last executing test programs: 3.306967712s ago: executing program 1 (id=3295): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) 2.702422616s ago: executing program 1 (id=3304): socket$inet6(0xa, 0x2, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408d1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="749e546c326c955a57ab59ae4a95a91e5baa5c0a8646c37bd4012509d8d2a7c9917201b7326bd76b2f751b7ccb068f6d7e00ae4df405ea2fbfce8d5f7e5354ddea0a16b03cac6c8d57c5b1d59aa3b3943bca33c4e51416caf63180b64af5933d2a3ed18522ece88f8d59", 0x6a) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000001f40)=""/4096, &(0x7f0000000280)=0x1000) 2.422803428s ago: executing program 2 (id=3309): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xca, 0x4) r1 = socket$inet6(0xa, 0xa, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x29, 0x33, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x800009, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @remote, 0x3}, 0x1c) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt(r0, 0x0, 0x7f, &(0x7f0000000100)=""/94, &(0x7f0000000200)=0x5e) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000040)=0x1, 0x4) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000040)={0x43, "6a05342d09112d88bf509c120eabf525906b980d36315888dc015b8594a3653b413c11f755df11c4ce1fe4e0383aa4a7867cc1af0582e1b3b3a8addb4a40f5f7e390242d67c2ab9bf753ce46a1f69d720aa5d45d2bac63b1917acb2383dfeaa0e3c6dd93058d3d14d2f4083b4d5c15fbdcb8dfb6b8e5832aa811d090d16f1cab"}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="3107000000fffa0400003800000008000100"], 0x38}, 0x1, 0x2, 0x0, 0x20040080}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000002000010031bd7000000000000a008000ff0000010200010014000200fc010000000000000000000000000500190026000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYRES32=r0], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) socketpair(0x28, 0xa, 0x0, &(0x7f0000000100)) 1.954310022s ago: executing program 4 (id=3317): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000060000008500afb0d505722acf4243373d42c81b7a00001700000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000000000000000000414000100"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0xb62, 0x6}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x398, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@srh1={{0x90}, {0x32, 0x5, 0x80, 0x3d, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [0xff0000ff, 0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 0x0, 0x1411}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x5, 0x1}, {0xffffffffffffffff, 0x5, 0x2}, 0x1, 0x800}}}, {{@ipv6={@private0, @local, [0xffffffff, 0xdd769e8dfa704763, 0xffffff00, 0xff000000], [0x0, 0x0, 0xffffff00, 0xff], 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x2c, 0x0, 0x5d}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e24, 0x4e23, 0x4e20, 0x4e22, 0x1e0, 0x4e22, 0x4e21, 0x4e21, 0x4e20, 0x4e23, 0x4e23, 0x4e22, 0x4e24, 0x4e23, 0x4e23], [0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x8, 0x7fffffff, 'syz1\x00', 'syz0\x00', {0x10001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f00000000c0), 0x9) sendfile(r8, r7, 0x0, 0x10000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f0000000100), &(0x7f00000005c0)}, 0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000006c0)={0x0, 0x400, 0x10, 0xd4}, &(0x7f0000000700)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000980)={r9, @in6={{0xa, 0x4e20, 0x100, @empty, 0x1}}, 0x8, 0x6, 0x4, 0xa, 0x61, 0x3, 0xd4}, 0x9c) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r11, 0x6, 0x1f, 0x0, &(0x7f0000000100)) 1.85949896s ago: executing program 0 (id=3318): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6(0xa, 0x2, 0x6) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@empty}, &(0x7f0000000100)=0xfffffffffffffd35) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 1.627692221s ago: executing program 0 (id=3320): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce", 0xb, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1.607819704s ago: executing program 1 (id=3321): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20"], 0xfc}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) r1 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x400}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x4, 0x8, 0x4c, 0x3, 0x20, @mcast2, @dev={0xfe, 0x80, '\x00', 0x40}, 0x40, 0x8, 0x8d0d, 0x5}}) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="e7dafc035a18a1e7e8779f8fd39de08a4e8b35327393ec59f2c56f05f2a17fe3ddd1e52fbb501fe1f53358ac5bd7e6", 0x2f}], 0x1, 0x0, 0x0, 0x10}, 0x8000) 1.598822028s ago: executing program 3 (id=3322): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendto$packet(r0, &(0x7f0000000040)="1cd56fd2844acb7b156d8aa622e39242ecb6d7445b9fc04528682250c205aa0a3df690ccc6c1ff", 0x27, 0x20040001, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @loopback}], 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x3, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}}, 0x8) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0x2}, 0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0xffffffffffffffff, r3, r4}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x80) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x7800, 0x700, 0xae, 0x40d, {{0x33, 0x4, 0x3, 0x3, 0xcc, 0x67, 0x0, 0x33, 0xfdc77a087e59e2c5, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x24, 0xa5, 0x1, 0x1, [{@rand_addr=0x64010101, 0x7}, {@rand_addr=0x64010101, 0x81}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@broadcast, 0x6}]}, @cipso={0x86, 0x61, 0x0, [{0x2, 0x11, "0e34a8f8a33a72224f945ad92338af"}, {0x0, 0x7, "953504d822"}, {0x0, 0x5, "0226e1"}, {0x1, 0xd, "3e8d54e1bb00c5c55cd714"}, {0x2, 0x3, 'y'}, {0x7, 0x4, "8aad"}, {0x1, 0x6, "746c7481"}, {0x6, 0x9, "38ece4e556ca7e"}, {0x2, 0xb, "78c1b411fb304567af"}, {0x5, 0x10, "9dd22f7c9bb1b3ba8583ff671ce7"}]}, @ssrr={0x89, 0xf, 0x60, [@loopback, @multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x20, 0x1, [{0x0, 0x4, 'VM'}, {0x5, 0xc, "2507b0104eccb2052fab"}, {0x0, 0x3, 'O'}, {0x6, 0x7, "53c91b3d22"}]}, @generic={0x44, 0x2}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000c40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f00000006c0)={0x524, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x83, 0x4, "abd83ad2877a571e3fac31986528e1fbb939822a3e19dfaf85070a4c394ce3dacee3200d70c2c67742041bc821d08f44588db21cd3bc70c3fe08bec778c62aba48a0bf62ac7abcf932f31db1e8259da7033cd0ab29fbcd48d168cc6d1e0edab5915f55a1108dbdf665e48c1e83d12f87c77719fcbe31a71321cb97f7850824"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x81, 0x5, "8a2c0a58745fc4ffa98b38d2f79a0bb5506c27fa225713cbbb19282c10393afab133025206d4d3f376fc27435b05d48a83c746a8491e341c3637d8a84f14f59b6e69c3113ac718f0be04f7a6fff46ed569ebfccc96564fd4f9b4cd5deb6a63ace19aaf7aa2bd06c92da8095b3eb9daf5541db288dcb9c42bf1b013c654"}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfb, 0x4, "16cedec954fda55ddfc4905fe61282e9f82a59e0932506127e557755f5f2b2fad7391fa143b234c91fcdb543b522f6398b7abce8b7547e9b04a085270851d125bb4e02116e6f23605471b12dc776d4544b4bea37fd24dc4b1c0de8703e04587cd058f892044d9e47682b6bd6247aff9cdeb4b80e9da4a1d4d583c52c26df8a76c5688bedbf1c5e27f897b0e38ee1025081db8846985ddcf1c960be309c7b8c69ded43c4441579665a0d57a6b8117d1f3c00fddb6fb88fbba444f7984e5314a9d609f0d540c3cf28ed578cbaa4387f60d1bdc805043468ada47e46a3a2b69565e467e3b145019ed63b6f262563701fb660bda37aa1d71e2"}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xedd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9e7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xee6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xce, 0x4, "cfd65079d24442699ad60fd6179ee1a54cd926bfb321df8412df3015d52c396f58abd0583a69bffa2f461eaa0691bc40a1661385b1be75187bc508addc30b1bfbaeab24edde233693420e0571de97074501949d57c0cf9df8bff1918283daf1f7b9f5eaf98f1983a44c53d750aadd3f343dac84d2828cd2a82943dd5795a0fbf12c5f4c0ea1a5eecef1bd40ec9c90b18df5f22399c217fc07c2a4a0ba8f3bb74dffe1e608a963c3e41ceaebf0536c6da126497a4a54b42b8b1a4003d0a0d3810b9a19f198cbd7ec1ff89"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}]}, 0x524}}, 0x80) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r11, 0x0, 0x1, &(0x7f0000000c80)=0x7, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xec, r7, 0x201, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x684d82cd00977b47}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x88, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x70, 0x5, "8b14dccff317390b6280ac8a958621505147b9190ce0d7e12129b6c3fb18766e492d7331050f8d11c47dc985d23e87e915f1542d1bd251516e5e1265430e559a63b820d5e8b53978fc14b63b5c86003308b7c636bad6ed5bf6c3a39ba34c6396b67d6aa27835793f4e74e7c2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3df8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000e80), r12) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000ec0)={0x0, 0x80000001}, &(0x7f0000000f00)=0x8) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000f40)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x75, 'syz1\x00', @bcast, 0x80, 0x8, [@default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x84, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x84}}, 0x8000) 1.499296236s ago: executing program 0 (id=3323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0xd096, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000408000640ffffff0008000340000000083c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340000006"], 0xd0}}, 0x0) 1.432388986s ago: executing program 2 (id=3324): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xd}, {0xffff, 0xb}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x100000000}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x54, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000340)={0xc20, 0x8, 0x1, 0x1, 0x5, 0x0, [{0x4, 0xffffffff980d3c46, 0x9, '\x00', 0x302}, {0x0, 0x5, 0x4, '\x00', 0x80}, {0xff, 0x7, 0xa7, '\x00', 0x986}, {0x8, 0xfff, 0x7, '\x00', 0x401}, {0x5, 0x4, 0x9, '\x00', 0x1081}]}) 1.431332758s ago: executing program 3 (id=3325): syz_emit_ethernet(0x267, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x259, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @remote}, "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"}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffc3c, &(0x7f0000000540)={0x0}}, 0x0) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) sendmmsg$inet_sctp(r2, &(0x7f00000027c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=[@sndinfo={0x20, 0x84, 0x2, {0x1000, 0x20f, 0x3ff, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x5}}], 0x38, 0x4040044}], 0x1, 0x8080) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 64) r4 = socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) write(r4, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket(0x2a, 0x803, 0x801) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r7}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000100003ec942dc2b02005bc138dcc8813", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x73d, 0x1d}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.409388876s ago: executing program 1 (id=3326): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r6, 0x301, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0xfffffe1c, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x7, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x3, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}, {0x0, 0x0, 0xb}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0) 1.380731879s ago: executing program 3 (id=3327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208", 0x29}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="010000000800"}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000300)=0x1, 0x4) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, &(0x7f0000000900)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100000000372500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x2, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1d, &(0x7f0000000100)=""/29, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x112e9, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}}}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x2, 0x3, 0x7f) bind$inet(r6, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r6, 0x0, 0x0, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000005c0)='htcp', 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.260257602s ago: executing program 0 (id=3328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000000000005000000ef00000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x50) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000240)="fc60ecb394f7f2382f37d7edc9cce696092d83cb41c2e73ef3b1c69ab0663e14b4c9cedf8f230f429c740061966dd8ce47e6d9ce1c9cf18a7219c3f95eda287c95c5c4fb4e11c159756960f607702b964d5121b96465505af5b741ff35d3ab08f54488b934da81822ddefab9923bee18e569cb60d538f350faa876955077006a80c12d2603abf292e8473ea0967da3d7d446f90eae764b24cf9288b3eb2acaf0de4795a777f62e75f93542f27facbba74d0967bfd766894fc6ce322b77d51b9b7e6b1345ac", 0xc5) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket(0x2a, 0x2, 0x0) splice(r3, 0x0, r5, 0x0, 0x1100000000f336, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x20000047, 0x3, 0x1}, 0xffffffd3) close(0x3) r7 = socket$packet(0x11, 0x3, 0x300) socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r8, 0x5452, &(0x7f0000000180)=0x3) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 1.249583418s ago: executing program 3 (id=3329): r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x42000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x24040890) r7 = accept4(r0, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061182c000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r7, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000080)="12490540eae58b72d9dee3636805827b2f21423e0ad5ac0abe3fa00d91157b9331a01b351ef9ebd1e78d7458cabce696ccaca8db2d60ec8dfbc37f83016f424b76367bea295e17c6ddcf32b66825fe7706076e8208f74c8db230921e7bf2ab05adcb9dd46be9b10dae5d2a9135107e8f269bd2d33e94d77c381884984ab5a33ac608219e8f855d2811675c79d3d209c8ff684035cd3dad73c7ad81b5cc9dfc873a8b7c05", 0xa4}, {&(0x7f0000000140)="e9654772ec5e7b14715e94463790c49f12e955aac29eb5033c769fc3c78590758a6c2dea4f71e9f7e5416eb1612f2432af9ec6f4b4d6fd438e360c3c11d2eaeef5173d9610209165c9a0fbdd7f6ea03f6cfff367c2f1f34e773fd55ae807ba653d76c7abbaa38c5784001dd69beb04d79b77839fe987d2acb3e91471dc081caa36fcf4fd8b1f818960cbae3c03e3dbbbd4ee14086022cfa81a3786112073f9c6f2a2d4abca153f222f942a24e53d634c325b0ec3457cd90076632a524e9ac04ab7ded52f4d9f08e2cee929633d2b6c69eb13f65fcd78b6e99a98616fc6b09de1711c8507148dfafe0ef335aa9a1d461946", 0x11d}], 0x3, 0x0, 0x0, 0x2000843}], 0x1, 0x40800) recvmmsg$unix(r7, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000640)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x2, 0x40000000, 0x0) 1.204657941s ago: executing program 2 (id=3330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="140000000301010300000000000000"], 0x14}}, 0x20020084) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005f40)=ANY=[@ANYBLOB="14000000150a0103000000000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x400c054}, 0x44004080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000400000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f58d903e440c8c8a5f266085f3ee2a280c7326db1528b6ce03c43216e174d3bbef7aa274b98c9696af3c39709478b9620d3509287dedeb79aa7460c52055ebad", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf0900000000000026090600000003e7040000000600000018010000786c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000040)=0x1ff, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x4, 0x8, 0x8, 0x3, 0x0, 0x1, 0x3, 0x6, 0x4, 0x0, 0x6, 0xff, 0x3f4, 0xd1, 0xa4f9]}, &(0x7f0000000200)=0x100) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_proto_private(r6, 0x89e0, &(0x7f0000001080)) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8, 0x5}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000, 0x8000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d2, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x3, 0xb7, 0x5, 0xfffffffe}}, 0xe8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x11, &(0x7f0000000680)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff6}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.127732348s ago: executing program 0 (id=3331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@deltaction={0x158, 0x31, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xaf4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfce}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x855}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x158}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7fff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0x5}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 1.126833662s ago: executing program 1 (id=3332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4d0, 0x0, 0x0, 0x110, 0x3e8, 0x3e8, 0x3e8, 0x4, &(0x7f00000000c0), {[{{@arp={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0xffffff00, 0xb, 0x9, {@mac=@random="22b3457171b1", {[0x0, 0x0, 0xff, 0x0, 0x0, 0x1fe]}}, {@mac=@random="5950cc91ef44", {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x9a, 0x5, 0x2, 0x101, 0x4, 'team0\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @loopback, 0x8}}}, {{@arp={@multicast1, @broadcast, 0xffffffff, 0x56db590c54bca13d, 0xf, 0xd, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xf, 0x3ff, 0x4, 0x7, 0x4, 0xb, 'veth1_to_hsr\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x220}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:gpg_exec_t:s0\x00'}}}, {{@arp={@rand_addr=0x64010101, @remote, 0xb36b22653f7f0ee5, 0xff, 0xf, 0x2, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, {[0x0, 0xff, 0xff, 0xff]}}, 0x3, 0xb1e, 0x0, 0xd1, 0xf9f5, 0x3, 'veth0\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x41}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x80, 0x6, 0xbd31}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x14, r4, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x28, r6, 0x1, 0xfffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x403, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0xba01}, 