.903510][T28045] syzkaller0: entered allmulticast mode [ 826.001365][T28059] sctp: [Deprecated]: syz.4.5608 (pid 28059) Use of int in max_burst socket option. [ 826.001365][T28059] Use struct sctp_assoc_value instead [ 826.340551][T28076] virt_wifi0 speed is unknown, defaulting to 1000 [ 826.390263][T28076] lo speed is unknown, defaulting to 1000 [ 826.453819][T28084] tipc: Enabled bearer , priority 0 [ 826.525883][T28086] netlink: 'syz.2.5614': attribute type 30 has an invalid length. [ 826.545692][T28090] netlink: 'syz.4.5616': attribute type 1 has an invalid length. [ 826.557014][T28084] syzkaller0: entered promiscuous mode [ 826.562636][T28084] syzkaller0: entered allmulticast mode [ 826.572690][T28090] __nla_validate_parse: 3 callbacks suppressed [ 826.572708][T28090] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5616'. [ 826.646628][T28083] tipc: Resetting bearer [ 826.709632][T28083] tipc: Disabling bearer [ 826.748736][T28095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5617'. [ 826.762644][T28100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5618'. [ 826.996591][T28117] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5624'. [ 827.027489][T28122] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5621'. [ 827.161147][T28123] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5622'. [ 827.238202][T28116] virt_wifi0 speed is unknown, defaulting to 1000 [ 827.275309][T28116] lo speed is unknown, defaulting to 1000 [ 827.536493][T28141] netlink: 'syz.4.5629': attribute type 2 has an invalid length. [ 827.551765][T28141] !: entered promiscuous mode [ 827.620953][T28144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5630'. [ 827.742916][T28144] bond11: entered promiscuous mode [ 827.749555][T28144] 8021q: adding VLAN 0 to HW filter on device bond11 [ 827.800807][T28149] syzkaller0: entered promiscuous mode [ 827.818825][T28149] syzkaller0: entered allmulticast mode [ 827.852557][T28153] IPVS: Unknown mcast interface: vcan0 [ 828.110864][T28164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5635'. [ 828.132297][T28164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5635'. [ 828.151791][T28167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5636'. [ 828.164080][T28167] openvswitch: netlink: Flow key attr not present in new flow. [ 828.382817][T28174] siw: device registration error -23 [ 829.265259][T28203] netlink: 'syz.2.5643': attribute type 32 has an invalid length. [ 829.355871][T28203] bond4: option coupled_control: invalid value (36) [ 829.385405][T28203] bond4 (unregistering): Released all slaves [ 829.942594][T28233] netlink: 'syz.0.5652': attribute type 1 has an invalid length. [ 830.067449][T28244] netlink: 'syz.4.5654': attribute type 4 has an invalid length. [ 830.127673][T28245] netlink: 'syz.4.5654': attribute type 4 has an invalid length. [ 830.185812][T28246] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 832.034012][T28209] veth11: entered promiscuous mode [ 832.042100][T28233] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 832.101624][T28238] bond6: Unable to set up delay as MII monitoring is disabled [ 832.124949][T28238] bond6 (unregistering): Released all slaves [ 832.391414][T28263] 8021q: adding VLAN 0 to HW filter on device bond7 [ 832.422072][T28269] __nla_validate_parse: 5 callbacks suppressed [ 832.422093][T28269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5661'. [ 832.580550][T28269] bond12: entered promiscuous mode [ 832.593707][T28269] bond12: entered allmulticast mode [ 832.599546][T28269] 8021q: adding VLAN 0 to HW filter on device bond12 [ 832.640900][T28284] bond9: Removing last arp target with arp_interval on [ 832.657674][T28281] veth1_macvtap: renamed from veth0_vlan [ 832.802016][T28297] netlink: 'syz.3.5669': attribute type 11 has an invalid length. [ 832.874305][T28302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.884277][T28301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.932863][T28303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5667'. [ 832.942101][T28303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5667'. [ 833.118933][T28307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5671'. [ 833.199337][T28322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5673'. [ 833.282522][T28323] virt_wifi0 speed is unknown, defaulting to 1000 [ 833.292036][T28323] lo speed is unknown, defaulting to 1000 [ 833.397129][T28329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5676'. [ 833.413029][T28331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5676'. [ 833.518811][T28336] netlink: 4100 bytes leftover after parsing attributes in process `syz.2.5677'. [ 833.617817][T28335] virt_wifi0 speed is unknown, defaulting to 1000 [ 833.646538][T28335] lo speed is unknown, defaulting to 1000 [ 834.227054][T28357] syzkaller0: entered promiscuous mode [ 834.232609][T28357] syzkaller0: entered allmulticast mode [ 834.398021][T28344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5680'. [ 834.430906][T28366] syzkaller0: entered promiscuous mode [ 834.438890][T28366] syzkaller0: entered allmulticast mode [ 834.444993][T28344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5680'. [ 836.726046][T28339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.881462][T28387] netlink: 'syz.4.5688': attribute type 21 has an invalid length. [ 836.894221][T28387] netlink: 'syz.4.5688': attribute type 2 has an invalid length. [ 837.122739][T28404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.296944][T28400] vlan0: entered promiscuous mode [ 837.311526][T28400] bridge0: entered promiscuous mode [ 837.347010][T28388] pim6reg1: entered promiscuous mode [ 837.352414][T28388] pim6reg1: entered allmulticast mode [ 837.455169][T28419] __nla_validate_parse: 3 callbacks suppressed [ 837.455192][T28419] netlink: 165240 bytes leftover after parsing attributes in process `syz.2.5698'. [ 837.547472][T28429] netlink: 'syz.4.5701': attribute type 21 has an invalid length. [ 839.327033][T28429] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5701'. [ 839.345313][T28434] tipc: Enabling of bearer rejected, failed to enable media [ 839.568608][T28468] batadv_slave_0: entered promiscuous mode [ 839.593628][T28461] virt_wifi0 speed is unknown, defaulting to 1000 [ 839.663725][T28475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5707'. [ 839.730479][T28465] virt_wifi0 speed is unknown, defaulting to 1000 [ 839.739652][T28467] batadv_slave_0: left promiscuous mode [ 839.741593][T28461] lo speed is unknown, defaulting to 1000 [ 839.828331][T28465] lo speed is unknown, defaulting to 1000 [ 839.897317][T28473] syzkaller0: entered promiscuous mode [ 839.902957][T28473] syzkaller0: entered allmulticast mode [ 840.138246][T28489] syzkaller0: entered promiscuous mode [ 840.152069][T28489] syzkaller0: entered allmulticast mode [ 840.233009][T28497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5717'. [ 840.247560][T28497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5717'. [ 840.258279][T28497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5717'. [ 840.268571][T28497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5717'. [ 840.280425][T28497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5717'. [ 840.291756][T28497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5717'. [ 840.319182][T28497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5717'. [ 840.502504][T28504] tipc: Enabled bearer , priority 0 [ 840.510313][T28506] syzkaller1: entered promiscuous mode [ 840.516635][T28506] syzkaller1: entered allmulticast mode [ 840.647822][T28510] netlink: 'syz.0.5721': attribute type 1 has an invalid length. [ 840.760503][T28512] virt_wifi0 speed is unknown, defaulting to 1000 [ 840.802079][T28512] lo speed is unknown, defaulting to 1000 [ 841.177568][T28503] tipc: Disabling bearer [ 841.515805][T28566] virt_wifi0 speed is unknown, defaulting to 1000 [ 841.524839][T28566] lo speed is unknown, defaulting to 1000 [ 841.821008][T28580] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 842.113315][T28596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 842.134508][T28596] syzkaller1: entered promiscuous mode [ 842.164131][T28596] syzkaller1: entered allmulticast mode [ 842.539364][T28614] netlink: 'syz.3.5749': attribute type 29 has an invalid length. [ 842.562939][T28614] netlink: 'syz.3.5749': attribute type 29 has an invalid length. [ 842.653129][T28614] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 842.664133][T28614] syzkaller0: entered promiscuous mode [ 842.674195][T28614] syzkaller0: entered allmulticast mode [ 842.716468][T28623] virt_wifi0 speed is unknown, defaulting to 1000 [ 842.754956][T28623] lo speed is unknown, defaulting to 1000 [ 842.897326][T28635] __nla_validate_parse: 33 callbacks suppressed [ 842.897346][T28635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5755'. [ 843.222945][T28652] FAULT_INJECTION: forcing a failure. [ 843.222945][T28652] name failslab, interval 1, probability 0, space 0, times 0 [ 843.245463][T28652] CPU: 0 UID: 0 PID: 28652 Comm: syz.2.5760 Not tainted syzkaller #0 PREEMPT(full) [ 843.245501][T28652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 843.245515][T28652] Call Trace: [ 843.245524][T28652] [ 843.245534][T28652] dump_stack_lvl+0xe8/0x150 [ 843.245570][T28652] should_fail_ex+0x412/0x560 [ 843.245606][T28652] should_failslab+0xa8/0x100 [ 843.245640][T28652] __kmalloc_cache_noprof+0x88/0x660 [ 843.245668][T28652] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 843.245691][T28652] ? sctp_add_bind_addr+0x8c/0x370 [ 843.245719][T28652] sctp_add_bind_addr+0x8c/0x370 [ 843.245748][T28652] sctp_copy_local_addr_list+0x314/0x4f0 [ 843.245775][T28652] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 843.245799][T28652] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 843.245824][T28652] ? sctp_v6_is_any+0x64/0x80 [ 843.245850][T28652] ? sctp_copy_one_addr+0x93/0x360 [ 843.245877][T28652] sctp_bind_addr_copy+0xb3/0x3c0 [ 843.245901][T28652] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 843.245939][T28652] sctp_connect_new_asoc+0x2ff/0x6b0 [ 843.245971][T28652] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 843.246007][T28652] ? __local_bh_enable_ip+0xd0/0x130 [ 843.246030][T28652] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 843.246062][T28652] ? security_sctp_bind_connect+0x7e/0x2c0 [ 843.246091][T28652] sctp_sendmsg+0x1528/0x2c10 [ 843.246136][T28652] ? __pfx_sctp_sendmsg+0x10/0x10 [ 843.246162][T28652] ? aa_sk_perm+0x15a/0x960 [ 843.246191][T28652] ? aa_sk_perm+0x82d/0x960 [ 843.246227][T28652] ? __pfx_aa_sk_perm+0x10/0x10 [ 843.246258][T28652] ? sock_rps_record_flow+0x19/0x400 [ 843.246290][T28652] ? inet_sendmsg+0x2f4/0x370 [ 843.246324][T28652] ____sys_sendmsg+0x894/0xad0 [ 843.246362][T28652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.246401][T28652] ? import_iovec+0x73/0xa0 [ 843.246428][T28652] ___sys_sendmsg+0x2a5/0x360 [ 843.246454][T28652] ? __lock_acquire+0x6b5/0x2cf0 [ 843.246489][T28652] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.246523][T28652] ? kstrtouint+0x6e/0xe0 [ 843.246582][T28652] ? __fget_files+0x2a/0x420 [ 843.246603][T28652] ? __fget_files+0x3a0/0x420 [ 843.246636][T28652] __sys_sendmmsg+0x27c/0x4e0 [ 843.246671][T28652] ? __pfx___sys_sendmmsg+0x10/0x10 [ 843.246696][T28652] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 843.246756][T28652] ? ksys_write+0x242/0x270 [ 843.246786][T28652] ? __pfx_ksys_write+0x10/0x10 [ 843.246820][T28652] __x64_sys_sendmmsg+0xa0/0xc0 [ 843.246851][T28652] do_syscall_64+0x14d/0xf80 [ 843.246879][T28652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.246900][T28652] ? trace_irq_disable+0x37/0x100 [ 843.246924][T28652] ? clear_bhb_loop+0x40/0x90 [ 843.246950][T28652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.246972][T28652] RIP: 0033:0x7f0f1679c629 [ 843.246990][T28652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.247009][T28652] RSP: 002b:00007f0f149d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 843.247032][T28652] RAX: ffffffffffffffda RBX: 00007f0f16a16090 RCX: 00007f0f1679c629 [ 843.247048][T28652] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 843.247061][T28652] RBP: 00007f0f149d5090 R08: 0000000000000000 R09: 0000000000000000 [ 843.247075][T28652] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 843.247089][T28652] R13: 00007f0f16a16128 R14: 00007f0f16a16090 R15: 00007ffea8efacc8 [ 843.247125][T28652] [ 843.737551][T28654] netlink: 'syz.3.5761': attribute type 1 has an invalid length. [ 843.764677][T28654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5761'. [ 843.880884][T28667] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 844.089422][T28684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5769'. [ 844.168403][T28690] netlink: 'syz.4.5771': attribute type 1 has an invalid length. [ 844.195450][T28690] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5771'. [ 844.608875][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5780'. [ 844.635815][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5780'. [ 844.691276][T28722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5779'. [ 844.725867][T28722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5779'. [ 844.769532][T28732] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 845.004209][T28745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5786'. [ 845.045502][T28745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5786'. [ 845.477613][T28752] netlink: 'syz.1.5789': attribute