last executing test programs: 5.523304742s ago: executing program 1 (id=5274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r2, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7c}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x24000011) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.184541679s ago: executing program 1 (id=5279): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) unshare(0x22020400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="016e657420"], 0x5) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) sendfile(r3, r2, 0x0, 0x10000) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs$namespace(r5, &(0x7f00000003c0)='ns/uts\x00') r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x0, 0x4) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x74, 0x0, 0xff, 0x25, @dev={0xfe, 0x80, '\x00', 0xa}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8000, 0x9, 0x4}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18004e0006b8e22281bfe97336f9dc570b6200000400000000000000070000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x70, &(0x7f0000000140)=""/112, 0x41100, 0x2, '\x00', r7, 0x1a, r6, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x200, 0xffffffff}, 0x10, 0x3c1d, 0xffffffffffffffff, 0x2, &(0x7f0000000340)=[r6, r6, r6, r6, r6, r6, 0xffffffffffffffff, r6, r6, r6], &(0x7f0000000380)=[{0x5, 0x5, 0xc}, {0x0, 0x4, 0x9, 0x7}], 0x10, 0x6}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000"], 0x24}}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a2", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB, @ANYBLOB="ac1414aa7f000001000000001c000000000000", @ANYRES32=0x0, @ANYRES32], 0x1f8}}, {{&(0x7f0000001200)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000019c0), 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="140000000000000000000000020000000700000000000000140000000000000000000000020000004e00000000000000140000000000000000000000020000000000000000000000e40000000000000000000000070000000717770000000000000000e0000001ac1e01017f000001441cd383ac1414bb0000ac95ac14142f00000005e000000100000003009404010001070bacac14141dac1414bb830fe5e0000002e0000001ffffffff4408cb2000000401863a00000000061020269cfb47f1c0e8066f5d27d95c02095f9d54de0b69ab070777932f560b000e9d5a92927c0bf20fa6345d660006415143c6443c7281e00000020000000de00000010000000a0a0101010000000bffffffff000000020a010102000000080000000000000009000000000000b1f3000000000000001c0000000000", @ANYRES32, @ANYBLOB="ac1414bbac14141e000000001100000000000000000000000100000001000000000000001c0000000000000000000000080000", @ANYRES32=0x0, @ANYBLOB="7f00ffffffffffffff7f0000"], 0x188}}], 0x3, 0x20008000) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f0000000780), &(0x7f00000007c0)=0xc) recvmsg(r9, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) 4.955886075s ago: executing program 3 (id=5281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000140)='e', 0x1}], 0x1}}], 0x1, 0x4000) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1c6c, 0x2, 0x7}}}}]}, 0x44}}, 0x20044000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0x2, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x10, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001300010025bd7000fedbdf2507000000", @ANYRES32=r10, @ANYBLOB="01000000004400000c001a8004"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r11, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x384, r12, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf8c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x64}]}, @TIPC_NLA_NODE={0x1c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x27}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc4, 0x3, "79a57ecf325906e69e1f47e3d817381b098158e66c47f82f80db7f6ef4175ac0c687f5478210e8c7486a0940c6478409f2791698781164352e07caa4ae0fdd13b769a41fa8dbd1bbb86fd3717d5adfd9304221081d38d1e359522f939e36c73af606397e46b76a8885732c2d98becdb5996342756d9637769c4d56546ddce3e0e52b07a7f6e89eb833f29a93a128f4345d2252ffb66210bdcb47effff3f71a7357a5f0c384c0bc35d975d028cbf06c0e29e7f84eed78d97c25ac9b71d256387e"}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "c31174e6e4c1044fbdabb4fb20d18c39f2dda87f16319c20d2486a45a3ad65ac343ac9bd6f2f3bf36a601137225b4c9990507cf6da8b256e9ae003a31ed0f93d5b4a7499871e47b74937134b1b2b0561a4a1f529f00dd040c40610a61d46c8aa8ef4573f9a5ddd8010fdd9671e2aa88a04f5a721716da37d0dc936072a71b661bad66a986604ae54ea1fad7aa0d5ee152b18136d118a281aad5ba5f6f1a1902cf12d6be73a691c59a6b4ff1726527dc287fddc7549c192bdd12232624ba635fc7504b64932484f878bc7ec5244d9f578c27f76c9ba243ad66c5675ddc73399aabe"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xfc, 0x3, "c24d30e364afb9d136007aec169541d3f2c3b32b24a464111659bb06e30a26f60245c6e17dd5451fde9ceb99979125e17c8a634acb255636da21c90cbc82e5f7eee3032963d9d5a8228c8c9c21b1a6869fec5f24e6576f9af099cca4b1eab014c337d9de839bfe2d8d76e8cf246981c6d162fd34477613e4dac3e6ec2b1e3b5f524b232b8dc4038378e6b144453c1464c52c4ad32ff4fbca375a51e9a26135b6dcfddd5de8885b7109ea562e8076196c3bf55ea8626589d068e6b50f0816c7c49b49fac3b79a32a40b80eee1572d9a42309171edb5c6337bee4a3a387e19af9c9896e5e46b6a8d174d045898a488322941d0d502da0e9156"}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x40001}, 0x810) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0xe, 0x80}, 0x2c) r14 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r14, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4562d117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r15 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r15, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 4.710015123s ago: executing program 3 (id=5286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x12040, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x3, 0xf5, 0xe5, 0x5}, {0x7, 0x80, 0x3, 0x6}, {0x200, 0x69, 0xfd, 0xffff0001}, {0x6, 0x40, 0x8, 0x58b}, {0xfbff, 0x2, 0x1b, 0x1}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000440)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x0, 0xe, 0x80, r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x8c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x4c084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 4.558667545s ago: executing program 4 (id=5287): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x96590}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x78}}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0xb, @private1, 0x9}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000e180000008001b00000000009d6d41aeafb5dcc6bde6ceca5e1e035dff3d8452f3e0bf755e240426f12066606034d07b8a4dda6c9215a96f95f0cb0bdff5e6aacc4744fdb16995070000001dee7b491ce86d56a40d5adbb017f9da2b81f00ceb6da8178f72557c82b989f10da762eaeeaad9d63a167a2001bd10336171"], 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000500)={'geneve0\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x9], [0x8, 0x400, 0x10, 0x1]}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x48, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000030528bd70000c00000000000000", @ANYRES32=0x0, @ANYBLOB="3a08000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r10, @ANYBLOB="08002900532600000a000200aaaaaaaaaaaa000034594721d4c790131289f9d529c1fd9d48bad24f513f129adac719efaf37309f03364cfb8a4515b30fe05e6a2a081048c52f50aff12accb729c1f5302bc9cb547c2025f52270897fdf4f6a90b6d4cc7cb98f97a6a2344292b600163f115b4033ca8c5af026599e"], 0x50}}, 0x800) 4.196560703s ago: executing program 1 (id=5290): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x2, @private=0xa010106}}, 0x1e) connect$pptp(r4, &(0x7f0000000080)={0x18, 0x2, {0x2, @local}}, 0x1e) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x6048004) sendmsg$NL80211_CMD_SET_CQM(r5, 0x0, 0x10000001) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x5}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x6e4, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xee4}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r1, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYRES64=r7, @ANYRES16=0x0, @ANYBLOB="df4827bd7000000000000c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 4.193724485s ago: executing program 4 (id=5291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e, 0x88}}, 0x14}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}}, 0x8c0) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'macvtap0\x00', {0x2, 0x0, @initdev}}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000101000000000001000000000000", @ANYRES32=r8], 0x20}}, 0x2000c004) close(r5) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r10, @ANYBLOB="a292e6ee6a8b1d8db5c531ce0e133a530cdfca2cab94fbffa38b56a612e91f57fe31e4737cc9808c6f01c8fd29ce3f986e5e88cee94fda1a3b2c97517aee7a29d4cb95a738dab6dbbd8a30032a076988bd324c7c3ea1a06eddb7e5800ceabbf65b9c"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000200)='bridge0\x00') 4.08156892s ago: executing program 4 (id=5293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sendmsg$AUDIT_SET(r2, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x3e9, 0x405, 0x70bd2d, 0x25dfdbff, {0x84, 0x0, 0x0, r3, 0x8000, 0x11, 0x4, 0x7, 0x0, 0x80000000, 0xc8}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x880) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r1, 0xd371f000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r0, 0x12574000) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="0c000000010001", 0x7) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x700, 0x1, 0x0, 0x8000, {{0x1a, 0x4, 0x3, 0x4, 0x68, 0x66, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0x1c, 0x43, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0xb}, 0xffffffff}, {@rand_addr=0x64010102, 0x7}, {@empty, 0x88}]}, @timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0x7, [{@local, 0xf}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010102, 0x7b2f}]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x9, "8f5ab99a9f7574"}, @ssrr={0x89, 0xb, 0x72, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000030000000000000012000000850000009300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x211}, 0x94) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x128, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xb0, 0x8, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @local, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @local, 0x8}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x101, @dev={0xfe, 0x80, '\x00', 0x35}, 0xffffffff}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x128}, 0x1, 0x0, 0x0, 0x48886}, 0x240440e1) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="391a0300299605002400128009000100626f6e64000000001400028005000100060000000800030000000000"], 0x44}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000b, 0x12, r11, 0xa6d63000) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x3ff03000) 3.92611765s ago: executing program 4 (id=5296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24400040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c000) 3.725899694s ago: executing program 3 (id=5298): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1d}, @rc={0x1f, @any, 0x10}, @l2tp={0x2, 0x0, @broadcast, 0x3}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='ip6tnl0\x00', 0x7, 0x8000000000000000, 0x7fff}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.307988954s ago: executing program 1 (id=5302): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000580)={{r1, &(0x7f00000002c0)='@\x00', 0x208840, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x2]}, {0x9, 0xab7, 0xe, 0x2}}, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0x6}, {[0x2d79, 0x4, 0xfffffff5, 0x2086d]}, 0x13, 0x59, &(0x7f0000000440)=""/89}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710026000000000095000300"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, r2}, 0x94) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x400000000000006) writev(r12, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x2000003, 0x12, r13, 0xde40f000) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r14, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x7000)=nil, 0x7000, 0x2000006, 0x12, r15, 0x5af68000) 2.939979031s ago: executing program 3 (id=5307): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122ccb399bcef0a0471639c81aab7445cebfc9b00b31fcbaf63086b3c16f51b593acee0b3a4830dd6af1accb15cc6163cabc01442527aa10000000000000000a4ba25997affe74ec552bf9deafbd63e"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r5}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="28000000200400562c181a3d2d00c8000000", @ANYRES32=r5, @ANYRES64=0x0], 0x20) recvfrom$packet(r0, &(0x7f0000004000)=""/4096, 0x1000, 0x22, 0x0, 0x0) 2.723218925s ago: executing program 3 (id=5310): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000080)=0xfffffffd, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000240)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8=r0, @ANYBLOB="29ed2dd1e317e35ca2f9272bee25341a867f002d43ebf62826d51e110eac8af25263a6871d4a552c91310a8f01fa198eca3a6b767c7b777316dc54b12f9f7f350c997e7a27367415b4216e3272e056a1fea2215c6f6284256927c66706af3db1a897d7a64b295306194f7c2273de509c9158db46ddbb2a17e668be523f2b272484295d2c19c6ad61a45ad515f4e9a4a38e0705d879dd255ae440f0a17ac876230419640812bf308148775ffc45e371fe8dbe2209b130a5bf59f58a24f470acd97c202dd9f9318a5dc3f219a3343dc713a4548ee752e99086e780a33ec2fd", @ANYRESOCT=r0], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x5, 0x315e5514}}]}}}]}, 0x58}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socket$l2tp6(0xa, 0x2, 0x73) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r9) sendmsg$NET_DM_CMD_START(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r10, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c7", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.220756134s ago: executing program 2 (id=5318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.13818113s ago: executing program 2 (id=5320): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @private}, &(0x7f0000000080)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x1, 0x700, 0x6, 0x9, {{0x1f, 0x4, 0x0, 0x1, 0x7c, 0x67, 0x0, 0xb, 0x2f, 0x0, @empty, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xec, 0x0, 0x3, [0x7ff, 0x80000001, 0x5]}, @generic={0x94, 0xf, "a1bae727fea9ff7bbbad11798e"}, @rr={0x7, 0x17, 0x1, [@multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010102]}, @end, @lsrr={0x83, 0x2b, 0x5b, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @multicast1, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty}, &(0x7f0000000240)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0xd2, 0x7, 0xfffffffe, 0x78, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x10, 0x80, 0x0, 0x8001}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@rand_addr, @remote, 0x0}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x9, 0x3, 0x757317c9643ac4d8, @mcast1, @mcast2, 0x7, 0x40, 0x1, 0x7}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000005c0)={@mcast2, 0x0}, &(0x7f0000000600)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000640)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x3, 0x2, {{0x29, 0x4, 0x3, 0x39, 0xa4, 0x67, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1b, 0x73, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010100, @empty, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x9c, 0x3, 0x1, [{@broadcast, 0x7fffffff}]}, @generic={0x83, 0x8, "8f4d42c111cd"}, @timestamp_addr={0x44, 0x3c, 0xb5, 0x1, 0xf, [{@local, 0x7}, {@broadcast, 0x6}, {@rand_addr=0x64010102, 0xf3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@multicast1, 0x5}, {@loopback, 0xffffff7f}, {@remote, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x28, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4ed}, {@remote, 0x1}, {@rand_addr=0x64010101, 0x5}, {@loopback, 0x7}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000800)={0x640, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}]}}, {{0x8, 0x1, r3}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x77}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1e}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8, 0x1, r14}, {0xc4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x38a, 0x8, 0x9, 0x1}, {0x0, 0x1, 0x2, 0xfab9}, {0x1, 0x2, 0x7, 0x7}]}}}]}}]}, 0x640}, 0x1, 0x0, 0x0, 0x24040080}, 0x20044040) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000ec0)={0x3, 'wg1\x00', {0x5014}, 0x7}) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000f00)=0xfffffc01, 0x4) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000000fc0)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x2, 0xffffffff, {{0x11, 0x4, 0x0, 0x5, 0x44, 0x65, 0x0, 0x4, 0x2f, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x1c, 0x20, 0x0, 0x3, [0x2, 0x10000, 0x4, 0xd0, 0x0, 0x2]}, @end, @lsrr={0x83, 0x13, 0x79, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010101, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x50, r16, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x3a200b637aa52d84}, 0x4081) socketpair$unix(0x1, 0x5, 0x0, 0xfffffffffffffffd) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r18, 0x10e, 0x4, &(0x7f0000001180)=0x5, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001200)={'team0\x00'}) r19 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r19, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, r16, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x34}}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r18, 0x8040942d, &(0x7f0000001340)) 1.159312102s ago: executing program 0 (id=5322): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000052000000bf0900000000000035090100000000009500000000000200b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.159141982s ago: executing program 0 (id=5323): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x94) 1.132969924s ago: executing program 0 (id=5324): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 1.096653305s ago: executing program 0 (id=5325): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x18c41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x4040000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x1403, 0x8, 0x70bd25, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x20008810) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x1403, 0x8, 0x70bd25, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x20008810) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf251500000008000300", @ANYRES32=r3, @ANYBLOB="08002a000a0000001c002b8008000100020000"], 0x40}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) 741.515769ms ago: executing program 2 (id=5326): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="17020200dddc47b4bc61494a0dd8b64293a65bb39be9a9f1d964a4e76e920cf1b21d886da8546625dbf98e09ff779ae63befa8bc276ac416378e69b1b38337b15f3a63065e90e45b8fa16800e3a094a69c8c84ea7f57b5a2235de477578f4e0f6b0be5a5969d2f8d2ffe78758ec75fee5e00c6f40e68a264fd5bad8e0b82625bca0e45ba9f6af331e13fc8d0", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 741.156201ms ago: executing program 4 (id=5327): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="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", 