0x810) 1.115904167s ago: executing program 4 (id=3333): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce", 0xb, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 942.710593ms ago: executing program 4 (id=3334): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x4, 0xca}]}, 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b1400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000018001280080001000200"/28, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) socket$nl_netfilter(0x10, 0x3, 0xc) 792.692526ms ago: executing program 0 (id=3335): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f00000001c0)=0x10000, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f00000001c0)=0x10000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r3}, 0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000003d80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRESHEX=r0, @ANYBLOB="25b076f61586e808b463d583707f9e404a332ad492f7a43fce2f79b1f8695743598acd541781498dded48094f9c8a8c3a658ead07e900c2a4274a37a77aebe6ece2fece681f07144343bbde450c3b3b42e2741972dc20bb163574ec302dd97227dd4eb9c4a0ee695f33c8e176ec1241e522ad7d714486d1c94f2e7a08041d7143360c52e35c53e90ee66a4c77dca6d2e4600fc4436d79b1206a011835e45d3fe53a29765f28ad6153946cf8d0718", @ANYBLOB="aa99844584196f1e65188edc037d52da8376a647afe532a613c72bd143564a1bb38826ac36530134dbe554c83d5d3da05ceaf0b55b2766ef5084dd2195", @ANYRES16], 0x144}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x4e21, @multicast1}}) socket(0x1e, 0x4, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xe, 0x56, 0x4, 0x80, 0x3, 0xd7b, 0x76a}, 0x1c) r7 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/142, 0x8e}], 0x3}, 0x20) (async) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/142, 0x8e}], 0x3}, 0x20) close(0x4) (async) close(0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26d}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed2", 0x6f}], 0x2}, 0x8000) (async) sendmsg$inet(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26d}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed2", 0x6f}], 0x2}, 0x8000) 791.852195ms ago: executing program 3 (id=3336): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = accept4(r0, &(0x7f0000000300)=@generic, &(0x7f0000000380)=0x80, 0x80800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x88, r2, 0x23c, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x42}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x54d0}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe5af}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xccc}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x21ca}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x40004) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002900000032000000ff15"], 0x28}, 0xc4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000e61266cb4bcba46414000100000000000000000802000080c7cff186764c8b7a78dbf4b916350f35fdf2271f8e9ba157c6e872061d70f575bef6e058a60d501105f32e9813963ef973baa9fe4981dad4fdc6aea7951b9dd070394f55c9071e1e1dc55ec2d07b52e34b6705112ebafb41691134ebc39a5665280801c6107dcf5a8d849731e7546861ed9963a75a4d95a860b727ef2ee1b7447e5fd3d4873eea26ec22ef4afd701b27398c388a6d784d1b4e118e7fb4bd9020515e54a08a145227f10bb16bc8210830deafd32e7c364efe0c9614"], 0x14}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x24000011) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x81f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 699.175319ms ago: executing program 3 (id=3337): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}]}, &(0x7f0000000300)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x100000000, 0x4) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18001650f62d0000c400000000000000000900000000000000000000000000000000e974095644f122225803e7596500fbb269455617a38c682fa9d4001ec4dc78b9a8c88914111ea5e958f543067e7b5eaeb30375005b0f42a06f7b2e256fecfa5ed9e3aa511a73af1fc91e4609c7ff90b3e6afaa380b06e52d39c1157316df3dd63405eef141bb000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24, r5}, 0x94) vmsplice(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="2287", 0x2}], 0x1, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x659d9fe4f07637a3}}, [@qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x0, 0x8, 0x7, 0x3, 0x9, 0xf, 0x7, 0x5}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000001000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090810000000000002040000", 0x58}], 0x1) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x4e8, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4b8, 0x2, [@TCA_ROUTE4_POLICE={0x4a4, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xc42}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x10000, 0x1ff, 0x6, 0x8, 0x3, 0xb, 0x4, 0x1, 0x8, 0x58, 0xd, 0xff, 0x3, 0x7, 0xf, 0x4, 0xfb, 0x5, 0x7, 0x5, 0x8, 0x8, 0x9, 0xffffffff, 0x0, 0x4000001, 0xc78, 0x86, 0x2, 0x10005, 0x6, 0x8, 0x3, 0x80, 0x8, 0x4, 0xfffff800, 0x1000, 0x8001, 0xda, 0xd8f7, 0x6, 0x4, 0x2, 0x6, 0x9, 0x6, 0x8001, 0x80000001, 0x1, 0x6, 0x8b, 0x0, 0x2, 0xffff, 0x7b0b, 0x3e8, 0xfffffffb, 0x0, 0xb, 0x6, 0x9, 0x9, 0x4, 0x1, 0x14, 0x1, 0x7, 0x6, 0x7, 0xfffffffa, 0x5, 0x401, 0x123, 0x9, 0xfffffff7, 0xb, 0xc6c7, 0xfff, 0x20004, 0xa, 0x8, 0x4, 0x3ec800, 0x5, 0x6, 0x2, 0x441e, 0x82d, 0x9, 0x9, 0xffff, 0x6, 0x6, 0x9, 0x6, 0x100000, 0xe787f09, 0x7, 0x7, 0x5, 0xe, 0x3, 0xffffffff, 0xffffffff, 0x9, 0x1, 0x8, 0x2, 0xc000000, 0x6, 0xff, 0x5, 0x8, 0x0, 0x8000000, 0xbc000000, 0x40, 0xffff, 0x7, 0x4, 0x4, 0x4, 0x5, 0xfffffffd, 0x3, 0x8, 0x2, 0x7, 0x4, 0x590b, 0x0, 0x5, 0x7f, 0x6, 0xff, 0x6, 0x8, 0x8, 0x8, 0x3, 0x1000, 0xffffffff, 0x80000000, 0x871, 0x1e, 0x83, 0x1, 0xe, 0xfffffe00, 0x631, 0x0, 0x400000, 0xc, 0x2, 0x4, 0x5, 0x4, 0x3, 0xffff2c3b, 0x1, 0x7, 0x80000001, 0x3, 0x85, 0x100, 0x53, 0x7, 0x8, 0x100, 0x6, 0x9, 0x4, 0xdb, 0x7fff, 0x1, 0x6, 0xb06, 0xe36, 0x3, 0x7, 0x10000, 0x3a, 0x670, 0xe8d4, 0x1, 0xdb, 0x3, 0x401, 0x4, 0x1, 0x5, 0x3, 0x81, 0x0, 0x6, 0x4, 0x7fff, 0x100, 0x4, 0x0, 0x4, 0x2, 0xfffffeff, 0x3, 0x5, 0x3, 0xa8bd, 0x4, 0x7fff, 0x1a19, 0x3, 0x4c42762b, 0x6, 0x3, 0x7, 0x0, 0x80000000, 0x1283, 0x5, 0xfffffffe, 0x6, 0x40, 0x0, 0x466, 0x5, 0x4, 0x443, 0x0, 0x8, 0x2, 0x9, 0x5, 0x1, 0x3, 0x1, 0x7, 0x800, 0x1ff, 0x0, 0xebed, 0x8ce5, 0xc9ad, 0x5, 0x9d1a, 0xb, 0x4, 0x9, 0x9, 0x821, 0x18, 0xb27, 0x6, 0x6, 0xe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x609}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0x8, 0x6, 0x0, {0x1, 0x0, 0x7, 0x6, 0xfffc, 0xffffffff}, {0x7, 0x1, 0x5, 0x13, 0x2, 0xfffffffb}, 0x2, 0x6, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x7ff, 0x7f, 0x3, {0x7, 0x2, 0xfff7, 0x1e2b, 0x4000, 0x2}, {0x6, 0x1, 0xa96e, 0x3, 0x4, 0x4}, 0x9, 0x8000, 0xffff}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYRESHEX=r4], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, 0x0, &(0x7f0000000040)) 648.944074ms ago: executing program 1 (id=3338): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x2c, 0x0, r2, 0x18}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000003c0)="ca34dd5bf0b3017707382f752066beb770d86d212d11c8f05703c14bbdea34dc14b812aaf335a43398bfd2a8d6a7ab17acbadd9826601c1c39edfec0a6db0a7055a70b128f2a41d48f9d9379d607fa832c9bf4a4fbf37cd904ef847190e74c0b1e889c1f1b3dc61927177b68d8f2ea62472ced2ca0fdad47343ac86c8395c3007bfd73d2f881a87687fe89c17002f42c83924a80a3d6bd3d7a96769a3861b97696e14b827e4a47ea0ebe430a495049272441d4f6efe474bfbbd1", 0xba}, {&(0x7f0000000480)="f7a0a18277ef9850b6ccc0a0b63b3f71779c2bb9e4ec3e610b67c7a06086127a04f98665585564f815a330a0dcb7bdd0f26d3c3c3ada28adb1fe1be944739707a0e5a2aa6c39f85a671db329685a0c0cfba6d164f85be8f895a86622e3e6fe99f4889d18b3e6f0a1f94d59957aaf2ad0aac3f68f4ae2e6d49d139f06d9a9599d07e55cf5c462b7b93e5195a3b6e251b20d37a845dcc4d3cb635979f226d937c6e8546b23116d5d5d76b3e492fd", 0xad}, {&(0x7f0000000540)="55ef666904b5590c6b972739dd6ec28c1a543d893aa55756881c5de439f5c4c51f739eabb5138e346a281bbde8c0987d697dc5ce9beb8a6adbb833eecdd1c993ad55a58cc42206f1bd292b23ea3711438d5bbd95ff9f529f7c83a16f31d288c2", 0x60}], 0x3, 0x0, 0x0, 0x2000c8d1}, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write(r6, &(0x7f0000003300)="ac", 0x1) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r7, 0x80286722, &(0x7f0000000180)={&(0x7f0000000080)=""/179, 0xb3, 0x7fffffff, 0x4}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES64=r5, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="184c2d0d7111021964d1ce8983429a9ed43d7af66558389ddd72d932152df422eb7be844912d270b9da5f464abdcaece23d321df60430d8280cc3c90a422ac6885edd8c2b33529d32aaaddfbd341e986f5313db0de17a8d92017f079867df452f1", @ANYRES64=r9], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 555.672073ms ago: executing program 4 (id=3339): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xfffffdb6}, 0x1, 0x0, 0x0, 0x20000040}, 0x200008c1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000003740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/39, 0x27}}], 0x1, 0x10000, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) (async) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) writev(r3, &(0x7f0000003700)=[{&(0x7f0000002380)="d3f5a8d1", 0x4}], 0x1) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 371.620528ms ago: executing program 2 (id=3340): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}, {0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x7, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xc, 0x18, 0xd, 0x1, 0xc, 0x2}}, {0x4}}]}]}, 0x68}}, 0x20000000) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0xa, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x13c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x10}, {0x6, 0x3}}, [@TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x1, 0x80, 0xa2, 0x1, 0x0, 0xa, 0x4}}, {0xc, 0x2, [0x8, 0x0, 0x4, 0x1]}}, {{0x1c, 0x1, {0x6, 0x7, 0x7, 0x34a, 0x0, 0xcce, 0xfffffffe, 0x6}}, {0x10, 0x2, [0x101, 0xd, 0x3, 0x9, 0x5012, 0x3]}}, {{0x1c, 0x1, {0x1, 0x6, 0x81, 0x7, 0x2, 0x2, 0x5, 0x2}}, {0x8, 0x2, [0x6674, 0x9]}}, {{0x1c, 0x1, {0x4, 0x9, 0x9f, 0x5, 0x2, 0x5, 0x401, 0x4}}, {0xc, 0x2, [0x7ff, 0x9, 0x800, 0x8]}}, {{0x1c, 0x1, {0xb, 0x0, 0x3, 0x1ff, 0x0, 0x7, 0xf, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x2, 0x8, 0x0, 0xfffe, 0x1, 0x1, 0x0, 0x7}}, {0x12, 0x2, [0x2, 0x3, 0x3c, 0x79, 0x1000, 0x1, 0x3ff]}}, {{0x1c, 0x1, {0xac, 0x3, 0x81, 0x40, 0x2, 0x7, 0xbb4}}, {0x4}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) getsockname(r3, &(0x7f0000000180)=@isdn, &(0x7f0000000100)=0x80) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 341.398942ms ago: executing program 4 (id=3341): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) 143.75463ms ago: executing program 4 (id=3342): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b0013000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) (async) unshare(0x42000000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x0) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r6, 0x6) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x41) (async) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000200)={0x4b, 0x400, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async) unshare(0x40000) 143.242468ms ago: executing program 2 (id=3343): r0 = socket$kcm(0x21, 0x2, 0x2) socketpair(0x2c, 0xa, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008042}, 0x20000080) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xd4, 0x8e, 0x3, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7, 0x7800, 0x2, 0x3}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = getpid() r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000040)="20a0", 0x2}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in=@empty}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) sendmmsg$unix(r3, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x4000044}}], 0x2, 0x2400c000) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002"], 0x30}, 0x0) 0s ago: executing program 2 (id=3344): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce", 0xb, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): 6585][T13608] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.886606][T13608] ? rcu_is_watching+0x15/0xb0 [ 249.886618][T13608] ? __nla_parse+0x40/0x60 [ 249.886634][T13608] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 249.886653][T13608] genl_family_rcv_msg_doit+0x22a/0x330 [ 249.886671][T13608] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 249.886691][T13608] ? bpf_lsm_capable+0x9/0x20 [ 249.886704][T13608] ? security_capable+0x7e/0x2c0 [ 249.886719][T13608] genl_rcv_msg+0x61c/0x7a0 [ 249.886737][T13608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.886750][T13608] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.886779][T13608] netlink_rcv_skb+0x232/0x4b0 [ 249.886799][T13608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.886822][T13608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.886838][T13608] ? genl_rcv+0x19/0x40 [ 249.886872][T13608] ? down_read+0x272/0x2e0 [ 249.886885][T13608] ? genl_rcv+0xd/0x40 [ 249.886899][T13608] genl_rcv+0x28/0x40 [ 249.886911][T13608] netlink_unicast+0x80f/0x9b0 [ 249.886926][T13608] ? __pfx_netlink_unicast+0x10/0x10 [ 249.886938][T13608] ? netlink_sendmsg+0x650/0xb40 [ 249.886948][T13608] ? skb_put+0x11b/0x210 [ 249.886964][T13608] netlink_sendmsg+0x813/0xb40 [ 249.886981][T13608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.886995][T13608] ? aa_sock_msg_perm+0xf1/0x1b0 [ 249.887007][T13608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.887019][T13608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.887030][T13608] ____sys_sendmsg+0xa68/0xad0 [ 249.887044][T13608] ? __might_fault+0xaf/0x130 [ 249.887065][T13608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.887083][T13608] ? import_iovec+0x73/0xa0 [ 249.887100][T13608] ___sys_sendmsg+0x2a5/0x360 [ 249.887113][T13608] ? __lock_acquire+0x6b5/0x2cf0 [ 249.887130][T13608] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.887147][T13608] ? futex_wait+0x29a/0x380 [ 249.887177][T13608] ? __fget_files+0x2a/0x420 [ 249.887188][T13608] ? __fget_files+0x3a0/0x420 [ 249.887205][T13608] __x64_sys_sendmsg+0x1bd/0x2a0 [ 249.887221][T13608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.887248][T13608] do_syscall_64+0xe2/0xf80 [ 249.887261][T13608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.887271][T13608] ? trace_irq_disable+0x37/0x100 [ 249.887280][T13608] ? clear_bhb_loop+0x60/0xb0 [ 249.887292][T13608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.887302][T13608] RIP: 0033:0x7f26fab9aeb9 [ 249.887312][T13608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.887321][T13608] RSP: 002b:00007f26fba65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.887333][T13608] RAX: ffffffffffffffda RBX: 00007f26fae15fa0 RCX: 00007f26fab9aeb9 [ 249.887342][T13608] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 249.887348][T13608] RBP: 00007f26fac08c1f R08: 0000000000000000 R09: 0000000000000000 [ 249.887355][T13608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.887361][T13608] R13: 00007f26fae16038 R14: 00007f26fae15fa0 R15: 00007ffe19ef5d98 [ 249.887378][T13608] [ 250.410344][T13616] batadv_slave_0: entered promiscuous mode [ 250.466880][T13616] netlink: 'syz.2.2003': attribute type 64 has an invalid length. [ 250.515653][T13612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2003'. [ 250.540565][T13611] batadv_slave_0: left promiscuous mode [ 250.879245][T13651] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 251.035640][T13022] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.047248][T13022] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.091146][T13022] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.116967][T13022] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.163568][T13669] netlink: 'syz.1.2016': attribute type 2 has an invalid length. [ 251.258787][T13676] lo speed is unknown, defaulting to 1000 [ 251.416745][T13687] netlink: 'syz.3.2021': attribute type 61 has an invalid length. [ 251.438520][T13687] netlink: 'syz.3.2021': attribute type 64 has an invalid length. [ 251.488761][T13692] netlink: 'syz.1.2022': attribute type 15 has an invalid length. [ 251.657415][T13691] lo speed is unknown, defaulting to 1000 [ 252.485726][T13732] netlink: 'syz.4.2034': attribute type 2 has an invalid length. [ 252.490524][T13733] __nla_validate_parse: 5 callbacks suppressed [ 252.490541][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 252.526381][T13732] ipt_ECN: cannot use operation on non-tcp rule [ 252.629633][T13732] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2034'. [ 252.878459][T13763] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 252.893959][T13754] netlink: set zone limit has 4 unknown bytes [ 253.722849][T13776] syzkaller0: entered promiscuous mode [ 253.728557][T13776] syzkaller0: entered allmulticast mode [ 253.886189][T13799] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 254.017048][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 254.111618][T13810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2048'. [ 255.375703][T13799] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 255.492362][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 255.514831][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'. [ 255.553204][T13818] veth5: entered allmulticast mode [ 255.611090][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2055'. [ 255.628712][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.654597][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'. [ 255.666844][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2056'. [ 255.698296][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2055'. [ 255.871512][T13843] netlink: 'syz.1.2059': attribute type 5 has an invalid length. [ 255.900772][T13843] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 256.162740][T13880] netlink: 'syz.4.2067': attribute type 4 has an invalid length. [ 256.193910][T13874] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:19997 [ 256.216477][T13874] pim6reg: entered allmulticast mode [ 256.495172][T13889] can: request_module (can-proto-0) failed. [ 257.142305][T13924] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 257.153395][T13925] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 257.236778][T13925] nbd1: detected