last executing test programs: 2.462380577s ago: executing program 2 (id=5078): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES8=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 2.268728496s ago: executing program 2 (id=5081): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x7c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1184, 0x4}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY={0x6}, @IFLA_IPOIB_UMCAST={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x81}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_MODE={0x6}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.064507369s ago: executing program 2 (id=5085): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x7}], 0x1, 0x100, 0x0) 2.020623639s ago: executing program 4 (id=5086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200010c6}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xd, 0x8}}, @supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x12, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x48}, {0x3, 0x1}, {0x18}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 1.836022522s ago: executing program 4 (id=5089): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000002000000e819c65facfcae465ef7a94834393e3286ff1f91981d09fa592859e0082847b750762b344270"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095000000000000003e9800000000000026080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000140)="cdb57c303c19088d3d68b15e062113f156bed3aff07221d5d5bcddddf36bbb258e7374e0ca094bf60fb98375363947a98d37671374da1bab98854895d2e9bd4e00a5bd89070ef413f068297f53c481f9afa9f513f2fef1c5b9c3990c428cf38ad7d0f353a62109d5f1e65206687afcd4b5a4851e05bdb0729f13c4153c2622f6b48ec760be1ff0eeb98793f6966064b35ca6fe52309fb98d5dfd1cccc2428c3c3198dcf94108d9fccec7c900a7f8970a9103a358cecfeea8ef4ab2db7438fd0ac17bbb74ad", &(0x7f00000002c0)=""/251, &(0x7f0000000080)="4aec900d8c3243f7d1d96931e047b2257fb6a73c939dce41b7a23782340af92fff8d920c35", &(0x7f0000000900)="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", 0x10, r0, 0x4}, 0x38) 1.7123691s ago: executing program 4 (id=5092): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88781a87391542b6953c4c21e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcb09000000f32926423c17", 0x41}, {&(0x7f00000014c0)="c17c8b83f132c039d41275cc024ca041173d949248765b79d887910c72c061cbf34e34f6aa2be7e492f5e7c04a866f0d207c85ad13376c25aa4f7a0e60738d778a65330aa0db7ceebfdbdba4ee936cecb3c81af7fe5da443e61064e079", 0x5d}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f00000012c0)="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", 0x12a}, {&(0x7f0000001400)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f00000010c0)={0x180, r3, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x47}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x40}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, 0x6df4}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x840) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x80, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfffffffffffffe88, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1.675929258s ago: executing program 3 (id=5094): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (async) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d3234565", 0x34, 0x0, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x2004c8a1}, 0x8040) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}, {&(0x7f0000000100)="6726c5593d5e25023d655f66300e5524c6bcc4d5bc311724ca6235dd31e54894c0b87642453866fbd9bdbdc12e20e213656334", 0x33}, {&(0x7f00000002c0)="900e5ea56a6dafac73f8b31b32ba22a5bd88b28bbfe7ae9a07c1d54715ec4cab051382e9225f5a8e5e41ce5ec730bf864402ae10ab4b54d6a0f8ddbcff895b1f8229832e56b856c2eb79fb89dcab4608fd52226bb37260d404d547685983d32cbd4b9afa200b96a4b73130a31d1dcbed845a476b9a15f7100234f7b9db14839b234ece1af97b7591995d2f5e562c765a5d3094784da10860a7370266c3bcc021fbfafd4b4d27e53cde06fa57d44369f7f303359086b82a6cbb4509a9115c7783153bb8e56b23d0efd4a3a224ecab20318437752e8b766a0e2b19212a", 0xdc}, {&(0x7f0000000140)="c1d915a302aaffad383d01a97b", 0xd}], 0x4}, 0x0) 1.305126358s ago: executing program 1 (id=5096): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000001700)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x29, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0xf, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ldst={0x2, 0x0, 0x3, 0x9, 0x0, 0xffffffffffffffe0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0xc2000000}, 0x1000}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x9}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27050200420014000600002fb96dbcf706e10500070088a8000088a8", 0x1c}, {&(0x7f0000000440), 0xfefe}], 0x2}, 0x0) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) 1.257747291s ago: executing program 0 (id=5097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x16a4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_EXPRESSIONS={0x1670, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x165c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x164c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x11dc, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "9b511dfd313427cea0c1d98c0a66ab197c8e93b8bb8df49e7c5e2ca5de3b8a1536d8c053f11b07a15e9050a4e5ca49fdc948029b887fa798987e6352bfdc2c17254454279c36f90056451f2bb9b3f9d234b643b760b892cb5c4bbb31bb63d2ceab4f5c8f0cce41760ff2928d18bae437ab11d4901ca432232e6caa82153e422d408660d199eaf22b355eb904258f0b5f1fc8ff4b30666ecc48e435dfcaea537dfa74ffecc5eb8b65c9b8f6dd287d7cd8e5456a2bf94a0180f918eb31154b600adfc93aca720724c012a005cae284e8ccfdb07358ebf0e99473989cec2fbe493b3b84968d9b9ead13869e15d153449ac97194066622b49d273c0e050976fa374181d0393f9285c1b794fcda0b3953867413c63dcca714b39b94be879ae2deb57a964daa216abf3bc61129148ceecf3dc05f6a2da41efda2cbbfa3980d633912fc288f01554e37fb06a61355fb937f47ccd3c890671bed62953daaf5476912f61fcc950cf93a393373ea2dc6aac7d23085f1c9dfe202c32d9555aa759868aa2bc4e53e1e650076a15bfd84b237accf4819c047a295fd4abf907805c3a1ecbc4c2fb482ef8aefe705be7e42db4280db626f2ed40725d9202ad8b4bc5d24662fd4e3846d7b26282d1930aabd18f2abeecf4a2852ba2f7b80770f7681d01a3edf1c6c07039f6760378020bf4554dcaa10048d3dc8f76f21fc8557aed81489b38a3652afad0f96e602ed5043322fbf75210bf39603208f053d3c8be5e7f0024c2d04e9a8ea8b7996772d91e43e17a5da4fd086b6aa61ac95c6632a6885f98357a0ae35ec810daf3a76aa1abaae456aebb0e7098bae5697be6db002676eec9aec722ee21df0c5c29b42bb02571637ffae152c72ae5f4ec7862ed7b0d116d2a5e651e7665eb11dd0fd0a648c25a54e5a63b2a7f50de8d9a6e5a80e39da61d77114d9e76d5d146e3eccf74b15d698307d54e58f81e5f83a504381b362093a7397a652aa0dbf8b6414f41a9639cb474a76de4a667ff559fd97ca5a50479c553f2d30ee1c0fd0892354196dabad6d3085f5a94a3e3c35064fcfcece03c804f4251ec6fd8eff023cb4bc5bad624e0fa5b53d0730631c9819d908e0e783e6692e64440ad62cebbdd0ce93972afd4e2cebb1d38634fa02991b427769800ca02a812b4663248a0c0a4c37fd4a43d9eac87e564dc7f1691fc9f2e82f63d89ee629c0b8bc6522f168dac5eee91c7f2444ff417925ed73e642a95bbd6dd64fdd4fc0dfb11ade638fc3c05981b987c2f5e9d9e5a3c174231147d18c553ccd9fd5242fbeb3b29376aed0850e3d28dde0afb44c305c6af15ca5bb36ee7b8a2c2e8c88c0cbdf9a8f4b055b17f2f1748977f49d8fd0e53a69d7d79bd79e6d66d822afece440dfb2210a0f4cbe13bffe0d6cb64ecb4f8decfd7908dc56731f209fd8fe24b331d172b2f679f3be24913eb7d48d820be037a6f9296dbcd30a628edc8585160a6dc91b6cdb13e889133f0136fa182ea381211033da20553d77ff49130e3974d0fc05f0b2a3a101063883a2aee9a0cbe67e5dd65767b1c7d401bc59f9d09a87c2dd0809d7fe4418cdd888ce325029e219587f2ede7116886cfa54f326590b0a2bf044c653f25c8e2c34d454e504e1c28ed8848c69afe9466d2205167feaec5e6ed369fa612258fec8df3b90b378ba90d275289e627b7f397fdca5fb958de3162239ca49dc203ec3acfcb117cce730e49ef7cb8dafbbbeb3bb66b977a36127c6b46276cb8c513e364df56e6a703caed592339b4364c9001d3497b9a4a71ba691afa2c0a1c5e5e665f1c5b2eb17eaeed4bde3ae265741785febf874d4c06a3697bd7e77def8a4362d47371e56a973bf515d55e3a866d35b084187aa0a5c8741b483e3af52fe4fe9f0de60cc19b7bfbca7a455f2af3bf1dfd60855085171b2b2a5c00c9c24d4e566b30489be17065c1eaa2d781a0f393b1bdd31a6e169b6b53692117d9d8a040a5cd3583b8deb1e24a837f5ddc3cbfa4df5f5aa6fab3ed4f1a50b43ba1ee7b0f3bbf492a51f505a59d5b5dcc42031eccb4222f0b00f9e69515fe3508b328ec154e459ff6ec5c27bbad1e2589c5fb8bcc262e71e69698866aa37f1c35012a9f13f7f7e0d3c1f4139984a00ac5724ebef9e980fc2a3313c0a4660de9345e62eb9139a852b72c0978456d0f2c10c0db2fe6ba01d546d4fde1aa473aea09c7e3d725d9d8f52dc6dfe4cb408c568a2b9e1b5d03f0eccb49ef778595fa3913d0805b2761f191b0186b87613d50d0310cfadcb062c4064fd816cf1b6e46fd876c8a4a5b5e49efb9a93bf26ff35bd85f7b2964d42a13abe66179b9c8c732917f69487ea4c23a4f071a81763cee4da13328dd0642460994b5884a1fa57987834face766e9b4ffb2e2d115a2775bd8b89a091764f62bb8ff54fff1920f4e09792e4cdf82f31e40ffa797f41ee9234783bcfb910ffd7dd51545361ec1c86c5fdd39c62b2ab18518f1cf3bd4e8c476dc6c947dc7b59db85eda013539f2c26f7b8d41552860e479c61effd34e4b5c4d63353bce349aa394d1a61d16e5624676cf22c8c55ead23c2f4c1905841cc64b8812a56b2a2ef9301059f50b54105f737bbd28df6e4632f3068c033a1f0f33262ef1d72c816dceb29354b0d4a52dd41ca485afc4b29592b26c1d0617e99957df8ba153869c1fe61d15d097706f532a5c97f23cfdd5ab3a846fe872dcbcc10e5cddd07efb9efa5a4555652c9b7b059fa58267bec3848c204e153ef918713c61b7fe3cce26a90a684d725851377f830cda1b7d9726c4655bb516bf19b46606753f9f0d0fadf407334a0e16b6dbe335f7252445f6d95abd1b5bab358ce23f8010c5bebadb97685d00a10efcfec831923f3253b081e82f8d6e14cf1892bf63aef801dbd37df4463e51506a8c12fe9c9d3614a726bf864aa49d8f934c882794ea10f64ac48e8b4512ad34244eb5838deac7fd3c4c62b7151b6d78ae1e96154d8ea9a97327144cca5de4cb03c930347729559405c236bd5b3a806938bfc7716c2a83a40f6691bd77b00132cfc08a55f5033dca8d2b3ed1c40e7d84ad67ad046ebb083322ff95f6de8b7c7a923b9d10d4341a6dff6f0e870151717a5e7066b253f21874b286788d7050934c8f7a3c7a8462f24527d7b297ca4fbf4dec6ef2e5f7a5834297a1744abd12a8fcf0d425314f0392e868b604a434de5457effe875ff34603db00387884a9bee27bf4f68e11833ad7a83ef2b5aa0ed6f94f9d3d2910235907fcbedc51125e7fef29a4c56792d984a2d9996eb84aed766f3660640691408b306a8de3f678964a7c7be0e7a0ea14b171d6f41e61f13ef02bfec4414173d11a3234c406943f336ef7f3654f31eab579b4a062473d67d2d8a5802cf2c664192ced2cc8597e19060673ce83999135c79191f0973cf3e7a749ed307fe9c60e72bc4fc6dc339768ffbe3f8edda2730115ce2e83f04ade033c117e83079676bc20075b485fd69c8ff4cf0305ce0f450cdf280fbdf9624b2a230302ff6995912613db427ee67a5e4fb7b06dd51d83de613821021a34d49e4af5f89617e563b1e2f25d5f70b9e7b2a39e8e24a9bc1b99036492ec8642befcfd10ca0df8baee0fff4ee4f2d6e50d195fb476246ba7ee74a9933033237a56031678b93506e9bd79ce984ec342e7a91bac5221c07d4c1740e9c737b155b083bc5136b2a527b06cc9e06a24762f90d0b5c94e3e913afac20a7305114c85e445efc4cda282c60cf80f9598ad7b9074df3c83a524290f0d3ff162024f41955387dfc9bea495061a0bc12620d887dcb526c739f9547e127f356c54f939b98b123febad846d37eeac74b8c08fbe78a2ab0597a96121dd814c37cbeee5759c610a9694f8ca75393bc49580b13663cc1f248b1fc2db2436d2c0f4eb872a51a6d0a9244c225e34341a3cca874d1c4154241acaca7dd572722953837385170ccb5fe0c86eb3f41008831a23ceedf57c079e0cbb4c6d4da3169c72f7689362412a19ae98a4e3af74c310d999d36b4f1772cbc4efa0c12821b625da0eeec8d12b372bf9ec4d508ba678b07cd3763430ca13b18d29076610182d9a1e3e7d4d1b42cdb522467ac3a0478e2f7724d22dcc0d0e0a6236584d43bccb278b748be81a3b8714fe2d2a2af9155a897413d131ed32b9ce7849ff76133a1f75eebbf6d5d791ae7cfa1617052a24534254c0a83d6f2c6d7e92a77e1e1b7b619d3dde5e6d3a445fdaeae86c698107a10a74129be41bd3a164ba89af9afe3e44bcd556cb4842c854635b1872c70cc955b5bb86035d4379188203418d4be19dc212bdafcc9d1b4ac4446ff9ce078e54f57abfc93f948d72552b367c586383f816d7935f2fae15053a010158e570704fa38032031d7c6fa4bf10930ce85b941c49e193b8fb0c8d5131a79f633a96b9bf389c888bf0e126319cf113ab8fecdfb04f35cc16d7dac61c5056708a2617311d10e8882d3ecb310d19b3c23ba62f3ac4b3361debce665dff308860664cd10778c3b5e404422337dd7d6fbd1ada7d4bba93a6a0b4fd98699f876a52359b3628b961d0e2b89b60fa4ec13f4db0e06543bc5e4d045e34ae4fbbb152c3816b4bc09e426d964d73f61bb5d4d4ba276c128eaa16af4966759e335c68f4ec99526e3f93455ec8967ceb20caa40a8922516b1b8adcd4eb27dbfc97fd052bc1efee12b9198b6e8675705b5b93ed704a06a22f286cd641b18bb8250929d360c1ca7422d8bc34da6d13116612e2245e8c211bc194a72164751d8a48ce15746835df2f468fc93785ab1b06174de2764c716ae00f082ce88b1ffc1108edf2907cba815e84fce83369599a03cd57cebb5d11bdf774bb48ba83dff1c1a00c5c26c74c661f55a4fdd58dcff1571d7dcfcaf577012774f2be9d9dc3d3cd144f6f09765b0a6b6523c46b0f7a16e82e637c501593599cab4f5553800f5f05b6a2c803e385c77380add2ebd672d78c00bb5dc613881ccfae088cc5cde221358e31a3c9d301e5516527e8348ac31a9763d0ed2be13eec0f66a95e09331abe6c547dce479f21a1287b906ecd309593654a28057b97d2400e0a8e1ab6c94ce4e3aaa0bb6ed758b6702436ca764b544d6fd3f9ab8e8ee9716572601c790931385b532e66458076fee8278aea5cddeb787bcec1e69878a9c32b10e351dbf43577b822621226e5453f716f64fda6a8555e909e7b431dc6f812e4e27d12bfc6c9894819d291cfbcb6f72d68c45fc8ec86fd6e3045cb6dbad434c1b472edde6945cbfde46faf766a58b197e1342b5a2629b4b4f445eb601d22ebf74a1573f9372551f1af4ab3d2c19fba71cdc8603ddbad4d2b37c3bc7bc51f2bf7ad45600808c2413de900ece62779d5eed626cb41aad224446d6caf1287eedb629c20bb8fd53fc0b3010257577d17d922371f0b2febebb51f66a23e0d944f01076c37efbcd18fc942b406da573f183d8ccfa8d0884c16c0dbfe5f748f29fec4c8ffcf4d79bfb1caeba22f61a07a273cdfa406a57b41a0ad247c1ed370cfa3c86a04b266bf4804c67413cbc6115a6898d5e4296fbf626aa5d314b54f8271ece86e9adb3a3f57330d849ac84fa3de906d35bd9eb1ed2cdadaef5afbf7f05bddd1b8c20fe6c33e0911453c46ba34a299037a507da9738a854ce24ac6e5fbe8d438c19f0d1cb779223abca2e6d5671a9e8170f33248dc53d1291f487d0611e37f962f2d1582e31dcc6eed3893ea83c72b3f809bab1bedd8f9195ebbb9cae15e28a14ae095c369057ea03894dc76256e92594086608bca09eb27"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x83, 0x1, "9755dc69109d18475ee49a76a264fee0390c474d5073cf2427db275d0ca564518594a5a3e07d4656dd8d50f5df96da17bb1f65362e1dc141776759c5f943ac6cc3aeb685e00723df32de66c5145ea2599ea9013d6e455dedcb402746a8269db3c50dd8b3d937e5049c602d8363ed06f20fa6dc1a43f1da4cc3c8daacfef38c"}, @NFTA_DATA_VALUE={0xa3, 0x1, "320300a457fbedf3f389898533a3f7fece6b30353910c0827e0cefea92ba33947e7f3d93485989a456f95ac3f05bddd739ca50150ca648814dd2cb4e388b7628307ea96b41be5370c815462b8870e705cae9f8f468b54abe11609d19718fb2b9babcb4b1366c71eb4bab76d817fd8d4a3114e8d75bb9896ec29432fac54b1f73a4df58f9c29377377aea2f51261e1e1d16777086772127454a34872d4fcd22"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_BITWISE_DATA={0x8c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x87, 0x1, "61dc0bf91a5c4da18688e32ccd6240029ef41fe980cb743fe9cba8a09a936e0dd9501c787c6078e6ec38a33e5b763e709cfd130a808642c5b466180972d2608f9ac3690dcd77d57b54e75731c9ca7dd69fd6ad951a7a265440db3494a3d57597d0b5e81ba779aebb1b017197803fef1be4031e24a2cfa2be95cb571d09002b54d5c9a3"}]}, @NFTA_BITWISE_DATA={0x3c8, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x79, 0x1, "cbe044dfca1beb808c4dd66b23c6383b6cb99df515ec5969ce2bfdb263c481e673be3d2b41c0903085c8b0f32c19d41218a0a81e076e03569f482248bcbb8616353b45d5e670b19cfbda94f864153322adf81b1a5a138420aee936806132016693d61b799cffd3fe5c689bc51f1609036fd4e0c93a"}, @NFTA_DATA_VALUE={0xa3, 0x1, "b380a73f4f1bf8fd4360d041c0a6afba7ff04885b52cb783c9ae7c89af5d6c00a103a30f41a1c902763f1f035647acb2bcbf596d84733279a56936c11ba09d0defca0467dd8b7e3743c05c5ecaa546c6d2c42a7ccd3403f0a69a67dca216266d189a8d7af6918bccc78358fcbcdee95f4bb542a9a9f5de41bbc839cfe146b30528d7cd062d1e1e1c3fd244804d54d6eda28a665ccd61168cbbb8e11979cabd"}, @NFTA_DATA_VALUE={0xc5, 0x1, "aa2e4dcff0da3878dc730b55ab2557f81deea96d7c67dfae4e9c402079a33bfb5763d52f4b563b26a24f308195e15c7673112d23e71dcf42e20cb97ac968df63bc93347173b6e00ed2fbda68907c62c5303f80872e6474fe960736d1ffbb8c46adada3428543f6ea9a12607f1139d0d6309f59da4f59eb9e0e473543621c15e7f62e5578e898fc55249c56cb49a43ea2b0afa25293b89c63ce2d98ea5ffeb4e3c3e3ce77b973b7475d66527407d477393d1b19faaccd29d5a0219aae2af5f4464a"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x76, 0x1, "f4e6e36a554895ea07d0c5cef609c4adee023b7c20051d9242e292f18ebdbba6636c3f3690f0597dbd0c4001aa6d24928b59cc77a9c9ca7e80a6715c0347b7f91ca821e7f2575690286071f2572756b8f0f83fd39e5c8fb878dd4001a44c1c59894a5dcd1faf3acfad3d2c1262d6846d6bc2"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "fe4b0ad179cb293f5167b7f8cb6af3b800690124b8a3ad091ecfbca513fd19d21b472492323b5e79cbee8dcf845aa08af6afab20fdced45243dddfdfc3c80c6aed5b6fd2196da09ca2b3f547211c55c3bb2ad2361a12b62b7b9b097c3d92f413d5e6d263858fb5b4434135fb8f5bbccbfb429b2b0db553886a171e362c8baadc700de81f49886de7c53cf26ed9b9c9734feaaba04c664e53939c59f07ccfa65774788a2166d439efeda235472e4432b3c7cebfb83ee373"}, @NFTA_DATA_VALUE={0x1d, 0x1, "f177bb5bc0c24f7a6a287a249545fb2245255963830a7fc42d"}]}]}}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1728}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.115980547s ago: executing program 2 (id=5098): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1008}, 0x4) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b3000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.114355341s ago: executing program 3 (id=5099): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) r1 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000700), 0x5003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, &(0x7f0000000380), &(0x7f00000004c0)=""/172}, 0x20) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000001440)={{r1}, 0x8, &(0x7f0000001400)=[0xff, 0x5a9, 0x1, 0x6, 0x40, 0xfffffffffffffff8, 0x6fbf, 0x3ff], 0xfffffffffffffffa}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1b00000000000000000000000180000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000009b713dd5a04c58caf07d000063d6ea7a1d00000000002000"/45], 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000c40)={r2, &(0x7f00000000c0)='^@\xb3%\x00', 0x80, &(0x7f0000000100)={@align=0xb, {0x4, 0x4, 0x5, 0x386}}, 0x3, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0x1}, &(0x7f0000000c80), &(0x7f0000000cc0)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'batadv_slave_1\x00'}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000ec0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001000)=@o_path={&(0x7f0000000fc0)='./file0\x00', 0x0, 0x4008, r2}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001080)=@o_path={&(0x7f0000001040)='./file0\x00', 0x0, 0x4010, r2}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0x23c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001140)={{}, &(0x7f00000010c0), &(0x7f0000001100)='%pB \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x58, &(0x7f0000000300)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001200)={{0x1}, &(0x7f0000001180), &(0x7f00000011c0)='%-5lx \x00'}, 0x20) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r6) socket(0x15, 0x5, 0x0) 1.051374018s ago: executing program 0 (id=5100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newchain={0x14a4, 0x64, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0x6}, {0xa}, {0x5, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1e}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff000000}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @filter_kind_options=@f_bpf={{0x8}, {0x1404, 0x2, [@TCA_BPF_ACT={0x13ec, 0x1, [@m_tunnel_key={0x174, 0x1f, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x10001}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x14}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xffff}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0xa, 0x5, 0x10, 0x9}, 0x1}}]}, {0xdb, 0x6, "0fd51ab9d7986fa3a4069e054262d92f6fc713c7ebc9f571f7a8f01293fd2a374fc4ee8f79a4af6af85e63a01c692a58fe6c25107c6c2249dca38f507fdb79fcb66f929dffb019a60e50d8ed79f3f07468ffe4f0aa266aa4d6b4d91003210e3f2c168eb8fadfb60f24a250bad0cbe7d384b12ba56099b0559cdf472c014752277204adfe797ccd8213cf86cc1e5eedc14e064df1d1c01f0f9eb5352def79ac763718d2e6050a203d67c2a146a5be5378f4e3c4c1a50b2ebf452cccd0b43ef95743b0f900dc0e2748e2275ce505569e10dd8be2a89bda98"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x108, 0x1c, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xd}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb, 0x5, 0xffffffffffffffff, 0x1, 0x9}}]}, {0xba, 