0x137}, {&(0x7f00000007c0)="a96a428426d96522dbf395b96cda5289bbfe3d97be8f413c48ec17c91194c66443ac9ed513c32242f54abb9a8ad671c6786dd7161962a8cf0dc4c7c0a1f86f7d1b17cc1660980f64e0b66a61b77eed3c8497ff551a20db0aa749c5ed3d49c05b1f787665fc8ed059d872289988b78549f8e5f01c2dab0e462f618669d1ca60666c010a55e46421284abe14fdfa39da550161c5410c37fbd11866c3e2f710e557408f5c4a5d494e87bcacc70ecbc69322da9f6a2388ffece43aeee909aa68d00e2137407fbcf0e749eb6ef98960c1ed54e532722c05c0038e8a9c25a560b3569cc7928a66d41c3dcf80263869467cd8a905d56a7b327d0354d81554f98b1e85ae5d86502a1b3ed1e250f71cb5c5b7aa755326d9d6ab836db15f6107023fe99229e48a9008bd8ed0141577f1f1ea58b10e6ceeacfe98ff142e57f0dd1c88ae37752e200657282cda4177730d24a77a941e21675fa53da47992cce0a954ae826fff35039dc74bd9d0e5973ee99b00200cff625fb828ebc36189f3013291fe121a0810e1008854633b5890b810817609e8311f2e34cf3b78d666a1207a4fdbf77cc2d87410bb8533054f39eeff0602c72476ea86bbd68e3bf4976c16a3a8d60b4fa1c1ff02275718e1f7028119bcb785b0d95369dea71f559a32891ad8b3ef21b0f43f8db1f88fc0984c24ea1a38bc89b3b23c4cf9a67ad08f3fb635736350dfb726f8177efadd377073ba05878ab62d2a18481922e6c48f09f057aba001fb8eb233eb23a67e74d006bdaad1fa9a8a622c17947f34b89d0fc0a6dd3a7b6fa0beabb98875112036ab1ec22090369dc72d3c385b2679f0b99af9bcc6ef785c0b51473d8864ec867ea3c754856199152f000b2afe739b5c568c1619d2af08fb2fc6844fac0035cceb0d0656d3af9bbd686fd99275e7f81aeafd33481c5778b279e5870348ec4495684bdcb71c0c8131cdc8330159d8c92adb613dac99fedb3c50c22243ee61ebb8645f94cd0994b02c5f5b544887b11b2fd3655e115889ebeb8617eb1cdb5dbec30c407ee4f09d17d2ecca77b25604cfbd308a91b0b2e8cd1249a2e1f441989657efc8584ceb7e443f2ae30191c5623b06fac91bab61a40f31f2863b4b508998ded6abd8f55e503401c2e9e298655d50ab3f775f9159d0765b4ee1fef3aa1fe608d5dade41cd16a3c1ec7868b18ff3f1449d3900f7d77489c1bb4cdb99beac51942f8a7c4ab3e3a43e13b6c69b63623a970aec5426b58c63d9ffc229efb58e7b58eb27a12b91c4a0f253e1d5f13e59ffcecb003c5e46b1cc236b9fe508b37c3f2046c53eabbc2a7b1f2c0d04a86ba8918239e1dda997c5612fb43dc86905f79f1503ac47d5ea8399dc5d5cc284a3a789d77cc5e887ce3c25ae3f7a636429873970930ebdeec9690b62f46f480a4a102cfa3ce2a61f056bedf3ca698c4f2666bf55f035daca9fb2efcfd96d18cb7afd6e2592e460c4638f261a4a7a85c290c78a921edbc01e2d7a60c6b6a2608fb52f31b73471dd610f3703242273de21261656df6cd8c3847c730819e402933a40a4c560d9651a95764179f4a1a39e60c80deece7b0eacbafd5efe40eee56424b3e0921524397bd4f554e4a0ccc6e9b2be09e0ae6810a9fef7b027ee3cff9b5e674f793579eac25cee7c4e9351a8d7412e2c6cf9ba4082059a35878771744b8d0c572e10250035630b30db9030bf67c6dca054f6a219c51984f37ec9a2e2ac6e85d97475e5821bbb376af98e1e180cd94c22a2246dc757da46421b85487b7291f68fa595451999c32c869cbabcfe6be628f0909bb62ee174c97bef3f92fbb1072d66b5d28427b1695913bb86759fc20c74acf75df87ded19a81966e7dda1be3cec73f23df8b255ceff270af0ee99253426f5d4866afd89766c498652d5c5f6d4d3d6fbb52931b10613ba80a3d8a23464c30414e89897b90d5e0c90f0c72931b5ad4cbf69c0fc2eda242a56a789af5f4f0f0fb51f26c7a102ce6e0b76cf3a1f84de55f21df446ec9b9409cd1fb919b02a515994166e7ae29ad0783e0adf2c4296ed7fc19c84378a35e83f739a3e370faef047ef39fc7926ebf06f09db535aae1d5558f83f1e434556de25e6d2aa78d4eac784a7407521e1626d038d652d0320c0558c42e9e9ac731404c26248934d23dd3a8812de7622c230888db650f7846770ddc8059447fd03ccf862574d9b548054afb63e32986caf80a57fc2fa01d904ec94ad1c8b6cb56cb782b47b5a5626ab094c196e2e1f9fd25a39ec1ad45a7ae94c9ae64ac4bb45c828295c195fbfed9171d142fb8ece8af614953ad5ca1e5d65c52c4d9633c458b5e788bfd3469328b9e6e4df03f3da9e5d3d11284e791a67d0856666ee21f8ea4b1d76d7a1f07863756029a4b5cb820edb63dc0efe6fc2577a79383f280f241b35dff9cfb92cf04451f5767f95e5d5ff0c808acddf406127e9ceb8d1f55749a5781e9b185e45072d181d069c715febebc1ab63126697d145d63b3a41ba202a387dcfdfbb96de0d05454fecc28637dfac86ce61641ee7105f4b441031bea7ae0d1787bf772cfa2f48c3062d232b23b5b328e6ea9e0de0130db2500e37d28a52c490b2fa9d39c3d5c9b8a298f2aeb348b962fee1d6a7d6d2c661113c2b8101f39dba91a3199bab5b70f5bed7871580b54bf34f2851c14b69e16ad97223ab8eb0b2725e00efa7b1e75264a65ad61cfca62f6d5d651c193c123f9bf77b3aed591e8161b767fc2977b56f3849362559dffd3414ef1e5cb2d611f7bb3d7d4c28c0a6de2993eb89c0805622f9fe4136e856e103d931aae07469efc077f9dd6df11c1eeba7468ca78e2e8027b2f672f9b965a6d88756b531321fb181702794ce58299b0cd34e481dc6760b4f9b32cfae5e0a35b4a19a4dbd26870bcb8ccb7724a294b10697763d6b3f7141bf7ca09d0871dceaf364f5aca649d77203328b8ad463a144961595e978043be434cd08dd5120bc36c5d895745ce5cc10f9a7f22baad125d60beaeb8c98279f5b3a363eda42bfc9fef669b2f4fb663700dcc5a47515b9adec65cc99cfea4cc2246dcdff878eae17441c69f4127c49fdd7935bb0c0c8053c9b788aa74a7ff174b7fc8b36ddc5ffa89fe7a98a14805ce96447e00a8b32b3f46af448aa29f326d03477bde78b147fec195cc5b253becf53a80f08ddde4529c2f53f40eb59f8598ed0c045dd60cb8ee90669091d1e2e970791f687db9b28c43c74813b6364b3a0f5762bfaa867bcdd7d44d0eccc1e0149b6ba5c4412b16493330a41352c682dfd88aff599459c6d7beb392925338e9bb1469f59dc833d0e685dc8ac9fc708123d1a1d483e6ccd45f58edac266f5517f5711402a83bacb634e4a28e8d32121be30a2aaeb2adc5cc3e2b0d15cd94b4fab7f37ffa77e477099ea6dd6167e292921f5957fc4e2f3c7a1396e60154bb638dccb5fd0d7bedc36591901dbd5cf63914c401fc79036f4a26f7b4df5fd776b7ef156c33a180ec8615ec6f24659794da3af2cb75a5905b891a0b269405d4471fbeb3e90b19f502f0b36a32f9f8bbac6a1fa6fb7a50cb563b4fa41d0f2639da50773356cce00000000000000016721701a47a54d76c93fbd00f408c270897159bf168ab2ec326978f48f7d845b6e64d856de829fd8b45b86489abb7537e372df0ddc96ed4826ee76b28d8999d7e170b1db1dc9316d51504f7cf7740f354f0255f83a31ef9c8e70d33a256e909bad11ae1217f66260dc5c52682a6e84fec98221de47463b6d37b6a100fe5893b668d316b78f1cc0f67c481c50e275d4613a0b2acf73f86898b2506dc72b427e0476ab342f3c18b0949ee09c2d56154fc7b36a44c0771851186e83619f73945258dfe80304a591b2fe7057e80a2127c5e8b00c6d4809e72d931ffd7bce4b4d9fce0cf6135c47ad63fd7f9ed8beba4de84c087fcd42eaf8474a01bd752bba36dd487c0ae725f8e7ec695aa2958616f6c59413f235f176300a9457d3caf0b4e972b6b9339b4de6e7bf29aa1af48de7a834700a9c999c0198b3f6234aee737c96e02120b79725322aafe19139cc725db0b578cfccd8666b66ae8e034e4240768f03e0ff8ee072245b28f42ceb784133e99071b36709992fa81a9736d89018a2b361877a2fb05bceb0bfa5ee0eb7fc5d78c534f6ea4edcd0f530067c530f7bea92bddc9c61b268d5bc1ad3ff852ab93f3e810002133d0d8e16b1d71e1db2bdb91d416a6bfcb4864d58da1758abff7ca03d379bd48b03f019c33c434bdf25822465ae322b38ae83dd90597db8c781f48efedb66da368f3d9f67f27612c51c07b9aeb419c32ff028a77e3abc5bd531d7bb29bd1c6c1119820abfd881f660e5a7072cdbc0e888d97cbc2105782204f34d093c1e0e6195e51e2e8b639a0f656aa21e29d0fa2a2f868b77995e7ada252a30a31b219be7c1b107ddd737654546340e424f13521ed73f0ed33ad3664f1b9b68ee60f7255119d585c09a2467b22de08104a37202cb737e934b1bdb83102b680d9cfd21c55fd00e33fba7651b2c36a87272945c371303c7e4ca181c1f7d2fe09815c1732d8d777e7b9a430d6b237c7c9fc8758e8456fb4e6ffc2aa421ab5942204e54cb52197e14aae9ae34376ac1d56d009f07babcb3d3492c87faf3e44bdd7d16dbce8148e2c7cb44d30ca29908aaf7c9ef39e791a9a988a5381942e3daf05f85be245f4ef26b08d83b1c1b58892b462783dc27602d8931d3232e5be295d479f9600cc4c3ed2e6a2fbb925c602d251b13f2ec2b7ca99fcd4bc2aa6115ddb0b842ed35c70d867734ee7518fd5299e07818f024a1682aacaa4e28d9f5db71006beb8bcc1e3a43cf27fb3d9475fbd632912d83f4e95b4390068f55f2f832a2e2c9f4ba5ca59d185a655375c6f5779d9fe5a47d1f417cf6f6405eab89f755f9a90623270c2b2a444b6b79662964199f7bedd2a2939e03ec6a334b78a6166ebf70562819a273bb6de9a3d7c2383a569cbeb08859e742ec5f947d1817c2dbfa3b72e5d3afdc45", 0xde5}, {&(0x7f0000000000)="b6bfe5d12e5894a76921d2adc0f0f58aa1e55520876e89106f675fa786894a977f03a578cd0952", 0x27}, {&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdcc16d17eb847d268f96dbef0cb2788f69128e5807cabf5febbea9f3af1728c43010321fe35ab1bd50b26531473ec12eeb24c15f6247c30b4ba41347fd2ecb64c7f2f254c5566f8dad74e53cad7bf18ef03acc9475cbecaca73d4f425247fb72e587a4df6f89a99da2f70b36cecaf4192de5b95d59528bf443cb2eea28def8c0e2afe6d20317e6018103ed06b2fd36f473043435594f7910a5b4810ee7", 0xb4}, {&(0x7f0000002600)="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", 0xf25}], 0x7}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x4044805) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r5 = socket$kcm(0x29, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000240)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2}}, 0x80, &(0x7f00000000c0)}, 0x4000000) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x24, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000) (async) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be0000c9018c3f0f059ec486dd88a8"], 0x7a) (async) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000340)=0x1, 0x4) 740.398151ms ago: executing program 1 (id=5328): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="000000000000faffffffffffffff0000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff370b994200000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4050004) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008801}, 0x4004000) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x50, r2, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x50}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) 740.138191ms ago: executing program 0 (id=5329): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x17, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@lld}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xc0ffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 579.89088ms ago: executing program 2 (id=5330): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000180)='}%\xbb!}.,\x00', 0x410000, &(0x7f00000001c0)={@align=0x9, {0x80, 0x10, 0xd1b, 0x1e}}, 0x7fff, &(0x7f00000002c0), &(0x7f0000000300)=0x7}, {[0x7, 0x6, 0x2, 0xc]}, 0x4, 0xed, &(0x7f0000000340)=""/237}) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=@base={0x20, 0x4, 0x5, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000200), &(0x7f0000000240)=@udp, 0x1}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x4, r2, 0x1, 0x7}, 0x14) 560.50047ms ago: executing program 0 (id=5331): socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0xa0, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r3 = socket(0x5973123e108ff759, 0x4, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x40000010}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdfffefe0000000003000000850000000f00000085000000110000009500000000000000e85c9b81279519d0850fc347edb2ae0b4883bb3b8ee296c857b905c371859ab493838e9530f73add7be73d338d49cceaf5f4154ad481969a5286a141bea4a48ee5806e5d8dbe3c3a27a6140f330ee9eae021fbb806c2dc37d595742d5dcb4506a47400ab1de2c62fa7ceb2f5dab9fd45654e85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000003800128009000100766c616e000000002800028006000100040000001c0003800c00010400000000010000000c000100f7ffffff0300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendto$packet(r3, &(0x7f00000000c0)="e5246ec4575c19d2295f25cb3994b4cb3343c8ba02a1874cdfd93a7dfddba3f072fdf6be748131953e2abe30e3fc164e57816b2fc07fa27c5bcfe7242712cd4fa4d37d67d27d3bf3f4e1199b73", 0x4d, 0x20004000, &(0x7f00000001c0)={0x11, 0x8, r7, 0x1, 0xe, 0x6, @remote}, 0x14) 503.966475ms ago: executing program 1 (id=5332): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) (fail_nth: 20) 451.743791ms ago: executing program 4 (id=5333): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC=r1], 0x9) (async) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC=r1], 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="1f0000002a0000005f40c045b4dd4b694fb4b3631aa51ce351706ab8aece4918319e9f16da2e9cc4df9cbf90c2de9bd047f379142c2f61aeadadcbb64530562509d6fe997b3ceecdadcd297b", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC=r0], 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a0b040000000000000000020002002400048020000180080001006c6f6700140002800600042c0000000002000140000200000900010073797a300000006cf99b68cf5a674d254048be001000000073797a320000000014000000110001008cf264277af1ffb003182edf64d50f1a8248b1238cd87f293d07f6b5f989f5fb2a143f8ca7a90db43e77780c0ec788b089287599d832a0f89e11372d07ef7ab389ac5bbf9de245d65063509be5e47bb5667862b4f7837a21d5d7daed13106fc429154d5d0accaf5fe3e93c56"], 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a0b040000000000000000020002002400048020000180080001006c6f6700140002800600042c0000000002000140000200000900010073797a300000006cf99b68cf5a674d254048be001000000073797a320000000014000000110001008cf264277af1ffb003182edf64d50f1a8248b1238cd87f293d07f6b5f989f5fb2a143f8ca7a90db43e77780c0ec788b089287599d832a0f89e11372d07ef7ab389ac5bbf9de245d65063509be5e47bb5667862b4f7837a21d5d7daed13106fc429154d5d0accaf5fe3e93c56"], 0x78}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="010026bd7000000000000300000090000180380004001400010002000000ac5414aa0000000000000000200002000a004e2200000d617000000000000000000000080000000077e800000d0001007564703a73790000000000004400028008000100008000"], 0xa4}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r6, @ANYBLOB="010026bd7000000000000300000090000180380004001400010002000000ac5414aa0000000000000000200002000a004e2200000d617000000000000000000000080000000077e800000d0001007564703a73790000000000004400028008000100008000"], 0xa4}}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="7811711064fc284dfc3c31472d051d607033a542102dd8a14e418f355ab9159f9d9bd874718567cd58e41556f70f2f7e00fa645c69a758d3f3e0e6923cc2cb07e418d5a2af3e75ffff6d805a68ad84b0a881f76297e182276ba3bae2088a50217d6ab62de98978cd945ebcb7a350d3e310cc36e9e93daa0a504058c4d6b05539f9b19ec0f5285f66954d6f14f494e42a1948", @ANYRES16=r6, @ANYBLOB="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"], 0x1178}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x18, r10, 0x6966c132ee9ca8e5, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4020}, 0x20048010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)="0666", 0x0, 0x2, 0x0, 0x80000000}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000001000000085000000b3000000850000006200000018110000", @ANYRES32=0x1, @ANYBLOB="00000000000000f5ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x8000, 0x52, &(0x7f0000000440)=""/82, 0x41100, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x9, 0x3, 0x9}, 0x10, 0x8ee7, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000680)=[{0x4, 0x1, 0xb, 0xb}, {0x1, 0x2, 0x1, 0xc}, {0x1, 0x5, 0x4, 0x7}, {0x0, 0x2, 0x8, 0x1}], 0x10, 0x5}, 0x94) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000001000000085000000b3000000850000006200000018110000", @ANYRES32=0x1, @ANYBLOB="00000000000000f5ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x8000, 0x52, &(0x7f0000000440)=""/82, 0x41100, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x9, 0x3, 0x9}, 0x10, 0x8ee7, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000680)=[{0x4, 0x1, 0xb, 0xb}, {0x1, 0x2, 0x1, 0xc}, {0x1, 0x5, 0x4, 0x7}, {0x0, 0x2, 0x8, 0x1}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r8, @ANYRES16=r7], &(0x7f0000000340)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x0, 0x0, 0x0, 0x5, 0x15, 0x0, 0x0, 0x56d3dab663bb9c92, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x9, 0x0, 0xffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r0}, 0x94) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f00000005c0)={0x4, 0x7, 0x40, 0x4, 0x7}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r12, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r12, 0x84, 0xe, &(0x7f0000000c80)={0x0, 0x6, 0x7, 0xfd, 0x2, 0x7e38, 0x4, 0x88000000, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x100, 0x7, 0x2, 0xb, 0x64c}}, &(0x7f0000000180)=0xb0) 449.517766ms ago: executing program 2 (id=5334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000060c0)=@add_del={0x2, &(0x7f0000006080)='wg1\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x3fc}, 0x0, r3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000ffffff7f18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000000d000000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000007756fa500b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) r5 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) accept$ax25(r5, &(0x7f0000000580)={{0x3, @rose}, [@remote, @remote, @netrom, @remote, @netrom, @default, @null, @default]}, &(0x7f0000000600)=0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1c8, 0xc8, 0x8, 0x1c8, 0x5803, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x6, 0x300, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x0, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'hsr0\x00', {0xa}, 0x4}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0xd, 0x7, 0x96}, &(0x7f0000000180)=0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000300)={r7, 0xb7, "0812e82aa99170a6d5fe682d0897ee9c0e64d4eb324dded5c4297f81436cad9c18e5349ca6d9ae2f83767f12a5f43a76134b20edb6e4eb52abdd00602132bbdd5d52618b652444d3f216cbbd09d25868ea919828b0b39b8ffb76dfa63ce0e0c72e5e25dd3b416a6020867db1034b65affcd2fcd5cb3db573325aa298520c3406d0e178f0921d3802e657f092c62d1db322922d5e7bc2ddcf647ea85ba9b7921779437b83b2a8787d33d0fd91d247a15c9dd6113e51e0b1"}, &(0x7f00000001c0)=0xbf) r8 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000440)) sendto$ax25(r8, &(0x7f0000000480)="6e182b424d95cb2d74d3606dec13e410e16d453f1580cbc898452949faddb7a11ad8563eb2bb2718d8f81a192fef2e05159f34d742fc029f6f83e1be9eaf9bbd88de7ced55088158acc6ed6cb909dda6aa7e2caa9abd124732469a25890aedf17a186fcff5502f23994abf456256af10ddb640aea0afddbc0b232f5edcca861ed29c9ee87ea5f61336ee5605e2598382ad", 0x91, 0x51, 0x0, 0x0) 439.321867ms ago: executing program 3 (id=5335): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 0s ago: executing program 2 (id=5336): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r1, 0x891a, &(0x7f0000000000)="69f19538689123e89ce43a") bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r4, &(0x7f00000018c0)=[{{&(0x7f0000000200)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000000)="4474d893a9aa512b86214f2e211b23", 0xf}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="100000005ba3868433935284e68f0099"], 0x20}}], 0x1, 0x20040004) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) kernel console output (not intermixed with test programs): lave ip6gretap1): failed to get link speed/duplex [ 544.237615][ T9267] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.245655][ T9267] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 544.342150][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3786'. [ 544.367027][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.375949][ T9269] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 544.463131][T21161] netlink: 656 bytes leftover after parsing attributes in process `syz.4.3786'. [ 544.500108][ T9267] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.649489][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 544.803257][T21174] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.811225][T21174] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.872661][T21174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.889549][T21174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.981782][T21182] netlink: 'syz.1.3791': attribute type 2 has an invalid length. [ 544.990426][T21187] netlink: 'syz.0.3793': attribute type 3 has an invalid length. [ 544.998828][T21187] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3793'. [ 545.011475][ T9264] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.037118][ T9264] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.046533][ T9264] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.056230][ T9264] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.103731][ T9264] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.130171][ T9264] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.151572][ T9264] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.165367][ T9264] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.207323][T21191] bridge2: entered promiscuous mode [ 545.212819][T21191] bridge2: entered allmulticast mode [ 545.220984][T21191] team0: Port device bridge2 added [ 545.226371][T21192] bridge0: port 1(team0) entered blocking state [ 545.233380][T21192] bridge0: port 1(team0) entered disabled state [ 545.242270][T21192] team0: entered allmulticast mode [ 545.249777][T21192] team_slave_0: entered allmulticast mode [ 545.255668][T21192] team_slave_1: entered allmulticast mode [ 545.263608][T21192] team0: entered promiscuous mode [ 545.268893][T21192] team_slave_0: entered promiscuous mode [ 545.274775][T21192] team_slave_1: entered promiscuous mode [ 545.281625][T21192] bridge0: port 1(team0) entered blocking state [ 545.288525][T21192] bridge0: port 1(team0) entered forwarding state [ 545.425485][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3799'. [ 545.643689][T21221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3805'. [ 545.661850][T21217] netlink: 'syz.4.3803': attribute type 