last executing test programs: 3.041050879s ago: executing program 1 (id=7520): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000100)={{0xffffffffffffffff, &(0x7f0000000000)='mpls\x00', 0x2cc000, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x61]}, {0x2, 0x0, 0x728, 0xd9ed}}, 0x91, &(0x7f0000000080), &(0x7f00000000c0)=0x2}, {[0x2, 0x5, 0x1, 0xb]}, 0x2, 0x81, &(0x7f0000000200)=""/129}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x19, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x4c70}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf353, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x1, 0xd, 0x8, 0xb, 0x8, 0x10}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0xda, &(0x7f0000000400)=""/218, 0x40e00, 0x22, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000540)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x9, 0x81, 0x10000}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000005c0)=[{0x0, 0x3, 0xe, 0x9}, {0x2, 0x4, 0x7, 0x8}, {0x2, 0x3, 0xa, 0x4}, {0x2, 0x4, 0x9, 0xc}, {0x1, 0x4, 0x6, 0x3}, {0x4, 0x5, 0x2, 0x4}, {0x3, 0x1, 0xc, 0x2}], 0x10, 0x81}, 0x94) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000640)=""/6, &(0x7f0000000680)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtaction={0xec, 0x30, 0x1, 0x0, 0x800000, {}, [{0xd8, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x88, 0x2, 0x0, 0x0, {{0xa}, {0xffffffffffffff28}, {0x5a, 0x6, "37924aae4170e50e888b352b2f2cd5c2a8a2f619a636b0be232f595d2ab166429e10674c2b80ab86d43a038509e8259ed0939f1da30cd13fc869bb95f87bf2debcc142d13aa608bba402ce32a8d2a1811f8dd8fe7300"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0xec}}, 0x0) 2.979741815s ago: executing program 0 (id=7521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x62, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0xffffffc3, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0x24, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x80}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a18100310000000220fff0000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xd7, 0xf, 0x7, 0x1, 0x0, 0x800, 0x7}}, {0x12, 0x2, [0x7, 0x11, 0xfffa, 0x99a1, 0x2, 0x0, 0x8]}}, {{0x1c, 0x1, {0x0, 0x8, 0x2, 0x771, 0x0, 0x5, 0x5, 0x2}}, {0x8, 0x2, [0xff82, 0x7fff]}}, {{0x1c, 0x1, {0x5, 0x81, 0x8, 0x352, 0x1, 0x7, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x1e]}}]}]}, 0xa0}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00', 0x26, 0x1000c001, 0x0, 0x0) close(0x3) 2.786788801s ago: executing program 4 (id=7526): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697008000000000000000000000000001c0012800b000120697036746e6c00000c0002800600100004000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020080) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r4, 0x0, 0x0, 0x10002, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @local, 0x3}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX, @ANYRES32=r0, @ANYRESDEC, @ANYRESHEX=r2, @ANYBLOB="e185e4c3ff2588ba00e7430532fac535d5b49c874b203d4912630348d15180e15e0b40e9b355d0bcf90fda0c1d3590eeaadb81b49af664b54eb394ecb569873ef5b5607e03b5f02561aea6e5cdc8d10d302f72ff92c8c01b48adaa2e31112f41dec831c8856b2b595a6ad756665f6511155f1533d81da83af08cb6b2f1f179312fc04b21df04f4e618f5984b33dd241b43b2c71032d298727dad50c467d8bdce43bf0b1cbe0a41d4267843cdaa365c03ad7c4f32170f395f8817b2485bd4376c0ab7158bc8e03e603f9b59d1da34fe5b2765af392ebbc99ca5d858ac6573b7b429e1b4f20cf161161d091ae4e3b0e8583223a9882d37"], 0x4a) ppoll(&(0x7f0000000240)=[{r1, 0x20c0}], 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)={[0xffffffffffffff5d]}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440), 0x4) r7 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.73702919s ago: executing program 1 (id=7527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2507000000140002002001000000000000000000000000000114000300200100000000000000000000000000010800040064010102"], 0x44}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r5}, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfce) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000001f0000007b000400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 2.235972291s ago: executing program 1 (id=7530): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x24040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x7, &(0x7f0000000700)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000400)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @generic={0x4, 0x8, 0x3, 0x2, 0x8000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000480)='GPL\x00', 0x87cb, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[r0, r0, r0, 0x1], &(0x7f00000005c0)=[{0x3, 0x1, 0xd}, {0x1, 0x1, 0x2, 0x7}, {0x2, 0x2, 0x7, 0x9}, {0x2, 0x5, 0x4, 0xa}, {0x4, 0x5, 0x0, 0x2}, {0x0, 0x5, 0x8, 0x6}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r2, 0x0, 0x3b, 0xc3, &(0x7f0000000780)="ac2802e93e027a258e3e2516bc37f7f0140b1e506586ada938aec66037e86bc39de33f91953641f5820c23c1a3a708675ab2ef3bdbda813ed50067", &(0x7f0000000880)=""/195, 0x40, 0x0, 0x79, 0x1000, &(0x7f0000000980)="703a004132a340a9d36a803a0e03216c853aa380114b53403b01f39ba01cfc7e796dc34432e4c891abb8b93632c3725acc4202b8152ec1d36962a45098ccebf7e35a81a5abe66b526ddef16550b5a4a9a0d5d3ee273735c727878e7c0ceb2a69ea6c43dae1cb6bb6adc01a8eec59fa395c461c7ddabfe083ca", &(0x7f0000000c80)="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", 0x0, 0x0, 0xb}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='lp', 0x2) shutdown(r3, 0x1) 2.132958167s ago: executing program 2 (id=7532): sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@canfd={{}, 0xee, 0x0, 0x0, 0x0, "bc27adc50d03fb36a26d1d33610708eb844846979c3e552e4f42636ec483561f986e3e2a5455252a03b32ffd44fd8a40b0353a4025411e0620ec9757810556d2"}, 0x48}, 0x2}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000100)='k', 0x1}, {&(0x7f00000008c0)="51e66ebf71044da2ad8ff65f1465046079e917f8d29a93bf24fceed296743c43534ab728af17b6dc1f779bf81c235da893b025156a085cb663f40af7ad76654b47bb89755626c6523a49cb3315abe1069977c718ebcbd9b7aff7be9838b97905fee9ae4ce1dc1d70096755e657a724fed025", 0x72}, {&(0x7f0000000500)="2199c71eec318af75425e6a2007da756fc7df719a6ab2244f356dfd101cce27b0708832253034fb86e26e79a2fef8179dbb1d6a0067f47fcfd1be32c6e638a0df37dbd4777f8b34c17504977b2809e541ee6b64e2917f05e68ae34988cd0439688dccecafe7b638fe3d78dbb55d3ab238defd03de1cfd1a39826c4cf8e545a2bcc0871068aa7e7919be971f00b55d901b032bbafa9b7f4ac17a5ae00d9d5c3268333dd501c58e4f3b9695ff89cbfc2f0fc8eb45cd6f54383731d4379a435b0", 0xbf}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000440)="969616eb57605715efdb2c896dc40ff2b1d96c2df5066fa3bf144f03d1ec2d2264f40b7be80e0e32d8b1a18eb0e5fc0c89637b6b7168d72721c97812f1215a436b104e9d093f9dfcad9a390de7419ab557e32ff534fb9d4b2ae4f5def53f889b4f1ea13ea4fb8de607db55e74c9971", 0x6f}, {&(0x7f00000006c0)="9e5d40c2ab0e8883cc000a50ca1f508e4df9b0553a32ae0c9b3d351be39f51282e68f5846fee1b2b1b846c6d15333e862766216001f9f1a2ec9823de47fb87ac644d710be1ca55d71ee3d67360276bf2f38ecdefd1109c319227759fa038aab6cb6f64457ef45a6df8f0d1a14716ff49ea89c735cb2a9c939c18b91cc5567fc51457d03fa11b8ce8468f9b7c61940de7209286b37483ec00028649582389412ad17b190957e9497722d2035a3b3ae624cfa2b1234dc5152df58d0e3e22e66aaf7d40f5642ef49514512379d786b8fdd286", 0xd1}, {&(0x7f00000005c0)="847bcb89cccfb4bd367893149bd267183f1d8fafc85723bc9cc9a669a00ab9c4a87fd9a21fc1e627767dd702ca2250b207adb46cdc176681caa51e9b652e47e6bae0603235f4bd614beb05b9bf9888fb3f911011621b56e3d5131400381b374aacdbb216cdae9d530a91538cefca89c0dc162ba7dc1523001c1f6414", 0x7c}, {&(0x7f00000007c0)="eb3bd1c0b06f3fb4ec6eea047f310a964a7ab031a48ae0e8b23a624d72ed376631413303998066e274471d4e443233735e7eb09119791b8d1f0d026a680a0aa258aa4454243ba9bbf368f19ade31431e3204266253a9860fa1d36f98812d0a95eb740d815718b3cb8deea0b2e133b81f41386fe328b1dbac972f9103675879151df97ff7ccf989d06b56f89c9fa4c6fa24b92f7a3145d899b12dcc0faafff332bf2e2ef8bc39361c33ae4da2139796102868689329a6f1ad144adb72e27eb2315fe5e05f55fa8dfd628d53099907d7961f0edca9d945271617a5b6fb5456c8d726f7ec2b4a1e4a5cf1982cf643f66c", 0xef}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x420}, 0x40000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) close(r7) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.93301034s ago: executing program 1 (id=7533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x2, 0x6) sendto(r1, &(0x7f0000000000)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0xfffffffffffffffe, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r4, &(0x7f0000003200)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}}}, 0x8) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x8000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004e00)={{0x14}, [@NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x24, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x202, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4008}, 0x0) 1.854298946s ago: executing program 1 (id=7535): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f80000001600010025bd7000ffdbdf2500000000000000000000ffff64010100ff"], 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000) r3 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000180)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/159, 0x9f}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000600)=""/169, 0xa9}], 0x3}, 0x40000000) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x0, 0x4e22, 0x419f, 0xa, 0x30, 0x40, 0x5c}, {0x4, 0x2, 0x4, 0x7, 0x3, 0x8000000000000001, 0x0, 0x4}, {0x4, 0x6, 0x7, 0x4}, 0x7, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4d6, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3505, 0x1, 0x0, 0x6, 0x7, 0x4, 0x280000}}, 0xe8) sendmmsg(r3, &(0x7f0000009d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004004) close(r3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b2e0c65377}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x10000, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r6, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f00000018c0)=""/182, 0xb6}], 0x6}}], 0x1, 0x40010122, 0x0) write(r6, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x40090) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000002000000000500000a50000000060a0104000000000000000073797a3100000000240004e1980001800b00010064796e7365740000100002800900010073797a3000000000ffff020073797a32000f769d88821a27b0deac0b08c7f549e60000001400"/120], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) 1.700054518s ago: executing program 0 (id=7537): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x80, 0x2c, 0xd2b, 0x72bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x612}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x80}}, 0x24040084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="00000000000000001c001a800800028076650200080000003e120000"], 0x44}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) unshare(0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x0, 0x1, 0x3, 0x25dfdc01, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40010) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x86dd, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50129bd7000feffff07000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000200ffffffff00"/24], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x51dcb31a43476434) socket(0x40000000015, 0x5, 0x0) socket(0x10, 0x3, 0x0) 1.698654515s ago: executing program 2 (id=7538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x24, 0x3e, 0x107, 0x3, 0x0, {0x3, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100010026bd7000fbdbdf25e0000001000000001b00000000000000000004d50a00ff000c0015005c073591829b13256fb41786803b0009000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) getsockopt$ax25_int(r5, 0x101, 0x19, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xd4}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000002c0)={r6, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f0000000300)=0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x304}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r9, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x11, 0x4, 0x3, 0x2, 0x6, 0x8c, 0x9, 0x5, 0x6}}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 1.548970031s ago: executing program 4 (id=7540): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x7, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x1, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0xffffffff, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x6, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x1, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x8, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x4, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x1, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x1, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60200000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x40007f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xfe, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x0, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x0, 0x8, 0x7, 0x96, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0x200, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x207, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0xa00, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x0, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffd, 0x7, 0x20001, 0x8, 0x8, 0x1, 0x15b9, 0x4, 0x1, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x7a94, 0x7, 0x6, {0x7, 0x0, 0x8, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r9, r4, 0x8, 0x0, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41ab, 'syz1\x00'}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r13, 0x0, 0x0) setsockopt$sock_int(r13, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 1.429698818s ago: executing program 3 (id=7541): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) close(r2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0xfff}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffb}}, 0xe4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x3, 0x1, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040), 0x10) 1.408279927s ago: executing program 0 (id=7542): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66, 0x0, 0x0, 0x0, 0x800000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, @exit, @alu={0x7, 0x0, 0x7, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66, 0x0, 0x0, 0x0, 0x800000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, @exit, @alu={0x7, 0x0, 0x7, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) 1.35425526s ago: executing program 3 (id=7543): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.268528421s ago: executing program 0 (id=7544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xf8, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xf8, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) 1.221120666s ago: executing program 3 (id=7545): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3aff8ff1001000095"], &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=@newsa={0x114, 0x1a, 0x7, 0x2000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, {0x0, 0x94e, 0x7}, {0x401, 0x1, 0xae8}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x70}, [@etimer_thresh={0x8, 0xc, 0x3}, @coaddr={0x14, 0xe, @in6=@remote}, @replay_thresh={0x8, 0xb, 0xa6d0}]}, 0x114}}, 0x4000084) 1.191049388s ago: executing program 4 (id=7546): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2006cd73f7711842c065f3e45000018fffe0000a02f90787f000001e00000012001880b00089078"], 0x0) 1.177456829s ago: executing program 3 (id=7547): unshare(0x400) r0 = socket(0xa, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x3, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x62, 0x0, 0x7, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x27}}, {{0x6e22, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400000041"}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) unshare(0x400) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r5, &(0x7f0000000040), r4, 0x0, 0x6, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r6, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000dc06abab2b83d2920003000000200000000000080008010000010001002ef3466907fbb3d85ef00a522cd1f040c3cb241e42f9980de573aec60a5bb0a85e2667b7940b0821bad140b8a34164f23317a665686ed568126483841829b2f5b1324e9ab46ada294f0377aab1ab81a39940b2c76142c33af43dec2d4dadda1e"], 0x20}}], 0x1, 0x8000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008d7460001"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r9, &(0x7f0000000000), 0x0}, 0x20) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x4) 1.101612964s ago: executing program 0 (id=7548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x4, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r4, 0x4a9b6000) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x4, 0x40, 0x7, 0x7}, {0xcfb8, 0x0, 0x2, 0x73b}, {0xe, 0x9, 0x40, 0x8}, {0xffff, 0x88, 0x7, 0x1}, {0x6, 0xd, 0x6, 0xe2b}, {0x1, 0x2, 0x7e, 0x7fff}, {0xc28, 0xff, 0x1f, 0x401}, {0xaf95, 0x7, 0x1, 0x7fff}]}, 0x10) (async) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) 1.088377375s ago: executing program 4 (id=7549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) (async) setsockopt$inet6_int(r0, 0x84, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x2, r4, 0x9}, 0xc) (async) readv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/230, 0xe6}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c855}, 0x4081) 945.711056ms ago: executing program 0 (id=7550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697008000000000000000000000000001c0012800b000120697036746e6c00000c0002800600100004000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020080) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvfrom$inet6(r4, 0x0, 0x0, 0x10002, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @local, 0x3}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX, @ANYRES32=r0, @ANYRESDEC, @ANYRESHEX=r2, @ANYBLOB="e185e4c3ff2588ba00e7430532fac535d5b49c874b203d4912630348d15180e15e0b40e9b355d0bcf90fda0c1d3590eeaadb81b49af664b54eb394ecb569873ef5b5607e03b5f02561aea6e5cdc8d10d302f72ff92c8c01b48adaa2e31112f41dec831c8856b2b595a6ad756665f6511155f1533d81da83af08cb6b2f1f179312fc04b21df04f4e618f5984b33dd241b43b2c71032d298727dad50c467d8bdce43bf0b1cbe0a41d4267843cdaa365c03ad7c4f32170f395f8817b2485bd4376c0ab7158bc8e03e603f9b59d1da34fe5b2765af392ebbc99ca5d858ac6573b7b429e1b4f20cf161161d091ae4e3b0e8583223a9882d37"], 0x4a) ppoll(&(0x7f0000000240)=[{r1, 0x20c0}], 0x1, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000300)={[0xffffffffffffff5d]}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440), 0x4) r7 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 834.31323ms ago: executing program 1 (id=7551): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x5, 0x84) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r4, 0x8401}, {0xffffffffffffffff, 0x500}, {r1, 0x4}], 0x3, 0x0, 0x0, 0x0) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$packet(0x11, 0x2, 0x300) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff00", 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x200005, 0xce, &(0x7f0000000740)=""/206, 0x0, 0xa, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc73, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x7, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffdffff, 0x7fffffff}, 0x0, 0x0) accept(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r7, 