0x6, "998aad1b32bfc6ae2f98085098a666e1ee89fc6d021211668fc5422b2938513f2a7487852b04a595ca8392b979478c13b27a1da240a77f87ea1b81537818d64bd873ec53669684b49de413da0504b2a155966fee11736daebaa22691d2b3ac77234c474fded734b4a3809997591b2f1266655e37e20e056880ffc5e585e25c5625bc8ee06a2de70610eddce530f9df30de6ffff9c09a057dc28560a941e591ce66e3d06e1c027b35fca1c30e0dc22f15bee682b80ce3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x116c, 0x1c, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x9, 0x3, 0x4, 0x2}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7, 0xffffffffffffffff, 0x9, 0x4d7a}, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xe646, 0x3, 0x5a5d, 0xb62}, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7ff, 0x8, 0x1, 0x3}, @remote, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x1, 0x0, 0x4ee, 0x9}, @local, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x9a, 0xffffffffffffffff, 0x8000, 0x6}, @local, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7, 0xffffffffffffffff, 0xa4}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x6, 0x0, 0x7f, 0x3}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x14a4}}, 0x20000000) 1.000607714s ago: executing program 2 (id=5101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x92, 0x33}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4c800) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc005}, 0x40) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x2404c080}, 0x28000004) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x1d, r5}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x4, 0xa84, 0x80000001, {r6, r7/1000+60000}, {0x0, 0x2710}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x0, 0x1}, 0x1b, 0x1, 0x0, 0x0, "0c6f296cbef58caa66d7f56427a444a984a52ef71093339f817509c56067bc9409ea4ca67223a509e61300138d3a438c0b3c5a2e9a8cbaff4a5489cfc7f43882"}}, 0x80}, 0x1, 0x0, 0x0, 0x28000}, 0x8090) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r8, &(0x7f0000000a00)={&(0x7f00000005c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000600)="670eeeb4bebb98b46737715064913f06f9519ab09eb3566966918495f9ca50350e936f827c71b63613ed90eca78ed23bf025bde8806e765628986fe818f9abd290f9f6e080861cb0f7d0c6ab9bbb48f69458618d723308e496033fd97d1f49524d8bd8d4e57dbb2bfe26439bfede80b5031f8d60c44d208f2506befc91b21a5a98cb46cdce6f4d292948fd7c302c7eecdd", 0x91}, {&(0x7f00000006c0)="fa08b5bef94f0cab2be2e6e43e17bc5fd8df6df1f68c3cd63996abe1af33e311e7df53067845cb13aef344b41a40d8646b3188ba1cb2add6312b5225066eb7a6b52a9e16cf8800e9d3065d8fd1c9a14463c3f9b703349ee2f31be86f4dd241ac7ba463cd1e3fc85b0deab5ed45d9399ae719964eacaf3a6c92f0ce0395b0db73088b40eb696a34e9e6b3b1362bce70580f48d7a5c452c9f812be60fe6e5710faa54b0c794574de64c7eca15287903e3d3e02eae81b9eba660297cbb8a4f72e9d0865386fbfe48e67ce5a9e3b14312c7094561be8b93a8a4bdf753262c245a7fbf02934a8", 0xe4}, {&(0x7f00000007c0)="320a7322d4e5e0afc9a5b6663b709275711f4d4904b379aa640a91640c865d572cb03fcbf022692249638f4271e8e70b1280ee3144901ead17850a427093cd46e9bef64337e4c643011fc46ab25b809a07e3d5ac9c00ef6e19cac9e11ee41a19f41615050c938e8f78dd3714d1d0aeefb91a0713ccb93d8797d00d29d1ac675c43279c9f8d9e44e3d5df1b26d8d7e49f2f18a1f39f39eb4b5c3ff000a94fbf3c74b01efb0a5dc34a682d08d59474383229226929a81a52330492ff07a31a5036a5fb061d421cc480698d3d2107ba31cb94", 0xd1}], 0x3, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010102, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd9e50d8}}], 0xc8}, 0x60) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20}, 0x1) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200040c5}, 0x0) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f0000000e40)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000e80)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000001080)={'batadv_slave_1\x00'}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r11, 0x6612) ioctl$OCFS2_IOC_GROUP_ADD64(r10, 0x40186f03, &(0x7f00000010c0)={0x3, 0xffff, 0xd7a, 0x1}) r12 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r12, 0x110, 0x5, &(0x7f0000001100)=[0x1, 0x4], 0x2) r13 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r13, &(0x7f0000001400)={&(0x7f0000001140), 0xc, &(0x7f0000001280)=[{&(0x7f0000001180)="da2eb5bfcdaf27ca3df8953127d6", 0xe}, {&(0x7f00000011c0)="a412ba4cb2cad62d43ae339706c4e8833ad3e8851c33d501ce817736c65d8f712c0d047e19578691689d03dfec2e9dffdcf44b75dd4436bd7dcbc5197630c924a62576640833a9155fcbcfa94e167eabb6d2c65d635f891d1c363d3e71da00461d0ccbac79a6dc77510c4dec5e33923a902dd01a4e9004582a3a84bf00645213052fed12a1c6c601ffc33f2961f80c4babc2cdf58760462d7e9ca14416f86895ecf371dced1a", 0xa6}], 0x2, &(0x7f00000012c0)=[{0xa0, 0x111, 0x6, "6c7a49fe7e760cdd459dce96a794bcae787957b588d3500f8d4a48e1eb4fc5b9ae75c9a1854fca8a670e07cc8a2fa9d2cc24385e67db37d275488158a356ede30c81164bffc9acd41aafd8acd1de0dabecbd8a3197827406c2b5f9c5815637005e1fb056f338a5c3391c7c530869b8f2a12ff757a5fb247ec562e0defe57bc457a6fc7db2ca03f2d0c"}, {0x90, 0x114, 0x59, "0a2f05be6cded5ba810999aa6163f80986747cc8dc9f2eb37598f6ac1007d9fcb441ace43f1c5af1ed9e8fb49208cb77011a8e7cf791f1e16991e90e208b15d4ab881a1ec199546cb2b004f7fbd2af27bb4ba158991aa39fcc859854ffad92f11119a3eb545fe3b1b4278e1219e6ff2f9936b52e45777d7a7f"}], 0x130, 0x20004000}, 0x38) clock_gettime(0x0, &(0x7f0000001480)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001440)={0x1d, r5}, 0x10, &(0x7f0000001540)={&(0x7f00000014c0)={0x1, 0x3, 0x8001, {r14, r15/1000+60000}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1}, 0x4, 0x1, 0x0, 0x0, "94fb5c99f8806d574a0e3b57db1935857acc3b554b7437913bb7b90c838dc42368865e1d12e0e609a87d2b777241cf8d86fff21ca90b199a341504f97aab9491"}}, 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) 897.563534ms ago: executing program 0 (id=5102): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@etimer_thresh={0x8, 0xc, 0x2}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}}, 0x4810) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) r9 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) 896.52941ms ago: executing program 1 (id=5103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r1, 0x89e9, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xbc}}, 0x0) 894.717257ms ago: executing program 3 (id=5104): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x700}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x10001, 0x41, @private2, @remote, 0x7800, 0x7800, 0xffffffdf, 0x5}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x90) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xee, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00'}, 0x18) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x6, 0x8}, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x9, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x1, 0xc, 0x4, 0xb, 0x0, 0x8}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}], &(0x7f0000000000)='GPL\x00', 0xd5f5, 0xee, &(0x7f00000001c0)=""/238, 0x41000, 0x48, '\x00', r1, @lirc_mode2, r2, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x7, 0x3, 0x13b00000}, 0x10, r4, r0, 0x3, &(0x7f0000000640)=[r5, r6, r7, r8, r9], &(0x7f0000000680)=[{0x5, 0x1, 0x0, 0xb}, {0x4, 0x1, 0x4, 0x5}, {0x5, 0x2, 0x6, 0x6}], 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) 767.565816ms ago: executing program 2 (id=5105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000300)=r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x40000002) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000000)={0x10, @short}, 0x2) poll(&(0x7f0000000000), 0x0, 0x3d9) 759.349122ms ago: executing program 1 (id=5106): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket(0x22, 0x2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000200)={0x0, 'syzkaller1\x00', {0xfffffffd}}) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x0, @broadcast}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0xa8, &(0x7f00000002c0)=""/168, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7}, 0x94) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) 549.716292ms ago: executing program 4 (id=5107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000edc5cf3198999bfa000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000000000"], 0x44}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}, {0x8, 0x15, 0x96}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xd}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6}, {0x8, 0x15, 0x401}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004840}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff", 0x10}], 0x1}, 0x5) socket$inet6_icmp(0xa, 0x2, 0x3a) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x4, 0x4, 0xdfdd, 0x14, 0x1}, 0x48) ioctl$sock_inet6_SIOCDIFADDR(r11, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x30}, 0x17}) 534.266493ms ago: executing program 0 (id=5108): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r2, 0x952de000) r3 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0), 0x45, 0x0, 0x0, 0x1f00c00e}, 0x0) 443.993306ms ago: executing program 3 (id=5109): getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000002e40)=0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @loopback}, &(0x7f0000000040)=0xc) 442.91939ms ago: executing program 1 (id=5110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="7cc2fd", 0x3}], 0x1, 0x0, 0x0, 0x40844}], 0x1, 0x4000040) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c75b4d92f009478c4f29aacaf53ff3f029842400000000100ad5f7b11b19e667537e43ae7", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) 319.061154ms ago: executing program 0 (id=5111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x5, @private2, 0x9}]}, &(0x7f0000000080)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000002c0)={r3, 0x4, 0x6, 0x80000001}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf07, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x43, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x7fffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8881}, 0x0) 317.424626ms ago: executing program 3 (id=5112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}]}], {0x14}}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}]}], {0x14}}, 0x78}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x24}, 0x94) (async) 215.384185ms ago: executing program 4 (id=5113): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f000000a240)=0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 159.611413ms ago: executing program 1 (id=5114): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 153.535099ms ago: executing program 3 (id=5115): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000001340)=[{&(0x7f0000000340)="a272252e0538609eebff320965e838f376fc08388818567eb6182f65e9b636e9f581d8bdb5014619cc5a6aeb3e671cf9cf5f03910d05a1ca48d707d4ca41b9b249e11391ab2cf3098ea7144b2b2e0e08b6e12d2531da42957bb8a50460b2770cb6ca186bf53d95452c541bbed7117f4f9ada020f6d7eb66444395fc7edb7ef711425507165065194b2df06156f9b737b75020d4770db7786609d4ee22e9aff1ea6de97524de147d9e11bf0c367a52ea0bd8f61ad02e83eed760a86735e19dcbe4eb5117220836ab3461a337630df15f5f4746d7acdb69db27bed0d31a0d9920a06e487cd0fbab852", 0xe8}], 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000540)={0x94, r7, 0x1, 0x0, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x50, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf7b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17612460}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fd6c6e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x657}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb19}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64223750}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x300}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x94}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x80, 0x7e, 0xb}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) getsockopt$inet_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xd, &(0x7f0000000f80)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 111.406032ms ago: executing program 0 (id=5116): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x612, &(0x7f0000000d40)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "98ce9c", 0x5dc, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts={0x3b}, @hopopts={0x2b, 0x8, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x13}, @enc_lim={0x4, 0x1, 0x94}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x20, {0x3, 0x6, 0xb2, 0x0, [0xc5c31af, 0x8001, 0x0]}}, @jumbo={0xc2, 0x4, 0x1}]}, @routing={0x3c, 0x0, 0x1, 0x94}, @srh={0xff, 0xe, 0x4, 0x7, 0xe, 0x40, 0xfed9, [@local, @dev={0xfe, 0x80, '\x00', 0x42}, @private1, @mcast2, @mcast1, @empty, @empty]}, @dstopts={0x33, 0xa, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0xc, [0x2, 0x9, 0xc8ac, 0x3c]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0xc, 0xc, [0x5, 0x4403aad3, 0x7, 0x4]}}, @pad1]}, @hopopts={0x9, 0x75, '\x00', [@jumbo={0xc2, 0x4, 0x42}, @generic={0x81}, @enc_lim, @calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0x4, [0x8, 0x8000, 0x1, 0x1, 0x9, 0x80000000, 0x7, 0x0]}}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x7, 0x34e, "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"}]}], @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x400, 0x0, 0x1, 0x6, 0x0, 0x2, 0x4e23, 0x4e22, 0x0, 0x3, 0x0, 0x0, 0x1}, [{0x3, 0xa, 0x4, 0x62, 0x7fff, 0x5, 0x6, 0x10001}, {0x4, 0x5, 0x40, 0x3, 0x8, 0x6, 0x0, 0x8}, {0x10000, 0x3, 0x0, 0xf8b0, 0x6, 0x400, 0x0, 0x6}, {0x7, 0x7, 0x0, 0x8, 0x10, 0x18000000, 0x6}, {0xf, 0x8001, 0x1, 0x80, 0x80000001, 0x800, 0x9, 0xfffff81}, {0x8, 0x8, 0x8, 0x400, 0x4cee1ac4, 0x1b97, 0x4, 0x1}, {0x1, 0x7, 0x2, 0x10001, 0xd3fb, 0x8, 0x1, 0x400}]}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@i, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x7, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x70}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x2, 0x0, 0x6, 0x0, 0x2}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 82.483347ms ago: executing program 4 (id=5117): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016002000b40000007f00000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket$kcm(0x2, 0x3, 0x106) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000706010200000000000000000100000208000642ffffffff115ac00acff632d55519e76d18930a449ade7e36d67b4813506a10eccfcca318a766dec3a67092cc073ea07d85003c86596331ade840055f02eea67688a699ba503739d3e8e769d850f7db3d82711de531b8db0f27eabd620d09768b9b40383db8c1a31cef8b917870eed87c95854dec7697e9b5c681ee059709605dcde935c17f41"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0xfffffffffffffe1c}}, 0x8004) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a09040000000000000000020000200900020073797a32000000000900010073797a300000000014000480100001800b0001006578746864720000000000030000000000000000000000000500000a"], 0x68}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000340)) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0600"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000025000100fdffffff0000000002020054"], 0x14}}, 0x20000090) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x801, 0x84) 0s ago: executing program 1 (id=5118): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001800010000000000800000000200000000000000100016800c0008800800018000000020e30df8a99bfdaefe426c"], 0x34}}, 0x4000000) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0xc2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000001}, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}, 0x1, {[0xffffffff, 0x8, 0x395, 0x4, 0x5, 0x3, 0x10, 0xfffff001]}}, 0x5c) kernel console output (not intermixed with test programs): [T18533] netlink: 'syz.4.3276': attribute type 3 has an invalid length. [ 426.242949][T18538] team0: Port device team_slave_0 removed [ 426.263381][T18513] veth0: left promiscuous mode [ 426.522804][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.567521][T18558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3283'. [ 426.577566][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 426.602968][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 426.684629][ T5941] IPVS: starting estimator thread 0... [ 426.764835][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.786721][T18568] IPVS: using max 25 ests per chain, 60000 per kthread [ 426.792143][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 426.802080][T18571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'. [ 426.805135][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 426.929195][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.946906][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 426.960062][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 427.038415][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.048770][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 427.059715][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 427.254185][T18585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3292'. [ 427.338273][T18591] netlink: 'syz.2.3292': attribute type 5 has an invalid length. [ 427.353477][T18591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 427.448490][T18596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3295'. [ 427.657927][T18609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3299'. [ 427.780865][ T12] tipc: Disabling bearer [ 427.806844][ T12] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 428.292183][ T12] bond1 (unregistering): Released all slaves [ 428.306379][ T12] bond2 (unregistering): Released all slaves [ 428.320533][ T12] bond3 (unregistering): Released all slaves [ 428.340886][ T12] bond4 (unregistering): Released all slaves [ 428.354200][ T12] bond5 (unregistering): Released all slaves [ 428.371131][ T12] bond6 (unregistering): (slave veth5): Releasing active interface [ 428.411020][ T12] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 428.421635][ T12] bond6 (unregistering): Released all slaves [ 428.436163][ T12] bond7 (unregistering): Released all slaves [ 428.451059][ T12] bond8 (unregistering): Released all slaves [ 428.464675][ T12] bond9 (unregistering): Released all slaves [ 428.496946][T18610] ip6erspan0: entered allmulticast mode [ 428.521533][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3300'. [ 428.623030][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3300'. [ 428.716714][ T7446] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.740860][ T7446] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.759125][ T12] tipc: Disabling bearer [ 428.781142][ T12] tipc: Left network mode [ 428.881180][ T7446] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.908504][ T7446] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.105288][T18647] xt_hashlimit: size too large, truncated to 1048576 [ 429.370560][T18653] netlink: 'syz.2.3306': attribute type 61 has an invalid length. [ 429.379054][T18653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3306'. [ 429.428882][T18653] veth0_to_team: entered allmulticast mode [ 429.904316][T18673] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3309'. [ 430.016557][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 430.024703][ C1] lec:lec_tx_timeout: lec0 [ 430.029735][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 430.176002][T18677] syzkaller0: entered promiscuous mode [ 430.198565][T18677] syzkaller0: entered allmulticast mode [ 430.563668][T18695] netlink: 'syz.2.3316': attribute type 10 has an invalid length. [ 430.575935][T18695] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.588645][T18695] bridge_slave_1: left allmulticast mode [ 430.594389][T18695] bridge_slave_1: left promiscuous mode [ 430.600609][T18695] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.615212][T18695] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 431.713462][T18636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.026661][T18718] netlink: 'syz.1.3321': attribute type 61 has an invalid length. [ 432.334552][T18346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 432.491325][T18725] tipc: Can't bind to reserved service type 2 [ 432.502326][T18346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 432.576905][T18346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 432.594705][T18733] __nla_validate_parse: 1 callbacks suppressed [ 432.594726][T18733] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3326'. [ 432.610115][T18735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.692785][T18346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 432.811424][ T12] hsr_slave_0: left promiscuous mode [ 432.819697][ T12] hsr_slave_1: left promiscuous mode [ 432.933189][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 433.385161][T18346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.510706][T18346] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.537156][T18770] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3334'. [ 433.554568][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.561717][ T7449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.647207][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.654485][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.820305][ T12] IPVS: stop unused estimator thread 0... [ 434.539172][T18807] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.3344'. [ 434.625263][T18346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.748790][T18346] veth0_vlan: entered promiscuous mode [ 434.765226][T18346] veth1_vlan: entered promiscuous mode [ 434.841466][T18346] veth0_macvtap: entered promiscuous mode [ 434.861633][T18820] netlink: 'syz.2.3349': attribute type 10 has an invalid length. [ 434.865206][T18346] veth1_macvtap: entered promiscuous mode [ 434.888523][T18817] netlink: 'syz.3.3348': attribute type 12 has an invalid length. [ 434.896859][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3348'. [ 434.916137][T18820] team0: Port device dummy0 added [ 434.968219][T18346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.992326][T18346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.036271][T17980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.037014][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 435.053107][ C1] lec:lec_tx_timeout: lec0 [ 435.058371][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 435.077909][ T7449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.091058][ T7449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.152078][T18824] bond2: option lp_interval: invalid value (0) [ 435.159407][T18824] bond2: option lp_interval: allowed values 1 - 2147483647 [ 435.172956][T18824] bond2 (unregistering): Released all slaves [ 435.285982][T18826] bond2: option lp_interval: invalid value (0) [ 435.292794][T18826] bond2: option lp_interval: allowed values 1 - 2147483647 [ 435.307963][T18826] bond2 (unregistering): Released all slaves [ 435.308441][T18834] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3354'. [ 435.358062][ T7449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.604247][ T7449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.633425][ T7449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.662086][T18853] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3358'. [ 435.684488][T18848] bridge_slave_0: left allmulticast mode [ 435.698022][T18848] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.718938][T18848] bridge_slave_1: left allmulticast mode [ 435.724633][T18848] bridge_slave_1: left promiscuous mode [ 435.731545][T18848] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.755608][T18848] bond0: (slave bond_slave_0): Releasing backup interface [ 435.774872][T18848] bond0: (slave bond_slave_1): Releasing backup interface [ 435.827008][T18848] team0: Port device team_slave_1 removed [ 435.833774][T18848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.847309][T18848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.857050][T18848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.866275][T18848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.890327][T18848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.008326][T17981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.025067][T17981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.135971][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3364'. [ 436.182748][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3364'. [ 436.204597][T18883] IPVS: set_ctl: invalid protocol: 135 172.30.1.3:20003 [ 436.234066][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3364'. [ 436.801316][T18925] syzkaller0: entered allmulticast mode [ 436.881012][T18917] syzkaller0: left allmulticast mode [ 436.914902][T18929] netlink: 'syz.1.3377': attribute type 7 has an invalid length. [ 436.924275][T18929] netlink: 'syz.1.3377': attribute type 8 has an invalid length. [ 436.972428][T18935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.979750][T18935] IPv6: NLM_F_CREATE should be set when creating new route [ 437.102133][T18942] netlink: 'syz.3.3380': attribute type 10 has an invalid length. [ 437.124079][T18942] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 437.275954][T18952] bond2: option all_slaves_active: invalid value (222) [ 437.317305][T18952] bond2 (unregistering): Released all slaves [ 437.403913][T18957] Unsupported ieee802154 address type: 0 [ 437.501608][T18964] team0: Port device dummy0 removed [ 437.524920][T18964] bridge_slave_0: left allmulticast mode [ 437.559658][T18964] bridge_slave_0: left promiscuous mode [ 437.565521][T18964] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.625874][T18964] bond0: (slave bridge_slave_1): Releasing backup interface [ 437.675449][T18964] bond0: (slave bond_slave_0): Releasing backup interface [ 437.684677][T18970] __nla_validate_parse: 7 callbacks suppressed [ 437.684700][T18970] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3387'. [ 437.711754][T18964] bond0: (slave bond_slave_1): Releasing backup interface [ 437.745588][T18964] team0: Port device team_slave_0 removed [ 437.761529][T18977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3387'. [ 437.778932][T18964] team0: Port device team_slave_1 removed [ 437.789299][T18964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.818066][T18964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.830005][T18964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.839278][T18964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.849383][T18964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 437.872688][T18967] team0: Mode changed to "activebackup" [ 437.891638][T18989] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 438.347743][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3403'. [ 438.361977][T19012] netlink: 'syz.2.3401': attribute type 1 has an invalid length. [ 438.367070][T19016] netlink: 'syz.2.3401': attribute type 1 has an invalid length. [ 438.564182][T19028] xt_l2tp: v2 tid > 0xffff: 1114244 [ 438.582522][T19012] vxcan1: Master is either lo or non-ether device [ 438.920510][T19050] syzkaller0: entered promiscuous mode [ 438.926172][T19050] syzkaller0: entered allmulticast mode [ 439.112121][T19058] x_tables: duplicate underflow at hook 2 [ 439.418961][T19069] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 439.850951][T19093] netlink: 'syz.2.3424': attribute type 1 has an invalid length. [ 439.906810][T19095] netlink: 'syz.0.3423': attribute type 3 has an invalid length. [ 439.925464][T19095] sctp: [Deprecated]: syz.0.3423 (pid 19095) Use of int in maxseg socket option. [ 439.925464][T19095] Use struct sctp_assoc_value instead [ 440.066546][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 440.074645][ C1] lec:lec_tx_timeout: lec0 [ 440.079544][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 440.275209][T19122] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3430'. [ 440.812202][T19147] netlink: 'syz.1.3437': attribute type 2 has an invalid length. [ 440.873191][T19149] tipc: Started in network mode [ 440.883300][T19149] tipc: Node identity ae251378872d, cluster identity 4711 [ 440.917021][T19149] tipc: Enabled bearer , priority 0 [ 440.967663][T19149] +: renamed from syzkaller0 [ 441.003234][T19149] tipc: Disabling bearer [ 441.536394][T19194] syzkaller0: entered promiscuous mode [ 441.559668][T19194] syzkaller0: entered allmulticast mode [ 441.718204][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3456'. [ 441.897880][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 441.933018][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 441.965862][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3458'. [ 442.037917][T19219] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 442.065885][T19226] netlink: 'syz.4.3462': attribute type 1 has an invalid length. [ 442.590547][T19257] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3472'. [ 443.130926][T19268] syz.4.3474 (19268) used greatest stack depth: 17472 bytes left [ 443.190202][T19281] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3476'. [ 443.275227][T19285] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 443.314702][T19285] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 443.360907][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3477'. [ 443.637643][T19308] gtp0: entered allmulticast mode [ 443.678183][T19308] syz_tun: entered allmulticast mode [ 443.688361][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 443.715948][T19314] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 443.737888][T19307] syz_tun: left allmulticast mode [ 443.745254][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 443.785648][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 443.821733][T19314] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 443.876631][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 444.171341][T19338] syzkaller1: entered promiscuous mode [ 444.184617][T19338] syzkaller1: entered allmulticast mode [ 444.191879][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3489'. [ 444.336835][T19350] openvswitch: netlink: Flow actions attr not present in new flow. [ 444.544806][T19358] netlink: 'syz.2.3496': attribute type 4 has an invalid length. [ 444.596822][T19364] netlink: 'syz.2.3496': attribute type 4 has an invalid length. [ 444.633505][T19363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3498'. [ 444.644552][T19363] netlink: 'syz.3.3498': attribute type 16 has an invalid length. [ 444.661703][T19363] netlink: 'syz.3.3498': attribute type 3 has an invalid length. [ 444.671014][T19363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3498'. [ 444.769520][T19364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3496'. [ 444.843171][T19379] sctp: [Deprecated]: syz.0.3502 (pid 19379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.843171][T19379] Use struct sctp_sack_info instead [ 444.898040][ T49] bond1: (slave bridge1): link status up again after 0 ms [ 444.927192][ T49] bond1: (slave bridge1): link status up again after 0 ms [ 444.946817][T17980] bond1: (slave bridge1): link status up again after 0 ms [ 444.979006][ T49] bond1: (slave bridge1): link status up again after 0 ms [ 445.016774][ T49] bond1: (slave bridge1): link status up again after 0 ms [ 445.034271][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 445.086591][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.094696][ C1] lec:lec_tx_timeout: lec0 [ 445.099691][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 445.155578][T19391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.258723][T19401] netlink: 'syz.1.3510': attribute type 10 has an invalid length. [ 445.296647][T19401] dummy0: entered promiscuous mode [ 445.318343][T19401] bridge0: port 3(dummy0) entered blocking state [ 445.368942][T19401] bridge0: port 3(dummy0) entered disabled state [ 445.375525][T19401] dummy0: entered allmulticast mode [ 445.451116][T19401] bridge0: port 3(dummy0) entered blocking state [ 445.457709][T19401] bridge0: port 3(dummy0) entered forwarding state [ 445.697104][T19425] netlink: 'syz.1.3514': attribute type 62 has an invalid length. [ 445.903977][T19440] netlink: 'syz.2.3521': attribute type 29 has an invalid length. [ 445.925313][T19441] netlink: 'syz.2.3521': attribute type 29 has an invalid length. [ 446.087820][T19455] 8021q: VLANs not supported on lo [ 446.347816][T19472] netlink: 'syz.3.3528': attribute type 1 has an invalid length. [ 446.587645][T19482] netlink: 'syz.2.3531': attribute type 5 has an invalid length. [ 446.674190][ T7449] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.736105][ T7449] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.773008][ T7449] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.805151][ T7449] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.861962][T19493] lo speed is unknown, defaulting to 1000 [ 446.899240][T19494] netlink: 'syz.3.3536': attribute type 13 has an invalid length. [ 446.998825][T19494] gretap0: refused to change device tx_queue_len [ 447.255524][T19516] netlink: 'syz.4.3542': attribute type 11 has an invalid length. [ 447.515410][T19528] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 447.781097][T19554] xt_TPROXY: Can be used only with -p tcp or -p udp [ 447.833589][T19548] lo speed is unknown, defaulting to 1000 [ 447.948033][T19561] veth0_to_batadv: entered promiscuous mode [ 447.954476][T19561] macvlan2: entered allmulticast mode [ 447.960627][T19561] veth0_to_batadv: entered allmulticast mode [ 448.243639][T19580] __nla_validate_parse: 17 callbacks suppressed [ 448.243662][T19580] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3561'. [ 448.340936][T19587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3560'. [ 448.351712][T19589] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3564'. [ 448.360748][T17981] net_ratelimit: 20 callbacks suppressed [ 448.360770][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 448.468995][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 448.513116][T19593] netlink: 'syz.2.3566': attribute type 10 has an invalid length. [ 448.596704][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 448.605764][T19605] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001 [ 448.748023][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 448.810690][T19613] netlink: 'syz.2.3570': attribute type 4 has an invalid length. [ 448.866774][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 448.903805][T19620] syzkaller1: entered promiscuous mode [ 448.909651][T19620] syzkaller1: entered allmulticast mode [ 448.930120][T19623] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 448.942847][T19623] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 448.953453][T19623] netlink: get zone limit has 4 unknown bytes [ 448.996993][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 449.067913][T19629] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3574'. [ 449.107673][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 449.217002][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 449.273157][T19636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.399812][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3578'. [ 449.414486][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3578'. [ 449.918692][T19662] syzkaller1: entered promiscuous mode [ 449.924426][T19662] syzkaller1: entered allmulticast mode [ 450.106806][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 450.114945][ C1] lec:lec_tx_timeout: lec0 [ 450.120194][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 450.555265][T16222] IPVS: starting estimator thread 0... [ 450.599511][T19689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3588'. [ 450.631333][T19688] netlink: 'syz.0.3591': attribute type 4 has an invalid length. [ 450.656662][T19686] IPVS: using max 28 ests per chain, 67200 per kthread [ 450.958597][T19703] x_tables: duplicate underflow at hook 1 [ 450.964603][T19703] x_tables: duplicate underflow at hook 1 [ 450.971190][T19703] x_tables: duplicate underflow at hook 1 [ 450.979995][T19703] x_tables: duplicate underflow at hook 1 [ 450.981488][T19706] h: entered promiscuous mode [ 450.986286][T19703] x_tables: duplicate underflow at hook 1 [ 450.998543][T19703] x_tables: duplicate underflow at hook 1 [ 451.594048][T19742] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3605'. [ 451.598178][T19743] netlink: 'syz.1.3606': attribute type 9 has an invalid length. [ 451.631675][T19743] netlink: 'syz.1.3606': attribute type 11 has an invalid length. [ 451.647114][T19743] netlink: 'syz.1.3606': attribute type 12 has an invalid length. [ 451.666936][T19743] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.3606'. [ 451.686784][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3606'. [ 452.451273][T19786] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 452.920777][T19808] netlink: 'syz.2.3626': attribute type 1 has an invalid length. [ 453.288798][T19823] __nla_validate_parse: 5 callbacks suppressed [ 453.288819][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3631'. [ 453.349159][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3631'. [ 453.374118][T19823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3631'. [ 453.479757][ T7449] net_ratelimit: 32 callbacks suppressed [ 453.479783][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 453.596691][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 453.706920][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 453.714764][T19839] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3637'. [ 453.818800][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 453.946745][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 454.068921][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 454.197043][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 454.307944][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 454.437589][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 454.546853][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 454.584747][T19882] netlink: 'syz.2.3650': attribute type 83 has an invalid length. [ 454.722308][T19886] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3651'. [ 454.748311][T19886] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3651'. [ 454.922572][T19895] syzkaller1: entered promiscuous mode [ 454.935164][T19895] syzkaller1: entered allmulticast mode [ 455.088836][T19911] netlink: 'syz.3.3659': attribute type 1 has an invalid length. [ 455.100998][T19908] syzkaller1: entered promiscuous mode [ 455.107914][T19908] syzkaller1: entered allmulticast mode [ 455.124394][T19911] netlink: 808 bytes leftover after parsing attributes in process `syz.3.3659'. [ 455.126571][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 455.136103][T19911] netlink: 'syz.3.3659': attribute type 3 has an invalid length. [ 455.141528][ C1] lec:lec_tx_timeout: lec0 [ 455.142335][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 455.149865][T19911] netlink: 'syz.3.3659': attribute type 3 has an invalid length. [ 455.171720][T19908] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 455.344549][T19925] netlink: 'syz.3.3663': attribute type 10 has an invalid length. [ 455.387531][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3664'. [ 455.399669][T19925] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.407595][T19925] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.423219][T19925] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.430510][T19925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.438163][T19925] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.445364][T19925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.459022][T19925] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 455.725809][T19942] validate_nla: 1 callbacks suppressed [ 455.725831][T19942] netlink: 'syz.4.3670': attribute type 1 has an invalid length. [ 455.804168][T19942] bond3: entered promiscuous mode [ 