1 has an invalid length. [ 545.729911][T21217] bond2: entered promiscuous mode [ 545.737665][T21217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.748472][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3809'. [ 545.768369][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3809'. [ 545.801700][T21227] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 545.839955][T21227] bond2 (unregistering): Released all slaves [ 545.909836][T21217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.917760][T21217] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 545.931012][T21217] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 545.955878][T21217] bond2: (slave vti0): making interface the new active one [ 545.966938][T21217] vti0: entered promiscuous mode [ 545.991152][T21217] bond2: (slave vti0): Enslaving as an active interface with an up link [ 546.007995][T21231] bond0: (slave rose0): Enslaving as an active interface with an up link [ 546.028415][T21246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3811'. [ 546.041259][T21246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3811'. [ 547.224564][T21326] netlink: 'syz.0.3829': attribute type 1 has an invalid length. [ 547.254400][T21320] 8021q: VLANs not supported on vxcan0 [ 547.292715][T21326] bond2: entered promiscuous mode [ 547.299163][T21326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 547.334591][T21320] lo speed is unknown, defaulting to 1000 [ 547.356947][T21333] IPv6: sit1: Disabled Multicast RS [ 547.408152][T21326] 8021q: adding VLAN 0 to HW filter on device bond3 [ 547.419423][T21326] bond2: (slave bond3): making interface the new active one [ 547.428710][T21326] bond3: entered promiscuous mode [ 547.434850][T21326] bond2: (slave bond3): Enslaving as an active interface with an up link [ 547.450431][T21320] lo speed is unknown, defaulting to 1000 [ 547.501684][T21320] lo speed is unknown, defaulting to 1000 [ 547.581734][T21320] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 547.673636][T21341] syzkaller0: entered promiscuous mode [ 547.713803][T21341] syzkaller0: entered allmulticast mode [ 547.745696][T21320] lo speed is unknown, defaulting to 1000 [ 547.754602][T21320] lo speed is unknown, defaulting to 1000 [ 547.774372][T21320] lo speed is unknown, defaulting to 1000 [ 547.795749][T21320] lo speed is unknown, defaulting to 1000 [ 547.820519][T21320] lo speed is unknown, defaulting to 1000 [ 547.893488][T21355] netlink: 'syz.1.3836': attribute type 58 has an invalid length. [ 548.899687][ T9260] net_ratelimit: 144 callbacks suppressed [ 548.899710][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 548.931941][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 548.962392][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.022956][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.050214][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.081282][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.119982][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.162521][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.191170][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.220177][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.490242][T21418] netlink: 'syz.4.3843': attribute type 1 has an invalid length. [ 550.659144][T21422] __nla_validate_parse: 46 callbacks suppressed [ 550.659166][T21422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3843'. [ 550.777131][T21424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3843'. [ 551.025076][T21420] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.035649][T21420] bond3: (slave bond4): making interface the new active one [ 551.044314][T21420] bond3: (slave bond4): Enslaving as an active interface with an up link [ 551.063038][T21421] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 551.080116][T21422] 8021q: adding VLAN 0 to HW filter on device bond3 [ 551.212157][T21441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3848'. [ 553.156139][T21462] syzkaller0: entered promiscuous mode [ 553.175647][T21462] syzkaller0: entered allmulticast mode [ 553.192342][T21459] tipc: Started in network mode [ 553.207299][T21459] tipc: Node identity e6887d96361a, cluster identity 4711 [ 553.218600][T21459] tipc: Enabled bearer , priority 0 [ 553.266229][T21459] tipc: Resetting bearer [ 553.332907][T21459] tipc: Disabling bearer [ 553.353604][T21474] delete_channel: no stack [ 553.492635][T21481] xt_hashlimit: size too large, truncated to 1048576 [ 553.557937][T21489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3861'. [ 553.930558][T21503] syzkaller1: entered promiscuous mode [ 553.936309][T21503] syzkaller1: entered allmulticast mode [ 553.976862][ T1104] net_ratelimit: 194 callbacks suppressed [ 553.976886][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 553.997064][ T1104] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.109820][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 554.136784][ T1104] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.259655][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 554.275044][ T1104] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.333258][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3873'. [ 554.347625][T21517] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3872'. [ 554.419594][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 554.443899][ T9272] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 554.463487][T21530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.586735][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 554.735953][T21530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3873'. [ 555.036057][T21551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3884'. [ 555.039862][T21550] netlink: 'syz.2.3883': attribute type 1 has an invalid length. [ 555.095479][T21554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3882'. [ 555.107156][T21554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3882'. [ 555.204862][T21562] gtp0: entered promiscuous mode [ 555.221708][T21562] gtp0: entered allmulticast mode [ 555.436009][T21579] netlink: 'syz.0.3889': attribute type 14 has an invalid length. [ 555.621968][T21584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.828368][T21593] __nla_validate_parse: 1 callbacks suppressed [ 555.828389][T21593] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3894'. [ 556.102495][T21611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3898'. [ 556.562112][T21636] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3903'. [ 556.584265][T21631] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.3904'. [ 556.608212][T21636] .70: renamed from hsr0 (while UP) [ 556.646053][T21636] .70: entered allmulticast mode [ 556.658710][T21636] hsr_slave_0: entered allmulticast mode [ 556.664428][T21636] hsr_slave_1: entered allmulticast mode [ 556.719307][T21641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3905'. [ 557.217344][T21670] bond0: entered promiscuous mode [ 557.228925][T21670] batadv0: entered promiscuous mode [ 557.281865][T21670] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 557.317744][T21670] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 557.365764][T21670] bond0: left promiscuous mode [ 557.391256][T21670] batadv0: left promiscuous mode [ 557.536345][T21682] netlink: 'syz.1.3914': attribute type 30 has an invalid length. [ 557.723961][T21690] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3914'. [ 557.753153][T21691] sock: sock_timestamping_bind_phc: sock not bind to device [ 558.171057][T11881] lec:lec_start_xmit: lec0:No lecd attached [ 559.007013][ T1104] net_ratelimit: 95 callbacks suppressed [ 559.007035][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.020898][ T1104] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.146765][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.154578][ T9260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.267052][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.276098][ T1104] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.386775][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.394901][ T6347] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.506941][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.514885][ T9260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 559.810334][T21660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.085233][T21710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3919'. [ 560.212880][T21710] 8021q: adding VLAN 0 to HW filter on device bond4 [ 560.230131][T21717] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 560.239964][T21717] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 560.299037][T21727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3919'. [ 560.353437][T21730] siw: device registration error -23 [ 560.389603][T21727] bond4 (unregistering): (slave batadv2): Releasing backup interface [ 560.438511][T21727] bond4 (unregistering): Released all slaves [ 560.496104][T21729] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 560.521976][T21726] lo speed is unknown, defaulting to 1000 [ 560.540038][T21736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.566998][ T9272] bond0: (slave bond_slave_0): interface is now down [ 560.574096][ T9272] bond0: (slave bond_slave_1): interface is now down [ 560.912442][T21748] syzkaller0: entered promiscuous mode [ 560.918129][T21748] syzkaller0: entered allmulticast mode [ 561.222276][T21763] netlink: 'syz.3.3938': attribute type 83 has an invalid length. [ 561.245854][T21763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3938'. [ 561.289218][T21767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3939'. [ 561.518503][T21777] netlink: 'syz.2.3944': attribute type 1 has an invalid length. [ 561.561343][T21777] bond4: entered promiscuous mode [ 561.566445][T21777] bond4: entered allmulticast mode [ 561.576242][T21777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 561.710193][T21779] bond4: entered promiscuous mode [ 561.774979][T21777] macvlan0: entered promiscuous mode [ 561.781476][T21777] macvlan0: entered allmulticast mode [ 561.834477][T21777] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 561.915827][T21785] macvlan0: entered promiscuous mode [ 561.923962][T21785] macvlan0: entered allmulticast mode [ 561.934392][T21785] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 561.987414][T21807] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3948'. [ 562.008325][T21797] lo speed is unknown, defaulting to 1000 [ 562.011318][T21803] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3948'. [ 562.221453][T21816] xt_hashlimit: size too large, truncated to 1048576 [ 562.332604][T21821] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3953'. [ 562.552712][T21836] tipc: Enabled bearer , priority 0 [ 562.672246][T21844] syzkaller0: entered promiscuous mode [ 562.710699][T21844] syzkaller0: entered allmulticast mode [ 562.781370][T21816] tipc: Resetting bearer [ 562.797721][T21854] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3962'. [ 563.089956][T21815] tipc: Resetting bearer [ 563.140729][T21815] tipc: Disabling bearer [ 563.186658][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 563.194937][ C0] lec:lec_tx_timeout: lec0 [ 563.199660][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 563.209354][T21877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3967'. [ 563.473273][T21885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3969'. [ 563.519055][T21885] bond5: entered promiscuous mode [ 563.525123][T21885] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.532880][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3971'. [ 563.564640][T21895] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.592389][T21895] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 563.648588][T21885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 563.656099][T21885] IPv6: NLM_F_CREATE should be set when creating new route [ 563.663345][T21885] IPv6: NLM_F_CREATE should be set when creating new route [ 563.676242][T21885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 563.688596][T21895] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 563.739982][T21897] lo speed is unknown, defaulting to 1000 [ 563.921380][T21913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3978'. [ 564.016699][ T6347] net_ratelimit: 130 callbacks suppressed [ 564.016722][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.074012][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.137228][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.145117][ T9260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 564.267425][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.304071][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.337114][ T9260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 564.442466][T21941] erspan0: entered promiscuous mode [ 564.449971][T21941] vlan3: entered promiscuous mode [ 564.477151][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.492763][T21939] syzkaller0: entered promiscuous mode [ 564.519667][T21939] syzkaller0: entered allmulticast mode [ 564.529786][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.559281][ T9260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 564.617684][T21952] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 564.721186][T21952] : renamed from bond_slave_0 (while UP) [ 564.742330][T21958] netlink: 'syz.1.3993': attribute type 21 has an invalid length. [ 564.776678][T21956] lo speed is unknown, defaulting to 1000 [ 564.904038][T21970] netlink: 'syz.0.3996': attribute type 7 has an invalid length. [ 565.127283][T17193] Bluetooth: hci3: command 0x0405 tx timeout [ 565.390299][T21996] syzkaller0: entered promiscuous mode [ 565.472389][T22000] tipc: Started in network mode [ 565.477757][T22000] tipc: Node identity e63be4378bb5, cluster identity 4711 [ 565.485349][T22000] tipc: Enabled bearer , priority 0 [ 565.496198][T22000] syzkaller0: entered promiscuous mode [ 565.502318][T22000] syzkaller0: entered allmulticast mode [ 565.512239][T22000] netlink: 'syz.2.4005': attribute type 2 has an invalid length. [ 565.520861][T22000] netlink: 'syz.2.4005': attribute type 2 has an invalid length. [ 565.549534][T22000] tipc: Resetting bearer [ 565.575966][T21998] lo speed is unknown, defaulting to 1000 [ 565.602405][T21999] tipc: Resetting bearer [ 565.608292][ T1539] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 423 sec [ 565.648178][T21999] tipc: Disabling bearer [ 565.885880][T22018] netlink: 'syz.0.4009': attribute type 10 has an invalid length. [ 565.914882][T22018] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 566.113421][T22034] veth0_to_bridge: entered promiscuous mode [ 566.204596][T22039] lo speed is unknown, defaulting to 1000 [ 566.281685][T22023] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 566.291104][T22032] veth0_to_bridge: left promiscuous mode [ 566.395716][T22043] __nla_validate_parse: 13 callbacks suppressed [ 566.395757][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4016'. [ 566.522202][T22052] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4019'. [ 566.614053][T22056] netlink: 'syz.2.4020': attribute type 14 has an invalid length. [ 566.821208][T22070] team_slave_0: entered promiscuous mode [ 566.835745][T22070] team_slave_0: entered allmulticast mode [ 567.068464][T22084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4026'. [ 567.611222][T22116] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4034'. [ 567.763168][T22127] syzkaller1: entered promiscuous mode [ 567.770914][T22127] syzkaller1: entered allmulticast mode [ 567.799290][T22135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4033'. [ 567.901867][T22130] lo speed is unknown, defaulting to 1000 [ 568.216796][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 568.224967][ C0] lec:lec_tx_timeout: lec0 [ 568.425635][T22167] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4048'. [ 568.492236][T22167] vlan2: entered promiscuous mode [ 568.549399][T22167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4048'. [ 568.597164][T22177] xt_policy: output policy not valid in PREROUTING and INPUT [ 568.621518][T22180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4051'. [ 568.752647][T22187] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004 [ 568.794770][T22189] bond1: left promiscuous mode [ 568.823286][T22189] vlan0: left promiscuous mode [ 568.831247][T22189] vlan1: left promiscuous mode [ 568.849483][T22189] bridge0: left promiscuous mode [ 568.861557][T22189] bond4: left promiscuous mode [ 568.888317][T22189] vlan2: left promiscuous mode [ 568.895008][T22189] bond0: left promiscuous mode [ 568.900533][T22189] : left promiscuous mode [ 568.905498][T22189] bond_slave_1: left promiscuous mode [ 568.982124][T22202] lo speed is unknown, defaulting to 1000 [ 569.039182][ T9262] net_ratelimit: 114 callbacks suppressed [ 569.039204][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.056731][ T9262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.167870][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.186275][ T9262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.298653][T22215] netlink: 'syz.3.4064': attribute type 29 has an invalid length. [ 569.318490][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.327215][ T9262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.436678][ T6347] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.456713][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.476673][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.494200][ T9262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 569.873924][T22233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4068'. [ 569.927665][T22237] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4068'. [ 570.644671][T22258] syzkaller0: entered promiscuous mode [ 570.651663][T22258] syzkaller0: entered allmulticast mode [ 572.596723][T22281] __nla_validate_parse: 2 callbacks suppressed [ 572.596745][T22281] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.4081'. [ 572.815884][T22302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4087'. [ 572.836999][T22302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4087'. [ 572.946885][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4090'. [ 573.510130][ T5186] udevd[5186]: worker [18163] /devices/virtual/block/nbd0 is taking a long time [ 573.549618][T22354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4106'. [ 573.762644][T22362] Bluetooth: MGMT ver 1.23 [ 573.835781][T22365] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4111'. [ 574.046746][ T9272] net_ratelimit: 154 callbacks suppressed [ 574.046767][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.066280][ T9272] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 574.108811][ T9272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.135157][ T9272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.144581][ T9272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.166714][ T9272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.197509][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.207755][ T9272] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 574.316731][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.324691][ T9272] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 574.342512][T22387] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4117'. [ 574.446809][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.454748][ T9272] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 574.486036][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4119'. [ 574.495317][T22391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4119'. [ 