type 22 has an invalid length. [ 845.513074][T28752] netlink: ct family unspecified [ 845.530919][T28752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.539180][T28793] netlink: 'syz.0.5801': attribute type 10 has an invalid length. [ 846.853552][T18830] wlan1: Trigger new scan to find an IBSS to join [ 848.752523][T28768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.928569][T28811] __nla_validate_parse: 3 callbacks suppressed [ 848.928589][T28811] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5809'. [ 849.111300][T28811] netlink: 'syz.0.5809': attribute type 1 has an invalid length. [ 849.183607][T28814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5809'. [ 849.203073][T28811] 8021q: adding VLAN 0 to HW filter on device bond7 [ 849.384727][T28820] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 849.399087][T28820] bond10 (unregistering): Released all slaves [ 849.453630][T28827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5811'. [ 849.511020][T28827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5811'. [ 849.751681][T28832] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5814'. [ 849.784621][T28832] netlink: Unknown conntrack attr (0) [ 849.901241][T18888] wlan1: Trigger new scan to find an IBSS to join [ 849.943643][T28834] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5815'. [ 849.957894][T28805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5807'. [ 849.970206][T28805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5807'. [ 850.001534][T28805] netlink: 'syz.3.5807': attribute type 14 has an invalid length. [ 850.028600][T28805] netlink: 'syz.3.5807': attribute type 13 has an invalid length. [ 850.155680][T28850] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5819'. [ 850.305657][T28850] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 850.630920][T28871] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5824'. [ 851.198948][T28891] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 851.324304][T28902] xt_hashlimit: overflow, rate too high: 0 [ 851.394967][T28891] bond9 (unregistering): Released all slaves [ 851.516310][T28905] sctp: [Deprecated]: syz.1.5836 (pid 28905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 851.516310][T28905] Use struct sctp_sack_info instead [ 851.648590][T28910] netlink: 'syz.3.5838': attribute type 10 has an invalid length. [ 851.825466][T28918] syzkaller0: entered promiscuous mode [ 851.831017][T28918] syzkaller0: entered allmulticast mode [ 851.926998][T28926] veth0: entered promiscuous mode [ 851.956770][T28926] veth0: left promiscuous mode [ 852.255500][T28944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.282522][T28944] netlink: 'syz.0.5848': attribute type 3 has an invalid length. [ 852.554384][T28961] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 852.853837][T18888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.962883][T28984] netlink: zone id is out of range [ 852.985124][T28984] netlink: zone id is out of range [ 853.182101][T28984] syzkaller0: entered promiscuous mode [ 853.219416][T28984] syzkaller0: entered allmulticast mode [ 854.109894][T29020] netlink: 'syz.0.5870': attribute type 5 has an invalid length. [ 854.134130][ T1708] block nbd3: Possible stuck request ffff8880261fa400: control (read@0,1024B). Runtime 240 seconds [ 854.145109][ T1708] block nbd3: Possible stuck request ffff8880261fa600: control (read@1024,1024B). Runtime 240 seconds [ 854.157290][ T1708] block nbd3: Possible stuck request ffff8880261fa800: control (read@2048,1024B). Runtime 240 seconds [ 854.183998][ T1708] block nbd3: Possible stuck request ffff8880261faa00: control (read@3072,1024B). Runtime 240 seconds [ 855.446904][T29014] virt_wifi0 speed is unknown, defaulting to 1000 [ 855.455786][T29014] lo speed is unknown, defaulting to 1000 [ 855.597527][T29027] __nla_validate_parse: 9 callbacks suppressed [ 855.597549][T29027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5873'. [ 855.827044][T29038] netlink: 'syz.1.5875': attribute type 14 has an invalid length. [ 856.222043][T29062] netlink: 'syz.0.5882': attribute type 13 has an invalid length. [ 856.264061][T29058] virt_wifi0 speed is unknown, defaulting to 1000 [ 856.282615][T29058] lo speed is unknown, defaulting to 1000 [ 856.379065][T29068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5885'. [ 856.516158][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5883'. [ 856.562858][ T5140] block nbd5: Receive control failed (result -32) [ 856.797666][T29093] netlink: 'syz.2.5888': attribute type 1 has an invalid length. [ 856.828677][T29093] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5888'. [ 856.854760][T29093] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5888'. [ 856.871074][T29093] netlink: 658 bytes leftover after parsing attributes in process `syz.2.5888'. [ 857.228080][T29112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5895'. [ 857.661301][T29125] netlink: 'syz.1.5900': attribute type 3 has an invalid length. [ 857.687148][T29125] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5900'. [ 857.751919][T29129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5901'. [ 857.773703][T29129] block nbd6: Unsupported socket: should be TCP or UNIX. [ 858.161629][T29155] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5907'. [ 858.272215][T29163] netlink: 'syz.0.5909': attribute type 21 has an invalid length. [ 858.487823][T29171] syzkaller0: entered promiscuous mode [ 858.494129][T29171] syzkaller0: entered allmulticast mode [ 858.501521][T29170] tipc: Enabled bearer , priority 0 [ 858.566063][T29169] tipc: Resetting bearer [ 858.607556][T29169] tipc: Disabling bearer [ 858.663989][T29181] siw: device registration error -23 [ 858.837185][T29196] netlink: 'syz.1.5919': attribute type 4 has an invalid length. [ 858.864636][T29196] netlink: 'syz.1.5919': attribute type 4 has an invalid length. [ 858.875353][T29195] ip6gre1: entered allmulticast mode [ 858.970227][T29200] virt_wifi0 speed is unknown, defaulting to 1000 [ 859.002203][T29200] lo speed is unknown, defaulting to 1000 [ 859.168943][T29208] ip6gretap1: entered promiscuous mode [ 859.298592][T29210] virt_wifi0 speed is unknown, defaulting to 1000 [ 859.315968][T29210] lo speed is unknown, defaulting to 1000 [ 859.421339][T29224] syzkaller0: entered promiscuous mode [ 859.427388][T29224] syzkaller0: entered allmulticast mode [ 859.785385][T29236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 859.795282][T29236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 859.804588][T29236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 859.812689][T29236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 859.825852][T29236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 859.879443][T29234] virt_wifi0 speed is unknown, defaulting to 1000 [ 859.888749][T29234] lo speed is unknown, defaulting to 1000 [ 860.635065][T29288] __nla_validate_parse: 4 callbacks suppressed [ 860.683294][T29288] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5941'. [ 860.756614][T29279] virt_wifi0 speed is unknown, defaulting to 1000 [ 860.776065][T29279] lo speed is unknown, defaulting to 1000 [ 860.807022][T29294] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 860.916982][T29234] chnl_net:caif_netlink_parms(): no params data found [ 861.515865][T29234] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.523074][T29234] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.541217][T29234] bridge_slave_0: entered allmulticast mode [ 861.549851][T29234] bridge_slave_0: entered promiscuous mode [ 861.559571][T29234] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.568179][T29234] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.577436][T29234] bridge_slave_1: entered allmulticast mode [ 861.602521][T29234] bridge_slave_1: entered promiscuous mode [ 861.645765][T29323] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5952'. [ 861.738263][T29234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.765814][T29234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.787672][T29328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5953'. [ 861.836442][T29234] team0: Port device team_slave_0 added [ 861.848917][T29234] team0: Port device team_slave_1 added [ 861.894356][ T5140] Bluetooth: hci3: command tx timeout [ 861.934151][T29234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.941156][T29234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.968896][T29332] netlink: 'syz.2.5955': attribute type 10 has an invalid length. [ 861.975870][T29234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.992358][T29332] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 862.014987][T29332] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 862.028851][T29332] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 862.037070][T29234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.045502][T29341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5956'. [ 862.056559][T29234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.106735][T29234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.225955][T29344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5957'. [ 862.368249][T29234] hsr_slave_0: entered promiscuous mode [ 862.379301][T29234] hsr_slave_1: entered promiscuous mode [ 862.396772][T29353] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5960'. [ 862.397998][T29234] debugfs: 'hsr0' already exists in 'hsr' [ 862.415484][T29234] Cannot create hsr debugfs directory [ 862.425714][T29353] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5960'. [ 862.670816][T29355] virt_wifi0 speed is unknown, defaulting to 1000 [ 862.729082][T29355] lo speed is unknown, defaulting to 1000 [ 862.780055][T29368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5963'. [ 862.930151][T29234] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.068596][T29234] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.158361][T29234] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.242380][T29234] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.490134][T29395] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5969'. [ 863.541854][T29397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.615444][T29400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5970'. [ 863.659007][T29400] gtp1: entered promiscuous mode [ 863.683546][T29400] gtp1: entered allmulticast mode [ 863.732680][T29234] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 863.779165][T29234] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 863.878165][T29234] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 863.912661][T29408] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 863.925353][T29408] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 863.961129][T29234] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 863.977248][ T5140] Bluetooth: hci3: command tx timeout [ 864.001529][T29413] syzkaller0: entered promiscuous mode [ 864.008638][T29413] syzkaller0: entered allmulticast mode [ 864.224653][T29234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.284953][T29234] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.322466][T18829] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.329724][T18829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.386042][T18829] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.393299][T18829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.660162][T29458] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 864.749388][T29459] netlink: 'syz.4.5984': attribute type 3 has an invalid length. [ 864.759665][T29458] netlink: 'syz.1.5982': attribute type 1 has an invalid length. [ 864.781277][T29458] netlink: 'syz.1.5982': attribute type 2 has an invalid length. [ 864.819490][T29467] netlink: 'syz.1.5982': attribute type 1 has an invalid length. [ 864.869511][T29467] netlink: 'syz.1.5982': attribute type 2 has an invalid length. [ 864.993080][T29234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.122657][T29484] Bluetooth: MGMT ver 1.23 [ 865.179304][T29234] veth0_vlan: entered promiscuous mode [ 865.205883][T29234] veth1_vlan: entered promiscuous mode [ 865.441634][T29234] veth0_macvtap: entered promiscuous mode [ 865.460863][T29234] veth1_macvtap: entered promiscuous mode [ 865.505495][T29234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.528798][T29234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.549974][T18830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.579404][T18830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.607738][T18830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.640460][T18830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.656328][T29491] __nla_validate_parse: 10 callbacks suppressed [ 865.656346][T29491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5994'. [ 865.736338][T29497] geneve2: entered promiscuous mode [ 865.774209][T18830] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.811608][T18830] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.832604][T18830] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.856270][T29498] geneve0: entered promiscuous mode [ 865.866059][T29498] geneve0: entered allmulticast mode [ 865.878149][T18830] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.895867][ T6685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.915628][ T6685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.992850][T18829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.001715][T18829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.053685][ T5140] Bluetooth: hci3: command tx timeout [ 866.180322][T29511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5930'. [ 866.348319][ T8817] lec:lec_start_xmit: lec0:No lecd attached [ 866.379439][T29236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 866.391415][T29236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 866.413032][T29236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 866.424056][T29236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 866.435554][T29516] netlink: 'syz.3.6001': attribute type 6 has an invalid length. [ 866.446975][T29236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 866.549854][T29520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6002'. [ 866.648883][T29517] virt_wifi0 speed is unknown, defaulting to 1000 [ 866.706566][T29528] team0: entered promiscuous mode [ 866.712006][T29528] team_slave_0: entered promiscuous mode [ 866.739820][T29528] team_slave_1: entered promiscuous mode [ 866.779520][T29528] bridge2: entered promiscuous mode [ 866.830442][T29528] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.865371][T29528] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 866.892913][T29517] lo speed is unknown, defaulting to 1000 [ 867.219896][T29552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6011'. [ 867.302162][T29517] chnl_net:caif_netlink_parms(): no params data found [ 867.541347][T29517] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.548707][T29517] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.569386][T29517] bridge_slave_0: entered allmulticast mode [ 867.615193][T29517] bridge_slave_0: entered promiscuous mode [ 867.651392][T29517] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.676565][T29517] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.712598][T29517] bridge_slave_1: entered allmulticast mode [ 867.734514][T29517] bridge_slave_1: entered promiscuous mode [ 867.859017][T29517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.888085][T29517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.911755][T29578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6018'. [ 867.998994][T29517] team0: Port device team_slave_0 added [ 868.149213][T29236] Bluetooth: hci3: command tx timeout [ 868.175101][T29517] team0: Port device team_slave_1 added [ 868.331652][T29517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.342187][T29517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.371795][T29517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.403283][T29517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.410294][T29517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.448373][T29591] netlink: 'syz.1.6022': attribute type 1 has an invalid length. [ 868.491727][T29517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.520246][T29600] netlink: 'syz.3.6024': attribute type 1 has an invalid length. [ 868.544505][T29236] Bluetooth: hci4: command tx timeout [ 868.555340][T29591] 8021q: adding VLAN 0 to HW filter on device bond10 [ 868.573029][T29594] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 868.604669][T29591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6022'. [ 868.617143][T29594] bond10: (slave batadv3): making interface the new active one [ 868.627245][T29594] bond10: (slave batadv3): Enslaving as an active interface with an up link [ 868.665392][T29591] bond10 (unregistering): (slave batadv3): Releasing active interface [ 868.681711][T29611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6028'. [ 868.695987][T29591] bond10 (unregistering): Released all slaves [ 868.725254][T29611] openvswitch: netlink: Flow key attr not present in new flow. [ 868.857776][T29517] hsr_slave_0: entered promiscuous mode [ 868.865456][T29517] hsr_slave_1: entered promiscuous mode [ 868.871957][T29517] debugfs: 'hsr0' already exists in 'hsr' [ 868.888490][T29517] Cannot create hsr debugfs directory [ 869.057112][T29623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6033'. [ 869.066281][T29623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6033'. [ 869.103925][T18829] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.104095][T29623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6033'. [ 869.122971][T18829] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.225998][T18829] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.234696][T18829] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 869.678800][T29517] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 869.692368][T29517] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 869.712709][T29517] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 869.725310][T29517] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 869.838150][T29517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.860961][T29517] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.891153][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.898413][ T6685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.935450][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.942659][ T6685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.200370][T29675] bridge0: entered allmulticast mode [ 870.299841][T29684] netlink: 'syz.3.6047': attribute type 1 has an invalid length. [ 870.357664][T29517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.437257][T29517] veth0_vlan: entered promiscuous mode [ 870.456583][T29517] veth1_vlan: entered promiscuous mode [ 870.506453][T29517] veth0_macvtap: entered promiscuous mode [ 870.519531][T29517] veth1_macvtap: entered promiscuous mode [ 870.550681][T29517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.570245][T29517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.587965][T18830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.599800][T18830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.613936][ T5140] Bluetooth: hci4: command tx timeout [ 870.634338][T18830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.664313][T18848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.808748][T18861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.827163][T18861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.860439][T29705] __nla_validate_parse: 3 callbacks suppressed [ 870.860461][T29705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6053'. [ 870.907073][T18848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.929762][T29707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6054'. [ 870.951798][T29707] bridge_slave_1: left allmulticast mode [ 870.957731][T18848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.966034][T29707] bridge_slave_1: left promiscuous mode [ 870.971881][T29707] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.986666][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6054'. [ 870.987761][T29707] bridge_slave_0: left allmulticast mode [ 870.998509][T29709] netlink: 336 bytes leftover after parsing attributes in process `syz.3.6054'. [ 871.012155][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6054'. [ 871.024867][T29709] netlink: 336 bytes leftover after parsing attributes in process `syz.3.6054'. [ 871.053450][T29707] bridge_slave_0: left promiscuous mode [ 871.063673][T29707] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.063714][T29709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6054'. [ 871.270931][T29717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6057'. [ 871.310652][T29717] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6057'. [ 871.322039][T29720] netlink: 'syz.4.6057': attribute type 15 has an invalid length. [ 871.636413][T29737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6063'. [ 871.893285][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5540 ms [ 871.901405][ C0] lec:lec_tx_timeout: lec0 [ 872.095312][T29759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 872.105307][T29759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 872.125440][T29759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 872.138714][T29759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 872.146984][T29759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 872.204578][T29758] virt_wifi0 speed is unknown, defaulting to 1000 [ 872.212801][T29758] lo speed is unknown, defaulting to 1000 [ 872.692298][T29786] Bluetooth: MGMT ver 1.23 [ 872.706409][ T5140] Bluetooth: hci4: command 0x040f tx timeout [ 872.804149][T29792] tc_dump_action: action bad kind [ 872.811491][T29782] virt_wifi0 speed is unknown, defaulting to 1000 [ 872.849781][T29782] lo speed is unknown, defaulting to 1000 [ 873.249648][T29811] netlink: 'syz.1.6083': attribute type 7 has an invalid length. [ 873.257878][T29811] netlink: 'syz.1.6083': attribute type 5 has an invalid length. [ 873.266105][T29758] chnl_net:caif_netlink_parms(): no params data found [ 873.325186][ T29] audit: type=1107 audit(1771382179.202:7): pid=29810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 873.559530][T29831] sctp: [Deprecated]: syz.2.6087 (pid 29831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.559530][T29831] Use struct sctp_sack_info instead [ 873.720554][T18888] bridge_slave_1: left allmulticast mode [ 873.727639][T18888] bridge_slave_1: left promiscuous mode [ 873.734985][T18888] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.745059][T18888] bridge_slave_0: left allmulticast mode [ 873.750753][T18888] bridge_slave_0: left promiscuous mode [ 873.758367][T18888] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.048229][T18888] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 874.070713][T18888] bond10 (unregistering): (slave gretap2): Releasing active interface [ 874.223677][T29236] Bluetooth: hci0: command tx timeout [ 874.408885][T18888] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 874.417476][T18888] bridge6 (unregistering): left promiscuous mode [ 874.488409][T18888] bond7 (unregistering): (slave bridge8): Removing an active aggregator [ 874.498841][T18888] bond7 (unregistering): (slave bridge8): Releasing backup interface [ 874.507838][T18888] bridge8 (unregistering): left promiscuous mode [ 874.514331][T18888] bridge8 (unregistering): left allmulticast mode [ 874.732973][T18888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.743523][T18888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.753999][T18888] bond0 (unregistering): Released all slaves [ 874.771713][T18888] bond1 (unregistering): (slave bond2): Releasing backup interface [ 874.779992][T29236] Bluetooth: hci4: command 0x040f tx timeout [ 874.786843][T18888] bond2 (unregistering): left promiscuous mode [ 874.794433][T18888] bond1 (unregistering): Released all slaves [ 874.811432][T18888] bond2 (unregistering): Released all slaves [ 874.826525][T18888] bond3 (unregistering): Released all slaves [ 874.842155][T18888] bond4 (unregistering): Released all slaves [ 874.862031][T18888] bond5 (unregistering): Released all slaves [ 874.886516][T18888] bond6 (unregistering): (slave macvlan2): Releasing backup interface [ 874.896272][T18888] bond6 (unregistering): Released all slaves [ 874.913887][T18888] bond7 (unregistering): Released all slaves [ 874.932060][T18888] bond8 (unregistering): Released all slaves [ 874.950566][T18888] bond9 (unregistering): (slave wireguard1): Releasing backup interface [ 874.960480][T18888] wireguard1: left promiscuous mode [ 874.969002][T18888] bond9 (unregistering): (slave wireguard2): Releasing backup interface [ 874.979220][T18888] bond9 (unregistering): Released all slaves [ 874.998601][T18888] bond10 (unregistering): Released all slaves [ 875.014291][T18888] bond11 (unregistering): Released all slaves [ 875.032903][T18888] bond12 (unregistering): Released all slaves [ 875.049141][T18888] bond13 (unregistering): Released all slaves [ 875.070251][T29837] pim6reg: entered allmulticast mode [ 875.086466][T29840] bridge0: entered allmulticast mode [ 875.092162][T29844] pim6reg: left allmulticast mode [ 875.106242][T29844] bridge0: left allmulticast mode [ 875.178783][T29758] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.190617][T29758] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.198785][T29758] bridge_slave_0: entered allmulticast mode [ 875.208735][T29758] bridge_slave_0: entered promiscuous mode [ 875.268377][ T1294] lec:lec_start_xmit: lec0:No lecd attached [ 875.282529][T29758] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.304136][T29758] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.311629][T29758] bridge_slave_1: entered allmulticast mode [ 875.332266][T29758] bridge_slave_1: entered promiscuous mode [ 875.361102][T18888] !: left promiscuous mode [ 875.424027][T29758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.456580][T29758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.468863][T18888] tipc: Left network mode [ 875.527609][T18888] IPVS: stopping backup sync thread 19010 ... [ 875.551598][T29758] team0: Port device team_slave_0 added [ 875.606576][T29758] team0: Port device team_slave_1 added [ 875.659439][T29758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.669105][T29758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.699664][T29758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.732697][T29758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.740728][T29758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.767878][T29758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.902617][T29758] hsr_slave_0: entered promiscuous mode [ 875.911044][T29758] hsr_slave_1: entered promiscuous mode [ 875.918325][T29758] debugfs: 'hsr0' already exists in 'hsr' [ 875.924354][T29758] Cannot create hsr debugfs directory [ 875.970309][T29865] syzkaller0: entered promiscuous mode [ 875.978755][T29865] syzkaller0: entered allmulticast mode [ 876.173853][T18888] hsr_slave_0: left promiscuous mode [ 876.179900][T18888] hsr_slave_1: left promiscuous mode [ 876.187896][T18888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.196355][T18888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.205775][T18888] batman_adv: batadv0: Removing interface: macvlan3 [ 876.293794][T29236] Bluetooth: hci0: command tx timeout [ 876.424616][T29824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.620073][T29876] __nla_validate_parse: 9 callbacks suppressed [ 876.620093][T29876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6097'. [ 876.663974][T18888] team0 (unregistering): Port device team_slave_1 removed [ 876.731764][T18888] team0 (unregistering): Port device team_slave_0 removed [ 876.750534][T29887] netlink: 'syz.3.6097': attribute type 6 has an invalid length. [ 876.759436][T29887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6097'. [ 876.856004][T29236] Bluetooth: hci4: command 0x040f tx timeout [ 877.146086][T29876] mac80211_hwsim hwsim87 wlan1: entered promiscuous mode [ 877.164846][T29876] macvtap1: entered promiscuous mode [ 877.852260][T29917] mac80211_hwsim hwsim68 wlan0: entered promiscuous mode [ 877.881609][T29917] batadv_slave_0: entered promiscuous mode [ 877.908952][T29917] batadv_slave_0: left promiscuous mode [ 877.922232][T29917] mac80211_hwsim hwsim68 wlan0: left promiscuous mode [ 878.374613][T29236] Bluetooth: hci0: command tx timeout [ 878.479049][T18888] IPVS: stop unused estimator thread 0... [ 878.519618][T29758] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 878.576037][T29939] syzkaller1: entered promiscuous mode [ 878.581634][T29939] syzkaller1: entered allmulticast mode [ 878.593095][T29758] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 878.638519][T29944] syzkaller0: entered promiscuous mode [ 878.649315][T29944] syzkaller0: entered allmulticast mode [ 878.658501][T29758] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 878.675424][T29758] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 879.057640][T29965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6111'. [ 879.152507][T29960] virt_wifi0 speed is unknown, defaulting to 1000 [ 879.224763][T29960] lo speed is unknown, defaulting to 1000 [ 879.588493][T29758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.620219][T29758] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.709167][T18829] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.716441][T18829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.741674][T18829] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.748936][T18829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.948101][T30006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6120'. [ 880.098617][T29758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 880.315409][ T5908] hid-generic 0005:0006:5508.0001: item fetching failed at offset 3/4 [ 880.327327][ T5908] hid-generic 0005:0006:5508.0001: probe with driver hid-generic failed with error -22 [ 880.453721][T29236] Bluetooth: hci0: command tx timeout [ 880.665668][T30042] hsr0: entered promiscuous mode [ 880.827176][T29758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.898606][T30055] batadv_slave_0: entered promiscuous mode [ 880.943318][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 880.951428][ C0] lec:lec_tx_timeout: lec0 [ 881.049294][T30054] batadv_slave_0: left promiscuous mode [ 881.502692][T30094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6143'. [ 881.587817][T29758] veth0_vlan: entered promiscuous mode [ 881.607185][T30090] virt_wifi0 speed is unknown, defaulting to 1000 [ 881.621747][T29758] veth1_vlan: entered promiscuous mode [ 881.625560][T30097] nbd: nbd3 already in use [ 881.635647][T30090] lo speed is unknown, defaulting to 1000 [ 881.739786][T30099] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6145'. [ 881.779032][T29758] veth0_macvtap: entered promiscuous mode [ 881.845298][T29758] veth1_macvtap: entered promiscuous mode [ 882.009169][T29758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.052110][T29758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.068972][T30118] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6150'. [ 882.130170][T30118] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6150'. [ 882.150535][T30118] tipc: Started in network mode [ 882.160038][T30118] tipc: Node identity ffffffff, cluster identity 4711 [ 882.167316][T30118] tipc: Node number set to 4294967295 [ 882.185427][ T6685] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.185588][T30117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6150'. [ 882.209873][T30127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6151'. [ 882.262515][T30129] netlink: 'syz.0.6153': attribute type 13 has an invalid length. [ 882.354262][T30134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6151'. [ 882.429100][ T6685] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.466841][T30117] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6150'. [ 882.587544][ T6685] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.637251][T30135] syzkaller0: entered promiscuous mode [ 882.642908][T30135] syzkaller0: entered allmulticast mode [ 882.649935][ T6685] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.697939][T30145] gtp0: entered promiscuous mode [ 882.702967][T30145] gtp0: entered allmulticast mode [ 883.003370][T18861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.011274][T18861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.125672][T18861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.156480][T18861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.164680][T30166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6161'. [ 883.204521][T30172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6162'. [ 883.235995][T30162] virt_wifi0 speed is unknown, defaulting to 1000 [ 883.271625][T30162] lo speed is unknown, defaulting to 1000 [ 883.294139][T30172] netlink: 344 bytes leftover after parsing attributes in process `syz.3.6162'. [ 883.332282][T30180] netlink: 'syz.4.6061': attribute type 5 has an invalid length. [ 883.389719][T30180] ip6erspan0: entered promiscuous mode [ 883.640141][T30191] netlink: 'syz.4.6166': attribute type 3 has an invalid length. [ 883.746003][T30191] syz_tun: entered allmulticast mode [ 883.766660][T30191] siw: device registration error -23 [ 883.795609][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 883.808207][ T5140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 883.821199][ T5140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 883.830170][ T5140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 883.841126][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 883.854198][T30191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 883.912711][T30190] syz_tun: left allmulticast mode [ 883.969899][T30196] virt_wifi0 speed is unknown, defaulting to 1000 [ 883.982479][T30196] lo speed is unknown, defaulting to 1000 [ 884.225105][ T1708] block nbd3: Possible stuck request ffff8880261fa400: control (read@0,1024B). Runtime 270 seconds [ 884.238230][ T1708] block nbd3: Possible stuck request ffff8880261fa600: control (read@1024,1024B). Runtime 270 seconds [ 884.249680][ T1708] block nbd3: Possible stuck request ffff8880261fa800: control (read@2048,1024B). Runtime 270 seconds [ 884.254551][T30212] tipc: Enabled bearer , priority 0 [ 884.260847][ T1708] block nbd3: Possible stuck request ffff8880261faa00: control (read@3072,1024B). Runtime 270 seconds [ 884.289757][T30213] syzkaller0: entered promiscuous mode [ 884.296737][T30213] syzkaller0: entered allmulticast mode [ 884.350835][T30212] tipc: Resetting bearer [ 884.382826][T30211] bond1 (unregistering): Released all slaves [ 884.425165][T30210] tipc: Resetting bearer [ 884.463277][T30210] tipc: Disabling bearer [ 884.476081][T30196] chnl_net:caif_netlink_parms(): no params data found [ 884.785479][T30196] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.826691][T30196] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.852430][T30196] bridge_slave_0: entered allmulticast mode [ 884.873870][T18830] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 884.915945][T30196] bridge_slave_0: entered promiscuous mode [ 884.949021][T30196] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.963629][T30196] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.971005][T30196] bridge_slave_1: entered allmulticast mode [ 885.007567][T30196] bridge_slave_1: entered promiscuous mode [ 885.232741][T30196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.305342][T30196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.893467][ T5140] Bluetooth: hci2: command tx timeout [ 885.926125][T30270] gretap2: entered promiscuous mode [ 885.932400][T30270] batman_adv: batadv0: Adding interface: gretap2 [ 885.939341][T30270] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 885.984047][T30270] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 886.799706][T18888] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 886.879553][T30291] __nla_validate_parse: 4 callbacks suppressed [ 886.879574][T30291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6188'. [ 886.952465][T30293] netlink: 'syz.2.6188': attribute type 58 has an invalid length. [ 886.960533][T30293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6188'. [ 887.051676][T18888] bond1 (unregistering): (slave gre1): Releasing backup interface [ 887.085079][T18888] dvmrp0 (unregistering): left allmulticast mode [ 887.097419][T18888] dvmrp1 (unregistering): left allmulticast mode [ 887.470298][T18888] bond8 (unregistering): (slave bridge7): Releasing active interface [ 887.479572][T18888] bond8 (unregistering): (slave bridge7): the permanent HWaddr of slave - 1e:61:a4:26:27:f7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 887.540566][T18888] bond8 (unregistering): (slave bridge8): Releasing active interface [ 887.721508][T18888] bond1 (unregistering): Released all slaves [ 887.740464][T18888] bond2 (unregistering): Released all slaves [ 887.765048][T18888] bond3 (unregistering): Released all slaves [ 887.791076][T18888] bond4 (unregistering): (slave veth5): Releasing backup interface [ 887.807503][T18888] bond4 (unregistering): Released all slaves [ 887.826709][T18888] bond0 (unregistering): Released all slaves [ 887.847292][T18888] bond5 (unregistering): (slave batadv1): Releasing backup interface [ 887.870253][T18888] bond5 (unregistering): Released all slaves [ 887.890730][T18888] bond6 (unregistering): Released all slaves [ 887.922882][T18888] bond7 (unregistering): Released all slaves [ 887.950984][T18888] bond8 (unregistering): Released all slaves [ 887.978253][ T5140] Bluetooth: hci2: command tx timeout [ 887.984497][T18888] bond9 (unregistering): Released all slaves [ 888.012997][T30196] team0: Port device team_slave_0 added [ 888.026052][T30196] team0: Port device team_slave_1 added [ 888.478709][T18888] tipc: Left network mode [ 888.509671][T30303] æÿîÿ: entered promiscuous mode [ 888.580359][T30196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.595096][T30196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.630542][T30196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.656719][T30196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.664533][T30196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.723806][T30196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.748351][T30303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6189'. [ 888.807979][T30284] virt_wifi0 speed is unknown, defaulting to 1000 [ 888.871565][T30284] lo speed is unknown, defaulting to 1000 [ 888.967427][T30196] hsr_slave_0: entered promiscuous mode [ 888.986612][T30196] hsr_slave_1: entered promiscuous mode [ 888.993100][T30196] debugfs: 'hsr0' already exists in 'hsr' [ 889.020578][T30196] Cannot create hsr debugfs directory [ 890.053457][ T5140] Bluetooth: hci2: command tx timeout [ 890.683972][T18888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.830748][T18888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.880642][T18888] batman_adv: batadv0: Removing interface: ipvlan2 [ 891.505265][T30431] FAULT_INJECTION: forcing a failure. [ 891.505265][T30431] name failslab, interval 1, probability 0, space 0, times 0 [ 891.524719][T30431] CPU: 0 UID: 0 PID: 30431 Comm: syz.4.6210 Not tainted syzkaller #0 PREEMPT(full) [ 891.524749][T30431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.524764][T30431] Call Trace: [ 891.524773][T30431] [ 891.524782][T30431] dump_stack_lvl+0xe8/0x150 [ 891.524818][T30431] should_fail_ex+0x412/0x560 [ 891.524854][T30431] should_failslab+0xa8/0x100 [ 891.524887][T30431] __kmalloc_cache_noprof+0x88/0x660 [ 891.524914][T30431] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 891.524939][T30431] ? sctp_association_new+0x89/0x25e0 [ 891.524967][T30431] ? __asan_memcpy+0x40/0x70 [ 891.524994][T30431] sctp_association_new+0x89/0x25e0 [ 891.525023][T30431] ? sctp_do_bind+0x661/0x9d0 [ 891.525055][T30431] ? __ipv6_addr_type+0x247/0x2f0 [ 891.525087][T30431] sctp_connect_new_asoc+0x2e4/0x6b0 [ 891.525119][T30431] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 891.525154][T30431] ? __local_bh_enable_ip+0xd0/0x130 [ 891.525178][T30431] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 