last executing test programs: 5.650099737s ago: executing program 3 (id=14241): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd16", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xff, 0x5, 0x3}) syz_emit_ethernet(0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080600010800060400020180c2000003"], 0x0) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040)=0xfa, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="40010000", @ANYRES16, @ANYBLOB="010028bd7000ffdbdf2503000000500001801200010069623a766972745f7769666930000000380004001400010002004e210a0101000000000000000000200002000a00000600000002ff010000000000000000000000000001b8f3ffff1c00038008000300010400000800010059010000080003007f000000c000058008000100657468001c000280080002000500000008000400140b000008000200050000000800010065746800080001006574680014000280080002000000000008000300100000000c00028008000100010000003c00028008000400060000000800020000000000080002000000000008000300070000000800020002"], 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) (async) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd80000009602"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="6ce94f91a16e314e940779b8572de091858d146761c6aa1a2483015fbf7be7a4c4ec2500df5c236126cf522b2726dd5f97d3ed215821d8668be0309a99083d9d1c538fae3078ce6b6df3", @ANYRESDEC=r0, @ANYRES32=r4], 0x14}}, 0x4008841) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x275a, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4d000000e1938a0f83386046ac276ee72167f7b036e46b0ec4eb9409ff3dd53f7d4f1ac32333f3f0634333a517ff0193f6b2f476675e5dcd486b0a27f23a8899c231109126eb944eac9412", @ANYRES16=r8, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000008008e0000000000"], 0x4c}}, 0x0) 5.522945937s ago: executing program 3 (id=14243): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x3c, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000740)={0x0, @multicast2}, &(0x7f0000000780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x47, 0x1, 0x3a, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x20, 0x700, 0x9, 0x8fa2}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ec0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xfff3, 0xfff1}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x8, 0x7, 0x0, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @dev, @private}, &(0x7f00000009c0)=0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xb, 0x6576, 0xba, 0x1, 0x1, 0x7}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xff}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'netdevsim0\x00', 0x0}) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r18 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r19 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r18, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r19, r17}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x29c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4004880}, 0x400500c) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000200)=""/221, 0xdd}, {&(0x7f0000000300)=""/168, 0xa8}, {&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f00000004c0)=""/214, 0xd6}], 0x6, 0x2c5ad7b9, 0x2) 5.083509713s ago: executing program 3 (id=14249): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet(0x2, 0x1, 0x100) close(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007740)=@newtfilter={0x70, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x80}}, @filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x20, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 4.944410092s ago: executing program 3 (id=14251): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000fcffffff8500000023000000180100002020642500000000002020207b1af8ff00000000bfa1000000000000070100f6f7ffffffb702000008000000b70300000000000085000000170000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="cd1cff000000bbbb7fbbbbbb86dd6000000000142f01ff010000000000000000000000ee448615c8a6c74a4db4cedc4c000001ff01000000800028a41b60fd332f30d66f7660d4aac13842ce6c78364ca00f2aae20af0332514a1745d02c96b3995c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040000090780000"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) getsockopt$packet_int(r2, 0x107, 0x8, 0x0, &(0x7f0000000040)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000029000b0027bd70000040000002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4040080) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000080)=0x401, 0x4) r8 = socket$caif_seqpacket(0x25, 0x5, 0x1) connect$caif(r8, &(0x7f0000000140)=@rfm={0x25, 0x3, "2c1e2ff8453b1d28602a1e17aec011c9"}, 0x18) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff00010000fbf0dc7f7c6e7c0200010000000000004002000000ffff05000500000000000a", @ANYRES8=0x0], 0x80}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x1, 0x0) 4.790322454s ago: executing program 2 (id=14254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000000c0)=@generic={0x1, 0x0, 0x3ffffffc}) r3 = socket(0x21, 0xa, 0x9) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x71c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040}, 0x804) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6, 0x0, 0x0, 0x41}]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="f44e672d7000fbdbdf2531fb000008000300", @ANYRES32=r10, @ANYBLOB="0c009900010000007e00000008000300", @ANYRES32=r11, @ANYBLOB="080001002b00000008005200", @ANYRES32=0x0, @ANYBLOB="0c009900e86200004e00000008000300", @ANYRES32=r13, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48010}, 0x40000) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r8], 0x2c}}, 0x4000000) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="02002dbd7000ffdbdf251100eeff0400300000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24040844) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) recvmsg$unix(r3, &(0x7f0000000bc0)={&(0x7f0000000600), 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f0000000700)=""/174, 0xae}, {&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f00000007c0)=""/98, 0x62}, {&(0x7f0000000580)=""/5, 0x5}, {&(0x7f0000000840)=""/189, 0xbd}, {&(0x7f0000000940)=""/73, 0x49}, {&(0x7f00000009c0)=""/231, 0xe7}, {&(0x7f0000000ac0)=""/2, 0x2}], 0x9}, 0x40000001) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) r14 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r14, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003000300"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 4.446501247s ago: executing program 2 (id=14259): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000000c00170002"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x9, 0x7, {{0x9, 0x4, 0x0, 0x38, 0x24, 0x66, 0x0, 0xb5, 0x29, 0x0, @multicast1, @empty, {[@generic={0x7, 0xe, "188a06ee79ede15d7f0904d4"}]}}}}}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000840)={0x0, @generic={0x1b, "e0dbbc0e416b5047b8c6a8151652"}, @can={0x1d, r2}, @can={0x1d, r2}, 0x7, 0x0, 0x0, 0x0, 0xfff7, &(0x7f0000000700)='pimreg0\x00', 0x6, 0x0, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000010000800000000000000080180100002020082500000000002020207b1af8ff00000000bfa100000000000007010000f8ff7c9c6cd088d7e81d0000b7030000f4a339358500000006000000181b0000", @ANYRES32=r5, @ANYBLOB="000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000004354e0ff00000000808e0800010000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xb0, &(0x7f0000000300)=""/176, 0x41100, 0x8, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000004c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x10, 0x6, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r5, r10], &(0x7f0000000280)=[{0x3, 0x2, 0x0, 0xc}, {0x5, 0x3, 0x4, 0x3}, {0x1, 0x1, 0x1, 0xb}, {0x0, 0x1, 0xc, 0x5}], 0x10, 0x8}, 0xc9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000600), &(0x7f0000000640)=0x4) mmap(&(0x7f0000f96000/0x4000)=nil, 0x4000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$inet(r3, &(0x7f0000000580)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) r12 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r12, &(0x7f0000000040), 0x10) write$tcp_mem(r4, &(0x7f0000000680)={0x80000001, 0x20, 0x4, 0x20, 0x7}, 0x48) 4.020129571s ago: executing program 0 (id=14264): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000001500)=ANY=[@ANYBLOB="1f000000000000007311a300000000008510000002000000850000000000000095000000000000009500a50500000000597aa90a8a1dd84e2a7f99d68ab4df031ea9453ddddb644d9c831ada9cc8cc6938c7c7290512b01c384f187f64be99f21839d17c3eeb0ba2d1aee4d56ce5ad946bf675e430e412e51624bace9a74a2e30baff92ebc853ecf407c59873ca65ced6531f7846dcfc34a4b9346d9ee70bad600f4623c9d067d0d3539d1bc1a8866cc365df2b2ccb247d5ed3340cfb23d41912cd0c9960556871eeed00d4c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000001500)=ANY=[@ANYBLOB="1f000000000000007311a300000000008510000002000000850000000000000095000000000000009500a50500000000597aa90a8a1dd84e2a7f99d68ab4df031ea9453ddddb644d9c831ada9cc8cc6938c7c7290512b01c384f187f64be99f21839d17c3eeb0ba2d1aee4d56ce5ad946bf675e430e412e51624bace9a74a2e30baff92ebc853ecf407c59873ca65ced6531f7846dcfc34a4b9346d9ee70bad600f4623c9d067d0d3539d1bc1a8866cc365df2b2ccb247d5ed3340cfb23d41912cd0c9960556871eeed00d4c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) (async) 3.911273922s ago: executing program 0 (id=14267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x9, 0x5a, 0x2]}]}]}, 0x28}}, 0x8000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xcf, 0xfffffffffffffffc, &(0x7f0000000040)) syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x4, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x39, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 3.776875275s ago: executing program 2 (id=14268): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0xfffffed6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000001000200000008000300ac1414aa00"/34], 0x28}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c0000001e00000000ffffff00000000020000000100001600000000080004000100000008000100640101026ff56ffe6782205af0cf5d3a3aa6616b1557c3de4d08b0746460cdc8b118e5670f230371f009d2862a4a70d23fac23b64e77b562e658c34bb6da3a8f0b4bc45f2474673dbd73dcdeccb97f3fa74a7eca8f713de6082159b0d9e0004ec650445e1007dc6e027c69b3f1363a1ebf0248998a3b3293ca385b025e1fb052964a5d2d875f77a98a5d51ff95f3fa71e8fa9762eef2526f10aa3602c6472242fecf7ace"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x44044) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3, 0x0, 0xe42}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES64=r3, @ANYRES16=r4], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000000580)={'ip_vti0\x00', @broadcast}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@private2, 0x0}, &(0x7f0000000100)=0x14) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x6c, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400a0f365bb665ccf167881ffb5ac1c2a0ef267b681cc9d3294630828b77369df5b903a8237304e0001010000116eb505c7a167353a4ee86b8e9f8fd7125334f5afe7b4ff959ba1218573b5952b2fad4ee026604521753c7786a1e5bdc5c546060542b852560000000000000000f8bba5235757685ec3", 0xa3}, {&(0x7f0000000500)="15c1004bea0311ccdbc28e7116cbdbc0f11f943a8561380a21eb8a8fd491698b60dee467ba95c2f93d", 0x29}, {&(0x7f00000010c0)="e53950135c4874c5c2dcadda258210491da80abfd87216fd04fa19121a8502db2b905ac404248e5b7b1f60fa8bbb4845668789f0d46d0cd292bd2db841552d0bbd6a3327c32f0c8267c40de25a55b8ede09c0d7ec238153fa3c07e5964d7a959517c8f3a18280d963273adefbe6c5640b329c9d2785c1c351903c4833c2e3a63fdbb447b1c3c21ac8baa107cc07d1c28b7f054f002b5801454a4bbfd76886f58bc2bfdab0a2fac99f8bdce7a4d17eadef27984df6777652235369dca821e5ce27d82b89a8494edec884099a8b603bbf4ed855d9ceccc3a4268326f0dc501febc65304489f973fc3bf24c6f26239ea0db79c6403f21bfe845526bc9472d245c7a98a61794d54333c6d88dd46e1cf3385c8f4720a9d7a8ff4eff51e8f99e84a685b15b657d9cb63ed07d43a26391e414731812987c1db4fd6f5bc9e5b03fe9cc4f22d4890559885f430db07c3001dadf683d50346b82c68d2b32b95b583f87dd18658a266bd0c2ce093915a979f1c7c69bacc08c39711bee55b974717d6a8da1eb4bcc0f692b185082f1805f939ab5af3918aad86e8a0fa4d7bd73a17510248645e02a59334b92f0024cf5da6d289f93db14ec79fdae5e93c3ab6773d441ef7e1f184161f06e07063c34886b937a69d25b771924d91ff749831897ede788dd63001562c2d5228eb1f8072d78761307b95113b1addf772e46db3a0faa331ec3f981eb8be5c01a72d291cefd4ebfe281343bf6479ed33af89a8b2f36500a2b36c09475f441e04c9ef3d7949e2179f9f367b6704a857b3f9c0229d38f0f7d2620552a3ff4d38a9bb2ef83d093d4079cc978a0e18c5feae33def1ad8cfaaba1ae6b4c5a28e6491b4f78c5007e09380da50d1fbc06f4affdde7bfd2035328c3fef3a3f22b0685915d00766a751a6efc39b2d20772d4bde4d737ebe23f1e38a0e8c7c06ca44bd19c9e96910b9cca56fccac81167e1eda91c6b60d194c3ca4f3e44d1f9e557a3279226bcf5c53659563240982f3249e213da4c8b3c203ff80ca8c1b4cdcf17bb94401641a3d52e2813ae65a4051bf06a52c48aa2a3059cc32aeffe8260767c105cb80f24c83f99098af74b08a2ebfb706b4c387f9407c86cc8d1dd3f63b1bdaee1236728e522cbc8de060de62aae1ad2912ead86e15b0a03ace77bf7b0cce7b4d47eee3bd8f47542b6331bc6fccef17f33f44984f842ef99da022bf9441046f820342d1704c7a7ad3ec7ad5343440dc2373b3ab3458ca2efd9320581d6825626ede6b51cb73c16a5b7b9a71367bb04c483a3465a6fd1345bcbade50502f4dcfcda166d367bf893bc4f3a7bc830fdbdd9b754632cc2c3c5f7229583a8e077f1085879de3a690ba96c4440060b6ca5a6e4dc99ae1512af39a7d6c1bfe2837afe594b3ff29d0d2ea19f8ba65d71eee579ef2a1f50bb196049d09e23d2ece9e5464a9e9d577aa5effb7730528e925e7562f60e0b17a2e774a60cddcce6ca28bb2c5d61d9543fbbc98f34ff423baf9adbcbe188011bb1acfdb9b9b066e371e64010dca7b3bc5e7fe9888379bfef3449c37d94944cad341713031f76d4f61448e85ad73f4e661b15c63f3e59bc8360353b58e5cc5b2dc7a233fef7b769fd6ee7b8394ea383d92d8bda2ac469d2256c3746cddba12d83b7458bcb2622dddafd3ea6b0d74f1f5535dd4064086268775ea5e4803ce6be545c5153c83d7669202f8dd38b216a6c4bef7cc9a45878fde654a3a1e73b0736619e0c6c5ed22f4334a9fd98ac2c753a99247f87c9a8a30f7492eaf64fbc3e2277dd804d4dd93f746e1ede92314a8cc9b5e1c7b52b9fcc69ece453cbd3ef670afd290f69ba4ab575238778b5188a8934c80c671dcdfd3f1e6416fc729d4037ae649060fac19bdcc1f6087eb2975f229f42be87da26cd67150be98dd7ab62a132565f641cacb272784250abc5d4da4da3707573b01c8d17c2dc99004459c52477cdfb23de32070f36fce712f3ea3909338412e96efcdcfec550281c028bca7c5009ba8996ddd6abe4cad5381efba25a8f695bacbace825a3da4d6cc3025e4cc98a34d77cdda3f0b8e61bb6febdca17014d65924f901070524bd63739a96c25da41f907b1eb97d8a7d7ebdd6fac8d521bd5218db2311158cd7569b65025d2fcfbc9409f6b4e2955589147687c6f22ad2ab59f2d6130a9c13ba3d9e1c9b6be89eeff577a58cac4e354f11cd5b45d42c6945446734b8d5fe8bbb81902d1f9af5233749dabba1c5a4befe01e890fbcce8802a4b72bf019a4d423a32e4eef8a2c17f725b5b1fd1abc4f13a01f4cfd3214900f8adfc4f5f93dd05010ba0c50ebce2e6644557e91abdfa5afe8c05542da1ba9f78b688c4b31232494ae597c2ddd5733a24e4300fa327ac42e13736682ddf337d39af89a3111957969b191399b6b38fee07c4806fb0da45565151ecbe2707653232b4b814b70b33fc8fee97f7c7d1a8fd9edb788c22f1b8700293a51cace9394536d2ab6ba6e22250b0eab603a4d66a02a57597a3a64a34f266d5954215d9ac4f25f172495bbd45fdcce8ba5b0802d8e82708aa469f51810634eaca71a7bdd654e9de714149e5244c1ca4b56f4280dc62cae451d3938b0542bf657e28da4b102fbd5cc961854969b43391ebdee0b70b0bf707ccc00cdbdac2b058117720432e8b345422114b70772ddd1e55c0a2c38954fe22bc6509aa495228898456de984517ae71ac75b617fc19be148978f26ed96804091683864eeff3405364495a3cf8137de26b0b35708ec24ecac40e14908065d49913a550c48cd0d9ebc4d96d9000325e7c37318b3ef10733ea523117ec2bdc002ed89746be1a69f876008ae100dadc81b1c5e788ffef7ec12aafa7a777668a4ff15b41487c8e071a8522d4ff4630fa6b0021527228a471963ca1c568f9a545f272693f239ac8d35e8857a637a973ecbf802ca347a657a5c3985e65076a1a7b747a5a8ffbc76fa2cad97baf3717a29ab4e3bf75e5a817dc995bca80850a1bccc4c6527e441a9ef2c9aa18b1d00a8ab664eadedfcba8ef95004f74ace309e21e80acfaafbe99a6c73eab7a9a95ce2dcf986556753b083605d4b8b6a3f1d3bc7d61882d4d3a5bd6fb1aa6a58445dbee03b377c8181dd491292625425dec1bbb6b6ed9023cb6fa61c9c3429998305e907913d0e873392dca8ddb79b1d2964f776578b66652ef8698f094383f7fd2d18ba39388f28baa7808654f8f39dd60543bfec1b1c0690e3542d1b5f893dc86dbf49f39d9956d5ba01329202e1ed9878e3438beec6fd22cb77ff5c383fbc8cccd2cd8faab86204a569657c1f67f1e77e0a612c8370d4f95ff17593868b40b4e41b0504e20e500721d17208c80dd1f85a11a470f4b8766bf199b7db22e9edf5a325940be3610ad3b89176bdb830520b4a9f3b1be0f307d314cae237fcbc01c6aba5eccfcf2ee4394e2e6c36bf31bbd1b7130f7b3ea38e900404af56a52e191ee01037ad92beab297a30f098d0585853c50e6e50b7f37d4f3f8974182379c62a01aa6f0bf91ea4dad2d273fe719033c5bb9b28e9bd036f21e8280f21660d08f6bdb6725d6242b1d6aeba056041db131edac3a8facaa0c79d9996c49b9b3d9931a5867b9e12dbdf6da9df7909b7a06a86d0741c9394d7fe531e770ec15e5088b6a88c193b5f61efb101ebfb2e015b413b5f8aa2c06d242cddf65bf8ecec281611e52bd28c38e1f964f847ed884e80f5c82b5cb0042a9612e7d002531a5af55dd66b69c8648319ef98f648b32ba53f306d9ff774bb327763347045c76f432293cca2896b332ebb3772388f171bbdd30c8878435d2465781e90a0485b09de6a353d5bd0ce4db725f1d92181de35134d3679b09cdc7412ba92fcd3596d8b3a5b75590c6064bcfea5f037ce28d9790f7e4806b8238279dba40a8e754f465eb61b3980a88884bf3f24571fa548754abcd03c1632859c8ae0372667840e7bafda9a2f60ddbb0ed0675c22a4d6bc3926efb11c5afd6c3d692e46a74f13c66bbd335123606fd80549a22c0b813fb754c66c6b89edbe1ed39491b480d82a80f53ea1f9587e5419b3eb5f95dec46e8cb0e1e08a0e1b55a507eda84f82dcb915533d018c59637765505dad716bdce90294660c489dd6b9aef5a73b803cbb10e594eb6b61cbfd405d872f63a47c18ade5c1e6c7450a11d713a5eeb3f3b48773ae22ada70e87f0a38d584f22c57f307222412317b0629f5ef051b3062d81e372e95cf11ef142e9af44a8cfe51d9e5b8e5a1715cb9c66bff8478c55b0067914f2b060c6251144e3ac94e35198bfed48bcd186059061ece0a3b803c352cdc46b2454af2a78d5ef2c367a232f398b60a0a884a74c0832fdf47f4c1bb6d3e49b622e4ac46ca0b5eb1e056c783677d3218a1187b4ed4d6716df0b88c1c24d014de3b93ee8cac3756237a4306c45e7538b2f922ff13719c5182341fd148e9c2723786b23184c2f89cba391d1332ab977bd2cac222f1add6c0329d78408e5259bd48a53f7d3f2c6850f3652d2ea45091b314ea70c03a646ac9d2b77e32de44390726264a6d2ae1edd56ff3db99fded0ad58accf5126712eacc6b34d639172d545bd4f42c53c9c286586ce091754e4dcf5c6783c261502305f6ee2e1140fdb3758421e9155b95a486f590939537aab10e778b1a419dc1ea921a9cd2709c958c9b7409d8117eb546fd59f38c16205bae944a6f5ed0299b277bf4fafc912ee35e9dc7833fa161fe1a77d9c0a64e3f91a5cd41c698af7c3d3eae8bc934197e643da726196c967e67af886f7cf678037f0e6a420f33c3e89a59aff9b94bd30bb4c8d1dcb1f3e0dcfcbd14935e5ee40dd8bdabecc0a24a44a080d3bd4c90fdf4a616150b6c0e317ef526bf0dc62f1dccdab01212d0441a8be405e4072cd4536677c0999e36bcf9c4ab59f9f2af1353bde7d8a2264d0ef1598c3381cf8bc944597381e537a11c2228e37fd88003e289db13ef44122a651e72b48e4b64c407cfebe806519a0d76dd11170640c4caf306843737fa360fff4534c809f4271302cef422e9ec56eec5fc6c7732d31225d4a8f48fc2e48f7b2bfc23b0314d264fe3923251bd87b3819df49f3b8b3ba98eef461d2d3437828068e112bdb7e0e3d8451e139a910d5e91f19ebcde8f52fdc693824f97ef3b7bb2e785f7d86ece5779b876b438aceab1f5557db59027b8a2bc20ee06ff4d7edbe6393e559d7fedf3da521fa07a1707610fa54f900eabde859da357815b24482dad848a7f52cc982dfd7fbb3af1aac5f14d6433a6371b5c08826fdb18c5edf84b9758bb0c3647aa7c26cee59ca6a94ad9adff40761b84cf3c09a9dd76050bfcb802633e13d6ba400a1d7c22182d6cad8db769e35d9e1dde3ec9f135743c7aba65847e36177582d0137c4926e5c8713e215d596d7016b6de631aee9bcbe12cbf7723e4d8637e61fe3e46fb0dc022e41eb883a77ec6e53689b907e059e080201aef3644fe44c3408129d8a02f43d0a2b9586c96c477b743ad71776d7dc9c5a8099878d28e60a671aaeed0372f18db33634454c4663b3dd5c8c2e490d9d163cdf6590fc57e18dc0b1cb39e4e4fd1649c15011b879a3c6f1459ad992892b1454758cdfabf218dcebd37a7b9b721bcbe024b629a4402f12fdb3b152376823b485cedd424114dcd00e6151653557b90e096c9a93f7835b8ca4adb09da0adbbd5952960b7bf744e0f6ef411ccc069d848d1b1668c634e2343a96c7073a3b49fcc83f7f7ed1d1f4c76383240a131d58ad34d518f0227d43e1706f747f27d0", 