574.506034][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4119'. [ 574.571456][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.606780][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.629243][T22399] tipc: Started in network mode [ 574.634331][T22399] tipc: Node identity 0ebdd2fdeb65, cluster identity 4711 [ 574.643313][T22399] tipc: Enabled bearer , priority 0 [ 574.650963][T22399] syzkaller0: entered promiscuous mode [ 574.659990][T22399] syzkaller0: entered allmulticast mode [ 574.682615][T22399] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 574.695397][T22399] tipc: Resetting bearer [ 574.752770][T22404] tipc: Resetting bearer [ 574.791579][T22404] tipc: Disabling bearer [ 575.284663][T22429] vlan3: entered promiscuous mode [ 575.299113][T22429] geneve1: entered promiscuous mode [ 575.317297][T22429] vlan3: entered allmulticast mode [ 575.322775][T22429] geneve1: entered allmulticast mode [ 575.621072][T22434] netlink: 'syz.0.4131': attribute type 1 has an invalid length. [ 576.806023][T22498] netlink: 'syz.0.4150': attribute type 1 has an invalid length. [ 577.001177][T22505] netlink: 'syz.3.4153': attribute type 2 has an invalid length. [ 577.025808][T22505] netlink: 'syz.3.4153': attribute type 1 has an invalid length. [ 577.041308][T22505] netlink: 'syz.3.4153': attribute type 1 has an invalid length. [ 577.081066][T22509] syzkaller0: entered promiscuous mode [ 577.087049][T22509] syzkaller0: entered allmulticast mode [ 577.115781][T22505] netlink: 'syz.3.4153': attribute type 1 has an invalid length. [ 577.289317][T22518] netlink: 'syz.3.4156': attribute type 1 has an invalid length. [ 577.351069][T22518] bond5: entered promiscuous mode [ 577.356847][T22518] 8021q: adding VLAN 0 to HW filter on device bond5 [ 577.381787][T22514] 8021q: adding VLAN 0 to HW filter on device bond5 [ 577.389196][T22514] bond5: (slave gre3): The slave device specified does not support setting the MAC address [ 577.399873][T22514] bond5: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 577.413266][T22514] bond5: (slave gre3): making interface the new active one [ 577.420961][T22514] gre3: entered promiscuous mode [ 577.428284][T22514] bond5: (slave gre3): Enslaving as an active interface with an up link [ 578.612345][T22560] lo speed is unknown, defaulting to 1000 [ 578.762432][T22567] syzkaller0: entered allmulticast mode [ 578.873935][T22567] syzkaller0 (unregistering): left allmulticast mode [ 579.050834][T22570] __nla_validate_parse: 4 callbacks suppressed [ 579.050864][T22570] netlink: 840 bytes leftover after parsing attributes in process `syz.2.4170'. [ 579.068836][ T9260] net_ratelimit: 114 callbacks suppressed [ 579.068859][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.100894][ T9260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 579.246758][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.254669][ T1104] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 579.340617][T22585] syzkaller0: entered promiscuous mode [ 579.346350][T22585] syzkaller0: entered allmulticast mode [ 579.354492][T22581] syzkaller1: entered promiscuous mode [ 579.370577][T22581] syzkaller1: entered allmulticast mode [ 579.379867][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.406985][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.437182][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.467085][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.498895][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.537311][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.669800][T22603] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4181'. [ 579.680133][T22603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4181'. [ 579.831184][ T5834] Bluetooth: hci1: link tx timeout [ 579.841529][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 579.870084][T22612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4185'. [ 580.092986][T22618] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4186'. [ 580.849098][T22640] lo speed is unknown, defaulting to 1000 [ 580.884366][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4193'. [ 580.917000][T22649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4195'. [ 581.346093][T22669] netlink: 'syz.3.4193': attribute type 9 has an invalid length. [ 581.354054][T22669] netlink: 'syz.3.4193': attribute type 6 has an invalid length. [ 581.409219][T22662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4197'. [ 581.929547][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 581.949834][T22681] Cannot find add_set index 2 as target [ 581.969055][T22682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4202'. [ 582.005346][T22682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4202'. [ 582.261471][T22706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.750034][T22717] lo: entered allmulticast mode [ 582.960800][T22722] ip6gre1: entered allmulticast mode [ 583.449614][T22740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.179614][ T1104] net_ratelimit: 107 callbacks suppressed [ 584.179639][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.204141][ T1104] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 584.314668][T22771] __nla_validate_parse: 3 callbacks suppressed [ 584.314688][T22771] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4227'. [ 584.331435][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.340436][ T9260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 584.458160][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.466206][ T1104] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 584.529578][T22776] lo speed is unknown, defaulting to 1000 [ 584.537159][T22781] netlink: 'syz.2.4231': attribute type 1 has an invalid length. [ 584.597159][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.637711][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.666881][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.698456][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 585.060033][T22799] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4238'. [ 585.090269][T22796] tipc: Enabled bearer , priority 0 [ 585.101079][T22796] syzkaller0: entered promiscuous mode [ 585.121393][T22796] syzkaller0: entered allmulticast mode [ 585.200504][T22796] tipc: Resetting bearer [ 585.228812][T22794] tipc: Resetting bearer [ 585.292817][T22794] tipc: Disabling bearer [ 585.477315][T22823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4239'. [ 585.549008][T22822] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4241'. [ 585.709787][T22835] netlink: 'syz.2.4243': attribute type 1 has an invalid length. [ 585.718744][T22835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4243'. [ 585.768836][T22837] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4243'. [ 585.769887][T22835] NCSI netlink: No device for ifindex 0 [ 585.812248][T22832] lo speed is unknown, defaulting to 1000 [ 585.910078][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4244'. [ 586.015478][T22843] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.173445][T22843] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.237597][T22843] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.313336][T22843] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.415228][T22872] netlink: 'syz.2.4253': attribute type 13 has an invalid length. [ 586.416523][T22870] RDS: rds_bind could not find a transport for 0:0:20::, load rds_tcp or rds_rdma? [ 586.484358][T22873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4253'. [ 586.858396][T22884] FAULT_INJECTION: forcing a failure. [ 586.858396][T22884] name failslab, interval 1, probability 0, space 0, times 0 [ 586.886109][T22877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4254'. [ 586.898140][T22877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4254'. [ 586.913047][T22884] CPU: 1 UID: 0 PID: 22884 Comm: syz.4.4257 Not tainted syzkaller #0 PREEMPT(full) [ 586.913076][T22884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.913087][T22884] Call Trace: [ 586.913094][T22884] [ 586.913101][T22884] dump_stack_lvl+0xe8/0x150 [ 586.913131][T22884] should_fail_ex+0x412/0x560 [ 586.913162][T22884] should_failslab+0xa8/0x100 [ 586.913190][T22884] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 586.913213][T22884] ? __alloc_skb+0x186/0x7d0 [ 586.913233][T22884] ? __alloc_skb+0x1d0/0x7d0 [ 586.913248][T22884] ? __local_bh_enable_ip+0xd0/0x130 [ 586.913271][T22884] __alloc_skb+0x1d0/0x7d0 [ 586.913284][T22884] ? netlink_ack_tlv_len+0x6c/0x210 [ 586.913297][T22884] netlink_ack+0x146/0xa50 [ 586.913307][T22884] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 586.913329][T22884] netlink_rcv_skb+0x2b6/0x4b0 [ 586.913341][T22884] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 586.913354][T22884] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 586.913371][T22884] ? netlink_deliver_tap+0x2e/0x1b0 [ 586.913387][T22884] netlink_unicast+0x80f/0x9b0 [ 586.913407][T22884] ? __pfx_netlink_unicast+0x10/0x10 [ 586.913425][T22884] ? netlink_sendmsg+0x650/0xb40 [ 586.913435][T22884] ? skb_put+0x11b/0x210 [ 586.913449][T22884] netlink_sendmsg+0x813/0xb40 [ 586.913466][T22884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.913479][T22884] ? aa_sock_msg_perm+0xf1/0x1b0 [ 586.913498][T22884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 586.913515][T22884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.913526][T22884] ____sys_sendmsg+0xa68/0xad0 [ 586.913539][T22884] ? __might_fault+0xaf/0x130 [ 586.913556][T22884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.913575][T22884] ? import_iovec+0x73/0xa0 [ 586.913589][T22884] ___sys_sendmsg+0x2a5/0x360 [ 586.913602][T22884] ? __lock_acquire+0x6b5/0x2cf0 [ 586.913617][T22884] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.913651][T22884] ? __fget_files+0x2a/0x420 [ 586.913662][T22884] ? __fget_files+0x3a0/0x420 [ 586.913678][T22884] __x64_sys_sendmsg+0x1bd/0x2a0 [ 586.913694][T22884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 586.913714][T22884] ? __pfx_ksys_write+0x10/0x10 [ 586.913752][T22884] do_syscall_64+0x14d/0xf80 [ 586.913767][T22884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.913778][T22884] ? trace_irq_disable+0x37/0x100 [ 586.913791][T22884] ? clear_bhb_loop+0x40/0x90 [ 586.913805][T22884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.913815][T22884] RIP: 0033:0x7f3ae319c629 [ 586.913827][T22884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.913837][T22884] RSP: 002b:00007f3ae401a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.913851][T22884] RAX: ffffffffffffffda RBX: 00007f3ae3415fa0 RCX: 00007f3ae319c629 [ 586.913860][T22884] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 586.913868][T22884] RBP: 00007f3ae401a090 R08: 0000000000000000 R09: 0000000000000000 [ 586.913875][T22884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.913882][T22884] R13: 00007f3ae3416038 R14: 00007f3ae3415fa0 R15: 00007ffd0c94f3e8 [ 586.913900][T22884] [ 586.914749][ T9272] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.378426][ T1104] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.388082][ T1104] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.403226][T22909] netlink: 'syz.0.4262': attribute type 1 has an invalid length. [ 587.470317][ T9262] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.552891][T22912] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 587.588331][T22912] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 587.620032][T22909] bond7: (slave bridge2): Enslaving as an active interface with a down link [ 587.778913][T22919] bond7: (slave bridge3): Enslaving as an active interface with a down link [ 587.812506][T22916] lo speed is unknown, defaulting to 1000 [ 587.989560][T22918] lo speed is unknown, defaulting to 1000 [ 588.697815][T22973] netlink: 'syz.1.4277': attribute type 39 has an invalid length. [ 588.780791][T22976] netlink: 'syz.1.4277': attribute type 5 has an invalid length. [ 589.125739][T22989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.186746][ T1104] net_ratelimit: 144 callbacks suppressed [ 589.186768][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.233882][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.267169][ T1104] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.287758][T22999] netlink: 'syz.2.4285': attribute type 21 has an invalid length. [ 589.297877][ T9262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.305667][ T9262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 589.323755][T22999] __nla_validate_parse: 16 callbacks suppressed [ 589.323777][T22999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4285'. [ 589.354443][T23002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4286'. [ 589.382288][T23002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.426930][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.446945][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.455715][ T9269] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 589.547183][T23012] ip6t_srh: unknown srh invflags 4000 [ 589.577015][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.644672][T23009] netlink: 'syz.0.4288': attribute type 4 has an invalid length. [ 589.654126][T23009] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4288'. [ 589.663895][T23009] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4288'. [ 589.673743][T23015] syzkaller0: entered promiscuous mode [ 589.686163][T23015] syzkaller0: entered allmulticast mode [ 589.923512][T23027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4293'. [ 590.047422][T23030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4296'. [ 590.094825][T23030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4296'. [ 590.117613][T23030] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 590.134592][T23030] 8021q: adding VLAN 0 to HW filter on device bond5 [ 590.260891][T23044] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 590.282119][T23041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4300'. [ 590.393069][T23046] syzkaller0: entered promiscuous mode [ 590.398968][T23046] syzkaller0: entered allmulticast mode [ 590.407317][T23053] tipc: Enabled bearer , priority 0 [ 590.416520][T23052] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4304'. [ 590.430785][T23045] tipc: Resetting bearer [ 592.209767][T23045] tipc: Disabling bearer [ 592.224887][ T24] tipc: Node number set to 1838081079 [ 592.270076][T23060] macvtap1: entered promiscuous mode [ 592.286883][T23060] macvtap1: entered allmulticast mode [ 592.292946][T23060] dummy0: entered allmulticast mode [ 592.302589][T23060] dummy0: entered promiscuous mode [ 592.316081][T23060] team0: Device macvtap1 failed to register rx_handler [ 592.324974][T23060] dummy0: left allmulticast mode [ 592.356072][T23060] dummy0: left promiscuous mode [ 592.403527][T23050] lo speed is unknown, defaulting to 1000 [ 592.519889][T23071] dvmrp0: entered allmulticast mode [ 592.752446][T23077] syzkaller0: create flow: hash 1177646987 index 1 [ 592.792615][T23076] syzkaller0: delete flow: hash 1177646987 index 1 [ 594.206735][ T9269] net_ratelimit: 189 callbacks suppressed [ 594.206759][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.237861][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.258849][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.287930][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.306748][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.327175][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.347874][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.370774][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.406713][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.429680][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.873882][T23099] lo speed is unknown, defaulting to 1000 [ 594.924055][T23106] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4318'. [ 595.492854][T23144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4328'. [ 595.503575][T23144] netlink: 261 bytes leftover after parsing attributes in process `syz.4.4328'. [ 595.694481][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4330'. [ 595.931295][T23172] lo speed is unknown, defaulting to 1000 [ 596.148371][T23184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4337'. [ 596.157603][T23184] netlink: 'syz.1.4337': attribute type 7 has an invalid length. [ 596.190454][ T9262] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.203924][T23184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4337'. [ 596.215808][ T9262] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.252523][ T9262] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.277539][T23184] netlink: 'syz.1.4337': attribute type 7 has an invalid length. [ 596.315616][ T9262] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.006617][T23194] wlan1 speed is unknown, defaulting to 1000 [ 597.012773][T23194] wlan1 speed is unknown, defaulting to 1000 [ 597.137148][T23194] wlan1 speed is unknown, defaulting to 1000 [ 597.201763][T23194] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 597.212070][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4343'. [ 597.317570][T23194] wlan1 speed is unknown, defaulting to 1000 [ 597.388839][T23194] wlan1 speed is unknown, defaulting to 1000 [ 597.476396][T23194] wlan1 speed is unknown, defaulting to 1000 [ 597.507156][T23194] wlan1 speed is unknown, defaulting to 1000 [ 597.533587][T23194] wlan1 speed is unknown, defaulting to 1000 [ 597.593686][T23230] netlink: 'syz.3.4350': attribute type 309 has an invalid length. [ 597.751140][T23240] syzkaller0: entered promiscuous mode [ 597.757237][T23240] syzkaller0: entered allmulticast mode [ 597.940670][T23245] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4353'. [ 598.080362][T23254] lo: entered allmulticast mode [ 598.106836][T23255] lo: left allmulticast mode [ 598.657442][T23279] lo speed is unknown, defaulting to 1000 [ 598.674861][T23279] wlan1 speed is unknown, defaulting to 1000 [ 598.683138][T23274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4360'. [ 598.730765][T23286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4365'. [ 599.314084][ T9260] net_ratelimit: 145 callbacks suppressed [ 599.314102][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.329430][ T9260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 599.436788][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.444863][ T9269] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 599.556952][ T9260] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.564859][ T9260] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 599.677219][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.685187][ T9269] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 599.806749][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.814571][ T9258] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 600.607878][T23234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.779968][T23299] xt_connbytes: Forcing CT accounting to be enabled [ 600.842898][T23307] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4371'. [ 600.971969][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 600.972941][T23309] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 601.119018][T23318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4375'. [ 601.146219][T23318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4375'. [ 601.286219][T23331] netlink: 'syz.0.4380': attribute type 4 has an invalid length. [ 601.313081][T23331] netlink: 'syz.0.4380': attribute type 2 has an invalid length. [ 601.335571][T23331] !: entered promiscuous mode [ 601.597036][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4384'. [ 