0x0, r8, 0x0, 0xfffd, 0x0) shutdown(r0, 0x2) socket$netlink(0x10, 0x3, 0x10) 728.758479ms ago: executing program 2 (id=7552): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x99, &(0x7f00000002c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="0000008000000000000000003b0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ebf6ffff000000000a000000911195000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180062106a990390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x6c, 0x13, 0x5, 0x70bd2b, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_0\x00'}, @IFLA_PORT_SELF={0x38, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x31, 0x2, 'team_slave_0\x00\x7f\xcb}\x8bx*A\xfa\xe8{w8\x1a\xf5\xfb\x98\x9e\xa3\xed\x9e(=R\xca\xff\x95\x91~w\x8eD\xcf'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x20040054) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000002500010122bd7000fcffffff0a00000023000d00b669019fd02c090947811045b832755b8300000000cf3c0389de0402022df7ed10b08d24"], 0x38}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) 695.831367ms ago: executing program 4 (id=7553): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) bind$can_raw(r1, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000100)=0x9b3f, 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r3 = socket(0x1e, 0x1, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce287128"], 0xe0}], 0x1}, 0x40040) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0xfffffffffffffdb5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/40, 0x2e}], 0x1}, 0x20003ff1}], 0x1, 0x2080, 0x0) close(r3) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) (async) bind$can_raw(r1, &(0x7f00000001c0), 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000100)=0x9b3f, 0x4) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) socket(0x1e, 0x1, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce287128"], 0xe0}], 0x1}, 0x40040) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0xfffffffffffffdb5, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/40, 0x2e}], 0x1}, 0x20003ff1}], 0x1, 0x2080, 0x0) (async) close(r3) (async) 504.009974ms ago: executing program 4 (id=7554): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x88}}}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f0000000040)=""/163, 0xa3) syz_emit_ethernet(0x86, &(0x7f0000002540)={@link_local, @random="d20383aaa32c", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x78, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "89a9cc9b8b79b039ec4c0faa43c480fe478bc86869497f495e70a4e4a5b28021", "588243f6265a508e1d6b540850096846", {"3c95b8f2ffb7d89f86801e5362afd0c5", "85414dcf87b0bcd9d84213484825c53a"}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x1000) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)=""/237, 0xec}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}, 0xfffff6e7}, {{0x0, 0x0, 0x0}, 0x7d08}, {{0x0, 0x0, 0x0}, 0x20000008}, {{0x0, 0x0, 0x0}, 0x83}, {{0x0, 0x0, 0x0}, 0x2}], 0x40000000000008e, 0x40000020, 0x0) 376.955527ms ago: executing program 2 (id=7555): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x28, 0x5, 0x2, 0x70ff}, {0x20, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r2, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x35, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r9, &(0x7f00000002c0), &(0x7f0000000300)=@udp=r7, 0x1}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x11b43}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 267.706106ms ago: executing program 3 (id=7556): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffff08000000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000e2ffff00000000000000000000000000000000000000000000e13fc0795b9e0afbffffffffffff00000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000036cdb45d2b6b6cb5d9cbada1b3756e4a06b0676fe842a0ad16c287b76d0c8cb1e22eb6be50d4569abba3b16549060c18369814c47db55acccd0003bf594dac7c5af25562886ed8c1f94dc99f38d00f165cfdc0b63a65957055e4817009ab248cc37ba77398bd3b7711088e536fe031897d"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000092de961b000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002000000000000000002000000000000c619f48a42b6daa99f9d35854ee715000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c40)=@newqdisc={0x138, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x4000080) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000000ac0)) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0xb, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r10) 171.276565ms ago: executing program 2 (id=7557): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xfffffff2, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001a00)={0x0, 0x1c, "e0fbbff97be1de1d84e9becd412511383c7ccdef4855f32589763d54"}, &(0x7f0000001a80)=0x24) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="fb0a93abbe840b78b7e37d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 64) 4.760117ms ago: executing program 2 (id=7558): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x3a, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x30, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x458}, 0x1, 0x0, 0x0, 0x8100}, 0x20000044) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0xc8, &(0x7f0000000ec0)=""/200, 0x0, 0x0, '\x00', r1, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000180100c8786e6c250000000007000000fb1af8ff00000000bfa100000000000007010000f8ffffffb70000010000003329030000000000371bced80e3f41f3a6104c2b3222eafd850000007300000018110000", @ANYRES32=r6, @ANYRESDEC=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r1, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r7, 0x0, 0x0}, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) write$nci(r4, 0x0, 0xc) write$nci(r4, &(0x7f0000000040)=ANY=[], 0x14) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="500238", @ANYRES64], 0x3b) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=7559): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x1, 0x4, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001200010000000000fcdbd7250a0300004e224e2400000100ffff00000000000000000000a80400"/56, @ANYRES32=0x0, @ANYBLOB="050000000300ff7f000000cb116c74ebcbcb921d91197f3a9be5ae96d11e28f9b30a4a04000000233700"/55], 0x54}}, 0x20004010) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00', 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f00000000c0)=0x1ffffc, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x11dc, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x5824, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001114e77d918c700500000000080001000000000008004b001306"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00'}) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x7, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044050}, 0x4814) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x3, 0xffffffffffffffff, 0x2b1a, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1, 0x0, 0xc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0x0, 0x200007fffffff, 0x4}, 0x0, 0x0) r8 = epoll_create(0x9) epoll_pwait(r8, &(0x7f0000000180)=[{}], 0x1, 0x3, &(0x7f0000000200)={[0xff]}, 0x8) kernel console output (not intermixed with test programs): when the network device's interface is open [ 1211.743598][T30950] tipc: Cannot configure node identity twice [ 1211.847592][T30840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.857499][T30840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.866147][T30840] bridge_slave_0: entered allmulticast mode [ 1211.891096][T30840] bridge_slave_0: entered promiscuous mode [ 1211.912879][T30840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.939264][T30840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.946699][T30840] bridge_slave_1: entered allmulticast mode [ 1211.960554][T30840] bridge_slave_1: entered promiscuous mode [ 1212.032876][T30840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.070245][T30840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.137761][T30840] team0: Port device team_slave_0 added [ 1212.147472][T30840] team0: Port device team_slave_1 added [ 1212.209790][T30840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.216968][T30840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.246437][T30840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.309954][T30840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.317470][T30840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.350571][T30967] openvswitch: netlink: Actions may not be safe on all matching packets [ 1212.360526][T30840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.418669][ T5840] Bluetooth: hci2: command tx timeout [ 1214.391948][T30976] macsec1: entered promiscuous mode [ 1214.399362][T30976] dummy0: entered promiscuous mode [ 1214.404865][T30976] macsec1: entered allmulticast mode [ 1214.411726][T30976] dummy0: entered allmulticast mode [ 1214.425375][T30976] dummy0: left allmulticast mode [ 1214.431893][T30976] dummy0: left promiscuous mode [ 1214.465965][T30989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1214.497210][T30994] netlink: 'syz.0.6298': attribute type 1 has an invalid length. [ 1214.497463][T30840] hsr_slave_0: entered promiscuous mode [ 1214.506300][ T5840] Bluetooth: hci2: command tx timeout [ 1214.514426][T30840] hsr_slave_1: entered promiscuous mode [ 1214.528071][T30840] debugfs: 'hsr0' already exists in 'hsr' [ 1214.534686][T30840] Cannot create hsr debugfs directory [ 1214.552188][T30993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6298'. [ 1214.576566][T30985] wg1 speed is unknown, defaulting to 1000 [ 1214.592608][T30993] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1214.601957][T30985] 9 speed is unknown, defaulting to 1000 [ 1214.645340][T30994] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1214.659355][T30994] bond7: (slave geneve5): making interface the new active one [ 1214.667661][T30994] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 1214.722319][ T7642] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1214.758932][ T7642] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1214.809069][ T7642] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1214.819532][ T7642] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1214.970574][T31002] wg1 speed is unknown, defaulting to 1000 [ 1215.009984][T31002] 9 speed is unknown, defaulting to 1000 [ 1215.258685][T30985] lo speed is unknown, defaulting to 1000 [ 1215.484784][ T7644] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.560434][ T7644] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.610276][ T7644] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.689818][ T7642] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.802564][T30840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1215.833193][T30840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1215.853672][T31002] lo speed is unknown, defaulting to 1000 [ 1215.860373][T30840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1215.883075][T30840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1215.949063][T31030] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.6307'. [ 1215.980877][T31036] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.6307'. [ 1216.169851][T30840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.231075][T30840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.245633][T30680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.252832][T30680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.304621][T31041] bond0: entered promiscuous mode [ 1216.310456][T31041] bond_slave_0: entered promiscuous mode [ 1216.316467][T31041] bond_slave_1: entered promiscuous mode [ 1216.344763][T31041] dummy0: entered promiscuous mode [ 1216.362800][T30680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.370060][T30680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.542638][T31053] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1216.578718][ T5840] Bluetooth: hci2: command tx timeout [ 1216.694131][T31059] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6311'. [ 1217.155410][T30840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.200912][T31052] wg1 speed is unknown, defaulting to 1000 [ 1217.258310][T31052] 9 speed is unknown, defaulting to 1000 [ 1217.642080][T30840] veth0_vlan: entered promiscuous mode [ 1217.660763][T30840] veth1_vlan: entered promiscuous mode [ 1217.746499][T30840] veth0_macvtap: entered promiscuous mode [ 1217.780797][T30840] veth1_macvtap: entered promiscuous mode [ 1217.827643][T30840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.851017][T30840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1217.862682][T31076] netlink: zone id is out of range [ 1217.867847][T31076] netlink: zone id is out of range [ 1217.875915][ T7636] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.895591][ T7636] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.909195][T31076] netlink: zone id is out of range [ 1217.926930][ T7636] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1217.975817][ T7636] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.138273][T31079] syz.4.6318 (31079) used obsolete PPPIOCDETACH ioctl [ 1218.143236][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.185911][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.267828][T31052] lo speed is unknown, defaulting to 1000 [ 1218.294032][T30680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1218.315019][T30680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.605749][T31084] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.810246][T31091] wg1 speed is unknown, defaulting to 1000 [ 1218.866496][T31091] 9 speed is unknown, defaulting to 1000 [ 1219.057696][T31084] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.400314][T31084] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.416034][T26142] IPVS: starting estimator thread 0... [ 1219.519294][T31098] IPVS: using max 26 ests per chain, 62400 per kthread [ 1219.678017][T31084] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.937608][T31105] sit0: entered promiscuous mode [ 1219.970955][T31105] netlink: 'syz.4.6323': attribute type 1 has an invalid length. [ 1219.988601][T31105] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6323'. [ 1220.012440][T31091] lo speed is unknown, defaulting to 1000 [ 1220.200173][ T7642] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.220925][ T7642] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.243926][T31108] syzkaller0: entered promiscuous mode [ 1220.249888][T31108] syzkaller0: entered allmulticast mode [ 1220.280194][ T7636] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.389787][ T7642] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.688322][T31116] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6328'. [ 1220.966893][T31120] netlink: 'syz.1.6330': attribute type 5 has an invalid length. [ 1221.082495][T25590] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1221.095295][T25590] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1221.104376][T25590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1221.113097][T25590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1221.122732][T25590] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1221.295647][T31121] wg1 speed is unknown, defaulting to 1000 [ 1221.325592][T31121] 9 speed is unknown, defaulting to 1000 [ 1221.460587][T26142] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1221.630129][T18475] team0: Port device syz_tun removed [ 1221.736808][T31130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6332'. [ 1222.136358][T31121] lo speed is unknown, defaulting to 1000 [ 1222.179687][ T797] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1222.255431][T31141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6335'. [ 1222.411044][T31141] macvlan2: entered promiscuous mode [ 1222.428878][T31141] macvlan2: entered allmulticast mode [ 1222.434676][T31141] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1223.025466][T31159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6339'. [ 1223.063799][T31159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6339'. [ 1223.131454][T31154] wg1 speed is unknown, defaulting to 1000 [ 1223.149120][T31152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6339'. [ 1223.194409][T31154] 9 speed is unknown, defaulting to 1000 [ 1223.219080][ T5840] Bluetooth: hci3: command tx timeout [ 1223.352654][T31167] netlink: 'syz.4.6341': attribute type 2 has an invalid length. [ 1224.090377][T31154] lo speed is unknown, defaulting to 1000 [ 1224.279618][T31186] netlink: 'syz.3.6346': attribute type 10 has an invalid length. [ 1224.422273][T31121] chnl_net:caif_netlink_parms(): no params data found [ 1224.463909][T31189] tipc: Enabled bearer , priority 0 [ 1224.480153][T31189] syzkaller0: entered promiscuous mode [ 1224.488593][T31189] syzkaller0: entered allmulticast mode [ 1224.616247][T31189] tipc: Resetting bearer [ 1224.622967][T31190] wg1 speed is unknown, defaulting to 1000 [ 1224.629192][T31188] tipc: Resetting bearer [ 1224.667494][T31188] tipc: Disabling bearer [ 1224.701896][T31190] 9 speed is unknown, defaulting to 1000 [ 1224.760740][T31198] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6349'. [ 1224.807021][T31121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.809513][T31198] netlink: 'syz.2.6349': attribute type 10 has an invalid length. [ 1224.815233][T31121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.829768][T31121] bridge_slave_0: entered allmulticast mode [ 1224.838047][T31121] bridge_slave_0: entered promiscuous mode [ 1224.847849][T31121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.855450][T31121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.863252][T31121] bridge_slave_1: entered allmulticast mode [ 1224.877986][T31198] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6349'. [ 1224.889892][T31121] bridge_slave_1: entered promiscuous mode [ 1224.949711][T31121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1224.982653][T31121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.076213][T31200] wg1 speed is unknown, defaulting to 1000 [ 1225.080379][T31205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1225.093531][T31121] team0: Port device team_slave_0 added [ 1225.100360][T31200] 9 speed is unknown, defaulting to 1000 [ 1225.107702][T31205] macvlan3: entered allmulticast mode [ 1225.115082][T31205] hsr0: entered allmulticast mode [ 1225.121888][T31205] hsr_slave_0: entered allmulticast mode [ 1225.127848][T31205] hsr_slave_1: entered allmulticast mode [ 1225.142247][T31121] team0: Port device team_slave_1 added [ 1225.212445][T31121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.239729][T31121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.278259][T31121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.304144][ T5840] Bluetooth: hci3: command tx timeout [ 1225.318952][T31190] lo speed is unknown, defaulting to 1000 [ 1225.320703][T31121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.332571][T31121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.379894][T31121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.437136][T16569] lec:lec_start_xmit: lec0:No lecd attached [ 1225.502243][T31121] hsr_slave_0: entered promiscuous mode [ 1225.509790][T31121] hsr_slave_1: entered promiscuous mode [ 