capacity change from 0 to 127 [ 257.255263][ T5825] block nbd1: Receive control failed (result -32) [ 257.258713][ T5821] block nbd1: Send control failed (result -32) [ 257.297635][ T5821] block nbd1: Request send failed, requeueing [ 257.317248][T13936] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 257.352822][T13936] netlink: 'syz.0.2081': attribute type 2 has an invalid length. [ 257.352940][ T11] block nbd1: Dead connection, failed to find a fallback [ 257.369873][ T11] block nbd1: shutting down sockets [ 257.375372][ T11] blk_print_req_error: 138 callbacks suppressed [ 257.375392][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.393612][ T11] buffer_io_error: 138 callbacks suppressed [ 257.393629][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 257.415983][ T5821] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.430721][ T5821] Buffer I/O error on dev nbd1, logical block 1, async page read [ 257.440580][ T5821] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.472501][ T5821] Buffer I/O error on dev nbd1, logical block 2, async page read [ 257.488445][ T5821] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.499031][ T5821] Buffer I/O error on dev nbd1, logical block 3, async page read [ 257.509363][ T5821] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.518913][ T5821] Buffer I/O error on dev nbd1, logical block 0, async page read [ 257.526838][ T5821] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.536635][ T5821] Buffer I/O error on dev nbd1, logical block 1, async page read [ 257.544860][ T5821] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.554346][ T5821] Buffer I/O error on dev nbd1, logical block 2, async page read [ 257.566560][ T5821] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.574628][T13940] __nla_validate_parse: 10 callbacks suppressed [ 257.574644][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 257.590953][ T5821] Buffer I/O error on dev nbd1, logical block 3, async page read [ 257.613240][ T5821] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.641334][ T5821] Buffer I/O error on dev nbd1, logical block 0, async page read [ 257.659254][ T5821] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 257.682996][ T5821] Buffer I/O error on dev nbd1, logical block 1, async page read [ 257.692321][ T5821] ldm_validate_partition_table(): Disk read failed. [ 257.699794][ T5821] Dev nbd1: unable to read RDB block 0 [ 257.706376][ T5821] nbd1: unable to read partition table [ 257.719310][ T5821] ldm_validate_partition_table(): Disk read failed. [ 257.726526][ T5821] Dev nbd1: unable to read RDB block 0 [ 257.736448][ T5821] nbd1: unable to read partition table [ 257.829383][T13957] tipc: Enabled bearer , priority 0 [ 257.847950][T13957] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 257.866760][T13957] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 257.876328][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2088'. [ 257.900842][T13957] tipc: Resetting bearer [ 258.076465][T13963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2091'. [ 258.094521][T13963] geneve4: entered promiscuous mode [ 258.101611][ T1162] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.119292][ T1162] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.136937][ T1162] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.153020][ T1162] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.226041][T13965] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2092'. [ 258.256738][T13969] openvswitch: netlink: Duplicate key (type 21). [ 258.767149][T13989] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 258.878710][T13992] lo speed is unknown, defaulting to 1000 [ 258.894721][ T24] tipc: Node number set to 4217489040 [ 258.980295][T13997] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2099'. [ 259.119504][T14008] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 259.197667][T14018] netlink: 'syz.4.2108': attribute type 1 has an invalid length. [ 259.231571][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2109'. [ 259.272797][T14025] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2110'. [ 259.343538][T14026] bond7: entered promiscuous mode [ 259.350670][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2112'. [ 259.351415][T14026] bond7: entered allmulticast mode [ 259.365881][T14026] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.408910][T14018] 8021q: adding VLAN 0 to HW filter on device bond8 [ 259.419871][T14018] bond8: entered promiscuous mode [ 259.425470][T14018] bond8: entered allmulticast mode [ 259.431267][T14018] bond7: (slave bond8): Enslaving as a backup interface with a down link [ 261.301757][T14059] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 261.324547][T14059] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 261.436672][T14072] netlink: 'syz.0.2120': attribute type 1 has an invalid length. [ 261.444715][T14072] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2120'. [ 261.651970][T14072] lo speed is unknown, defaulting to 1000 [ 261.794620][T14086] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:0 [ 261.954820][T14101] x_tables: duplicate underflow at hook 1 [ 262.163290][T14069] syzkaller0: entered promiscuous mode [ 262.218197][T14069] syzkaller0: entered allmulticast mode [ 262.355178][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2128'. [ 262.388216][T14120] lo speed is unknown, defaulting to 1000 [ 262.397253][T14109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.457487][T14109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.860558][T14141] bridge0: entered allmulticast mode [ 262.961319][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 263.052209][T14144] xt_CT: No such helper "snmp_trap" [ 263.265232][ T5885] IPVS: starting estimator thread 0... [ 263.392045][T14162] IPVS: using max 38 ests per chain, 91200 per kthread [ 263.675241][T14180] tipc: Failed to remove unknown binding: 66,0,0/4217489040:3328248320/3328248321 [ 263.695496][T14180] tipc: Failed to remove unknown binding: 66,0,0/4217489040:3328248320/3328248321 [ 263.798360][T14187] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 263.817280][T14187] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2148'. [ 263.824577][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2147'. [ 263.835046][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'. [ 263.899523][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2148'. [ 263.961449][T14199] netlink: 'syz.4.2152': attribute type 32 has an invalid length. [ 263.971774][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 264.025868][T14199] bond9: option coupled_control: invalid value (115) [ 264.035386][T14199] bond9 (unregistering): Released all slaves [ 264.076976][T14203] bond7: option ad_user_port_key: invalid value (65535) [ 264.083943][T14203] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 264.120768][T14203] bond7 (unregistering): Released all slaves [ 264.265180][T14200] lo speed is unknown, defaulting to 1000 [ 264.278876][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2156'. [ 264.291215][T14216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2156'. [ 264.302160][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2157'. [ 264.332869][T14218] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 264.425932][T14222] netlink: 'syz.0.2158': attribute type 21 has an invalid length. [ 264.439003][T14222] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2158'. [ 264.465100][T14222] netlink: 'syz.0.2158': attribute type 5 has an invalid length. [ 264.484676][T14220] netlink: 'syz.0.2158': attribute type 4 has an invalid length. [ 264.513493][T14222] netlink: 'syz.0.2158': attribute type 6 has an invalid length. [ 264.566627][T14222] netlink: 'syz.0.2158': attribute type 4 has an invalid length. [ 264.619702][T14214] lo speed is unknown, defaulting to 1000 [ 264.924367][T14238] netlink: 'syz.2.2164': attribute type 1 has an invalid length. [ 265.127599][T14232] lo speed is unknown, defaulting to 1000 [ 265.463291][T14259] can: request_module (can-proto-4) failed. [ 265.581141][T14267] geneve3: entered promiscuous mode [ 265.600005][T14267] geneve3: entered allmulticast mode [ 265.618560][T14269] netlink: 'syz.3.2169': attribute type 1 has an invalid length. [ 267.371404][T14345] lo speed is unknown, defaulting to 1000 [ 267.443021][T14350] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 267.605583][T14367] openvswitch: netlink: Message has 6 unknown bytes. [ 267.926082][T14387] smc: adding net device hsr0 with user defined pnetid SYZ2 [ 267.954902][T14387] bond0: entered promiscuous mode [ 267.968225][T14387] bond0: left promiscuous mode [ 267.996025][T14387] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 268.527929][T14415] xt_cluster: node mask cannot exceed total number of nodes [ 268.593318][T14415] __nla_validate_parse: 20 callbacks suppressed [ 268.593344][T14415] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2210'. [ 268.645253][T14423] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 268.821619][T14440] validate_nla: 3 callbacks suppressed [ 268.821638][T14440] netlink: 'syz.2.2216': attribute type 6 has an invalid length. [ 269.041403][T14423] smc: adding net device hsr0 with user defined pnetid SYZ2 [ 269.049223][T14423] bond0: entered promiscuous mode [ 269.073971][T14423] bond0: left promiscuous mode [ 269.217701][T14423] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 269.236815][T14444] netlink: 'syz.2.2216': attribute type 3 has an invalid length. [ 269.245028][T14444] netlink: 'syz.2.2216': attribute type 3 has an invalid length. [ 269.447674][T14454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2220'. [ 269.501334][T14452] netlink: 'syz.3.2219': attribute type 39 has an invalid length. [ 269.787590][T14476] syzkaller0: entered promiscuous mode [ 269.793176][T14476] syzkaller0: entered allmulticast mode [ 269.870359][T14480] netlink: 'syz.4.2228': attribute type 23 has an invalid length. [ 270.400793][T14512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.098856][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 272.123491][T14533] lo speed is unknown, defaulting to 1000 [ 272.230053][T14546] netlink: 'syz.3.2245': attribute type 21 has an invalid length. [ 272.272939][T14549] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2247'. [ 272.295929][T14551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'. [ 272.320241][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2248'. [ 273.049200][T14576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.518497][T14584] lo speed is unknown, defaulting to 1000 [ 274.174811][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2270'. [ 274.255291][T14615] lo speed is unknown, defaulting to 1000 [ 274.644049][T14630] netlink: 'syz.1.2271': attribute type 2 has an invalid length. [ 274.749064][T14637] xt_CT: No such helper "syz0" [ 274.829864][T14644] netlink: 'syz.3.2275': attribute type 8 has an invalid length. [ 275.191503][T14652] pim6reg1: entered promiscuous mode [ 275.201128][T14652] pim6reg1: entered allmulticast mode [ 275.257730][T14660] lo speed is unknown, defaulting to 1000 [ 275.879054][T14678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2283'. [ 275.940987][T14678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2283'. [ 276.103934][T14678] bond7: option arp_interval: invalid value (18446744073709551615) [ 276.112640][T14678] bond7: option arp_interval: allowed values 0 - 2147483647 [ 276.128179][T14678] bond7 (unregistering): Released all slaves [ 276.494066][T14693] netlink: 'syz.1.2287': attribute type 3 has an invalid length. [ 276.514258][T14693] netlink: 'syz.1.2287': attribute type 3 has an invalid length. [ 276.538017][T14698] netlink: 'syz.3.2289': attribute type 3 has an invalid length. [ 276.548820][T14704] netlink: 'syz.1.2287': attribute type 23 has an invalid length. [ 276.625699][T14693] netlink: 'syz.1.2287': attribute type 30 has an invalid length. [ 276.648861][T14703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.690912][T14703] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2292'. [ 276.771284][ T30] audit: type=1800 audit(1769986420.843:3): pid=14712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2295" name="4" dev="tmpfs" ino=2129 res=0 errno=0 [ 276.843116][T14709] batman_adv: batadv0: Interface activated: dummy0 [ 276.904672][T14709] batadv0: mtu less than device minimum [ 276.932248][T14709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 276.944397][T14709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 276.956081][T14709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 276.967820][T14709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 276.979583][T14709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 276.991202][T14709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.002967][T14709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.014690][T14709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 277.200171][T14720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2298'. [ 277.495912][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2307'. [ 277.862231][T14762] netlink: 'syz.4.2310': attribute type 1 has an invalid length. [ 277.907963][T14770] xt_TCPMSS: Only works on TCP SYN packets [ 278.153679][T14789] netlink: 16860 bytes leftover after parsing attributes in process `syz.0.2318'. [ 278.667014][T14838] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2331'. [ 278.716121][T14839] netlink: 'syz.1.2331': attribute type 2 has an invalid length. [ 278.844954][T14847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2334'. [ 278.868812][T14847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2334'. [ 279.193762][T14863] __nla_validate_parse: 9 callbacks suppressed [ 279.193779][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 279.195760][T14873] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2342'. [ 279.205723][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 279.243181][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 279.256306][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 279.289698][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 279.337192][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 279.353292][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 279.363568][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 279.381050][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2339'. [ 279.422065][ T30] audit: type=1800 audit(1769986423.493:4): pid=14882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2345" name="memory.events" dev="tmpfs" ino=2182 res=0 errno=0 [ 279.669506][T14894] geneve1: Caught tx_queue_len zero misconfig [ 279.855336][T14906] netlink: 'syz.0.2351': attribute type 21 has an invalid length. [ 279.865197][T14906] netlink: 'syz.0.2351': attribute type 21 has an invalid length. [ 280.295134][T14933] netlink: 'syz.1.2357': attribute type 13 has an invalid length. [ 280.305983][T14933] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 280.549327][T14951] debugfs: 'netdev:syzkaller0' already exists in 'phy11' [ 281.086696][T14991] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 281.112424][T14991] team_slave_1: Caught tx_queue_len zero misconfig [ 281.680910][T15001] bond7: entered promiscuous mode [ 281.686554][T15001] bond7: entered allmulticast mode [ 281.692218][T15001] 8021q: adding VLAN 0 to HW filter on device bond7 [ 281.923283][T15012] bond8: entered promiscuous mode [ 281.941510][T15012] bond8: entered allmulticast mode [ 281.954298][T15012] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.000492][T15013] bond0: (slave dummy0): Releasing backup interface [ 282.020782][T15013] dummy0 (unregistering): left promiscuous mode [ 282.603804][T15027] bond4: option xmit_hash_policy: invalid value (10) [ 282.612607][T15027] bond4 (unregistering): Released all slaves [ 282.698876][T15035] syzkaller0: entered promiscuous mode [ 282.706761][T15035] syzkaller0: entered allmulticast mode [ 284.260389][T15058] geneve3: entered promiscuous mode [ 284.268219][T15067] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 284.421286][T13004] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.440435][T15056] lo speed is unknown, defaulting to 1000 [ 284.446998][T13004] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.466366][T13004] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.488297][T13004] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.523689][T15080] __nla_validate_parse: 458 callbacks suppressed [ 284.523706][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'. [ 284.561008][T15080] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2395'. [ 284.608826][T15086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2398'. [ 284.644172][T15080] bond0 (unregistering): left allmulticast mode [ 284.651020][T15080] bond_slave_0: left allmulticast mode [ 284.659480][T15080] bond_slave_1: left allmulticast mode [ 284.667374][T15080] bridge0: port 3(bond0) entered disabled state [ 284.700044][T15080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.713257][T15097] xt_hashlimit: size too large, truncated to 1048576 [ 284.722571][T15080] bond_slave_0: left promiscuous mode [ 284.909244][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2400'. [ 284.912573][T15106] netlink: 'syz.4.2397': attribute type 1 has an invalid length. [ 284.941986][T15106] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2397'. [ 285.132638][T15080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.142137][T15080] bond_slave_1: left promiscuous mode [ 285.150827][T15080] bond0 (unregistering): Released all slaves [ 285.269421][T15107] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.329290][T15107] bridge_slave_0 (unregistering): left allmulticast mode [ 285.336516][T15107] bridge_slave_0 (unregistering): left promiscuous mode [ 285.344119][T15107] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.601034][T15116] lo: Caught tx_queue_len zero misconfig [ 285.676519][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 285.821103][T15130] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2407'. [ 285.854196][T15130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2407'. [ 