601.898994][T23344] bond6: option all_slaves_active: invalid value (13) [ 602.409484][T23344] bond6 (unregistering): Released all slaves [ 602.645951][T23355] tipc: Enabling of bearer rejected, failed to enable media [ 602.927164][T23380] syzkaller1: entered promiscuous mode [ 602.932788][T23380] syzkaller1: entered allmulticast mode [ 602.979222][T23386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4390'. [ 603.037247][T23380] IPVS: length: 25 != 24 [ 603.379991][T23408] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4400'. [ 603.380765][T23396] syzkaller0: entered promiscuous mode [ 603.398282][T23396] syzkaller0: entered allmulticast mode [ 603.399338][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4399'. [ 604.317558][ T9264] net_ratelimit: 144 callbacks suppressed [ 604.317585][ T9264] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.346719][ T9264] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.366750][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.408287][ T9264] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.431325][ T9264] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.461767][ T9264] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.492265][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.516796][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.539071][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.566792][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 605.804848][T23447] IPVS: length: 4096 != 8 [ 605.817559][T23446] syzkaller1: entered promiscuous mode [ 605.823187][T23446] syzkaller1: entered allmulticast mode [ 605.872686][T23450] Cannot find add_set index 3 as target [ 606.042903][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4414'. [ 606.060005][T23463] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4413'. [ 606.559640][T23478] syzkaller0: entered promiscuous mode [ 606.565359][T23478] syzkaller0: entered allmulticast mode [ 606.578627][T23463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 606.601847][T23483] syzkaller1: entered promiscuous mode [ 606.607524][T23483] syzkaller1: entered allmulticast mode [ 606.844482][T23495] lo speed is unknown, defaulting to 1000 [ 606.862785][T23495] wlan1 speed is unknown, defaulting to 1000 [ 606.937488][T23498] netlink: 'syz.1.4425': attribute type 1 has an invalid length. [ 607.068497][T23497] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 607.107736][T23497] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 607.318747][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4429'. [ 607.383237][T23525] netlink: 'syz.4.4431': attribute type 2 has an invalid length. [ 607.465802][T23530] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4432'. [ 607.722299][T23539] syzkaller0: entered promiscuous mode [ 607.728224][T23539] syzkaller0: entered allmulticast mode [ 609.406764][ T13] net_ratelimit: 126 callbacks suppressed [ 609.406782][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 609.421397][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 609.537056][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 609.544992][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 609.656781][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 609.664699][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 609.777216][ T9264] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 609.785131][ T9264] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 609.896769][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 609.904636][T23368] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 610.381426][T23525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.882735][T23581] tipc: Enabled bearer , priority 0 [ 610.902604][T23581] syzkaller0: entered promiscuous mode [ 610.909333][T23581] syzkaller0: entered allmulticast mode [ 610.949358][T23581] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 611.033839][T23581] tipc: Resetting bearer [ 611.067738][T23600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4452'. [ 611.077222][T23580] tipc: Resetting bearer [ 611.095642][T23580] tipc: Disabling bearer [ 611.123207][T23591] lo speed is unknown, defaulting to 1000 [ 611.142326][T23591] wlan1 speed is unknown, defaulting to 1000 [ 611.243741][T23605] lo speed is unknown, defaulting to 1000 [ 611.290342][T23605] wlan1 speed is unknown, defaulting to 1000 [ 611.448057][T23618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4457'. [ 611.506285][T23618] netlink: 'syz.3.4457': attribute type 1 has an invalid length. [ 611.561628][T23618] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4457'. [ 611.627995][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4460'. [ 611.664217][T23630] lo speed is unknown, defaulting to 1000 [ 611.676932][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4460'. [ 611.699795][T23630] wlan1 speed is unknown, defaulting to 1000 [ 611.755097][T23637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4463'. [ 612.003971][T23643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4465'. [ 612.094830][T23654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4467'. [ 612.104064][T23654] netlink: 'syz.3.4467': attribute type 5 has an invalid length. [ 612.111933][T23654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4467'. [ 612.162493][T23654] geneve3: entered promiscuous mode [ 612.168433][T23654] geneve3: entered allmulticast mode [ 612.199931][ T9258] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 612.370287][ T9258] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 612.404441][ T9258] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 612.622869][ T9258] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 612.712703][T23692] netlink: 'syz.0.4476': attribute type 12 has an invalid length. [ 612.723309][T23678] netlink: 'syz.4.4473': attribute type 10 has an invalid length. [ 612.731431][T23678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4473'. [ 612.817394][T23678] dummy0: entered promiscuous mode [ 612.824268][T23678] bridge0: port 3(dummy0) entered blocking state [ 612.836887][T23678] bridge0: port 3(dummy0) entered disabled state [ 612.854269][T23678] dummy0: entered allmulticast mode [ 613.081968][T23703] netlink: 'syz.2.4479': attribute type 1 has an invalid length. [ 613.095507][T23703] NCSI netlink: No device for ifindex 0 [ 613.103678][T23708] netlink: 'syz.2.4479': attribute type 1 has an invalid length. [ 613.114464][T23708] NCSI netlink: No device for ifindex 0 [ 613.335611][T23720] xt_TCPMSS: Only works on TCP SYN packets [ 613.399292][T23724] xt_TCPMSS: Only works on TCP SYN packets [ 613.590051][T23730] veth0: entered promiscuous mode [ 613.828153][T23741] bond6: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 613.843109][T23741] bond6 (unregistering): Released all slaves [ 614.282114][ T1087] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.295113][ T1087] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.320690][ T1087] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.350521][ T1087] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.492483][ T1087] net_ratelimit: 115 callbacks suppressed [ 614.492507][ T1087] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.519860][T23777] syzkaller0: entered promiscuous mode [ 614.526715][ T1087] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.534575][T23777] syzkaller0: entered allmulticast mode [ 614.576803][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.599769][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.626633][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.652374][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.693826][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.738815][T23787] openvswitch: netlink: IP tunnel dst address not specified [ 614.741174][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 614.779258][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 616.950086][T23817] __nla_validate_parse: 10 callbacks suppressed [ 616.950110][T23817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4515'. [ 617.000558][T23817] macvtap1: entered promiscuous mode [ 617.016348][T23817] mac80211_hwsim hwsim106 wlan1: entered promiscuous mode [ 617.069238][T23826] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4518'. [ 617.179852][T23824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4515'. [ 617.210545][T23831] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 617.515721][T23845] netlink: 'syz.4.4525': attribute type 1 has an invalid length. [ 617.610731][T23845] bond6: entered promiscuous mode [ 617.627464][T23845] 8021q: adding VLAN 0 to HW filter on device bond6 [ 617.684797][T23853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4526'. [ 617.989188][T23864] xt_socket: unknown flags 0xfc [ 618.049328][T23870] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4534'. [ 619.507871][ T9258] net_ratelimit: 210 callbacks suppressed [ 619.507895][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.552333][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.579398][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.614861][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.654261][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.681175][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.694733][T23902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4543'. [ 619.712751][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.736722][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.760738][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 619.798829][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 620.355088][T23908] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 620.376394][T23908] syzkaller0: entered promiscuous mode [ 620.393704][T23908] syzkaller0: entered allmulticast mode [ 620.412420][T23883] lo speed is unknown, defaulting to 1000 [ 620.480777][T23883] wlan1 speed is unknown, defaulting to 1000 [ 620.818800][T23935] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4551'. [ 621.326400][T23946] atomic_op ffff888052037998 conn xmit_atomic 0000000000000000 [ 621.361532][T23947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4555'. [ 621.816449][T11881] lec:lec_start_xmit: lec0:No lecd attached [ 621.851329][T23969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4562'. [ 621.877954][T23969] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4562'. [ 621.922425][T23969] lo: Caught tx_queue_len zero misconfig [ 621.999182][T23969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4562'. [ 622.044845][T23976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4565'. [ 622.123701][T23973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4563'. [ 622.145483][T23981] lo speed is unknown, defaulting to 1000 [ 622.154787][T23981] wlan1 speed is unknown, defaulting to 1000 [ 622.182171][T23973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4563'. [ 622.216063][T23972] netlink: 'syz.1.4564': attribute type 1 has an invalid length. [ 622.236714][T23972] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4564'. [ 622.254515][T23973] netlink: 'syz.3.4563': attribute type 11 has an invalid length. [ 622.325182][T23990] sctp: [Deprecated]: syz.0.4568 (pid 23990) Use of int in max_burst socket option. [ 622.325182][T23990] Use struct sctp_assoc_value instead [ 622.707316][T24011] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4574'. [ 622.792636][T24012] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4574'. [ 622.920613][T24030] netlink: 'syz.1.4577': attribute type 10 has an invalid length. [ 622.957752][T24030] dummy0: entered promiscuous mode [ 622.963595][T24030] dummy0: entered allmulticast mode [ 623.004536][T24035] netlink: 'syz.1.4577': attribute type 10 has an invalid length. [ 623.048876][T24030] team0: Port device dummy0 added [ 623.131136][T24035] dummy0: left promiscuous mode [ 623.143067][T24035] dummy0: left allmulticast mode [ 623.221767][T24035] team0: Port device dummy0 removed [ 623.642639][T24060] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4585'. [ 623.666676][T24065] netlink: 'syz.2.4587': attribute type 1 has an invalid length. [ 623.690452][T24065] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4587'. [ 623.706648][T24065] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4587'. [ 623.959076][T24075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.967515][T24079] block nbd1: Unsupported socket: should be TCP or UNIX. [ 624.053166][T24075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.072231][T24075] bond0 (unregistering): Released all slaves [ 624.112447][ T24] wlan1 speed is unknown, defaulting to 1000 [ 624.135004][T24080] lo speed is unknown, defaulting to 1000 [ 624.261806][T24089] syzkaller0: entered promiscuous mode [ 624.267705][T24089] syzkaller0: entered allmulticast mode [ 624.279314][T24080] wlan1 speed is unknown, defaulting to 1000 [ 624.511818][ T9272] net_ratelimit: 135 callbacks suppressed [ 624.511844][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.546994][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.567560][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.592184][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.630370][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.661880][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.691769][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.726769][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.766857][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 624.796713][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 625.926835][ T1539] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 483 sec [ 626.554273][T24126] netlink: 'syz.0.4603': attribute type 1 has an invalid length. [ 626.659292][T24126] bond8: entered promiscuous mode [ 626.665850][T24126] bond8: entered allmulticast mode [ 626.672137][T24126] 8021q: adding VLAN 0 to HW filter on device bond8 [ 626.897121][T24138] : renamed from wg2 (while UP) [ 627.046831][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5230 ms [ 627.055018][ C0] lec:lec_tx_timeout: lec0 [ 627.059850][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 627.171264][T24151] lo speed is unknown, defaulting to 1000 [ 627.218720][T24151] wlan1 speed is unknown, defaulting to 1000 [ 627.248036][T24166] __nla_validate_parse: 5 callbacks suppressed [ 627.248058][T24166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4616'. [ 627.267042][T24166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4616'. [ 627.466335][T24179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4620'. [ 627.491587][T24182] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4617'. [ 627.509267][T24182] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4617'. [ 627.546790][T24182] netlink: 'syz.4.4617': attribute type 6 has an invalid length. [ 627.574715][T24182] netlink: 'syz.4.4617': attribute type 5 has an invalid length. [ 627.591428][T24182] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4617'. [ 627.628483][T24183] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 627.654040][T24186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4621'. [ 627.670315][T24186] tipc: Enabled bearer , priority 0 [ 627.794599][T24186] batadv_slave_0: entered promiscuous mode [ 627.797106][T24196] sctp: [Deprecated]: syz.0.4624 (pid 24196) Use of int in max_burst socket option. [ 627.797106][T24196] Use struct sctp_assoc_value instead [ 627.805664][T24186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4621'. [ 627.870084][T24185] batadv_slave_0: left promiscuous mode [ 628.007329][ T9272] wlan1: Trigger new scan to find an IBSS to join [ 628.024990][T24209] netlink: 'syz.2.4628': attribute type 1 has an invalid length. [ 628.037428][T24210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4629'. [ 628.045343][T24212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4630'. [ 628.303984][T17193] block nbd1: Receive control failed (result -32) [ 628.414567][T24209] bond6: entered promiscuous mode [ 628.420241][T24209] 8021q: adding VLAN 0 to HW filter on device bond6 [ 629.532302][ T13] net_ratelimit: 205 callbacks suppressed [ 629.532327][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.568160][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.587453][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.618675][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.646958][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.672551][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.704743][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.731887][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.758616][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 629.791885][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 630.847593][T24231] pim6reg: entered allmulticast mode [ 630.866489][T24240] : renamed from veth0_to_bond (while UP) [ 630.894757][ T9960] tipc: Node number set to 709337603 [ 630.975090][T24232] lo speed is unknown, defaulting to 1000 [ 631.004141][T24232] wlan1 speed is unknown, defaulting to 1000 [ 631.020320][T24248] bond0: Caught tx_queue_len zero misconfig [ 631.048914][ T35] wlan1: Trigger new scan to find an IBSS to join [ 631.112595][T24249] mac80211_hwsim hwsim88 wlan0: entered promiscuous mode [ 631.479468][T24268] netlink: 'syz.2.4639': attribute type 21 has an invalid length. [ 631.495036][T24268] netlink: 'syz.2.4639': attribute type 5 has an invalid length. [ 631.504155][T24268] netlink: 'syz.2.4639': attribute type 6 has an invalid length. [ 631.679708][T24279] macsec1: entered allmulticast mode [ 631.698300][T24279] dummy0: entered allmulticast mode [ 631.710658][T24279] dummy0: left allmulticast mode [ 631.949280][ T8228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.969904][ T9960] wlan1 speed is unknown, defaulting to 1000 [ 631.977338][ T9960] yz2: Port: 1 Link ACTIVE [ 632.066605][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 632.068797][T24308] lo speed is unknown, defaulting to 1000 [ 632.074749][ C0] lec:lec_tx_timeout: lec0 [ 632.134294][T24316] macvlan2: entered allmulticast mode [ 632.146236][T24316] hsr0: entered allmulticast mode [ 632.163442][T24316] hsr_slave_0: entered allmulticast mode [ 632.169707][T24316] hsr_slave_1: entered allmulticast mode [ 632.176644][T24308] wlan1 speed is unknown, defaulting to 1000 [ 632.183326][T24306] 8021q: VLANs not supported on caif0 [ 632.442503][T24334] __nla_validate_parse: 9 callbacks suppressed [ 632.442528][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4657'. [ 632.638685][T24340] netlink: 'syz.0.4659': attribute type 2 has an invalid length. [ 632.639342][T24338] lo speed is unknown, defaulting to 1000 [ 632.669887][T24329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4655'. [ 632.732853][T24335] netlink: 'syz.2.4655': attribute type 1 has an invalid length. [ 632.770491][T24338] wlan1 speed is unknown, defaulting to 1000 [ 632.863463][T24347] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.873979][T24347] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.999950][T24347] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.026608][T24347] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.297162][T24347] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.311803][T24347] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.415518][T24373] netlink: 'syz.3.4668': attribute type 4 has an invalid length. [ 633.431121][T24347] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.485485][T24347] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.533074][T24379] syzkaller0: entered promiscuous mode [ 633.541596][T24379] syzkaller0: entered allmulticast mode [ 633.571244][T24369] netlink: 