0x1000}], 0x3}, 0x64000800) 3.760865109s ago: executing program 0 (id=14269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmmsg$inet(r2, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2a534b308834d054586feb5c9428624db4b878120e41be144acec28b091f1237c91d74cf1ce0c17632e8dce6ac8c6822c2382fc3ac7c89f2d955bc265df5364df0d56866c920de52e29535b686bb2b4e7e485d65da8513267bc112d12e86bf2a6c815e7e152ecfcde4de24108b1", 0x6e}, {&(0x7f0000000a00)="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", 0x53f}], 0x2}}], 0x2, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) write$tun(r5, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x1d7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x140f, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendmmsg$inet(r2, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2a534b308834d054586feb5c9428624db4b878120e41be144acec28b091f1237c91d74cf1ce0c17632e8dce6ac8c6822c2382fc3ac7c89f2d955bc265df5364df0d56866c920de52e29535b686bb2b4e7e485d65da8513267bc112d12e86bf2a6c815e7e152ecfcde4de24108b1", 0x6e}, {&(0x7f0000000a00)="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", 0x53f}], 0x2}}], 0x2, 0x40) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) (async) write$tun(r5, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x1d7) (async) 3.703365485s ago: executing program 1 (id=14270): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f00000007c0)={0x40, 0x3, 0xa, 0x80, 0x4, 0x8, 0x2c, "ecf8d751a9c48392d1ce64fbe793bc6cf9989d2a", "24785c2d7f494d4fd06f6fe9c67716b743436441"}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x800) bind$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, 0x4}, 0x10) 3.664000796s ago: executing program 4 (id=14271): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x0, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b129366fe8ac9c1291a08c84ed3776ca81ad429d1e191a9da28672a0c89918f82b3644e9a664401d7ec9e25042e90414c4f943f35b4c60700c72b70000000000000003505b51bb8eeb1449cf9d99e7b3adbe3558ce2d6936970000000000000033bb5d6df9ccad91e68ef25fc13090e1d4fc2762b409ab624c2226c25046ec660f62e30273f0f80710a31a7e77320f2f4a668a4d04c2660c33d55c1a614dc7f7b661388c206c2866c471a6c8041154dda81b53b0e76e36baf7291a4b3a4fbaa730a40c37ccfeb40bbf81ce072c2f4babe8b3d02bf7acf1bc1a895954b126b13c2de9a82827b16cd7113a09dc75a66e9ae1818fcb99c0cdeda4aa33885c6cb93acf9df129e8e9fa70b45e564aa876eba6ff8a5cfbe113bc6a36953e928ab7df3e8729f2d823ccd4926d416ee924fc230371f8931349a964a27ec40ffd703e08754d8f7ec57c3373de88"}, &(0x7f0000000180)=0xfebd) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x30, 0x3e, 0x7fff}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in6={{0xa, 0x6, 0xd, @private2, 0x7f}}}, &(0x7f0000000180)=0x84) 3.614491679s ago: executing program 1 (id=14272): syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) unshare(0x4020400) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x336, 0x0, 0x0, 0xc9e}, 0x600) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) (async) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/215, 0xd7}, {0x0}], 0x2}, 0xb}], 0x2, 0x2, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async, rerun: 32) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="91103a00000000009560"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "31f67a1f1e830bedd660d1405e3f43fa05ee2997816d82c1cdda24584a65bb998d58c36b58cd66cb51d0dd9d61ec8228d201c5047347a820413bbf1499ce3000b9652e330cc48dadeff4c093febc7dcfa4cd6cfab061229fa930ff0af1c5f9a68c7bf0c554625d93a7b9283be9e680810c303434e3ec85f6334e87d5466302e30cafa7eaaac8fc5d8011ce2cc0f2e8825bc77144b8d9e5700e90106e04c12b155fa567f23a60aa26ba758e2efe1674ab75a2cf1a578337695b22213e1ade8321da37ece7e24d7fb826b8f911125c8233249dd50779295cecdc4b85b8ad46ac498c4dec6a27ab93c20467762cb1763c8ef526d29e8707f0887aebe324e0523b68"}, @TCA_RED_PARMS={0x14, 0x1, {0x100, 0x8, 0x8, 0xe, 0x10, 0xc, 0x2}}]}}]}, 0x148}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x80000, 0x9) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x6, 0xfe, 0x2, 0x4, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}, @rand_addr=' \x01\x00', 0x80, 0x1, 0xfffffff9, 0x200}}) (rerun: 32) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0xac, 0x24, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0xfffb}, {0xfff3, 0x1}, {0x8, 0x7}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xcc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x40}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4e}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x42486bfb13420314}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x84}, 0x8040) 3.549743296s ago: executing program 4 (id=14273): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x4a7, 0x4, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x28}}, 0x0) r1 = epoll_create(0x7) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r3, &(0x7f0000000000)={0x2c, 0x7, r5, 0x20, r3}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000014}) clock_gettime(0x7, &(0x7f0000000080)) 3.434918373s ago: executing program 0 (id=14274): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000240)={r1}) unshare(0x28000600) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x9, 0x8}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0), 0xc) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r5, 0x89e1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c19"}}}}}}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r6 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x4) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000180)={r0, 0x4686756a, 0x5, "568f03395f3d78400b443f84c6e40e1e6383168c121fdf56dfb108cdd20ae9db818ac0e20a52c3a327bef34c9bdeab99a48840ff10007ede2c16"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000200)) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000240)={r1}) (async) unshare(0x28000600) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x9, 0x8}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0), 0xc) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCGETNODEID(r5, 0x89e1, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c19"}}}}}}}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) socket$inet_sctp(0x2, 0x4, 0x84) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000180)={r0, 0x4686756a, 0x5, "568f03395f3d78400b443f84c6e40e1e6383168c121fdf56dfb108cdd20ae9db818ac0e20a52c3a327bef34c9bdeab99a48840ff10007ede2c16"}) (async) 3.43234056s ago: executing program 1 (id=14275): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0bd547ed383dbc89b6f5bec0000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r8, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4c000) r9 = getpid() r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x60) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x20002}]}, 0x44}}, 0x4008040) 3.430654917s ago: executing program 2 (id=14276): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f00000001c0)={{r5}, 0x5, &(0x7f0000000100)=[0x1, 0x4, 0x6, 0x7fffffff, 0x8000000000000001], 0x0, 0xd, 0x1}) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000240)=""/131) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = socket$packet(0x11, 0x3, 0x300) bind(r7, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a01040000000000000000070000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@delchain={0x24, 0x65, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0x10, 0xc}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.33759211s ago: executing program 1 (id=14277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000800000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800001fb703000000000000850000001700000095000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000800000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800001fb703000000000000850000001700000095000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r3, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r4], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="370600", @ANYRES32, @ANYRES64=r4], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="370600", @ANYRES32, @ANYRES64=r4], 0x20) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r5, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r4}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @initdev}, &(0x7f00000001c0)=0xc) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex=r6, r1, 0x32, 0x0, 0x0, @void, @value=r7, @void, @void, r4}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex=r6, r1, 0x32, 0x0, 0x0, @void, @value=r7, @void, @void, r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000000c0)=0x93, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r11, 0x6, 0x15, &(0x7f0000000000)=0xf, 0x4) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r12, 0x89e0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_SB_POOL_SET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2d, r10, 0x401, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4044000) 3.274607921s ago: executing program 4 (id=14278): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x290) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25010000000800010049000000"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x44050) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000180)=0x4000000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x10000}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000001440)=0x8, 0xff3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x1, 0x6c70050957bf66b2, r3, 0x791c7000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b000100697036746e6c0000200002801400020000000000000008000000ffffac1407000000090229000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x24044001}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000180)={{r0}, 0x1, &(0x7f0000000140)=[0x7], 0x4, 0x8}) 3.207123287s ago: executing program 0 (id=14279): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x4c, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x4) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r12, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x39a18022ddb60531}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4044) socket$inet_sctp(0x2, 0x1, 0x84) write$tun(0xffffffffffffffff, 0x0, 0x78) 3.138511047s ago: executing program 4 (id=14280): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="bc463a63c792fd6e00000000000000000700000204000a8088000a8004000280700002800c00028005000100210000002c00018014000300fc020000000000000000000000000000140004000000000000000000000000000000000106000340000300000c00028005000100060000000c00028005000100210000001400018008000100ac1e01010800020064010102080001400000000008000140000000000600074000030000"], 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8004b706, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) shutdown(r2, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r5, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e00, @private=0xa010102}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x82, &(0x7f0000000180)={r8, 0x8000}, 0x8) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000240)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000002780)=ANY=[], 0xfb5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0xffff, @empty, 0x1}}, 0x7}, &(0x7f0000000200)=0x90) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 353.579836ms ago: executing program 1 (id=14281): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000032c0)=[{{&(0x7f0000000200)={0xa, 0x4e1c, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x240040c0) (async) sendmmsg$inet6(r1, &(0x7f00000032c0)=[{{&(0x7f0000000200)={0xa, 0x4e1c, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x240040c0) shutdown(r1, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0x10, 0x10, 0x509}, 0x10}], 0x1}, 0x40040) getsockopt$bt_hci(r1, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'batadv_slave_1\x00', @random="0100002010ff"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x4e20, 0x8, @loopback, 0x3dd}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, @in6={0xa, 0x4e20, 0x8, @loopback, 0x3dd}], 0x2c) 303.000322ms ago: executing program 3 (id=14282): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0xffffffffffffffe9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vlan0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000fc0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000001100)=0xe8) r6 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001140)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001180)={0x0, 0x0, 0x0}, &(0x7f00000011c0)=0xc) r9 = socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{0x1, 0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001240)}, 0x20) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x80800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r13, &(0x7f0000000040)='ns/time\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = bpf$ITER_CREATE(0xb, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000000380)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, 0x0) sendmsg$netlink(r15, &(0x7f00000004c0)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000fc0)={0x4ec, 0x33, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0xe6, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x17a, 0x81, 0x0, 0x1, [@nested={0x4, 0x9a}, @generic="ec40cb41eb91f16fe59a1a87a572d824caa207389dcf8e833009b914fa678d25697f5e673daa5240646f55ca5bbbd87733795acdbbe27bd51d28422a04e8b0d22e139531da4b10f4a553d4dfaede650db6a8d439135667083b428842cd4a78d5b230d55a62b64f9affe634bca99a2b6838760413b78696059d1da0231a478b2573472cf9a3077afab716f6146e67fe915771a4786cd24a0384a7c80357d0b7cf68e9", @typed={0x4, 0xe8}, @generic="4e720f6204c0f3a607fe03c4c1e2663235185514ca0b4dd9c51d1874643b824b823fd2d305cb17418656848887", @generic="9152c0e9fd624cbfe96a80e9de69cac07f4818dfa842e1014332bcaafed030151aa016657339e42498205e841e0639591469078dc79b6808a6a540b2ae7e79d7f0b363a305a0cbcc5cfc60d9ae51295bc4033e1eae7c56978cd8fe60ebb02d253c1011cb4bb2bd87674845cb3219788c8d88b7f81015accfee962d5934df17fe3137faa51f6366e7", @typed={0x8, 0x74, 0x0, 0x0, @uid=r16}, @generic="521cffb8006808", @generic, @typed={0x5, 0xbc, 0x0, 0x0, @str='\x00'}]}, @typed={0xc, 0x150, 0x0, 0x0, @u64=0x45f}, @typed={0x6, 0x106, 0x0, 0x0, @str='\xb5\x00'}, @typed={0x8, 0x11c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0xa, 0x7c, 0x0, 0x0, @str='wlan1\x00'}, @nested={0x328, 0xbf, 0x0, 0x1, [@generic="4afd438e25ce5fd74e2150d96e5f0a34859774040a7dfc6e521398ba1ea81361d0616c7ce68db468045e335ecd75d52fd309eb13807c297f620dab5023b7b9b4711e3b268391f1c1a792fea3609c33f04471cc46401e38aea6f0de67decd162bd3b87059759e11629798fae2a6d09cf7cdfb3ce17f23c28fb58fa9d7a67a83f3b647223ad921d07d013fc5b6edcc371cdebf5929ff10", @generic="a286d4842dc5d4168af3bc3b7a98ceebfdefe46953508177bbb345dd3bbd82613d39213e251469fef9e5ca1f8425aedf0293eaf7a493d65d624ed6116638ed2df8c7827ae17ebe2900d17fc2432f4ab17e78fc34bfe6cb81973113f1da1be70001ff1784e17a24c43d6e75ba3c1ad805c4674ed2efdf38951a2d59a8c5e5c44a870675718fbe8f538cd0cd1874858a35ee7ba060c4e8c60f4fda446d9af0576da42affbbcad5aede243247d884ba472dde64", @generic="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", @typed={0x8, 