286.003881][T15134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2410'. [ 286.086536][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2411'. [ 286.991158][T15175] syzkaller0: entered promiscuous mode [ 287.013886][T15175] syzkaller0: entered allmulticast mode [ 287.052441][T15175] macsec1: entered promiscuous mode [ 287.115899][T15186] netlink: 'syz.0.2425': attribute type 16 has an invalid length. [ 287.143330][T15186] netlink: 'syz.0.2425': attribute type 17 has an invalid length. [ 287.165389][T15179] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.304174][T15186] net_ratelimit: 14 callbacks suppressed [ 287.304183][T15186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.386553][T15194] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 287.395136][T15194] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 287.420664][T15198] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 287.428244][T15198] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 287.508250][T15199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.719646][T15218] netlink: 'syz.1.2440': attribute type 13 has an invalid length. [ 290.747882][T15262] tipc: Enabling of bearer rejected, failed to enable media [ 290.780663][T15257] lo speed is unknown, defaulting to 1000 [ 290.821682][T15275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.106836][T15296] sctp: [Deprecated]: syz.0.2460 (pid 15296) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.106836][T15296] Use struct sctp_sack_info instead [ 291.222713][T15307] __nla_validate_parse: 7 callbacks suppressed [ 291.222733][T15307] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2462'. [ 291.246852][T15309] netlink: 'syz.1.2461': attribute type 21 has an invalid length. [ 291.255082][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 291.286780][T15311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2464'. [ 291.355537][T15309] netlink: 'syz.1.2461': attribute type 21 has an invalid length. [ 291.366100][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 291.380954][T15308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2463'. [ 291.397656][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2464'. [ 291.837147][T15341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.844478][T15341] IPv6: NLM_F_CREATE should be set when creating new route [ 291.851708][T15341] IPv6: NLM_F_CREATE should be set when creating new route [ 291.909953][T15346] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 291.925077][T15341] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.942185][T15346] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 292.011846][T15353] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2474'. [ 292.234712][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'. [ 292.267004][T15368] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 292.281558][T15372] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2478'. [ 292.335542][T15375] FAULT_INJECTION: forcing a failure. [ 292.335542][T15375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.349784][T15375] CPU: 0 UID: 0 PID: 15375 Comm: syz.3.2482 Not tainted syzkaller #0 PREEMPT(full) [ 292.349810][T15375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 292.349821][T15375] Call Trace: [ 292.349827][T15375] [ 292.349835][T15375] dump_stack_lvl+0xe8/0x150 [ 292.349862][T15375] should_fail_ex+0x412/0x560 [ 292.349887][T15375] _copy_from_iter+0x1d3/0x1670 [ 292.349918][T15375] ? rcu_is_watching+0x15/0xb0 [ 292.349935][T15375] ? __pfx__copy_from_iter+0x10/0x10 [ 292.349954][T15375] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 292.349983][T15375] ? netlink_sendmsg+0x650/0xb40 [ 292.349999][T15375] ? skb_put+0x11b/0x210 [ 292.350030][T15375] netlink_sendmsg+0x6c0/0xb40 [ 292.350055][T15375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.350076][T15375] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.350097][T15375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.350116][T15375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.350134][T15375] ____sys_sendmsg+0xa68/0xad0 [ 292.350155][T15375] ? __might_fault+0xaf/0x130 [ 292.350183][T15375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.350213][T15375] ? import_iovec+0x73/0xa0 [ 292.350242][T15375] ___sys_sendmsg+0x2a5/0x360 [ 292.350262][T15375] ? __lock_acquire+0x6b5/0x2cf0 [ 292.350291][T15375] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.350346][T15375] ? __fget_files+0x2a/0x420 [ 292.350363][T15375] ? __fget_files+0x3a0/0x420 [ 292.350390][T15375] __x64_sys_sendmsg+0x1bd/0x2a0 [ 292.350415][T15375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.350446][T15375] ? __pfx_ksys_write+0x10/0x10 [ 292.350480][T15375] do_syscall_64+0xe2/0xf80 [ 292.350500][T15375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.350514][T15375] ? trace_irq_disable+0x37/0x100 [ 292.350529][T15375] ? clear_bhb_loop+0x60/0xb0 [ 292.350549][T15375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.350565][T15375] RIP: 0033:0x7f779cb9aeb9 [ 292.350581][T15375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.350596][T15375] RSP: 002b:00007f779dad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.350615][T15375] RAX: ffffffffffffffda RBX: 00007f779ce15fa0 RCX: 00007f779cb9aeb9 [ 292.350628][T15375] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 292.350639][T15375] RBP: 00007f779dad6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.350650][T15375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.350660][T15375] R13: 00007f779ce16038 R14: 00007f779ce15fa0 R15: 00007fffc5d131f8 [ 292.350688][T15375] [ 292.606285][T15368] bond9 (unregistering): Released all slaves [ 292.712925][T15380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2483'. [ 292.771163][T15382] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 292.784531][T15380] netlink: 'syz.3.2483': attribute type 13 has an invalid length. [ 293.145930][T15404] FAULT_INJECTION: forcing a failure. [ 293.145930][T15404] name failslab, interval 1, probability 0, space 0, times 0 [ 293.160403][T15401] bond0: entered promiscuous mode [ 293.171230][T15401] bond0: left promiscuous mode [ 293.180184][T15404] CPU: 1 UID: 0 PID: 15404 Comm: syz.0.2493 Not tainted syzkaller #0 PREEMPT(full) [ 293.180206][T15404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 293.180216][T15404] Call Trace: [ 293.180223][T15404] [ 293.180230][T15404] dump_stack_lvl+0xe8/0x150 [ 293.180256][T15404] should_fail_ex+0x412/0x560 [ 293.180280][T15404] should_failslab+0xa8/0x100 [ 293.180301][T15404] kmem_cache_alloc_noprof+0x87/0x6e0 [ 293.180321][T15404] ? __netlink_lookup+0xc6/0x8b0 [ 293.180341][T15404] ? skb_clone+0x212/0x3a0 [ 293.180366][T15404] skb_clone+0x212/0x3a0 [ 293.180389][T15404] __netlink_deliver_tap+0x404/0x850 [ 293.180419][T15404] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.180438][T15404] netlink_deliver_tap+0x19c/0x1b0 [ 293.180457][T15404] netlink_unicast+0x7e3/0x9b0 [ 293.180481][T15404] ? __pfx_netlink_unicast+0x10/0x10 [ 293.180499][T15404] ? netlink_sendmsg+0x650/0xb40 [ 293.180516][T15404] ? skb_put+0x11b/0x210 [ 293.180540][T15404] netlink_sendmsg+0x813/0xb40 [ 293.180567][T15404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.180588][T15404] ? aa_sock_msg_perm+0xf1/0x1b0 [ 293.180609][T15404] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.180630][T15404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.180647][T15404] ____sys_sendmsg+0xa68/0xad0 [ 293.180669][T15404] ? __might_fault+0xaf/0x130 [ 293.180706][T15404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.180736][T15404] ? import_iovec+0x73/0xa0 [ 293.180763][T15404] ___sys_sendmsg+0x2a5/0x360 [ 293.180781][T15404] ? __lock_acquire+0x6b5/0x2cf0 [ 293.180805][T15404] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.180857][T15404] ? __fget_files+0x2a/0x420 [ 293.180874][T15404] ? __fget_files+0x3a0/0x420 [ 293.180899][T15404] __x64_sys_sendmsg+0x1bd/0x2a0 [ 293.180922][T15404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.180950][T15404] ? __pfx_ksys_write+0x10/0x10 [ 293.180984][T15404] do_syscall_64+0xe2/0xf80 [ 293.181003][T15404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.181019][T15404] ? trace_irq_disable+0x37/0x100 [ 293.181033][T15404] ? clear_bhb_loop+0x60/0xb0 [ 293.181055][T15404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.181071][T15404] RIP: 0033:0x7f26fab9aeb9 [ 293.181086][T15404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.181099][T15404] RSP: 002b:00007f26fba65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.181117][T15404] RAX: ffffffffffffffda RBX: 00007f26fae15fa0 RCX: 00007f26fab9aeb9 [ 293.181129][T15404] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 293.181140][T15404] RBP: 00007f26fba65090 R08: 0000000000000000 R09: 0000000000000000 [ 293.181150][T15404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.181159][T15404] R13: 00007f26fae16038 R14: 00007f26fae15fa0 R15: 00007ffe19ef5d98 [ 293.181186][T15404] [ 293.773333][T15429] lo speed is unknown, defaulting to 1000 [ 294.258129][T15440] lo speed is unknown, defaulting to 1000 [ 294.751366][T15477] netlink: 'syz.4.2509': attribute type 1 has an invalid length. [ 294.766852][T15477] nbd: error processing sock list [ 294.906618][T15477] tipc: Enabled bearer , priority 0 [ 295.123322][T15481] tipc: Resetting bearer [ 295.166129][T15476] tipc: Disabling bearer [ 295.678532][T15523] netlink: 'syz.0.2519': attribute type 2 has an invalid length. [ 296.388051][T15570] __nla_validate_parse: 15 callbacks suppressed [ 296.388070][T15570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2530'. [ 296.465242][T15575] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 296.774185][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 296.951625][T15606] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 297.662839][T15636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2548'. [ 298.761996][T15684] syzkaller0: entered promiscuous mode [ 298.779597][T15684] syzkaller0: entered allmulticast mode [ 298.989873][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 299.013920][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 299.381245][T15712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2560'. [ 301.347231][T15708] batadv_slave_1: entered promiscuous mode [ 301.364536][T15710] batadv_slave_1: left promiscuous mode [ 301.403640][T15716] netlink: 'syz.3.2561': attribute type 3 has an invalid length. [ 301.480892][T15695] lo speed is unknown, defaulting to 1000 [ 301.640604][T15735] netlink: 'syz.2.2562': attribute type 11 has an invalid length. [ 301.684638][T15735] netlink: 'syz.2.2562': attribute type 11 has an invalid length. [ 301.724890][T15735] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2562'. [ 301.943425][T15748] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2567'. [ 302.339662][T15754] netlink: 212176 bytes leftover after parsing attributes in process `syz.3.2569'. [ 302.660929][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 302.681288][T15773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2573'. [ 302.912349][T15790] netlink: 'syz.1.2577': attribute type 21 has an invalid length. [ 302.926212][T15790] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2577'. [ 302.948001][T15790] netlink: 'syz.1.2577': attribute type 5 has an invalid length. [ 302.976466][T15790] netlink: 'syz.1.2577': attribute type 6 has an invalid length. [ 302.977914][T15791] netlink: 'syz.1.2577': attribute type 4 has an invalid length. [ 302.987988][T15790] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2577'. [ 303.006551][T15798] netlink: 'syz.1.2577': attribute type 4 has an invalid length. [ 303.044529][T15797] x_tables: duplicate underflow at hook 1 [ 303.073215][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'. [ 303.099506][T15790] netlink: 'syz.1.2577': attribute type 4 has an invalid length. [ 303.134614][T15791] netlink: 'syz.1.2577': attribute type 4 has an invalid length. [ 303.291551][T15808] lo speed is unknown, defaulting to 1000 [ 303.301252][T15808] lo speed is unknown, defaulting to 1000 [ 303.309211][T15808] lo speed is unknown, defaulting to 1000 [ 303.332023][T15808] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 303.358063][T15816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2581'. [ 303.374102][T15808] lo speed is unknown, defaulting to 1000 [ 303.390565][T15808] lo speed is unknown, defaulting to 1000 [ 303.418867][T15808] lo speed is unknown, defaulting to 1000 [ 303.446941][T15808] lo speed is unknown, defaulting to 1000 [ 303.457822][T15808] lo speed is unknown, defaulting to 1000 [ 303.613528][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'. [ 303.834780][T15835] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 303.901233][T15835] bond0 (unregistering): Released all slaves [ 303.996264][T15840] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 304.277347][T15858] syzkaller1: entered promiscuous mode [ 304.284179][T15858] syzkaller1: entered allmulticast mode [ 304.522249][T15872] netlink: 'syz.3.2597': attribute type 16 has an invalid length. [ 304.544729][T15872] netlink: 'syz.3.2597': attribute type 17 has an invalid length. [ 304.662896][T15872] syz_tun: left promiscuous mode [ 304.705935][T15872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.713460][T15872] dummy0: left promiscuous mode [ 304.720881][T15872] dummy0: left allmulticast mode [ 304.727941][T15884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.750920][T15872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.887462][T13023] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled [ 317.067588][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.361313][T15945] tipc: Enabling of bearer rejected, already enabled [ 354.386862][T15943] __nla_validate_parse: 12 callbacks suppressed [ 354.386880][T15943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2610'. [ 354.432136][T15945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2611'. [ 354.580917][T15955] validate_nla: 1 callbacks suppressed [ 354.580937][T15955] netlink: 'syz.3.2613': attribute type 1 has an invalid length. [ 354.597547][T15955] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2613'. [ 354.615947][T15965] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2614'. [ 354.621405][T15955] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2613'. [ 354.662592][T15955] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2613'. [ 354.805146][T15974] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2618'. [ 354.806048][T15975] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2618'. [ 355.002524][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'. [ 355.015338][T15987] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 355.271736][T16001] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2627'. [ 355.364682][T16004] netlink: 'syz.4.2629': attribute type 10 has an invalid length. [ 355.383394][T16010] nbd: must specify at least one socket [ 355.447304][T16004] netlink: 'syz.4.2629': attribute type 10 has an invalid length. [ 355.592585][T16027] xt_TCPMSS: Only works on TCP SYN packets [ 355.705383][T16033] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!!bíÓÙ.˜>„nS‡#^‘§' [ 355.724955][T16033] CPU: 0 UID: 0 PID: 16033 Comm: syz.2.2640 Not tainted syzkaller #0 PREEMPT(full) [ 355.724979][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 355.724989][T16033] Call Trace: [ 355.724996][T16033] [ 355.725004][T16033] dump_stack_lvl+0xe8/0x150 [ 355.725032][T16033] sysfs_warn_dup+0x8e/0xa0 [ 355.725055][T16033] sysfs_do_create_link_sd+0xc0/0x110 [ 355.725078][T16033] device_add_class_symlinks+0x1cf/0x240 [ 355.725105][T16033] device_add+0x475/0xb70 [ 355.725131][T16033] wiphy_register+0x1d6c/0x2d50 [ 355.725167][T16033] ? __pfx_wiphy_register+0x10/0x10 [ 355.725186][T16033] ? __pfx_netdev_run_todo+0x10/0x10 [ 355.725208][T16033] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 355.725237][T16033] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 355.725265][T16033] ieee80211_register_hw+0x34d2/0x4150 [ 355.725281][T16033] ? __lock_acquire+0x6b5/0x2cf0 [ 355.725313][T16033] ? ieee80211_register_hw+0x1491/0x4150 [ 355.725337][T16033] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 355.725368][T16033] ? __hrtimer_setup+0x181/0x200 [ 355.725382][T16033] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 355.725408][T16033] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 355.725456][T16033] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 355.725474][T16033] ? kstrndup+0xbf/0x160 [ 355.725501][T16033] hwsim_new_radio_nl+0xf35/0x1bd0 [ 355.725542][T16033] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 355.725574][T16033] ? rcu_is_watching+0x15/0xb0 [ 355.725592][T16033] ? __nla_parse+0x40/0x60 [ 355.725626][T16033] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 355.725658][T16033] genl_family_rcv_msg_doit+0x22a/0x330 [ 355.725686][T16033] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 355.725719][T16033] ? bpf_lsm_capable+0x9/0x20 [ 355.725740][T16033] ? security_capable+0x7e/0x2c0 [ 355.725765][T16033] genl_rcv_msg+0x61c/0x7a0 [ 355.725794][T16033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.725814][T16033] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 355.725849][T16033] netlink_rcv_skb+0x232/0x4b0 [ 355.725869][T16033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.725892][T16033] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.725909][T16033] ? genl_rcv+0x19/0x40 [ 355.725947][T16033] ? down_read+0x272/0x2e0 [ 355.725967][T16033] ? genl_rcv+0xd/0x40 [ 355.725990][T16033] genl_rcv+0x28/0x40 [ 355.726009][T16033] netlink_unicast+0x80f/0x9b0 [ 355.726035][T16033] ? __pfx_netlink_unicast+0x10/0x10 [ 355.726054][T16033] ? netlink_sendmsg+0x650/0xb40 [ 355.726070][T16033] ? skb_put+0x11b/0x210 [ 355.726095][T16033] netlink_sendmsg+0x813/0xb40 [ 355.726124][T16033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.726145][T16033] ? aa_sock_msg_perm+0xf1/0x1b0 [ 355.726166][T16033] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.726184][T16033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.726201][T16033] ____sys_sendmsg+0xa68/0xad0 [ 