'syz.3.4668': attribute type 4 has an invalid length. [ 633.626702][ T5886] lo speed is unknown, defaulting to 1000 [ 633.642881][ T5886] syz2: Port: 1 Link ACTIVE [ 633.758617][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.780603][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.879855][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.896778][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.938481][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.947351][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.966286][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.993415][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.188193][T24412] netlink: 'syz.1.4680': attribute type 16 has an invalid length. [ 634.201883][T24412] netlink: 'syz.1.4680': attribute type 17 has an invalid length. [ 634.252487][T24412] sit0: left promiscuous mode [ 634.286875][T24412] sit0: left allmulticast mode [ 634.404666][T24420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4684'. [ 634.576754][ T35] net_ratelimit: 146 callbacks suppressed [ 634.576779][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.606710][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.632148][ T8228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.640433][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.657605][ T35] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 634.665429][ T8228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.704390][T24430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4687'. [ 634.753158][T24430] bond7: entered promiscuous mode [ 634.757660][T24434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.758475][T24430] bond7: entered allmulticast mode [ 634.780523][T24430] 8021q: adding VLAN 0 to HW filter on device bond7 [ 634.787974][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.830255][T24435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4689'. [ 634.847048][ T9272] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.877416][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.916794][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 634.924593][ T8228] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 635.005577][T24447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4692'. [ 635.038255][T24447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4692'. [ 635.048488][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 635.067467][T24447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4692'. [ 635.224657][T24454] syzkaller0: entered promiscuous mode [ 635.230535][T24454] syzkaller0: entered allmulticast mode [ 635.327767][T24452] lo speed is unknown, defaulting to 1000 [ 635.426969][T24452] wlan1 speed is unknown, defaulting to 1000 [ 635.445462][T24465] syzkaller0: entered promiscuous mode [ 635.451282][T24465] syzkaller0: entered allmulticast mode [ 635.594993][T24480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4700'. [ 636.679673][T24522] syzkaller0: entered promiscuous mode [ 636.693470][T24522] syzkaller0: entered allmulticast mode [ 636.990675][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4716'. [ 637.149093][T24552] syzkaller0: entered promiscuous mode [ 637.154723][T24552] syzkaller0: entered allmulticast mode [ 637.249063][T24563] netlink: 'syz.0.4722': attribute type 83 has an invalid length. [ 637.488869][T24573] netlink: 'syz.3.4726': attribute type 1 has an invalid length. [ 637.645181][T24578] __nla_validate_parse: 8 callbacks suppressed [ 637.645203][T24578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4728'. [ 637.800187][T24581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4729'. [ 638.096405][T24595] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 638.318802][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4737'. [ 638.484664][T24610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4739'. [ 638.576463][T24615] tipc: Enabled bearer , priority 0 [ 638.588830][T24615] syzkaller0: entered promiscuous mode [ 638.594445][T24615] syzkaller0: entered allmulticast mode [ 638.618896][T24612] syzkaller1: entered promiscuous mode [ 638.636829][T24612] syzkaller1: entered allmulticast mode [ 638.697774][T24615] tipc: Resetting bearer [ 638.704157][T24612] lo speed is unknown, defaulting to 1000 [ 638.712106][T24613] tipc: Resetting bearer [ 638.732036][T24613] tipc: Disabling bearer [ 638.746391][T24612] wlan1 speed is unknown, defaulting to 1000 [ 638.979742][ T29] audit: type=1800 audit(1771365728.852:17): pid=24632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4747" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=2017 res=0 errno=0 [ 639.041396][T24635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'. [ 639.131069][T24642] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4748'. [ 639.259251][T24637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4749'. [ 639.269111][T24637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4749'. [ 639.283707][T24646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4752'. [ 639.296060][T24646] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4752'. [ 639.629185][T24660] gretap0: entered promiscuous mode [ 639.666765][ T35] net_ratelimit: 111 callbacks suppressed [ 639.666788][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 639.686665][ T35] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 639.797487][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 639.805530][ T8228] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 639.840877][T24672] lo speed is unknown, defaulting to 1000 [ 639.863137][T24672] wlan1 speed is unknown, defaulting to 1000 [ 639.926738][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 639.947862][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 639.977530][T24676] netlink: 'syz.4.4761': attribute type 2 has an invalid length. [ 639.981070][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 639.994706][T24676] netlink: 'syz.4.4761': attribute type 1 has an invalid length. [ 640.116906][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 640.146867][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 640.206666][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 640.448174][T24689] lo speed is unknown, defaulting to 1000 [ 640.511574][T24689] wlan1 speed is unknown, defaulting to 1000 [ 640.565049][T18322] udevd[18322]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 641.124029][T24746] netlink: 'syz.4.4776': attribute type 1 has an invalid length. [ 641.816127][T24777] netlink: 'syz.0.4788': attribute type 1 has an invalid length. [ 641.855550][T24777] bond10: entered promiscuous mode [ 641.862657][T24777] 8021q: adding VLAN 0 to HW filter on device bond10 [ 641.908934][T24777] syzkaller0: entered promiscuous mode [ 641.919310][T24777] syzkaller0: entered allmulticast mode [ 642.142788][T24802] FAULT_INJECTION: forcing a failure. [ 642.142788][T24802] name failslab, interval 1, probability 0, space 0, times 0 [ 642.158277][T24802] CPU: 0 UID: 0 PID: 24802 Comm: syz.4.4796 Not tainted syzkaller #0 PREEMPT(full) [ 642.158306][T24802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 642.158317][T24802] Call Trace: [ 642.158325][T24802] [ 642.158334][T24802] dump_stack_lvl+0xe8/0x150 [ 642.158365][T24802] should_fail_ex+0x412/0x560 [ 642.158399][T24802] should_failslab+0xa8/0x100 [ 642.158427][T24802] ? dst_alloc+0x105/0x170 [ 642.158455][T24802] kmem_cache_alloc_noprof+0x87/0x650 [ 642.158481][T24802] ? fib_lookup+0x76/0x440 [ 642.158507][T24802] dst_alloc+0x105/0x170 [ 642.158538][T24802] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 642.158573][T24802] ? ip_route_output_key_hash+0xd8/0x2a0 [ 642.158597][T24802] ip_route_output_key_hash+0x18d/0x2a0 [ 642.158625][T24802] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 642.158662][T24802] ip_route_output_flow+0x2a/0x150 [ 642.158681][T24802] ? security_sk_classify_flow+0x6d/0x150 [ 642.158705][T24802] udp_sendmsg+0x154a/0x22f0 [ 642.158744][T24802] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 642.158772][T24802] ? __pfx_udp_sendmsg+0x10/0x10 [ 642.158796][T24802] ? tomoyo_write_log2+0x250/0x910 [ 642.158829][T24802] ? tomoyo_supervisor+0x4cb/0x1570 [ 642.158874][T24802] ? get_random_u32+0x497/0x8b0 [ 642.158893][T24802] ? lockdep_hardirqs_on+0x7a/0x110 [ 642.158914][T24802] ? get_random_u32+0x13a/0x8b0 [ 642.158931][T24802] ? get_random_u32+0x4ce/0x8b0 [ 642.158961][T24802] udpv6_sendmsg+0xd1c/0x2560 [ 642.158996][T24802] ? __lock_acquire+0x6b5/0x2cf0 [ 642.159020][T24802] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 642.159045][T24802] ? ip6_datagram_release_cb+0x7c/0x550 [ 642.159072][T24802] ? inet_send_prepare+0x1b9/0x270 [ 642.159090][T24802] ? inet_send_prepare+0x1b9/0x270 [ 642.159104][T24802] ? __local_bh_enable_ip+0xd0/0x130 [ 642.159118][T24802] ? inet_send_prepare+0x1b9/0x270 [ 642.159135][T24802] ? inet6_sendmsg+0xe4/0x120 [ 642.159148][T24802] ____sys_sendmsg+0x62c/0xad0 [ 642.159179][T24802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.159212][T24802] ? import_iovec+0x73/0xa0 [ 642.159237][T24802] ___sys_sendmsg+0x2a5/0x360 [ 642.159270][T24802] ? __lock_acquire+0x6b5/0x2cf0 [ 642.159287][T24802] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.159305][T24802] ? kstrtouint+0x6e/0xe0 [ 642.159336][T24802] ? __fget_files+0x2a/0x420 [ 642.159347][T24802] ? __fget_files+0x3a0/0x420 [ 642.159365][T24802] __sys_sendmmsg+0x27c/0x4e0 [ 642.159383][T24802] ? __pfx___sys_sendmmsg+0x10/0x10 [ 642.159397][T24802] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 642.159427][T24802] ? ksys_write+0x242/0x270 [ 642.159446][T24802] ? __pfx_ksys_write+0x10/0x10 [ 642.159475][T24802] __x64_sys_sendmmsg+0xa0/0xc0 [ 642.159499][T24802] do_syscall_64+0x14d/0xf80 [ 642.159523][T24802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.159541][T24802] ? trace_irq_disable+0x37/0x100 [ 642.159557][T24802] ? clear_bhb_loop+0x40/0x90 [ 642.159571][T24802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.159583][T24802] RIP: 0033:0x7f3ae319c629 [ 642.159596][T24802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.159607][T24802] RSP: 002b:00007f3ae401a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 642.159622][T24802] RAX: ffffffffffffffda RBX: 00007f3ae3415fa0 RCX: 00007f3ae319c629 [ 642.159631][T24802] RDX: 0000000000000001 RSI: 00002000000018c0 RDI: 0000000000000003 [ 642.159639][T24802] RBP: 00007f3ae401a090 R08: 0000000000000000 R09: 0000000000000000 [ 642.159646][T24802] R10: 0000000000004880 R11: 0000000000000246 R12: 0000000000000001 [ 642.159654][T24802] R13: 00007f3ae3416038 R14: 00007f3ae3415fa0 R15: 00007ffd0c94f3e8 [ 642.159673][T24802] [ 642.809794][T24812] __nla_validate_parse: 17 callbacks suppressed [ 642.809816][T24812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4801'. [ 642.839134][T24813] x_tables: duplicate entry at hook 1 [ 642.910636][T24816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4802'. [ 643.400882][T24848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4813'. [ 643.485246][T24851] netlink: 'syz.3.4814': attribute type 31 has an invalid length. [ 643.493241][T24852] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4813'. [ 643.521229][T24848] ip6gre1: entered promiscuous mode [ 643.556908][T24848] ip6gre1: entered allmulticast mode [ 643.600186][T24848] netlink: 'syz.0.4813': attribute type 6 has an invalid length. [ 643.626822][T24848] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4813'. [ 643.647947][T24857] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20004 [ 643.668313][T24851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4814'. [ 643.833781][T24862] syzkaller0: entered promiscuous mode [ 643.840393][T24862] syzkaller0: entered allmulticast mode [ 643.892156][T24862] tipc: Enabled bearer , priority 0 [ 643.910898][T24858] tipc: Resetting bearer [ 643.958954][T24858] tipc: Disabling bearer [ 644.003261][T24863] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 644.068307][T24864] lo speed is unknown, defaulting to 1000 [ 644.076355][T24864] wlan1 speed is unknown, defaulting to 1000 [ 644.436499][T24893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4827'. [ 644.563846][T24878] netlink: 'syz.3.4824': attribute type 1 has an invalid length. [ 644.579531][T24887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4826'. [ 644.620413][T24894] wg1: entered promiscuous mode [ 644.634865][T24894] wg1: entered allmulticast mode [ 644.666970][T24893] bridge_slave_1: left allmulticast mode [ 644.673327][T24893] bridge_slave_1: left promiscuous mode [ 644.680757][T24893] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.700044][T24893] bridge_slave_0: left allmulticast mode [ 644.705922][T24893] bridge_slave_0: left promiscuous mode [ 644.718198][T24893] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.736936][ T9258] net_ratelimit: 109 callbacks suppressed [ 644.736959][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.769510][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.797117][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.827280][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.860931][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.899262][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.937401][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 644.972081][T24911] netlink: 'syz.2.4828': attribute type 1 has an invalid length. [ 644.980564][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 645.016315][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 645.049167][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 645.114590][T24912] bond7: (slave geneve2): making interface the new active one [ 645.123688][T24912] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 645.164905][T23368] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 645.185066][T23368] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 645.215392][T23368] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 645.238121][T23368] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 645.305493][T24930] geneve4: entered promiscuous mode [ 645.342133][ T8228] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 40573 - 0 [ 645.357444][T24930] syzkaller0: entered promiscuous mode [ 645.363031][T24930] syzkaller0: entered allmulticast mode [ 645.392094][ T8228] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 40573 - 0 [ 645.407571][T24930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4832'. [ 645.416727][ T8228] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 40573 - 0 [ 645.425573][ T8228] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 40573 - 0 [ 645.446733][T24930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4832'. [ 645.615632][T24952] netlink: 'syz.2.4841': attribute type 2 has an invalid length. [ 645.650138][T24950] block nbd0: Unsupported socket: should be TCP or UNIX. [ 645.833176][T24961] vxcan3: entered allmulticast mode [ 645.871699][T24966] bridge4: entered promiscuous mode [ 646.128439][T24984] --map-set only usable from mangle table [ 646.401087][T24990] netlink: 'syz.3.4853': attribute type 1 has an invalid length. [ 646.532327][T24999] gretap3: entered allmulticast mode [ 646.543670][T24999] bond0: (slave gretap3): making interface the new active one [ 646.553356][T24999] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 646.840276][T25017] xt_socket: unknown flags 0xfc [ 647.330661][T25046] bridge0: port 3(syz_tun) entered blocking state [ 647.337551][T25046] bridge0: port 3(syz_tun) entered disabled state [ 647.344304][T25046] syz_tun: entered allmulticast mode [ 647.373763][T25043] can: request_module (can-proto-0) failed. [ 647.385820][T25046] syz_tun: entered promiscuous mode [ 647.966023][T25079] __nla_validate_parse: 11 callbacks suppressed [ 647.966048][T25079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4878'. [ 648.053799][T25082] lo speed is unknown, defaulting to 1000 [ 648.089718][T25082] wlan1 speed is unknown, defaulting to 1000 [ 648.146027][T25088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4880'. [ 648.467204][T25108] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4885'. [ 648.528462][T25113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4889'. [ 648.632279][T25104] netlink: 'syz.0.4885': attribute type 1 has an invalid length. [ 648.663819][T25118] FAULT_INJECTION: forcing a failure. [ 648.663819][T25118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.706813][T25118] CPU: 1 UID: 0 PID: 25118 Comm: syz.3.4891 Not tainted syzkaller #0 PREEMPT(full) [ 648.706844][T25118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.706857][T25118] Call Trace: [ 648.706866][T25118] [ 648.706876][T25118] dump_stack_lvl+0xe8/0x150 [ 648.706909][T25118] should_fail_ex+0x412/0x560 [ 648.706941][T25118] _copy_to_user+0x31/0xb0 [ 648.706975][T25118] simple_read_from_buffer+0xe1/0x170 [ 648.707009][T25118] proc_fail_nth_read+0x1bb/0x230 [ 648.707039][T25118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.707069][T25118] ? rw_verify_area+0x2a6/0x4d0 [ 648.707091][T25118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 648.707117][T25118] vfs_read+0x20c/0xa70 [ 648.707140][T25118] ? fdget_pos+0x246/0x320 [ 648.707165][T25118] ? __pfx___mutex_lock+0x10/0x10 [ 648.707192][T25118] ? __pfx_vfs_read+0x10/0x10 [ 648.707217][T25118] ? __fget_files+0x2a/0x420 [ 648.707242][T25118] ? __fget_files+0x3a0/0x420 [ 648.707259][T25118] ? __fget_files+0x2a/0x420 [ 648.707288][T25118] ksys_read+0x150/0x270 [ 648.707314][T25118] ? __pfx_ksys_read+0x10/0x10 [ 648.707351][T25118] do_syscall_64+0x14d/0xf80 [ 648.707378][T25118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.707397][T25118] ? trace_irq_disable+0x37/0x100 [ 648.707419][T25118] ? clear_bhb_loop+0x40/0x90 [ 648.707444][T25118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.707464][T25118] RIP: 0033:0x7ff07615cece [ 648.707485][T25118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 648.707503][T25118] RSP: 002b:00007ff076f7bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.707526][T25118] RAX: ffffffffffffffda RBX: 00007ff076f7c6c0 RCX: 00007ff07615cece [ 648.707542][T25118] RDX: 000000000000000f RSI: 00007ff076f7c0a0 RDI: 0000000000000007 [ 648.707555][T25118] RBP: 00007ff076f7c090 R08: 0000000000000000 R09: 0000000000000000 [ 648.707568][T25118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.707579][T25118] R13: 00007ff076416038 R14: 00007ff076415fa0 R15: 00007ffe7e7aab28 [ 648.707613][T25118] [ 649.103788][T25131] netlink: 'syz.2.4895': attribute type 31 has an invalid length. [ 649.300639][T25133] lo speed is unknown, defaulting to 1000 [ 649.328241][T25133] wlan1 speed is unknown, defaulting to 1000 [ 649.406639][T25146] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4901'. [ 649.496879][T25146] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4901'. [ 649.525480][T25146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4901'. [ 649.642537][T25158] bridge37: port 1(ip6gretap1) entered blocking state [ 649.650748][T25158] bridge37: port 1(ip6gretap1) entered disabled state [ 649.658587][T25158] ip6gretap1: entered allmulticast mode [ 649.674853][T25158] ip6gretap1: entered promiscuous mode [ 649.732649][T25168] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4906'. [ 649.745304][T25158] netlink: 'syz.1.4901': attribute type 5 has an invalid length. [ 649.757761][T23368] net_ratelimit: 120 callbacks suppressed [ 649.757786][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.774602][T25146] bridge37: port 2(veth9) entered blocking state [ 649.776259][T25168] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4906'. [ 649.781686][T25146] bridge37: port 2(veth9) entered disabled state [ 