1225.516754][T31121] debugfs: 'hsr0' already exists in 'hsr' [ 1225.523081][T31121] Cannot create hsr debugfs directory [ 1225.784735][T31200] lo speed is unknown, defaulting to 1000 [ 1225.999801][T31121] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1226.144121][T31121] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1226.250060][T31121] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1226.351110][T31211] syzkaller0: entered promiscuous mode [ 1226.378732][T31211] syzkaller0: entered allmulticast mode [ 1226.438102][T31121] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1227.388775][ T5840] Bluetooth: hci3: command tx timeout [ 1228.644403][T31220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6354'. [ 1228.699974][T31221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6354'. [ 1228.902043][T31121] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1228.936117][T31121] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1229.002925][T31121] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1229.053343][T31121] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1229.219638][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1229.459019][ T5840] Bluetooth: hci3: command tx timeout [ 1229.476689][T31121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.553322][T31121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.627366][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.634618][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.693740][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.700994][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.226539][T31270] geneve2: entered promiscuous mode [ 1230.366262][ T3532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.391432][ T3532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.438844][ T3532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.468811][ T3532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.582326][T31121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.642400][T31275] netlink: 'syz.2.6369': attribute type 3 has an invalid length. [ 1230.668520][T31275] netlink: 'syz.2.6369': attribute type 3 has an invalid length. [ 1230.831692][T31121] veth0_vlan: entered promiscuous mode [ 1230.872729][T31121] veth1_vlan: entered promiscuous mode [ 1230.949217][T31285] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1230.977143][T31121] veth0_macvtap: entered promiscuous mode [ 1230.983138][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5540 ms [ 1230.991471][ C0] lec:lec_tx_timeout: lec0 [ 1231.035567][T31292] tipc: Resetting bearer [ 1231.149600][T31121] veth1_macvtap: entered promiscuous mode [ 1231.187608][T31121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.248295][T31121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.305023][T30680] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.327999][T31292] tipc: Resetting bearer [ 1231.348131][T30680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.477025][T30680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.528711][T30680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.625273][T10942] tipc: Resetting bearer [ 1231.747212][ T7636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.769265][ T7636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.894765][ T7636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.917776][ T7636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.072897][T31309] wg1 speed is unknown, defaulting to 1000 [ 1232.081222][T31309] 9 speed is unknown, defaulting to 1000 [ 1232.209850][T31325] netlink: 'syz.4.6381': attribute type 1 has an invalid length. [ 1232.217656][T31325] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6381'. [ 1232.718186][T31309] lo speed is unknown, defaulting to 1000 [ 1232.731041][T31340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6386'. [ 1232.780110][T31340] netlink: 'syz.2.6386': attribute type 2 has an invalid length. [ 1232.849689][T31340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6386'. [ 1233.125388][T31357] TCP: TCP_TX_DELAY enabled [ 1233.155490][T31359] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6392'. [ 1233.168773][T31359] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6392'. [ 1233.264435][T31364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6393'. [ 1233.318271][T31364] netlink: 'syz.0.6393': attribute type 11 has an invalid length. [ 1233.971313][T31399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6401'. [ 1233.976391][T31381] wg1 speed is unknown, defaulting to 1000 [ 1234.145858][T31399] hsr_slave_1 (unregistering): left promiscuous mode [ 1234.180113][T31381] 9 speed is unknown, defaulting to 1000 [ 1234.339109][T31406] block nbd0: NBD_DISCONNECT [ 1234.361595][T31406] block nbd0: Send disconnect failed -32 [ 1234.367503][T31406] block nbd0: shutting down sockets [ 1235.275642][T31424] IPVS: length: 132 != 8 [ 1235.396354][T31427] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6404'. [ 1235.636427][T30680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.646709][T30680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.656603][T30680] bond0 (unregistering): Released all slaves [ 1235.667286][T30680] bond1 (unregistering): Released all slaves [ 1235.686047][T30680] bond2 (unregistering): Released all slaves [ 1235.707515][T30680] bond3 (unregistering): Released all slaves [ 1235.723256][T30680] bond4 (unregistering): Released all slaves [ 1235.737126][T30680] bond5 (unregistering): Released all slaves [ 1235.760131][T30680] bond6 (unregistering): Released all slaves [ 1235.778629][T30842] Bluetooth: hci1: command 0x0406 tx timeout [ 1235.845943][T31429] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6406'. [ 1235.860618][T31381] lo speed is unknown, defaulting to 1000 [ 1235.874028][T31420] pimreg: entered allmulticast mode [ 1235.911254][T31420] pimreg: left allmulticast mode [ 1236.052285][T31434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6408'. [ 1236.123715][ T39] IPVS: starting estimator thread 0... [ 1236.188928][T31441] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 1236.218727][T31438] IPVS: using max 28 ests per chain, 67200 per kthread [ 1236.468109][T31448] syzkaller1: entered promiscuous mode [ 1236.475220][T31448] syzkaller1: entered allmulticast mode [ 1236.617780][T10927] smc: removing ib device syz1 [ 1236.623969][T31417] wg1 speed is unknown, defaulting to 1000 [ 1236.886352][T31417] 9 speed is unknown, defaulting to 1000 [ 1236.965527][T31417] lo speed is unknown, defaulting to 1000 [ 1237.763988][T31453] tipc: Resetting bearer [ 1238.001170][T31452] tipc: Resetting bearer [ 1238.075856][ T7644] tipc: Resetting bearer [ 1238.727197][T31486] netlink: 'syz.1.6419': attribute type 1 has an invalid length. [ 1238.826815][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1239.280082][T31498] syzkaller0: entered promiscuous mode [ 1239.285739][T31498] syzkaller0: entered allmulticast mode [ 1239.313687][T31499] netlink: 'syz.3.6424': attribute type 10 has an invalid length. [ 1239.328699][T31499] __nla_validate_parse: 2 callbacks suppressed [ 1239.328721][T31499] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6424'. [ 1239.354566][T31498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6423'. [ 1239.384083][T31498] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6423'. [ 1239.393994][T31498] netlink: 'syz.4.6423': attribute type 6 has an invalid length. [ 1239.402490][T31498] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6423'. [ 1240.282084][T31526] netlink: 'syz.1.6430': attribute type 10 has an invalid length. [ 1240.371155][T31526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.379160][T31526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.396854][T31526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.404185][T31526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.411797][T31526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.419016][T31526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.456891][T31526] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1240.982965][T30680] !: left promiscuous mode [ 1241.107915][T30680] : left promiscuous mode [ 1241.270871][T30680] tipc: Left network mode [ 1242.306405][T31552] syzkaller0: entered promiscuous mode [ 1242.321776][T31552] syzkaller0: entered allmulticast mode [ 1242.427722][T31554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6437'. [ 1242.617313][T30680] hsr_slave_0: left promiscuous mode [ 1242.644700][T30680] hsr_slave_1: left promiscuous mode [ 1242.651324][T30680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.660951][T30680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.845094][T30680] (unregistering): left promiscuous mode [ 1242.853482][T30680] (unregistering): left allmulticast mode [ 1242.861456][T30680] team0 (unregistering): Port device 76 removed [ 1242.876000][T30680] team_slave_0 (unregistering): left promiscuous mode [ 1242.884655][T30680] team_slave_0 (unregistering): left allmulticast mode [ 1242.895484][T30680] team0 (unregistering): Port device team_slave_0 removed [ 1243.032794][T30680] dummy0 (unregistering): left promiscuous mode [ 1243.043641][T30680] dummy0 (unregistering): left allmulticast mode [ 1243.054764][T30680] team0 (unregistering): Port device dummy0 removed [ 1243.072119][T31517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1243.336453][T31568] netlink: 'syz.4.6440': attribute type 1 has an invalid length. [ 1243.520669][T31574] ip6gretap1: entered promiscuous mode [ 1243.533414][T31574] ip6gretap1: entered allmulticast mode [ 1243.594165][T31581] netlink: 320 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1243.638515][T31581] Cannot find add_set index 0 as target [ 1243.813321][T31589] bridge1: entered promiscuous mode [ 1243.925785][T31597] netlink: 'syz.0.6450': attribute type 1 has an invalid length. [ 1243.940125][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 1243.948177][ C0] lec:lec_tx_timeout: lec0 [ 1244.285698][T31609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6454'. [ 1244.296501][T31609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6454'. [ 1244.342911][T31612] tipc: Failed to remove unknown binding: 66,0,0/0:984896834/984896835 [ 1244.383541][T31609] tipc: Failed to remove unknown binding: 66,0,0/0:984896834/984896835 [ 1244.407077][T31615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6456'. [ 1244.447423][T31616] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6455'. [ 1244.565049][T31616] bond0: (slave dummy0): Releasing backup interface [ 1244.655633][T31626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6460'. [ 1244.877899][T30842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1244.889950][T30842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1244.898566][T30842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1244.914321][T30842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1244.924435][T30842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1244.966804][T31616] dummy0 (unregistering): left promiscuous mode [ 1245.178207][T31635] lo speed is unknown, defaulting to 1000 [ 1245.220305][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1245.494713][T31654] netlink: 'syz.0.6466': attribute type 13 has an invalid length. [ 1245.523802][T31654] netlink: 14589 bytes leftover after parsing attributes in process `syz.0.6466'. [ 1245.547007][T30680] IPVS: stop unused estimator thread 0... [ 1245.575235][T31657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6467'. [ 1246.121665][T10942] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.188600][T31666] lo speed is unknown, defaulting to 1000 [ 1246.282031][T10942] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.978564][T30842] Bluetooth: hci4: command tx timeout [ 1247.076413][T31677] lo speed is unknown, defaulting to 1000 [ 1247.090955][T10942] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.207493][T10942] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.567990][T31695] netlink: 'syz.1.6475': attribute type 10 has an invalid length. [ 1247.609157][T31696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6476'. [ 1247.882844][T31635] chnl_net:caif_netlink_parms(): no params data found [ 1247.932294][T31694] lo speed is unknown, defaulting to 1000 [ 1248.046979][T10942] bridge_slave_1: left allmulticast mode [ 1248.068853][T10942] bridge_slave_1: left promiscuous mode [ 1248.076286][T10942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.113580][T10942] bridge_slave_0: left allmulticast mode [ 1248.159239][T10942] bridge_slave_0: left promiscuous mode [ 1248.165433][T10942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.385189][T10942] bond7 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1248.397390][T10942] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1248.437037][T10942] bond11 (unregistering): (slave ip6gretap2): Releasing active interface [ 1248.445932][T10942] bond11 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 16:3d:9f:8f:b9:f2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1248.466624][T10942] bond11 (unregistering): (slave erspan0): making interface the new active one [ 1248.541658][T10942] bond11 (unregistering): (slave erspan0): Releasing active interface [ 1248.586804][T10942] bond10 (unregistering): (slave gretap1): Releasing active interface [ 1248.660853][T10942] bond3 (unregistering): (slave bridge1): Releasing active interface [ 1248.844157][T10942] bond0 (unregistering): (slave 30): Releasing backup interface [ 1248.864313][T10942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1248.875118][T10942] bond0 (unregistering): Released all slaves [ 1248.887411][T10942] bond1 (unregistering): Released all slaves [ 1248.901530][T10942] bond2 (unregistering): Released all slaves [ 1248.925735][T10942] bond3 (unregistering): Released all slaves [ 1248.941118][T10942] bond4 (unregistering): Released all slaves [ 1248.955095][T10942] bond5 (unregistering): Released all slaves [ 1248.969755][T10942] bond6 (unregistering): Released all slaves [ 1248.984659][T10942] bond7 (unregistering): Released all slaves [ 1249.006502][T10942] bond8 (unregistering): Released all slaves [ 1249.024828][T10942] bond9 (unregistering): Released all slaves [ 1249.046758][T10942] bond10 (unregistering): Released all slaves [ 1249.059272][T30842] Bluetooth: hci4: command tx timeout [ 1249.065770][T10942] bond11 (unregistering): (slave veth5): Releasing active interface [ 1249.080166][T10942] bond11 (unregistering): Released all slaves [ 1249.497851][T10942] !: left promiscuous mode [ 1249.582937][T31635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.599697][T31635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.613534][T31635] bridge_slave_0: entered allmulticast mode [ 1249.634376][T31635] bridge_slave_0: entered promiscuous mode [ 1249.656355][T31635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.681322][T31635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.702130][T31635] bridge_slave_1: entered allmulticast mode [ 1249.717236][T31635] bridge_slave_1: entered promiscuous mode [ 1249.734483][T10942] tipc: Disabling bearer [ 1249.754663][T10942] tipc: Left network mode [ 1250.077780][T31635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.138914][T30842] Bluetooth: hci4: command tx timeout [ 1252.412716][T31635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.518037][T31635] team0: Port device team_slave_0 added [ 1252.562559][T31635] team0: Port device team_slave_1 added [ 1252.601815][T31728] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6478'. [ 1252.925574][T31635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.938602][T31635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.026334][T31635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.053602][T31635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.098467][T31635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.162735][T31635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.226013][T30842] Bluetooth: hci4: command tx timeout [ 1253.825380][T31635] hsr_slave_0: entered promiscuous mode [ 1253.852562][T31635] hsr_slave_1: entered promiscuous mode [ 1253.879607][T31635] debugfs: 'hsr0' already exists in 'hsr' [ 1253.885411][T31635] Cannot create hsr debugfs directory [ 1254.134888][T31779] xt_socket: unknown flags 0xfc [ 1254.456450][T31785] sctp: [Deprecated]: syz.0.6486 (pid 31785) Use of int in maxseg socket option. [ 1254.456450][T31785] Use struct sctp_assoc_value instead [ 1255.408746][T31810] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 1255.578319][T31811] netlink: 'syz.4.6489': attribute type 1 has an invalid length. [ 1255.677904][T31811] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6489'. [ 1255.860866][T31833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1256.029741][T31848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6496'. [ 1256.273705][T31827] syzkaller0: entered promiscuous mode [ 1256.279692][T31827] syzkaller0: entered allmulticast mode [ 1258.472808][T10942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.502734][T10942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.542009][T10942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.551967][T10942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.584680][T10942] hsr0: left allmulticast mode [ 1258.591131][T10942] veth1_vlan: left promiscuous mode [ 1258.618907][T10942] veth0_vlan: left promiscuous mode [ 1259.085897][T10942] team0 (unregistering): Port device team_slave_1 removed [ 1259.108606][T10942] team0 (unregistering): Port device C removed [ 1259.354197][T10927] smc: removing ib device sqz0 [ 1259.552170][T31874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6500'. [ 1259.561510][T29476] lo speed is unknown, defaulting to 1000 [ 1259.562609][T31895] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6502'. [ 1259.567353][T29476] sqz0: Port: 1 Link DOWN [ 1259.672168][T31895] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6502'. [ 1260.216960][T31917] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6509'. [ 1260.446153][T31932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6510'. [ 1260.716499][T31635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1260.791435][T31635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1260.977390][T31942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6512'. [ 1261.001197][T31635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1261.054248][T31635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1261.122919][T31947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6514'. [ 1261.157143][T31947] netlink: 'syz.1.6514': attribute type 7 has an invalid length. [ 1261.203065][T31947] netlink: 'syz.1.6514': attribute type 8 has an invalid length. [ 1261.241709][T31947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6514'. [ 1261.439100][T31969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6515'. [ 1261.488329][T31971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6517'. [ 1261.864867][T31635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.191031][T31635] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.337069][T30697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.344478][T30697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.429919][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.437075][ T7653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.074850][T31635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.255446][T31635] veth0_vlan: entered promiscuous mode [ 1263.415866][T31635] veth1_vlan: entered promiscuous mode [ 1263.660661][T32043] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1263.829968][T32045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1266.195530][T10942] IPVS: stop unused estimator thread 0... [ 1266.277189][T31635] veth0_macvtap: entered promiscuous mode [ 1266.300507][T32076] hsr0: entered promiscuous mode [ 1266.305926][T32076] __nla_validate_parse: 2 callbacks suppressed [ 1266.305943][T32076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6534'. [ 1266.329397][T31635] veth1_macvtap: entered promiscuous mode [ 1266.388952][T32076] hsr_slave_0: left promiscuous mode [ 1266.466789][T32076] hsr0 (unregistering): left promiscuous mode [ 1266.744044][T32094] syzkaller0: entered promiscuous mode [ 1266.751923][T32094] syzkaller0: entered allmulticast mode [ 1266.857336][T31635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.903435][T31635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.955984][T32117] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6541'. [ 1267.133186][T32125] netlink: 'syz.2.6542': attribute type 5 has an invalid length. [ 1267.190201][T32126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6542'. [ 1269.464113][T32140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6543'. [ 1269.508113][ T7653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.533926][ T7653] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.578632][ T7653] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.660830][ T7653] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.715175][T32150] netlink: 'syz.2.6546': attribute type 1 has an invalid length. [ 1269.732944][T32152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6547'. [ 1269.768259][T32152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6547'. [ 1269.799983][T32154] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6547'. [ 1269.828142][T32150] bond1: entered promiscuous mode [ 1269.835575][T32150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1269.844006][T32154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6547'. [ 1269.867686][T32157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1269.885966][T32157] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1269.908578][T32157] bond1: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 1269.926197][T32157] bond1: (slave wireguard1): making interface the new active one [ 1269.942577][T32157] wireguard1: entered promiscuous mode [ 1269.964969][T32157] bond1: (slave wireguard1): Enslaving as an active interface with an up link [ 1270.010203][T32163] bond1: (slave wireguard2): The slave device specified does not support setting the MAC address [ 1270.037857][T32172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6550'. [ 1270.054053][T32163] bond1: (slave wireguard2): Enslaving as a backup interface with an up link [ 1270.113081][T32172] mac80211_hwsim hwsim72 wlan1: entered promiscuous mode [ 1270.195196][T32172] macvtap1: entered promiscuous mode [ 1270.240101][T32180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6550'. [ 1270.294879][ T7653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.337459][ T7653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.543347][ T7644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.557008][ T7644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.835341][T32203] team0 (unregistering): Port device team_slave_0 removed [ 1270.906841][T32203] team0 (unregistering): Port device team_slave_1 removed [ 1271.046402][T32214] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 1271.124618][T32215] bridge0: port 3(macsec0) entered blocking state [ 1271.132799][T32215] bridge0: port 3(macsec0) entered disabled state [ 1271.143410][T32215] macsec0: entered allmulticast mode [ 1271.149163][T32215] veth1_macvtap: entered allmulticast mode [ 1271.161700][T32215] macsec0: entered promiscuous mode [ 1271.168470][T32215] bridge0: port 3(macsec0) entered blocking state [ 1271.175097][T32215] bridge0: port 3(macsec0) entered forwarding state [ 1271.549153][T32245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6564'. [ 1271.651896][T32249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6566'. [ 1271.751782][T32249] bridge_slave_1: left allmulticast mode [ 1271.796993][T32249] bridge_slave_1: left promiscuous mode [ 1271.826072][T32249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.852899][T32260] can: request_module (can-proto-0) failed. [ 1271.917169][T32249] bridge_slave_0: left allmulticast mode [ 1271.943174][T32249] bridge_slave_0: left promiscuous mode [ 1271.963246][T32249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.217643][T32279] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 1272.225613][ T5838] IPVS: starting estimator thread 0... [ 1272.262027][T32281] sysfs: cannot create duplicate filename '/class/ieee80211/&%Q0@æjʫ}!' [ 1272.289195][T32281] CPU: 1 UID: 0 PID: 32281 Comm: syz.4.6571 Not tainted syzkaller #0 PREEMPT(full) [ 1272.289226][T32281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1272.289239][T32281] Call Trace: [ 1272.289249][T32281] [ 1272.289258][T32281] dump_stack_lvl+0xe8/0x150 [ 1272.289294][T32281] sysfs_warn_dup+0x8e/0xa0 [ 1272.289325][T32281] sysfs_do_create_link_sd+0xc0/0x110 [ 1272.289357][T32281] device_add_class_symlinks+0x1cf/0x240 [ 1272.289384][T32281] device_add+0x475/0xb70 [ 1272.289410][T32281] wiphy_register+0x1d73/0x2d50 [ 1272.289458][T32281] ? __pfx_wiphy_register+0x10/0x10 [ 1272.289484][T32281] ? __pfx_netdev_run_todo+0x10/0x10 [ 1272.289506][T32281] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1272.289537][T32281] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1272.289574][T32281] ieee80211_register_hw+0x3571/0x4220 [ 1272.289624][T32281] ? ieee80211_register_hw+0x1431/0x4220 [ 1272.289657][T32281] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1272.289699][T32281] ? __hrtimer_setup+0x181/0x200 [ 1272.289720][T32281] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1272.289756][T32281] mac80211_hwsim_new_radio+0x2f97/0x5330 [ 1272.289821][T32281] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1272.289846][T32281] ? kstrndup+0xbf/0x160 [ 1272.289882][T32281] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1272.289937][T32281] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1272.289985][T32281] ? rcu_is_watching+0x15/0xb0 [ 1272.290010][T32281] ? __nla_parse+0x40/0x60 [ 1272.290044][T32281] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1272.290084][T32281] genl_family_rcv_msg_doit+0x22a/0x330 [ 1272.290123][T32281] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1272.290168][T32281] ? bpf_lsm_capable+0x9/0x20 [ 1272.290200][T32281] ? security_capable+0x7e/0x2c0 [ 1272.290233][T32281] genl_rcv_msg+0x61c/0x7a0 [ 1272.290267][T32281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1272.290295][T32281] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1272.290329][T32281] ? __pfx_ref_tracker_free+0x10/0x10 [ 1272.290364][T32281] netlink_rcv_skb+0x232/0x4b0 [ 1272.290389][T32281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1272.290420][T32281] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1272.290440][T32281] ? genl_rcv+0x19/0x40 [ 1272.290489][T32281] ? down_read+0x272/0x2e0 [ 1272.290505][T32281] ? genl_rcv+0xd/0x40 [ 1272.290531][T32281] genl_rcv+0x28/0x40 [ 1272.290556][T32281] netlink_unicast+0x80f/0x9b0 [ 1272.290586][T32281] ? __pfx_netlink_unicast+0x10/0x10 [ 1272.290617][T32281] ? netlink_sendmsg+0x650/0xb40 [ 1272.290636][T32281] ? skb_put+0x11b/0x210 [ 1272.290665][T32281] netlink_sendmsg+0x813/0xb40 [ 1272.290699][T32281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1272.290727][T32281] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1272.290753][T32281] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1272.290777][T32281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1272.290799][T32281] ____sys_sendmsg+0xa68/0xad0 [ 1272.290827][T32281] ? __might_fault+0xaf/0x130 [ 1272.290864][T32281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1272.290901][T32281] ? import_iovec+0x73/0xa0 [ 1272.290935][T32281] ___sys_sendmsg+0x2a5/0x360 [ 1272.290963][T32281] ? try_to_wake_up+0x82a/0x1380 [ 1272.290993][T32281] ? __pfx____sys_sendmsg+0x10/0x10 [ 1272.291031][T32281] ? futex_wake+0x4ac/0x580 [ 1272.291088][T32281] ? file_init_path+0x434/0x590 [ 1272.291128][T32281] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1272.291162][T32281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1272.291204][T32281] ? rcu_is_watching+0x15/0xb0 [ 1272.291242][T32281] do_syscall_64+0xe2/0xf80 [ 1272.291271][T32281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.291291][T32281] ? trace_irq_disable+0x37/0x100 [ 1272.291312][T32281] ? clear_bhb_loop+0x60/0xb0 [ 1272.291338][T32281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.291357][T32281] RIP: 0033:0x7f58b899bf79 [ 1272.291378][T32281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.291396][T32281] RSP: 002b:00007f58b9805028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1272.291421][T32281] RAX: ffffffffffffffda RBX: 00007f58b8c16090 RCX: 00007f58b899bf79 [ 1272.291436][T32281] RDX: 0000000000004810 RSI: 0000200000000000 RDI: 0000000000000007 [ 1272.291451][T32281] RBP: 00007f58b8a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1272.291463][T32281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.291476][T32281] R13: 00007f58b8c16128 R14: 00007f58b8c16090 R15: 00007ffe180c3fb8 [ 1272.291515][T32281] [ 1272.843027][T32280] IPVS: using max 28 ests per chain, 67200 per kthread [ 1272.883031][T32289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6576'. [ 1272.975531][T32299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6578'. [ 1273.219647][T32306] syzkaller0: entered promiscuous mode [ 1273.225176][T32306] syzkaller0: entered allmulticast mode [ 1273.726636][T32297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1273.744264][T29476] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1273.839712][T32330] netlink: 'syz.2.6584': attribute type 2 has an invalid length. [ 1274.062412][ T30] audit: type=1800 audit(1770833632.499:11): pid=32318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6582" name="memory.events" dev="tmpfs" ino=246 res=0 errno=0 [ 1274.493214][T32345] netlink: 'syz.4.6588': attribute type 5 has an invalid length. [ 1274.526763][T32347] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1274.828942][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1275.400339][T32366] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1275.672025][T32375] netlink: 'syz.2.6595': attribute type 19 has an invalid length. [ 1275.748683][T32375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6595'. [ 1275.809673][T32375] netlink: 'syz.2.6595': attribute type 19 has an invalid length. [ 1275.821768][T10942] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.838767][T32375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6595'. [ 1275.850812][T10942] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.958056][T10942] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.970298][T10942] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.176089][T32394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6602'. [ 1276.230480][T32396] syz_tun: entered allmulticast mode [ 1276.252848][T32394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6602'. [ 1276.265173][T32394] openvswitch: netlink: IP tunnel dst address not specified [ 1276.320930][T32393] netlink: 'syz.1.6601': attribute type 1 has an invalid length. [ 1276.405436][T32393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1276.494171][T32397] bond1: (slave geneve2): making interface the new active one [ 1276.513082][T32397] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1276.538149][T32409] netlink: 'syz.0.6606': attribute type 5 has an invalid length. [ 1276.565479][T32407] Bluetooth: MGMT ver 1.23 [ 1277.012774][T32395] syz_tun: left allmulticast mode [ 1277.046512][T32447] netlink: 'syz.4.6616': attribute type 1 has an invalid length. [ 1277.062668][T32447] netlink: 'syz.4.6616': attribute type 3 has an invalid length. [ 1277.070991][T32447] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6616'. [ 1277.152297][T32454] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6619'. [ 1277.260370][T32459] wg1: entered promiscuous mode [ 1277.265615][T32459] wg1: entered allmulticast mode [ 1277.286421][T32459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6621'. [ 1277.466935][T32466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6624'. [ 1277.669382][T32470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6625'. [ 1277.759900][T32474] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6627'. [ 1277.800876][T32476] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1277.821572][T32477] netlink: 'syz.0.6627': attribute type 25 has an invalid length. [ 1277.833393][T32477] netlink: 'syz.0.6627': attribute type 28 has an invalid length. [ 1278.085144][T32481] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1278.168876][T32491] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1278.658774][T25590] Bluetooth: hci2: command 0x0401 tx timeout [ 1278.660819][T30842] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1278.994284][T32527] netlink: 'syz.3.6639': attribute type 11 has an invalid length. [ 1279.018308][T32529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6640'. [ 1279.024654][T32527] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.6639'. [ 1279.193476][T32529] team_slave_0: entered promiscuous mode [ 1279.199693][T32529] team_slave_1: entered promiscuous mode [ 1279.233434][T32529] macvtap2: entered promiscuous mode [ 1279.242655][T32529] team0: entered promiscuous mode [ 1279.267721][T32529] macvtap2: entered allmulticast mode [ 1279.302292][T32549] netlink: 'syz.3.6642': attribute type 1 has an invalid length. [ 1279.312804][T32549] nbd: error processing sock list [ 1279.319209][T32529] team0: entered allmulticast mode [ 1279.324457][T32529] team_slave_0: entered allmulticast mode [ 1279.349146][T32529] team_slave_1: entered allmulticast mode [ 1279.378002][T32529] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1279.456179][T32538] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 1279.498875][T32531] team0: left allmulticast mode [ 1279.514016][T32531] team_slave_0: left allmulticast mode [ 1279.533600][T32531] team_slave_1: left allmulticast mode [ 1279.538877][T32538] input: failed to attach handler evdev to device input5, error: -4 [ 1279.576419][T32531] team0: left promiscuous mode [ 1279.596949][T32531] team_slave_0: left promiscuous mode [ 1279.602903][T32531] team_slave_1: left promiscuous mode [ 1279.658377][T32551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1280.441245][T32576] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1280.692215][T32578] netlink: 'syz.4.6650': attribute type 29 has an invalid length. [ 1280.720058][T32578] netlink: 'syz.4.6650': attribute type 29 has an invalid length. [ 1280.750459][T32578] unsupported nla_type 58 [ 1280.786867][T32578] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1280.805901][T32578] bond3 (unregistering): Released all slaves [ 1280.993580][T32589] veth2: entered allmulticast mode [ 1282.807051][T32636] __nla_validate_parse: 4 callbacks suppressed [ 1282.807073][T32636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6664'. [ 1282.846132][T32644] batman_adv: batadv0: Adding interface: geneve3 [ 1282.857047][T32644] batman_adv: batadv0: The MTU of interface geneve3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.884130][T32644] batman_adv: batadv0: Interface activated: geneve3 [ 1283.662795][T32656] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1284.012631][T32594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1284.297665][T32673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6667'. [ 1284.314253][T32680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6671'. [ 1284.318579][T32673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6667'. [ 1284.372808][T32673] netlink: 'syz.2.6667': attribute type 18 has an invalid length. [ 1284.453060][T32683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6672'. [ 1284.473690][T32686] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20003 [ 1284.589724][T32691] bond1 (unregistering): Released all slaves [ 1284.781780][T32703] netlink: 'syz.4.6678': attribute type 32 has an invalid length. [ 1284.794898][T32703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6678'. [ 1284.806919][T32707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6680'. [ 1284.840041][T32703] bond3: Setting coupled_control to off (0) [ 1285.002166][T32712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1285.183831][T32731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6686'. [ 1285.287891][T32738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6687'. [ 1285.447929][T32746] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6689'. [ 1285.752673][T32765] netlink: 'syz.3.6694': attribute type 1 has an invalid length. [ 1285.814161][T32765] bond1 (unregistering): Released all slaves [ 1285.885202][ T311] netlink: 'syz.0.6697': attribute type 3 has an invalid length. [ 1287.977276][T32715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1288.139946][ T339] netlink: 'syz.2.6704': attribute type 1 has an invalid length. [ 1288.213601][ T339] netlink: 'syz.2.6704': attribute type 1 has an invalid length. [ 1288.290131][ T337] nbd4: detected capacity change from 0 to 63 [ 1288.299771][ T343] block nbd4: NBD_DISCONNECT [ 1288.306563][ T343] block nbd4: Disconnected due to user request. [ 1288.330488][ T343] block nbd4: shutting down sockets [ 1288.330837][T32055] blk_print_req_error: 27 callbacks suppressed [ 1288.330854][T32055] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1288.413687][T32055] buffer_io_error: 27 callbacks suppressed [ 1288.413710][T32055] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1288.492149][ T57] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1288.503105][ T57] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1288.511087][ T57] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1288.520199][ T57] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1288.529673][T32055] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1288.566432][T32055] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1288.593419][T32055] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1288.655915][ T361] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1288.673694][T32055] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1288.681970][ T361] bond2: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1288.690824][T32055] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1288.733022][T32055] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1288.758608][T32055] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1288.794640][T32055] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1288.838219][T32055] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1288.851096][T32055] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1288.861377][T32055] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1288.871834][T32055] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1288.880285][T32055] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1288.890773][T32055] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1288.901627][T32055] ldm_validate_partition_table(): Disk