355.726222][T16033] ? __might_fault+0xaf/0x130 [ 355.726251][T16033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.726281][T16033] ? import_iovec+0x73/0xa0 [ 355.726306][T16033] ___sys_sendmsg+0x2a5/0x360 [ 355.726325][T16033] ? __lock_acquire+0x6b5/0x2cf0 [ 355.726351][T16033] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.726380][T16033] ? futex_wait+0x29a/0x380 [ 355.726425][T16033] ? __fget_files+0x2a/0x420 [ 355.726443][T16033] ? __fget_files+0x3a0/0x420 [ 355.726471][T16033] __x64_sys_sendmsg+0x1bd/0x2a0 [ 355.726496][T16033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.726527][T16033] ? rcu_is_watching+0x15/0xb0 [ 355.726556][T16033] do_syscall_64+0xe2/0xf80 [ 355.726575][T16033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.726591][T16033] ? trace_irq_disable+0x37/0x100 [ 355.726607][T16033] ? clear_bhb_loop+0x60/0xb0 [ 355.726634][T16033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.726650][T16033] RIP: 0033:0x7fd81899aeb9 [ 355.726667][T16033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.726679][T16033] RSP: 002b:00007fd819805028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.726698][T16033] RAX: ffffffffffffffda RBX: 00007fd818c15fa0 RCX: 00007fd81899aeb9 [ 355.726710][T16033] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 355.726720][T16033] RBP: 00007fd818a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 355.726730][T16033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.726740][T16033] R13: 00007fd818c16038 R14: 00007fd818c15fa0 R15: 00007ffee4982828 [ 355.726769][T16033] [ 356.207086][T16035] dvmrp6: entered allmulticast mode [ 356.309915][T16044] vxcan0: entered allmulticast mode [ 356.413815][T16044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.421136][T16044] IPv6: NLM_F_CREATE should be set when creating new route [ 356.428634][T16044] IPv6: NLM_F_CREATE should be set when creating new route [ 356.507238][T16053] netlink: 'syz.3.2646': attribute type 1 has an invalid length. [ 356.780524][T16074] netlink: 'syz.3.2651': attribute type 1 has an invalid length. [ 356.909019][T16081] netlink: 'syz.2.2654': attribute type 1 has an invalid length. [ 357.109957][T16089] 8021q: adding VLAN 0 to HW filter on device bond8 [ 357.131559][T16089] bond7: (slave bond8): making interface the new active one [ 357.174497][T16089] bond7: (slave bond8): Enslaving as an active interface with an up link [ 357.257796][T16081] bond7: (slave gretap0): Enslaving as a backup interface with an up link [ 357.305431][T16100] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.325328][T16089] vlan3: entered promiscuous mode [ 357.340741][T16089] bond7: entered promiscuous mode [ 357.349363][T16089] bond8: entered promiscuous mode [ 357.903599][T16135] netlink: 'syz.0.2667': attribute type 2 has an invalid length. [ 357.933859][T16135] netlink: 'syz.0.2667': attribute type 4 has an invalid length. [ 357.977706][T16145] netlink: 'syz.2.2668': attribute type 30 has an invalid length. [ 358.052787][T16145] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 358.091819][T16145] bond9 (unregistering): Released all slaves [ 358.143482][T16153] syzkaller0: entered promiscuous mode [ 358.169642][T16153] syzkaller0: entered allmulticast mode [ 358.183759][ T30] audit: type=1804 audit(1769986502.243:5): pid=16155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2670" name="cgroup.controllers" dev="tmpfs" ino=2729 res=1 errno=0 [ 358.219438][T16129] netlink: 'syz.1.2665': attribute type 12 has an invalid length. [ 358.219571][ T30] audit: type=1800 audit(1769986502.243:6): pid=16155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2670" name="cgroup.controllers" dev="tmpfs" ino=2729 res=0 errno=0 [ 358.279255][ T30] audit: type=1800 audit(1769986502.243:7): pid=16155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2670" name="cgroup.controllers" dev="tmpfs" ino=2729 res=0 errno=0 [ 358.388257][T16164] pim6reg: entered allmulticast mode [ 358.453276][T16170] nbd: must specify a size in bytes for the device [ 358.572484][T16179] lo speed is unknown, defaulting to 1000 [ 358.747797][T16190] veth1_macvtap: left promiscuous mode [ 358.903559][T16190] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 358.935643][T16179] lo speed is unknown, defaulting to 1000 [ 358.947084][T16200] syzkaller1: entered promiscuous mode [ 358.952581][T16200] syzkaller1: entered allmulticast mode [ 359.173921][T16212] xt_hashlimit: size too large, truncated to 1048576 [ 359.342840][T16223] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 359.455502][T16219] __nla_validate_parse: 17 callbacks suppressed [ 359.455521][T16219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2687'. [ 359.643493][T16236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2688'. [ 359.895399][T16259] netlink: 'syz.3.2691': attribute type 11 has an invalid length. [ 359.929594][T16259] netlink: 'syz.3.2691': attribute type 11 has an invalid length. [ 359.937788][T16259] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2691'. [ 360.083426][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2695'. [ 360.236776][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2698'. [ 360.314685][ T5485] veth1_macvtap: entered promiscuous mode [ 360.482390][T16281] geneve2: left promiscuous mode [ 360.488791][T16281] ip6erspan0: left allmulticast mode [ 360.496153][T16281] bond1: left promiscuous mode [ 360.500934][T16281] bond1: left allmulticast mode [ 360.506479][T16281] macvtap1: left promiscuous mode [ 360.511892][T16281] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 360.519934][T16281] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 360.528660][T16281] ipvlan2: left promiscuous mode [ 360.540861][T16281] veth5: left allmulticast mode [ 360.546489][T16281] geneve3: left promiscuous mode [ 360.551426][T16281] geneve3: left allmulticast mode [ 360.599920][T13004] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.626956][T16288] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 360.672897][T13004] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.683343][T13004] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.697702][T16292] syzkaller0: entered promiscuous mode [ 360.713162][T16292] syzkaller0: entered allmulticast mode [ 360.736891][T13004] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.816585][T16296] lo speed is unknown, defaulting to 1000 [ 361.288809][T16318] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 361.310055][T16318] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 361.390047][T16323] validate_nla: 4 callbacks suppressed [ 361.390066][T16323] netlink: 'syz.2.2709': attribute type 1 has an invalid length. [ 361.694822][T16296] lo speed is unknown, defaulting to 1000 [ 362.771048][T16385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2722'. [ 362.780323][T16390] netlink: 'syz.3.2723': attribute type 1 has an invalid length. [ 362.797623][T16387] team0: entered promiscuous mode [ 362.808164][T16387] team_slave_0: entered promiscuous mode [ 362.824251][T16387] team_slave_1: entered promiscuous mode [ 362.825651][T16390] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2723'. [ 362.835417][T16387] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.856435][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 362.872265][T16387] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 362.920059][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2722'. [ 362.963172][T16385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.978316][T16407] netlink: 'syz.0.2720': attribute type 3 has an invalid length. [ 362.999107][T16407] netlink: 'syz.0.2720': attribute type 3 has an invalid length. [ 363.107981][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2720'. [ 363.122769][T16396] bond0: entered allmulticast mode [ 363.460016][T16431] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 363.505126][T16431] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 363.578570][T16437] bond9 (unregistering): Released all slaves [ 363.614940][T16432] pim6reg1: entered promiscuous mode [ 363.620418][T16432] pim6reg1: entered allmulticast mode [ 363.641107][T16445] bridge0: port 3(batadv2) entered blocking state [ 363.655049][T16445] bridge0: port 3(batadv2) entered disabled state [ 363.671055][T16445] batadv2: entered allmulticast mode [ 363.724154][T16445] batadv2: entered promiscuous mode [ 364.145840][T13022] batman_adv: batadv2: IGMP Querier appeared [ 364.151884][T13022] batman_adv: batadv2: MLD Querier appeared [ 364.404182][T16515] sit0: entered promiscuous mode [ 364.467526][T16519] __nla_validate_parse: 9 callbacks suppressed [ 364.467546][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2755'. [ 364.602774][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2757'. [ 364.603857][T16525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2756'. [ 364.613017][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2757'. [ 364.846542][T16545] netlink: 'syz.3.2761': attribute type 10 has an invalid length. [ 364.854516][T16545] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2761'. [ 364.909979][T16547] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2763'. [ 365.326683][T16554] netlink: 'syz.0.2765': attribute type 29 has an invalid length. [ 365.421304][T16565] netlink: 'syz.2.2767': attribute type 13 has an invalid length. [ 365.559733][T16569] netlink: 'syz.1.2768': attribute type 1 has an invalid length. [ 365.575826][T16569] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2768'. [ 365.757417][T16590] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2777'. [ 365.770335][T16591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2775'. [ 365.788944][T16586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2776'. [ 365.841544][T16586] syz_tun: entered allmulticast mode [ 365.849857][T16584] syz_tun: left allmulticast mode [ 366.015708][T16599] ipvlan2: entered promiscuous mode [ 366.596518][T16623] netlink: 'syz.0.2786': attribute type 2 has an invalid length. [ 366.671127][T16628] bond0: (slave rose0): Releasing backup interface [ 367.135358][T16647] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 367.611088][T16673] netlink: 'syz.2.2800': attribute type 5 has an invalid length. [ 367.646510][T16672] netlink: 'syz.4.2801': attribute type 62 has an invalid length. [ 367.734021][T16682] vlan0: entered promiscuous mode [ 367.748091][T16682] geneve1: entered promiscuous mode [ 367.767757][T16682] vlan0: entered allmulticast mode [ 367.789894][T16682] geneve1: entered allmulticast mode [ 367.937015][T16698] 8021q: VLANs not supported on ipvlan1 [ 368.044677][T16709] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 368.610833][T16747] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 368.804975][T16742] Cannot find del_set index 2 as target [ 368.834844][T16756] netlink: 'syz.1.2820': attribute type 2 has an invalid length. [ 368.858050][T16756] netlink: 'syz.1.2820': attribute type 23 has an invalid length. [ 368.983407][T16763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.310100][T16789] netlink: 'syz.0.2827': attribute type 21 has an invalid length. [ 369.699886][T16820] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 370.035315][T16845] __nla_validate_parse: 18 callbacks suppressed [ 370.035335][T16845] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2839'. [ 370.114627][T16845] netlink: 'syz.0.2839': attribute type 9 has an invalid length. [ 370.136242][T16845] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2839'. [ 370.147388][T16851] batadv0: mtu less than device minimum [ 370.175862][T16845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2839'. [ 370.217551][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.227820][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.236574][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.245301][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.253894][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.314901][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.328075][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.340584][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.352079][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.366069][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.445081][T16858] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2842'. [ 370.550415][T16852] lo speed is unknown, defaulting to 1000 [ 370.675024][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 370.689050][T16869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.873745][T16877] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2846'. [ 370.977028][T16852] lo speed is unknown, defaulting to 1000 [ 370.977056][T16863] lo speed is unknown, defaulting to 1000 [ 371.027841][T16871] netlink: 'syz.2.2846': attribute type 322 has an invalid length. [ 371.309223][T16852] chnl_net:caif_netlink_parms(): no params data found [ 371.330441][T16892] ..0ªî{X¹¦: left allmulticast mode [ 371.337245][T16892] vcan0: left promiscuous mode [ 371.342222][T16892] vcan0: left allmulticast mode [ 371.358289][T16892] gtp0: left promiscuous mode [ 371.363066][T16892] gtp0: left allmulticast mode [ 371.368886][T16892] ip6gre1: left promiscuous mode [ 371.373907][T16892] ip6gre1: left allmulticast mode [ 371.380746][T16892] bond1: left promiscuous mode [ 371.386722][T16892] bond1: left allmulticast mode [ 371.393989][T16892] ip6erspan0: left promiscuous mode [ 371.399640][T16892] ip6erspan0: left allmulticast mode [ 371.406248][T16901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2853'. [ 371.417190][T16892] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 371.436017][T16892] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 371.587013][T16863] lo speed is unknown, defaulting to 1000 [ 371.689940][T16910] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2854'. [ 371.819631][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2856'. [ 371.868195][T16852] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.876460][T16852] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.883689][T16852] bridge_slave_0: entered allmulticast mode [ 371.892504][T16852] bridge_slave_0: entered promiscuous mode [ 371.899843][T16924] netlink: 'syz.2.2858': attribute type 16 has an invalid length. [ 371.908398][T16924] netlink: 'syz.2.2858': attribute type 17 has an invalid length. [ 371.916663][T16924] netlink: 'syz.2.2858': attribute type 27 has an invalid length. [ 371.941514][T16852] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.955278][T16852] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.962618][T16852] bridge_slave_1: entered allmulticast mode [ 371.973054][T16852] bridge_slave_1: entered promiscuous mode [ 372.142466][T16852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.162753][T16852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.247409][T16852] team0: Port device team_slave_0 added [ 372.257812][T16852] team0: Port device team_slave_1 added [ 372.302356][T16852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.309943][T16852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.336809][T16852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.350259][T16852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.357388][T16852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.407648][T16852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.424796][ T5819] Bluetooth: hci5: command tx timeout [ 372.538606][T16852] hsr_slave_0: entered promiscuous mode [ 372.555468][T16852] hsr_slave_1: entered promiscuous mode [ 372.566047][T16852] debugfs: 'hsr0' already exists in 'hsr' [ 372.571875][T16852] Cannot create hsr debugfs directory [ 372.580907][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2861'. [ 372.668561][T16935] netlink: set zone limit has 4 unknown bytes [ 372.892207][T16852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.903002][T16852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.914113][T16852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 372.997477][T16946] tipc: Enabling of bearer rejected, failed to enable media [ 373.035911][T16852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.046666][T16852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.057318][T16852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 373.101165][T16958] tipc: Enabled bearer , priority 0 [ 373.108796][T16958] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 373.117310][T16958] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 373.152255][T16852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.162749][T16852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.173571][T16852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 373.215511][T16958] tipc: Resetting bearer [ 373.267028][T16852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.279243][T16852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.291142][T16852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 373.567896][T16852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.596657][T16852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.641138][T16852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.679099][T16982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.691278][T16852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.692679][T16982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.713621][T16985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.846229][T16852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.889933][T16852] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.924240][T11922] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.931516][T11922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.949986][T13004] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.957178][T13004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.407033][T16852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.447791][T17037] lo speed is unknown, defaulting to 1000 [ 374.499888][T16852] veth0_vlan: entered promiscuous mode [ 374.506792][ T5819] Bluetooth: hci5: command tx timeout [ 374.537162][T17046] x_tables: unsorted underflow at hook 2 [ 374.541182][T16852] veth1_vlan: entered promiscuous mode [ 