0xb9, 0x0, 0x0, @fd=r14}, @generic="7b6d21666a92ff16e3b0712fc26af1dd5d32bee516dd67969761f4d6d03628445775bb5669d7ccd1cc2fb6fb3e159d16b55acd57689bf75067b752e2f41b79861cfa1a3fd1dce4659c486aca473f47b24f45164d4a9f42848390f485a6b709e0b6d381bdf3262a617bb51fcad7c4674182e2ff1848a6bf719fd705ab2ffdbfa81a66f003bfee1a9d9bbb2591667c6904153297a033bc19e5900c59f48209b587e6679b237ccb9bee2c36a47baddb736027238068cfd0c346119678c0f71421fcc6b82c826747e0fafd", @typed={0xf, 0xb0, 0x0, 0x0, @str='syzkaller0\x00'}]}]}, 0x4ec}], 0x1, 0x0, 0x0, 0x20000800}, 0x800) r17 = getgid() r18 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000012c0)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001400)={0x0, 0x0}, &(0x7f0000001440)=0xc) r21 = getgid() sendmsg$netlink(r0, &(0x7f00000015c0)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)=[{&(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x118}, {&(0x7f0000000440)={0x108, 0x2e, 0x400, 0x70bd26, 0x25dfdbfb, "", [@generic="02bba10cbef402a4757dbee1c47dcbf328f70a3ab7f709167fdccad28a52ee6e38e7238f617caefbf9dcd9eaefb1afe7c3a365fbee258232319c4839fd8cafeaa40ab0449af9f4b095709b7cf52e1905b3dbbe15bb6cb6cc7d08a361a3f76f603128a711bfa388374b3bde8d7d73956221cd039553467ee77da9d4179571ce9540f357c9f91f41d86bf0e6a40c7791be31c4f48bd5e6a1052151e72900b1b13b8d2e5e3bdc39fb1cdbc0e7f34849e36bd3aab8ca0e61b48a548c4de262ddd8afc2a7057c2204c862063d2220a175cc5d41a10098b9dd31e42182766d0fffb17fd8886d1f2c9b34530e58668d90d9402117e08c379d1cf9"]}, 0x108}, {&(0x7f00000005c0)={0x374, 0x16, 0x200, 0x70bd27, 0x25dfdbfc, "", [@nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0x158, 0x0, 0x0, @uid}]}, @generic="e9af4d417e0bd4382ee8ad26f04e7a268cbc81b2a506b1e324cb6ba183c90eaceeab35084541b96c507112f2c529428d8c1d0af005bc225b65d664cc4405ee1c01856da2517d517fb78cfdfd3084b8892f4f6372e2ad30a8e08d887e095b16c5e597155e21f7cb0a4d049c8fa4d0a2f84b867e22ad91a1564ebc6f8b7b93e2d51736b6aa02b760c5037951a7429a7efec85164bed284d7220505ecc865876d367318b5053af58c91987c4e96854bff4e866fcadca92c453d2c1a9eaa1cf00259dae190b3d44f38171e7cd813652986a11f8cd508b82813a8a500999282f5ec609cb3c5deb9a3d606ee164b532ad00ba85f715bf222cb3f2c19", @generic="10142bd2e9970995140b6f30c296724ce029e4e683d9a9bb70a56991a67f6d5a1635a0faf17425256df584c3a912cf26db8d814f73c912343e6a10d120a97cb4fc06758aa8728168822d3abef9564833fd72f4a2675bbeb31c6ca8166e868996b0cf8601c0a6b37cef589bff1d77c2debd42c2ad728d9bc7dd97eb17524249324c2f6988155f659b4c32450a4279a8c800586e207b22e45d3df52e607d5812db4fc298d9375b7f74230383bca436975b33c82fa1a56c", @nested={0xb9, 0x49, 0x0, 0x1, [@nested={0x4, 0x141}, @generic="eb6c92db9179e072ec5f1f08172e75c34757fe962f353a98d8f90a9ceca54009b12f4ed52238e94f31ccb78ec2826949c78f90e6d7be22857a3b65a8e0a939156dfad59ca81802b2bc2be92feec768f75c2d8b7f27e079e01e3e85d406108959b514bc111c9d64c25f8e6c031e52fc248269dda59ccd689542100b7ac4891070c7387fff7c2322bd9cf406d88aa4b758859b11d390e6e46cdd52b59c3dbef0a5d7fe1cad79e42af612bd42595983a13bbf"]}, @generic="eeb159a895e00896043b8965340f5b8ebdf6a61f4f6a586e8daae0a746edcdee7470a5e8c436da8f75e6ed7b55425f074cc8289bcd612153ab634a2cb4a0b7498d1539bbcbe9ab7d44e89c434045ade8e67a9333dddb1e1e8dffa8dc1e57255cb68a2215ca0bcf8f3ac7c1a9a5d9c9b338612a5dc96f707c630fb61c163aa9a520c34a82bcc8b80efbe143de276c22be710be90642510cef7641889980b9991a5b8d9dbb9c043e007f15d8059fe551671a00aa148e8d2e2432ffb5ad4f941289c55e12544bbcc129031399b4", @nested={0x18, 0x7f, 0x0, 0x1, [@typed={0x8, 0x153, 0x0, 0x0, @uid}, @nested={0x4, 0xd7}, @typed={0x8, 0x74, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x92, 0x0, 0x0, @uid}]}, 0x374}, {&(0x7f0000000940)={0x604, 0x1a, 0x2, 0x70bd2a, 0x25dfdbff, "", [@typed={0xc, 0xaf, 0x0, 0x0, @u64=0x1}, @nested={0x131, 0x33, 0x0, 0x1, [@generic="9ed49fce8e3cc8aaa072a7f992d4957b2460fd5d0b504ee9e03218ca0d0c77f0d48dd8b32bd5a394", @generic="ff7e257aa9e51273621071e68c79a454593d1110bd815506aaedecbe289873cadc5e4adc2f4d0e28d42c2d68de0e12aa9552c6db7e9fbf1148e063", @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}, @generic="05d7b7466a232da4e502b05675ce0eba93823cd24834f8d27b110ec2d6cc745e2a20259cc23b4271f68591b7f38e4ed0dc924400606cd1770127cf703c8e83f6a27d53ae1d45d9af55fb2e159cc6a63c6180911bdbba11bc7d992f8cc452cc675cc99192fdc48aae62d56102c0d93033abe9e9b791da474974892cde7d0922fae919e5633bfdef19acf525489bcabd5ce24c16aa23d457a834b8cd8ff3303edfcf83dd2caf3bacb41db5", @nested={0x4, 0x3b}, @typed={0x8, 0x38, 0x0, 0x0, @uid=0xee01}]}, @nested={0x22, 0x32, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x15a}, @typed={0x8, 0xae, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xe}, @generic="654866616d9f"]}, @typed={0xc, 0x132, 0x0, 0x0, @u64=0x6}, @nested={0xc, 0xa5, 0x0, 0x1, [@nested={0x4, 0x129}, @nested={0x4, 0x75}]}, @nested={0x20f, 0x4f, 0x0, 0x1, [@nested={0x4, 0xf}, @nested={0x4, 0x1e}, @generic="4dd8c77dd92f725888a1b9673a8390ecb5bae2382bcae0387ef7378ef7144323e97f202212ec81513eae9f1a3e23407789207b9bdc4f22a9d5d607dc0ba3a2f4ad3ddd2f2e92c17138e8348b49cfdeb8781a593571c3551a2351542b5e6e240771018aa91f5d6b515963cc86842fe9996a6c88fa94d5b74cf2ecc5a3243981b04632ae173c2dc6f65db3668ffd0e0307ec37c76ca749b898b25f9aab57a1b832b8bdf7802eb9388725c627de24e7f25f4e60a259771feef5aebce7f5cc4e66a6913d99b3", @generic="0c9f10c25afc480da45833eff277e9801b655da8a75ff810b198dc0a969921a2b5d326419d4eaee2484fb675961e95117cfca02aa82f06cf908cbcd5d2244de1d27fff9386179857fcee6efe64401571e34e0d32705b", @generic="c947fee399979c5739a6c7a7ca869739c566d3ce4057c531a73adcb4b605ca7cd909b297779660df266e0594a15d700a5076cf702cf21d6fd30d4a364b22ff1164610411c74b0a9e8ead7d33a868911ff18ae6ede51c4d84fd4f8914224eec457b", @nested={0x4, 0x102}, @generic="ca10dac777da7a1313cab8907d1ba490d0ffba628c2e391d3723069bfd7f780305a27e67070e84ee024273a2f69c3a8e51cb5072ef720c2c141876d70beda0c2d5e34b55ff2aad67dfbfe77dd11b7a5eb96347d782c22b8a3b11b5156575cd2af3901be90fd306cc40649d1609a8e8ad971dd704bd3c237706af507662cc30cb", @nested={0x4, 0x138}]}, @nested={0x17a, 0xa7, 0x0, 0x1, [@nested={0x4, 0x3f}, @nested={0x4, 0x118}, @typed={0x8, 0xf3, 0x0, 0x0, @ipv4=@remote}, @generic="fd0415d9e5cb7f789b4e63eaafd1773e22bee218f4a99f9f4ba5108c7585badb0fb5cc479a30dba7848996c63b7447ec8b7a9e11adf8d9666d8c329c6ac73762c67666f7525f83401203368887c5f73949259e5ef93f6d88e81363479e13886e3693bfea06717db7a6528b72628175c005f07a8dafc2dcd25968e8ba88c6a28b8f06a6174c5f262a3b65f9f1b8", @nested={0x4, 0x57}, @nested={0x4, 0x9e}, @nested={0x4, 0xe7}, @generic="972e8a2174bed52196f8cdf41f88850868f64950f095f6f3b2eae05efc7c9fdd095d6d65a8b23c322e642e2a078f45924e9e28880e8051c4b8cfe3543944f3d72bfeecb50199778b0c460ddcea090e93b01f2d6cad38dac4966b05d6a1231a441e89c0eaab0919614a1a4df671c769ce3b112ce07c34be11839ab343fdd04e8c3cd8fdcb2a34c778febe305d6e06fbdf2650e072e0ee509f9815c60f5121cc01df9f80188ec9f6e32039713c1c28226843999b6dcf26328af7bc20ad7de93688809bf5c3fccdbd885635ff08a5"]}, @generic="607a94de2a5757b771cfaa158fd10abd294b6ac8538abc0fb2454e9227b93cfee44ab4975397099b2b86ff3b10266ad8b1e08897bfc939acae2b8267d6469a332d9fdbc6e3a685fa0f68c17e2142f64814a163846800defff9d4d3888d7dcb3251b1feb266df9544ee118561610dad578bd0e50314ef420af50a4e", @nested={0x65, 0xc4, 0x0, 0x1, [@nested={0x4, 0x11c}, @typed={0x8, 0x135, 0x0, 0x0, @uid}, @typed={0x8, 0x11d, 0x0, 0x0, @pid}, @generic="30784276bfd8767a15c83687b8dccec1349250488b0a1816cb9f61fd1fa1ac11b36ff091eaec288147eb5c154b3bd6715c3a5562bd91ca47d5a418a3ebd52152e80317d2b6", @nested={0x4, 0x4e}, @nested={0x4, 0xbb}]}, @typed={0x8, 0x121, 0x0, 0x0, @u32=0x5}]}, 0x604}], 0x4, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01, r8}}}, @rights={{0x28, 0x1, 0x1, [r9, r0, r10, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r20, r21}}}], 0x128, 0x7}, 0x8000) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)={0x118, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf9e14", @typed={0x8, 0x96, 0x0, 0x0, @fd=r0}, @nested={0x59, 0x7a, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @fd}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) 302.775327ms ago: executing program 2 (id=14283): r0 = socket$inet(0x2, 0x3, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x99000000, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000004000)) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f0000004000)) 292.193363ms ago: executing program 4 (id=14284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x34, "2016f43abee3850790d8abea8a4d995f24786360e24b8f1c26861a9d6a49eeebfe43fb470f7e00ee4d56734bd1318b78e2f3d910"}, &(0x7f0000000100)=0x3c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a31000000002c000000020a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000faff00000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31"], 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a31000000002c000000020a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000faff00000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31"], 0xc8}}, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x6, 0xa240}], 0x1) r6 = openat$cgroup_subtree(r4, &(0x7f0000000240), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000280)={r5, 0x8000000000000000, 0xa8f, 0x891}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0xfffffff7}, &(0x7f0000000180)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x814}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) 83.731759ms ago: executing program 1 (id=14285): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = epoll_create(0x7) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000003c0)=@ethtool_cmd={0xc, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x83, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x80000045, [0x7, 0xd]}}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) getsockopt$MRT6(r7, 0x29, 0xd0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0x60000000}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r8, &(0x7f0000000000)={0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4c044, &(0x7f0000000000)={0x2, 0x4e1c, @multicast1}, 0x10) r10 = socket(0x2, 0x2, 0x1) bind$unix(r10, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r10, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x50) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0x1d, &(0x7f00000014c0)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x6, 0x5, 0x6, 0x7b460fc2352870f7, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000240)='GPL\x00', 0x5, 0x7e, &(0x7f0000000280)=""/126, 0x0, 0x1f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0xd, 0x0, 0x6c67}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000015c0)=[r9], &(0x7f0000001600)=[{0x3, 0x1, 0xd, 0x5}, {0x2, 0x2, 0x9}, {0x2, 0x5, 0x2, 0x9}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r11}, &(0x7f00000001c0), &(0x7f0000001700)=r12}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000060000000000000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000cc0500000800000085000000a50000009500080000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94) getsockopt$llc_int(r7, 0x10c, 0x5, &(0x7f0000001780), &(0x7f00000017c0)=0x4) 81.904292ms ago: executing program 2 (id=14286): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002c00)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000f00)=""/71, 0x47}, {&(0x7f0000000700)=""/136, 0x88}], 0x2, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000340)}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000580)=[{&(0x7f0000002e80)=""/104, 0x68}, {&(0x7f0000000a80)=""/86, 0x56}], 0x2}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000b80)=""/251, 0xfb}, {&(0x7f0000000c80)=""/123, 0x7b}], 0x2, &(0x7f0000000a00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000ec0)=""/54, 0x36}], 0x1, &(0x7f0000000ec0)}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001280)=[{&(0x7f0000001000)=""/141, 0x8d}, {&(0x7f00000010c0)=""/229, 0xe5}, {&(0x7f00000011c0)=""/184, 0xb8}], 0x3, &(0x7f0000002f00)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001440)}, {&(0x7f0000002500)=""/162, 0xa2}, {&(0x7f00000025c0)=""/168, 0xa8}], 0x3, &(0x7f0000002680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f00000027c0), 0x6e, &(0x7f0000002900)=[{&(0x7f0000000d00)=""/149, 0x95}], 0x1, &(0x7f0000002940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002a00), 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002a80)=""/207, 0xcf}], 0x1, &(0x7f0000002bc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x9, 0x0, &(0x7f0000002e40)={0x77359400}) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) r3 = accept4$tipc(r2, 0x0, &(0x7f0000000100), 0x80000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f00000001c0)=""/31, 0x1f}], 0x2}, 0x40000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x2000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00250e000000000300000008007700", @ANYRES32=0x0, @ANYBLOB="0c00ea800800020003000008"], 0x24}], 0x1}, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) 21.200234ms ago: executing program 0 (id=14287): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0xa0, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x804) getsockopt$inet6_tcp_buf(r7, 0x6, 0xb, 0x0, &(0x7f0000000140)) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000080)={0x3, "e49350"}, 0x4) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x408c5) 2.329752ms ago: executing program 4 (id=14288): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="fa89c96a85cd368af45bf22144d70bad6eb8b06badbaabbb3d567522ac1bb213eaeb68db86dfee86f7e5cd86573900381b1e8b9dc008549bc649036c12294b0f391490e2708eb7750e094e90056ea5ab0809b0b19b844aacac083e7d13e32b1ea6e4cdb1d7d249fb10e0d92a691272", 0x6f) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0xe) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a0300fcff000000000000020000000900010073797a300000000008000340000000010900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000390427bd7000e2ffffff000003e4", @ANYRES32=0x0, @ANYBLOB="22020000857afb13"], 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x4008804) 0s ago: executing program 3 (id=14289): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f080000000000000010020118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff0000d000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf910000000000cecb959f7f7d9ea300850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) kernel console output (not intermixed with test programs): _slave_0) entered forwarding state [ 1235.697998][ T3262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.705197][ T3262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.896993][T21704] syzkaller0: entered promiscuous mode [ 1235.915948][T21704] syzkaller0: entered allmulticast mode [ 1236.058720][T21704] tipc: Started in network mode [ 1236.081976][T21704] tipc: Node identity eef660302175, cluster identity 4711 [ 1236.112393][T21704] tipc: Enabled bearer , priority 0 [ 1236.184835][T21703] tipc: Resetting bearer [ 1236.225439][T20265] Bluetooth: hci1: command tx timeout [ 1236.267162][T21703] tipc: Disabling bearer [ 1236.358661][T21456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.823223][T21740] netlink: 'syz.1.12434': attribute type 1 has an invalid length. [ 1236.838229][T21740] NCSI netlink: No device for ifindex 0 [ 1236.840548][T21732] syzkaller0: entered promiscuous mode [ 1236.868725][T21732] syzkaller0: entered allmulticast mode [ 1236.943908][T21456] veth0_vlan: entered promiscuous mode [ 1236.999140][T21456] veth1_vlan: entered promiscuous mode [ 1237.014484][T21749] ipvlan1: entered allmulticast mode [ 1237.026988][T21749] veth0_vlan: entered allmulticast mode [ 1237.271999][T21456] veth0_macvtap: entered promiscuous mode [ 1237.287843][T21456] veth1_macvtap: entered promiscuous mode [ 1237.479019][T21456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1237.494214][T21456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1237.526636][ T3262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.560755][ T3262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.585505][T27598] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.606419][T21759] __nla_validate_parse: 8 callbacks suppressed [ 1237.606436][T21759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12437'. [ 1237.655818][ T3262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.868608][T27557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.909928][T27557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.978404][T21778] netlink: 'syz.2.12441': attribute type 1 has an invalid length. [ 1238.003270][T21778] netlink: 'syz.2.12441': attribute type 2 has an invalid length. [ 1238.018754][T21778] netlink: 'syz.2.12441': attribute type 1 has an invalid length. [ 1238.034609][ T4210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.054512][ T4210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.157086][T21784] netlink: 'syz.2.12443': attribute type 1 has an invalid length. [ 1238.169252][T21784] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12443'. [ 1238.184079][T21784] netlink: 1 bytes leftover after parsing attributes in process `syz.2.12443'. [ 1238.194866][T21784] netlink: 658 bytes leftover after parsing attributes in process `syz.2.12443'. [ 1238.289253][T20265] Bluetooth: hci1: command tx timeout [ 1238.475267][T21796] netlink: 