455.837215][T19942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.976930][T19953] bond3: (slave bridge0): making interface the new active one [ 455.985010][T19953] bridge0: entered promiscuous mode [ 455.995804][T19953] bridge0: left promiscuous mode [ 456.209271][T19968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 456.219559][T19968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3675'. [ 456.285809][T19976] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3680'. [ 456.879664][T20008] netlink: 'syz.4.3688': attribute type 3 has an invalid length. [ 457.141077][T20017] netlink: 'syz.3.3690': attribute type 1 has an invalid length. [ 457.311647][T20029] netlink: 'syz.1.3694': attribute type 2 has an invalid length. [ 457.335613][T20019] syzkaller0: entered promiscuous mode [ 457.358199][T20019] syzkaller0: entered allmulticast mode [ 457.717393][T20064] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 457.727914][T20064] syzkaller1: Refused to change device type [ 457.762417][T20064] netlink: 'syz.2.3701': attribute type 39 has an invalid length. [ 457.944201][T20070] syzkaller0: entered promiscuous mode [ 457.960490][T20070] syzkaller0: entered allmulticast mode [ 458.525486][T17974] net_ratelimit: 21 callbacks suppressed [ 458.525508][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 458.677115][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 458.771759][T20109] netlink: 'syz.1.3715': attribute type 11 has an invalid length. [ 458.788171][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 458.937534][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 459.059619][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 459.176695][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 459.297071][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 459.417117][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 459.477248][T20145] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 459.478358][T20143] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 459.550209][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 459.621012][T20153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.706861][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 460.196065][T20192] __nla_validate_parse: 5 callbacks suppressed [ 460.196086][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3737'. [ 460.225950][T20194] SET target dimension over the limit! [ 460.256876][T20194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3738'. [ 460.277097][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3740'. [ 460.293003][T20199] x_tables: duplicate underflow at hook 1 [ 460.306348][T20197] vlan2: entered allmulticast mode [ 460.348967][T20197] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 460.400146][T20205] netlink: 'syz.3.3742': attribute type 3 has an invalid length. [ 460.420035][T20205] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3742'. [ 460.523315][T20207] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 460.588853][T20214] netlink: 'syz.0.3744': attribute type 1 has an invalid length. [ 460.663573][T20214] bond1: entered promiscuous mode [ 460.683740][T20214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.738305][T20214] ipvlan2: entered allmulticast mode [ 460.743767][T20214] bond1: entered allmulticast mode [ 460.787890][T20214] bond1: (slave bridge1): making interface the new active one [ 460.808407][T20214] bridge1: entered promiscuous mode [ 460.819333][T20214] bridge1: entered allmulticast mode [ 460.832277][T20214] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 460.926522][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 460.934666][ C1] lec:lec_tx_timeout: lec0 [ 460.940318][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 463.576870][ T49] net_ratelimit: 32 callbacks suppressed [ 463.576893][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 463.706713][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 463.816858][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 463.926714][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 464.036752][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 464.146885][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 464.256721][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 464.376815][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 464.487021][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 464.606778][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 465.966757][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 465.974798][ C1] lec:lec_tx_timeout: lec0 [ 465.979646][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 467.710398][T20255] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3747'. [ 467.750486][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3748'. [ 468.196522][T20287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3755'. [ 468.222171][T20289] netlink: 'syz.3.3756': attribute type 5 has an invalid length. [ 468.518416][T20296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.551863][T20301] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 468.596641][ T7449] net_ratelimit: 34 callbacks suppressed [ 468.596672][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 468.728005][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 468.753077][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3763'. [ 468.856970][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 468.948875][T20321] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3766'. [ 468.958554][T20323] netlink: 'syz.1.3768': attribute type 1 has an invalid length. [ 468.966310][T20323] netlink: 'syz.1.3768': attribute type 1 has an invalid length. [ 468.976910][T20323] netlink: 'syz.1.3768': attribute type 2 has an invalid length. [ 469.000082][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 469.030306][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3766'. [ 469.134458][T20329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3769'. [ 469.170846][T20333] bridge0: entered promiscuous mode [ 469.177301][T20333] macsec1: entered promiscuous mode [ 469.205384][T20333] macsec1: entered allmulticast mode [ 469.225757][T20333] bridge0: entered allmulticast mode [ 469.245043][T20333] bridge0: port 1(macsec1) entered blocking state [ 469.253227][T20333] bridge0: port 1(macsec1) entered disabled state [ 469.278388][T20333] bridge0: left allmulticast mode [ 469.285221][T20333] bridge0: left promiscuous mode [ 469.327103][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 469.357607][T20333] bridge0: entered promiscuous mode [ 469.363227][T20333] macsec1: entered promiscuous mode [ 469.370750][T20333] macsec1: entered allmulticast mode [ 469.376201][T20333] bridge0: entered allmulticast mode [ 469.383247][T20333] bridge0: port 1(macsec1) entered blocking state [ 469.390237][T20333] bridge0: port 1(macsec1) entered disabled state [ 469.401230][T20333] bridge0: left allmulticast mode [ 469.406448][T20333] bridge0: left promiscuous mode [ 469.436755][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 469.444966][T20341] syzkaller0: entered promiscuous mode [ 469.453984][T20341] syzkaller0: entered allmulticast mode [ 469.488631][T20337] syzkaller0: entered promiscuous mode [ 469.514095][T20337] syzkaller0: entered allmulticast mode [ 469.542751][T20333] bridge0: entered promiscuous mode [ 469.548697][T20333] macsec1: entered promiscuous mode [ 469.554114][T20333] macsec1: entered allmulticast mode [ 469.572068][T20350] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 469.578662][T20333] bridge0: entered allmulticast mode [ 469.582234][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3776'. [ 469.598000][T20350] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 469.599401][T20333] bridge0: port 1(macsec1) entered blocking state [ 469.607178][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3776'. [ 469.618125][T20333] bridge0: port 1(macsec1) entered disabled state [ 469.628325][T20350] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 469.636118][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3776'. [ 469.645683][T20333] bridge0: left allmulticast mode [ 469.645767][T20350] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 469.652208][T20333] bridge0: left promiscuous mode [ 469.664717][T20350] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 469.673188][T20350] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 469.773237][T20333] bridge0: entered promiscuous mode [ 469.810115][T20333] macsec1: entered promiscuous mode [ 469.815545][T20333] macsec1: entered allmulticast mode [ 469.828142][T20333] bridge0: entered allmulticast mode [ 469.834193][T20333] bridge0: port 1(macsec1) entered blocking state [ 469.841091][T20333] bridge0: port 1(macsec1) entered disabled state [ 469.889881][T20333] bridge0: left allmulticast mode [ 469.895216][T20333] bridge0: left promiscuous mode [ 469.937029][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 469.964562][T20333] bridge0: entered promiscuous mode [ 469.971119][T20333] macsec1: entered promiscuous mode [ 469.979759][T20333] macsec1: entered allmulticast mode [ 469.985087][T20333] bridge0: entered allmulticast mode [ 469.992722][T20333] bridge0: port 1(macsec1) entered blocking state [ 470.000873][T20333] bridge0: port 1(macsec1) entered disabled state [ 470.064622][T20333] bridge0: left allmulticast mode [ 470.070464][T20333] bridge0: left promiscuous mode [ 470.149453][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 470.436679][T17980] bond1: (slave bridge1): failed to get link speed/duplex [ 470.465620][T20367] udevd[20367]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 470.498269][T20367] udevd[20367]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 470.530227][T20382] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 470.545534][T20382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.800538][T20402] x_tables: duplicate underflow at hook 2 [ 470.986757][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 470.994861][ C1] lec:lec_tx_timeout: lec0 [ 470.999575][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 471.863765][T20466] syzkaller0: entered promiscuous mode [ 471.875464][T20466] syzkaller0: entered allmulticast mode [ 472.043328][T20474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.683565][T20513] hsr_slave_0: left promiscuous mode [ 472.711759][T20513] hsr_slave_1: left promiscuous mode [ 472.861287][T20530] lo speed is unknown, defaulting to 1000 [ 473.114516][T20545] __nla_validate_parse: 122 callbacks suppressed [ 473.114538][T20545] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3843'. [ 473.185431][T20548] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3842'. [ 473.364777][T20556] validate_nla: 63 callbacks suppressed [ 473.364799][T20556] netlink: 'syz.3.3847': attribute type 1 has an invalid length. [ 473.384568][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3847'. [ 473.395696][T20556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3847'. [ 473.492711][T20558] lo: entered promiscuous mode [ 473.510749][T20558] Cannot find del_set index 1 as target [ 473.513151][T20530] netlink: 'syz.0.3838': attribute type 4 has an invalid length. [ 473.545614][T20530] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3838'. [ 473.706816][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3850'. [ 473.753058][T20563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.789798][T20563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.817835][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3852'. [ 473.883444][T20576] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 473.949234][T20576] bond2: (slave lo): Enslaving as an active interface with an up link [ 473.961283][T20576] net_ratelimit: 23 callbacks suppressed [ 473.961305][T20576] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 473.992153][T20567] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 474.049264][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 474.049458][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3855'. [ 474.108501][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3855'. [ 474.168259][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 474.205783][T20592] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 474.309265][T17980] bond1: (slave bridge1): failed to get link speed/duplex [ 474.416744][T17980] bond1: (slave bridge1): failed to get link speed/duplex [ 474.527487][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 474.636936][T17980] bond1: (slave bridge1): failed to get link speed/duplex [ 474.759600][T17980] bond1: (slave bridge1): failed to get link speed/duplex [ 474.878567][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 475.371207][T20643] sctp: [Deprecated]: syz.0.3879 (pid 20643) Use of int in maxseg socket option. [ 475.371207][T20643] Use struct sctp_assoc_value instead [ 475.394867][T20643] sctp: [Deprecated]: syz.0.3879 (pid 20643) Use of int in maxseg socket option. [ 475.394867][T20643] Use struct sctp_assoc_value instead [ 475.624015][T20655] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3883'. [ 476.006547][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 476.014662][ C1] lec:lec_tx_timeout: lec0 [ 476.019967][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 476.678614][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 476.945862][T20709] sctp: [Deprecated]: syz.1.3906 (pid 20709) Use of int in maxseg socket option. [ 476.945862][T20709] Use struct sctp_assoc_value instead [ 476.984030][T20709] sctp: [Deprecated]: syz.1.3906 (pid 20709) Use of int in maxseg socket option. [ 476.984030][T20709] Use struct sctp_assoc_value instead [ 477.324437][T20730] xt_hashlimit: size too large, truncated to 1048576 [ 478.604747][T20782] __nla_validate_parse: 3 callbacks suppressed [ 478.604770][T20782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3935'. [ 478.625599][T20782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3935'. [ 478.634998][T20782] netlink: 'syz.1.3935': attribute type 4 has an invalid length. [ 478.989161][T17977] net_ratelimit: 32 callbacks suppressed [ 478.989183][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 479.137887][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 479.246947][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 479.366658][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 479.486822][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 479.606683][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 479.716979][T17980] bond1: (slave bridge1): failed to get link speed/duplex [ 479.826738][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 479.908632][T20839] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.957726][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 480.077713][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 481.026545][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 481.034661][ C1] lec:lec_tx_timeout: lec0 [ 481.039595][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 482.982294][T20971] netlink: 'syz.0.4011': attribute type 143 has an invalid length. [ 483.452422][T21010] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 483.724985][T21021] bond5: option min_links: invalid value (18446744073709551614) [ 483.733478][T21021] bond5: option min_links: allowed values 0 - 2147483647 [ 483.744813][T21021] bond5 (unregistering): Released all slaves [ 484.047511][T17977] net_ratelimit: 33 callbacks suppressed [ 484.047533][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 484.063050][T21044] openvswitch: netlink: IP tunnel TTL not specified. [ 484.186014][T21047] syzkaller1: entered promiscuous mode [ 484.216835][T21047] syzkaller1: entered allmulticast mode [ 484.228502][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 484.272549][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4033'. [ 484.315228][T21058] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 484.338981][T21058] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4037'. [ 484.359304][T21060] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4036'. [ 484.371950][T21060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4036'. [ 484.381250][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 484.389432][T21060] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4036'. [ 484.399880][T21060] netlink: 'syz.4.4036': attribute type 3 has an invalid length. [ 484.408196][T21060] netlink: 'syz.4.4036': attribute type 2 has an invalid length. [ 484.417599][T21060] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4036'. [ 484.485563][T21062] Bluetooth: hci1: too big key_count value 32778 [ 484.496628][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 484.638236][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 484.722196][T21071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4041'. [ 484.746942][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 484.747338][T21071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4041'. [ 484.791001][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4044'. [ 484.858962][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 484.977439][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 485.166968][T21102] netlink: 'syz.3.4052': attribute type 1 has an invalid length. [ 485.339224][T21104] netlink: 'syz.0.4054': attribute type 3 has an invalid length. [ 485.347392][T21104] netlink: 'syz.0.4054': attribute type 3 has an invalid length. [ 485.403653][T21112] lo: left promiscuous mode [ 485.860050][T21124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4059'. [ 485.932960][T21124] SET target dimension over the limit! [ 486.047098][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 486.055195][ C1] lec:lec_tx_timeout: lec0 [ 486.060309][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 486.160870][T21140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.214269][T21148] netlink: 'syz.0.4067': attribute type 64 has an invalid length. [ 486.220800][T21146] netlink: 'syz.3.4066': attribute type 1 has an invalid length. [ 486.331120][T21143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.332999][T21150] ip6erspan1: entered promiscuous mode [ 486.770399][T21171] netlink: 'syz.4.4077': attribute type 7 has an invalid length. [ 487.464537][T21198] siw: device registration error -23 [ 487.532057][T21195] veth0_to_team: entered allmulticast mode [ 487.589824][T21198] team0: Port device team_slave_0 removed [ 487.685260][T21204] netlink: 'syz.0.4089': attribute type 13 has an invalid length. [ 487.693608][T21204] netlink: 'syz.0.4089': attribute type 58 has an invalid length. [ 488.539991][T21250] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 488.759705][T21262] bond5 (unregistering): Released all slaves [ 489.065987][T21273] vlan3: entered allmulticast mode [ 489.073889][T21273] hsr0: entered allmulticast mode [ 489.081572][T21273] hsr_slave_0: entered allmulticast mode [ 489.091333][T21273] hsr_slave_1: entered allmulticast mode [ 489.126681][ T7446] net_ratelimit: 33 callbacks suppressed [ 489.126702][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 489.219440][T21283] x_tables: duplicate underflow at hook 3 [ 489.260318][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 489.379993][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 489.398356][ T5941] IPVS: starting estimator thread 0... [ 489.405212][T21290] lo speed is unknown, defaulting to 1000 [ 489.511143][T21296] IPVS: using max 34 ests per chain, 81600 per kthread [ 489.518441][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 489.580252][T21303] __nla_validate_parse: 27 callbacks suppressed [ 489.580275][T21303] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4126'. [ 489.847723][T21318] xt_hashlimit: max too large, truncated to 1048576 [ 