891.525209][T30431] ? security_sctp_bind_connect+0x7e/0x2c0 [ 891.525238][T30431] sctp_sendmsg+0x1528/0x2c10 [ 891.525281][T30431] ? __pfx_sctp_sendmsg+0x10/0x10 [ 891.525306][T30431] ? aa_sk_perm+0x15a/0x960 [ 891.525336][T30431] ? aa_sk_perm+0x82d/0x960 [ 891.525380][T30431] ? __pfx_aa_sk_perm+0x10/0x10 [ 891.525413][T30431] ? sock_rps_record_flow+0x19/0x400 [ 891.525446][T30431] ? inet_sendmsg+0x2f4/0x370 [ 891.525479][T30431] ____sys_sendmsg+0x894/0xad0 [ 891.525518][T30431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.525556][T30431] ? import_iovec+0x73/0xa0 [ 891.525582][T30431] ___sys_sendmsg+0x2a5/0x360 [ 891.525607][T30431] ? __lock_acquire+0x6b5/0x2cf0 [ 891.525635][T30431] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.525669][T30431] ? kstrtouint+0x6e/0xe0 [ 891.525727][T30431] ? __fget_files+0x2a/0x420 [ 891.525748][T30431] ? __fget_files+0x3a0/0x420 [ 891.525781][T30431] __sys_sendmmsg+0x27c/0x4e0 [ 891.525815][T30431] ? __pfx___sys_sendmmsg+0x10/0x10 [ 891.525841][T30431] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 891.525898][T30431] ? ksys_write+0x242/0x270 [ 891.525927][T30431] ? __pfx_ksys_write+0x10/0x10 [ 891.525961][T30431] __x64_sys_sendmmsg+0xa0/0xc0 [ 891.525992][T30431] do_syscall_64+0x14d/0xf80 [ 891.526020][T30431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.526040][T30431] ? trace_irq_disable+0x37/0x100 [ 891.526064][T30431] ? clear_bhb_loop+0x40/0x90 [ 891.526090][T30431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.526110][T30431] RIP: 0033:0x7f476a99c629 [ 891.526131][T30431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.526148][T30431] RSP: 002b:00007f476b82b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 891.526172][T30431] RAX: ffffffffffffffda RBX: 00007f476ac15fa0 RCX: 00007f476a99c629 [ 891.526188][T30431] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 891.526201][T30431] RBP: 00007f476b82b090 R08: 0000000000000000 R09: 0000000000000000 [ 891.526214][T30431] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000001 [ 891.526226][T30431] R13: 00007f476ac16038 R14: 00007f476ac15fa0 R15: 00007ffebbdb5a88 [ 891.526260][T30431] [ 892.143333][ T5140] Bluetooth: hci2: command tx timeout [ 893.143107][T18888] pim6reg (unregistering): left allmulticast mode [ 893.152954][T18888] pimreg (unregistering): left allmulticast mode [ 893.458285][T30432] virt_wifi0 speed is unknown, defaulting to 1000 [ 893.548892][T30432] lo speed is unknown, defaulting to 1000 [ 893.776202][T30459] netlink: 'syz.2.6217': attribute type 1 has an invalid length. [ 894.242676][T30457] virt_wifi0 speed is unknown, defaulting to 1000 [ 894.348799][T30457] lo speed is unknown, defaulting to 1000 [ 894.441064][T30196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 894.460870][T30196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 894.502554][T30196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 894.518265][T18888] IPVS: stop unused estimator thread 0... [ 894.623536][T30196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 894.911293][T30506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.104965][T30196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.141179][T30196] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.169585][T18888] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.176894][T18888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.209964][T18888] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.217212][T18888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.231765][T30519] syzkaller0: entered promiscuous mode [ 895.239839][T30519] syzkaller0: entered allmulticast mode [ 895.311241][T30521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6227'. [ 895.348035][T30521] netlink: 'syz.2.6227': attribute type 4 has an invalid length. [ 895.716814][T30543] netlink: 'syz.2.6230': attribute type 8 has an invalid length. [ 895.771592][T16383] hid-generic 0005:0006:5508.0002: item fetching failed at offset 3/4 [ 895.780974][T16383] hid-generic 0005:0006:5508.0002: probe with driver hid-generic failed with error -22 [ 896.103069][T30196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.236832][T30571] virt_wifi0 speed is unknown, defaulting to 1000 [ 896.252511][T30575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6238'. [ 896.263544][T30575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6238'. [ 896.278919][T30196] veth0_vlan: entered promiscuous mode [ 896.431669][T30571] lo speed is unknown, defaulting to 1000 [ 896.450120][T30196] veth1_vlan: entered promiscuous mode [ 896.820995][T30196] veth0_macvtap: entered promiscuous mode [ 896.884825][T30196] veth1_macvtap: entered promiscuous mode [ 896.970428][T30196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.060607][T30196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.100572][T30614] Bluetooth: MGMT ver 1.23 [ 897.160579][T18890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.212454][T18890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.268783][T18890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.291763][T30623] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6247'. [ 897.307014][T18890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.548718][T18891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.611604][T18891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.641999][T30645] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6249'. [ 897.821824][T30658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6250'. [ 897.889858][T30647] virt_wifi0 speed is unknown, defaulting to 1000 [ 897.923942][T18891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.946021][T30647] lo speed is unknown, defaulting to 1000 [ 897.963088][T18891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.047916][T30665] netlink: 'syz.0.6253': attribute type 1 has an invalid length. [ 898.090461][T30665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6253'. [ 898.124537][T30665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6253'. [ 898.183551][ T29] audit: type=1800 audit(1771382204.072:8): pid=30674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6165" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0 [ 898.460582][T30690] veth0: entered promiscuous mode [ 898.472130][T30688] veth0: left promiscuous mode [ 898.541372][T30687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6256'. [ 899.087070][T30709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6263'. [ 899.121037][T29236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 899.131745][T29236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 899.154688][T29236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 899.167564][T29236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 899.176142][T29236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 899.261595][T30711] virt_wifi0 speed is unknown, defaulting to 1000 [ 899.288704][T30718] pimreg: entered allmulticast mode [ 899.344929][T30711] lo speed is unknown, defaulting to 1000 [ 899.436419][T30719] virt_wifi0 speed is unknown, defaulting to 1000 [ 899.499537][T30719] lo speed is unknown, defaulting to 1000 [ 899.759223][T18890] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.771109][T18890] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.871445][T18890] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.900913][T18890] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.007989][T18890] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.035711][T18890] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.163540][T30711] chnl_net:caif_netlink_parms(): no params data found [ 900.198539][T18890] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 900.208663][T18890] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.253874][T30737] netlink: 'syz.4.6268': attribute type 10 has an invalid length. [ 900.282374][T30737] netlink: 'syz.4.6268': attribute type 10 has an invalid length. [ 900.314270][T30737] __nla_validate_parse: 3 callbacks suppressed [ 900.314289][T30737] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6268'. [ 900.452497][T30740] netlink: 'syz.2.6269': attribute type 10 has an invalid length. [ 900.498000][T30740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.559188][T30740] team0: Port device bond0 added [ 900.609079][T30711] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.641914][T30711] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.671379][T30711] bridge_slave_0: entered allmulticast mode [ 900.698509][T30711] bridge_slave_0: entered promiscuous mode [ 900.812524][T30711] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.833116][T30711] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.843074][T30711] bridge_slave_1: entered allmulticast mode [ 900.876289][T30711] bridge_slave_1: entered promiscuous mode [ 901.031970][T30711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.057412][T18890] veth0_to_bridge: left allmulticast mode [ 901.074133][T18890] veth0_to_bridge: left promiscuous mode [ 901.079995][T30763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6272'. [ 901.080161][T18890] bridge0: port 2(veth0_to_bridge) entered disabled state [ 901.135914][T18890] bridge_slave_0: left allmulticast mode [ 901.141638][T18890] bridge_slave_0: left promiscuous mode [ 901.162103][T18890] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.257537][ T5140] Bluetooth: hci5: command tx timeout [ 901.714035][T18890] batman_adv: batadv0: Removing interface: gretap2 [ 901.977763][T18890] bridge2 (unregistering): left promiscuous mode [ 902.006110][T18890] team0: Port device bridge2 removed [ 902.310367][T18890] bond0 (unregistering): (slave 30): Releasing backup interface [ 902.321624][T18890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.332153][T18890] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 902.342298][T18890] bond0 (unregistering): Released all slaves [ 902.357286][T18890] bond1 (unregistering): Released all slaves [ 902.373050][T18890] bond2 (unregistering): Released all slaves [ 902.389899][T18890] bond3 (unregistering): Released all slaves [ 902.406660][T18890] bond4 (unregistering): Released all slaves [ 902.428509][T18890] bond5 (unregistering): Released all slaves [ 902.450936][T18890] bond6 (unregistering): Released all slaves [ 902.466905][T18890] bond7 (unregistering): Released all slaves [ 902.507427][T30711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.682672][T30768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6273'. [ 902.697119][T30768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6273'. [ 902.707523][T30768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6273'. [ 902.781471][T30711] team0: Port device team_slave_0 added [ 902.810274][T30711] team0: Port device team_slave_1 added [ 902.950079][T30711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.984576][T30711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.064715][T30711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.093005][T30711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.130204][T30711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 903.203397][T30711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.336466][ T5140] Bluetooth: hci5: command tx timeout [ 903.448550][T30711] hsr_slave_0: entered promiscuous mode [ 903.474593][T30711] hsr_slave_1: entered promiscuous mode [ 903.491006][T30831] Cannot find add_set index 2 as target [ 903.501124][T30711] debugfs: 'hsr0' already exists in 'hsr' [ 903.508070][T30832] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6284'. [ 903.510420][T30711] Cannot create hsr debugfs directory [ 903.987682][T30853] Timeout policy `syz0' can only be used by L3 protocol number 25 [ 904.106263][T30851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6288'. [ 904.457934][T30861] virt_wifi0 speed is unknown, defaulting to 1000 [ 904.555953][T30861] lo speed is unknown, defaulting to 1000 [ 904.561866][T18890] l24): left promiscuous mode [ 904.681532][T18890] : left promiscuous mode [ 904.796099][T18890] tipc: Left network mode [ 905.039638][T30898] xt_TCPMSS: Only works on TCP SYN packets [ 905.197299][T30879] virt_wifi0 speed is unknown, defaulting to 1000 [ 905.222106][T30879] lo speed is unknown, defaulting to 1000 [ 905.354386][T18890] IPVS: stopping backup sync thread 25006 ... [ 905.414090][ T5140] Bluetooth: hci5: command tx timeout [ 905.465021][T30914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6300'. [ 906.281810][T30944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6304'. [ 906.446174][T30711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 906.554394][T30711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 906.630691][T30956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 906.743353][T30711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 906.790913][T30711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 907.351770][T30976] delete_channel: no stack [ 907.360208][T30995] netlink: 'syz.4.6312': attribute type 3 has an invalid length. [ 907.394058][T30995] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6312'. [ 907.486107][T31000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6313'. [ 907.497989][ T5140] Bluetooth: hci5: command tx timeout [ 907.533496][T30993] virt_wifi0 speed is unknown, defaulting to 1000 [ 907.546767][T30711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.573979][T31003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6311'. [ 