312 bytes leftover after parsing attributes in process `syz.1.12445'. [ 1238.615151][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1238.621314][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1238.815654][T21814] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12450'. [ 1238.859303][T21606] net_ratelimit: 44 callbacks suppressed [ 1238.859323][T21606] Set syz1 is full, maxelem 65536 reached [ 1238.942202][T21816] lo speed is unknown, defaulting to 1000 [ 1239.042909][T21823] syzkaller0: entered promiscuous mode [ 1239.049055][T21823] syzkaller0: entered allmulticast mode [ 1239.082544][T21827] syzkaller1: entered promiscuous mode [ 1239.104859][T21827] syzkaller1: entered allmulticast mode [ 1239.383646][T21840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 1239.533779][T21843] syzkaller1: entered promiscuous mode [ 1239.550655][T21843] syzkaller1: entered allmulticast mode [ 1239.632926][T21860] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12463'. [ 1239.759160][T21869] netlink: 'syz.0.12465': attribute type 3 has an invalid length. [ 1239.792494][T21869] netlink: 'syz.0.12465': attribute type 1 has an invalid length. [ 1239.799398][T21866] syzkaller0: entered promiscuous mode [ 1239.817493][T21866] syzkaller0: entered allmulticast mode [ 1239.834067][T21869] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.12465'. [ 1239.941942][T21876] syzkaller0: entered promiscuous mode [ 1239.945813][T21881] netlink: 204 bytes leftover after parsing attributes in process `syz.0.12469'. [ 1239.947751][T21876] syzkaller0: entered allmulticast mode [ 1239.960166][T21881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12469'. [ 1240.093824][T21884] syzkaller0: entered promiscuous mode [ 1240.099766][T21884] syzkaller0: entered allmulticast mode [ 1240.131372][T21884] tipc: Started in network mode [ 1240.139536][T21884] tipc: Node identity 1e30db934e38, cluster identity 4711 [ 1240.149354][T21884] tipc: Enabled bearer , priority 0 [ 1240.170219][T21883] tipc: Resetting bearer [ 1240.195643][T21883] tipc: Disabling bearer [ 1240.284807][T21895] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode active-backup(1) [ 1240.297705][T21895] bond1 (unregistering): Released all slaves [ 1240.436914][T21902] bond1: option ad_select: invalid value (34) [ 1240.445800][T21902] bond1 (unregistering): Released all slaves [ 1240.751506][T21926] syzkaller0: entered promiscuous mode [ 1240.782918][T21926] syzkaller0: entered allmulticast mode [ 1240.820894][T21928] lo speed is unknown, defaulting to 1000 [ 1240.945790][T21935] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1241.026827][T21937] syzkaller0: entered promiscuous mode [ 1241.037911][T21937] syzkaller0: entered allmulticast mode [ 1241.118197][T21937] tipc: Enabled bearer , priority 0 [ 1241.146093][T21936] tipc: Resetting bearer [ 1241.177788][T21936] tipc: Disabling bearer [ 1241.415262][T21964] netlink: 'syz.2.12496': attribute type 27 has an invalid length. [ 1241.461128][T21964] netlink: 'syz.2.12496': attribute type 19 has an invalid length. [ 1241.612164][T21977] vcan1: entered promiscuous mode [ 1241.618545][T21977] vcan1: entered allmulticast mode [ 1241.644506][T21979] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1241.652082][T21979] pim6reg1: linktype set to 774 [ 1241.748356][T21984] netlink: 'syz.3.12501': attribute type 29 has an invalid length. [ 1241.793545][T21984] lo speed is unknown, defaulting to 1000 [ 1242.132075][T21991] syzkaller0: entered promiscuous mode [ 1242.138861][T21991] syzkaller0: entered allmulticast mode [ 1242.169805][T21991] tipc: Enabled bearer , priority 0 [ 1242.178708][T21990] tipc: Resetting bearer [ 1242.213983][T21990] tipc: Disabling bearer [ 1242.334498][T21995] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 1242.371517][T21995] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 1242.399144][T21997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1243.008190][ T30] audit: type=1800 audit(1770368391.956:100): pid=22043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12517" name="memory.events" dev="tmpfs" ino=800 res=0 errno=0 [ 1243.045155][ T30] audit: type=1804 audit(1770368391.956:101): pid=22043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.12517" name="/newroot/153/memory.events" dev="tmpfs" ino=800 res=1 errno=0 [ 1243.356934][T22031] lo speed is unknown, defaulting to 1000 [ 1243.482508][T22052] FAULT_INJECTION: forcing a failure. [ 1243.482508][T22052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1243.518534][T22052] CPU: 1 UID: 0 PID: 22052 Comm: syz.1.12521 Not tainted syzkaller #0 PREEMPT(full) [ 1243.518560][T22052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1243.518571][T22052] Call Trace: [ 1243.518579][T22052] [ 1243.518588][T22052] dump_stack_lvl+0xe8/0x150 [ 1243.518616][T22052] should_fail_ex+0x412/0x560 [ 1243.518642][T22052] _copy_from_user+0x2d/0xb0 [ 1243.518666][T22052] kstrtouint_from_user+0xd6/0x180 [ 1243.518687][T22052] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1243.518722][T22052] proc_fail_nth_write+0x8e/0x210 [ 1243.518746][T22052] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1243.518774][T22052] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1243.518797][T22052] vfs_write+0x29a/0xb90 [ 1243.518828][T22052] ? __pfx_vfs_write+0x10/0x10 [ 1243.518852][T22052] ? __fget_files+0x2a/0x420 [ 1243.518876][T22052] ? __fget_files+0x3a0/0x420 [ 1243.518892][T22052] ? __fget_files+0x2a/0x420 [ 1243.518918][T22052] ksys_write+0x150/0x270 [ 1243.518943][T22052] ? __pfx_ksys_write+0x10/0x10 [ 1243.518977][T22052] do_syscall_64+0xe2/0xf80 [ 1243.518999][T22052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.519017][T22052] ? trace_irq_disable+0x37/0x100 [ 1243.519033][T22052] ? clear_bhb_loop+0x60/0xb0 [ 1243.519054][T22052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.519071][T22052] RIP: 0033:0x7f66d695b78e [ 1243.519088][T22052] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1243.519102][T22052] RSP: 002b:00007f66d77effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1243.519121][T22052] RAX: ffffffffffffffda RBX: 00007f66d77f06c0 RCX: 00007f66d695b78e [ 1243.519135][T22052] RDX: 0000000000000001 RSI: 00007f66d77f00a0 RDI: 0000000000000004 [ 1243.519146][T22052] RBP: 00007f66d77f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.519157][T22052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.519167][T22052] R13: 00007f66d6c16038 R14: 00007f66d6c15fa0 R15: 00007ffd2df03f08 [ 1243.519199][T22052] [ 1243.731309][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 1243.739374][ C0] lec:lec_tx_timeout: lec0 [ 1244.100855][T22073] __nla_validate_parse: 3 callbacks suppressed [ 1244.100873][T22073] netlink: 27 bytes leftover after parsing attributes in process `syz.2.12529'. [ 1244.125633][T22070] syzkaller0: entered promiscuous mode [ 1244.131119][T22070] syzkaller0: entered allmulticast mode [ 1244.141658][T22070] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12528'. [ 1244.389042][T22089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12533'. [ 1244.454219][T22089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12533'. [ 1244.464217][T22095] syzkaller1: entered promiscuous mode [ 1244.523667][T22069] lec:lec_atm_close: lec0: Shut down! [ 1244.905094][T22095] syzkaller1: entered allmulticast mode [ 1245.009108][T22107] netlink: 27 bytes leftover after parsing attributes in process `syz.4.12537'. [ 1245.116513][T22109] IPVS: set_ctl: invalid protocol: 92 172.20.20.20:20000 [ 1245.142405][T22109] IPVS: set_ctl: invalid protocol: 29 172.30.0.1:20004 [ 1245.183614][T22113] openvswitch: netlink: Key type 195 is out of range max 32 [ 1245.368388][T22114] bond1: option lacp_active: invalid value (8) [ 1245.379036][T22122] netlink: 'syz.3.12543': attribute type 4 has an invalid length. [ 1245.393015][T22114] bond1 (unregistering): Released all slaves [ 1245.413155][T22125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12540'. [ 1245.444895][T22122] netlink: 'syz.3.12543': attribute type 1 has an invalid length. [ 1245.452724][T22122] netlink: 228 bytes leftover after parsing attributes in process `syz.3.12543'. [ 1245.497965][T22128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12542'. [ 1245.649040][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12545'. [ 1245.846768][T22140] Bluetooth: MGMT ver 1.23 [ 1245.851337][T22140] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1245.866271][T22122] lo speed is unknown, defaulting to 1000 [ 1246.057509][T22146] netlink: 216 bytes leftover after parsing attributes in process `syz.4.12550'. [ 1246.107255][T22146] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 1246.118853][T22144] syzkaller0: entered promiscuous mode [ 1246.124424][T22144] syzkaller0: entered allmulticast mode [ 1246.136738][T22146] netlink: 'syz.4.12550': attribute type 2 has an invalid length. [ 1246.208043][T22152] veth1_macvtap: left promiscuous mode [ 1246.217714][T22152] macsec0: entered allmulticast mode [ 1246.257222][T22152] veth1_macvtap: entered promiscuous mode [ 1246.262975][T22152] veth1_macvtap: entered allmulticast mode [ 1246.275620][T22152] macsec0: left allmulticast mode [ 1246.280664][T22152] veth1_macvtap: left allmulticast mode [ 1246.579045][T22180] sctp: [Deprecated]: syz.0.12554 (pid 22180) Use of int in max_burst socket option deprecated. [ 1246.579045][T22180] Use struct sctp_assoc_value instead [ 1246.630299][T22182] bond0: option arp_validate: invalid value (55553) [ 1246.630395][T27598] bond0: (slave bond_slave_0): interface is now down [ 1246.648051][T27598] bond0: (slave bond_slave_1): interface is now down [ 1246.684953][ T4210] bond0: (slave bond_slave_0): interface is now down [ 1246.691656][ T4210] bond0: (slave bond_slave_1): interface is now down [ 1246.721117][ T4210] bond0: now running without any active interface! [ 1247.302692][T22215] lo speed is unknown, defaulting to 1000 [ 1247.692124][T22227] syzkaller0: entered promiscuous mode [ 1247.704603][T22227] syzkaller0: entered allmulticast mode [ 1247.772878][T22233] xt_policy: neither incoming nor outgoing policy selected [ 1247.809709][T22233] lo speed is unknown, defaulting to 1000 [ 1249.659693][T22185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1249.672512][T22208] __nla_validate_parse: 7 callbacks suppressed [ 1249.672530][T22208] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12561'. [ 1249.724803][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5210 ms [ 1249.732827][ C0] lec:lec_tx_timeout: lec0 [ 1249.789073][T22246] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1249.942868][T22249] lo speed is unknown, defaulting to 1000 [ 1249.949930][T22262] netlink: 'syz.0.12579': attribute type 1 has an invalid length. [ 1249.994972][T22262] netlink: 6 bytes leftover after parsing attributes in process `syz.0.12579'. [ 1250.058363][T22272] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.12580'. [ 1250.106249][T22274] netlink: 'syz.4.12581': attribute type 1 has an invalid length. [ 1250.237354][T22283] bond1: (slave bridge1): making interface the new active one [ 1250.247542][T22283] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1250.258241][T22278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12582'. [ 1250.399592][T22294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12586'. [ 1250.420879][T22296] netlink: 'syz.2.12585': attribute type 1 has an invalid length. [ 1250.470689][T22304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12587'. [ 1250.486274][T22300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12588'. [ 1250.502061][T22296] bond1: entered promiscuous mode [ 1250.508403][T22296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1250.519938][T20265] block nbd12: Receive control failed (result -1) [ 1250.566339][T22300] vlan2: entered promiscuous mode [ 1250.574985][T22300] dummy0: entered promiscuous mode [ 1250.617218][T22306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12588'. [ 1250.619016][T22308] syzkaller0: entered promiscuous mode [ 1250.633701][T22308] syzkaller0: entered allmulticast mode [ 1250.637853][T22306] openvswitch: netlink: Flow actions attr not present in new flow. [ 1250.761621][T22308] tipc: Enabled bearer , priority 0 [ 1250.787071][T22307] tipc: Resetting bearer [ 1250.819934][T22307] tipc: Disabling bearer [ 1250.851103][T22316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12591'. [ 1250.909936][T22316] netlink: 'syz.2.12591': attribute type 27 has an invalid length. [ 1251.155588][T22333] xt_TCPMSS: Only works on TCP SYN packets [ 1251.580768][T22354] syzkaller0: entered promiscuous mode [ 1251.599400][T22354] syzkaller0: entered allmulticast mode [ 1251.613669][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.614516][T22358] netlink: 280 bytes leftover after parsing attributes in process `syz.4.12605'. [ 1251.630637][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.645325][T22360] openvswitch: netlink: Flow actions attr not present in new flow. [ 1251.653412][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.680387][T22354] tipc: Enabled bearer , priority 0 [ 1251.704413][T22357] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1251.711974][T22353] tipc: Resetting bearer [ 1251.772114][T22353] tipc: Disabling bearer [ 1251.788672][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.797190][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.804703][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.819122][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.827205][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.836305][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.866584][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.884517][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.911053][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.935513][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.943495][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.951018][T22357] wg1 speed is unknown, defaulting to 1000 [ 1251.959930][T22357] wg1 speed is unknown, defaulting to 1000 [ 1252.007800][T22380] x_tables: duplicate underflow at hook 2 [ 1252.158396][T22393] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 1252.497022][T22406] syzkaller0: entered promiscuous mode [ 1252.510086][T22406] syzkaller0: entered allmulticast mode [ 1252.568418][T22406] tipc: Enabled bearer , priority 0 [ 1252.578332][T22405] tipc: Resetting bearer [ 1252.617843][T22405] tipc: Disabling bearer [ 1252.669857][T22413] lo speed is unknown, defaulting to 1000 [ 1252.814394][T22416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.853375][T22413] wg1 speed is unknown, defaulting to 1000 [ 1253.111617][T22416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.253029][T20986] udevd[20986]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1253.337778][T20090] udevd[20090]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1253.779334][T22416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.823649][T22425] lo speed is unknown, defaulting to 1000 [ 1253.831125][T22425] wg1 speed is unknown, defaulting to 1000 [ 1254.029878][T22416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.305290][T27598] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.377563][T27598] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.430433][T27598] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.484902][T27598] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.680820][T22485] lo speed is unknown, defaulting to 1000 [ 1254.712559][T22485] wg1 speed is unknown, defaulting to 1000 [ 1254.776585][T22493] __nla_validate_parse: 12 callbacks suppressed [ 1254.776604][T22493] netlink: 71 bytes leftover after parsing attributes in process `syz.2.12645'. [ 1254.826137][T22488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.844552][T22488] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.856408][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12643'. [ 1254.882740][T22488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1255.169473][T22506] dvmrp6: entered allmulticast mode [ 1256.070621][T22542] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1256.370258][T22558] netlink: 165 bytes leftover after parsing attributes in process `syz.3.12661'. [ 1257.549303][T22553] team0: Device gtp0 is of different type [ 1257.731061][T22570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12665'. [ 1257.805056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.814325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.842054][T22573] syzkaller0: entered promiscuous mode [ 1257.872097][T22573] syzkaller0: entered allmulticast mode [ 1257.948393][T22573] tipc: Enabled bearer , priority 0 [ 1257.966805][T22585] syzkaller0: entered promiscuous mode [ 1257.972291][T22585] syzkaller0: entered allmulticast mode [ 1258.038129][T22572] tipc: Resetting bearer [ 1258.074158][T22572] tipc: Disabling bearer [ 1258.112118][T22589] x_tables: duplicate underflow at hook 1 [ 1258.220457][T22594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12674'. [ 1258.333248][ T5993] IPVS: starting estimator thread 0... [ 