489.855599][T21320] tipc: Started in network mode [ 489.875209][T21320] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 489.919284][T21320] tipc: Enabled bearer , priority 10 [ 489.947007][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 489.982639][T21320] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4130'. [ 490.089300][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 490.207197][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 490.240439][T21337] netlink: 456 bytes leftover after parsing attributes in process `syz.1.4138'. [ 490.269361][T21337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4138'. [ 490.325766][T21337] bond3: option xmit_hash_policy: invalid value (64) [ 490.436251][T21337] bond3 (unregistering): Released all slaves [ 490.547127][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 490.680123][T21370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4148'. [ 490.806216][T21374] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4149'. [ 490.815888][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 490.878253][T21374] netlink: 'syz.1.4149': attribute type 4 has an invalid length. [ 490.951037][T21383] netlink: 'syz.0.4154': attribute type 39 has an invalid length. [ 491.042371][ T5941] tipc: Node number set to 4269801492 [ 491.056899][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 491.066555][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 491.074647][ C1] lec:lec_tx_timeout: lec0 [ 491.235443][T21397] netlink: 'syz.4.4159': attribute type 2 has an invalid length. [ 491.288857][T21405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4161'. [ 491.340339][T21406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4162'. [ 491.393105][T21408] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4164'. [ 491.402455][T21410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4165'. [ 491.639366][T21418] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 491.938622][T21445] delete_channel: no stack [ 491.991763][T21448] netlink: 'syz.3.4179': attribute type 9 has an invalid length. [ 492.097458][T21450] team0 (unregistering): Port device team_slave_1 removed [ 492.264608][T21458] netlink: 'syz.3.4183': attribute type 3 has an invalid length. [ 493.775055][T21555] IPVS: set_ctl: invalid protocol: 20 224.0.0.2:0 [ 494.000221][T21542] netlink: 'syz.0.4208': attribute type 16 has an invalid length. [ 494.015262][T21542] netlink: 'syz.0.4208': attribute type 17 has an invalid length. [ 494.037226][T21564] netlink: 'syz.2.4213': attribute type 1 has an invalid length. [ 494.901144][T21542] net_ratelimit: 27 callbacks suppressed [ 494.901156][T21542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.927693][T21596] __nla_validate_parse: 21 callbacks suppressed [ 494.927715][T21596] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4222'. [ 494.929225][T21565] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 494.934479][T21596] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4222'. [ 494.962953][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 494.974800][T21596] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4222'. [ 494.994519][T21591] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 495.083483][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 495.177247][T21603] netlink: 'syz.1.4224': attribute type 15 has an invalid length. [ 495.208668][ T49] bond1: (slave bridge1): failed to get link speed/duplex [ 495.283135][T21606] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4225'. [ 495.296161][T21606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4225'. [ 495.311080][T21608] syzkaller0: entered promiscuous mode [ 495.317098][T21608] syzkaller0: entered allmulticast mode [ 495.341872][T21608] ip6tnl3: entered allmulticast mode [ 495.411810][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4228'. [ 495.553758][T21620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4230'. [ 495.636309][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 495.673581][T21630] netlink: 'syz.2.4233': attribute type 3 has an invalid length. [ 495.709632][T21632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4234'. [ 495.767420][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 495.778864][T21632] netlink: zone id is out of range [ 495.787741][T21632] netlink: zone id is out of range [ 495.799731][T21632] netlink: zone id is out of range [ 495.804971][T21632] netlink: zone id is out of range [ 495.838981][T21636] xt_socket: unknown flags 0x50 [ 495.877091][T21636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4236'. [ 495.966353][T21644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4238'. [ 496.081035][T21644] team0 (unregistering): Port device team_slave_0 removed [ 496.132807][T21644] team0 (unregistering): Port device team_slave_1 removed [ 496.243057][T21644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.380372][T21671] unsupported nlmsg_type 40 [ 496.534090][T21680] gtp1: entered promiscuous mode [ 496.539676][T21680] gtp1: entered allmulticast mode [ 496.657956][T21683] netlink: 'syz.0.4252': attribute type 1 has an invalid length. [ 496.665749][T21683] netlink: 'syz.0.4252': attribute type 1 has an invalid length. [ 496.896915][T21684] veth5: entered allmulticast mode [ 497.240712][T21695] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 497.276276][T21695] bond3 (unregistering): Released all slaves [ 497.612816][T21707] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 497.620781][T21707] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 497.722706][T21719] bond5: option mode: invalid value (133) [ 497.746210][T21719] bond5 (unregistering): Released all slaves [ 498.120763][T21747] syzkaller0: left promiscuous mode [ 498.128042][T21747] syzkaller0: left allmulticast mode [ 498.266859][T21755] netlink: 'syz.1.4274': attribute type 1 has an invalid length. [ 498.321367][T21755] bond3: entered promiscuous mode [ 498.327511][T21755] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.380675][T21755] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.431763][T21755] bond3: (slave vti1): The slave device specified does not support setting the MAC address [ 498.442424][T21755] bond3: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 498.483147][T21755] bond3: (slave vti1): making interface the new active one [ 498.510709][T21755] vti1: entered promiscuous mode [ 498.518989][T21755] bond3: (slave vti1): Enslaving as an active interface with an up link [ 498.539660][T21762] bridge0: port 3(dummy0) entered disabled state [ 498.562700][T21774] FAULT_INJECTION: forcing a failure. [ 498.562700][T21774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.580061][T21762] dummy0 (unregistering): left allmulticast mode [ 498.582181][T21774] CPU: 0 UID: 0 PID: 21774 Comm: syz.2.4279 Not tainted syzkaller #0 PREEMPT(full) [ 498.582207][T21774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.582218][T21774] Call Trace: [ 498.582226][T21774] [ 498.582234][T21774] dump_stack_lvl+0xe8/0x150 [ 498.582266][T21774] should_fail_ex+0x412/0x560 [ 498.582299][T21774] _copy_to_user+0x31/0xb0 [ 498.582321][T21774] simple_read_from_buffer+0xe1/0x170 [ 498.582361][T21774] proc_fail_nth_read+0x1bb/0x230 [ 498.582390][T21774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.582420][T21774] ? rw_verify_area+0x2a6/0x4d0 [ 498.582438][T21774] ? tun_chr_write_iter+0xe0/0x200 [ 498.582455][T21774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.582482][T21774] vfs_read+0x20c/0xa70 [ 498.582500][T21774] ? fdget_pos+0x246/0x320 [ 498.582522][T21774] ? __pfx___mutex_lock+0x10/0x10 [ 498.582546][T21774] ? __pfx_vfs_read+0x10/0x10 [ 498.582567][T21774] ? __fget_files+0x2a/0x420 [ 498.582598][T21774] ? __fget_files+0x3a0/0x420 [ 498.582622][T21774] ? __fget_files+0x2a/0x420 [ 498.582657][T21774] ksys_read+0x150/0x270 [ 498.582680][T21774] ? __pfx_ksys_read+0x10/0x10 [ 498.582712][T21774] do_syscall_64+0x14d/0xf80 [ 498.582732][T21774] ? trace_irq_disable+0x3b/0x150 [ 498.582748][T21774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.582766][T21774] ? clear_bhb_loop+0x40/0x90 [ 498.582790][T21774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.582808][T21774] RIP: 0033:0x7f437a55d04e [ 498.582825][T21774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 498.582841][T21774] RSP: 002b:00007f437b36ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 498.582862][T21774] RAX: ffffffffffffffda RBX: 00007f437b3706c0 RCX: 00007f437a55d04e [ 498.582875][T21774] RDX: 000000000000000f RSI: 00007f437b3700a0 RDI: 0000000000000004 [ 498.582887][T21774] RBP: 00007f437b370090 R08: 0000000000000000 R09: 0000000000000000 [ 498.582898][T21774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.582909][T21774] R13: 00007f437a816038 R14: 00007f437a815fa0 R15: 00007ffe84f43938 [ 498.582940][T21774] [ 498.624952][T21762] bridge0: port 3(dummy0) entered disabled state [ 499.044198][T21791] netlink: 'syz.1.4286': attribute type 7 has an invalid length. [ 499.373068][T21803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.562428][T21818] netlink: 'syz.0.4292': attribute type 22 has an invalid length. [ 499.884395][T17981] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.925074][T17981] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.967326][T17981] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.976104][T17981] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.033328][T21830] syzkaller1: entered promiscuous mode [ 500.071916][T21830] syzkaller1: entered allmulticast mode [ 500.136620][T17974] net_ratelimit: 74 callbacks suppressed [ 500.136643][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 500.271183][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 500.508594][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 500.646741][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 500.756673][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 500.866796][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 500.976901][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 501.096883][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 501.206703][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 501.316771][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 501.572521][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 502.098988][T21899] __nla_validate_parse: 14 callbacks suppressed [ 502.099003][T21899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4306'. [ 502.115838][T21899] netlink: 'syz.3.4306': attribute type 3 has an invalid length. [ 502.930469][T21838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.957849][T21901] netlink: 'syz.3.4307': attribute type 11 has an invalid length. [ 502.987885][T21901] netlink: 'syz.3.4307': attribute type 11 has an invalid length. [ 503.007890][T21901] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4307'. [ 503.116157][T21908] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4311'. [ 503.178893][T21912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4312'. [ 503.188867][ T29] audit: type=1107 audit(1774960540.294:2): pid=21903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 503.206194][T21912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4312'. [ 503.234957][T21912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4312'. [ 503.459041][T21935] mac80211_hwsim hwsim40 : renamed from wlan1 [ 503.698860][T21955] --map-set only usable from mangle table [ 503.707176][T21955] veth0_to_team: left allmulticast mode [ 503.901324][T21966] netlink: 'syz.2.4328': attribute type 29 has an invalid length. [ 503.937192][T21970] netlink: 'syz.2.4328': attribute type 29 has an invalid length. [ 504.142690][T21984] netlink: 212384 bytes leftover after parsing attributes in process `syz.2.4332'. [ 504.459134][T22000] netlink: 'syz.2.4336': attribute type 20 has an invalid length. [ 504.481022][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4336'. [ 504.504368][T22003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4339'. [ 504.551590][T22003] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4339'. [ 504.617562][T22000] netlink: 'syz.2.4336': attribute type 20 has an invalid length. [ 505.157059][T17980] net_ratelimit: 32 callbacks suppressed [ 505.157083][T17980] bond1: (slave bridge1): failed to get link speed/duplex [ 505.276893][T17980] bond1: (slave bridge1): failed to get link speed/duplex [ 505.387238][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 505.498902][T17980] bond1: (slave bridge1): failed to get link speed/duplex [ 505.616798][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 505.746636][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 505.814066][T22070] netlink: 'syz.3.4360': attribute type 9 has an invalid length. [ 505.836727][T22070] netlink: 'syz.3.4360': attribute type 11 has an invalid length. [ 505.844592][T22070] netlink: 'syz.3.4360': attribute type 12 has an invalid length. [ 505.876867][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 506.068371][T22085] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 506.101933][T22085] bond2 (unregistering): Released all slaves [ 506.166949][T17980] bond1: (slave bridge1): failed to get link speed/duplex [ 506.238741][T22100] netlink: 'syz.1.4365': attribute type 1 has an invalid length. [ 506.305002][T22100] bond4: entered promiscuous mode [ 506.366996][T22100] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.410273][T22107] bond4: (slave bridge6): making interface the new active one [ 506.438817][T22107] bridge6: entered promiscuous mode [ 506.445048][T22107] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 506.470751][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 506.516916][T22117] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 506.606744][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 506.839498][T22129] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 506.844599][T22129] IPVS: Unknown mcast interface: pim6reg0 [ 506.926507][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.934559][ C1] lec:lec_tx_timeout: lec0 [ 507.168244][T22153] __nla_validate_parse: 76 callbacks suppressed [ 507.168269][T22153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4382'. [ 507.241504][T22155] syzkaller0: entered promiscuous mode [ 507.256653][T22155] syzkaller0: entered allmulticast mode [ 507.299990][ T5941] hid-generic 0005:9C3F:0006.0001: unknown main item tag 0x1 [ 507.315160][ T5941] hid-generic 0005:9C3F:0006.0001: item fetching failed at offset 6/7 [ 507.358405][ T5941] hid-generic 0005:9C3F:0006.0001: probe with driver hid-generic failed with error -22 [ 507.885786][T22192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4398'. [ 507.912074][T22194] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4397'. [ 507.990910][T22202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4400'. [ 507.996343][T22192] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 508.031423][T22192] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 508.039483][T22192] gretap1: entered promiscuous mode [ 508.049042][T22192] gretap1: entered allmulticast mode [ 508.150909][T22208] lo speed is unknown, defaulting to 1000 [ 508.240386][T22212] syzkaller0: Caught tx_queue_len zero misconfig [ 508.249785][T22218] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4406'. [ 508.260258][T22218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4406'. [ 508.295492][T22218] x9: renamed from bridge_slave_0 (while UP) [ 508.685254][T22243] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4413'. [ 508.723453][T22242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4412'. [ 508.792330][T22244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4412'. [ 509.081679][T22269] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4420'. [ 509.392147][T22271] bridge7: port 1(veth3) entered blocking state [ 509.400491][T22271] bridge7: port 1(veth3) entered disabled state [ 509.408136][T22271] veth3: entered allmulticast mode [ 509.415610][T22271] veth3: entered promiscuous mode [ 509.708182][T22306] netlink: 'syz.4.4432': attribute type 11 has an invalid length. [ 509.730551][T22306] 0: renamed from hsr_slave_1 (while UP) [ 509.758550][T22306] 0: entered allmulticast mode [ 509.802379][T22308] netlink: 'syz.3.4433': attribute type 1 has an invalid length. [ 510.012984][T22325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.260111][ T7449] net_ratelimit: 26 callbacks suppressed [ 510.260134][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 510.504361][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 510.658062][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 510.766809][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 510.850632][T22354] bond5: option lp_interval: invalid value (0) [ 510.870962][ T29] audit: type=1800 audit(1774960547.984:3): pid=22357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4443" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1470 res=0 errno=0 [ 510.907584][T22354] bond5: option lp_interval: allowed values 1 - 2147483647 [ 510.923640][T22354] bond5 (unregistering): Released all slaves [ 511.028492][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 511.046794][T22358] IPv6: NLM_F_CREATE should be specified when creating new route [ 511.247425][T17980] bond1: (slave bridge1): failed to get link speed/duplex [ 511.377946][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 511.497908][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 511.592271][T22388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.666928][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 511.738891][T22395] tipc: New replicast peer: 255.255.255.255 [ 511.760912][T22395] tipc: Enabled bearer , priority 10 [ 512.169358][T22416] netlink: 'syz.2.4465': attribute type 1 has an invalid length. [ 512.310572][T22416] : entered promiscuous mode [ 512.768303][ T5838] Bluetooth: hci4: link tx timeout [ 512.773949][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 512.813104][T22452] veth1_macvtap: left promiscuous mode [ 512.875674][T22455] netlink: 'syz.4.4477': attribute type 24 has an invalid length. [ 512.894796][T22451] macsec0: entered promiscuous mode [ 512.904745][T22451] macsec0: entered allmulticast mode [ 512.945987][T22455] __nla_validate_parse: 10 callbacks suppressed [ 512.946008][T22455] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4477'. [ 513.044833][T22457] syzkaller0: entered promiscuous mode [ 513.050647][T22457] syzkaller0: entered allmulticast mode [ 513.102215][T22469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 513.142430][T22469] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 513.168926][T22469] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 513.179519][T22469] gretap1: entered promiscuous mode [ 513.184837][T22469] gretap1: entered allmulticast mode [ 513.233728][T13690] lec:lec_start_xmit: lec0:No lecd attached [ 513.299844][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4485'. [ 513.725355][T22493] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4485'. [ 513.889609][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 514.270893][T22497] FAULT_INJECTION: forcing a failure. [ 514.270893][T22497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.284170][T22497] CPU: 1 UID: 0 PID: 22497 Comm: syz.3.4487 Not tainted syzkaller #0 PREEMPT(full) [ 514.284197][T22497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.284210][T22497] Call Trace: [ 514.284217][T22497] [ 514.284226][T22497] dump_stack_lvl+0xe8/0x150 [ 514.284257][T22497] should_fail_ex+0x412/0x560 [ 514.284292][T22497] _copy_from_user+0x2d/0xb0 [ 514.284314][T22497] ___sys_recvmsg+0x175/0x590 [ 514.284345][T22497] ? get_pid_task+0x20/0x1f0 [ 514.284361][T22497] ? get_pid_task+0x20/0x1f0 [ 514.284382][T22497] ? __pfx____sys_recvmsg+0x10/0x10 [ 