907.622146][T30993] lo speed is unknown, defaulting to 1000 [ 907.642662][T30711] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.845562][T18889] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.852830][T18889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.940359][T18889] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.947624][T18889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.967875][T31009] virt_wifi0 speed is unknown, defaulting to 1000 [ 908.037153][T31009] lo speed is unknown, defaulting to 1000 [ 908.317053][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880554c4400: rx timeout, send abort [ 908.331428][T31032] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 908.346663][T31033] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 908.544476][T18890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.649459][T18890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.716790][T31047] netlink: 'syz.2.6321': attribute type 2 has an invalid length. [ 908.817169][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e26000: rx timeout, send abort [ 908.826885][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880554c4400: abort rx timeout. Force session deactivation [ 908.848738][T18890] pimreg (unregistering): left allmulticast mode [ 909.243108][T18890] team_slave_1 (unregistering): left promiscuous mode [ 909.259082][T18890] team0 (unregistering): Port device team_slave_1 removed [ 909.306135][T18890] team_slave_0 (unregistering): left promiscuous mode [ 909.325551][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e26000: abort rx timeout. Force session deactivation [ 909.355395][T18890] team0 (unregistering): Port device team_slave_0 removed [ 909.602923][T31079] netlink: 'syz.4.6325': attribute type 10 has an invalid length. [ 909.739264][T31047] !: entered promiscuous mode [ 909.798117][T31079] syz_tun: entered promiscuous mode [ 909.831670][T31079] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 909.917298][T31083] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 910.254052][T31104] netlink: 'syz.4.6330': attribute type 3 has an invalid length. [ 910.328627][T30711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.687221][T30711] veth0_vlan: entered promiscuous mode [ 910.705219][ T6679] IPVS: starting estimator thread 0... [ 910.720534][T30711] veth1_vlan: entered promiscuous mode [ 910.803513][T31120] IPVS: using max 29 ests per chain, 69600 per kthread [ 910.837109][T30711] veth0_macvtap: entered promiscuous mode [ 910.886299][T30711] veth1_macvtap: entered promiscuous mode [ 910.980217][T30711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.010480][T31126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6333'. [ 911.041601][T31130] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6336'. [ 911.061987][T30711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.140132][T18888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.193707][T18888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.248997][T18888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.317739][T18888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.465647][T31150] netlink: 'syz.2.6341': attribute type 16 has an invalid length. [ 911.475752][T31150] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6341'. [ 911.508553][T18891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.544252][T18891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.688165][T18888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.718526][T18888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.837020][T31157] netlink: 'syz.1.6342': attribute type 1 has an invalid length. [ 912.037502][T31172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.118911][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6346'. [ 912.202324][T18890] IPVS: stop unused estimator thread 0... [ 912.268499][T31179] bond1: option ad_user_port_key: invalid value (65535) [ 912.303957][T31179] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 912.319311][T31188] netlink: 'syz.0.6347': attribute type 1 has an invalid length. [ 912.328438][T31179] bond1 (unregistering): Released all slaves [ 912.336321][T31188] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6347'. [ 913.637044][T31220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6355'. [ 913.709204][T31224] block nbd0: NBD_DISCONNECT [ 913.741506][T31224] block nbd0: Send disconnect failed -32 [ 913.753010][T31216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6355'. [ 913.771912][T31231] openvswitch: netlink: Message has 8 unknown bytes. [ 913.816822][T31232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6358'. [ 913.821886][T31224] block nbd0: shutting down sockets [ 913.863247][T31231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.137675][T31240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6364'. [ 914.220772][T31248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6363'. [ 914.301997][ T1708] block nbd3: Possible stuck request ffff8880261fa400: control (read@0,1024B). Runtime 300 seconds [ 914.312925][ T1708] block nbd3: Possible stuck request ffff8880261fa600: control (read@1024,1024B). Runtime 300 seconds [ 914.324652][ T1708] block nbd3: Possible stuck request ffff8880261fa800: control (read@2048,1024B). Runtime 300 seconds [ 914.335755][ T1708] block nbd3: Possible stuck request ffff8880261faa00: control (read@3072,1024B). Runtime 300 seconds [ 914.350668][T18890] veth0_to_bond: left allmulticast mode [ 914.358936][T18890] veth0_to_bond: left promiscuous mode [ 914.365079][T18890] bridge1: port 1(veth0_to_bond) entered disabled state [ 914.761798][T18890] bond4 (unregistering): (slave gretap3): Releasing active interface [ 915.149136][T18890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.159843][T18890] bond_slave_0: left promiscuous mode [ 915.167009][T18890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.177154][T18890] bond_slave_1: left promiscuous mode [ 915.187853][T18890] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 915.196954][T18890] dummy0: left promiscuous mode [ 915.204654][T18890] bond0 (unregistering): Released all slaves [ 915.216113][T18890] bond1 (unregistering): Released all slaves [ 915.231434][T18890] bond2 (unregistering): Released all slaves [ 915.251336][T18890] bond3 (unregistering): Released all slaves [ 915.272990][T18890] bond4 (unregistering): Released all slaves [ 915.294506][T18890] bond5 (unregistering): Released all slaves [ 915.397815][T18890] : left promiscuous mode [ 915.481269][T18890] tipc: Disabling bearer [ 915.502519][T18890] tipc: Left network mode [ 915.650038][T31289] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 915.753745][T31299] netlink: ct family unspecified [ 915.817238][T31301] netlink: 'syz.1.6376': attribute type 1 has an invalid length. [ 915.840681][T31301] nbd: must specify a size in bytes for the device [ 916.507671][T31312] netlink: 'syz.3.6380': attribute type 62 has an invalid length. [ 916.516755][T31312] __nla_validate_parse: 6 callbacks suppressed [ 916.516773][T31312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6380'. [ 918.002898][T31331] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6383'. [ 918.059709][T31330] netlink: 'syz.4.6384': attribute type 6 has an invalid length. [ 918.125919][T31330] netlink: 'syz.4.6384': attribute type 5 has an invalid length. [ 918.174510][T31333] x_tables: duplicate underflow at hook 1 [ 918.246687][T31337] virt_wifi0 speed is unknown, defaulting to 1000 [ 918.272245][T31337] lo speed is unknown, defaulting to 1000 [ 918.875746][ T29] audit: type=1804 audit(1771382224.772:9): pid=31356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6392" name="memory.events" dev="tmpfs" ino=94 res=1 errno=0 [ 918.928686][ T29] audit: type=1800 audit(1771382224.772:10): pid=31356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6392" name="memory.events" dev="tmpfs" ino=94 res=0 errno=0 [ 919.334557][T31372] tipc: Enabled bearer , priority 0 [ 919.373319][T31372] syzkaller0: entered promiscuous mode [ 919.378873][T31372] syzkaller0: entered allmulticast mode [ 919.419965][T31372] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6397'. [ 919.452647][T31372] tipc: Resetting bearer [ 919.513266][T31371] tipc: Resetting bearer [ 919.591508][T31380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6396'. [ 919.600776][T31380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6396'. [ 919.632481][T31371] tipc: Disabling bearer [ 919.970429][T31392] syzkaller1: entered promiscuous mode [ 919.990636][T31392] syzkaller1: entered allmulticast mode [ 920.009675][T31395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6402'. [ 920.351739][T31404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6404'. [ 920.385165][T31408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6406'. [ 920.407186][T31403] virt_wifi0 speed is unknown, defaulting to 1000 [ 920.413725][T31408] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 920.469351][T31414] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6407'. [ 920.533651][T31403] lo speed is unknown, defaulting to 1000 [ 920.542530][T31415] IPv6: addrconf: prefix option has invalid lifetime [ 920.753641][T31424] netlink: 'syz.1.6410': attribute type 13 has an invalid length. [ 920.761536][T31424] netlink: 'syz.1.6410': attribute type 17 has an invalid length. [ 921.004208][T31424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 921.382533][T18890] hsr_slave_0: left promiscuous mode [ 921.637321][T31468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6417'. [ 921.972236][T18890] team_slave_1 (unregistering): left promiscuous mode [ 921.986976][T18890] team0 (unregistering): Port device team_slave_1 removed [ 922.014134][T18890] team_slave_0 (unregistering): left promiscuous mode [ 922.022220][T18890] team0 (unregistering): Port device team_slave_0 removed [ 922.381570][T31501] netlink: 'syz.3.6422': attribute type 29 has an invalid length. [ 922.441806][T31503] netlink: 'syz.3.6422': attribute type 29 has an invalid length. [ 922.522414][T31495] netlink: 588 bytes leftover after parsing attributes in process `syz.3.6422'. [ 922.675697][T18890] IPVS: stop unused estimator thread 0... [ 922.915207][T31511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6426'. [ 922.958268][T31511] bond2: entered promiscuous mode [ 922.969120][T31511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 922.990699][T31513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 923.002136][T31513] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 923.021016][T31513] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 923.021512][T31511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 923.035975][T31511] IPv6: NLM_F_CREATE should be set when creating new route [ 923.043238][T31511] IPv6: NLM_F_CREATE should be set when creating new route [ 923.051767][T31511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 923.079123][T31511] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 923.092112][T31511] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 923.260138][T31518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6427'. [ 923.649476][T31532] lo speed is unknown, defaulting to 1000 [ 924.467584][T31459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 924.789868][T31549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6437'. [ 924.818886][T31542] netlink: 'syz.0.6435': attribute type 15 has an invalid length. [ 924.835799][T31549] syzkaller0: entered promiscuous mode [ 924.841353][T31549] syzkaller0: entered allmulticast mode [ 924.960537][T31554] syzkaller0: entered promiscuous mode [ 924.979206][T31554] syzkaller0: entered allmulticast mode [ 925.020317][T31559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6441'. [ 925.787134][T31592] nbd: couldn't find device at index 536870912 [ 926.056883][T31604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6451'. [ 926.228102][T31608] macsec1: entered promiscuous mode [ 926.236596][T31608] macsec1: entered allmulticast mode [ 926.309868][T31611] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6456'. [ 926.327280][ T29] audit: type=1107 audit(1771382232.212:11): pid=31612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 926.349582][T31615] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6456'. [ 926.384486][T31611] netlink: 159888 bytes leftover after parsing attributes in process `syz.0.6456'. [ 926.601348][T31636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.707506][T31644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6464'. [ 926.792092][T31650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6467'. [ 926.816603][T31650] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6467'. [ 927.052232][T31669] netlink: 'syz.0.6471': attribute type 23 has an invalid length. [ 927.060754][T31669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6471'. [ 927.257850][T31679] macsec1: entered promiscuous mode [ 927.264441][T31679] macsec1: entered allmulticast mode [ 927.288386][T31679] vlan2: entered allmulticast mode [ 927.293773][T31679] veth0_to_bond: entered allmulticast mode [ 927.305233][T31679] team0: Port device vlan2 added [ 927.364801][T31683] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 927.538086][T31687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6479'. [ 927.547518][T31687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6479'. [ 927.636456][T31694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 