1258.376313][T22603] syzkaller1: entered promiscuous mode [ 1258.382467][T22609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.395694][T22603] syzkaller1: entered allmulticast mode [ 1258.420895][T22609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.424882][T22604] IPVS: using max 35 ests per chain, 84000 per kthread [ 1258.454063][T22609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.549548][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.562728][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.586363][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.596209][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.604500][T22601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.741949][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12679'. [ 1258.793479][T22611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.801183][T22611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.810238][T22632] netlink: 'syz.4.12683': attribute type 2 has an invalid length. [ 1258.849528][T22636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12682'. [ 1258.870693][T22636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12682'. [ 1258.919593][T22640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12685'. [ 1259.010797][T22611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.032049][T22611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.101129][T22611] vlan2: left promiscuous mode [ 1259.106427][T22611] bridge0: left promiscuous mode [ 1259.111816][T22611] veth3: left promiscuous mode [ 1259.119684][T22611] batman_adv: batadv0: Interface deactivated: geneve3 [ 1259.171890][T22632] hmac(sha224): entered promiscuous mode [ 1259.179247][T27557] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.198004][T27557] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.227711][T27557] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.258345][T27557] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.276379][T22613] lo speed is unknown, defaulting to 1000 [ 1259.307864][T22613] wg1 speed is unknown, defaulting to 1000 [ 1259.367786][T22658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12687'. [ 1259.380635][T22658] netlink: 'syz.4.12687': attribute type 4 has an invalid length. [ 1259.412081][T22658] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 1259.602232][T22668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.627824][T22668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.672066][T22668] bond0 (unregistering): Released all slaves [ 1259.696633][T22671] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1260.203469][T22688] __nla_validate_parse: 1 callbacks suppressed [ 1260.203487][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12697'. [ 1260.245621][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12697'. [ 1260.258891][T22508] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1260.275381][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12697'. [ 1260.284634][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12697'. [ 1260.333654][T22688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12697'. [ 1260.433092][T22700] bond2: option updelay: invalid value (18446744072924056005) [ 1260.445487][T22700] bond2: option updelay: allowed values 0 - 2147483647 [ 1260.454267][T22700] bond2 (unregistering): Released all slaves [ 1260.465271][T22508] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1260.488077][T22717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12705'. [ 1260.506104][T22717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12705'. [ 1260.546960][T27557] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1260.632517][T22711] syzkaller0: entered promiscuous mode [ 1260.640483][T22711] syzkaller0: entered allmulticast mode [ 1260.652807][T22717] lo speed is unknown, defaulting to 1000 [ 1260.712895][T22717] wg1 speed is unknown, defaulting to 1000 [ 1260.747213][T22711] tipc: Enabled bearer , priority 0 [ 1260.754449][T22728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12708'. [ 1260.762444][T22732] netlink: 'syz.0.12710': attribute type 7 has an invalid length. [ 1260.771825][T22710] tipc: Resetting bearer [ 1260.774893][T22732] netlink: 'syz.0.12710': attribute type 8 has an invalid length. [ 1260.785788][T22732] netlink: 'syz.0.12710': attribute type 9 has an invalid length. [ 1260.794263][T22732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12710'. [ 1260.814147][T22710] tipc: Disabling bearer [ 1260.841891][T22732] 8021q: VLANs not supported on ip6_vti0 [ 1261.118572][T22757] syzkaller0: entered promiscuous mode [ 1261.124074][T22757] syzkaller0: entered allmulticast mode [ 1261.344286][T22754] lo speed is unknown, defaulting to 1000 [ 1261.378445][T22754] wg1 speed is unknown, defaulting to 1000 [ 1261.571162][ T4210] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1261.584052][ T4210] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1261.601432][T22779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12723'. [ 1261.672902][T22782] tipc: Started in network mode [ 1261.681246][T22782] tipc: Node identity d2e6d9992af7, cluster identity 4711 [ 1261.699198][T22782] tipc: Enabled bearer , priority 0 [ 1261.707260][T22780] lo speed is unknown, defaulting to 1000 [ 1261.731918][T22785] syzkaller0: entered promiscuous mode [ 1261.745780][T22785] syzkaller0: entered allmulticast mode [ 1261.755754][T22788] lo speed is unknown, defaulting to 1000 [ 1261.761686][T22781] tipc: Resetting bearer [ 1261.781092][T22781] tipc: Disabling bearer [ 1261.789939][T22780] wg1 speed is unknown, defaulting to 1000 [ 1261.826498][T22788] wg1 speed is unknown, defaulting to 1000 [ 1262.352500][T22821] bridge2: entered allmulticast mode [ 1262.455573][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1262.531146][T22827] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.575789][T22836] netlink: 'syz.0.12736': attribute type 1 has an invalid length. [ 1262.580024][T22831] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1262.595549][T22831] bridge3: entered allmulticast mode [ 1262.809589][T22837] syzkaller0: entered promiscuous mode [ 1262.825322][T22837] syzkaller0: entered allmulticast mode [ 1262.833971][T22844] tipc: Enabled bearer , priority 0 [ 1262.936201][T22827] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.985199][T22833] tipc: Resetting bearer [ 1263.072285][T22833] tipc: Disabling bearer [ 1263.162489][T22827] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.206481][T22847] ip6gre2: entered promiscuous mode [ 1263.221950][T22847] ip6gre2: entered allmulticast mode [ 1263.270997][T10572] lec:lec_start_xmit: lec0:No lecd attached [ 1263.312505][T22827] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.555649][T27588] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.582816][T27588] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.610528][T22872] lo speed is unknown, defaulting to 1000 [ 1263.623153][T27588] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.684110][T27588] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.705068][T22872] wg1 speed is unknown, defaulting to 1000 [ 1263.789795][T22889] net_ratelimit: 34 callbacks suppressed [ 1263.789812][T22889] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1263.987210][T22901] syzkaller0: entered promiscuous mode [ 1264.000919][T22901] syzkaller0: entered allmulticast mode [ 1264.029775][T22906] netlink: 'syz.1.12755': attribute type 10 has an invalid length. [ 1264.215371][T22912] SET target dimension over the limit! [ 1264.461360][T22928] netlink: 'syz.0.12760': attribute type 13 has an invalid length. [ 1264.679440][ T10] wg1 speed is unknown, defaulting to 1000 [ 1264.773892][T22930] lo speed is unknown, defaulting to 1000 [ 1264.804063][T22930] wg1 speed is unknown, defaulting to 1000 [ 1265.645220][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1266.091014][T22989] lo speed is unknown, defaulting to 1000 [ 1266.102469][T22989] wg1 speed is unknown, defaulting to 1000 [ 1266.399638][T23002] __nla_validate_parse: 6 callbacks suppressed [ 1266.399659][T23002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12781'. [ 1266.415605][T23002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12781'. [ 1266.479377][T23009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12783'. [ 1266.501683][T23009] ipvlan2: entered promiscuous mode [ 1266.546905][T23018] ip6t_srh: unknown srh invflags 4000 [ 1266.918176][T23032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12788'. [ 1267.474401][T23061] netlink: 'syz.1.12793': attribute type 1 has an invalid length. [ 1267.539109][T23062] lo speed is unknown, defaulting to 1000 [ 1267.586549][T23062] wg1 speed is unknown, defaulting to 1000 [ 1267.914308][T23097] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1267.944304][T23101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12799'. [ 1267.957296][T23096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12801'. [ 1267.979770][T23097] bond2 (unregistering): Released all slaves [ 1268.028453][T23101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12799'. [ 1268.041041][T23101] tipc: Enabling of bearer rejected, failed to enable media [ 1268.073901][T23106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12803'. [ 1268.092388][T23102] : entered promiscuous mode [ 1268.210819][T23111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12807'. [ 1268.247451][T23114] syzkaller0: entered promiscuous mode [ 1268.264043][T23114] syzkaller0: entered allmulticast mode [ 1268.494325][T23124] lo speed is unknown, defaulting to 1000 [ 1268.516475][T23124] wg1 speed is unknown, defaulting to 1000 [ 1268.659836][T23133] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12812'. [ 1268.775146][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 1268.783201][ C0] lec:lec_tx_timeout: lec0 [ 1269.010227][T23144] netlink: 'syz.1.12815': attribute type 1 has an invalid length. [ 1269.055611][T23144] bond1: entered promiscuous mode [ 1269.061199][T23144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1269.064143][T23149] netlink: 'syz.2.12816': attribute type 1 has an invalid length. [ 1269.501295][T23172] bridge3: entered promiscuous mode [ 1269.544874][T23172] bridge3: entered allmulticast mode [ 1269.576598][T23176] syzkaller0: entered promiscuous mode [ 1269.585871][T23176] syzkaller0: entered allmulticast mode [ 1269.806086][T23185] xt_TCPMSS: Only works on TCP SYN packets [ 1269.893550][T23201] netlink: 'syz.3.12833': attribute type 13 has an invalid length. [ 1269.914901][T23201] netlink: 'syz.3.12833': attribute type 12 has an invalid length. [ 1269.922432][T23200] bond2: option ad_select: invalid value (34) [ 1269.931384][T23200] bond2 (unregistering): Released all slaves [ 1270.244407][T23216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.274634][T23216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.293645][T23216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.469818][T23222] lo speed is unknown, defaulting to 1000 [ 1270.487376][T23222] wg1 speed is unknown, defaulting to 1000 [ 1270.816790][T23236] syzkaller0: entered promiscuous mode [ 1270.832519][T23236] syzkaller0: entered allmulticast mode [ 1270.911760][T23236] tipc: Enabled bearer , priority 0 [ 1270.931583][T23235] tipc: Resetting bearer [ 1270.975532][T23235] tipc: Disabling bearer [ 1271.056083][T23238] lo speed is unknown, defaulting to 1000 [ 1271.065524][T23238] wg1 speed is unknown, defaulting to 1000 [ 1271.648731][T23264] __nla_validate_parse: 8 callbacks suppressed [ 1271.648750][T23264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12851'. [ 1271.793838][T23271] syzkaller0: entered promiscuous mode [ 1271.809362][T23271] syzkaller0: entered allmulticast mode [ 1271.853600][T23276] netlink: 'syz.2.12855': attribute type 4 has an invalid length. [ 1271.979155][T23276] netlink: 'syz.2.12855': attribute type 4 has an invalid length. [ 1272.084487][T23292] syzkaller1: entered promiscuous mode [ 1272.090179][T23292] syzkaller1: entered allmulticast mode [ 1272.102122][T23292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12860'. [ 1272.250133][T23294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12861'. [ 1272.309670][T27588] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.318279][T23294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12861'. [ 1272.336811][ T3262] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.371709][ T3262] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.387642][ T3262] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.411105][T23306] xt_connbytes: Forcing CT accounting to be enabled [ 1272.425323][T23306] Cannot find set identified by id 65470 to match [ 1272.454571][T23306] Cannot find set identified by id 65470 to match [ 1272.461544][T23314] netlink: 'syz.2.12867': attribute type 1 has an invalid length. [ 1272.483046][T23314] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12867'. [ 1272.660606][T23333] veth3: entered promiscuous mode [ 1272.689797][T23338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12873'. [ 1272.706914][T23332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12873'. [ 1272.753935][T23328] syzkaller0: entered promiscuous mode [ 1272.760373][T23328] syzkaller0: entered allmulticast mode [ 1272.840038][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12878'. [ 1272.911686][T23343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12878'. [ 1273.015755][T23355] lo speed is unknown, defaulting to 1000 [ 1273.044396][T23357] syzkaller1: entered promiscuous mode [ 1273.056256][T23357] syzkaller1: entered allmulticast mode [ 1273.062625][T23355] wg1 speed is unknown, defaulting to 1000 [ 1273.305561][T23379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12887'. [ 1273.505043][T23387] syzkaller0: entered promiscuous mode [ 1273.526038][T23387] syzkaller0: entered allmulticast mode [ 1273.595886][T23394] nbd: must specify at least one socket [ 1273.807544][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1273.852964][T23404] netlink: 'syz.2.12898': attribute type 3 has an invalid length. [ 1273.924582][T23415] vlan3: entered promiscuous mode [ 1273.944918][T23415] dummy0: entered promiscuous mode [ 1274.173523][T23425] bridge0: port 3(team0) entered disabled state [ 1274.180407][T23425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.187792][T23425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.219652][T23440] netlink: 'syz.0.12905': attribute type 3 has an invalid length. [ 1274.544091][T23425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.584434][T23425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.038963][T27557] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.068780][T23457] netlink: 'syz.2.12909': attribute type 32 has an invalid length. [ 1275.089571][T27557] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.123265][T27557] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.147923][T27557] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.174184][T23428] lo speed is unknown, defaulting to 1000 [ 1275.192360][T23428] wg1 speed is unknown, defaulting to 1000 [ 1275.209739][T23465] siw: device registration error -23 [ 1275.281462][T23471] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1275.368912][T23479] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1275.530277][T23491] openvswitch: netlink: Multiple metadata blocks provided [ 1275.609232][T23491] tipc: Enabled bearer , priority 10 [ 1275.994137][T23518] netlink: 'syz.4.12926': attribute type 2 has an invalid length. [ 1276.003258][T23518] netlink: 'syz.4.12926': attribute type 2 has an invalid length. [ 1276.010205][T23519] netlink: 'syz.1.12927': attribute type 1 has an invalid length. [ 1276.013717][T23518] netlink: 'syz.4.12926': attribute type 2 has an invalid length. [ 1276.036765][T23518] netlink: 'syz.4.12926': attribute type 2 has an invalid length. [ 1276.077638][T23518] netlink: 'syz.4.12926': attribute type 2 has an invalid length. [ 1276.386930][T27598] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.449334][T27598] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.484633][T27598] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.580162][T23518] netlink: 'syz.4.12926': attribute type 7 has an invalid length. [ 1276.596521][T27598] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1276.742479][T23520] bridge0: port 3(batadv1) entered blocking state [ 1276.751339][T23520] bridge0: port 3(batadv1) entered disabled state [ 1276.759265][T23520] batadv1: entered allmulticast mode [ 1276.778575][T23520] batadv1: entered promiscuous mode [ 1276.830153][T23555] bond2: option lp_interval: invalid value (0) [ 1276.837085][T23555] bond2: option lp_interval: allowed values 1 - 2147483647 [ 1276.877832][T23555] bond2 (unregistering): Released all slaves [ 1276.951622][T13028] tipc: Node number set to 3523402179 [ 1276.970533][T23572] netlink: 'syz.3.12942': attribute type 11 has an invalid length. [ 1277.151543][T23579] __nla_validate_parse: 9 callbacks suppressed [ 1277.151563][T23579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12945'. [ 