514.284429][T22497] ? __fget_files+0x3a0/0x420 [ 514.284467][T22497] __x64_sys_recvmsg+0x1ba/0x2a0 [ 514.284494][T22497] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 514.284526][T22497] ? __pfx_ksys_write+0x10/0x10 [ 514.284559][T22497] do_syscall_64+0x14d/0xf80 [ 514.284581][T22497] ? trace_irq_disable+0x3b/0x150 [ 514.284597][T22497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.284615][T22497] ? clear_bhb_loop+0x40/0x90 [ 514.284637][T22497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.284655][T22497] RIP: 0033:0x7fe2a0d9c819 [ 514.284674][T22497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.284690][T22497] RSP: 002b:00007fe2a1c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 514.284712][T22497] RAX: ffffffffffffffda RBX: 00007fe2a1016090 RCX: 00007fe2a0d9c819 [ 514.284725][T22497] RDX: 0000000040000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 514.284737][T22497] RBP: 00007fe2a1c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 514.284749][T22497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.284759][T22497] R13: 00007fe2a1016128 R14: 00007fe2a1016090 R15: 00007ffcf06ef168 [ 514.284791][T22497] [ 515.378026][T22505] bond3: (slave vlan0): Enslaving as a backup interface with an up link [ 515.404349][T22513] netlink: 'syz.3.4495': attribute type 29 has an invalid length. [ 515.413921][T22513] netlink: 'syz.3.4495': attribute type 29 has an invalid length. [ 515.427672][T22513] netlink: 'syz.3.4495': attribute type 29 has an invalid length. [ 515.436274][T22513] netlink: 'syz.3.4495': attribute type 29 has an invalid length. [ 515.466383][T22513] netlink: 'syz.3.4495': attribute type 29 has an invalid length. [ 515.488164][T22513] netlink: 'syz.3.4495': attribute type 29 has an invalid length. [ 515.503804][T22513] netlink: 'syz.3.4495': attribute type 29 has an invalid length. [ 515.552638][T22517] lo speed is unknown, defaulting to 1000 [ 515.558663][ T12] net_ratelimit: 12 callbacks suppressed [ 515.558682][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 515.567975][T22520] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4496'. [ 515.857404][T22532] tipc: Enabling of bearer rejected, already enabled [ 515.977112][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 515.983552][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 516.103860][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 516.236627][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 516.330900][T22548] netlink: 'syz.1.4506': attribute type 1 has an invalid length. [ 516.353282][T22548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4506'. [ 516.362929][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 516.454608][T22554] pim6reg1: entered promiscuous mode [ 516.494420][T22526] FAULT_INJECTION: forcing a failure. [ 516.494420][T22526] name fail_futex, interval 1, probability 0, space 0, times 1 [ 516.504249][T22554] pim6reg1: entered allmulticast mode [ 516.536631][T22526] CPU: 0 UID: 0 PID: 22526 Comm: syz.3.4498 Not tainted syzkaller #0 PREEMPT(full) [ 516.536662][T22526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.536674][T22526] Call Trace: [ 516.536682][T22526] [ 516.536691][T22526] dump_stack_lvl+0xe8/0x150 [ 516.536725][T22526] should_fail_ex+0x412/0x560 [ 516.536759][T22526] get_futex_key+0x1ac/0x1690 [ 516.536797][T22526] ? __pfx_get_futex_key+0x10/0x10 [ 516.536821][T22526] ? __lock_acquire+0x6b5/0x2cf0 [ 516.536859][T22526] futex_wake+0x114/0x580 [ 516.536887][T22526] ? __lock_acquire+0x6b5/0x2cf0 [ 516.536915][T22526] ? __pfx_futex_wake+0x10/0x10 [ 516.536950][T22526] ? exit_mm_release+0x1a/0x30 [ 516.536984][T22526] do_futex+0x395/0x420 [ 516.537019][T22526] ? __pfx_do_futex+0x10/0x10 [ 516.537048][T22526] ? __might_fault+0xaf/0x130 [ 516.537071][T22526] mm_release+0x103/0x290 [ 516.537099][T22526] exit_mm+0x51/0x220 [ 516.537116][T22526] ? unwind_deferred_task_exit+0x67/0xa0 [ 516.537146][T22526] do_exit+0x6a2/0x23c0 [ 516.537175][T22526] ? __pfx_do_exit+0x10/0x10 [ 516.537196][T22526] ? cgroup1_freezing+0x20/0x350 [ 516.537223][T22526] ? cgroup1_freezing+0x20/0x350 [ 516.537260][T22526] do_group_exit+0x21b/0x2d0 [ 516.537280][T22526] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.537307][T22526] get_signal+0x1284/0x1330 [ 516.537364][T22526] arch_do_signal_or_restart+0xbc/0x830 [ 516.537389][T22526] ? __x64_sys_recvmsg+0x26c/0x2a0 [ 516.537415][T22526] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 516.537461][T22526] exit_to_user_mode_loop+0x86/0x480 [ 516.537484][T22526] ? rcu_is_watching+0x15/0xb0 [ 516.537516][T22526] do_syscall_64+0x32d/0xf80 [ 516.537539][T22526] ? trace_irq_disable+0x3b/0x150 [ 516.537556][T22526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.537577][T22526] ? clear_bhb_loop+0x40/0x90 [ 516.537598][T22526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.537616][T22526] RIP: 0033:0x7fe2a0d9c819 [ 516.537636][T22526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.537653][T22526] RSP: 002b:00007fe2a1c6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 516.537675][T22526] RAX: fffffffffffffe00 RBX: 00007fe2a1016090 RCX: 00007fe2a0d9c819 [ 516.537690][T22526] RDX: 0000000040000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 516.537704][T22526] RBP: 00007fe2a1c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 516.537716][T22526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.537729][T22526] R13: 00007fe2a1016128 R14: 00007fe2a1016090 R15: 00007ffcf06ef168 [ 516.537762][T22526] [ 517.072734][T22559] syzkaller1: entered promiscuous mode [ 517.097620][T22559] syzkaller1: entered allmulticast mode [ 517.158098][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 517.276806][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 517.396841][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 517.462378][T22584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4520'. [ 517.485223][T22587] x_tables: duplicate underflow at hook 2 [ 517.497578][T22584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4520'. [ 517.506801][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 517.533584][T22584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4520'. [ 517.616867][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 517.839885][T22598] netlink: 'syz.0.4525': attribute type 1 has an invalid length. [ 517.884954][T22598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 518.063613][T22602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4525'. [ 518.074436][T22602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4525'. [ 518.254697][T22610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4527'. [ 518.287177][T22610] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4527'. [ 518.290121][T22612] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.4528'. [ 518.308760][T22610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4527'. [ 518.407497][T22620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4530'. [ 518.713282][T22637] erspan0: entered promiscuous mode [ 518.849619][T22643] netlink: 212304 bytes leftover after parsing attributes in process `syz.4.4537'. [ 518.926692][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms [ 518.934769][ C1] lec:lec_tx_timeout: lec0 [ 519.006849][ T5838] Bluetooth: hci2: command 0x0401 tx timeout [ 519.162606][T22654] netlink: 'syz.2.4540': attribute type 1 has an invalid length. [ 519.555398][T22663] FAULT_INJECTION: forcing a failure. [ 519.555398][T22663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.597683][T22663] CPU: 0 UID: 0 PID: 22663 Comm: syz.4.4542 Not tainted syzkaller #0 PREEMPT(full) [ 519.597714][T22663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.597725][T22663] Call Trace: [ 519.597733][T22663] [ 519.597742][T22663] dump_stack_lvl+0xe8/0x150 [ 519.597774][T22663] should_fail_ex+0x412/0x560 [ 519.597809][T22663] _copy_from_user+0x2d/0xb0 [ 519.597833][T22663] ___sys_sendmsg+0x1c6/0x360 [ 519.597863][T22663] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.597925][T22663] ? __fget_files+0x2a/0x420 [ 519.597953][T22663] ? __fget_files+0x3a0/0x420 [ 519.597992][T22663] __x64_sys_sendmsg+0x1bd/0x2a0 [ 519.598020][T22663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.598055][T22663] ? __pfx_ksys_write+0x10/0x10 [ 519.598090][T22663] do_syscall_64+0x14d/0xf80 [ 519.598113][T22663] ? trace_irq_disable+0x3b/0x150 [ 519.598131][T22663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.598151][T22663] ? clear_bhb_loop+0x40/0x90 [ 519.598176][T22663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.598196][T22663] RIP: 0033:0x7fa16ef9c819 [ 519.598215][T22663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.598232][T22663] RSP: 002b:00007fa16fd8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.598255][T22663] RAX: ffffffffffffffda RBX: 00007fa16f215fa0 RCX: 00007fa16ef9c819 [ 519.598270][T22663] RDX: 0000000030004084 RSI: 0000200000000080 RDI: 0000000000000003 [ 519.598283][T22663] RBP: 00007fa16fd8b090 R08: 0000000000000000 R09: 0000000000000000 [ 519.598295][T22663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.598306][T22663] R13: 00007fa16f216038 R14: 00007fa16f215fa0 R15: 00007ffd002bced8 [ 519.598339][T22663] [ 519.935486][T22679] bond0: (slave wlan1): Opening slave failed [ 520.059122][T22689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4549'. [ 520.112102][T22691] syzkaller0: left promiscuous mode [ 520.126985][T22691] syzkaller0: left allmulticast mode [ 520.142021][T22690] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4549'. [ 520.636627][T17981] net_ratelimit: 17 callbacks suppressed [ 520.636652][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 520.763955][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 520.898104][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 521.016586][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 521.126612][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 521.236799][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 521.360947][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 521.447189][T22739] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 521.481832][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 521.540964][T22751] validate_nla: 1 callbacks suppressed [ 521.540985][T22751] netlink: 'syz.2.4571': attribute type 4 has an invalid length. [ 521.611818][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 522.210046][T22790] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 522.752843][T22807] delete_channel: no stack [ 522.862484][T22828] Cannot find add_set index 2 as target [ 522.996753][T22836] Cannot find add_set index 2 as target [ 523.013909][T22841] netlink: 'syz.4.4604': attribute type 6 has an invalid length. [ 523.030936][T22841] netlink: 'syz.4.4604': attribute type 5 has an invalid length. [ 523.186372][T22849] netlink: 'syz.1.4608': attribute type 1 has an invalid length. [ 523.213424][T22849] netlink: 'syz.1.4608': attribute type 7 has an invalid length. [ 523.236386][T22849] netlink: 'syz.1.4608': attribute type 8 has an invalid length. [ 523.279814][T22849] __nla_validate_parse: 15 callbacks suppressed [ 523.279837][T22849] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4608'. [ 523.299674][T22849] NCSI netlink: No device for ifindex 65584 [ 523.342477][T22854] xt_ecn: cannot match TCP bits for non-tcp packets [ 523.384003][T22856] lo speed is unknown, defaulting to 1000 [ 523.473355][T22866] netlink: 'syz.2.4613': attribute type 83 has an invalid length. [ 524.015489][T22900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4624'. [ 524.173083][T22912] netlink: 294 bytes leftover after parsing attributes in process `syz.3.4627'. [ 524.193312][T22909] xt_bpf: check failed: parse error [ 524.203609][T22909] x_tables: unsorted entry at hook 1 [ 524.322677][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4631'. [ 524.409023][T22920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4632'. [ 524.493532][T22925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4634'. [ 524.894049][T22959] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4641'. [ 524.990216][T22959] vlan2: entered allmulticast mode [ 525.005457][T22959] erspan0: entered allmulticast mode [ 525.193081][T22972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4648'. [ 525.488926][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 525.596124][T22983] veth5: entered allmulticast mode [ 525.622517][T22989] syzkaller0: entered promiscuous mode [ 525.628825][T22989] syzkaller0: entered allmulticast mode [ 525.657120][ T7449] net_ratelimit: 35 callbacks suppressed [ 525.657143][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 525.735786][T22997] FAULT_INJECTION: forcing a failure. [ 525.735786][T22997] name failslab, interval 1, probability 0, space 0, times 0 [ 525.762097][T22997] CPU: 0 UID: 0 PID: 22997 Comm: syz.0.4658 Not tainted syzkaller #0 PREEMPT(full) [ 525.762128][T22997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.762140][T22997] Call Trace: [ 525.762148][T22997] [ 525.762157][T22997] dump_stack_lvl+0xe8/0x150 [ 525.762190][T22997] should_fail_ex+0x412/0x560 [ 525.762227][T22997] should_failslab+0xa8/0x100 [ 525.762257][T22997] __kmalloc_noprof+0xe8/0x760 [ 525.762281][T22997] ? security_sk_alloc+0x52/0x360 [ 525.762311][T22997] security_sk_alloc+0x52/0x360 [ 525.762336][T22997] sk_prot_alloc+0x101/0x210 [ 525.762363][T22997] sk_alloc+0x3a/0x390 [ 525.762390][T22997] inet_create+0x7a0/0x1000 [ 525.762418][T22997] ? inet_create+0x9c/0x1000 [ 525.762449][T22997] __sock_create+0x4b2/0x9d0 [ 525.762490][T22997] mptcp_subflow_create_socket+0xfb/0x800 [ 525.762526][T22997] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 525.762553][T22997] ? tomoyo_check_open_permission+0x38e/0x470 [ 525.762591][T22997] ? tomoyo_check_open_permission+0x1d3/0x470 [ 525.762619][T22997] ? aa_label_sk_perm+0x532/0x6e0 [ 525.762651][T22997] __mptcp_nmpc_sk+0x155/0x790 [ 525.762680][T22997] ? do_raw_spin_lock+0x12b/0x2f0 [ 525.762702][T22997] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 525.762730][T22997] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.762759][T22997] mptcp_sendmsg_fastopen+0xd4/0x580 [ 525.762786][T22997] ? __local_bh_enable_ip+0xd0/0x130 [ 525.762818][T22997] mptcp_sendmsg+0x17af/0x19d0 [ 525.762861][T22997] ? aa_sk_perm+0x6d5/0x900 [ 525.762897][T22997] ? __pfx_aa_sk_perm+0x10/0x10 [ 525.762925][T22997] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 525.762950][T22997] ? sock_rps_record_flow+0x19/0x400 [ 525.762979][T22997] ? inet_sendmsg+0x2f4/0x370 [ 525.763008][T22997] ____sys_sendmsg+0x80a/0x9f0 [ 525.763044][T22997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.763078][T22997] ? import_iovec+0x73/0xa0 [ 525.763103][T22997] ___sys_sendmsg+0x2a5/0x360 [ 525.763133][T22997] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.763199][T22997] ? __fget_files+0x2a/0x420 [ 525.763228][T22997] ? __fget_files+0x3a0/0x420 [ 525.763269][T22997] __x64_sys_sendmsg+0x1bd/0x2a0 [ 525.763297][T22997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.763331][T22997] ? __pfx_ksys_write+0x10/0x10 [ 525.763366][T22997] do_syscall_64+0x14d/0xf80 [ 525.763390][T22997] ? trace_irq_disable+0x3b/0x150 [ 525.763409][T22997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.763429][T22997] ? clear_bhb_loop+0x40/0x90 [ 525.763455][T22997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.763476][T22997] RIP: 0033:0x7f956179c819 [ 525.763496][T22997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.763514][T22997] RSP: 002b:00007f956266b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.763537][T22997] RAX: ffffffffffffffda RBX: 00007f9561a15fa0 RCX: 00007f956179c819 [ 525.763552][T22997] RDX: 0000000030004084 RSI: 0000200000000080 RDI: 0000000000000003 [ 525.763565][T22997] RBP: 00007f956266b090 R08: 0000000000000000 R09: 0000000000000000 [ 525.763586][T22997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.763598][T22997] R13: 00007f9561a16038 R14: 00007f9561a15fa0 R15: 00007ffdd09c0138 [ 525.763633][T22997] [ 526.192266][T22993] syzkaller0: entered promiscuous mode [ 526.203013][T22993] syzkaller0: entered allmulticast mode [ 526.268532][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 527.345214][T23030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 527.354600][T23030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 528.102369][T23029] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 528.119470][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 528.221094][T23030] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.242826][T23030] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.402648][T23030] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.417153][T23030] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.440042][T23052] __nla_validate_parse: 1 callbacks suppressed [ 528.440062][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4676'. [ 528.458903][T23051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4675'. [ 528.468270][T17977] bond1: (slave bridge1): failed to get link speed/duplex [ 528.476212][T23052] sctp: [Deprecated]: syz.3.4676 (pid 23052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.476212][T23052] Use struct sctp_sack_info instead [ 528.494670][T23052] sctp: [Deprecated]: syz.3.4676 (pid 23052) Use of int in max_burst socket option deprecated. [ 528.494670][T23052] Use struct sctp_assoc_value instead [ 528.535429][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4674'. [ 528.576620][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 528.660998][T23030] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.673318][T23030] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.737534][ T7446] bond1: (slave bridge1): failed to get link speed/duplex [ 528.782491][T23030] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.793175][T23030] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.799645][T23068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4681'. [ 528.897256][ T7446] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.905643][ T7446] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.916721][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 528.940018][ T7446] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.951644][ T7446] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.981155][ T7446] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.991198][ T7446] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.000163][T23078] netlink: 'syz.4.4683': attribute type 18 has an invalid length. [ 529.012692][T23078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4683'. [ 529.024022][T17981] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.033156][T17981] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.067028][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 529.074475][T17981] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.091279][T17981] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.115461][T17981] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.145515][T17981] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.186995][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 529.255624][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.509431][T23111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4690'. [ 529.819574][T23126] xt_socket: unknown flags 0xe4 [ 529.908480][T23103] FAULT_INJECTION: forcing a failure. [ 529.908480][T23103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.965827][T23103] CPU: 0 UID: 0 PID: 23103 Comm: syz.0.4688 Not tainted syzkaller #0 PREEMPT(full) [ 529.965858][T23103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.965871][T23103] Call Trace: [ 529.965879][T23103] [ 529.965887][T23103] dump_stack_lvl+0xe8/0x150 [ 529.965922][T23103] should_fail_ex+0x412/0x560 [ 529.965957][T23103] _copy_to_user+0x31/0xb0 [ 529.965983][T23103] simple_read_from_buffer+0xe1/0x170 [ 529.966019][T23103] proc_fail_nth_read+0x1bb/0x230 [ 529.966052][T23103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.966085][T23103] ? rw_verify_area+0x2a6/0x4d0 [ 529.966107][T23103] ? __lock_acquire+0x6b5/0x2cf0 [ 529.966130][T23103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 529.966161][T23103] vfs_read+0x20c/0xa70 [ 529.966181][T23103] ? fdget_pos+0x246/0x320 [ 529.966205][T23103] ? __pfx___mutex_lock+0x10/0x10 [ 529.966231][T23103] ? __pfx_vfs_read+0x10/0x10 [ 529.966255][T23103] ? __fget_files+0x2a/0x420 [ 529.966289][T23103] ? __fget_files+0x3a0/0x420 [ 529.966317][T23103] ? __fget_files+0x2a/0x420 [ 529.966363][T23103] ksys_read+0x150/0x270 [ 529.966388][T23103] ? __pfx_ksys_read+0x10/0x10 [ 529.966421][T23103] do_syscall_64+0x14d/0xf80 [ 529.966448][T23103] ? trace_irq_disable+0x3b/0x150 [ 529.966465][T23103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.966486][T23103] ? clear_bhb_loop+0x40/0x90 [ 529.966510][T23103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.966530][T23103] RIP: 0033:0x7f956175d04e [ 529.966548][T23103] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 529.966565][T23103] RSP: 002b:00007f9562628fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 529.966587][T23103] RAX: ffffffffffffffda RBX: 00007f95626296c0 RCX: 00007f956175d04e [ 529.966601][T23103] RDX: 000000000000000f RSI: 00007f95626290a0 RDI: 0000000000000004 [ 529.966613][T23103] RBP: 00007f9562629090 R08: 0000000000000000 R09: 0000000000000000 [ 529.966626][T23103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.966637][T23103] R13: 00007f9561a16218 R14: 00007f9561a16180 R15: 00007ffdd09c0138 [ 529.966671][T23103] [ 529.990776][T23136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4700'. [ 530.353452][T23152] netlink: 'syz.4.4704': attribute type 21 has an invalid length. [ 530.406344][T23152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4704'. [ 530.462462][T23156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4705'. [ 530.501566][T23156] netlink: 'syz.0.4705': attribute type 32 has an invalid length. [ 530.544583][ T29] audit: type=1107 audit(1774960567.654:4): pid=23146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*/.]