649.797740][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.797973][T25146] veth9: entered allmulticast mode [ 649.814159][T25146] veth9: entered promiscuous mode [ 649.820667][T25146] bridge37: port 2(veth9) entered blocking state [ 649.827277][T25146] bridge37: port 2(veth9) entered forwarding state [ 649.837645][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.866979][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.897911][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.936839][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.965278][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 649.995265][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.093530][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.127440][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.579141][T25202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4912'. [ 652.196591][ T9269] bridge37: port 2(veth9) entered disabled state [ 652.448356][T25228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.483871][ T1087] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.505360][T25218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.579016][T25228] macsec1: entered promiscuous mode [ 652.681301][ T1087] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.691595][ T1087] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.705437][ T1087] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.814972][T25245] sctp: [Deprecated]: syz.2.4924 (pid 25245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 652.814972][T25245] Use struct sctp_sack_info instead [ 653.012921][T25257] xt_hashlimit: max too large, truncated to 1048576 [ 653.046867][T25257] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 653.109420][T25257] netlink: 'syz.1.4926': attribute type 4 has an invalid length. [ 653.159722][T25261] netlink: 'syz.1.4926': attribute type 4 has an invalid length. [ 653.168380][T25266] __nla_validate_parse: 3 callbacks suppressed [ 653.168402][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4928'. [ 653.236449][T25260] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.272691][T25270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4928'. [ 653.413995][T25276] FAULT_INJECTION: forcing a failure. [ 653.413995][T25276] name failslab, interval 1, probability 0, space 0, times 0 [ 653.433881][T25276] CPU: 0 UID: 0 PID: 25276 Comm: syz.3.4932 Not tainted syzkaller #0 PREEMPT(full) [ 653.433912][T25276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.433923][T25276] Call Trace: [ 653.433930][T25276] [ 653.433939][T25276] dump_stack_lvl+0xe8/0x150 [ 653.433969][T25276] should_fail_ex+0x412/0x560 [ 653.434001][T25276] should_failslab+0xa8/0x100 [ 653.434030][T25276] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 653.434055][T25276] ? __alloc_skb+0x186/0x7d0 [ 653.434085][T25276] ? __alloc_skb+0x1d0/0x7d0 [ 653.434103][T25276] ? __local_bh_enable_ip+0xd0/0x130 [ 653.434130][T25276] __alloc_skb+0x1d0/0x7d0 [ 653.434155][T25276] alloc_skb_with_frags+0xca/0x890 [ 653.434177][T25276] ? __lock_acquire+0x6b5/0x2cf0 [ 653.434200][T25276] ? __lock_acquire+0x6b5/0x2cf0 [ 653.434224][T25276] sock_alloc_send_pskb+0x878/0x990 [ 653.434267][T25276] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 653.434299][T25276] ? __lock_acquire+0x6b5/0x2cf0 [ 653.434323][T25276] tun_get_user+0x92d/0x3dd0 [ 653.434362][T25276] ? aa_file_perm+0x12d/0x1630 [ 653.434393][T25276] ? aa_file_perm+0x440/0x1630 [ 653.434418][T25276] ? __pfx_tun_get_user+0x10/0x10 [ 653.434447][T25276] ? __lock_acquire+0x6b5/0x2cf0 [ 653.434470][T25276] ? kstrtoull+0x12f/0x1d0 [ 653.434503][T25276] ? ref_tracker_alloc+0x363/0x4d0 [ 653.434530][T25276] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 653.434558][T25276] ? tun_get+0x1c/0x2f0 [ 653.434582][T25276] ? tun_get+0x1c/0x2f0 [ 653.434613][T25276] ? tun_get+0x1c/0x2f0 [ 653.434636][T25276] ? tun_get+0x1c/0x2f0 [ 653.434666][T25276] tun_chr_write_iter+0x113/0x200 [ 653.434696][T25276] vfs_write+0x61d/0xb90 [ 653.434729][T25276] ? __pfx_vfs_write+0x10/0x10 [ 653.434762][T25276] ? __fget_files+0x2a/0x420 [ 653.434791][T25276] ksys_write+0x150/0x270 [ 653.434817][T25276] ? __pfx_ksys_write+0x10/0x10 [ 653.434852][T25276] do_syscall_64+0x14d/0xf80 [ 653.434873][T25276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.434889][T25276] ? trace_irq_disable+0x37/0x100 [ 653.434910][T25276] ? clear_bhb_loop+0x40/0x90 [ 653.434932][T25276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.434950][T25276] RIP: 0033:0x7ff07615cece [ 653.434969][T25276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 653.434986][T25276] RSP: 002b:00007ff076f7bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.435008][T25276] RAX: ffffffffffffffda RBX: 00007ff076f7c6c0 RCX: 00007ff07615cece [ 653.435022][T25276] RDX: 0000000000010e80 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 653.435035][T25276] RBP: 00007ff076f7c090 R08: 0000000000000000 R09: 0000000000000000 [ 653.435048][T25276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.435060][T25276] R13: 00007ff076416038 R14: 00007ff076415fa0 R15: 00007ffe7e7aab28 [ 653.435101][T25276] [ 653.911884][T25280] lo speed is unknown, defaulting to 1000 [ 653.981241][T25280] wlan1 speed is unknown, defaulting to 1000 [ 654.390095][T25301] syzkaller0: entered promiscuous mode [ 654.407521][T25301] syzkaller0: entered allmulticast mode [ 654.642342][ T9960] IPVS: starting estimator thread 0... [ 654.653956][T25280] nr2: entered promiscuous mode [ 654.666391][T25280] nr2: entered allmulticast mode [ 654.738712][T25309] IPVS: using max 26 ests per chain, 62400 per kthread [ 654.877009][ T9258] net_ratelimit: 171 callbacks suppressed [ 654.877031][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 654.926871][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 654.952557][T23368] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 655.001389][T23368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.041644][T23368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.074551][T25327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.097781][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 655.126721][T23368] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 655.135477][T25324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4941'. [ 655.268364][T23368] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 655.276415][T23368] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 655.345533][T25332] netlink: 'syz.2.4950': attribute type 10 has an invalid length. [ 655.373125][ T9269] IPVS: stop unused estimator thread 0... [ 655.403945][T25332] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 655.446888][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 655.475070][ T9269] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 655.610579][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 655.677728][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4951'. [ 655.699581][T25344] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4953'. [ 655.717632][T25342] : entered promiscuous mode [ 655.726735][ T29] audit: type=1800 audit(1771365745.582:18): pid=25307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4941" name="memory.events" dev="tmpfs" ino=1726 res=0 errno=0 [ 656.000947][T25356] netlink: 'syz.3.4957': attribute type 4 has an invalid length. [ 656.297861][T25370] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4961'. [ 656.301573][T25367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4960'. [ 657.823812][T25425] netlink: 'syz.3.4980': attribute type 1 has an invalid length. [ 657.872715][T25425] veth5: entered promiscuous mode [ 658.175811][T25449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4987'. [ 658.201447][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4979'. [ 658.446470][T25462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4989'. [ 658.520080][T25465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4991'. [ 658.635703][T25471] netlink: 'syz.0.4991': attribute type 11 has an invalid length. [ 659.886795][ T9269] net_ratelimit: 109 callbacks suppressed [ 659.886821][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 659.918905][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 659.946723][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 659.966666][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 659.987126][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.006703][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.028813][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.056707][ T1087] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.076733][ T8228] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.096763][ T1087] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.837571][T25486] xfrm0: entered promiscuous mode [ 660.842923][T25486] xfrm0: entered allmulticast mode [ 660.964657][T25491] netlink: 'syz.2.5001': attribute type 1 has an invalid length. [ 661.126102][T25494] veth1: entered promiscuous mode [ 661.151903][T25507] netlink: 'syz.0.5004': attribute type 1 has an invalid length. [ 661.173485][T25491] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 661.177447][T25507] netlink: 476 bytes leftover after parsing attributes in process `syz.0.5004'. [ 661.231680][T25507] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.5004'. [ 661.537966][T25526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5010'. [ 662.079875][T25544] hsr0: entered promiscuous mode [ 662.085202][T25544] hsr0: entered allmulticast mode [ 662.107629][T25544] hsr_slave_0: entered allmulticast mode [ 662.126040][T25544] hsr_slave_1: entered allmulticast mode [ 662.164875][T25545] gretap0: left promiscuous mode [ 662.507639][T25575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5022'. [ 662.518621][T25559] syzkaller0: entered promiscuous mode [ 662.536717][T25559] syzkaller0: entered allmulticast mode [ 662.786116][T25588] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5026'. [ 662.868077][T25591] netlink: 504 bytes leftover after parsing attributes in process `syz.3.5023'. [ 662.889378][T25597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5029'. [ 664.180477][ T9258] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 664.910528][ T35] net_ratelimit: 204 callbacks suppressed [ 664.910550][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 664.931228][ T35] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 665.057342][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 665.085730][ T13] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 665.196794][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 665.227143][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 665.245333][ T35] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 665.383094][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 665.406635][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 665.413671][T25639] lo speed is unknown, defaulting to 1000 [ 665.427387][ T35] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 665.470438][T25639] wlan1 speed is unknown, defaulting to 1000 [ 665.594794][T25642] lo speed is unknown, defaulting to 1000 [ 665.685421][T25642] wlan1 speed is unknown, defaulting to 1000 [ 666.599106][T25695] __nla_validate_parse: 3 callbacks suppressed [ 666.599124][T25695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5055'. [ 666.862002][T25710] lo speed is unknown, defaulting to 1000 [ 666.886112][T25710] wlan1 speed is unknown, defaulting to 1000 [ 666.953432][T23368] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 666.962344][T23368] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 666.972732][T25720] netlink: 'syz.0.5063': attribute type 1 has an invalid length. [ 666.981101][ T5879] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 667.058033][T25720] bond11: entered promiscuous mode [ 667.063220][T25720] bond11: entered allmulticast mode [ 667.069260][T25720] 8021q: adding VLAN 0 to HW filter on device bond11 [ 667.078316][T25722] : renamed from wg2 [ 667.216608][T25735] tipc: Enabled bearer , priority 0 [ 667.224464][T25735] syzkaller0: entered promiscuous mode [ 667.230829][T25735] syzkaller0: entered allmulticast mode [ 667.243899][T25734] tipc: Resetting bearer [ 667.265688][T25734] tipc: Disabling bearer [ 667.336932][ T5879] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 667.769249][ T5879] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 667.795992][T25758] vxcan2: entered allmulticast mode [ 668.062524][T25778] Bluetooth: MGMT ver 1.23 [ 668.233083][T25790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5083'. [ 668.243034][T25790] netlink: 'syz.1.5083': attribute type 10 has an invalid length. [ 668.285402][T25790] team0: Device ipvlan1 failed to register rx_handler [ 668.426239][T25794] siw: device registration error -23 [ 668.520476][ T13] syzkaller0: tun_net_xmit 76 [ 668.539424][ T13] syzkaller0: tun_net_xmit 48 [ 668.548114][ T9960] syzkaller0: tun_net_xmit 76 [ 668.796897][ T5879] syzkaller0: tun_net_xmit 76 [ 668.859047][T25817] netlink: 'syz.4.5092': attribute type 1 has an invalid length. [ 668.877444][T25817] netlink: 'syz.4.5092': attribute type 2 has an invalid length. [ 669.723254][T25854] netlink: 'syz.3.5098': attribute type 2 has an invalid length. [ 669.787676][T25855] netlink: 'syz.3.5098': attribute type 2 has an invalid length. [ 669.928732][ T13] net_ratelimit: 147 callbacks suppressed [ 669.928756][ T13] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 669.961738][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 669.986769][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.007973][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.030638][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.060107][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.091791][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.121833][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.152038][ T35] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.176806][ T9258] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 671.134943][T25854] : entered promiscuous mode [ 671.147029][T25855] : left promiscuous mode [ 671.259287][T25863] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 671.366743][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 671.389874][T25865] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 671.396225][T25873] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 671.467249][T25881] dvmrp0: entered allmulticast mode [ 671.509513][T25883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5104'. [ 671.714402][T25897] block nbd0: Unsupported socket: should be TCP or UNIX. [ 671.759290][T25897] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.5107'. [ 671.777244][T25902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5109'. [ 671.783232][T25903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5110'. [ 671.800893][T25899] lo speed is unknown, defaulting to 1000 [ 671.815732][T25899] wlan1 speed is unknown, defaulting to 1000 [ 671.874479][T25905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5109'. [ 671.988864][T25913] SET target dimension over the limit! [ 671.996241][T25913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5112'. [ 672.009998][T25914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5112'. [ 672.026254][T25905] lo speed is unknown, defaulting to 1000 [ 672.135913][T25905] wlan1 speed is unknown, defaulting to 1000 [ 672.243433][T25918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5114'. [ 672.474925][T25931] IPVS: Scheduler module ip_vs_sip not found [ 672.842117][T25958] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5122'. [ 672.906951][T25954] netlink: 'syz.2.5121': attribute type 49 has an invalid length. [ 673.933296][T25992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5133'. [ 674.494304][T26014] lo speed is unknown, defaulting to 1000 [ 674.538624][T26014] wlan1 speed is unknown, defaulting to 1000 [ 674.588812][T26016] No such timeout policy "syz0" [ 674.808032][T26010] lo speed is unknown, defaulting to 1000 [ 674.895747][T26010] wlan1 speed is unknown, defaulting to 1000 [ 675.016752][ T9269] net_ratelimit: 142 callbacks suppressed [ 675.016775][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 675.067217][T25861] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 675.108489][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 675.153824][ T9269] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 675.286935][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 675.318872][ T9269] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 675.348039][T25861] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 675.371136][T26041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5147'. [ 675.396985][T25861] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 675.447150][T25861] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 675.475756][T25861] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 676.187021][T26061] netlink: 'syz.0.5153': attribute type 11 has an invalid length. [ 677.003415][T26085] __nla_validate_parse: 1 callbacks suppressed [ 677.003438][T26085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5161'. [ 677.027947][T26091] netlink: 'syz.3.5162': attribute type 11 has an invalid length. [ 677.128330][T26094] lo speed is unknown, defaulting to 1000 [ 677.137120][T26094] wlan1 speed is unknown, defaulting to 1000 [ 677.240452][T26099] netlink: 'syz.3.5164': attribute type 1 has an invalid length. [ 677.262180][T26099] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5164'. [ 677.351641][T26101] tipc: Enabling of bearer rejected, media not registered [ 677.691700][T26106] lo speed is unknown, defaulting to 1000 [ 677.707456][T26106] wlan1 speed is unknown, defaulting to 1000 [ 678.058450][T26131] netlink: 'syz.4.5173': attribute type 1 has an invalid length. [ 678.195483][T26141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5173'. [ 678.264640][T26138] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 678.308373][T26138] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 678.326178][T26144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5176'. [ 678.390743][T26141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5173'. [ 678.493876][T26139] lo speed is unknown, defaulting to 1000 [ 678.548912][T26139] wlan1 speed is unknown, defaulting to 1000 [ 678.573523][T26150] netem: change failed [ 678.731299][T26159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5180'. [ 679.077214][T26179] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5182'. [ 679.086897][T26179] 8021q: VLANs not supported on ip6tnl0 [ 679.259039][T26188] netlink: 'syz.3.5187': attribute type 10 has an invalid length. [ 679.370884][T26195] netlink: 'syz.3.5187': attribute type 3 has an invalid length. [ 679.735927][T26208] 9: renamed from lo (while UP) [ 679.780219][T26215] netlink: 'syz.4.5194': attribute type 1 has an invalid length. [ 679.789120][T26215] netlink: 'syz.4.5194': attribute type 1 has an invalid length. [ 680.011970][T26236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5196'. [ 680.036925][T25859] net_ratelimit: 118 callbacks suppressed [ 680.036947][T25859] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 680.074903][T26232] lo speed is unknown, defaulting to 1000 [ 680.080957][T25858] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 680.080990][T25858] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 680.100414][T26232] wlan1 speed is unknown, defaulting to 1000 [ 680.127691][T26239] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5197'. [ 680.145302][T26240] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5197'. [ 