1277.168719][T23582] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12946'. [ 1277.256661][T27557] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1277.265988][T27557] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1277.288186][T23586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1277.295943][T23592] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1277.347781][T23595] team0: Port device dummy0 added [ 1277.509496][T23609] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 1277.513494][T23613] netlink: 25 bytes leftover after parsing attributes in process `syz.4.12955'. [ 1277.560651][T20265] Bluetooth: hci1: link tx timeout [ 1277.643556][T20265] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1277.736911][T23626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12956'. [ 1277.823711][T23619] lo speed is unknown, defaulting to 1000 [ 1277.846695][T23619] wg1 speed is unknown, defaulting to 1000 [ 1277.886704][T23641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12960'. [ 1278.061624][T23653] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12960'. [ 1278.070912][T23653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12960'. [ 1278.235883][T23641] lo speed is unknown, defaulting to 1000 [ 1278.256720][T23641] wg1 speed is unknown, defaulting to 1000 [ 1278.519640][T23678] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12965'. [ 1278.535951][T23678] netlink: 88 bytes leftover after parsing attributes in process `syz.4.12965'. [ 1278.566137][T23679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12967'. [ 1278.718147][T23689] openvswitch: netlink: Flow key attr not present in new flow. [ 1278.731919][T23689] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20000 [ 1278.850263][T23705] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 1278.869486][T23700] syzkaller0: entered promiscuous mode [ 1278.888232][T23700] syzkaller0: entered allmulticast mode [ 1279.005232][T23700] tipc: Started in network mode [ 1279.015157][T23700] tipc: Node identity 969ed6215ff6, cluster identity 4711 [ 1279.026455][T23700] tipc: Enabled bearer , priority 0 [ 1279.069669][T23694] tipc: Resetting bearer [ 1279.116546][T23694] tipc: Disabling bearer [ 1279.288245][T23722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1279.484048][T23732] lo speed is unknown, defaulting to 1000 [ 1279.526974][T23732] wg1 speed is unknown, defaulting to 1000 [ 1279.613339][T23740] validate_nla: 2 callbacks suppressed [ 1279.613358][T23740] netlink: 'syz.3.12985': attribute type 4 has an invalid length. [ 1279.726992][T23749] batadv_slave_0: entered promiscuous mode [ 1279.736933][ T5820] Bluetooth: hci1: command 0x0405 tx timeout [ 1279.831135][T23752] netlink: 'syz.4.12987': attribute type 8 has an invalid length. [ 1279.841055][T23752] sch_fq: defrate 0 ignored. [ 1279.848650][T23747] batadv_slave_0: left promiscuous mode [ 1279.988002][T23755] syzkaller0: entered promiscuous mode [ 1279.996307][T23755] syzkaller0: entered allmulticast mode [ 1280.016962][T23765] sctp: [Deprecated]: syz.4.12990 (pid 23765) Use of int in maxseg socket option. [ 1280.016962][T23765] Use struct sctp_assoc_value instead [ 1280.079895][T23755] tipc: Enabled bearer , priority 0 [ 1280.104682][T23754] tipc: Resetting bearer [ 1280.122892][T23754] tipc: Disabling bearer [ 1281.012829][T23820] netlink: 'syz.3.13006': attribute type 2 has an invalid length. [ 1281.196091][T23831] ip6tnl0: Caught tx_queue_len zero misconfig [ 1281.238263][T23834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1281.249200][T23833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1281.285820][T23834] nbd: socks must be embedded in a SOCK_ITEM attr [ 1281.295379][T23834] block nbd13: shutting down sockets [ 1281.378501][T23833] nbd: socks must be embedded in a SOCK_ITEM attr [ 1281.388259][T23833] block nbd13: shutting down sockets [ 1281.750518][T23871] Unsupported ieee802154 address type: 0 [ 1282.199248][T23906] __nla_validate_parse: 12 callbacks suppressed [ 1282.199261][T23906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13037'. [ 1282.262434][T23904] syzkaller0: entered promiscuous mode [ 1282.269193][T23904] syzkaller0: entered allmulticast mode [ 1282.437611][T23915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13041'. [ 1282.462231][T23915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13041'. [ 1282.490301][T23916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13041'. [ 1282.501795][T23916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13041'. [ 1282.513897][T23916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13041'. [ 1282.523702][T23916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13041'. [ 1282.546779][T23918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13042'. [ 1282.577402][T23918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13042'. [ 1282.578460][T23915] lo speed is unknown, defaulting to 1000 [ 1282.618842][T23915] wg1 speed is unknown, defaulting to 1000 [ 1282.667539][T23925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13041'. [ 1282.699306][T23928] netlink: 'syz.0.13045': attribute type 2 has an invalid length. [ 1282.738676][T23928] !: entered promiscuous mode [ 1282.859370][T23935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.880488][T23935] bridge_slave_1 (unregistering): left allmulticast mode [ 1282.888702][T23935] bridge_slave_1 (unregistering): left promiscuous mode [ 1282.897170][T23935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.283891][T23963] lo speed is unknown, defaulting to 1000 [ 1283.304123][T23963] wg1 speed is unknown, defaulting to 1000 [ 1283.422532][T23982] IPVS: length: 132 != 8 [ 1283.652342][T23986] pimreg: entered allmulticast mode [ 1283.728622][T23988] bond0: entered promiscuous mode [ 1283.733866][T23988] bond0: entered allmulticast mode [ 1283.740337][T23988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.765183][T23993] bond2: entered promiscuous mode [ 1283.770242][T23993] bond2: entered allmulticast mode [ 1283.776148][T23993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1283.788541][T23986] pimreg: left allmulticast mode [ 1283.839644][T24004] team0 (unregistering): left allmulticast mode [ 1283.853206][T24004] team_slave_0: left allmulticast mode [ 1283.865020][T24004] team_slave_1: left allmulticast mode [ 1283.870513][T24004] team0 (unregistering): left promiscuous mode [ 1283.880265][T24004] team_slave_0: left promiscuous mode [ 1283.891444][T24004] team_slave_1: left promiscuous mode [ 1283.913348][T24004] bridge0: port 3(team0) entered disabled state [ 1283.947935][T24004] team0 (unregistering): Port device team_slave_0 removed [ 1283.971210][T24004] team0 (unregistering): Port device team_slave_1 removed [ 1283.988409][T24004] team0 (unregistering): Port device bridge1 removed [ 1284.010779][T24001] netlink: 'syz.3.13063': attribute type 2 has an invalid length. [ 1284.093053][T24019] pimreg: entered allmulticast mode [ 1284.111760][T24019] pimreg: left allmulticast mode [ 1284.184457][T24026] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.302537][T24035] netlink: 'syz.4.13070': attribute type 1 has an invalid length. [ 1284.322990][T24026] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.342807][T24035] syzkaller0: entered promiscuous mode [ 1284.350434][T24035] syzkaller0: entered allmulticast mode [ 1284.472821][T24026] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.573341][T24026] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.648456][T24052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.753914][T24057] netlink: 'syz.4.13079': attribute type 2 has an invalid length. [ 1284.762892][T24057] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1284.797512][T24052] tipc: Enabled bearer , priority 0 [ 1284.815792][ T3689] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.825143][T24052] syzkaller0: entered promiscuous mode [ 1284.830850][T24052] syzkaller0: entered allmulticast mode [ 1284.834401][T24067] openvswitch: netlink: Flow actions attr not present in new flow. [ 1284.838244][T24062] tipc: Enabled bearer , priority 0 [ 1284.869673][T24057] syzkaller0: entered promiscuous mode [ 1284.875982][T24057] syzkaller0: entered allmulticast mode [ 1284.883150][ T6342] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.912207][T24052] tipc: Resetting bearer [ 1284.938818][ T6342] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.957303][T24049] tipc: Resetting bearer [ 1284.979150][T24049] tipc: Disabling bearer [ 1285.000225][T24056] tipc: Resetting bearer [ 1285.031085][T24056] tipc: Disabling bearer [ 1285.040957][ T6342] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.286448][T24088] netlink: 'syz.2.13090': attribute type 16 has an invalid length. [ 1285.324014][T24088] netlink: 'syz.2.13090': attribute type 17 has an invalid length. [ 1285.397449][T24088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.419813][T24088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1285.443199][T24095] xt_CONNSECMARK: invalid mode: 0 [ 1285.725753][ T4217] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.736448][ T6342] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.757643][ T6342] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.777446][ T6342] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1286.289262][T24161] netlink: 'syz.2.13111': attribute type 15 has an invalid length. [ 1286.320454][T24161] IPv6: NLM_F_CREATE should be specified when creating new route [ 1286.436334][T24179] netlink: 'syz.3.13117': attribute type 1 has an invalid length. [ 1286.504612][T24182] tipc: Cannot configure node identity twice [ 1286.546947][T24179] bond1: (slave gretap1): making interface the new active one [ 1286.561603][T24179] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1286.603201][T24186] tipc: Enabled bearer , priority 0 [ 1286.687758][T24185] tipc: Disabling bearer [ 1287.011122][T24207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.095772][T24207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.110624][T24207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.195861][T24207] vcan1: left promiscuous mode [ 1287.208648][T24207] bond0: left promiscuous mode [ 1287.214319][T24207] bond2: left promiscuous mode [ 1287.220699][T24215] __nla_validate_parse: 13 callbacks suppressed [ 1287.220709][T24215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13129'. [ 1287.238827][T24215] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1287.259561][T24218] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1287.291008][ T4210] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1287.310961][ T4210] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.331846][ T4210] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1287.341503][ T4210] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.350718][ T4210] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1287.374178][ T4210] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.404622][ T4210] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1287.435414][ T4210] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.446571][T24224] syzkaller0: entered promiscuous mode [ 1287.452164][T24224] syzkaller0: entered allmulticast mode [ 1287.481500][T24232] netlink: 'syz.3.13134': attribute type 10 has an invalid length. [ 1287.515655][T24232] bond0: (slave dummy0): Releasing backup interface [ 1287.552777][T24232] team0: Port device dummy0 added [ 1287.569605][T24236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13134'. [ 1287.690912][T24247] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1287.826779][T24255] bridge_slave_1: left allmulticast mode [ 1287.832581][T24255] bridge_slave_1: left promiscuous mode [ 1287.839676][T24255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.913095][T24261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13143'. [ 1288.540723][T24287] Unsupported ieee802154 address type: 0 [ 1288.859248][T24302] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.13154'. [ 1289.227368][T24318] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13160'. [ 1289.610108][T24344] lo speed is unknown, defaulting to 1000 [ 1289.640892][T24344] wg1 speed is unknown, defaulting to 1000 [ 1289.987217][T24361] lo speed is unknown, defaulting to 1000 [ 1289.994719][T24361] wg1 speed is unknown, defaulting to 1000 [ 1290.381317][T24384] lo speed is unknown, defaulting to 1000 [ 1290.406129][T24384] wg1 speed is unknown, defaulting to 1000 [ 1290.528726][T24392] batadv_slave_1: entered promiscuous mode [ 1290.538933][T24391] batadv_slave_1: left promiscuous mode [ 1290.945947][T24414] batadv_slave_0: entered promiscuous mode [ 1290.963598][T24414] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13186'. [ 1290.984071][T24414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13186'. [ 1291.029388][T24414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1291.080390][T24412] batadv_slave_0: left promiscuous mode [ 1291.142956][T24421] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 1291.167030][T24421] bond3 (unregistering): Released all slaves [ 1291.243667][T24430] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.13192'. [ 1291.263601][T24430] netlink: 208 bytes leftover after parsing attributes in process `syz.1.13192'. [ 1291.273580][T24432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13193'. [ 1291.283040][T24427] lo speed is unknown, defaulting to 1000 [ 1291.284551][T24427] wg1 speed is unknown, defaulting to 1000 [ 1291.368064][T24436] IPVS: stopping backup sync thread 22393 ... [ 1291.412216][T24438] netlink: 'syz.4.13195': attribute type 1 has an invalid length. [ 1291.507223][T24441] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1291.517441][T24444] vlan2: entered allmulticast mode [ 1291.535037][T24444] bond0: entered allmulticast mode [ 1291.562820][T24444] bond_slave_0: entered allmulticast mode [ 1291.577968][T24444] bond_slave_1: entered allmulticast mode [ 1291.852048][T24459] netlink: 'syz.2.13199': attribute type 10 has an invalid length. [ 1291.980786][T24472] syzkaller0: entered promiscuous mode [ 1292.006756][T24472] syzkaller0: entered allmulticast mode [ 1292.199318][T24484] syzkaller0: entered promiscuous mode [ 1292.223810][T24484] syzkaller0: entered allmulticast mode [ 1292.246075][T24484] __nla_validate_parse: 6 callbacks suppressed [ 1292.246092][T24484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13206'. [ 1292.616979][T24508] Cannot find del_set index 1 as target [ 1292.623303][T24509] netlink: 428 bytes leftover after parsing attributes in process `syz.2.13213'. [ 1292.676126][T24509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13213'. [ 1292.699150][T24512] netlink: 'syz.2.13213': attribute type 1 has an invalid length. [ 1292.727371][T24512] netlink: 'syz.2.13213': attribute type 2 has an invalid length. [ 1292.754503][T24509] SET target dimension over the limit! [ 1292.810599][T24514] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13217'. [ 1292.826149][T24514] openvswitch: netlink: Flow key attr not present in new flow. [ 1293.028006][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13222'. [ 1293.536878][T24567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13232'. [ 1293.561402][T24567] vlan2: entered promiscuous mode [ 1293.570632][T24567] bridge0: entered promiscuous mode [ 1293.599083][T24574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13231'. [ 1293.667814][T24580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13231'. [ 1293.703863][T24567] netlink: 'syz.4.13232': attribute type 11 has an invalid length. [ 1293.712950][T24567] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.13232'. [ 1293.751011][T24582] openvswitch: netlink: IP tunnel dst address not specified [ 1293.925100][T24584] netlink: 'syz.4.13236': attribute type 1 has an invalid length. [ 1294.245906][T24624] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13247'. [ 1294.299396][T24627] rdma_rxe: rxe_newlink: failed to add lo [ 1294.538569][T24642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.583276][T24647] erspan0: entered promiscuous mode [ 1295.450566][T24700] netlink: 'syz.4.13265': attribute type 1 has an invalid length. [ 1295.552430][T24700] bond3: entered promiscuous mode [ 1295.567103][T24700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1296.263601][T24753] lo speed is unknown, defaulting to 1000 [ 1296.271670][T24753] wg1 speed is unknown, defaulting to 1000 [ 1296.407451][T24761] lo speed is unknown, defaulting to 1000 [ 1296.622957][T24761] wg1 speed is unknown, defaulting to 1000 [ 1296.777764][T27587] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.808198][T27587] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.819310][T27587] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.829241][T27587] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.939765][T24795] netlink: 'syz.3.13293': attribute type 3 has an invalid length. [ 1297.024336][T24800] netlink: 'syz.4.13294': attribute type 1 has an invalid length. [ 1297.197862][T24800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1297.243954][T24798] mac80211_hwsim hwsim136 wlan0: entered promiscuous mode [ 