Ƚh)uVjDʚ"/>LaS~_9ʼ@b䯬xX [ 530.544583][ T29] [ 530.544583][ T29] tͧHpMuxR!Cu;ܫG]pm1E.' s2  K`S^&{b&/ԥ 6uaaɚI'' [ 530.597705][T23149] udevd[23149]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 530.616081][T23149] udevd[23149]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 530.707007][ T7449] net_ratelimit: 15 callbacks suppressed [ 530.707031][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 530.787466][T23175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.796388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.810338][T23175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4710'. [ 530.866890][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 530.976899][ T7449] bond1: (slave bridge1): failed to get link speed/duplex [ 530.992942][T23184] block nbd0: reconnected socket [ 530.998621][T23184] nbd: socks must be embedded in a SOCK_ITEM attr [ 531.055092][ T5143] block nbd0: Receive control failed (result -32) [ 531.122701][T17981] tipc: Resetting bearer [ 531.154788][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.243849][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.333583][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.352567][T17981] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 531.392462][T17981] ip6gretap1 (unregistering): left allmulticast mode [ 531.403735][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.470443][T23197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.746331][T17981] .` (unregistering): (slave bridge0): Releasing backup interface [ 531.754462][T17981] .` (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 531.782735][T17981] bridge0 (unregistering): left allmulticast mode [ 531.844913][T17981] tipc: Disabling bearer [ 532.221648][T17981] .` (unregistering): (slave batadv0): Releasing backup interface [ 532.230966][T17981] .` (unregistering): Released all slaves [ 532.241746][T17981] bond0 (unregistering): Released all slaves [ 532.255444][T17981] bond1 (unregistering): Released all slaves [ 532.274738][T17981] bond2 (unregistering): Released all slaves [ 532.297861][T17981] bond3 (unregistering): Released all slaves [ 532.312364][T17981] bond4 (unregistering): (slave veth11): Releasing active interface [ 532.327435][T17981] bond4 (unregistering): Released all slaves [ 532.341165][T17981] bond5 (unregistering): Released all slaves [ 532.354788][T17981] bond6 (unregistering): Released all slaves [ 532.373432][T17981] team0: Port device bond7 removed [ 532.388305][T17981] bond7 (unregistering): Released all slaves [ 532.402037][T17981] bond8 (unregistering): Released all slaves [ 532.415841][T17981] bond9 (unregistering): Released all slaves [ 532.772509][T17981] tipc: Left network mode [ 532.807060][T23242] Cannot find del_set index 4 as target [ 532.856904][T23251] netlink: 'syz.0.4732': attribute type 1 has an invalid length. [ 532.907027][T23239] lo speed is unknown, defaulting to 1000 [ 533.826014][T23282] Cannot find add_set index 65532 as target [ 534.232107][T23300] netlink: 'syz.0.4747': attribute type 7 has an invalid length. [ 534.367669][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 534.420732][T23314] __nla_validate_parse: 4 callbacks suppressed [ 534.420753][T23314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4752'. [ 534.471150][T23314] bond3: entered promiscuous mode [ 534.476722][T23314] 8021q: adding VLAN 0 to HW filter on device bond3 [ 534.769295][T23332] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4754'. [ 534.796790][T23332] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 534.884560][T23336] netlink: 'syz.1.4754': attribute type 2 has an invalid length. [ 534.918107][T23336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4754'. [ 535.591820][T23331] syzkaller0: entered promiscuous mode [ 535.597703][T23331] syzkaller0: entered allmulticast mode [ 535.729353][T17988] net_ratelimit: 54 callbacks suppressed [ 535.729376][T17988] bond1: (slave bridge1): failed to get link speed/duplex [ 535.770175][T23356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.791137][T23356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.806035][T23356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.816845][T23354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.824205][T23355] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 535.827564][T23354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.894410][T23361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.899948][T23355] bond3 (unregistering): Released all slaves [ 535.924443][T23361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.938790][T17988] bond1: (slave bridge1): failed to get link speed/duplex [ 535.946663][T23361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.060407][T23368] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4764'. [ 536.097604][T23371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4766'. [ 536.559335][T23387] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4770'. [ 536.943473][T23397] FAULT_INJECTION: forcing a failure. [ 536.943473][T23397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.957979][T23397] CPU: 0 UID: 0 PID: 23397 Comm: syz.0.4774 Not tainted syzkaller #0 PREEMPT(full) [ 536.958008][T23397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.958019][T23397] Call Trace: [ 536.958027][T23397] [ 536.958035][T23397] dump_stack_lvl+0xe8/0x150 [ 536.958068][T23397] should_fail_ex+0x412/0x560 [ 536.958101][T23397] _copy_from_user+0x2d/0xb0 [ 536.958123][T23397] sctp_setsockopt+0x1c4/0x12c0 [ 536.958144][T23397] ? sock_common_setsockopt+0x36/0xc0 [ 536.958172][T23397] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 536.958202][T23397] do_sock_setsockopt+0x17c/0x1b0 [ 536.958229][T23397] __x64_sys_setsockopt+0x13d/0x1b0 [ 536.958255][T23397] do_syscall_64+0x14d/0xf80 [ 536.958278][T23397] ? trace_irq_disable+0x3b/0x150 [ 536.958294][T23397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.958313][T23397] ? clear_bhb_loop+0x40/0x90 [ 536.958336][T23397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.958354][T23397] RIP: 0033:0x7f956179c819 [ 536.958382][T23397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.958398][T23397] RSP: 002b:00007f956266b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 536.958420][T23397] RAX: ffffffffffffffda RBX: 00007f9561a15fa0 RCX: 00007f956179c819 [ 536.958433][T23397] RDX: 0000000000000023 RSI: 0000000000000084 RDI: 0000000000000003 [ 536.958444][T23397] RBP: 00007f956266b090 R08: 0000000000000008 R09: 0000000000000000 [ 536.958456][T23397] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 536.958468][T23397] R13: 00007f9561a16038 R14: 00007f9561a15fa0 R15: 00007ffdd09c0138 [ 536.958500][T23397] [ 537.626721][T17981] IPVS: stop unused estimator thread 0... [ 537.756147][T23428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4787'. [ 537.855628][T23438] FAULT_INJECTION: forcing a failure. [ 537.855628][T23438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.870702][T23438] CPU: 1 UID: 0 PID: 23438 Comm: syz.0.4788 Not tainted syzkaller #0 PREEMPT(full) [ 537.870732][T23438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.870744][T23438] Call Trace: [ 537.870752][T23438] [ 537.870761][T23438] dump_stack_lvl+0xe8/0x150 [ 537.870796][T23438] should_fail_ex+0x412/0x560 [ 537.870831][T23438] _copy_to_user+0x31/0xb0 [ 537.870857][T23438] simple_read_from_buffer+0xe1/0x170 [ 537.870892][T23438] proc_fail_nth_read+0x1bb/0x230 [ 537.870926][T23438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 537.870959][T23438] ? rw_verify_area+0x2a6/0x4d0 [ 537.870980][T23438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 537.871011][T23438] vfs_read+0x20c/0xa70 [ 537.871032][T23438] ? fdget_pos+0x246/0x320 [ 537.871057][T23438] ? __pfx___mutex_lock+0x10/0x10 [ 537.871084][T23438] ? __pfx_vfs_read+0x10/0x10 [ 537.871108][T23438] ? __fget_files+0x2a/0x420 [ 537.871143][T23438] ? __fget_files+0x3a0/0x420 [ 537.871171][T23438] ? __fget_files+0x2a/0x420 [ 537.871210][T23438] ksys_read+0x150/0x270 [ 537.871236][T23438] ? __pfx_ksys_read+0x10/0x10 [ 537.871278][T23438] do_syscall_64+0x14d/0xf80 [ 537.871301][T23438] ? trace_irq_disable+0x3b/0x150 [ 537.871319][T23438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.871339][T23438] ? clear_bhb_loop+0x40/0x90 [ 537.871365][T23438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.871385][T23438] RIP: 0033:0x7f956175d04e [ 537.871405][T23438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 537.871422][T23438] RSP: 002b:00007f956266afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 537.871442][T23438] RAX: ffffffffffffffda RBX: 00007f956266b6c0 RCX: 00007f956175d04e [ 537.871457][T23438] RDX: 000000000000000f RSI: 00007f956266b0a0 RDI: 0000000000000004 [ 537.871469][T23438] RBP: 00007f956266b090 R08: 0000000000000000 R09: 0000000000000000 [ 537.871480][T23438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.871491][T23438] R13: 00007f9561a16038 R14: 00007f9561a15fa0 R15: 00007ffdd09c0138 [ 537.871522][T23438] [ 538.255569][T23452] mac80211_hwsim hwsim52 : renamed from wlan1 [ 538.943211][T23488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4805'. [ 540.379663][T23507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4811'. [ 540.509612][T23516] FAULT_INJECTION: forcing a failure. [ 540.509612][T23516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.523043][T23516] CPU: 0 UID: 0 PID: 23516 Comm: syz.2.4814 Not tainted syzkaller #0 PREEMPT(full) [ 540.523066][T23516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 540.523074][T23516] Call Trace: [ 540.523080][T23516] [ 540.523085][T23516] dump_stack_lvl+0xe8/0x150 [ 540.523107][T23516] should_fail_ex+0x412/0x560 [ 540.523128][T23516] _copy_from_user+0x2d/0xb0 [ 540.523142][T23516] ___sys_recvmsg+0x175/0x590 [ 540.523161][T23516] ? __pfx____sys_recvmsg+0x10/0x10 [ 540.523190][T23516] ? __fget_files+0x3a0/0x420 [ 540.523214][T23516] do_recvmmsg+0x334/0x800 [ 540.523234][T23516] ? __pfx_do_recvmmsg+0x10/0x10 [ 540.523255][T23516] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 540.523280][T23516] __x64_sys_recvmmsg+0x198/0x250 [ 540.523297][T23516] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 540.523319][T23516] do_syscall_64+0x14d/0xf80 [ 540.523332][T23516] ? trace_irq_disable+0x3b/0x150 [ 540.523343][T23516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.523355][T23516] ? clear_bhb_loop+0x40/0x90 [ 540.523369][T23516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.523390][T23516] RIP: 0033:0x7f437a59c819 [ 540.523403][T23516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.523414][T23516] RSP: 002b:00007f437b370028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 540.523429][T23516] RAX: ffffffffffffffda RBX: 00007f437a815fa0 RCX: 00007f437a59c819 [ 540.523438][T23516] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000003 [ 540.523446][T23516] RBP: 00007f437b370090 R08: 0000000000000000 R09: 0000000000000000 [ 540.523453][T23516] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 540.523460][T23516] R13: 00007f437a816038 R14: 00007f437a815fa0 R15: 00007ffe84f43938 [ 540.523479][T23516] [ 540.817099][ T7444] net_ratelimit: 65 callbacks suppressed [ 540.818161][ T7444] bond1: (slave bridge1): failed to get link speed/duplex [ 540.936666][ T77] bond1: (slave bridge1): failed to get link speed/duplex [ 541.046685][ T77] bond1: (slave bridge1): failed to get link speed/duplex [ 541.157595][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 541.267931][ T77] bond1: (slave bridge1): failed to get link speed/duplex [ 541.320383][T23455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.377787][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 541.528429][T23525] xt_hashlimit: size too large, truncated to 1048576 [ 541.571288][ T77] bond1: (slave bridge1): failed to get link speed/duplex [ 541.609344][T23530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4818'. [ 541.741304][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.807123][ T77] bond1: (slave bridge1): failed to get link speed/duplex [ 541.946805][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 542.503659][T23583] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 542.536899][T23584] netlink: 'syz.4.4838': attribute type 2 has an invalid length. [ 543.298910][T23635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4857'. [ 543.439554][T23640] syzkaller0: entered allmulticast mode [ 543.702869][T23656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4862'. [ 544.094538][T23680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4869'. [ 544.094602][T23682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4869'. [ 544.160699][T23680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.189460][T23681] syzkaller0: entered promiscuous mode [ 544.195937][T23681] syzkaller0: entered allmulticast mode [ 544.598491][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4878'. [ 544.629034][T23721] =a: renamed from lo [ 544.651069][T23721] netlink: 'syz.1.4879': attribute type 4 has an invalid length. [ 544.920739][T23735] pim6reg1: entered promiscuous mode [ 544.934148][T23735] pim6reg1: entered allmulticast mode [ 544.943069][T23739] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 544.977179][T23739] netlink: 'syz.4.4885': attribute type 10 has an invalid length. [ 544.997508][T23739] netlink: 396 bytes leftover after parsing attributes in process `syz.4.4885'. [ 545.110486][T23749] macvlan0: entered promiscuous mode [ 545.719924][T23784] netlink: 'syz.1.4898': attribute type 1 has an invalid length. [ 545.789491][T23784] bond5: entered promiscuous mode [ 545.795363][T23784] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.837354][T17981] net_ratelimit: 54 callbacks suppressed [ 545.837376][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 545.899679][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.967267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.047454][ T77] bond1: (slave bridge1): failed to get link speed/duplex [ 546.166847][ T7444] bond1: (slave bridge1): failed to get link speed/duplex [ 546.296608][T17988] bond1: (slave bridge1): failed to get link speed/duplex [ 546.446719][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 546.456722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.486742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.508167][T23824] openvswitch: netlink: Missing valid actions attribute. [ 546.993717][T16219] hid-generic 0005:9C3F:0006.0002: unknown main item tag 0x1 [ 547.042231][T16219] hid-generic 0005:9C3F:0006.0002: item fetching failed at offset 6/7 [ 547.091271][T16219] hid-generic 0005:9C3F:0006.0002: probe with driver hid-generic failed with error -22 [ 547.157385][T23866] sctp: [Deprecated]: syz.0.4916 (pid 23866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.157385][T23866] Use struct sctp_sack_info instead [ 547.220971][T23873] netlink: 'syz.3.4920': attribute type 10 has an invalid length. [ 547.353362][T23877] tipc: Enabled bearer , priority 0 [ 547.402764][T23881] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4923'. [ 547.482933][T23877] syzkaller0: entered promiscuous mode [ 547.488943][T23877] syzkaller0: entered allmulticast mode [ 547.495306][T23877] tipc: Resetting bearer [ 547.521224][T23876] tipc: Resetting bearer [ 549.154852][T23876] tipc: Disabling bearer [ 549.575045][T23922] FAULT_INJECTION: forcing a failure. [ 549.575045][T23922] name failslab, interval 1, probability 0, space 0, times 0 [ 549.614688][T23922] CPU: 0 UID: 0 PID: 23922 Comm: syz.0.4936 Not tainted syzkaller #0 PREEMPT(full) [ 549.614719][T23922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.614731][T23922] Call Trace: [ 549.614738][T23922] [ 549.614747][T23922] dump_stack_lvl+0xe8/0x150 [ 549.614782][T23922] should_fail_ex+0x412/0x560 [ 549.614819][T23922] should_failslab+0xa8/0x100 [ 549.614847][T23922] __kmalloc_noprof+0xe8/0x760 [ 549.614871][T23922] ? sctp_auth_make_key_vector+0xd8/0x300 [ 549.614899][T23922] sctp_auth_make_key_vector+0xd8/0x300 [ 549.614929][T23922] sctp_auth_asoc_create_secret+0x45/0x810 [ 549.614964][T23922] ? rcu_is_watching+0x15/0xb0 [ 549.614999][T23922] sctp_auth_asoc_init_active_key+0x14b/0x730 [ 549.615033][T23922] ? sctp_auth_set_key+0x32a/0x930 [ 549.615070][T23922] sctp_auth_set_key+0x60b/0x930 [ 549.615114][T23922] sctp_setsockopt_auth_key+0x21a/0x640 [ 549.615147][T23922] sctp_setsockopt+0x52d/0x12c0 [ 549.615168][T23922] ? sock_common_setsockopt+0x36/0xc0 [ 549.615198][T23922] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 549.615231][T23922] do_sock_setsockopt+0x17c/0x1b0 [ 549.615260][T23922] __x64_sys_setsockopt+0x13d/0x1b0 [ 549.615289][T23922] do_syscall_64+0x14d/0xf80 [ 549.615312][T23922] ? trace_irq_disable+0x3b/0x150 [ 549.615339][T23922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.615359][T23922] ? clear_bhb_loop+0x40/0x90 [ 549.615385][T23922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.615405][T23922] RIP: 0033:0x7f956179c819 [ 549.615425][T23922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.615442][T23922] RSP: 002b:00007f956266b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 549.615465][T23922] RAX: ffffffffffffffda RBX: 00007f9561a15fa0 RCX: 00007f956179c819 [ 549.615479][T23922] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 549.615492][T23922] RBP: 00007f956266b090 R08: 000000000000ffc9 R09: 0000000000000000 [ 549.615505][T23922] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.615518][T23922] R13: 00007f9561a16038 R14: 00007f9561a15fa0 R15: 00007ffdd09c0138 [ 