374.568955][T17046] netlink: 'syz.4.2888': attribute type 1 has an invalid length. [ 374.636912][T16852] veth0_macvtap: entered promiscuous mode [ 374.659079][T16852] veth1_macvtap: entered promiscuous mode [ 374.698033][T16852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.721916][T16852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.771741][T13004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.793542][T13004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.021059][T13004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.039453][T13004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.085463][T17037] lo speed is unknown, defaulting to 1000 [ 375.123499][T17039] netlink: 'syz.3.2886': attribute type 2 has an invalid length. [ 375.258079][T17059] lo speed is unknown, defaulting to 1000 [ 375.471194][T13004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.502614][T13004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.600786][T11917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.620404][T11917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.809466][T17089] __nla_validate_parse: 2 callbacks suppressed [ 375.809485][T17089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2840'. [ 375.832426][T17059] lo speed is unknown, defaulting to 1000 [ 375.833861][T17089] gre0: entered allmulticast mode [ 376.270746][T17108] lo speed is unknown, defaulting to 1000 [ 376.336408][T17113] netlink: 'syz.1.2901': attribute type 1 has an invalid length. [ 376.571119][T17108] lo speed is unknown, defaulting to 1000 [ 376.604670][ T5819] Bluetooth: hci5: command tx timeout [ 377.203928][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2906'. [ 377.218541][T17130] lo speed is unknown, defaulting to 1000 [ 377.606750][T17130] lo speed is unknown, defaulting to 1000 [ 377.622480][T17148] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2912'. [ 377.768931][T17156] netlink: zone id is out of range [ 377.782604][T17156] netlink: zone id is out of range [ 377.795673][T17156] netlink: zone id is out of range [ 377.800900][T17156] netlink: zone id is out of range [ 377.813866][T17156] netlink: zone id is out of range [ 377.832786][T17156] netlink: zone id is out of range [ 377.842894][T17156] netlink: zone id is out of range [ 377.873991][T17156] netlink: zone id is out of range [ 377.879672][T17156] netlink: zone id is out of range [ 377.886873][T17156] netlink: zone id is out of range [ 377.936625][T17163] syzkaller1: entered promiscuous mode [ 377.949316][T17163] syzkaller1: entered allmulticast mode [ 378.061578][T17169] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2918'. [ 378.664596][ T5819] Bluetooth: hci5: command tx timeout [ 378.781906][T17200] netlink: 'syz.0.2925': attribute type 21 has an invalid length. [ 378.816523][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 378.836296][T17200] netlink: 'syz.0.2925': attribute type 21 has an invalid length. [ 378.863005][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 379.040494][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2926'. [ 379.056785][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'. [ 379.362404][T17224] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 786440, id = 0 [ 379.362991][T17220] IPVS: stopping backup sync thread 17224 ... [ 379.383866][T17222] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2930'. [ 379.569378][T17232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2933'. [ 379.640576][T17236] bridge0: Caught tx_queue_len zero misconfig [ 380.052382][T17260] bond0: invalid ARP target 0.0.0.0 specified for addition [ 380.060294][T17260] bond0: option arp_ip_target: invalid value (0) [ 380.189000][T17267] tipc: Enabling of bearer rejected, already enabled [ 380.198913][T17267] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 380.207226][T17267] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 380.217030][T17267] tipc: Resetting bearer [ 380.231844][T17267] tipc: Resetting bearer [ 380.530882][T17285] netlink: 'syz.0.2948': attribute type 15 has an invalid length. [ 380.638631][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.648987][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.657854][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.668039][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.677327][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.833371][T17291] lo speed is unknown, defaulting to 1000 [ 381.041578][T17294] lo speed is unknown, defaulting to 1000 [ 381.049185][T17291] lo speed is unknown, defaulting to 1000 [ 381.437946][T17291] chnl_net:caif_netlink_parms(): no params data found [ 381.648654][T17291] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.673026][T17291] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.694733][T17291] bridge_slave_0: entered allmulticast mode [ 381.702459][T17291] bridge_slave_0: entered promiscuous mode [ 381.775263][T17291] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.790293][T17291] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.813682][T17291] bridge_slave_1: entered allmulticast mode [ 381.881138][T17291] bridge_slave_1: entered promiscuous mode [ 381.908645][T17294] lo speed is unknown, defaulting to 1000 [ 381.977679][T17291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.017519][T17291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.160462][T17291] team0: Port device team_slave_0 added [ 382.176851][T17338] vlan2: entered promiscuous mode [ 382.181923][T17338] geneve1: entered promiscuous mode [ 382.189662][T17338] vlan2: entered allmulticast mode [ 382.195183][T17338] geneve1: entered allmulticast mode [ 382.222831][T17291] team0: Port device team_slave_1 added [ 382.232096][T17336] netlink: 'syz.4.2961': attribute type 1 has an invalid length. [ 382.306291][T17291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.345343][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.404456][T17291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.494170][T17291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.537477][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.609033][T17291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.700353][T17291] hsr_slave_0: entered promiscuous mode [ 382.709489][T17291] hsr_slave_1: entered promiscuous mode [ 382.716534][T17291] debugfs: 'hsr0' already exists in 'hsr' [ 382.722816][T17291] Cannot create hsr debugfs directory [ 382.747000][ T5825] Bluetooth: hci1: command tx timeout [ 382.837180][T17357] __nla_validate_parse: 4 callbacks suppressed [ 382.837198][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2966'. [ 382.880166][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2966'. [ 382.924467][T17357] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2966'. [ 382.982144][T17357] vlan3: entered allmulticast mode [ 383.183066][T17364] lo speed is unknown, defaulting to 1000 [ 383.189786][T17365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.215939][T17365] net_ratelimit: 5 callbacks suppressed [ 383.215958][T17365] batadv0: mtu less than device minimum [ 383.246240][T17365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.258254][T17365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.269954][T17365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.281618][T17365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.293271][T17365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.304873][T17365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.316512][T17365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.328178][T17365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.339846][T17365] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 383.510635][T17371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2969'. [ 383.538668][T17365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.620025][T17369] erspan0: entered promiscuous mode [ 383.649000][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 383.849562][T17364] lo speed is unknown, defaulting to 1000 [ 384.105079][T17385] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 384.429602][T17401] macvlan4: entered promiscuous mode [ 384.470581][T17397] tipc: Enabling of bearer rejected, already enabled [ 384.646806][T17409] netlink: 'syz.1.2979': attribute type 4 has an invalid length. [ 384.683287][T17405] syzkaller1: entered promiscuous mode [ 384.690364][T17405] syzkaller1: entered allmulticast mode [ 384.707748][ T8125] IPVS: starting estimator thread 0... [ 384.718364][T17409] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000 [ 384.761876][T17291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.805660][T17417] IPVS: using max 30 ests per chain, 72000 per kthread [ 384.828764][ T5825] Bluetooth: hci1: command tx timeout [ 384.855860][T17291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.877500][T17291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.901496][T17291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 385.180569][T17439] netlink: 744 bytes leftover after parsing attributes in process `syz.1.2987'. [ 385.210615][T17291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.268038][T17291] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.293285][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.300520][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.395226][T17447] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2986'. [ 385.417766][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.424991][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.979661][T17465] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2990'. [ 386.012557][T17291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.052923][T17474] netlink: 'syz.0.2992': attribute type 1 has an invalid length. [ 386.198061][T17474] 8021q: adding VLAN 0 to HW filter on device bond10 [ 386.241111][T17291] veth0_vlan: entered promiscuous mode [ 386.562810][T17482] bond10: (slave ip6gretap1): making interface the new active one [ 386.572182][T17482] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 386.658287][T17474] veth7: entered promiscuous mode [ 386.667559][T17474] bond10: (slave veth7): Enslaving as an active interface with a down link [ 386.677370][T17489] erspan0: left promiscuous mode [ 386.684695][T17489] erspan0: entered allmulticast mode [ 386.709287][T17489] bond10: (slave erspan0): Enslaving as an active interface with an up link [ 386.779967][T17491] bond10: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 386.906531][ T5825] Bluetooth: hci1: command tx timeout [ 386.927932][T17291] veth1_vlan: entered promiscuous mode [ 386.939766][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2997'. [ 387.097439][T17291] veth0_macvtap: entered promiscuous mode [ 387.117128][T17291] veth1_macvtap: entered promiscuous mode [ 387.168553][T17291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.206172][T17291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.238550][T13025] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.275406][T11051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.297588][T11051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.323626][T11051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.453909][T13025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.479374][T13025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.511418][T17521] netlink: 268 bytes leftover after parsing attributes in process `syz.0.3002'. [ 387.563541][T13009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.585263][T13009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.641624][T17521] lo speed is unknown, defaulting to 1000 [ 388.012941][T17540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3005'. [ 388.270987][T17543] veth3: entered promiscuous mode [ 388.298794][T17539] erspan0: entered allmulticast mode [ 388.316619][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.326144][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.334675][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.346454][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.354226][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.516018][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3007'. [ 388.564776][T17548] nbd: illegal input index -1113835520 [ 388.579759][T17545] lo speed is unknown, defaulting to 1000 [ 388.590352][T17521] lo speed is unknown, defaulting to 1000 [ 388.990043][ T5819] Bluetooth: hci1: command tx timeout [ 389.594495][T17545] lo speed is unknown, defaulting to 1000 [ 389.736944][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3016'. [ 389.974056][T17592] batadv0: entered promiscuous mode [ 389.982321][T17573] lec:lec_atm_close: lec0: Shut down! [ 390.021266][T17592] net_ratelimit: 10 callbacks suppressed [ 390.021284][T17592] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 390.159104][T17597] lo speed is unknown, defaulting to 1000 [ 390.425098][ T5819] Bluetooth: hci0: command tx timeout [ 390.562324][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3021'. [ 390.858598][T17599] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 390.874057][T17625] netlink: 'syz.0.3023': attribute type 10 has an invalid length. [ 390.897241][T17545] chnl_net:caif_netlink_parms(): no params data found [ 391.093189][T17644] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 312 [ 391.638599][ T1162] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 391.810167][T13009] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 391.921633][ T1162] batman_adv: batadv0: Removing interface: gretap1 [ 391.967653][ T1162] bond2 (unregistering): (slave gretap2): Releasing active interface [ 392.496671][ T1162] bond0 (unregistering): left promiscuous mode [ 392.502886][ T1162] bond_slave_0: left promiscuous mode [ 392.508943][ T5819] Bluetooth: hci0: command tx timeout [ 392.515166][ T1162] bond_slave_1: left promiscuous mode [ 392.520735][ T1162] bond1 (unregistering): left promiscuous mode [ 392.531127][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.541979][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.552517][ T1162] bond0 (unregistering): (slave bond1): Releasing backup interface [ 392.562703][ T1162] bond0 (unregistering): Released all slaves [ 392.701260][ T1162] bond1 (unregistering): Released all slaves [ 392.795473][ T1162] bond2 (unregistering): Released all slaves [ 392.898822][ T1162] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 392.908940][ T1162] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 392.918550][ T1162] bond3 (unregistering): Released all slaves [ 392.930843][ T1162] bond4 (unregistering): Released all slaves [ 392.943697][ T1162] bond5 (unregistering): Released all slaves [ 393.048613][ T1162] bond6 (unregistering): Released all slaves [ 393.147765][ T1162] bond7 (unregistering): (slave bond8): Releasing backup interface [ 393.156660][ T1162] bond8 (unregistering): left promiscuous mode [ 393.162817][ T1162] bond8 (unregistering): left allmulticast mode [ 393.169398][ T1162] bond7 (unregistering): Released all slaves [ 393.268656][ T1162] bond8 (unregistering): Released all slaves [ 393.280077][T17597] lo speed is unknown, defaulting to 1000 [ 393.479576][ T1162] tipc: Disabling bearer [ 393.508171][ T1162] tipc: Left network mode [ 393.570344][T17683] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 393.591940][T17683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.605591][T17683] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 393.613968][T17683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.624835][T17683] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 393.633074][T17683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.633231][T17689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3032'. [ 393.645065][T17683] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 393.656084][T17684] geneve2: entered promiscuous mode [ 393.662837][T17683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.671441][T17545] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.674633][T17683] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 393.688015][T17545] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.688238][T17545] bridge_slave_0: entered allmulticast mode [ 393.703862][T17545] bridge_slave_0: entered promiscuous mode [ 393.739073][T17683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.764907][T17683] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 393.793278][T17683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.843520][T17545] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.852144][T17683] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 393.867128][T17545] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.884871][T17545] bridge_slave_1: entered allmulticast mode [ 393.899128][T17683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.905521][T17545] bridge_slave_1: entered promiscuous mode [ 393.910599][T17683] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 393.922066][T17683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.944263][T17683] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 394.099297][T17545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.213628][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3037'. [ 394.298013][T17545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.493911][T17719] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3039'. [ 394.594547][ T5819] Bluetooth: hci0: command tx timeout [ 394.624834][T17545] team0: Port device team_slave_0 added [ 394.671020][T17545] team0: Port device team_slave_1 added [ 394.692191][T17725] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3040'. [ 394.765361][T17545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.772345][T17545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.807185][T17545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.839992][T17545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.848837][T17545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.924092][T17545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.150109][T17735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3044'. [ 395.179500][T17545] hsr_slave_0: entered promiscuous mode [ 