1297.271555][T24798] bond4: (slave wlan0): Opening slave failed [ 1297.359321][T24832] syz_tun: entered allmulticast mode [ 1297.411062][T24832] dvmrp6: entered allmulticast mode [ 1297.420792][T24835] __nla_validate_parse: 89 callbacks suppressed [ 1297.420810][T24835] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13305'. [ 1297.527487][T24833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1297.673937][T24855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13310'. [ 1297.752138][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13311'. [ 1297.762196][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13311'. [ 1297.767521][T24841] syzkaller0: entered promiscuous mode [ 1297.777090][T24841] syzkaller0: entered allmulticast mode [ 1297.784215][T24846] netlink: 212 bytes leftover after parsing attributes in process `syz.3.13308'. [ 1297.818018][T24855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13310'. [ 1297.827951][ T4217] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.856468][ T4217] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1297.988770][T24871] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1298.383021][T24888] netlink: 'syz.1.13317': attribute type 10 has an invalid length. [ 1299.781156][ T4217] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1299.789850][ T4217] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1299.798953][T24826] syz_tun: left allmulticast mode [ 1299.817414][T24888] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1299.930069][T24896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13319'. [ 1300.021395][T24896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13319'. [ 1300.054117][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1300.060404][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1300.134449][T24896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13319'. [ 1300.215837][T24920] netlink: 232 bytes leftover after parsing attributes in process `syz.0.13329'. [ 1300.875364][T24956] syz_tun: entered promiscuous mode [ 1301.223047][T24973] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1301.238724][T24949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.246147][T24949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.508474][T24949] xfrm0: left promiscuous mode [ 1301.513262][T24949] xfrm0: left allmulticast mode [ 1301.667634][T24949] tipc: Resetting bearer [ 1301.755687][T24949] macsec1: left promiscuous mode [ 1301.794363][T24962] hsr_slave_0: left promiscuous mode [ 1301.809211][T24962] hsr_slave_1: left promiscuous mode [ 1301.839460][T24972] delete_channel: no stack [ 1301.844481][T23374] wg1 speed is unknown, defaulting to 1000 [ 1301.850360][ T1162] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.850417][ T1162] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.850451][ T1162] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.850485][ T1162] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.949172][T23374] syz0: Port: 1 Link DOWN [ 1302.078667][T24994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1302.111515][T24994] team0: Port device bond2 added [ 1302.140987][T24997] syzkaller0: entered promiscuous mode [ 1302.148590][T24997] syzkaller0: entered allmulticast mode [ 1302.336122][T25004] tipc: Enabled bearer , priority 0 [ 1302.427116][T24996] tipc: Resetting bearer [ 1302.439848][T25010] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 1302.535905][T24996] tipc: Disabling bearer [ 1302.797659][T25022] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1302.859999][T25025] lo speed is unknown, defaulting to 1000 [ 1302.895230][T25025] wg1 speed is unknown, defaulting to 1000 [ 1303.391767][T25057] ip6gretap2: entered allmulticast mode [ 1303.431018][T25064] __nla_validate_parse: 13 callbacks suppressed [ 1303.431036][T25064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13366'. [ 1303.471771][T25064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13366'. [ 1303.619057][T25062] syzkaller0: entered promiscuous mode [ 1303.624715][T25062] syzkaller0: entered allmulticast mode [ 1303.645958][T25064] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.758837][T25075] nbd: must specify a size in bytes for the device [ 1305.462010][T25064] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.569573][T25064] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.629494][T25089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13374'. [ 1305.655527][T25064] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.724914][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 1305.732955][ C0] lec:lec_tx_timeout: lec0 [ 1305.886149][T27588] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.935684][ T6327] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.959194][ T6327] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1305.975870][T25110] netlink: 'syz.3.13382': attribute type 1 has an invalid length. [ 1305.983965][ T6327] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1306.016052][T25110] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13382'. [ 1306.080957][T25118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13384'. [ 1306.095434][T25121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13385'. [ 1306.296956][T25133] lo speed is unknown, defaulting to 1000 [ 1306.373831][T25133] wg1 speed is unknown, defaulting to 1000 [ 1306.469737][T25138] lo speed is unknown, defaulting to 1000 [ 1306.500572][T25138] wg1 speed is unknown, defaulting to 1000 [ 1308.041458][T25205] sctp: [Deprecated]: syz.2.13407 (pid 25205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1308.041458][T25205] Use struct sctp_sack_info instead [ 1308.060976][T25206] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 1308.153286][T25213] netlink: 'syz.1.13411': attribute type 1 has an invalid length. [ 1308.287193][T25226] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13414'. [ 1308.298217][T25226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13414'. [ 1308.433459][T25242] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1308.598512][T25237] lo speed is unknown, defaulting to 1000 [ 1308.606382][T25237] wg1 speed is unknown, defaulting to 1000 [ 1308.728972][T25257] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1309.348297][T25283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13427'. [ 1309.358284][T25283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13427'. [ 1309.418081][T25294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13430'. [ 1309.439006][T25294] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13430'. [ 1309.874279][T25316] netlink: 'syz.2.13436': attribute type 39 has an invalid length. [ 1310.006175][T25323] syzkaller0: entered promiscuous mode [ 1310.011651][T25323] syzkaller0: entered allmulticast mode [ 1310.442910][T25333] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13443'. [ 1310.576601][T25334] vlan2: entered promiscuous mode [ 1310.803484][T25354] netlink: 'syz.2.13451': attribute type 11 has an invalid length. [ 1310.811876][T25354] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13451'. [ 1310.827780][T25354] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1311.117733][T25373] x_tables: duplicate underflow at hook 1 [ 1311.249744][T25383] delete_channel: no stack [ 1311.400028][T25394] syzkaller1: entered allmulticast mode [ 1311.639126][T25403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13464'. [ 1312.056729][T25426] syzkaller0: entered promiscuous mode [ 1312.062359][T25426] syzkaller0: entered allmulticast mode [ 1312.103267][T25426] tipc: Enabled bearer , priority 0 [ 1312.118464][T25425] tipc: Resetting bearer [ 1312.163340][T25425] tipc: Disabling bearer [ 1312.191463][T25428] lo speed is unknown, defaulting to 1000 [ 1312.206386][T25428] wg1 speed is unknown, defaulting to 1000 [ 1313.002527][T25451] bridge0: port 2(macvtap1) entered blocking state [ 1313.019541][T25451] bridge0: port 2(macvtap1) entered disabled state [ 1313.026839][T25451] macvtap1: entered allmulticast mode [ 1313.032375][T25451] bridge0: entered allmulticast mode [ 1313.042216][T25451] macvtap1: left allmulticast mode [ 1313.051000][T25452] netlink: 'syz.4.13477': attribute type 1 has an invalid length. [ 1313.059264][T25451] bridge0: left allmulticast mode [ 1313.101254][T25459] netlink: 27 bytes leftover after parsing attributes in process `syz.1.13480'. [ 1313.242732][T25465] syzkaller0: entered promiscuous mode [ 1313.250844][T25465] syzkaller0: entered allmulticast mode [ 1313.300624][T25465] tipc: Enabled bearer , priority 0 [ 1313.308593][T25464] tipc: Resetting bearer [ 1313.403998][T25464] tipc: Disabling bearer [ 1313.416235][T25481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13485'. [ 1313.467871][T25481] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1313.515513][T25476] bond5: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1313.537195][T25476] bond5 (unregistering): Released all slaves [ 1313.562126][T25492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13490'. [ 1313.718745][T25502] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1313.771216][T25507] netlink: 'syz.1.13493': attribute type 13 has an invalid length. [ 1313.803315][T25496] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1313.901830][T25512] netlink: 'syz.1.13493': attribute type 13 has an invalid length. [ 1314.028920][T25507] syz_tun: left promiscuous mode [ 1314.079887][T25496] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1314.208488][T25496] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1314.268876][T25539] syzkaller0: entered promiscuous mode [ 1314.274534][T25539] syzkaller0: entered allmulticast mode [ 1314.356193][T25496] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1314.498306][ T3689] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1314.528831][ T6327] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1314.545409][T25554] netlink: 'syz.1.13508': attribute type 1 has an invalid length. [ 1314.596762][T25554] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1314.609846][ T6327] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1314.658855][T25561] bond5: (slave ip6gretap1): making interface the new active one [ 1314.669402][T25561] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1314.701913][T25554] macvlan3: entered promiscuous mode [ 1314.707753][T25554] macvlan3: entered allmulticast mode [ 1314.713997][T25554] ip6gretap1: entered promiscuous mode [ 1314.720080][T25554] bond5: entered allmulticast mode [ 1314.725473][T25554] ip6gretap1: entered allmulticast mode [ 1314.731047][T25554] bond5: entered promiscuous mode [ 1314.737636][T25554] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1314.746127][T25554] team0: Port device macvlan3 added [ 1314.754243][T25569] __nla_validate_parse: 2 callbacks suppressed [ 1314.754259][T25569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13511'. [ 1314.789817][ T1162] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1314.832917][T25564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13511'. [ 1314.908348][T25576] netlink: 'syz.4.13515': attribute type 1 has an invalid length. [ 1314.973307][T25576] bond5: entered promiscuous mode [ 1314.979613][T25576] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1315.030755][T25581] dvmrp6: left allmulticast mode [ 1315.107893][T25593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13520'. [ 1315.140467][T25593] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.13520'. [ 1315.154407][T25593] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.13520'. [ 1315.331714][T25600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13521'. [ 1315.437234][T25602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13523'. [ 1315.453724][T25602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13523'. [ 1315.550354][T25614] netlink: 'syz.2.13525': attribute type 2 has an invalid length. [ 1315.581909][T25616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13526'. [ 1315.723721][T25624] netlink: 'syz.0.13529': attribute type 1 has an invalid length. [ 1315.735898][T25628] netlink: 'syz.0.13529': attribute type 1 has an invalid length. [ 1315.851279][T25635] netlink: 'syz.2.13532': attribute type 11 has an invalid length. [ 1315.860355][T25635] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.13532'. [ 1315.905371][T25632] lo speed is unknown, defaulting to 1000 [ 1315.912779][T25632] wg1 speed is unknown, defaulting to 1000 [ 1316.000967][T25640] netlink: 'syz.0.13531': attribute type 1 has an invalid length. [ 1316.115406][T25643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1316.140974][T25643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1316.154534][T25643] bond2: (slave geneve2): making interface the new active one [ 1316.163860][T25643] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1316.177062][ T6327] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1316.195177][ T6327] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1316.240594][ T6327] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1316.259345][ T6327] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1316.935917][T25687] pimreg: entered allmulticast mode [ 1317.396707][T25717] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1317.495949][T25722] FAULT_INJECTION: forcing a failure. [ 1317.495949][T25722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.509217][T25722] CPU: 0 UID: 0 PID: 25722 Comm: syz.4.13556 Not tainted syzkaller #0 PREEMPT(full) [ 1317.509241][T25722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1317.509253][T25722] Call Trace: [ 1317.509261][T25722] [ 1317.509269][T25722] dump_stack_lvl+0xe8/0x150 [ 1317.509295][T25722] should_fail_ex+0x412/0x560 [ 1317.509321][T25722] _copy_from_iter+0x1d3/0x1670 [ 1317.509353][T25722] ? rcu_is_watching+0x15/0xb0 [ 1317.509372][T25722] ? __pfx__copy_from_iter+0x10/0x10 [ 1317.509391][T25722] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 1317.509431][T25722] ? netlink_sendmsg+0x650/0xb40 [ 1317.509449][T25722] ? skb_put+0x11b/0x210 [ 1317.509473][T25722] netlink_sendmsg+0x6c0/0xb40 [ 1317.509501][T25722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.509524][T25722] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1317.509547][T25722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1317.509567][T25722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1317.509586][T25722] ____sys_sendmsg+0xa68/0xad0 [ 1317.509608][T25722] ? __might_fault+0xaf/0x130 [ 1317.509637][T25722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1317.509668][T25722] ? import_iovec+0x73/0xa0 [ 1317.509694][T25722] ___sys_sendmsg+0x2a5/0x360 [ 1317.509715][T25722] ? __lock_acquire+0x6b5/0x2cf0 [ 1317.509742][T25722] ? __pfx____sys_sendmsg+0x10/0x10 [ 1317.509798][T25722] ? __fget_files+0x2a/0x420 [ 1317.509816][T25722] ? __fget_files+0x3a0/0x420 [ 1317.509844][T25722] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1317.509869][T25722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1317.509901][T25722] ? __pfx_ksys_write+0x10/0x10 [ 1317.509935][T25722] do_syscall_64+0xe2/0xf80 [ 1317.509957][T25722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.509974][T25722] ? trace_irq_disable+0x37/0x100 [ 1317.509992][T25722] ? clear_bhb_loop+0x60/0xb0 [ 1317.510012][T25722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.510029][T25722] RIP: 0033:0x7f7b62d9aeb9 [ 1317.510045][T25722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.510059][T25722] RSP: 002b:00007f7b63bc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1317.510079][T25722] RAX: ffffffffffffffda RBX: 00007f7b63015fa0 RCX: 00007f7b62d9aeb9 [ 1317.510092][T25722] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000008 [ 1317.510104][T25722] RBP: 00007f7b63bc1090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.510116][T25722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.510127][T25722] R13: 00007f7b63016038 R14: 00007f7b63015fa0 R15: 00007ffe996ed9c8 [ 1317.510156][T25722] [ 1317.833257][ T30] audit: type=1804 audit(1770368466.776:102): pid=25723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13557" name="x000000000000000700000000000000000000007" dev="tmpfs" ino=1325 res=1 errno=0 [ 1317.861368][T25728] ªªªªª98åFÿÿÿÿ: renamed from lo [ 1317.868221][ T30] audit: type=1800 audit(1770368466.776:103): pid=25723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13557" name="x000000000000000700000000000000000000007" dev="tmpfs" ino=1325 res=0 errno=0 [ 1318.050500][T25734] lo speed is unknown, defaulting to 1000 [ 1318.059242][T25734] wg1 speed is unknown, defaulting to 1000 [ 1318.695522][ T30] audit: type=1800 audit(1770368467.636:104): pid=25770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13570" name="memory.events" dev="tmpfs" ino=1089 res=0 errno=0 [ 1320.644044][T25780] lo speed is unknown, defaulting to 1000 [ 1320.655235][T25780] wg1 speed is unknown, defaulting to 1000 [ 1320.909773][T25818] __nla_validate_parse: 14 callbacks suppressed [ 1320.909793][T25818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13576'. [ 1320.972190][T25818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13576'. [ 