680.166908][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 680.187347][T25859] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 680.206855][T25861] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 680.226679][T25861] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 680.238735][T26248] netlink: 'syz.3.5199': attribute type 1 has an invalid length. [ 680.256769][T25861] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 680.286824][T25861] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 680.306671][T25861] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 680.328012][T25861] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 680.380455][T26248] netlink: 'syz.3.5199': attribute type 1 has an invalid length. [ 680.413219][T26250] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 680.424696][T26250] bond6: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 680.442979][T26250] bond6: (slave vxcan1): making interface the new active one [ 680.452807][T26250] bond6: (slave vxcan1): Enslaving as an active interface with an up link [ 680.573246][T26263] netlink: 'syz.3.5203': attribute type 15 has an invalid length. [ 680.574491][T26257] lo speed is unknown, defaulting to 1000 [ 680.899117][T26263] mac80211_hwsim hwsim88 wlan0: left promiscuous mode [ 680.923077][T26270] netlink: 'syz.0.5204': attribute type 12 has an invalid length. [ 680.931947][T26263] gtp0: left promiscuous mode [ 680.936874][T26263] gtp0: left allmulticast mode [ 680.942660][T26263] mac80211_hwsim hwsim89 wlan1: left promiscuous mode [ 680.951134][T26263] macvtap1: left promiscuous mode [ 680.978001][T26263] bond3: left promiscuous mode [ 681.037249][T26263] bond5: left promiscuous mode [ 681.042073][T26263] gre3: left promiscuous mode [ 681.063853][T26263] geneve3: left promiscuous mode [ 681.072697][T26263] geneve3: left allmulticast mode [ 681.106765][T26263] hsr0: left allmulticast mode [ 681.111602][T26263] hsr_slave_0: left allmulticast mode [ 681.123206][T26263] hsr_slave_1: left allmulticast mode [ 681.130729][T26263] macvlan2: left allmulticast mode [ 681.143076][T26263] gretap3: left allmulticast mode [ 681.174551][ T5879] lo speed is unknown, defaulting to 1000 [ 681.174814][T26257] wlan1 speed is unknown, defaulting to 1000 [ 681.182410][ T5879] syz2: Port: 1 Link DOWN [ 681.223666][T26274] geneve2: entered promiscuous mode [ 681.245657][T26274] geneve2: entered allmulticast mode [ 681.289275][T25858] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.316652][T25858] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 681.455452][T26267] lo speed is unknown, defaulting to 1000 [ 681.479425][T25858] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.509410][T25858] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 681.610404][T26267] wlan1 speed is unknown, defaulting to 1000 [ 681.616765][T26272] lo speed is unknown, defaulting to 1000 [ 681.617553][T25858] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.641983][T25858] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 681.660720][T25858] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.678422][T25858] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 681.702938][T26272] wlan1 speed is unknown, defaulting to 1000 [ 682.491360][T26317] lo speed is unknown, defaulting to 1000 [ 682.497443][T26320] __nla_validate_parse: 5 callbacks suppressed [ 682.497462][T26320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5221'. [ 682.542662][T26317] wlan1 speed is unknown, defaulting to 1000 [ 682.580577][T26327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5223'. [ 682.633601][T26331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5224'. [ 682.647335][T26331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5224'. [ 682.660279][T26328] bond8 (unregistering): Released all slaves [ 683.116407][T26341] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5228'. [ 683.176686][T26344] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.5229'. [ 683.476888][T26333] netlink: 15670 bytes leftover after parsing attributes in process `syz.4.5225'. [ 683.576315][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5231'. [ 683.599185][T26361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5231'. [ 684.117276][T26367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5233'. [ 684.590061][T26384] netlink: 'syz.4.5240': attribute type 2 has an invalid length. [ 684.634981][T26384] !9: entered promiscuous mode [ 684.668157][T26384] netlink: 'syz.4.5240': attribute type 2 has an invalid length. [ 684.702121][T26384] !9: left promiscuous mode [ 685.155869][T26401] Cannot find set identified by id 65535 to match [ 685.318631][T11881] lec:lec_start_xmit: lec0:No lecd attached [ 686.200179][T26431] net_ratelimit: 25 callbacks suppressed [ 686.200204][T26431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.319705][T26438] lo speed is unknown, defaulting to 1000 [ 686.331568][T26438] wlan1 speed is unknown, defaulting to 1000 [ 686.486894][ T5879] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 544 sec [ 687.146694][T26491] vlan3: entered promiscuous mode [ 687.198466][T26491] bridge0: entered promiscuous mode [ 687.243266][T25859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.252842][T25859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.283555][T26504] tipc: New replicast peer: 255.255.255.255 [ 687.294084][T26504] tipc: Enabled bearer , priority 10 [ 687.347264][T26509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.409178][T26502] syzkaller0: entered promiscuous mode [ 687.414899][T26502] syzkaller0: entered allmulticast mode [ 687.444563][ T29] audit: type=1800 audit(1771365777.312:19): pid=26490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5273" name="memory.events" dev="tmpfs" ino=2160 res=0 errno=0 [ 687.535874][T26515] __nla_validate_parse: 11 callbacks suppressed [ 687.535896][T26515] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5280'. [ 687.625866][T26520] netlink: 'syz.4.5282': attribute type 1 has an invalid length. [ 687.675664][T26520] bond8: entered promiscuous mode [ 687.684308][T26520] 8021q: adding VLAN 0 to HW filter on device bond8 [ 687.822467][T26532] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 687.845062][T26532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5284'. [ 687.858963][T26532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5284'. [ 687.876621][T26532] netlink: 'syz.0.5284': attribute type 11 has an invalid length. [ 687.890010][T26532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5284'. [ 687.900910][T26532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5284'. [ 687.910622][T26532] netlink: 'syz.0.5284': attribute type 11 has an invalid length. [ 688.170060][T17193] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 688.218073][ T5893] wlan1 speed is unknown, defaulting to 1000 [ 688.224151][ T5893] yz2: Port: 1 Link DOWN [ 688.237435][ T1104] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.285692][ T1104] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.306842][ T1104] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.315307][ T1104] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.564703][T26549] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5290'. [ 688.808401][T26583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5298'. [ 688.916084][T26583] bond8: entered promiscuous mode [ 688.921818][T26583] 8021q: adding VLAN 0 to HW filter on device bond8 [ 688.998139][T26583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 689.005436][T26583] IPv6: NLM_F_CREATE should be set when creating new route [ 689.012794][T26583] IPv6: NLM_F_CREATE should be set when creating new route [ 689.047736][T26590] 8021q: adding VLAN 0 to HW filter on device bond8 [ 689.070280][T26593] SET target dimension over the limit! [ 689.076118][T26583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 689.084403][T26590] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 689.098066][T26590] bond8: (slave wireguard0): Error -95 calling set_mac_address [ 689.179574][T26583] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 689.247162][T26583] bond8: (slave wireguard0): Error -95 calling set_mac_address [ 689.561675][T26612] netlink: 392 bytes leftover after parsing attributes in process `syz.0.5304'. [ 689.670749][T26626] netlink: 'syz.2.5309': attribute type 1 has an invalid length. [ 689.711394][T26625] bond8: entered promiscuous mode [ 689.716555][T26625] bond8: entered allmulticast mode [ 689.722238][T26625] 8021q: adding VLAN 0 to HW filter on device bond8 [ 689.859190][T26634] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5310'. [ 689.870478][T26634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5310'. [ 689.990961][T26638] netlink: 'syz.3.5310': attribute type 39 has an invalid length. [ 690.393392][T26664] netlink: 'syz.0.5321': attribute type 33 has an invalid length. [ 691.046986][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 691.055439][ C0] lec:lec_tx_timeout: lec0 [ 691.060557][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 691.633729][T26573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 692.069564][T26707] FAULT_INJECTION: forcing a failure. [ 692.069564][T26707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.101869][T26707] CPU: 0 UID: 0 PID: 26707 Comm: syz.1.5332 Not tainted syzkaller #0 PREEMPT(full) [ 692.101897][T26707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 692.101910][T26707] Call Trace: [ 692.101919][T26707] [ 692.101929][T26707] dump_stack_lvl+0xe8/0x150 [ 692.101963][T26707] should_fail_ex+0x412/0x560 [ 692.101997][T26707] _copy_from_iter+0x1d3/0x1670 [ 692.102038][T26707] ? __pfx__copy_from_iter+0x10/0x10 [ 692.102065][T26707] ? sock_alloc_send_pskb+0x896/0x990 [ 692.102099][T26707] ? __pfx__copy_from_iter+0x10/0x10 [ 692.102129][T26707] ? page_copy_sane+0x16a/0x270 [ 692.102159][T26707] copy_page_from_iter+0xdd/0x170 [ 692.102195][T26707] skb_copy_datagram_from_iter+0x306/0x710 [ 692.102235][T26707] tun_get_user+0xc38/0x3dd0 [ 692.102277][T26707] ? aa_file_perm+0x12d/0x1630 [ 692.102311][T26707] ? aa_file_perm+0x440/0x1630 [ 692.102339][T26707] ? __pfx_tun_get_user+0x10/0x10 [ 692.102370][T26707] ? __lock_acquire+0x6b5/0x2cf0 [ 692.102394][T26707] ? kstrtoull+0x12f/0x1d0 [ 692.102428][T26707] ? ref_tracker_alloc+0x363/0x4d0 [ 692.102456][T26707] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 692.102584][T26707] ? tun_get+0x1c/0x2f0 [ 692.102612][T26707] ? tun_get+0x1c/0x2f0 [ 692.102644][T26707] ? tun_get+0x1c/0x2f0 [ 692.102671][T26707] ? tun_get+0x1c/0x2f0 [ 692.102701][T26707] tun_chr_write_iter+0x113/0x200 [ 692.102733][T26707] vfs_write+0x61d/0xb90 [ 692.102767][T26707] ? __pfx_vfs_write+0x10/0x10 [ 692.102801][T26707] ? __fget_files+0x2a/0x420 [ 692.102830][T26707] ksys_write+0x150/0x270 [ 692.102856][T26707] ? __pfx_ksys_write+0x10/0x10 [ 692.102893][T26707] do_syscall_64+0x14d/0xf80 [ 692.102919][T26707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.102938][T26707] ? trace_irq_disable+0x37/0x100 [ 692.102960][T26707] ? clear_bhb_loop+0x40/0x90 [ 692.102983][T26707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.103002][T26707] RIP: 0033:0x7f1f80b5cece [ 692.103021][T26707] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 692.103039][T26707] RSP: 002b:00007f1f81b05fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 692.103062][T26707] RAX: ffffffffffffffda RBX: 00007f1f81b066c0 RCX: 00007f1f80b5cece [ 692.103077][T26707] RDX: 0000000000010e80 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 692.103090][T26707] RBP: 00007f1f81b06090 R08: 0000000000000000 R09: 0000000000000000 [ 692.103103][T26707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 692.103115][T26707] R13: 00007f1f80e16038 R14: 00007f1f80e15fa0 R15: 00007ffeb8b46e98 [ 692.103146][T26707] [ 692.419490][ T30] INFO: task kworker/1:1H:1707 blocked for more than 143 seconds. [ 692.436626][ T30] Not tainted syzkaller #0 [ 692.451809][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 692.500131][ T30] task:kworker/1:1H state:D stack:26536 pid:1707 tgid:1707 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 692.546751][ T30] Workqueue: kblockd blk_mq_requeue_work [ 692.552826][ T30] Call Trace: [ 692.557217][ T30] [ 692.562581][ T30] __schedule+0x1568/0x5290 [ 692.569652][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 692.579437][ T30] ? __pfx___schedule+0x10/0x10 [ 692.590515][ T30] ? schedule+0x90/0x360 [ 692.600762][ T30] schedule+0x164/0x360 [ 692.618703][ T30] schedule_timeout+0x158/0x2c0 [ 692.630389][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 692.635973][ T30] ? __pfx_process_timeout+0x10/0x10 [ 692.644467][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 692.656546][ T30] ? prepare_to_wait_event+0x436/0x480 [ 692.662167][ T30] nbd_queue_rq+0x857/0x1100 [ 692.667068][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 692.672139][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 692.679268][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 692.684969][ T30] ? sbitmap_get+0x229/0x390 [ 692.706546][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 692.712598][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 692.726868][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 692.733294][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 692.752637][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 692.766582][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 692.771946][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 692.786805][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 692.793040][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 692.836570][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 692.841780][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 692.858356][ T30] blk_mq_requeue_work+0x71c/0x780 [ 692.863731][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 692.873733][T26722] lo speed is unknown, defaulting to 1000 [ 692.885385][T26722] wlan1 speed is unknown, defaulting to 1000 [ 692.970115][ T30] ? process_scheduled_works+0xa0f/0x17a0 [ 692.996602][ T30] ? process_scheduled_works+0xa0f/0x17a0 [ 693.002406][ T30] process_scheduled_works+0xaec/0x17a0 [ 693.016592][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 693.022697][ T30] ? assign_work+0x3d5/0x5e0 [ 693.027522][ T30] worker_thread+0xa50/0xfc0 [ 693.032285][ T30] kthread+0x388/0x470 [ 693.036852][ T30] ? __pfx_worker_thread+0x10/0x10 [ 693.042194][ T30] ? __pfx_kthread+0x10/0x10 [ 693.047171][ T30] ret_from_fork+0x51e/0xb90 [ 693.051901][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 693.057128][ T30] ? __switch_to+0xc7d/0x1400 [ 693.061938][ T30] ? __pfx_kthread+0x10/0x10 [ 693.067227][ T30] ret_from_fork_asm+0x1a/0x30 [ 693.072066][ T30] [ 693.075313][ T30] [ 693.075313][ T30] Showing all locks held in the system: [ 693.083491][ T30] 1 lock held by khungtaskd/30: [ 693.084008][T26714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.088622][ T30] #0: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 693.088719][ T30] 4 locks held by kworker/1:1H/1707: [ 693.088735][ T30] #0: ffff88801e6b9548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 693.126720][ T30] #1: ffffc9000480fc40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 693.140422][ T30] #2: ffff888022740498 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 693.150057][ T30] #3: ffff8880266a2180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 693.159167][ T30] 2 locks held by getty/5577: [ 693.164059][ T30] #0: ffff88823bf228a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 693.174244][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 693.184468][ T30] 1 lock held by syz-executor/5804: [ 693.189860][ T30] #0: ffff8880b873abe0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 693.200630][ T30] 1 lock held by udevd/18163: [ 693.205508][ T30] #0: ffff8880265c4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 693.215079][ T30] [ 693.217756][ T30] ============================================= [ 693.217756][ T30] [ 693.226192][ T30] NMI backtrace for cpu 0 [ 693.226211][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 693.226233][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 693.226245][ T30] Call Trace: [ 693.226254][ T30] [ 693.226263][ T30] dump_stack_lvl+0xe8/0x150 [ 693.226294][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 693.226316][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 693.226341][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 693.226365][ T30] sys_info+0x135/0x170 [ 693.226391][ T30] watchdog+0xf90/0xfe0 [ 693.226421][ T30] ? watchdog+0x209/0xfe0 [ 693.226452][ T30] kthread+0x388/0x470 [ 693.226478][ T30] ? __pfx_watchdog+0x10/0x10 [ 693.226501][ T30] ? __pfx_kthread+0x10/0x10 [ 693.226525][ T30] ret_from_fork+0x51e/0xb90 [ 693.226552][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 693.226573][ T30] ? __switch_to+0xc7d/0x1400 [ 693.226597][ T30] ? __pfx_kthread+0x10/0x10 [ 693.226624][ T30] ret_from_fork_asm+0x1a/0x30 [ 693.226668][ T30] [ 693.333655][ T30] Sending NMI from CPU 0 to CPUs 1: [ 693.339659][ C1] NMI backtrace for cpu 1 [ 693.339680][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 693.339698][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 693.339708][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 693.339734][ C1] Code: 44 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 38 2b 00 fb f4 7c e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 693.339754][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 693.339777][ C1] RAX: 0000000000164313 RBX: ffffffff8199661d RCX: 0000000080000001 [ 693.339789][ C1] RDX: 0000000000000001 RSI: ffffffff8dee2508 RDI: ffffffff8c276500 [ 693.339801][ C1] RBP: ffffc90000197f10 R08: ffff8880b873375b R09: 1ffff110170e66eb [ 693.339813][ C1] R10: dffffc0000000000 R11: ffffed10170e66ec R12: ffffffff90109070 [ 693.339824][ C1] R13: 1ffff11003b5a000 R14: 0000000000000001 R15: 0000000000000001 [ 693.339835][ C1] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 693.339849][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 693.339860][ C1] CR2: 00007f84917e9d40 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 693.339877][ C1] Call Trace: [ 693.339885][ C1] [ 693.339892][ C1] default_idle+0x9/0x20 [ 693.339913][ C1] default_idle_call+0x72/0xb0 [ 693.339936][ C1] do_idle+0x1bd/0x500 [ 693.339955][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 693.339977][ C1] ? __pfx_do_idle+0x10/0x10 [ 693.339998][ C1] cpu_startup_entry+0x43/0x60 [ 693.340016][ C1] start_secondary+0x101/0x110 [ 693.340033][ C1] common_startup_64+0x13e/0x147 [ 693.340062][ C1] [ 693.539775][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 693.546967][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 693.556189][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 693.566641][ T30] Call Trace: [ 693.569945][ T30] [ 693.572982][ T30] vpanic+0x1e0/0x670 [ 693.577104][ T30] panic+0xc5/0xd0 [ 693.580938][ T30] ? __pfx_panic+0x10/0x10 [ 693.585381][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 693.590813][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 693.597003][ T30] watchdog+0xfda/0xfe0 [ 693.601279][ T30] ? watchdog+0x209/0xfe0 [ 693.605718][ T30] kthread+0x388/0x470 [ 693.609840][ T30] ? __pfx_watchdog+0x10/0x10 [ 693.614615][ T30] ? __pfx_kthread+0x10/0x10 [ 693.619215][ T30] ret_from_fork+0x51e/0xb90 [ 693.623814][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 693.628947][ T30] ? __switch_to+0xc7d/0x1400 [ 693.633806][ T30] ? __pfx_kthread+0x10/0x10 [ 693.639051][ T30] ret_from_fork_asm+0x1a/0x30 [ 693.644225][ T30] [ 693.648111][ T30] Kernel Offset: disabled [ 693.652708][ T30] Rebooting in 86400 seconds..