927.678016][T31696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6484'. [ 927.707886][T31700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6482'. [ 927.708253][T31698] netdevsim netdevsim0: Direct firmware load for . [ 927.708253][T31698] failed with error -2 [ 927.717898][T31700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6482'. [ 927.757469][T31698] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 927.757469][T31698] [ 927.782041][T31696] mac80211_hwsim hwsim86 wlan0: entered promiscuous mode [ 927.802169][T31702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6485'. [ 927.976299][T31712] netlink: 'syz.1.6489': attribute type 27 has an invalid length. [ 928.332734][T31726] syzkaller0: entered promiscuous mode [ 928.352465][T31726] syzkaller0: entered allmulticast mode [ 928.717011][T31740] pimreg: tun_chr_ioctl cmd 1074025677 [ 928.722764][T31740] pimreg: linktype set to 6 [ 928.785346][T31745] wg1 speed is unknown, defaulting to 1000 [ 928.791322][T31745] wg1 speed is unknown, defaulting to 1000 [ 928.814107][T31745] wg1 speed is unknown, defaulting to 1000 [ 928.862272][T31745] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 928.870699][T31748] netlink: 'syz.0.6501': attribute type 1 has an invalid length. [ 928.962056][T31745] wg1 speed is unknown, defaulting to 1000 [ 928.969820][T31745] wg1 speed is unknown, defaulting to 1000 [ 928.977519][T31745] wg1 speed is unknown, defaulting to 1000 [ 928.994942][T31745] wg1 speed is unknown, defaulting to 1000 [ 929.012926][T31745] wg1 speed is unknown, defaulting to 1000 [ 929.045238][T31745] wg1 speed is unknown, defaulting to 1000 [ 929.052983][T31745] wg1 speed is unknown, defaulting to 1000 [ 929.095299][T31745] wg1 speed is unknown, defaulting to 1000 [ 929.115338][T31745] wg1 speed is unknown, defaulting to 1000 [ 929.319429][T31767] netlink: 'syz.3.6507': attribute type 6 has an invalid length. [ 929.332759][T31768] netlink: 'syz.3.6507': attribute type 6 has an invalid length. [ 930.667971][T26325] wg1 speed is unknown, defaulting to 1000 [ 930.676358][T26326] wg1 speed is unknown, defaulting to 1000 [ 930.769795][T31799] syzkaller0: entered promiscuous mode [ 930.786730][T31799] syzkaller0: entered allmulticast mode [ 930.914802][ T8817] lec:lec_start_xmit: lec0:No lecd attached [ 933.399602][T31839] __nla_validate_parse: 9 callbacks suppressed [ 933.399621][T31839] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6522'. [ 933.729722][T31860] syzkaller0: entered promiscuous mode [ 933.747368][T31860] syzkaller0: entered allmulticast mode [ 933.777968][T31860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6527'. [ 933.850489][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6529'. [ 933.885637][T31866] tipc: Enabled bearer , priority 10 [ 934.111301][T31873] netlink: 'syz.1.6530': attribute type 29 has an invalid length. [ 934.119853][T31873] netlink: 'syz.1.6530': attribute type 29 has an invalid length. [ 934.151622][T31875] lo speed is unknown, defaulting to 1000 [ 934.222332][T31875] wg1 speed is unknown, defaulting to 1000 [ 934.354441][T31886] netlink: 'syz.1.6536': attribute type 1 has an invalid length. [ 934.622348][T31894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6538'. [ 934.638717][T31892] syzkaller0: entered promiscuous mode [ 934.647457][T31896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6538'. [ 934.647497][T31892] syzkaller0: entered allmulticast mode [ 934.776338][T31891] tipc: Started in network mode [ 934.781294][T31891] tipc: Node identity 66ae398eff45, cluster identity 4711 [ 934.800930][T31891] tipc: Enabled bearer , priority 0 [ 934.850427][T31891] tipc: Resetting bearer [ 934.927352][T31890] tipc: Resetting bearer [ 934.991974][T31911] netlink: 'syz.4.6541': attribute type 1 has an invalid length. [ 935.014203][T31890] tipc: Disabling bearer [ 935.152512][T31910] syzkaller0: entered promiscuous mode [ 935.168807][T31910] syzkaller0: entered allmulticast mode [ 935.219722][T31924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6545'. [ 935.240498][T31924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6545'. [ 935.267850][T31924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6545'. [ 935.929121][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 935.937261][ C0] lec:lec_tx_timeout: lec0 [ 936.706803][ T1294] lec:lec_start_xmit: lec0:No lecd attached [ 937.052326][T31924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6545'. [ 937.065477][T31924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6545'. [ 937.111203][T31919] lo speed is unknown, defaulting to 1000 [ 937.111230][T18829] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.131616][T18829] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.150696][T18829] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.171481][T18829] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 937.200732][T31919] wg1 speed is unknown, defaulting to 1000 [ 937.269599][T31941] x_tables: duplicate underflow at hook 1 [ 937.966749][T31973] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.974560][T31973] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.016613][T31973] team0: Failed to send port change of device bond0 via netlink (err -105) [ 938.207977][T31973] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 938.242709][T31973] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 938.259311][T31973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.281877][T31973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.390826][T32001] Bluetooth: MGMT ver 1.23 [ 938.489940][T31977] __nla_validate_parse: 3 callbacks suppressed [ 938.489962][T31977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6558'. [ 938.505954][T31977] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6558'. [ 938.519086][T31977] netlink: 'syz.3.6558': attribute type 3 has an invalid length. [ 938.528187][T31992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6561'. [ 938.596010][T18856] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.615327][T18856] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.652989][T18856] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.711002][T18856] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.910212][T32007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6566'. [ 938.942390][T32014] FAULT_INJECTION: forcing a failure. [ 938.942390][T32014] name failslab, interval 1, probability 0, space 0, times 0 [ 938.972138][T32014] CPU: 0 UID: 0 PID: 32014 Comm: syz.4.6565 Not tainted syzkaller #0 PREEMPT(full) [ 938.972168][T32014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 938.972181][T32014] Call Trace: [ 938.972190][T32014] [ 938.972200][T32014] dump_stack_lvl+0xe8/0x150 [ 938.972234][T32014] should_fail_ex+0x412/0x560 [ 938.972278][T32014] should_failslab+0xa8/0x100 [ 938.972310][T32014] __kmalloc_cache_noprof+0x88/0x660 [ 938.972336][T32014] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 938.972360][T32014] ? sctp_add_bind_addr+0x8c/0x370 [ 938.972387][T32014] sctp_add_bind_addr+0x8c/0x370 [ 938.972413][T32014] sctp_copy_local_addr_list+0x314/0x4f0 [ 938.972439][T32014] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 938.972460][T32014] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 938.972484][T32014] ? sctp_v6_is_any+0x64/0x80 [ 938.972508][T32014] ? sctp_copy_one_addr+0x93/0x360 [ 938.972533][T32014] sctp_bind_addr_copy+0xb3/0x3c0 [ 938.972556][T32014] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 938.972592][T32014] sctp_connect_new_asoc+0x2ff/0x6b0 [ 938.972623][T32014] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 938.972658][T32014] ? __local_bh_enable_ip+0xd0/0x130 [ 938.972679][T32014] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 938.972710][T32014] ? security_sctp_bind_connect+0x7e/0x2c0 [ 938.972739][T32014] sctp_sendmsg+0x1528/0x2c10 [ 938.972782][T32014] ? __pfx_sctp_sendmsg+0x10/0x10 [ 938.972805][T32014] ? aa_sk_perm+0x15a/0x960 [ 938.972834][T32014] ? aa_sk_perm+0x82d/0x960 [ 938.972869][T32014] ? __pfx_aa_sk_perm+0x10/0x10 [ 938.972900][T32014] ? sock_rps_record_flow+0x19/0x400 [ 938.972932][T32014] ? inet_sendmsg+0x2f4/0x370 [ 938.972971][T32014] ____sys_sendmsg+0x894/0xad0 [ 938.973009][T32014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 938.973045][T32014] ? import_iovec+0x73/0xa0 [ 938.973071][T32014] ___sys_sendmsg+0x2a5/0x360 [ 938.973096][T32014] ? __lock_acquire+0x6b5/0x2cf0 [ 938.973123][T32014] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.973159][T32014] ? kstrtouint+0x6e/0xe0 [ 938.973216][T32014] ? __fget_files+0x2a/0x420 [ 938.973236][T32014] ? __fget_files+0x3a0/0x420 [ 938.973272][T32014] __sys_sendmmsg+0x27c/0x4e0 [ 938.973304][T32014] ? __pfx___sys_sendmmsg+0x10/0x10 [ 938.973328][T32014] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 938.973384][T32014] ? ksys_write+0x242/0x270 [ 938.973413][T32014] ? __pfx_ksys_write+0x10/0x10 [ 938.973445][T32014] __x64_sys_sendmmsg+0xa0/0xc0 [ 938.973475][T32014] do_syscall_64+0x14d/0xf80 [ 938.973502][T32014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.973522][T32014] ? trace_irq_disable+0x37/0x100 [ 938.973545][T32014] ? clear_bhb_loop+0x40/0x90 [ 938.973571][T32014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.973591][T32014] RIP: 0033:0x7f476a99c629 [ 938.973610][T32014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.973627][T32014] RSP: 002b:00007f476b80a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 938.973650][T32014] RAX: ffffffffffffffda RBX: 00007f476ac16090 RCX: 00007f476a99c629 [ 938.973666][T32014] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 938.973679][T32014] RBP: 00007f476b80a090 R08: 0000000000000000 R09: 0000000000000000 [ 938.973693][T32014] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 938.973706][T32014] R13: 00007f476ac16128 R14: 00007f476ac16090 R15: 00007ffebbdb5a88 [ 938.973740][T32014] [ 939.370252][T32018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.505752][T32026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6571'. [ 939.516986][T32025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6572'. [ 939.685653][T32028] lo speed is unknown, defaulting to 1000 [ 939.692930][T32028] wg1 speed is unknown, defaulting to 1000 [ 939.785638][T32030] lo speed is unknown, defaulting to 1000 [ 939.795588][T32030] wg1 speed is unknown, defaulting to 1000 [ 940.331300][T32050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6577'. [ 940.381324][T32052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6578'. [ 940.604664][T32061] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 940.629678][T32041] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.637266][T32041] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.116780][T32041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.152933][T32041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.594269][T32043] syzkaller0: entered promiscuous mode [ 941.599934][T32043] syzkaller0: entered allmulticast mode [ 941.682381][T32050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6577'. [ 941.838443][ T7952] wg1 speed is unknown, defaulting to 1000 [ 941.844749][ T3497] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.854650][ T7952] syz0: Port: 1 Link DOWN [ 941.867661][ T3497] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.893211][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 941.901316][ C0] lec:lec_tx_timeout: lec0 [ 941.914550][ T3497] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.955290][ T3497] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.994980][T32083] FAULT_INJECTION: forcing a failure. [ 941.994980][T32083] name failslab, interval 1, probability 0, space 0, times 0 [ 942.053508][T32083] CPU: 1 UID: 0 PID: 32083 Comm: syz.1.6584 Not tainted syzkaller #0 PREEMPT(full) [ 942.053537][T32083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 942.053551][T32083] Call Trace: [ 942.053559][T32083] [ 942.053569][T32083] dump_stack_lvl+0xe8/0x150 [ 942.053603][T32083] should_fail_ex+0x412/0x560 [ 942.053639][T32083] should_failslab+0xa8/0x100 [ 942.053672][T32083] __kmalloc_cache_noprof+0x88/0x660 [ 942.053700][T32083] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 942.053723][T32083] ? sctp_add_bind_addr+0x8c/0x370 [ 942.053751][T32083] sctp_add_bind_addr+0x8c/0x370 [ 942.053779][T32083] sctp_copy_local_addr_list+0x314/0x4f0 [ 942.053805][T32083] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 942.053828][T32083] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 942.053854][T32083] ? sctp_v6_is_any+0x64/0x80 [ 942.053880][T32083] ? sctp_copy_one_addr+0x93/0x360 [ 942.053906][T32083] sctp_bind_addr_copy+0xb3/0x3c0 [ 942.053937][T32083] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 942.053972][T32083] sctp_connect_new_asoc+0x2ff/0x6b0 [ 942.054002][T32083] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 942.054037][T32083] ? __local_bh_enable_ip+0xd0/0x130 [ 942.054059][T32083] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 942.054089][T32083] ? security_sctp_bind_connect+0x7e/0x2c0 [ 942.054117][T32083] sctp_sendmsg+0x1528/0x2c10 [ 942.054161][T32083] ? __pfx_sctp_sendmsg+0x10/0x10 [ 942.054186][T32083] ? aa_sk_perm+0x15a/0x960 [ 942.054217][T32083] ? aa_sk_perm+0x82d/0x960 [ 942.054253][T32083] ? __pfx_aa_sk_perm+0x10/0x10 [ 942.054285][T32083] ? sock_rps_record_flow+0x19/0x400 [ 942.054318][T32083] ? inet_sendmsg+0x2f4/0x370 [ 942.054352][T32083] ____sys_sendmsg+0x894/0xad0 [ 942.054390][T32083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 