549.615554][T23922] [ 550.037151][T23935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4940'. [ 550.058751][T23935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4940'. [ 550.070372][T23935] netlink: 'syz.4.4940': attribute type 12 has an invalid length. [ 550.083027][T23940] ip6tnl0: Caught tx_queue_len zero misconfig [ 550.083216][T23935] netlink: 'syz.4.4940': attribute type 11 has an invalid length. [ 550.422560][T23955] xt_time: unknown flags 0xf4 [ 550.668654][T23975] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4954'. [ 550.856847][T17974] net_ratelimit: 75 callbacks suppressed [ 550.856868][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 550.996582][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 551.092561][ T8655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.166751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.182386][T23995] netlink: 'syz.4.4959': attribute type 1 has an invalid length. [ 551.451369][T24008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4959'. [ 551.497667][T16222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.597246][T24002] bond5: (slave geneve2): making interface the new active one [ 551.605358][T24002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.628939][T24002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.637376][T24002] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 551.725033][T17983] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.738805][T16222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.777443][T17983] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.799253][T17983] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.849062][T17983] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 551.896710][T17983] bond1: (slave bridge1): failed to get link speed/duplex [ 551.912743][T24028] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 552.007769][T17983] bond1: (slave bridge1): failed to get link speed/duplex [ 552.146263][T24044] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4973'. [ 553.105408][T24096] netlink: 'syz.0.4988': attribute type 12 has an invalid length. [ 553.306061][T24101] netlink: 'syz.3.4991': attribute type 10 has an invalid length. [ 553.347465][T24101] bond0: (slave wlan1): Opening slave failed [ 553.385955][T24101] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 553.416579][T24101] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 553.471514][T24110] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.4995'. [ 553.528023][T24113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4996'. [ 553.558703][T24115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4993'. [ 553.645786][T24123] xt_recent: Unsupported userspace flags (000000b1) [ 553.664079][T24113] nbd: socks must be embedded in a SOCK_ITEM attr [ 553.679632][T24119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4996'. [ 553.750274][T24119] nbd: socks must be embedded in a SOCK_ITEM attr [ 553.799645][T23432] block nbd64: NBD_DISCONNECT [ 554.150371][T24141] x_tables: duplicate underflow at hook 2 [ 554.229859][T24145] x_tables: duplicate underflow at hook 2 [ 554.282800][T23432] udevd[23432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 554.330724][T24149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5004'. [ 554.939303][T24180] netlink: 'syz.0.5010': attribute type 8 has an invalid length. [ 555.060293][T24185] lo: Caught tx_queue_len zero misconfig [ 555.120255][T24188] syzkaller0: left allmulticast mode [ 555.967710][T17981] net_ratelimit: 63 callbacks suppressed [ 555.967733][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 556.096725][ T7444] bond1: (slave bridge1): failed to get link speed/duplex [ 556.206815][ T7444] bond1: (slave bridge1): failed to get link speed/duplex [ 556.316766][ T7444] bond1: (slave bridge1): failed to get link speed/duplex [ 556.426621][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 556.447034][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.536712][T17974] bond1: (slave bridge1): failed to get link speed/duplex [ 556.607965][T16219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.646895][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 556.756679][ T7444] bond1: (slave bridge1): failed to get link speed/duplex [ 557.294610][T24149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.327098][T24175] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5009'. [ 557.513904][T24210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5019'. [ 557.588720][T24210] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 557.724934][T24217] syzkaller0: entered allmulticast mode [ 557.739076][T24210] tipc: Started in network mode [ 557.744002][T24210] tipc: Node identity 8a6d6edef4c7, cluster identity 4711 [ 557.768652][T24210] tipc: Enabled bearer , priority 0 [ 557.908474][T24230] netlink: 'syz.2.5027': attribute type 17 has an invalid length. [ 557.985018][T24234] bridge0: port 3(veth0_to_bridge) entered blocking state [ 557.988123][T24238] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.5030'. [ 558.001614][T24234] bridge0: port 3(veth0_to_bridge) entered disabled state [ 558.001828][T24234] veth0_to_bridge: entered allmulticast mode [ 558.028794][T24234] veth0_to_bridge: entered promiscuous mode [ 558.034955][T24234] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.049996][T24234] bridge0: port 3(veth0_to_bridge) entered blocking state [ 558.057601][T24234] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 558.078081][T24240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5031'. [ 558.672551][T24260] netlink: 'syz.0.5037': attribute type 4 has an invalid length. [ 558.772016][T24258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.886679][ T8655] tipc: Node number set to 2125098718 [ 559.058366][T24293] netlink: 'syz.0.5044': attribute type 3 has an invalid length. [ 559.085736][T24292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5046'. [ 559.190205][T24297] nbd: must specify a size in bytes for the device [ 559.200855][T24297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5045'. [ 559.400144][T24307] syzkaller0: entered promiscuous mode [ 559.410325][T24307] syzkaller0: entered allmulticast mode [ 559.644550][T24327] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5053'. [ 561.302569][T24336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5054'. [ 561.466682][ T147] net_ratelimit: 38 callbacks suppressed [ 561.466704][ T147] bond1: (slave bridge1): failed to get link speed/duplex [ 561.596126][T24357] h: entered promiscuous mode [ 561.636866][ T147] bond1: (slave bridge1): failed to get link speed/duplex [ 561.648140][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.660754][T24364] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5061'. [ 561.680625][T24359] lo speed is unknown, defaulting to 1000 [ 561.760564][ T147] bond1: (slave bridge1): failed to get link speed/duplex [ 561.891448][T24376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5066'. [ 561.906981][ T147] bond1: (slave bridge1): failed to get link speed/duplex [ 561.906988][T16229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.026917][ T147] bond1: (slave bridge1): failed to get link speed/duplex [ 562.147034][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 562.257052][T17981] bond1: (slave bridge1): failed to get link speed/duplex [ 562.298180][T24390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5070'. [ 562.377080][T17983] bond1: (slave bridge1): failed to get link speed/duplex [ 562.789600][T24407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.809093][T24407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.815853][T24409] ip6gre1: entered allmulticast mode [ 562.818860][T24407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.832395][T24407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.855495][T24407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.884435][T24407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.903198][T24407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.913796][T24407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.923953][T24407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.940313][T24407] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 562.949723][T24413] netlink: 'syz.0.5077': attribute type 18 has an invalid length. [ 563.023837][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 563.224429][T24423] netlink: 316 bytes leftover after parsing attributes in process `syz.4.5080'. [ 563.491206][T24442] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5087'. [ 564.126899][ T5143] Bluetooth: hci4: command 0x0405 tx timeout [ 564.212852][T24470] netlink: 'syz.1.5096': attribute type 22 has an invalid length. [ 564.226529][T24470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5096'. [ 564.278352][T17981] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.288715][T17981] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.305953][ T147] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.336664][ T147] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.558575][T24487] netlink: 'syz.0.5102': attribute type 1 has an invalid length. [ 564.651888][T24487] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 564.667371][T24487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5102'. [ 564.716044][T24487] 8021q: adding VLAN 0 to HW filter on device bond5 [ 564.755076][T24493] pim6reg1: entered promiscuous mode [ 564.774141][T24493] pim6reg1: entered allmulticast mode [ 564.966079][ T29] audit: type=1800 audit(1774960602.074:5): pid=24503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5108" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1925 res=0 errno=0 [ 565.089226][T24513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5110'. [ 565.177568][T24514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5111'. [ 565.396786][T24529] ------------[ cut here ]------------ [ 565.402766][T24529] 1 [ 565.402783][T24529] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#0: syz.0.5116/24529 [ 565.414890][T24529] Modules linked in: [ 565.419291][T24529] CPU: 0 UID: 0 PID: 24529 Comm: syz.0.5116 Not tainted syzkaller #0 PREEMPT(full) [ 565.428749][T24529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.438892][T24529] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 565.443878][T24529] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 9a 57 ba f7 66 90 e8 93 57 ba f7 31 ff 48 89 de ba 02 00 00 00 e8 64 28 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 565.463595][T24529] RSP: 0018:ffffc900026371e0 EFLAGS: 00010282 [ 565.469743][T24529] RAX: 0f0f862d99362000 RBX: ffff888073664dc0 RCX: 0000000080000401 [ 565.477785][T24529] RDX: 0000000000000002 RSI: ffffffff8def97e8 RDI: ffffffff8c27cb00 [ 565.480370][T24539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5118'. [ 565.485781][T24529] RBP: ffffc900026374e0 R08: ffffffff9011beb7 R09: 1ffffffff20237d6 [ 565.485852][T24529] R10: dffffc0000000000 R11: fffffbfff20237d7 R12: dffffc0000000000 [ 565.485870][T24529] R13: 0000000000000000 R14: ffff888073664dc0 R15: dffffc0000000000 [ 565.485888][T24529] FS: 00007f956266b6c0(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 565.485909][T24529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.485926][T24529] CR2: 00007f657b9620a0 CR3: 0000000033bb4000 CR4: 00000000003526f0 [ 565.485949][T24529] Call Trace: [ 565.485959][T24529] [ 565.485975][T24529] ip_push_pending_frames+0x8b/0x110 [ 565.486012][T24529] __icmp_send+0x118d/0x1590 [ 565.486048][T24529] ? __icmp_send+0x22b/0x1590 [ 565.486091][T24529] ? __pfx___icmp_send+0x10/0x10 [ 565.486151][T24529] ? ip_route_input_noref+0xad/0x270 [ 565.486188][T24529] ? __pfx_ip_route_input_noref+0x10/0x10 [ 565.486223][T24529] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 565.486262][T24529] ip_options_compile+0x80/0xb0 [ 565.486290][T24529] ip_rcv_finish_core+0xaa2/0x1c00 [ 565.486338][T24529] ip_rcv_finish+0x14c/0x2a0 [ 565.486373][T24529] NF_HOOK+0x336/0x3c0 [ 565.486408][T24529] ? __pfx_ip_rcv_finish+0x10/0x10 [ 565.486493][T24529] ? NF_HOOK+0x9e/0x3c0 [ 565.486526][T24529] ? __pfx_NF_HOOK+0x10/0x10 [ 565.486561][T24529] ? __pfx_ip_rcv_finish+0x10/0x10 [ 565.486610][T24529] ? netif_receive_skb+0x102/0xc50 [ 565.486642][T24529] ? __pfx_ip_rcv+0x10/0x10 [ 565.486670][T24529] netif_receive_skb+0x45b/0xc50 [ 565.486705][T24529] ? __pfx_netif_receive_skb+0x10/0x10 [ 565.486733][T24529] ? __lock_acquire+0x6b5/0x2cf0 [ 565.486767][T24529] ? tun_rx_batched+0x185/0x790 [ 565.654215][T24529] tun_rx_batched+0x1de/0x790 [ 565.658992][T24529] ? __build_skb+0x62/0x440 [ 565.663543][T24529] ? __pfx_tun_rx_batched+0x10/0x10 [ 565.668829][T24529] ? tun_get_user+0x2354/0x3dd0 [ 565.673716][T24529] ? __local_bh_enable_ip+0xd0/0x130 [ 565.679087][T24529] ? tun_get_user+0x2669/0x3dd0 [ 565.684233][T24529] tun_get_user+0x2a78/0x3dd0 [ 565.689012][T24529] ? aa_file_perm+0x50e/0x15e0 [ 565.693809][T24529] ? __pfx_tun_get_user+0x10/0x10 [ 565.698908][T24529] ? aa_file_perm+0x192/0x15e0 [ 565.703728][T24529] ? ref_tracker_alloc+0x35c/0x4c0 [ 565.708928][T24529] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 565.714434][T24529] ? tun_get+0x1c/0x2f0 [ 565.718692][T24529] ? tun_get+0x1c/0x2f0 [ 565.722880][T24529] ? tun_get+0x1c/0x2f0 [ 565.727130][T24529] tun_chr_write_iter+0x113/0x200 [ 565.732195][T24529] vfs_write+0x61d/0xb90 [ 565.736544][T24529] ? __pfx_vfs_write+0x10/0x10 [ 565.741525][T24529] ? __fget_files+0x2a/0x420 [ 565.746172][T24529] ksys_write+0x150/0x270 [ 565.750612][T24529] ? __pfx_ksys_write+0x10/0x10 [ 565.755519][T24529] do_syscall_64+0x14d/0xf80 [ 565.760203][T24529] ? trace_irq_disable+0x3b/0x150 [ 565.765270][T24529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.771425][T24529] ? clear_bhb_loop+0x40/0x90 [ 565.776137][T24529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.782137][T24529] RIP: 0033:0x7f956175d04e [ 565.786638][T24529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 565.806353][T24529] RSP: 002b:00007f956266afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 565.814843][T24529] RAX: ffffffffffffffda RBX: 00007f956266b6c0 RCX: 00007f956175d04e [ 565.822880][T24529] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 565.830912][T24529] RBP: 00007f9561832c91 R08: 0000000000000000 R09: 0000000000000000 [ 565.838955][T24529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.847047][T24529] R13: 00007f9561a16038 R14: 00007f9561a15fa0 R15: 00007ffdd09c0138 [ 565.855090][T24529] [ 565.858214][T24529] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 565.865532][T24529] CPU: 0 UID: 0 PID: 24529 Comm: syz.0.5116 Not tainted syzkaller #0 PREEMPT(full) [ 565.874953][T24529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.885050][T24529] Call Trace: [ 565.888355][T24529] [ 565.891312][T24529] vpanic+0x56c/0xa60 [ 565.895325][T24529] ? __pfx__printk+0x10/0x10 [ 565.899945][T24529] ? __pfx_vpanic+0x10/0x10 [ 565.904482][T24529] ? is_bpf_text_address+0x292/0x2b0 [ 565.909805][T24529] ? is_bpf_text_address+0x26/0x2b0 [ 565.915056][T24529] panic+0xc5/0xd0 [ 565.918822][T24529] ? __pfx_panic+0x10/0x10 [ 565.923297][T24529] __warn+0x315/0x4f0 [ 565.927318][T24529] ? ip_rt_bug+0x2d/0x140 [ 565.931681][T24529] ? ip_rt_bug+0x2d/0x140 [ 565.936045][T24529] __report_bug+0x29a/0x540 [ 565.940578][T24529] ? NF_HOOK+0x336/0x3c0 [ 565.944851][T24529] ? netif_receive_skb+0x45b/0xc50 [ 565.949995][T24529] ? tun_rx_batched+0x1de/0x790 [ 565.955234][T24529] ? ip_rt_bug+0x2d/0x140 [ 565.959610][T24529] ? __pfx___report_bug+0x10/0x10 [ 565.964664][T24529] ? ip_rt_bug+0x2d/0x140 [ 565.969001][T24529] report_bug+0x16a/0x220 [ 565.973339][T24529] ? ip_rt_bug+0x2d/0x140 [ 565.977678][T24529] ? ip_rt_bug+0x2f/0x140 [ 565.982015][T24529] handle_bug+0x9c/0x200 [ 565.986267][T24529] exc_invalid_op+0x1a/0x50 [ 565.990781][T24529] asm_exc_invalid_op+0x1a/0x20 [ 565.995636][T24529] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 566.000583][T24529] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 9a 57 ba f7 66 90 e8 93 57 ba f7 31 ff 48 89 de ba 02 00 00 00 e8 64 28 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 566.020193][T24529] RSP: 0018:ffffc900026371e0 EFLAGS: 00010282 [ 566.026266][T24529] RAX: 0f0f862d99362000 RBX: ffff888073664dc0 RCX: 0000000080000401 [ 566.034244][T24529] RDX: 0000000000000002 RSI: ffffffff8def97e8 RDI: ffffffff8c27cb00 [ 566.042229][T24529] RBP: ffffc900026374e0 R08: ffffffff9011beb7 R09: 1ffffffff20237d6 [ 566.050232][T24529] R10: dffffc0000000000 R11: fffffbfff20237d7 R12: dffffc0000000000 [ 566.058223][T24529] R13: 0000000000000000 R14: ffff888073664dc0 R15: dffffc0000000000 [ 566.066232][T24529] ip_push_pending_frames+0x8b/0x110 [ 566.071543][T24529] __icmp_send+0x118d/0x1590 [ 566.076158][T24529] ? __icmp_send+0x22b/0x1590 [ 566.080856][T24529] ? __pfx___icmp_send+0x10/0x10 [ 566.085822][T24529] ? ip_route_input_noref+0xad/0x270 [ 566.091122][T24529] ? __pfx_ip_route_input_noref+0x10/0x10 [ 566.096856][T24529] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 566.102071][T24529] ip_options_compile+0x80/0xb0 [ 566.106932][T24529] ip_rcv_finish_core+0xaa2/0x1c00 [ 566.112068][T24529] ip_rcv_finish+0x14c/0x2a0 [ 566.116671][T24529] NF_HOOK+0x336/0x3c0 [ 566.120753][T24529] ? __pfx_ip_rcv_finish+0x10/0x10 [ 566.125873][T24529] ? NF_HOOK+0x9e/0x3c0 [ 566.130042][T24529] ? __pfx_NF_HOOK+0x10/0x10 [ 566.134648][T24529] ? __pfx_ip_rcv_finish+0x10/0x10 [ 566.139778][T24529] ? netif_receive_skb+0x102/0xc50 [ 566.144900][T24529] ? __pfx_ip_rcv+0x10/0x10 [ 566.149413][T24529] netif_receive_skb+0x45b/0xc50 [ 566.154397][T24529] ? __pfx_netif_receive_skb+0x10/0x10 [ 566.159868][T24529] ? __lock_acquire+0x6b5/0x2cf0 [ 566.164819][T24529] ? tun_rx_batched+0x185/0x790 [ 566.169683][T24529] tun_rx_batched+0x1de/0x790 [ 566.174373][T24529] ? __build_skb+0x62/0x440 [ 566.178887][T24529] ? __pfx_tun_rx_batched+0x10/0x10 [ 566.184100][T24529] ? tun_get_user+0x2354/0x3dd0 [ 566.189041][T24529] ? __local_bh_enable_ip+0xd0/0x130 [ 566.194339][T24529] ? tun_get_user+0x2669/0x3dd0 [ 566.199194][T24529] tun_get_user+0x2a78/0x3dd0 [ 566.203900][T24529] ? aa_file_perm+0x50e/0x15e0 [ 566.208668][T24529] ? __pfx_tun_get_user+0x10/0x10 [ 566.213698][T24529] ? aa_file_perm+0x192/0x15e0 [ 566.218495][T24529] ? ref_tracker_alloc+0x35c/0x4c0 [ 566.223623][T24529] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 566.229273][T24529] ? tun_get+0x1c/0x2f0 [ 566.233439][T24529] ? tun_get+0x1c/0x2f0 [ 566.237602][T24529] ? tun_get+0x1c/0x2f0 [ 566.241768][T24529] tun_chr_write_iter+0x113/0x200 [ 566.246801][T24529] vfs_write+0x61d/0xb90 [ 566.251058][T24529] ? __pfx_vfs_write+0x10/0x10 [ 566.255835][T24529] ? __fget_files+0x2a/0x420 [ 566.260481][T24529] ksys_write+0x150/0x270 [ 566.264821][T24529] ? __pfx_ksys_write+0x10/0x10 [ 566.269712][T24529] do_syscall_64+0x14d/0xf80 [ 566.274309][T24529] ? trace_irq_disable+0x3b/0x150 [ 566.279336][T24529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.285407][T24529] ? clear_bhb_loop+0x40/0x90 [ 566.290092][T24529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.295993][T24529] RIP: 0033:0x7f956175d04e [ 566.300418][T24529] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 566.320292][T24529] RSP: 002b:00007f956266afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 566.328714][T24529] RAX: ffffffffffffffda RBX: 00007f956266b6c0 RCX: 00007f956175d04e [ 566.336692][T24529] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 566.344664][T24529] RBP: 00007f9561832c91 R08: 0000000000000000 R09: 0000000000000000 [ 566.352894][T24529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.360870][T24529] R13: 00007f9561a16038 R14: 00007f9561a15fa0 R15: 00007ffdd09c0138 [ 566.368865][T24529] [ 566.372034][T24529] Kernel Offset: disabled [ 566.376355][T24529] Rebooting in 86400 seconds..