read failed. [ 1288.909223][T32055] Dev nbd4: unable to read RDB block 0 [ 1288.917811][T32055] nbd4: unable to read partition table [ 1288.923990][T16569] lec:lec_start_xmit: lec0:No lecd attached [ 1288.932475][T32055] ldm_validate_partition_table(): Disk read failed. [ 1288.940341][T32055] Dev nbd4: unable to read RDB block 0 [ 1288.955398][T32055] nbd4: unable to read partition table [ 1289.015055][ T376] __nla_validate_parse: 6 callbacks suppressed [ 1289.015085][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6713'. [ 1289.314712][ T378] tipc: Started in network mode [ 1289.335279][ T378] tipc: Node identity 6ae44b1734f1, cluster identity 4711 [ 1289.370700][ T378] tipc: Enabled bearer , priority 0 [ 1289.409092][ T384] syzkaller0: entered promiscuous mode [ 1289.426497][ T384] syzkaller0: entered allmulticast mode [ 1289.486688][ T384] tipc: Enabling of bearer rejected, already enabled [ 1289.638175][ T377] tipc: Resetting bearer [ 1289.763437][ T377] tipc: Disabling bearer [ 1290.011156][ T415] netlink: 876 bytes leftover after parsing attributes in process `syz.1.6722'. [ 1290.027789][ T415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6722'. [ 1290.301795][ T425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6725'. [ 1290.815221][ T446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6728'. [ 1291.120014][ T458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6732'. [ 1291.259519][ T464] xt_ecn: cannot match TCP bits for non-tcp packets [ 1293.668791][ T483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6738'. [ 1293.938664][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1293.946886][ C0] lec:lec_tx_timeout: lec0 [ 1294.113396][ T500] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.6742'. [ 1294.805091][ T516] netlink: 'syz.1.6746': attribute type 13 has an invalid length. [ 1294.911968][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1295.398981][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1296.076238][ T535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1296.103339][ T535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1296.571628][ T562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6761'. [ 1296.667166][ T569] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6763'. [ 1296.676305][ T567] tipc: Enabling of bearer rejected, failed to enable media [ 1296.705701][ T570] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1296.755773][ T570] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1296.840338][ T579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6768'. [ 1296.862191][ T578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6767'. [ 1296.894218][ T578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6767'. [ 1296.915631][ T582] netlink: 'syz.2.6767': attribute type 2 has an invalid length. [ 1296.944921][ T586] netlink: 'syz.3.6769': attribute type 1 has an invalid length. [ 1296.952860][ T586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1296.988128][ T586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6769'. [ 1297.176269][ T600] netlink: 'syz.3.6772': attribute type 15 has an invalid length. [ 1297.207672][ T606] netlink: 'syz.0.6771': attribute type 5 has an invalid length. [ 1297.320653][ T606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6771'. [ 1299.145118][ T650] bridge1: entered promiscuous mode [ 1299.151158][ T650] bridge1: entered allmulticast mode [ 1299.160584][ T650] team0: Port device bridge1 added [ 1299.167780][ T650] bridge0: port 1(team0) entered blocking state [ 1299.175822][ T650] bridge0: port 1(team0) entered disabled state [ 1299.182600][ T650] team0: entered allmulticast mode [ 1299.187954][ T650] team_slave_0: entered allmulticast mode [ 1299.194456][ T650] team_slave_1: entered allmulticast mode [ 1299.202156][ T650] team0: entered promiscuous mode [ 1299.207701][ T650] team_slave_0: entered promiscuous mode [ 1299.213936][ T650] team_slave_1: entered promiscuous mode [ 1299.224096][ T650] bridge0: port 1(team0) entered blocking state [ 1299.230596][ T650] bridge0: port 1(team0) entered forwarding state [ 1300.054632][ T593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1300.269083][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1300.460048][ T671] tipc: Enabled bearer , priority 0 [ 1300.478185][ T673] __nla_validate_parse: 1 callbacks suppressed [ 1300.478206][ T673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6788'. [ 1300.633354][ T671] syzkaller0: entered promiscuous mode [ 1300.647568][ T671] syzkaller0: entered allmulticast mode [ 1300.664597][ T671] tipc: Resetting bearer [ 1300.691492][ T698] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6793'. [ 1300.707456][ T673] team0: left promiscuous mode [ 1300.760721][ T670] tipc: Resetting bearer [ 1302.741773][ T670] tipc: Disabling bearer [ 1302.853260][T31834] tipc: Node number set to 530252327 [ 1302.971339][ T714] netlink: 'syz.4.6798': attribute type 4 has an invalid length. [ 1303.217788][ T730] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20003 [ 1304.284925][ T760] syzkaller0: entered promiscuous mode [ 1304.305017][ T760] syzkaller0: entered allmulticast mode [ 1304.548270][ T768] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6812'. [ 1304.598161][ T774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1304.605494][ T774] IPv6: NLM_F_CREATE should be set when creating new route [ 1304.639692][ T768] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6812'. [ 1304.766070][ T768] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6812'. [ 1304.846796][ T784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6817'. [ 1305.178483][ T795] netlink: 'syz.1.6818': attribute type 2 has an invalid length. [ 1305.198515][ T795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6818'. [ 1305.824388][ T815] sctp: [Deprecated]: syz.4.6825 (pid 815) Use of int in max_burst socket option. [ 1305.824388][ T815] Use struct sctp_assoc_value instead [ 1305.938411][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 1305.946666][ C0] lec:lec_tx_timeout: lec0 [ 1306.066198][ T825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6829'. [ 1306.192632][ T832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6830'. [ 1306.610070][ T845] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1306.846014][ T850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6834'. [ 1307.306683][ T862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6838'. [ 1307.315888][ T862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6838'. [ 1307.325360][ T862] netlink: 'syz.1.6838': attribute type 18 has an invalid length. [ 1307.452464][ T863] No such timeout policy "syz1" [ 1308.066044][ T877] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 1308.082985][ T878] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 1309.340905][ T840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1309.575284][ T894] netlink: 'syz.3.6847': attribute type 58 has an invalid length. [ 1309.608726][ T894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6847'. [ 1310.015197][ T911] syzkaller0: entered promiscuous mode [ 1310.063432][ T911] syzkaller0: entered allmulticast mode [ 1310.349428][ T940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1310.389143][ T940] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6858'. [ 1312.770692][ T955] tipc: Enabling of bearer rejected, failed to enable media [ 1312.838690][ T963] netlink: 'syz.0.6863': attribute type 1 has an invalid length. [ 1313.092716][ T975] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6868'. [ 1313.216380][ T980] netlink: 'syz.4.6869': attribute type 1 has an invalid length. [ 1313.359168][ T994] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 1313.379978][ T980] bond4: entered promiscuous mode [ 1313.387286][ T980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1313.391504][ T993] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6872'. [ 1313.446817][ T981] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1313.652911][ T1003] netlink: 'syz.3.6875': attribute type 11 has an invalid length. [ 1313.782403][ T1013] sctp: [Deprecated]: syz.3.6875 (pid 1013) Use of int in max_burst socket option deprecated. [ 1313.782403][ T1013] Use struct sctp_assoc_value instead [ 1313.940654][ T1002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6876'. [ 1314.255942][ T1026] tipc: Started in network mode [ 1314.279072][ T1026] tipc: Node identity 3a601fe4e083, cluster identity 4711 [ 1314.291074][ T1026] tipc: Enabled bearer , priority 0 [ 1314.299861][ T1032] syzkaller0: entered promiscuous mode [ 1314.329210][ T1032] syzkaller0: entered allmulticast mode [ 1314.491208][ T1024] tipc: Resetting bearer [ 1314.610269][ T1024] tipc: Disabling bearer [ 1314.681921][ T1066] xt_hashlimit: size too large, truncated to 1048576 [ 1314.862373][ T1072] sctp: [Deprecated]: syz.0.6891 (pid 1072) Use of int in maxseg socket option. [ 1314.862373][ T1072] Use struct sctp_assoc_value instead [ 1315.142152][ T1081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6893'. [ 1315.324512][ T1081] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6893'. [ 1315.448999][ T1096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6899'. [ 1315.481689][ T1099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1315.579576][ T1107] netlink: 'syz.0.6899': attribute type 3 has an invalid length. [ 1315.846813][ T1123] netlink: 'syz.4.6903': attribute type 58 has an invalid length. [ 1315.869000][ T1123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6903'. [ 1316.194780][ T1127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6905'. [ 1316.443228][ T1149] netlink: 'syz.3.6910': attribute type 11 has an invalid length. [ 1316.947616][ T1178] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.6913'. [ 1316.976906][ T1178] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.6913'. [ 1317.145384][ T1186] syzkaller1: entered promiscuous mode [ 1317.158500][ T1186] syzkaller1: entered allmulticast mode [ 1317.228545][ T1193] IPv6: addrconf: prefix option has invalid lifetime [ 1317.643946][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.651613][ T1186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.211591][ T1186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.291140][ T1186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.767400][ T1217] __nla_validate_parse: 5 callbacks suppressed [ 1318.767424][ T1217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1318.789897][ T1217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1318.819280][ T1217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1318.828283][ T1217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6924'. [ 1318.916250][ T7644] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.936891][ T7644] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.952387][ T7644] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.969916][ T7644] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.039080][ T7644] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.055860][ T7644] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.078710][ T7644] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.123538][ T7644] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.180843][ T1244] syz.2.6931: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1319.206452][ T1244] CPU: 0 UID: 0 PID: 1244 Comm: syz.2.6931 Not tainted syzkaller #0 PREEMPT(full) [ 1319.206483][ T1244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1319.206498][ T1244] Call Trace: [ 1319.206507][ T1244] [ 1319.206527][ T1244] dump_stack_lvl+0xe8/0x150 [ 1319.206575][ T1244] warn_alloc+0x249/0x340 [ 1319.206606][ T1244] ? stack_trace_save+0xa9/0x100 [ 1319.206634][ T1244] ? __pfx_warn_alloc+0x10/0x10 [ 1319.206666][ T1244] ? kasan_save_track+0x4f/0x80 [ 1319.206684][ T1244] ? kasan_save_track+0x3e/0x80 [ 1319.206700][ T1244] ? __kasan_kmalloc+0x93/0xb0 [ 1319.206718][ T1244] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1319.206738][ T1244] ? xskq_create+0x56/0x170 [ 1319.206763][ T1244] ? xsk_setsockopt+0x54c/0x990 [ 1319.206785][ T1244] ? do_sock_setsockopt+0x17c/0x1b0 [ 1319.206812][ T1244] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1319.206835][ T1244] ? do_syscall_64+0xe2/0xf80 [ 1319.206868][ T1244] __vmalloc_node_range_noprof+0x132/0x1730 [ 1319.206927][ T1244] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1319.206954][ T1244] ? __kasan_kmalloc+0x93/0xb0 [ 1319.206982][ T1244] vmalloc_user_noprof+0xad/0xe0 [ 1319.207005][ T1244] ? xskq_create+0xbf/0x170 [ 1319.207031][ T1244] xskq_create+0xbf/0x170 [ 1319.207061][ T1244] xsk_init_queue+0xad/0x110 [ 1319.207089][ T1244] xsk_setsockopt+0x54c/0x990 [ 1319.207116][ T1244] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1319.207141][ T1244] ? __pfx_aa_sk_perm+0x10/0x10 [ 1319.207169][ T1244] ? aa_sock_opt_perm+0xff/0x1a0 [ 1319.207197][ T1244] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1319.207217][ T1244] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1319.207242][ T1244] do_sock_setsockopt+0x17c/0x1b0 [ 1319.207275][ T1244] __x64_sys_setsockopt+0x13d/0x1b0 [ 1319.207309][ T1244] do_syscall_64+0xe2/0xf80 [ 1319.207337][ T1244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.207355][ T1244] ? trace_irq_disable+0x37/0x100 [ 1319.207383][ T1244] ? clear_bhb_loop+0x60/0xb0 [ 1319.207407][ T1244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.207426][ T1244] RIP: 0033:0x7f987479bf79 [ 1319.207445][ T1244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.207462][ T1244] RSP: 002b:00007f987558b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1319.207484][ T1244] RAX: ffffffffffffffda RBX: 00007f9874a15fa0 RCX: 00007f987479bf79 [ 1319.207498][ T1244] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1319.207512][ T1244] RBP: 00007f98748327e0 R08: 0000000000000004 R09: 0000000000000000 [ 1319.207526][ T1244] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1319.207540][ T1244] R13: 00007f9874a16038 R14: 00007f9874a15fa0 R15: 00007fff0badc528 [ 1319.207574][ T1244] [ 1319.207583][ T1244] Mem-Info: [ 1319.224311][ T1248] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6933'. [ 1319.290297][ T1244] active_anon:5822 inactive_anon:0 isolated_anon:0 [ 1319.290297][ T1244] active_file:3279 inactive_file:40908 isolated_file:0 [ 1319.290297][ T1244] unevictable:771 dirty:187 writeback:0 [ 1319.290297][ T1244] slab_reclaimable:13827 slab_unreclaimable:134277 [ 1319.290297][ T1244] mapped:30954 shmem:1381 pagetables:1450 [ 1319.290297][ T1244] sec_pagetables:0 bounce:0 [ 1319.290297][ T1244] kernel_misc_reclaimable:0 [ 1319.290297][ T1244] free:1260381 free_pcp:23437 free_cma:0 [ 1319.565489][ T1244] Node 0 active_anon:23988kB inactive_anon:0kB active_file:13116kB inactive_file:163412kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:33704kB dirty:748kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15828kB pagetables:5844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1319.602125][ T1244] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102812kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1319.651922][ T1244] Node 0 DMA free:15128kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:120kB free_cma:0kB [ 1319.691669][ T1259] sctp: [Deprecated]: syz.0.6934 (pid 1259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1319.691669][ T1259] Use struct sctp_sack_info instead [ 1319.714398][ T1244] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1319.729670][ T1244] Node 0 DMA32 free:1357824kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23988kB inactive_anon:0kB active_file:13116kB inactive_file:163412kB unevictable:1548kB writepending:748kB zspages:0kB present:3129332kB managed:2554028kB mlocked:12kB bounce:0kB free_pcp:31544kB local_pcp:12128kB free_cma:0kB [ 1319.779789][ T1244] lowmem_reserve[]: 0 0 1 1 1 [ 1319.784848][ T1244] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1319.867097][ T1244] lowmem_reserve[]: 0 0 0 0 0 [ 1319.882211][ T1244] Node 1 Normal free:3566856kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:55312kB local_pcp:28568kB free_cma:0kB [ 1320.018540][ T1244] lowmem_reserve[]: 0 0 0 0 0 [ 1320.024549][ T1244] Node 0 DMA: 4*4kB (UM) 3*8kB (UM) 3*16kB (UM) 4*32kB (UM) 3*64kB (UM) 5*128kB (UM) 5*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 3*2048kB (U) 0*4096kB = 15128kB [ 1320.122719][ T1270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6936'. [ 1320.148402][ T1244] Node 0 DMA32: 8335*4kB (UME) 8131*8kB (UME) 5390*16kB (UME) 189*32kB (ME) 368*64kB (UME) 987*128kB (UME) 706*256kB (UM) 621*512kB (UME) 333*1024kB (UM) 60*2048kB (UM) 0*4096kB = 1303124kB [ 1320.268583][ T1244] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1320.372121][ T1244] Node 1 Normal: 272*4kB (UME) 99*8kB (UM) 75*16kB (UME) 290*32kB (UME) 135*64kB (UME) 78*128kB (UME) 49*256kB (UME) 23*512kB (UM) 19*1024kB (UE) 17*2048kB (UME) 847*4096kB (UM) = 3578888kB [ 1320.470074][ T1244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1320.488512][ T1244] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1320.497862][ T1244] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1320.549656][ T1244] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1320.568612][ T1244] 45615 total pagecache pages [ 1320.578997][ T1244] 0 pages in swap cache [ 1320.583202][ T1244] Free swap = 124996kB [ 1320.598051][ T1244] Total swap = 124996kB [ 1320.628510][ T1244] 2097051 pages RAM [ 1320.632559][ T1244] 0 pages HighMem/MovableOnly [ 1320.637260][ T1244] 426646 pages reserved [ 1320.705963][ T1244] 0 pages cma reserved [ 1321.077046][ T1286] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6940'. [ 1321.102286][ T1289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6941'. [ 1321.284008][ T1293] syzkaller0: entered promiscuous mode [ 1321.290006][ T1293] syzkaller0: entered allmulticast mode [ 1321.349492][ T1296] netlink: 'syz.2.6942': attribute type 1 has an invalid length. [ 1321.357289][ T1296] netlink: 'syz.2.6942': attribute type 2 has an invalid length. [ 1321.438446][ T1296] netlink: 'syz.2.6942': attribute type 2 has an invalid length. [ 1322.047120][ T1310] syzkaller0: entered promiscuous mode [ 1322.059875][ T1310] syzkaller0: entered allmulticast mode [ 1322.314255][ T1328] netlink: 'syz.1.6952': attribute type 3 has an invalid length. [ 1322.365044][ T1324] dvmrp6: entered allmulticast mode [ 1322.512598][ T1332] batadv0: entered promiscuous mode [ 1322.551549][ T1332] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1322.621045][ T1339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6957'. [ 1322.688743][ T1347] netlink: 'syz.2.6959': attribute type 1 has an invalid length. [ 1322.696900][ T1345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6958'. [ 1322.702543][ T1347] netlink: 'syz.2.6959': attribute type 4 has an invalid length. [ 1322.758869][ T1351] syzkaller0: entered promiscuous mode [ 1322.775689][ T1351] syzkaller0: entered allmulticast mode [ 1322.785028][ T1356] tipc: Failed to remove unknown binding: 66,0,0/0:146758431/146758432 [ 1322.807654][ T1356] tipc: Failed to remove unknown binding: 66,0,0/0:146758431/146758432 [ 1322.824777][ T1353] macsec0: entered promiscuous mode [ 1322.834590][ T1353] macsec0: entered allmulticast mode [ 1323.188044][ T1375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.675196][ T7653] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1323.686443][ T7653] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1323.698792][T29476] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1323.826123][T29476] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1324.339268][T29476] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1324.559731][ T1426] syzkaller0: entered promiscuous mode [ 1324.567786][ T1426] syzkaller0: entered allmulticast mode [ 1324.983333][ T1438] netlink: 'syz.4.6982': attribute type 1 has an invalid length. [ 1325.029548][ T1438] __nla_validate_parse: 4 callbacks suppressed [ 1325.029572][ T1438] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6982'. [ 1325.226867][ T1442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6984'. [ 1325.651669][ T1462] netlink: 'syz.2.6986': attribute type 3 has an invalid length. [ 1325.695924][ T1462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6986'. [ 1326.033767][ T1467] dummy0: entered promiscuous mode [ 1326.048059][ T1467] dummy0: entered allmulticast mode [ 1326.139489][ T1470] syzkaller0: entered promiscuous mode [ 1326.145249][ T1470] syzkaller0: entered allmulticast mode [ 1326.202099][ T1474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6991'. [ 1327.950653][T30842] Bluetooth: hci5: command 0x0406 tx timeout [ 1328.028577][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1328.478156][ T1447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1328.761569][ T1474] bond_slave_0: entered promiscuous mode [ 1328.767803][ T1474] bond_slave_1: entered promiscuous mode [ 1328.773626][ T1474] bridge0: entered promiscuous mode [ 1328.781316][ T1474] macvtap0: entered promiscuous mode [ 1328.786649][ T1474] bond0: entered promiscuous mode [ 1328.793323][ T1474] macvtap0: entered allmulticast mode [ 1328.799615][ T1474] bond0: entered allmulticast mode [ 1328.817667][ T1474] bond_slave_0: entered allmulticast mode [ 1328.831140][ T1474] bond_slave_1: entered allmulticast mode [ 1328.837028][ T1474] bridge0: entered allmulticast mode [ 1328.845287][ T1474] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 1328.857371][ T1475] bond0: left allmulticast mode [ 1328.862642][ T1475] bond_slave_0: left allmulticast mode [ 1328.869066][ T1475] bond_slave_1: left allmulticast mode [ 1328.874564][ T1475] bridge0: left allmulticast mode [ 1328.880318][ T1475] bond0: left promiscuous mode [ 1328.885777][ T1475] bond_slave_0: left promiscuous mode [ 1328.891583][ T1475] bond_slave_1: left promiscuous mode [ 1328.897149][ T1475] bridge0: left promiscuous mode [ 1328.928928][ T1478] erspan0: entered promiscuous mode [ 1329.291108][ T1506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6998'. [ 1329.302628][ T1511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6998'. [ 1329.379822][ T1507] netlink: 'syz.3.6999': attribute type 1 has an invalid length. [ 1329.499446][ T1521] netlink: 'syz.1.7003': attribute type 10 has an invalid length. [ 1329.539387][ T1521] dummy0: left promiscuous mode [ 1329.544318][ T1521] dummy0: left allmulticast mode [ 1329.600683][ T1528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7005'. [ 1329.696393][ T1528] bond_slave_0: entered promiscuous mode [ 1329.702648][ T1528] bond_slave_1: entered promiscuous mode [ 1329.729116][ T1528] macvtap3: entered promiscuous mode [ 1329.739562][ T1528] bond0: entered promiscuous mode [ 1329.750137][ T1528] macvtap3: entered allmulticast mode [ 1329.763438][ T1528] bond0: entered allmulticast mode [ 1329.774840][ T1528] bond_slave_0: entered allmulticast mode [ 1329.789311][ T1528] bond_slave_1: entered allmulticast mode [ 1329.800302][ T1521] netlink: 'syz.1.7003': attribute type 10 has an invalid length. [ 1329.813069][ T1528] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1329.840252][ T1531] bond0: left allmulticast mode [ 1329.845632][ T1531] bond_slave_0: left allmulticast mode [ 1329.855214][ T1534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7003'. [ 1329.868626][ T1531] bond_slave_1: left allmulticast mode [ 1329.891641][ T1531] bond0: left promiscuous mode [ 1329.910112][ T1531] bond_slave_0: left promiscuous mode [ 1329.916041][ T1531] bond_slave_1: left promiscuous mode [ 1330.010860][ T1521] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1330.097015][ T1530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1330.287941][ T1549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7009'. [ 1330.315331][ T1548] tun0: tun_chr_ioctl cmd 1074025675 [ 1330.320919][ T1548] tun0: persist enabled [ 1330.720572][ T1559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1330.749351][ T1559] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1330.777839][ T1559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1330.848153][ T1559] gre1: entered allmulticast mode [ 1331.371460][ T1576] bond1: entered promiscuous mode [ 1331.446371][ T1581] vcan1: entered promiscuous mode [ 1331.478629][ T1581] vcan1: entered allmulticast mode [ 1331.486635][ T1581] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1331.502418][ T1581] bond1: (slave vcan1): Error -95 calling set_mac_address [ 1331.931783][ T1594] netlink: 'syz.3.7023': attribute type 10 has an invalid length. [ 1332.043421][ T1594] dummy0: entered allmulticast mode [ 1332.060971][ T1594] dummy0: entered promiscuous mode [ 1332.079348][ T1594] team0: Port device dummy0 added [ 1332.702173][ T1609] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1332.757286][ T1608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7026'. [ 1333.058958][T25590] Bluetooth: hci2: command 0x0401 tx timeout [ 1333.411190][ T1618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7028'. [ 1333.452428][ T1616] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7028'. [ 1333.683091][ T1623] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1333.925835][ T1634] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1333.938938][ T1639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1333.949066][ T1639] IPv6: NLM_F_CREATE should be set when creating new route [ 1333.956348][ T1639] IPv6: NLM_F_CREATE should be set when creating new route [ 1333.969372][ T1633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7030'. [ 1334.183728][ T1645] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7035'. [ 1334.218232][ T1644] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7035'. [ 1335.860277][ T5485] veth0_vlan: left promiscuous mode [ 1335.931053][ T5485] veth0_vlan: entered promiscuous mode [ 1336.704690][ T1686] __nla_validate_parse: 2 callbacks suppressed [ 1336.704712][ T1686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7038'. [ 1336.729152][ T1686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7038'. [ 1336.738166][ T1686] netlink: 'syz.4.7038': attribute type 12 has an invalid length. [ 1336.746295][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1336.980870][T30702] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1337.076820][T30702] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1337.085989][T30702] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1337.186877][T30702] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1337.265158][ T1698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7039'. [ 1338.000342][ T1718] netlink: 'syz.0.7045': attribute type 1 has an invalid length. [ 1338.125832][ T1729] gretap1: entered allmulticast mode [ 1338.192977][ T1729] bond2: (slave gretap1): making interface the new active one [ 1338.282915][ T1729] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1338.336411][ T1718] vlan2: entered promiscuous mode [ 1338.342226][ T1718] bridge0: entered promiscuous mode [ 1338.464917][ T1744] x_tables: duplicate underflow at hook 2 [ 1338.493144][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.531487][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.538223][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.616651][ T1732] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1338.714022][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.722982][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.759039][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.779870][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.803197][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.825975][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.850511][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.859866][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.868209][ T1732] lo speed is unknown, defaulting to 1000 [ 1338.877032][ T1732] lo speed is unknown, defaulting to 1000 [ 1339.364086][ T1772] syzkaller1: entered promiscuous mode [ 1339.400063][ T1772] syzkaller1: entered allmulticast mode [ 1339.728730][ T1785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7065'. [ 1339.748125][ T1785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7065'. [ 1339.808089][ T1791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1339.815427][ T1791] IPv6: NLM_F_CREATE should be set when creating new route [ 1339.822770][ T1791] IPv6: NLM_F_CREATE should be set when creating new route [ 1339.881937][ T1792] netlink: 'syz.0.7067': attribute type 2 has an invalid length. [ 1339.890200][ T1792] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7067'. [ 1340.421661][ T1815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7076'. [ 1340.431363][ T1815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7076'. [ 1340.441559][ T1815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7076'. [ 1340.458249][ T1815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7076'. [ 1340.774881][ T1828] netlink: 'syz.4.7081': attribute type 1 has an invalid length. [ 1341.570397][ T1850] syzkaller0: entered promiscuous mode [ 1341.575939][ T1850] syzkaller0: entered allmulticast mode [ 1341.596938][T25590] Bluetooth: hci4: link tx timeout [ 1341.605588][T25590] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1341.617108][T25590] Bluetooth: hci4: link tx timeout [ 1341.622748][T25590] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1341.696207][ T1854] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1341.726013][ T1857] netlink: 'syz.1.7088': attribute type 2 has an invalid length. [ 1341.787528][ T1857] netlink: 'syz.1.7088': attribute type 1 has an invalid length. [ 1342.470849][ T1896] __nla_validate_parse: 2 callbacks suppressed [ 1342.470893][ T1896] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7096'. [ 1342.771228][ T1910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7097'. [ 1343.298648][T25590] Bluetooth: hci3: command 0x0406 tx timeout [ 1343.463666][ T1936] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7104'. [ 1343.481716][ T1937] netlink: 'syz.3.7102': attribute type 21 has an invalid length. [ 1343.490342][ T1937] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7102'. [ 1343.537917][ T1936] sctp: [Deprecated]: syz.4.7104 (pid 1936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1343.537917][ T1936] Use struct sctp_sack_info instead [ 1343.709351][ T1936] sctp: [Deprecated]: syz.4.7104 (pid 1936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1343.709351][ T1936] Use struct sctp_sack_info instead [ 1343.726226][T30842] Bluetooth: hci4: command 0x0406 tx timeout [ 1343.789068][ T1935] lo speed is unknown, defaulting to 1000 [ 1345.089973][ T1983] netlink: 'syz.2.7117': attribute type 1 has an invalid length. [ 1345.109295][ T1983] netlink: 'syz.2.7117': attribute type 7 has an invalid length. [ 1345.117085][ T1983] netlink: 'syz.2.7117': attribute type 8 has an invalid length. [ 1345.169743][ T1983] netlink: 208 bytes leftover after parsing attributes in process `syz.2.7117'. [ 1345.196397][ T1989] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7117'. [ 1345.216170][ T1983] NCSI netlink: No device for ifindex 65584 [ 1345.222897][ T1991] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 1345.465677][ T1964] tipc: Enabling of bearer rejected, failed to enable media [ 1345.708715][ T2008] syzkaller0: entered promiscuous mode [ 1345.714243][ T2008] syzkaller0: entered allmulticast mode [ 1345.771886][ T2011] syzkaller1: entered promiscuous mode [ 1345.777489][ T2011] syzkaller1: entered allmulticast mode [ 1345.799410][ T2014] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7124'. [ 1345.937601][ T2016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7124'. [ 1345.947952][T30842] Bluetooth: hci4: command 0x0406 tx timeout [ 1346.340459][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1346.395328][ T2031] netlink: 'syz.2.7129': attribute type 2 has an invalid length. [ 1346.404574][ T2031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7129'. [ 1346.810268][ T2047] 5gQ[: renamed from lo (while UP) [ 1347.016085][ T2055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1347.392074][ T2071] bond_slave_0: entered promiscuous mode [ 1347.397984][ T2071] bond_slave_1: entered promiscuous mode [ 1347.429839][ T2071] macvtap1: entered promiscuous mode [ 1347.435203][ T2071] bond0: entered promiscuous mode [ 1347.467861][ T2071] macvtap1: entered allmulticast mode [ 1347.489289][ T2071] bond0: entered allmulticast mode [ 1347.498767][ T2071] bond_slave_0: entered allmulticast mode [ 1347.518810][ T2071] bond_slave_1: entered allmulticast mode [ 1347.547868][ T2071] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1347.595104][ T2073] bond0: left allmulticast mode [ 1347.608563][ T2073] bond_slave_0: left allmulticast mode [ 1347.614261][ T2073] bond_slave_1: left allmulticast mode [ 1347.624464][ T2073] bond0: left promiscuous mode [ 1347.635269][ T2073] bond_slave_0: left promiscuous mode [ 1347.640816][ T2073] bond_slave_1: left promiscuous mode [ 1347.699072][ T2033] lo speed is unknown, defaulting to 1000 [ 1348.089720][ T2095] __nla_validate_parse: 2 callbacks suppressed [ 1348.089744][ T2095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7146'. [ 1348.310765][ T2101] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) ! [ 1348.493473][ T2110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7140'. [ 1351.268265][ T2147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7152'. [ 1351.846611][ T2133] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 1351.915559][ T2147] bond_slave_0: entered promiscuous mode [ 1351.921462][ T2147] bond_slave_1: entered promiscuous mode [ 1351.969801][ T2147] macvtap4: entered promiscuous mode [ 1351.978545][ T2147] bond0: entered promiscuous mode [ 1351.996988][ T2147] macvtap4: entered allmulticast mode [ 1352.009145][ T2147] bond0: entered allmulticast mode [ 1352.027943][ T2147] bond_slave_0: entered allmulticast mode [ 1352.038490][ T2147] bond_slave_1: entered allmulticast mode [ 1352.085176][ T2147] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1352.107832][ T2148] bond0: left allmulticast mode [ 1352.122211][ T2148] bond_slave_0: left allmulticast mode [ 1352.127740][ T2148] bond_slave_1: left allmulticast mode [ 1352.140357][ T2148] bond0: left promiscuous mode [ 1352.145801][ T2148] bond_slave_0: left promiscuous mode [ 1352.151421][ T2148] bond_slave_1: left promiscuous mode [ 1352.747093][ T2155] lo speed is unknown, defaulting to 1000 [ 1353.001589][ T2202] x_tables: duplicate underflow at hook 1 [ 1353.367730][ T2213] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1353.619531][ T2218] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7167'. [ 1353.748085][ T2221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7168'. [ 1353.824625][ T2221] bond_slave_0: entered promiscuous mode [ 1353.830426][ T2221] bond_slave_1: entered promiscuous mode [ 1353.929088][ T2221] macvtap2: entered promiscuous mode [ 1353.934567][ T2221] bond0: entered promiscuous mode [ 1353.997829][ T2221] macvtap2: entered allmulticast mode [ 1354.040482][ T2221] bond0: entered allmulticast mode [ 1354.071473][ T2221] bond_slave_0: entered allmulticast mode [ 1354.090798][T16569] lec:lec_start_xmit: lec0:No lecd attached [ 1354.095623][ T2221] bond_slave_1: entered allmulticast mode [ 1354.125881][ T2221] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1354.169413][ T2225] bond0: left allmulticast mode [ 1354.174339][ T2225] bond_slave_0: left allmulticast mode [ 1354.190146][ T2225] bond_slave_1: left allmulticast mode [ 1354.195854][ T2225] bond0: left promiscuous mode [ 1354.202429][ T2225] bond_slave_0: left promiscuous mode [ 1354.207952][ T2225] bond_slave_1: left promiscuous mode [ 1354.344049][ T2239] netlink: 'syz.1.7174': attribute type 1 has an invalid length. [ 1354.352472][ T2239] netlink: 174 bytes leftover after parsing attributes in process `syz.1.7174'. [ 1354.630807][ T2227] lec:lec_atm_close: lec0: Shut down! [ 1354.659423][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1354.829267][ T2261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7177'. [ 1354.881095][ T2261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7177'. [ 1355.035145][ T2266] pimreg: entered allmulticast mode [ 1355.051715][ T2267] netlink: 'syz.1.7179': attribute type 1 has an invalid length. [ 1355.141815][ T2267] bond2: entered promiscuous mode [ 1355.167395][ T2267] bond2: entered allmulticast mode [ 1355.242086][ T2277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7181'. [ 1355.261719][ T2267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7179'. [ 1355.278991][ T2277] netlink: 620 bytes leftover after parsing attributes in process `syz.3.7181'. [ 1355.289492][ T2279] bond2: (slave ip6gretap3): making interface the new active one [ 1355.336191][ T2279] ip6gretap3: entered promiscuous mode [ 1355.360913][ T2279] ip6gretap3: entered allmulticast mode [ 1355.375938][ T2281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7181'. [ 1355.399305][ T2279] bond2: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1355.423807][ T2267] bond2: left promiscuous mode [ 1355.432465][ T2267] ip6gretap3: left promiscuous mode [ 1355.448790][ T2267] bond2: left allmulticast mode [ 1355.458402][ T2267] ip6gretap3: left allmulticast mode [ 1355.467708][ T2267] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1355.552714][ T2278] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1355.581631][ T2278] batman_adv: batadv0: Adding interface: gretap1 [ 1355.602031][ T2278] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.664537][ T2278] batman_adv: batadv0: Interface activated: gretap1 [ 1355.733533][ T2293] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7183'. [ 1357.481252][ T2372] netlink: 'syz.0.7197': attribute type 1 has an invalid length. [ 1357.625416][ T2374] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1357.711804][ T2374] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 1357.831689][ T2372] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 1358.436228][ T2418] reject_tg6_check: 1 callbacks suppressed [ 1358.436251][ T2418] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1358.691522][ T2431] __nla_validate_parse: 9 callbacks