395.198251][T17545] hsr_slave_1: entered promiscuous mode [ 395.213539][T17545] debugfs: 'hsr0' already exists in 'hsr' [ 395.219534][T17545] Cannot create hsr debugfs directory [ 395.272273][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3045'. [ 395.332959][T17738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.434088][T17738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.455438][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3047'. [ 395.498633][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3047'. [ 395.537057][ T1162] batadv0: left promiscuous mode [ 395.550964][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.585792][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.698693][ T1162] pim6reg (unregistering): left allmulticast mode [ 395.780225][T17770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3048'. [ 395.793082][T17770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'. [ 396.368576][ T1162] team_slave_1 (unregistering): left promiscuous mode [ 396.379612][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 396.416229][ T1162] team_slave_0 (unregistering): left promiscuous mode [ 396.425610][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 396.640995][T13021] smc: removing ib device syz0 [ 396.667890][ T5819] Bluetooth: hci0: command tx timeout [ 397.577881][T17817] validate_nla: 25 callbacks suppressed [ 397.577901][T17817] netlink: 'syz.1.3058': attribute type 1 has an invalid length. [ 397.645056][T17808] lo speed is unknown, defaulting to 1000 [ 397.651038][T17816] dummy0: entered promiscuous mode [ 397.662758][T17816] dummy0: entered allmulticast mode [ 397.684926][T17818] erspan1: entered allmulticast mode [ 397.876019][T17817] bond1: entered promiscuous mode [ 397.881075][T17817] bond1: entered allmulticast mode [ 397.915657][T17817] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.663340][T17844] tipc: Enabling of bearer rejected, already enabled [ 399.092576][T17863] bond9: option lacp_active: invalid value (8) [ 399.133195][T17863] bond9 (unregistering): Released all slaves [ 399.297514][T17874] sctp: [Deprecated]: syz.1.3069 (pid 17874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.297514][T17874] Use struct sctp_sack_info instead [ 399.627866][T17545] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 399.658460][T17889] __nla_validate_parse: 3 callbacks suppressed [ 399.658478][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3074'. [ 399.690527][T17545] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 399.742889][T17545] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 399.763475][T17907] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 399.776025][T17545] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 399.790696][T17906] tipc: Started in network mode [ 399.797901][T17906] tipc: Node identity ba762615f4b4, cluster identity 4711 [ 399.807175][T17906] tipc: Enabled bearer , priority 0 [ 399.848675][T17913] syzkaller0: entered promiscuous mode [ 399.854192][T17913] syzkaller0: entered allmulticast mode [ 399.913702][T17907] bond2 (unregistering): Released all slaves [ 399.982100][T17894] tipc: Resetting bearer [ 400.035646][T17894] tipc: Disabling bearer [ 400.239385][T17939] nbd: must specify a size in bytes for the device [ 400.258087][ T5485] lec:lec_start_xmit: lec0:No lecd attached [ 400.293089][T17545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.319154][T17946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3084'. [ 400.385787][T17545] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.418896][T11051] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.426097][T11051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.464304][T17949] lo speed is unknown, defaulting to 1000 [ 400.490600][T17951] syzkaller0: entered promiscuous mode [ 400.497382][T17951] syzkaller0: entered allmulticast mode [ 400.506790][T11051] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.513938][T11051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.546110][T17956] geneve3: entered promiscuous mode [ 400.551370][T17956] geneve3: entered allmulticast mode [ 400.583132][T17953] lo speed is unknown, defaulting to 1000 [ 400.617616][T13023] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 400.629499][T13023] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 400.650465][T13023] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 400.661763][T13023] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 400.810516][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 400.989762][T17960] IPVS: Unknown mcast interface: vcan0 [ 401.014325][ T1162] IPVS: stop unused estimator thread 0... [ 401.514015][T17545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.629086][T17998] xt_CT: No such helper "snmp_trap" [ 401.678747][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 401.714570][T18011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3095'. [ 402.155053][T18029] netlink: 184020 bytes leftover after parsing attributes in process `syz.0.3099'. [ 402.190061][T17545] veth0_vlan: entered promiscuous mode [ 402.234088][T17545] veth1_vlan: entered promiscuous mode [ 402.346971][T17545] veth0_macvtap: entered promiscuous mode [ 402.377823][T17998] sctp: [Deprecated]: syz.3.3092 (pid 17998) Use of int in maxseg socket option. [ 402.377823][T17998] Use struct sctp_assoc_value instead [ 402.419754][T17545] veth1_macvtap: entered promiscuous mode [ 402.492733][T17545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.533808][T17545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.637681][T13021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.673251][T13021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.743713][T13021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.783939][T18054] net_ratelimit: 25 callbacks suppressed [ 402.783959][T18054] netlink: zone id is out of range [ 402.811590][T13021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.820181][T18055] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 786440, id = 0 [ 402.840471][T18054] netlink: zone id is out of range [ 402.889661][T18054] netlink: zone id is out of range [ 402.913861][T18054] netlink: zone id is out of range [ 402.923382][T18061] IPVS: stopping backup sync thread 18055 ... [ 402.929599][T18054] netlink: zone id is out of range [ 402.934886][T18054] netlink: zone id is out of range [ 402.940470][T18054] netlink: zone id is out of range [ 402.946585][T18054] netlink: zone id is out of range [ 402.986890][T18054] netlink: zone id is out of range [ 402.992051][T18054] netlink: zone id is out of range [ 403.010650][T18061] Cannot find set identified by id 0 to match [ 403.040897][T11051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.060012][T11051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.119674][T13009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.135081][T13009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.161570][T18071] tipc: Enabling of bearer rejected, already enabled [ 403.547688][T18101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3111'. [ 403.579878][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3111'. [ 403.702240][T18109] tc_dump_action: action bad kind [ 403.989410][T18116] syzkaller0: entered promiscuous mode [ 403.995309][T18116] syzkaller0: entered allmulticast mode [ 404.070306][T18111] lo speed is unknown, defaulting to 1000 [ 404.765608][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 404.788839][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.805554][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.815039][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.823759][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 405.081486][T18137] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3117'. [ 405.794611][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms [ 405.803031][ C0] lec:lec_tx_timeout: lec0 [ 405.809089][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 405.879885][T18158] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3120'. [ 406.907454][ T5825] Bluetooth: hci3: command tx timeout [ 407.347189][T18163] tipc: Enabling of bearer rejected, failed to enable media [ 407.512649][T18129] lo speed is unknown, defaulting to 1000 [ 407.848159][T18180] GUP no longer grows the stack in syz.1.3122 (18180): 200000008000-200000800000 (200000007000) [ 407.867752][T18180] CPU: 0 UID: 0 PID: 18180 Comm: syz.1.3122 Not tainted syzkaller #0 PREEMPT(full) [ 407.867808][T18180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 407.867838][T18180] Call Trace: [ 407.867846][T18180] [ 407.867854][T18180] dump_stack_lvl+0xe8/0x150 [ 407.867886][T18180] __get_user_pages+0x2453/0x29d0 [ 407.867935][T18180] ? __gup_longterm_locked+0xc4e/0x1630 [ 407.867961][T18180] ? down_read_killable+0x1bb/0x340 [ 407.867994][T18180] __gup_longterm_locked+0xdcf/0x1630 [ 407.868033][T18180] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 407.868067][T18180] gup_fast_fallback+0x1d82/0x22e0 [ 407.868132][T18180] ? __pfx_gup_fast_fallback+0x10/0x10 [ 407.868166][T18180] ? pin_user_pages_fast+0x4d/0xb0 [ 407.868193][T18180] iov_iter_extract_pages+0x37b/0x5f0 [ 407.868233][T18180] extract_iter_to_sg+0xe62/0x2520 [ 407.868273][T18180] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 407.868316][T18180] ? __asan_memset+0x22/0x50 [ 407.868345][T18180] af_alg_get_rsgl+0x436/0x810 [ 407.868391][T18180] skcipher_recvmsg+0x3a3/0x1140 [ 407.868444][T18180] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 407.868470][T18180] ? __local_bh_enable_ip+0xd0/0x130 [ 407.868488][T18180] ? skcipher_check_key+0x173/0x1e0 [ 407.868506][T18180] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 407.868536][T18180] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 407.868566][T18180] sock_recvmsg+0x22c/0x270 [ 407.868595][T18180] __sys_recvfrom+0x240/0x3c0 [ 407.868626][T18180] ? __pfx___sys_recvfrom+0x10/0x10 [ 407.868648][T18180] ? do_futex+0x395/0x420 [ 407.868706][T18180] ? rcu_is_watching+0x15/0xb0 [ 407.868732][T18180] __x64_sys_recvfrom+0xde/0x100 [ 407.868761][T18180] do_syscall_64+0xe2/0xf80 [ 407.868785][T18180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.868803][T18180] ? trace_irq_disable+0x37/0x100 [ 407.868821][T18180] ? clear_bhb_loop+0x60/0xb0 [ 407.868844][T18180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.868868][T18180] RIP: 0033:0x7fc5ced9aeb9 [ 407.868886][T18180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.868903][T18180] RSP: 002b:00007fc5cfb8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 407.868924][T18180] RAX: ffffffffffffffda RBX: 00007fc5cf016090 RCX: 00007fc5ced9aeb9 [ 407.868939][T18180] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000005 [ 407.868953][T18180] RBP: 00007fc5cee08c1f R08: 0000000000000000 R09: ffffffffffffffb5 [ 407.868968][T18180] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 407.868980][T18180] R13: 00007fc5cf016128 R14: 00007fc5cf016090 R15: 00007fff6b3f5bb8 [ 407.869013][T18180] [ 408.274855][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3124'. [ 408.375906][T18190] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3124'. [ 408.690018][T18129] chnl_net:caif_netlink_parms(): no params data found [ 408.876007][T18129] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.883251][T18129] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.890949][T18129] bridge_slave_0: entered allmulticast mode [ 408.901231][T18129] bridge_slave_0: entered promiscuous mode [ 408.910393][T18129] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.918038][T18129] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.926018][T18129] bridge_slave_1: entered allmulticast mode [ 408.933714][T18129] bridge_slave_1: entered promiscuous mode [ 408.984629][ T5825] Bluetooth: hci3: command tx timeout [ 409.003564][T18217] netlink: 181328 bytes leftover after parsing attributes in process `syz.1.3129'. [ 409.008668][T18129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.106195][T18129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.211574][T18225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3130'. [ 409.237325][T18129] team0: Port device team_slave_0 added [ 409.273964][T18129] team0: Port device team_slave_1 added [ 409.383628][T18129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.391223][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.477356][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'. [ 409.492189][T18129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.532276][T18241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3131'. [ 409.557123][T18231] lo speed is unknown, defaulting to 1000 [ 409.563687][T18129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.578271][T18129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.644438][T18129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.686412][T18247] xt_l2tp: wrong L2TP version: 0 [ 409.964212][T18129] hsr_slave_0: entered promiscuous mode [ 409.976223][T18258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3138'. [ 409.977112][T18129] hsr_slave_1: entered promiscuous mode [ 409.988916][T18258] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3138'. [ 409.993355][T18129] debugfs: 'hsr0' already exists in 'hsr' [ 410.008419][T18129] Cannot create hsr debugfs directory [ 410.156702][T18245] syzkaller0: entered promiscuous mode [ 410.168885][T18245] syzkaller0: entered allmulticast mode [ 410.824627][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 410.832702][ C0] lec:lec_tx_timeout: lec0 [ 410.838021][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 411.064567][ T5825] Bluetooth: hci3: command tx timeout [ 412.434862][T18266] vlan3: entered promiscuous mode [ 412.440968][T18266] bridge0: entered promiscuous mode [ 412.614272][T18316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3142'. [ 412.981814][T18340] Bluetooth: MGMT ver 1.23 [ 413.018789][T18129] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.074766][T18129] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19976 - 0 [ 413.133992][T18342] 8021q: VLANs not supported on caif0 [ 413.149368][ T5825] Bluetooth: hci3: command tx timeout [ 413.167829][T18357] netlink: 'syz.1.3151': attribute type 1 has an invalid length. [ 413.215517][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3152'. [ 413.219364][T18357] bond3: entered promiscuous mode [ 413.274963][T18357] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.290357][T18367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.300989][T18358] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 413.329620][T18129] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.349596][T18129] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19976 - 0 [ 413.427385][T18129] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.429003][T18374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3156'. [ 413.454501][T18129] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19976 - 0 [ 413.520202][T18129] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.530386][T18129] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19976 - 0 [ 413.572275][T18383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3158'. [ 413.599873][T18383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'. [ 413.722319][T18387] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 413.737942][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3161'. [ 413.767890][T18129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 413.788158][T18387] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 413.806917][T18387] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 413.828596][T18129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 413.887662][T18129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 413.937423][T18129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.004242][T18407] syzkaller0: entered promiscuous mode [ 414.010256][T18407] syzkaller0: entered allmulticast mode [ 414.177730][T18129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.320496][T18129] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.334449][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.341648][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.370871][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.378083][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.680249][T18129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.861417][T18459] team_slave_0: entered promiscuous mode [ 414.867568][T18459] team_slave_1: entered promiscuous mode [ 414.896394][T18465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3176'. [ 414.897157][T18459] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 414.946622][T18466] vxcan0: entered promiscuous mode [ 414.962635][T18466] vxcan1: entered promiscuous mode [ 414.983040][T18453] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 415.023482][T18469] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20000 [ 415.060636][T18129] veth0_vlan: entered promiscuous mode [ 415.083637][T18129] veth1_vlan: entered promiscuous mode [ 415.143664][T18129] veth0_macvtap: entered promiscuous mode [ 415.159319][T18129] veth1_macvtap: entered promiscuous mode [ 415.181038][T18129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.199085][T18476] syzkaller0: entered promiscuous mode [ 415.205517][T18476] syzkaller0: entered allmulticast mode [ 415.216782][T18129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.302166][T13013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.325151][T13013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.333906][T13013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.357805][T13013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.487273][T18492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3184'. [ 415.535696][T13013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.555131][T13013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.630923][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.669950][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.830311][T18506] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 415.844594][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 415.852827][ C0] lec:lec_tx_timeout: lec0 [ 415.857828][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 415.873853][T18506] net_ratelimit: 4 callbacks suppressed [ 415.873869][T18506] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 415.973944][T18515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3116'. [ 415.975593][T18519] sctp: [Deprecated]: syz.4.3190 (pid 18519) Use of int in max_burst socket option. [ 415.975593][T18519] Use struct sctp_assoc_value instead [ 416.063410][T18521] sctp: [Deprecated]: syz.3.3189 (pid 18521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.063410][T18521] Use struct sctp_sack_info instead [ 416.233627][T18533] lo speed is unknown, defaulting to 1000 [ 416.255699][T18535] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3193'. [ 416.621624][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.636511][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.645457][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.653487][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.662266][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.972538][T18552] lo speed is unknown, defaulting to 1000 [ 417.003001][T18551] lo speed is unknown, defaulting to 1000 [ 417.149736][T18582] tipc: Started in network mode [ 417.154605][ T5819] Bluetooth: hci3: command tx timeout [ 417.160658][T18582] tipc: Node identity f29b3c64477e, cluster identity 4711 [ 417.175524][T18582] tipc: Enabled bearer , priority 0 [ 417.208923][T18585] syzkaller0: entered promiscuous mode [ 417.214974][T18585] syzkaller0: entered allmulticast mode [ 417.309188][T18587] sctp: [Deprecated]: syz.3.3204 (pid 18587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.309188][T18587] Use struct sctp_sack_info instead [ 417.448954][T18595] tipc: Resetting bearer [ 417.593890][T18581] tipc: Resetting bearer [ 417.618344][T18581] tipc: Disabling bearer [ 417.842227][T18615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.855094][T18615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 417.875250][T18625] __nla_validate_parse: 9 callbacks suppressed [ 417.875265][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 417.903177][T18611] syzkaller1: entered promiscuous mode [ 417.908939][T18611] syzkaller1: entered allmulticast mode [ 417.972715][T18551] chnl_net:caif_netlink_parms(): no params data found [ 418.099845][T18615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.141611][T18615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 418.168310][T18645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3212'. [ 418.238062][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'. [ 418.252405][T18646] sctp: [Deprecated]: syz.3.3215 (pid 18646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.252405][T18646] Use struct sctp_sack_info instead [ 418.350012][T18615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.361489][T18615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 418.456440][T18615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.468994][T18615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 418.501835][T18664] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3220'. [ 418.590953][T18551] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.596940][T18668] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3219'. [ 418.598342][T18551] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.615071][T18551] bridge_slave_0: entered allmulticast mode [ 418.621993][T18551] bridge_slave_0: entered promiscuous mode [ 418.631279][T18551] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.638688][T18551] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.646079][T18551] bridge_slave_1: entered allmulticast mode [ 418.653618][T18551] bridge_slave_1: entered promiscuous mode [ 418.670295][ T30] audit: type=1800 audit(1769986562.743:8): pid=18668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3219" name="memory.events" dev="tmpfs" ino=119 res=0 errno=0 [ 418.710324][T13013] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 418.718769][T13013] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 418.730267][T18551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.743119][T18551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.753007][ T5819] Bluetooth: hci2: command tx timeout [ 418.786617][T13013] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 418.795282][T13013] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 418.828455][T13013] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 418.837536][T13013] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 418.853297][T13013] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 418.862271][T13013] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 418.877123][T18551] team0: Port device team_slave_0 added [ 418.908132][T18551] team0: Port device team_slave_1 added [ 418.982437][T18551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.002202][T18551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.030744][T18551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.067337][T18680] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3223'. [ 419.094048][T18551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.102753][T18551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.132243][T18551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.181829][T18670] lo speed is unknown, defaulting to 1000 [ 419.222616][T18693] netlink: 'syz.4.3226': attribute type 1 has an invalid length. [ 419.252562][T18694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3226'. [ 419.269540][T18691] netlink: 'syz.4.3226': attribute type 3 has an invalid length. [ 419.277608][T18691] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3226'. [ 419.342111][T18697] netlink: 'syz.3.3224': attribute type 3 has an invalid length. [ 419.345319][T18689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3225'. [ 419.350617][T18697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 419.380502][T18691] netlink: 'syz.4.3226': attribute type 1 has an invalid length. [ 419.392088][T18691] bond0: option mode: unable to set because the bond device has slaves [ 419.409294][T18551] hsr_slave_0: entered promiscuous mode [ 419.417364][T18551] hsr_slave_1: entered promiscuous mode [ 419.428442][T18551] debugfs: 'hsr0' already exists in 'hsr' [ 419.434600][T18551] Cannot create hsr debugfs directory [ 419.470601][T18696] lo speed is unknown, defaulting to 1000 [ 419.845932][T18711] sctp: [Deprecated]: syz.1.3228 (pid 18711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.845932][T18711] Use struct sctp_sack_info instead [ 420.824909][ T5819] Bluetooth: hci2: command tx timeout [ 420.864475][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 420.872533][ C0] lec:lec_tx_timeout: lec0 [ 420.877623][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 422.123131][T18684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.166852][T18551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 422.239680][T18551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 422.289971][T18551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 422.331590][T18551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 422.570836][T18551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.625723][T18551] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.640298][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.647556][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.670369][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.677563][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.774213][T18751] sctp: [Deprecated]: syz.4.3239 (pid 18751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.774213][T18751] Use struct sctp_sack_info instead [ 422.897757][T18753] __nla_validate_parse: 2 callbacks suppressed [ 422.897777][T18753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3238'. [ 422.904994][ T5819] Bluetooth: hci2: command tx timeout [ 423.006242][T18759] sctp: [Deprecated]: syz.4.3240 (pid 18759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.006242][T18759] Use struct sctp_sack_info instead [ 423.096879][T18551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.156134][T18551] veth0_vlan: entered promiscuous mode [ 423.179494][T18551] veth1_vlan: entered promiscuous mode [ 423.215722][T18551] veth0_macvtap: entered promiscuous mode [ 423.251208][T18551] veth1_macvtap: entered promiscuous mode [ 423.331803][T18763] bond2: entered promiscuous mode [ 423.338992][T18763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 423.354027][T18551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.396722][T18551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.451888][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.482405][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.519849][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.528877][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.623254][T18782] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3245'. [ 423.666753][T13021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.686349][T13021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.756385][T13023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.769142][T13023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.878513][T18789] sctp: [Deprecated]: syz.3.3249 (pid 18789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.878513][T18789] Use struct sctp_sack_info instead [ 423.941333][T18795] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.3253'. [ 423.951367][T18796] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3252'. [ 423.974733][T18797] tipc: Started in network mode [ 423.979633][T18797] tipc: Node identity 42c8453e5f3e, cluster identity 4711 [ 423.987261][T18797] tipc: Enabled bearer , priority 0 [ 424.106424][T18797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3251'. [ 424.167521][T18804] syzkaller0: entered promiscuous mode [ 424.183898][T18806] netlink: 'syz.3.3254': attribute type 1 has an invalid length. [ 424.195535][T18806] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3254'. [ 424.204118][T18804] syzkaller0: entered allmulticast mode [ 424.261692][T18792] tipc: Resetting bearer [ 424.289048][T18813] vlan2: entered promiscuous mode [ 424.294297][T18813] erspan0: entered promiscuous mode [ 424.321903][T18812] netlink: 'syz.0.3255': attribute type 10 has an invalid length. [ 424.390848][T18791] tipc: Resetting bearer [ 424.432813][T18791] tipc: Disabling bearer [ 424.479370][T18812] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.495235][T18812] bond0: (slave team0): Enslaving as an active interface with an up link [ 424.800856][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3263'. [ 424.984727][ T5819] Bluetooth: hci2: command tx timeout [ 425.220055][T18870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3271'. [ 425.313674][T18872] netlink: 304 bytes leftover after parsing attributes in process `syz.1.3272'. [ 425.334147][T18880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3273'. [ 425.607008][T18897] syzkaller0: entered promiscuous mode [ 425.612555][T18897] syzkaller0: entered allmulticast mode [ 425.721834][T18906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.884409][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 425.892500][ C0] lec:lec_tx_timeout: lec0 [ 425.897140][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 426.391053][T13013] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.406730][T13013] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.420198][T13013] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.431891][T13013] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.658451][T18937] nbd: nbd64 already in use [ 426.932583][T16284] udevd[16284]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 427.381345][T18973] macvlan0: entered allmulticast mode [ 427.398534][T18973] veth1_vlan: entered allmulticast mode [ 427.416378][T18973] veth1_vlan: left allmulticast mode [ 427.497577][T18973] macvlan0 (unregistering): left allmulticast mode [ 427.511087][T18977] tipc: MTU too low for tipc bearer [ 427.939012][T19005] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 428.723243][T19047] __nla_validate_parse: 14 callbacks suppressed [ 428.723263][T19047] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.3326'. [ 428.911997][T19053] lo speed is unknown, defaulting to 1000 [ 429.014977][T19063] x_tables: duplicate underflow at hook 1 [ 429.032265][T19063] tipc: Enabled bearer , priority 10 [ 429.091344][T19063] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 429.115810][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3334'. [ 429.159437][T19063] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 429.189472][T19063] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 429.192355][T19072] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3336'. [ 429.290105][T19078] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 429.320244][T19075] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 429.355374][T19069] lo speed is unknown, defaulting to 1000 [ 429.419096][T19077] lo speed is unknown, defaulting to 1000 [ 429.861516][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3342'. [ 429.875421][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3342'. [ 429.894136][T19106] lo speed is unknown, defaulting to 1000 [ 429.969746][T19077] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 429.981679][T19077] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 429.990099][T19077] CPU: 0 UID: 0 PID: 19077 Comm: syz.0.3335 Not tainted syzkaller #0 PREEMPT(full) [ 429.999474][T19077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 430.009527][T19077] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 430.015237][T19077] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 2d 1a 67 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 05 1a 67 f7 4d 8b 75 00 4d 8d a7 30 [ 430.034837][T19077] RSP: 0018:ffffc9000cd9f828 EFLAGS: 00010046 [ 430.040914][T19077] RAX: 0000000000000000 RBX: ffff8880572c7800 RCX: dffffc0000000000 [ 430.048879][T19077] RDX: 0000000000000000 RSI: ffffffff8c073960 RDI: ffff8880572c7800 [ 430.056852][T19077] RBP: ffff88809461e000 R08: ffffffff8ed019f3 R09: 1ffffffff1da033e [ 430.064808][T19077] R10: dffffc0000000000 R11: fffffbfff1da033f R12: ffff888032af7650 [ 430.072774][T19077] R13: 0000000000000000 R14: ffff8880572c7830 R15: ffff888032af7000 [ 430.080815][T19077] FS: 0000000000000000(0000) GS:ffff8881256ed000(0000) knlGS:0000000000000000 [ 430.089733][T19077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.096304][T19077] CR2: 0000200000002780 CR3: 000000000e346000 CR4: 00000000003526f0 [ 430.104261][T19077] Call Trace: [ 430.107522][T19077] [ 430.110439][T19077] lec_push+0x3cb/0x19d0 [ 430.114674][T19077] ? __local_bh_enable_ip+0xd0/0x130 [ 430.119940][T19077] ? __pfx_lec_push+0x10/0x10 [ 430.124602][T19077] vcc_release+0x15f/0x580 [ 430.129004][T19077] sock_close+0xc3/0x240 [ 430.133231][T19077] ? __pfx_sock_close+0x10/0x10 [ 430.138060][T19077] __fput+0x44f/0xa70 [ 430.142031][T19077] task_work_run+0x1d9/0x270 [ 430.146694][T19077] ? __pfx_task_work_run+0x10/0x10 [ 430.151790][T19077] ? do_raw_spin_unlock+0xf5/0x210 [ 430.156891][T19077] do_exit+0x69b/0x2310 [ 430.161031][T19077] ? cgroup1_freezing+0x20/0x350 [ 430.165953][T19077] ? __pfx_do_exit+0x10/0x10 [ 430.170526][T19077] ? cgroup1_freezing+0x20/0x350 [ 430.175448][T19077] ? cgroup1_freezing+0x20/0x350 [ 430.180415][T19077] do_group_exit+0x21b/0x2d0 [ 430.184990][T19077] ? _raw_spin_unlock_irq+0x23/0x50 [ 430.190175][T19077] get_signal+0x1284/0x1330 [ 430.194673][T19077] arch_do_signal_or_restart+0xbc/0x830 [ 430.200205][T19077] ? unshare_nsproxy_namespaces+0x143/0x160 [ 430.206088][T19077] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 430.212228][T19077] ? ksys_unshare+0x7fc/0x900 [ 430.216888][T19077] ? __pfx_ksys_unshare+0x10/0x10 [ 430.221895][T19077] exit_to_user_mode_loop+0x86/0x480 [ 430.227165][T19077] ? rcu_is_watching+0x15/0xb0 [ 430.231912][T19077] do_syscall_64+0x2b7/0xf80 [ 430.236485][T19077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.242529][T19077] ? trace_irq_disable+0x37/0x100 [ 430.247530][T19077] ? clear_bhb_loop+0x60/0xb0 [ 430.252190][T19077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.258070][T19077] RIP: 0033:0x7fbe9b39aeb9 [ 430.262469][T19077] Code: Unable to access opcode bytes at 0x7fbe9b39ae8f. [ 430.269469][T19077] RSP: 002b:00007fbe9c175028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 430.277866][T19077] RAX: fffffffffffffffc RBX: 00007fbe9b616090 RCX: 00007fbe9b39aeb9 [ 430.285820][T19077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 430.293775][T19077] RBP: 00007fbe9b408c1f R08: 0000000000000000 R09: 0000000000000000 [ 430.301727][T19077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.309682][T19077] R13: 00007fbe9b616128 R14: 00007fbe9b616090 R15: 00007fffe00d17a8 [ 430.317648][T19077] [ 430.320661][T19077] Modules linked in: [ 430.324552][T19077] ---[ end trace 0000000000000000 ]--- [ 430.330020][T19077] RIP: 0010:lec_arp_clear_vccs+0xad/0x380 [ 430.335754][T19077] Code: e8 03 80 3c 28 00 74 08 4c 89 e7 e8 2d 1a 67 f7 4c 89 74 24 18 49 8b 2c 24 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 05 1a 67 f7 4d 8b 75 00 4d 8d a7 30 [ 430.355354][T19077] RSP: 0018:ffffc9000cd9f828 EFLAGS: 00010046 [ 430.361412][T19077] RAX: 0000000000000000 RBX: ffff8880572c7800 RCX: dffffc0000000000 [ 430.369369][T19077] RDX: 0000000000000000 RSI: ffffffff8c073960 RDI: ffff8880572c7800 [ 430.377327][T19077] RBP: ffff88809461e000 R08: ffffffff8ed019f3 R09: 1ffffffff1da033e [ 430.385283][T19077] R10: dffffc0000000000 R11: fffffbfff1da033f R12: ffff888032af7650 [ 430.393234][T19077] R13: 0000000000000000 R14: ffff8880572c7830 R15: ffff888032af7000 [ 430.401188][T19077] FS: 0000000000000000(0000) GS:ffff8881256ed000(0000) knlGS:0000000000000000 [ 430.410097][T19077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.416665][T19077] CR2: 0000200000002780 CR3: 000000000e346000 CR4: 00000000003526f0 [ 430.424628][T19077] Kernel panic - not syncing: Fatal exception [ 430.431045][T19077] Kernel Offset: disabled [ 430.435350][T19077] Rebooting in 86400 seconds..