942.054428][T32083] ? import_iovec+0x73/0xa0 [ 942.054455][T32083] ___sys_sendmsg+0x2a5/0x360 [ 942.054482][T32083] ? __lock_acquire+0x6b5/0x2cf0 [ 942.054509][T32083] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.054543][T32083] ? kstrtouint+0x6e/0xe0 [ 942.054602][T32083] ? __fget_files+0x2a/0x420 [ 942.054623][T32083] ? __fget_files+0x3a0/0x420 [ 942.054656][T32083] __sys_sendmmsg+0x27c/0x4e0 [ 942.054691][T32083] ? __pfx___sys_sendmmsg+0x10/0x10 [ 942.054716][T32083] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 942.054775][T32083] ? ksys_write+0x242/0x270 [ 942.054805][T32083] ? __pfx_ksys_write+0x10/0x10 [ 942.054838][T32083] __x64_sys_sendmmsg+0xa0/0xc0 [ 942.054869][T32083] do_syscall_64+0x14d/0xf80 [ 942.054896][T32083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.054918][T32083] ? clear_bhb_loop+0x40/0x90 [ 942.054952][T32083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.054973][T32083] RIP: 0033:0x7f27c899c629 [ 942.054993][T32083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.055011][T32083] RSP: 002b:00007f27c97e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 942.055034][T32083] RAX: ffffffffffffffda RBX: 00007f27c8c16090 RCX: 00007f27c899c629 [ 942.055051][T32083] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 942.055065][T32083] RBP: 00007f27c97e7090 R08: 0000000000000000 R09: 0000000000000000 [ 942.055078][T32083] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 942.055091][T32083] R13: 00007f27c8c16128 R14: 00007f27c8c16090 R15: 00007ffffe5b3778 [ 942.055127][T32083] [ 942.901549][T32090] netlink: 'syz.1.6586': attribute type 3 has an invalid length. [ 942.960860][T32094] siw: device registration error -23 [ 943.212116][T32105] batadv_slave_1: entered promiscuous mode [ 943.278439][T32103] batadv_slave_1: left promiscuous mode [ 943.441742][T32121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6594'. [ 943.512996][T32129] FAULT_INJECTION: forcing a failure. [ 943.512996][T32129] name failslab, interval 1, probability 0, space 0, times 0 [ 943.536194][T32129] CPU: 0 UID: 0 PID: 32129 Comm: syz.4.6596 Not tainted syzkaller #0 PREEMPT(full) [ 943.536224][T32129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 943.536239][T32129] Call Trace: [ 943.536249][T32129] [ 943.536258][T32129] dump_stack_lvl+0xe8/0x150 [ 943.536293][T32129] should_fail_ex+0x412/0x560 [ 943.536329][T32129] should_failslab+0xa8/0x100 [ 943.536363][T32129] __kmalloc_cache_noprof+0x88/0x660 [ 943.536394][T32129] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 943.536418][T32129] ? sctp_add_bind_addr+0x8c/0x370 [ 943.536446][T32129] sctp_add_bind_addr+0x8c/0x370 [ 943.536474][T32129] sctp_copy_local_addr_list+0x314/0x4f0 [ 943.536502][T32129] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 943.536526][T32129] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 943.536559][T32129] ? sctp_v6_is_any+0x64/0x80 [ 943.536584][T32129] ? sctp_copy_one_addr+0x93/0x360 [ 943.536611][T32129] sctp_bind_addr_copy+0xb3/0x3c0 [ 943.536636][T32129] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 943.536680][T32129] sctp_connect_new_asoc+0x2ff/0x6b0 [ 943.536712][T32129] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 943.536747][T32129] ? __local_bh_enable_ip+0xd0/0x130 [ 943.536770][T32129] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 943.536802][T32129] ? security_sctp_bind_connect+0x7e/0x2c0 [ 943.536831][T32129] sctp_sendmsg+0x1528/0x2c10 [ 943.536876][T32129] ? __pfx_sctp_sendmsg+0x10/0x10 [ 943.536901][T32129] ? aa_sk_perm+0x15a/0x960 [ 943.536931][T32129] ? aa_sk_perm+0x82d/0x960 [ 943.536967][T32129] ? __pfx_aa_sk_perm+0x10/0x10 [ 943.536999][T32129] ? sock_rps_record_flow+0x19/0x400 [ 943.537030][T32129] ? inet_sendmsg+0x2f4/0x370 [ 943.537064][T32129] ____sys_sendmsg+0x894/0xad0 [ 943.537103][T32129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 943.537141][T32129] ? import_iovec+0x73/0xa0 [ 943.537167][T32129] ___sys_sendmsg+0x2a5/0x360 [ 943.537193][T32129] ? __lock_acquire+0x6b5/0x2cf0 [ 943.537222][T32129] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.537255][T32129] ? kstrtouint+0x6e/0xe0 [ 943.537314][T32129] ? __fget_files+0x2a/0x420 [ 943.537335][T32129] ? __fget_files+0x3a0/0x420 [ 943.537367][T32129] __sys_sendmmsg+0x27c/0x4e0 [ 943.537402][T32129] ? __pfx___sys_sendmmsg+0x10/0x10 [ 943.537427][T32129] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 943.537485][T32129] ? ksys_write+0x242/0x270 [ 943.537514][T32129] ? __pfx_ksys_write+0x10/0x10 [ 943.537555][T32129] __x64_sys_sendmmsg+0xa0/0xc0 [ 943.537586][T32129] do_syscall_64+0x14d/0xf80 [ 943.537614][T32129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.537635][T32129] ? trace_irq_disable+0x37/0x100 [ 943.537660][T32129] ? clear_bhb_loop+0x40/0x90 [ 943.537686][T32129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.537707][T32129] RIP: 0033:0x7f476a99c629 [ 943.537727][T32129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.537744][T32129] RSP: 002b:00007f476b80a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 943.537767][T32129] RAX: ffffffffffffffda RBX: 00007f476ac16090 RCX: 00007f476a99c629 [ 943.537782][T32129] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 943.537796][T32129] RBP: 00007f476b80a090 R08: 0000000000000000 R09: 0000000000000000 [ 943.537810][T32129] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 943.537824][T32129] R13: 00007f476ac16128 R14: 00007f476ac16090 R15: 00007ffebbdb5a88 [ 943.537860][T32129] [ 944.107875][T32141] netlink: 'syz.2.6603': attribute type 11 has an invalid length. [ 944.381235][ T1708] block nbd3: Possible stuck request ffff8880261fa400: control (read@0,1024B). Runtime 330 seconds [ 944.396233][ T1708] block nbd3: Possible stuck request ffff8880261fa600: control (read@1024,1024B). Runtime 330 seconds [ 944.410401][ T1708] block nbd3: Possible stuck request ffff8880261fa800: control (read@2048,1024B). Runtime 330 seconds [ 944.421878][ T1708] block nbd3: Possible stuck request ffff8880261faa00: control (read@3072,1024B). Runtime 330 seconds [ 944.525473][T32161] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI [ 944.537523][T32161] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 944.546317][T32161] CPU: 1 UID: 0 PID: 32161 Comm: syz.0.6610 Not tainted syzkaller #0 PREEMPT(full) [ 944.555732][T32161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 944.565846][T32161] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 944.572746][T32161] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 944.592428][T32161] RSP: 0018:ffffc90004d96b00 EFLAGS: 00010202 [ 944.598539][T32161] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000 [ 944.606550][T32161] RDX: ffffc9000eec9000 RSI: 0000000000000396 RDI: 0000000000000397 [ 944.614556][T32161] RBP: 0000000080000000 R08: ffff888032db3c80 R09: 0000000000000003 [ 944.622565][T32161] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 944.630580][T32161] R13: 0000000000000000 R14: ffff88806b5b6c58 R15: ffffffffffffffff [ 944.638592][T32161] FS: 00007f2c3d1056c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 944.647659][T32161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 944.654279][T32161] CR2: 0000001b33a23ffc CR3: 0000000079bac000 CR4: 00000000003526f0 [ 944.662279][T32161] Call Trace: [ 944.665582][T32161] [ 944.668533][T32161] ? ip_route_output_key_hash+0xd8/0x2a0 [ 944.674191][T32161] ip_route_output_key_hash+0x18d/0x2a0 [ 944.679767][T32161] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 944.685856][T32161] ? inet_csk_route_req+0x57/0xe00 [ 944.690995][T32161] ip_route_output_flow+0x2a/0x150 [ 944.696132][T32161] ? security_req_classify_flow+0x6d/0x140 [ 944.701965][T32161] inet_csk_route_req+0x63a/0xe00 [ 944.707053][T32161] ? inet_csk_route_req+0x57/0xe00 [ 944.712194][T32161] tcp_conn_request+0xc7d/0x3460 [ 944.717154][T32161] ? __kernel_text_address+0xd/0x30 [ 944.722394][T32161] ? __pfx_tcp_conn_request+0x10/0x10 [ 944.727795][T32161] ? __lock_acquire+0x6b5/0x2cf0 [ 944.732761][T32161] ? kasan_record_aux_stack+0xbd/0xd0 [ 944.738147][T32161] ? call_rcu+0xee/0x890 [ 944.742406][T32161] ? rt_cache_route+0x243/0x2a0 [ 944.747286][T32161] ? sk_filter_trim_cap+0x1e1/0xd90 [ 944.752510][T32161] ? lock_acquire+0x106/0x330 [ 944.757207][T32161] ? tcp_v4_conn_request+0x149/0x250 [ 944.762519][T32161] ? tcp_rcv_state_process+0x213/0x4810 [ 944.768098][T32161] tcp_rcv_state_process+0x1a8e/0x4810 [ 944.773590][T32161] ? sk_filter_trim_cap+0x957/0xd90 [ 944.778858][T32161] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 944.784691][T32161] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 944.790192][T32161] ? sk_filter_trim_cap+0x1e1/0xd90 [ 944.795423][T32161] tcp_v4_do_rcv+0x6bb/0x1430 [ 944.800126][T32161] tcp_v4_rcv+0x24a4/0x31f0 [ 944.804645][T32161] ? raw_local_deliver+0x30a/0xf40 [ 944.809792][T32161] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 944.814658][T32161] ? raw_local_deliver+0x30a/0xf40 [ 944.819790][T32161] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 944.825438][T32161] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 944.830304][T32161] ip_protocol_deliver_rcu+0x221/0x440 [ 944.835792][T32161] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 944.841442][T32161] ip_local_deliver_finish+0x3bb/0x6f0 [ 944.846927][T32161] NF_HOOK+0x336/0x3c0 [ 944.851015][T32161] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 944.857017][T32161] ? NF_HOOK+0x9e/0x3c0 [ 944.861184][T32161] ? __pfx_NF_HOOK+0x10/0x10 [ 944.865785][T32161] ? ip_rcv_finish_core+0xda3/0x1c00 [ 944.871089][T32161] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 944.877082][T32161] ? skb_dst+0x4f/0xd0 [ 944.881166][T32161] ? ip_local_deliver+0x12a/0x1b0 [ 944.886213][T32161] NF_HOOK+0x336/0x3c0 [ 944.890298][T32161] ? __pfx_ip_rcv_finish+0x10/0x10 [ 944.895428][T32161] ? NF_HOOK+0x9e/0x3c0 [ 944.899604][T32161] ? __pfx_NF_HOOK+0x10/0x10 [ 944.904208][T32161] ? __pfx_ip_rcv_finish+0x10/0x10 [ 944.909337][T32161] ? netif_receive_skb+0x102/0xbb0 [ 944.914471][T32161] ? __pfx_ip_rcv+0x10/0x10 [ 944.918989][T32161] netif_receive_skb+0x45b/0xbb0 [ 944.923957][T32161] ? __pfx_netif_receive_skb+0x10/0x10 [ 944.929443][T32161] ? tun_rx_batched+0x185/0x790 [ 944.934326][T32161] tun_rx_batched+0x1de/0x790 [ 944.939031][T32161] ? rcu_is_watching+0x15/0xb0 [ 944.943820][T32161] ? __pfx_tun_rx_batched+0x10/0x10 [ 944.949061][T32161] ? tun_get_user+0x2669/0x3dd0 [ 944.953943][T32161] ? tun_get_user+0x2669/0x3dd0 [ 944.958837][T32161] ? tun_get_user+0x2354/0x3dd0 [ 944.963900][T32161] ? __local_bh_enable_ip+0xd0/0x130 [ 944.969222][T32161] ? tun_get_user+0x2669/0x3dd0 [ 944.974101][T32161] tun_get_user+0x2a78/0x3dd0 [ 944.978813][T32161] ? aa_file_perm+0x440/0x1630 [ 944.983608][T32161] ? __pfx_tun_get_user+0x10/0x10 [ 944.988671][T32161] ? __lock_acquire+0x6b5/0x2cf0 [ 944.993646][T32161] ? ref_tracker_alloc+0x363/0x4d0 [ 944.998876][T32161] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 945.004365][T32161] ? tun_get+0x1c/0x2f0 [ 945.008557][T32161] ? tun_get+0x1c/0x2f0 [ 945.012740][T32161] ? tun_get+0x1c/0x2f0 [ 945.016966][T32161] ? tun_get+0x1c/0x2f0 [ 945.021164][T32161] tun_chr_write_iter+0x113/0x200 [ 945.026220][T32161] vfs_write+0x61d/0xb90 [ 945.030489][T32161] ? __pfx_vfs_write+0x10/0x10 [ 945.035296][T32161] ? __fget_files+0x2a/0x420 [ 945.039910][T32161] ksys_write+0x150/0x270 [ 945.044259][T32161] ? __pfx_ksys_write+0x10/0x10 [ 945.049147][T32161] do_syscall_64+0x14d/0xf80 [ 945.053760][T32161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.059846][T32161] ? trace_irq_disable+0x37/0x100 [ 945.064893][T32161] ? clear_bhb_loop+0x40/0x90 [ 945.069587][T32161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.075536][T32161] RIP: 0033:0x7f2c3c15cece [ 945.079973][T32161] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 945.099595][T32161] RSP: 002b:00007f2c3d104fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 945.108043][T32161] RAX: ffffffffffffffda RBX: 00007f2c3d1056c0 RCX: 00007f2c3c15cece [ 945.116070][T32161] RDX: 000000000000003a RSI: 0000200000000000 RDI: 00000000000000c8 [ 945.124059][T32161] RBP: 00007f2c3c232b39 R08: 0000000000000000 R09: 0000000000000000 [ 945.132219][T32161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.140207][T32161] R13: 00007f2c3c416038 R14: 00007f2c3c415fa0 R15: 00007fff16e04058 [ 945.148204][T32161] [ 945.151278][T32161] Modules linked in: [ 945.155328][T32161] ---[ end trace 0000000000000000 ]--- [ 945.160913][T32161] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 945.167867][T32161] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 945.187547][T32161] RSP: 0018:ffffc90004d96b00 EFLAGS: 00010202 [ 945.193755][T32161] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000 [ 945.201774][T32161] RDX: ffffc9000eec9000 RSI: 0000000000000396 RDI: 0000000000000397 [ 945.209872][T32161] RBP: 0000000080000000 R08: ffff888032db3c80 R09: 0000000000000003 [ 945.217921][T32161] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 945.226050][T32161] R13: 0000000000000000 R14: ffff88806b5b6c58 R15: ffffffffffffffff [ 945.234088][T32161] FS: 00007f2c3d1056c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 945.243052][T32161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.249804][T32161] CR2: 0000001b33a23ffc CR3: 0000000079bac000 CR4: 00000000003526f0 [ 945.257882][T32161] Kernel panic - not syncing: Fatal exception in interrupt [ 945.265725][T32161] Kernel Offset: disabled [ 945.270064][T32161] Rebooting in 86400 seconds..