suppressed [ 1358.691541][ T2431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7209'. [ 1358.759321][ T2404] lo speed is unknown, defaulting to 1000 [ 1358.957361][ T2436] syzkaller0: entered promiscuous mode [ 1358.962990][ T2436] syzkaller0: entered allmulticast mode [ 1358.972914][ T2436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7211'. [ 1358.982688][ T2436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.028783][ T2436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.884742][ T2454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7216'. [ 1359.938517][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 1359.942539][ T2454] ipvlan0: entered promiscuous mode [ 1359.946656][ C0] lec:lec_tx_timeout: lec0 [ 1359.988782][ T2454] ipvlan0: left promiscuous mode [ 1360.051902][ T2440] lo speed is unknown, defaulting to 1000 [ 1360.336208][ T2481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7221'. [ 1360.544342][ T2486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7223'. [ 1360.709685][ T2472] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7220'. [ 1361.411102][ T2528] netlink: 'syz.1.7232': attribute type 11 has an invalid length. [ 1361.500327][ T2531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7233'. [ 1361.684880][ T2534] pim6reg1: entered promiscuous mode [ 1361.708503][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1361.718396][ T2534] pim6reg1: entered allmulticast mode [ 1361.741319][ T2535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7234'. [ 1361.767449][ T2535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7234'. [ 1361.789913][ T2535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7234'. [ 1361.827148][ T2534] netlink: 'syz.0.7234': attribute type 1 has an invalid length. [ 1362.045691][ T2511] lo speed is unknown, defaulting to 1000 [ 1363.417884][ T2561] lo speed is unknown, defaulting to 1000 [ 1363.472494][ T2593] bond_slave_0: entered promiscuous mode [ 1363.478264][ T2593] bond_slave_1: entered promiscuous mode [ 1363.484074][ T2593] bridge0: entered promiscuous mode [ 1363.489522][ T2593] dummy0: entered promiscuous mode [ 1363.505215][ T2593] macvtap1: entered promiscuous mode [ 1363.510881][ T2593] bond0: entered promiscuous mode [ 1363.518073][ T2593] macvtap1: entered allmulticast mode [ 1363.524862][ T2593] bond0: entered allmulticast mode [ 1363.530938][ T2593] bond_slave_0: entered allmulticast mode [ 1363.545906][ T2593] bond_slave_1: entered allmulticast mode [ 1363.553264][ T2593] bridge0: entered allmulticast mode [ 1363.560472][ T2593] dummy0: entered allmulticast mode [ 1363.568058][ T2593] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1363.602572][ T2596] bond0: left allmulticast mode [ 1363.609310][ T2596] bond_slave_0: left allmulticast mode [ 1363.614981][ T2596] bond_slave_1: left allmulticast mode [ 1363.621898][ T2596] bridge0: left allmulticast mode [ 1363.639085][ T2596] dummy0: left allmulticast mode [ 1363.644284][ T2596] bond0: left promiscuous mode [ 1363.650814][ T2596] bond_slave_0: left promiscuous mode [ 1363.656408][ T2596] bond_slave_1: left promiscuous mode [ 1363.661881][ T2596] bridge0: left promiscuous mode [ 1363.667070][ T2596] dummy0: left promiscuous mode [ 1364.080174][ T2615] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1364.375055][ T2625] netlink: 'syz.4.7253': attribute type 12 has an invalid length. [ 1364.927964][ T2646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.935822][ T2646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.970686][ T2646] bridge0: entered allmulticast mode [ 1365.028796][ T2646] bridge_slave_1: left allmulticast mode [ 1365.046673][ T2646] bridge_slave_1: left promiscuous mode [ 1365.074333][ T2646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.127163][ T2646] bridge_slave_0: left allmulticast mode [ 1365.136930][ T2646] bridge_slave_0: left promiscuous mode [ 1365.167579][ T2646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.234975][ T2646] bond0: (slave bridge0): Releasing backup interface [ 1365.319118][ T2664] __nla_validate_parse: 2 callbacks suppressed [ 1365.319142][ T2664] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.7260'. [ 1365.367883][ T2673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7263'. [ 1365.431195][ T2670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7262'. [ 1365.862197][ T2693] netlink: 'syz.4.7267': attribute type 2 has an invalid length. [ 1365.890701][ T2693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7267'. [ 1365.912532][ T2696] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.7269'. [ 1365.916516][ T2658] lo speed is unknown, defaulting to 1000 [ 1366.151537][ T2707] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7270'. [ 1366.208464][ T2707] netlink: 'syz.4.7270': attribute type 1 has an invalid length. [ 1366.386858][ T2709] netlink: 'syz.4.7271': attribute type 1 has an invalid length. [ 1366.415144][ T2709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7271'. [ 1366.636749][ T2702] lo speed is unknown, defaulting to 1000 [ 1366.716704][ T2668] lo speed is unknown, defaulting to 1000 [ 1366.978391][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 1366.986513][ C0] lec:lec_tx_timeout: lec0 [ 1367.171245][ T2734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7277'. [ 1367.252783][ T2734] ip6gre1: entered promiscuous mode [ 1367.259277][ T2734] ip6gre1: entered allmulticast mode [ 1367.727149][ T2754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1367.799216][ T2754] macvtap1: entered promiscuous mode [ 1367.818515][ T2754] bond0: entered promiscuous mode [ 1367.835097][ T2754] bond_slave_0: entered promiscuous mode [ 1367.845157][ T2754] bond_slave_1: entered promiscuous mode [ 1367.858160][ T2754] macvtap1: entered allmulticast mode [ 1367.928989][ T2754] bond0: entered allmulticast mode [ 1367.936379][ T2754] bond_slave_0: entered allmulticast mode [ 1367.953293][ T2754] bond_slave_1: entered allmulticast mode [ 1367.980567][ T2754] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1368.044762][ T2756] bond0: left allmulticast mode [ 1368.064431][ T2756] bond_slave_0: left allmulticast mode [ 1368.084464][ T2756] bond_slave_1: left allmulticast mode [ 1368.112632][ T2756] bond0: left promiscuous mode [ 1368.133669][ T2756] bond_slave_0: left promiscuous mode [ 1368.155034][ T2756] bond_slave_1: left promiscuous mode [ 1368.932542][ T2780] netlink: 516 bytes leftover after parsing attributes in process `syz.4.7289'. [ 1369.239931][ T5840] block nbd0: Receive control failed (result -107) [ 1369.528667][ T2769] lo speed is unknown, defaulting to 1000 [ 1370.096085][ T2822] netlink: 'syz.2.7297': attribute type 1 has an invalid length. [ 1370.127933][ T2822] syzkaller0: entered promiscuous mode [ 1370.136578][ T2822] syzkaller0: entered allmulticast mode [ 1370.533354][ T2841] __nla_validate_parse: 6 callbacks suppressed [ 1370.533378][ T2841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7299'. [ 1370.723825][ T2859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7302'. [ 1370.780117][ T2861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7302'. [ 1371.404882][ T5840] block nbd3: Receive control failed (result -32) [ 1371.518231][ T2889] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7307'. [ 1371.542697][ T2889] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7307'. [ 1371.568843][ T2889] bridge0: left promiscuous mode [ 1371.583889][ T2889] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7307'. [ 1371.626097][ T2893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7307'. [ 1371.688867][ T2893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7307'. [ 1371.702641][ T2897] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1371.893749][ T2904] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7309'. [ 1372.059252][ T2908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7310'. [ 1372.353342][ T2920] tipc: Enabled bearer , priority 0 [ 1372.612046][ T2930] netlink: 'syz.1.7316': attribute type 1 has an invalid length. [ 1372.622017][ T2930] netlink: 'syz.1.7316': attribute type 2 has an invalid length. [ 1373.359205][ T1224] tipc: Node number set to 3672317924 [ 1373.605551][ T2969] sctp: [Deprecated]: syz.2.7326 (pid 2969) Use of int in max_burst socket option deprecated. [ 1373.605551][ T2969] Use struct sctp_assoc_value instead [ 1374.021043][ T2979] vlan3: entered promiscuous mode [ 1374.046653][ T2979] vlan3: entered allmulticast mode [ 1374.172245][ T2979] syzkaller0: entered promiscuous mode [ 1374.177809][ T2979] syzkaller0: entered allmulticast mode [ 1374.222696][ T2988] netlink: 'syz.4.7332': attribute type 1 has an invalid length. [ 1374.295885][ T2988] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1374.372483][ T2988] vlan0: entered promiscuous mode [ 1374.395192][ T2988] bond5: entered promiscuous mode [ 1374.413012][ T2988] vlan0: entered allmulticast mode [ 1374.418210][ T2988] bond5: entered allmulticast mode [ 1374.508882][ T2992] bond5: (slave bridge2): making interface the new active one [ 1374.516681][ T2992] bridge2: entered promiscuous mode [ 1374.550369][ T2992] bridge2: entered allmulticast mode [ 1374.571417][ T2992] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 1374.702378][ T3013] IPVS: set_ctl: invalid protocol: 0 172.20.20.62:20001 [ 1374.721516][ T3017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1374.867430][ T3014] veth0: entered promiscuous mode [ 1375.006249][ T3014] veth0: left promiscuous mode [ 1375.282825][ T2915] tipc: Disabling bearer [ 1375.849580][ T3043] rdma_op ffff888030d939f0 conn xmit_rdma 0000000000000000 [ 1375.885570][ T3041] __nla_validate_parse: 10 callbacks suppressed [ 1375.885593][ T3041] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7345'. [ 1376.075229][ T3052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7348'. [ 1376.125718][ T3052] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1376.455982][ T3053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7348'. [ 1376.466468][ T3064] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7351'. [ 1376.475899][ T3070] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7351'. [ 1376.792615][ T3081] netlink: 'syz.1.7353': attribute type 3 has an invalid length. [ 1376.836480][ T3060] lo speed is unknown, defaulting to 1000 [ 1376.842487][ T3076] team0: No ports can be present during mode change [ 1377.104613][ T3091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7357'. [ 1377.249365][ T3096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7359'. [ 1377.391125][ T3102] netlink: 'syz.1.7361': attribute type 2 has an invalid length. [ 1377.496157][ T3102] : entered promiscuous mode [ 1377.789263][ T3113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1377.805869][T31834] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1377.892530][ T3118] netlink: 'syz.4.7366': attribute type 2 has an invalid length. [ 1377.928945][T26579] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1378.083601][ T3123] tipc: Enabled bearer , priority 0 [ 1378.128897][ T3122] tipc: Enabling of bearer rejected, already enabled [ 1378.154263][ T3123] syzkaller0: entered promiscuous mode [ 1378.165290][ T3123] syzkaller0: entered allmulticast mode [ 1378.197148][ T3122] tipc: Resetting bearer [ 1378.207122][ T3119] tipc: Resetting bearer [ 1378.263426][ T3119] tipc: Disabling bearer [ 1378.268976][ T3137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7373'. [ 1378.872956][ T3163] ip6gre2: entered allmulticast mode [ 1379.059101][ T30] audit: type=1107 audit(1770833737.489:12): pid=3170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1379.245105][ T3176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7386'. [ 1379.255788][ T3176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7386'. [ 1379.285347][ T3184] vlan3: entered allmulticast mode [ 1379.306769][ T3184] veth0_to_bond: entered allmulticast mode [ 1379.382054][ T3184] netlink: 'syz.3.7387': attribute type 13 has an invalid length. [ 1379.519333][ T3195] netlink: 'syz.4.7390': attribute type 1 has an invalid length. [ 1379.736150][ T3195] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.019653][ T3201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1380.029989][ T3201] bond0: (slave bond3): Enslaving as an active interface with an up link [ 1380.094364][ T3195] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.127414][ T3215] syzkaller1: entered promiscuous mode [ 1380.133026][ T3215] syzkaller1: entered allmulticast mode [ 1380.274735][ T3195] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.354688][ T3195] netdevsim netdevsim4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1380.381639][ T3230] macsec1: entered allmulticast mode [ 1380.387027][ T3230] macsec0: entered allmulticast mode [ 1380.536186][ T3239] bond_slave_0: entered promiscuous mode [ 1380.542067][ T3239] bond_slave_1: entered promiscuous mode [ 1380.547749][ T3239] dummy0: entered promiscuous mode [ 1380.589132][ T3239] macvtap2: entered promiscuous mode [ 1380.594487][ T3239] bond0: entered promiscuous mode [ 1380.619867][ T3239] bond3: entered promiscuous mode [ 1380.625610][ T3239] macvtap2: entered allmulticast mode [ 1380.641851][ T3239] bond0: entered allmulticast mode [ 1380.647171][ T3239] bond_slave_0: entered allmulticast mode [ 1380.653812][ T3239] bond_slave_1: entered allmulticast mode [ 1380.673943][ T3239] dummy0: entered allmulticast mode [ 1380.680904][ T3239] bond3: entered allmulticast mode [ 1380.687640][ T3239] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1380.713728][ T3242] bond0: left allmulticast mode [ 1380.728567][ T3242] bond_slave_0: left allmulticast mode [ 1380.735254][ T3242] bond_slave_1: left allmulticast mode [ 1380.744368][ T3242] dummy0: left allmulticast mode [ 1380.758538][ T3242] bond3: left allmulticast mode [ 1380.773779][ T3242] bond0: left promiscuous mode [ 1380.789323][ T3242] bond3: left promiscuous mode [ 1380.794598][ T3242] bond_slave_0: left promiscuous mode [ 1380.800129][ T3242] bond_slave_1: left promiscuous mode [ 1380.805724][ T3242] dummy0: left promiscuous mode [ 1380.883599][ T3249] syz_tun: entered allmulticast mode [ 1380.918965][T30697] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1380.929946][ T3240] syz_tun: left allmulticast mode [ 1381.083496][ T3254] C: renamed from team_slave_0 (while UP) [ 1381.264279][ T3254] netlink: 'syz.0.7404': attribute type 2 has an invalid length. [ 1381.336839][ T3270] __nla_validate_parse: 14 callbacks suppressed [ 1381.336866][ T3270] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7405'. [ 1381.372143][ T3254] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7404'. [ 1381.380165][ T3270] netlink: 35 bytes leftover after parsing attributes in process `syz.1.7405'. [ 1381.410075][ T3272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7407'. [ 1381.433826][ T3254] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1381.470097][ T7644] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1381.545778][T30702] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1381.641389][ T7644] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1381.662218][ T3283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7410'. [ 1381.688694][ T3283] bond_slave_0: entered promiscuous mode [ 1381.694434][ T3283] bond_slave_1: entered promiscuous mode [ 1381.721610][ T3283] macvtap3: entered promiscuous mode [ 1381.726970][ T3283] bond0: entered promiscuous mode [ 1381.744192][ T3283] macvtap3: entered allmulticast mode [ 1381.758958][ T3283] bond0: entered allmulticast mode [ 1381.764138][ T3283] bond_slave_0: entered allmulticast mode [ 1381.780372][ T3283] bond_slave_1: entered allmulticast mode [ 1381.790901][ T3283] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1381.841217][ T3284] bond0: left allmulticast mode [ 1381.846695][ T3284] bond_slave_0: left allmulticast mode [ 1381.855169][ T3284] bond_slave_1: left allmulticast mode [ 1381.879063][ T3284] bond0: left promiscuous mode [ 1381.889125][ T3284] bond_slave_0: left promiscuous mode [ 1381.894740][ T3284] bond_slave_1: left promiscuous mode [ 1381.938012][ T3292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7412'. [ 1382.133148][ T3305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7415'. [ 1382.200486][ T3305] bond_slave_0: entered promiscuous mode [ 1382.206260][ T3305] bond_slave_1: entered promiscuous mode [ 1382.228693][ T3305] macvtap4: entered promiscuous mode [ 1382.234056][ T3305] bond0: entered promiscuous mode [ 1382.239995][ T3302] netlink: 'syz.1.7417': attribute type 13 has an invalid length. [ 1382.247990][ T3302] netlink: 'syz.1.7417': attribute type 17 has an invalid length. [ 1382.256820][ T3305] macvtap4: entered allmulticast mode [ 1382.278676][ T3305] bond0: entered allmulticast mode [ 1382.283964][ T3305] bond_slave_0: entered allmulticast mode [ 1382.308500][ T3305] bond_slave_1: entered allmulticast mode [ 1382.329174][ T3305] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 1382.389461][ T3310] bond0: left allmulticast mode [ 1382.402634][ T3310] bond_slave_0: left allmulticast mode [ 1382.409029][ T3310] bond_slave_1: left allmulticast mode [ 1382.414785][ T3310] bond0: left promiscuous mode [ 1382.422426][ T3310] bond_slave_0: left promiscuous mode [ 1382.427935][ T3310] bond_slave_1: left promiscuous mode [ 1382.437160][ T3250] lo speed is unknown, defaulting to 1000 [ 1382.511239][ T3302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1382.529108][ T1224] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1382.611063][ T1224] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1382.651021][ T3319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7421'. [ 1382.721237][ T3317] wg2: Caught tx_queue_len zero misconfig [ 1382.892454][ T3325] netlink: 'syz.2.7423': attribute type 3 has an invalid length. [ 1382.938209][ T3325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7423'. [ 1383.126420][ T3329] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7426'. [ 1383.147908][ T3306] lo speed is unknown, defaulting to 1000 [ 1383.159697][ T3329] gretap0: entered promiscuous mode [ 1383.255561][ T3329] gretap0: left promiscuous mode [ 1383.291626][ T3329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1383.524644][ T3340] sctp: [Deprecated]: syz.2.7428 (pid 3340) Use of int in max_burst socket option. [ 1383.524644][ T3340] Use struct sctp_assoc_value instead [ 1383.542449][ T3342] sctp: [Deprecated]: syz.2.7428 (pid 3342) Use of int in max_burst socket option. [ 1383.542449][ T3342] Use struct sctp_assoc_value instead [ 1384.197171][ T3363] netlink: 'syz.2.7435': attribute type 2 has an invalid length. [ 1384.942450][ T3397] netlink: 'syz.3.7443': attribute type 58 has an invalid length. [ 1385.808991][ T3439] tipc: Enabled bearer , priority 0 [ 1385.863215][ T3439] syzkaller0: entered promiscuous mode [ 1385.869428][ T3439] syzkaller0: entered allmulticast mode [ 1385.886576][ T3439] tipc: Resetting bearer [ 1385.940928][ T3439] tipc: Disabling bearer [ 1385.969547][ T3447] netlink: 'syz.4.7454': attribute type 3 has an invalid length. [ 1386.824628][ T3480] netlink: 'syz.4.7460': attribute type 1 has an invalid length. [ 1386.832959][ T3480] __nla_validate_parse: 12 callbacks suppressed [ 1386.832980][ T3480] netlink: 192 bytes leftover after parsing attributes in process `syz.4.7460'. [ 1386.858576][ T3480] vxcan1: entered promiscuous mode [ 1386.901290][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7462'. [ 1387.166252][ T3493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7466'. [ 1387.435815][ T3505] netlink: 'syz.2.7470': attribute type 1 has an invalid length. [ 1387.462487][ T3505] bond3: entered promiscuous mode [ 1387.467922][ T3505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1387.486112][ T3506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1387.516197][ T3506] bond3: (slave wireguard3): The slave device specified does not support setting the MAC address [ 1387.547311][ T3506] bond3: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 1387.576688][ T3506] bond3: (slave wireguard3): making interface the new active one [ 1387.586199][ T3506] wireguard3: entered promiscuous mode [ 1387.594177][ T3506] bond3: (slave wireguard3): Enslaving as an active interface with an up link [ 1387.605007][ T3505] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1387.655099][ T3513] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1387.708940][ T3513] bridge0: entered allmulticast mode [ 1387.816946][ T3523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7473'. [ 1388.202702][ T3543] netlink: 'syz.4.7480': attribute type 61 has an invalid length. [ 1388.222162][ T3543] netlink: 'syz.4.7480': attribute type 62 has an invalid length. [ 1388.394903][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7483'. [ 1388.453752][ T3559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7485'. [ 1388.522052][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7483'. [ 1388.581233][ T3566] openvswitch: netlink: Actions may not be safe on all matching packets [ 1388.590106][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7483'. [ 1389.218552][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1389.391314][ T3586] ip6gretap2: entered promiscuous mode [ 1389.533339][ T3603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7497'. [ 1390.170914][ T3629] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 1390.215361][ T3608] lo speed is unknown, defaulting to 1000 [ 1390.235705][ T3629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7504'. [ 1391.027010][ T3660] @0: renamed from dummy0 (while UP) [ 1391.478005][ T3686] netlink: 'syz.0.7521': attribute type 10 has an invalid length. [ 1392.341735][ T3719] tipc: Enabled bearer , priority 0 [ 1392.360375][ T3719] syzkaller0: entered promiscuous mode [ 1392.362710][ T3727] __nla_validate_parse: 8 callbacks suppressed [ 1392.362728][ T3727] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7533'. [ 1392.376275][ T3719] syzkaller0: entered allmulticast mode [ 1392.397012][ T3719] tipc: Resetting bearer [ 1392.412540][ T3718] tipc: Resetting bearer [ 1392.475055][ T3718] tipc: Disabling bearer [ 1392.559907][ T3733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7536'. [ 1392.722961][ T3731] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7535'. [ 1392.868676][ T3746] syzkaller0: entered promiscuous mode [ 1392.874612][ T3746] syzkaller0: entered allmulticast mode [ 1392.916477][ T3746] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1393.200356][ T30] audit: type=1804 audit(1770833751.639:13): pid=3768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7548" name="/newroot/231/cgroup.controllers" dev="tmpfs" ino=1194 res=1 errno=0 [ 1393.208968][ T3769] netlink: 'syz.0.7548': attribute type 15 has an invalid length. [ 1393.245813][ T30] audit: type=1800 audit(1770833751.639:14): pid=3768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7548" name="cgroup.controllers" dev="tmpfs" ino=1194 res=0 errno=0 [ 1393.258202][ T3769] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7548'. [ 1393.600917][ T3785] netlink: 'syz.2.7552': attribute type 2 has an invalid length. [ 1393.617154][ T3785] !9: entered promiscuous mode [ 1393.638844][ T3785] netlink: 'syz.2.7552': attribute type 2 has an invalid length. [ 1393.656977][ T3785] !9: left promiscuous mode [ 1393.724610][ T3792] netlink: 'syz.2.7552': attribute type 13 has an invalid length. [ 1393.747526][ T3792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1393.926073][ T3803] macsec2: entered promiscuous mode [ 1393.931847][ T3803] ip6gretap0: entered promiscuous mode [ 1393.937474][ T3803] macsec2: entered allmulticast mode [ 1393.943718][ T3803] ip6gretap0: entered allmulticast mode [ 1393.952216][ T3803] ip6gretap0: left allmulticast mode [ 1393.957608][ T3803] ip6gretap0: left promiscuous mode [ 1394.094822][ T3806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7556'. [ 1394.154574][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7556'. [ 1394.407553][ T3816] bridge0: entered promiscuous mode [ 1394.413392][ T3816] team0: entered promiscuous mode [ 1394.419513][ T3816] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 1394.428926][ T3816] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 3816, name: syz.3.7559 [ 1394.437985][ T3816] preempt_count: 201, expected: 0 [ 1394.443128][ T3816] RCU nest depth: 0, expected: 0 [ 1394.448088][ T3816] 3 locks held by syz.3.7559/3816: [ 1394.453308][ T3816] #0: ffffffff8fef8790 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1394.463021][ T3816] #1: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1394.472215][ T3816] #2: ffff888031890370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1394.482648][ T3816] Preemption disabled at: [ 1394.482664][ T3816] [] dev_uc_add+0x56/0x120 [ 1394.493267][ T3816] CPU: 0 UID: 0 PID: 3816 Comm: syz.3.7559 Not tainted syzkaller #0 PREEMPT(full) [ 1394.493297][ T3816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1394.493310][ T3816] Call Trace: [ 1394.493319][ T3816] [ 1394.493329][ T3816] dump_stack_lvl+0xe8/0x150 [ 1394.493361][ T3816] __might_resched+0x378/0x4d0 [ 1394.493385][ T3816] ? dev_uc_add+0x56/0x120 [ 1394.493418][ T3816] __mutex_lock+0x119/0x1300 [ 1394.493465][ T3816] ? __pfx___dev_notify_flags+0x10/0x10 [ 1394.493491][ T3816] ? _printk+0xdd/0x130 [ 1394.493520][ T3816] ? __pfx_console_unlock+0x10/0x10 [ 1394.493546][ T3816] ? dev_set_promiscuity+0x10e/0x260 [ 1394.493572][ T3816] ? __pfx__printk+0x10/0x10 [ 1394.493604][ T3816] ? __pfx___mutex_lock+0x10/0x10 [ 1394.493649][ T3816] ? netif_set_promiscuity+0x81/0xe0 [ 1394.493674][ T3816] dev_set_promiscuity+0x10e/0x260 [ 1394.493705][ T3816] team_change_rx_flags+0x124/0x240 [ 1394.493737][ T3816] ? __pfx_team_change_rx_flags+0x10/0x10 [ 1394.493761][ T3816] __dev_set_promiscuity+0x515/0x710 [ 1394.493802][ T3816] ? netdev_info+0x11e/0x180 [ 1394.493838][ T3816] netif_set_promiscuity+0x50/0xe0 [ 1394.493868][ T3816] dev_set_promiscuity+0x126/0x260 [ 1394.493897][ T3816] br_manage_promisc+0x180/0x560 [ 1394.493924][ T3816] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1394.493949][ T3816] __dev_set_promiscuity+0x515/0x710 [ 1394.493976][ T3816] ? __hw_addr_add_ex+0x361/0x650 [ 1394.494007][ T3816] __dev_set_rx_mode+0x17c/0x260 [ 1394.494035][ T3816] dev_uc_add+0xc8/0x120 [ 1394.494065][ T3816] macsec_dev_open+0xf2/0x5a0 [ 1394.494095][ T3816] ? __pfx_macsec_dev_open+0x10/0x10 [ 1394.494112][ T3816] ? ib_device_get_by_netdev+0x81/0x4f0 [ 1394.494140][ T3816] ? hsr_netdev_notify+0x296/0xce0 [ 1394.494161][ T3816] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 1394.494193][ T3816] ? udp_tunnel_nic_netdevice_event+0x1ac/0x17d0 [ 1394.494220][ T3816] ? ip6_route_dev_notify+0x9a/0x5b0 [ 1394.494245][ T3816] ? notifier_call_chain+0x37d/0x3a0 [ 1394.494275][ T3816] __dev_open+0x44d/0x830 [ 1394.494304][ T3816] ? __pfx___dev_open+0x10/0x10 [ 1394.494322][ T3816] ? __dev_change_flags+0x1b0/0x690 [ 1394.494362][ T3816] __dev_change_flags+0x1f7/0x690 [ 1394.494395][ T3816] ? __pfx___dev_change_flags+0x10/0x10 [ 1394.494434][ T3816] rtnl_newlink_create+0x587/0xb70 [ 1394.494462][ T3816] ? __pfx___nla_validate_parse+0x10/0x10 [ 1394.494503][ T3816] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1394.494536][ T3816] ? __pfx___mutex_lock+0x10/0x10 [ 1394.494576][ T3816] ? ns_capable+0x89/0xe0 [ 1394.494600][ T3816] rtnl_newlink+0x1666/0x1be0 [ 1394.494645][ T3816] ? __pfx_rtnl_newlink+0x10/0x10 [ 1394.494667][ T3816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.494730][ T3816] ? kasan_quarantine_put+0xbb/0x1f0 [ 1394.494762][ T3816] ? lockdep_hardirqs_on+0x7a/0x110 [ 1394.494806][ T3816] ? kmem_cache_free+0x195/0x610 [ 1394.494826][ T3816] ? nlmon_xmit+0xb0/0x100 [ 1394.494860][ T3816] ? __lock_acquire+0x6b5/0x2cf0 [ 1394.494901][ T3816] ? __local_bh_enable_ip+0xd0/0x130 [ 1394.494920][ T3816] ? lockdep_hardirqs_on+0x7a/0x110 [ 1394.494946][ T3816] ? __dev_queue_xmit+0x274/0x3850 [ 1394.494973][ T3816] ? __local_bh_enable_ip+0xd0/0x130 [ 1394.494990][ T3816] ? __dev_queue_xmit+0x274/0x3850 [ 1394.495026][ T3816] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1394.495067][ T3816] ? __pfx_rtnl_newlink+0x10/0x10 [ 1394.495091][ T3816] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1394.495121][ T3816] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1394.495145][ T3816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1394.495166][ T3816] ? ref_tracker_free+0x693/0x840 [ 1394.495189][ T3816] ? __copy_skb_header+0xa3/0x4a0 [ 1394.495220][ T3816] ? __pfx_ref_tracker_free+0x10/0x10 [ 1394.495260][ T3816] netlink_rcv_skb+0x232/0x4b0 [ 1394.495286][ T3816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1394.495314][ T3816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1394.495352][ T3816] ? netlink_deliver_tap+0x2e/0x1b0 [ 1394.495382][ T3816] netlink_unicast+0x80f/0x9b0 [ 1394.495413][ T3816] ? __pfx_netlink_unicast+0x10/0x10 [ 1394.495436][ T3816] ? netlink_sendmsg+0x650/0xb40 [ 1394.495458][ T3816] ? skb_put+0x11b/0x210 [ 1394.495489][ T3816] netlink_sendmsg+0x813/0xb40 [ 1394.495522][ T3816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1394.495550][ T3816] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1394.495578][ T3816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1394.495603][ T3816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1394.495626][ T3816] ____sys_sendmsg+0xa68/0xad0 [ 1394.495654][ T3816] ? __might_fault+0xaf/0x130 [ 1394.495690][ T3816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1394.495731][ T3816] ? import_iovec+0x73/0xa0 [ 1394.495766][ T3816] ___sys_sendmsg+0x2a5/0x360 [ 1394.495803][ T3816] ? __lock_acquire+0x6b5/0x2cf0 [ 1394.495838][ T3816] ? __pfx____sys_sendmsg+0x10/0x10 [ 1394.495876][ T3816] ? futex_wake+0x4ac/0x580 [ 1394.495929][ T3816] ? __fget_files+0x2a/0x420 [ 1394.495951][ T3816] ? __fget_files+0x3a0/0x420 [ 1394.495987][ T3816] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1394.496027][ T3816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1394.496066][ T3816] ? rcu_is_watching+0x15/0xb0 [ 1394.496102][ T3816] do_syscall_64+0xe2/0xf80 [ 1394.496131][ T3816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.496150][ T3816] ? trace_irq_disable+0x37/0x100 [ 1394.496170][ T3816] ? clear_bhb_loop+0x60/0xb0 [ 1394.496196][ T3816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.496216][ T3816] RIP: 0033:0x7f5f2759bf79 [ 1394.496237][ T3816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.496256][ T3816] RSP: 002b:00007f5f284d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1394.496279][ T3816] RAX: ffffffffffffffda RBX: 00007f5f27815fa0 RCX: 00007f5f2759bf79 [ 1394.496295][ T3816] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000007 [ 1394.496309][ T3816] RBP: 00007f5f276327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1394.496322][ T3816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.496334][ T3816] R13: 00007f5f27816038 R14: 00007f5f27815fa0 R15: 00007fff4cf90758 [ 1394.496371][ T3816] [ 1394.496381][ T3816] [ 1395.078480][ T3816] ============================= [ 1395.083446][ T3816] [ BUG: Invalid wait context ] [ 1395.088453][ T3816] syzkaller #0 Tainted: G W [ 1395.094436][ T3816] ----------------------------- [ 1395.099284][ T3816] syz.3.7559/3816 is trying to lock: [ 1395.104567][ T3816] ffff88806acaad40 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 1395.114955][ T3816] other info that might help us debug this: [ 1395.120959][ T3816] context-{5:5} [ 1395.124431][ T3816] 3 locks held by syz.3.7559/3816: [ 1395.129541][ T3816] #0: ffffffff8fef8790 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1395.139064][ T3816] #1: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1395.148233][ T3816] #2: ffff888031890370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1395.158543][ T3816] stack backtrace: [ 1395.162293][ T3816] CPU: 0 UID: 0 PID: 3816 Comm: syz.3.7559 Tainted: G W syzkaller #0 PREEMPT(full) [ 1395.162321][ T3816] Tainted: [W]=WARN [ 1395.162328][ T3816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1395.162337][ T3816] Call Trace: [ 1395.162347][ T3816] [ 1395.162356][ T3816] dump_stack_lvl+0xe8/0x150 [ 1395.162381][ T3816] __lock_acquire+0xec1/0x2cf0 [ 1395.162406][ T3816] ? __show_trace_log_lvl+0x478/0x550 [ 1395.162428][ T3816] ? dev_set_promiscuity+0x10e/0x260 [ 1395.162448][ T3816] lock_acquire+0x106/0x330 [ 1395.162467][ T3816] ? dev_set_promiscuity+0x10e/0x260 [ 1395.162487][ T3816] ? dump_stack_lvl+0x135/0x150 [ 1395.162505][ T3816] ? __might_resched+0x378/0x4d0 [ 1395.162521][ T3816] __mutex_lock+0x19f/0x1300 [ 1395.162543][ T3816] ? dev_set_promiscuity+0x10e/0x260 [ 1395.162563][ T3816] ? __pfx___dev_notify_flags+0x10/0x10 [ 1395.162582][ T3816] ? _printk+0xdd/0x130 [ 1395.162602][ T3816] ? __pfx_console_unlock+0x10/0x10 [ 1395.162618][ T3816] ? dev_set_promiscuity+0x10e/0x260 [ 1395.162636][ T3816] ? __pfx__printk+0x10/0x10 [ 1395.162657][ T3816] ? __pfx___mutex_lock+0x10/0x10 [ 1395.162684][ T3816] ? netif_set_promiscuity+0x81/0xe0 [ 1395.162704][ T3816] dev_set_promiscuity+0x10e/0x260 [ 1395.162725][ T3816] team_change_rx_flags+0x124/0x240 [ 1395.162753][ T3816] ? __pfx_team_change_rx_flags+0x10/0x10 [ 1395.162770][ T3816] __dev_set_promiscuity+0x515/0x710 [ 1395.162791][ T3816] ? netdev_info+0x11e/0x180 [ 1395.162812][ T3816] netif_set_promiscuity+0x50/0xe0 [ 1395.162833][ T3816] dev_set_promiscuity+0x126/0x260 [ 1395.162854][ T3816] br_manage_promisc+0x180/0x560 [ 1395.162872][ T3816] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1395.162892][ T3816] __dev_set_promiscuity+0x515/0x710 [ 1395.162912][ T3816] ? __hw_addr_add_ex+0x361/0x650 [ 1395.162933][ T3816] __dev_set_rx_mode+0x17c/0x260 [ 1395.162954][ T3816] dev_uc_add+0xc8/0x120 [ 1395.162975][ T3816] macsec_dev_open+0xf2/0x5a0 [ 1395.162994][ T3816] ? __pfx_macsec_dev_open+0x10/0x10 [ 1395.163008][ T3816] ? ib_device_get_by_netdev+0x81/0x4f0 [ 1395.163030][ T3816] ? hsr_netdev_notify+0x296/0xce0 [ 1395.163044][ T3816] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 1395.163066][ T3816] ? udp_tunnel_nic_netdevice_event+0x1ac/0x17d0 [ 1395.163085][ T3816] ? ip6_route_dev_notify+0x9a/0x5b0 [ 1395.163103][ T3816] ? notifier_call_chain+0x37d/0x3a0 [ 1395.163122][ T3816] __dev_open+0x44d/0x830 [ 1395.163140][ T3816] ? __pfx___dev_open+0x10/0x10 [ 1395.163155][ T3816] ? __dev_change_flags+0x1b0/0x690 [ 1395.163178][ T3816] __dev_change_flags+0x1f7/0x690 [ 1395.163199][ T3816] ? __pfx___dev_change_flags+0x10/0x10 [ 1395.163222][ T3816] rtnl_newlink_create+0x587/0xb70 [ 1395.163243][ T3816] ? __pfx___nla_validate_parse+0x10/0x10 [ 1395.163267][ T3816] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1395.163288][ T3816] ? __pfx___mutex_lock+0x10/0x10 [ 1395.163313][ T3816] ? ns_capable+0x89/0xe0 [ 1395.163327][ T3816] rtnl_newlink+0x1666/0x1be0 [ 1395.163351][ T3816] ? __pfx_rtnl_newlink+0x10/0x10 [ 1395.163367][ T3816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.163395][ T3816] ? kasan_quarantine_put+0xbb/0x1f0 [ 1395.163418][ T3816] ? lockdep_hardirqs_on+0x7a/0x110 [ 1395.163440][ T3816] ? kmem_cache_free+0x195/0x610 [ 1395.163455][ T3816] ? nlmon_xmit+0xb0/0x100 [ 1395.163474][ T3816] ? __lock_acquire+0x6b5/0x2cf0 [ 1395.163498][ T3816] ? __local_bh_enable_ip+0xd0/0x130 [ 1395.163512][ T3816] ? lockdep_hardirqs_on+0x7a/0x110 [ 1395.163531][ T3816] ? __dev_queue_xmit+0x274/0x3850 [ 1395.163552][ T3816] ? __local_bh_enable_ip+0xd0/0x130 [ 1395.163565][ T3816] ? __dev_queue_xmit+0x274/0x3850 [ 1395.163589][ T3816] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1395.163611][ T3816] ? __pfx_rtnl_newlink+0x10/0x10 [ 1395.163628][ T3816] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1395.163647][ T3816] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1395.163664][ T3816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1395.163680][ T3816] ? ref_tracker_free+0x693/0x840 [ 1395.163698][ T3816] ? __copy_skb_header+0xa3/0x4a0 [ 1395.163719][ T3816] ? __pfx_ref_tracker_free+0x10/0x10 [ 1395.163741][ T3816] netlink_rcv_skb+0x232/0x4b0 [ 1395.163767][ T3816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1395.163785][ T3816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1395.163805][ T3816] ? netlink_deliver_tap+0x2e/0x1b0 [ 1395.163824][ T3816] netlink_unicast+0x80f/0x9b0 [ 1395.163843][ T3816] ? __pfx_netlink_unicast+0x10/0x10 [ 1395.163858][ T3816] ? netlink_sendmsg+0x650/0xb40 [ 1395.163874][ T3816] ? skb_put+0x11b/0x210 [ 1395.163893][ T3816] netlink_sendmsg+0x813/0xb40 [ 1395.163913][ T3816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1395.163931][ T3816] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1395.163951][ T3816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1395.163968][ T3816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1395.163984][ T3816] ____sys_sendmsg+0xa68/0xad0 [ 1395.164005][ T3816] ? __might_fault+0xaf/0x130 [ 1395.164029][ T3816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1395.164053][ T3816] ? import_iovec+0x73/0xa0 [ 1395.164076][ T3816] ___sys_sendmsg+0x2a5/0x360 [ 1395.164095][ T3816] ? __lock_acquire+0x6b5/0x2cf0 [ 1395.164117][ T3816] ? __pfx____sys_sendmsg+0x10/0x10 [ 1395.164139][ T3816] ? futex_wake+0x4ac/0x580 [ 1395.164163][ T3816] ? __fget_files+0x2a/0x420 [ 1395.164179][ T3816] ? __fget_files+0x3a0/0x420 [ 1395.164199][ T3816] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1395.164220][ T3816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1395.164244][ T3816] ? rcu_is_watching+0x15/0xb0 [ 1395.164264][ T3816] do_syscall_64+0xe2/0xf80 [ 1395.164293][ T3816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.164308][ T3816] ? trace_irq_disable+0x37/0x100 [ 1395.164323][ T3816] ? clear_bhb_loop+0x60/0xb0 [ 1395.164340][ T3816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.164355][ T3816] RIP: 0033:0x7f5f2759bf79 [ 1395.164371][ T3816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.164385][ T3816] RSP: 002b:00007f5f284d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1395.164403][ T3816] RAX: ffffffffffffffda RBX: 00007f5f27815fa0 RCX: 00007f5f2759bf79 [ 1395.164416][ T3816] RDX: 0000000000008000 RSI: 0000200000000080 RDI: 0000000000000007 [ 1395.164426][ T3816] RBP: 00007f5f276327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1395.164436][ T3816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1395.164446][ T3816] R13: 00007f5f27816038 R14: 00007f5f27815fa0 R15: 00007fff4cf90758 [ 1395.164463][ T3816] [ 1395.876664][ T3816] netlink: 'syz.3.7559': attribute type 7 has an invalid length. [ 1395.895437][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7559'.