1321.008070][T25824] netlink: 176 bytes leftover after parsing attributes in process `syz.1.13576'. [ 1321.177586][T25828] lo speed is unknown, defaulting to 1000 [ 1321.184231][T25828] wg1 speed is unknown, defaulting to 1000 [ 1321.209380][T25837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13582'. [ 1321.224973][T25837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13582'. [ 1321.251034][T25837] netlink: 176 bytes leftover after parsing attributes in process `syz.1.13582'. [ 1321.260882][T25837] FAULT_INJECTION: forcing a failure. [ 1321.260882][T25837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1321.305061][T25837] CPU: 0 UID: 0 PID: 25837 Comm: syz.1.13582 Not tainted syzkaller #0 PREEMPT(full) [ 1321.305087][T25837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1321.305098][T25837] Call Trace: [ 1321.305106][T25837] [ 1321.305123][T25837] dump_stack_lvl+0xe8/0x150 [ 1321.305149][T25837] should_fail_ex+0x412/0x560 [ 1321.305177][T25837] _copy_to_user+0x31/0xb0 [ 1321.305204][T25837] simple_read_from_buffer+0xe1/0x170 [ 1321.305228][T25837] proc_fail_nth_read+0x1bb/0x230 [ 1321.305254][T25837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1321.305279][T25837] ? rw_verify_area+0x2a6/0x4d0 [ 1321.305301][T25837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1321.305323][T25837] vfs_read+0x20c/0xa70 [ 1321.305343][T25837] ? fdget_pos+0x246/0x320 [ 1321.305364][T25837] ? __pfx___mutex_lock+0x10/0x10 [ 1321.305387][T25837] ? __pfx_vfs_read+0x10/0x10 [ 1321.305410][T25837] ? __fget_files+0x2a/0x420 [ 1321.305431][T25837] ? __fget_files+0x3a0/0x420 [ 1321.305447][T25837] ? __fget_files+0x2a/0x420 [ 1321.305472][T25837] ksys_read+0x150/0x270 [ 1321.305496][T25837] ? __pfx_ksys_read+0x10/0x10 [ 1321.305524][T25837] do_syscall_64+0xe2/0xf80 [ 1321.305539][T25837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.305548][T25837] ? trace_irq_disable+0x37/0x100 [ 1321.305559][T25837] ? clear_bhb_loop+0x60/0xb0 [ 1321.305571][T25837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.305580][T25837] RIP: 0033:0x7f66d695b78e [ 1321.305590][T25837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1321.305600][T25837] RSP: 002b:00007f66d77effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1321.305611][T25837] RAX: ffffffffffffffda RBX: 00007f66d77f06c0 RCX: 00007f66d695b78e [ 1321.305619][T25837] RDX: 000000000000000f RSI: 00007f66d77f00a0 RDI: 000000000000000b [ 1321.305625][T25837] RBP: 00007f66d77f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.305631][T25837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.305637][T25837] R13: 00007f66d6c16038 R14: 00007f66d6c15fa0 R15: 00007ffd2df03f08 [ 1321.305653][T25837] [ 1321.559224][T25850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13587'. [ 1321.611709][ T30] audit: type=1804 audit(1770368470.546:105): pid=25850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13587" name="/newroot/262/memory.events" dev="tmpfs" ino=1358 res=1 errno=0 [ 1321.860925][T25860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13589'. [ 1321.993501][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13592'. [ 1322.007929][T25868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13592'. [ 1322.705457][T25924] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1322.762562][T25921] lo speed is unknown, defaulting to 1000 [ 1322.794043][T25929] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1322.805693][T25921] wg1 speed is unknown, defaulting to 1000 [ 1322.878831][T25929] lo speed is unknown, defaulting to 1000 [ 1322.910938][T25929] wg1 speed is unknown, defaulting to 1000 [ 1323.101500][T25935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1323.163985][T25939] ip6t_srh: unknown srh match flags 4000 [ 1323.322694][T25945] vlan3: entered promiscuous mode [ 1323.339288][T25945] batadv0: entered promiscuous mode [ 1323.527449][T25956] bond6: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1323.564979][T25956] bond6: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1323.746965][T25956] bond7: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1323.757117][T25956] bond7: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1323.796490][T25956] bond8: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1323.806391][T25956] bond8: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1323.877946][T25956] bond9: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1323.888113][T25956] bond9: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1323.920886][T25956] bond10: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1323.945301][T25956] bond10: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1323.979190][T25973] validate_nla: 2 callbacks suppressed [ 1323.979209][T25973] netlink: 'syz.3.13618': attribute type 1 has an invalid length. [ 1323.991855][T25956] bond11: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1324.005106][T25956] bond11: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1324.042818][T25956] bond12: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1324.057732][T25956] bond12: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1324.161963][T25956] bond13: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1324.172630][T25956] bond13: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1324.243538][T25956] bond14: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1324.255637][T25956] bond14: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1324.284136][T25998] syzkaller1: entered promiscuous mode [ 1324.290026][T25998] syzkaller1: entered allmulticast mode [ 1324.398653][T25956] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1324.409157][T27588] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.463405][T27588] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1324.492629][T27588] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.504483][T27588] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1324.547662][T27588] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.558309][T27588] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1324.578256][T27588] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.587144][T27588] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1324.694016][T26026] netlink: 'syz.4.13636': attribute type 15 has an invalid length. [ 1324.827490][T26034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1324.838633][T26040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1325.050443][T26057] sctp: [Deprecated]: syz.4.13638 (pid 26057) Use of int in max_burst socket option. [ 1325.050443][T26057] Use struct sctp_assoc_value instead [ 1327.032156][T10572] lec:lec_start_xmit: lec0:No lecd attached [ 1327.499951][T26088] lo speed is unknown, defaulting to 1000 [ 1327.506912][T26096] __nla_validate_parse: 10 callbacks suppressed [ 1327.506928][T26096] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13651'. [ 1327.533455][T26088] wg1 speed is unknown, defaulting to 1000 [ 1327.709844][T26096] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13651'. [ 1327.725866][ T5820] Bluetooth: hci3: command 0x041b tx timeout [ 1327.955178][T26102] lo speed is unknown, defaulting to 1000 [ 1327.962658][T26102] wg1 speed is unknown, defaulting to 1000 [ 1328.009819][T26116] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13653'. [ 1328.044714][T26122] netlink: 192 bytes leftover after parsing attributes in process `syz.2.13655'. [ 1328.410283][T26146] bridge0: port 3(veth1_to_hsr) entered blocking state [ 1328.438261][T26146] bridge0: port 3(veth1_to_hsr) entered disabled state [ 1328.480100][T26146] veth1_to_hsr: entered allmulticast mode [ 1328.511631][T26146] veth1_to_hsr: entered promiscuous mode [ 1328.621711][T26165] FAULT_INJECTION: forcing a failure. [ 1328.621711][T26165] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.675031][T26165] CPU: 0 UID: 0 PID: 26165 Comm: syz.2.13662 Not tainted syzkaller #0 PREEMPT(full) [ 1328.675082][T26165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1328.675106][T26165] Call Trace: [ 1328.675114][T26165] [ 1328.675123][T26165] dump_stack_lvl+0xe8/0x150 [ 1328.675151][T26165] should_fail_ex+0x412/0x560 [ 1328.675179][T26165] should_failslab+0xa8/0x100 [ 1328.675200][T26165] __kmalloc_noprof+0xde/0x7e0 [ 1328.675219][T26165] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1328.675242][T26165] ? rcu_is_watching+0x15/0xb0 [ 1328.675264][T26165] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1328.675292][T26165] genl_family_rcv_msg_doit+0xd9/0x330 [ 1328.675313][T26165] ? __asan_memcpy+0x40/0x70 [ 1328.675338][T26165] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1328.675365][T26165] ? __pfx_genl_get_cmd+0x10/0x10 [ 1328.675398][T26165] ? __lock_acquire+0x6b5/0x2cf0 [ 1328.675430][T26165] genl_rcv_msg+0x61c/0x7a0 [ 1328.675460][T26165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1328.675480][T26165] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1328.675515][T26165] netlink_rcv_skb+0x232/0x4b0 [ 1328.675536][T26165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1328.675560][T26165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1328.675577][T26165] ? genl_rcv+0x19/0x40 [ 1328.675616][T26165] ? down_read+0x272/0x2e0 [ 1328.675631][T26165] ? genl_rcv+0xd/0x40 [ 1328.675654][T26165] genl_rcv+0x28/0x40 [ 1328.675673][T26165] netlink_unicast+0x80f/0x9b0 [ 1328.675701][T26165] ? __pfx_netlink_unicast+0x10/0x10 [ 1328.675721][T26165] ? netlink_sendmsg+0x650/0xb40 [ 1328.675738][T26165] ? skb_put+0x11b/0x210 [ 1328.675763][T26165] netlink_sendmsg+0x813/0xb40 [ 1328.675793][T26165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1328.675816][T26165] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1328.675838][T26165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1328.675861][T26165] __sys_sendto+0x709/0x7a0 [ 1328.675885][T26165] ? __pfx___sys_sendto+0x10/0x10 [ 1328.675933][T26165] ? exc_page_fault+0x6a/0xc0 [ 1328.675959][T26165] ? do_user_addr_fault+0xc7c/0x1360 [ 1328.675988][T26165] __x64_sys_sendto+0xde/0x100 [ 1328.676014][T26165] do_syscall_64+0xe2/0xf80 [ 1328.676036][T26165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.676053][T26165] ? trace_irq_disable+0x37/0x100 [ 1328.676069][T26165] ? clear_bhb_loop+0x60/0xb0 [ 1328.676091][T26165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.676108][T26165] RIP: 0033:0x7f51b055b78e [ 1328.676124][T26165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1328.676139][T26165] RSP: 002b:00007f51b1444e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1328.676159][T26165] RAX: ffffffffffffffda RBX: 00007f51b14466c0 RCX: 00007f51b055b78e [ 1328.676172][T26165] RDX: 0000000000000020 RSI: 00007f51b1445000 RDI: 0000000000000003 [ 1328.676183][T26165] RBP: 0000000000000000 R08: 00007f51b1444f04 R09: 000000000000000c [ 1328.676195][T26165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1328.676205][T26165] R13: 00007f51b1444f58 R14: 00007f51b1445000 R15: 0000000000000000 [ 1328.676236][T26165] [ 1329.259655][T26187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13668'. [ 1329.584144][T26202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13670'. [ 1329.635613][T26202] netlink: 'syz.1.13670': attribute type 7 has an invalid length. [ 1329.660084][T26202] netlink: 'syz.1.13670': attribute type 8 has an invalid length. [ 1329.683992][T26202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13670'. [ 1329.920607][T26223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13675'. [ 1330.140250][T26242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13679'. [ 1330.151246][T26242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13679'. [ 1330.198610][T26242] pim6reg1: entered allmulticast mode [ 1330.217888][T26247] netlink: 'syz.3.13681': attribute type 10 has an invalid length. [ 1330.558356][T26274] gre0: entered promiscuous mode [ 1330.568951][T26274] gre0: entered allmulticast mode [ 1330.692597][T26282] team0: Port device syz_tun added [ 1331.144418][T26316] netlink: 'syz.4.13699': attribute type 10 has an invalid length. [ 1331.162328][T26316] syz_tun: entered promiscuous mode [ 1331.214326][T20265] Bluetooth: hci1: link tx timeout [ 1331.223511][T20265] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1331.235203][ T5820] Bluetooth: hci1: link tx timeout [ 1331.240422][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1331.286847][T26316] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1331.313475][ T5820] Bluetooth: hci1: link tx timeout [ 1331.321273][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1331.370667][ T5820] Bluetooth: hci1: link tx timeout [ 1331.376350][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1331.431866][T26327] netlink: 'syz.4.13701': attribute type 4 has an invalid length. [ 1331.602880][ T5820] Bluetooth: hci1: link tx timeout [ 1331.612977][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1331.734222][T26342] bond6: Unable to set up delay as MII monitoring is disabled [ 1331.749897][T26342] bond6 (unregistering): Released all slaves [ 1331.875705][ T5820] Bluetooth: hci1: link tx timeout [ 1331.880969][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1331.891859][T26350] syzkaller0: entered promiscuous mode [ 1331.912683][T26350] syzkaller0: entered allmulticast mode [ 1331.957748][T26350] netlink: 'syz.2.13708': attribute type 1 has an invalid length. [ 1331.986459][T26350] netlink: 'syz.2.13708': attribute type 2 has an invalid length. [ 1332.004643][T26350] netlink: 'syz.2.13708': attribute type 1 has an invalid length. [ 1332.041491][T26350] netlink: 'syz.2.13708': attribute type 3 has an invalid length. [ 1332.066657][T26359] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1332.074573][ T5820] Bluetooth: hci1: link tx timeout [ 1332.080262][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1332.572079][ T5820] Bluetooth: hci1: link tx timeout [ 1332.577441][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1332.670331][ T5820] Bluetooth: hci1: link tx timeout [ 1332.678535][ T5820] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1332.719821][T26398] syz_tun: entered allmulticast mode [ 1332.736575][T26394] syz_tun: left allmulticast mode [ 1332.764805][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 1332.772873][ C0] lec:lec_tx_timeout: lec0 [ 1332.863480][T26404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.909897][T26406] netlink: 'syz.1.13724': attribute type 6 has an invalid length. [ 1333.097640][T26414] __nla_validate_parse: 9 callbacks suppressed [ 1333.097660][T26414] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13728'. [ 1333.131381][ T916] Bluetooth: hci1: link tx timeout [ 1333.138921][ T916] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1333.161683][T26423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13730'. [ 1333.193857][ T916] Bluetooth: hci1: link tx timeout [ 1333.199580][ T916] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1333.250937][ T916] Bluetooth: hci1: command 0x0405 tx timeout [ 1335.673504][T26450] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 1335.681992][T26455] gre0: left promiscuous mode [ 1335.687867][T26455] gre0: left allmulticast mode [ 1335.779151][T26478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13739'. [ 1335.800996][ T36] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1335.820011][ T36] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1335.841835][ T36] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1335.877152][ T36] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1335.932073][T26481] Bluetooth: MGMT ver 1.23 [ 1336.140851][T26495] lo speed is unknown, defaulting to 1000 [ 1336.195382][T26495] wg1 speed is unknown, defaulting to 1000 [ 1337.399547][T26569] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13759'. [ 1337.637076][T26582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13761'. [ 1337.758651][T26595] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13764'. [ 1337.790871][T26593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13765'. [ 1337.880813][T26603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13766'. [ 1337.965364][ T916] Bluetooth: hci2: command 0x0406 tx timeout [ 1338.152901][T26615] lo speed is unknown, defaulting to 1000 [ 1338.163989][T26615] wg1 speed is unknown, defaulting to 1000 [ 1338.380154][T26626] netlink: 'syz.4.13771': attribute type 1 has an invalid length. [ 1338.432894][T26627] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13771'. [ 1338.514655][T26633] siw: device registration error -23 [ 1338.721713][T26633] bridge1: left promiscuous mode [ 1338.749171][T26633] bridge1: left allmulticast mode [ 1338.767458][T26633] gretap1: left promiscuous mode [ 1338.772753][T26633] bond1: left promiscuous mode [ 1338.800356][T26633] bridge2: left allmulticast mode [ 1338.822410][T26633] bridge3: left allmulticast mode [ 1338.829387][T26633] ip6gre2: left promiscuous mode [ 1338.843529][T26633] ip6gre2: left allmulticast mode [ 1338.858680][T26633] veth3: left promiscuous mode [ 1338.864404][T26633] vlan2: left allmulticast mode [ 1338.869964][T26633] bond0: left allmulticast mode [ 1338.875470][T26633] bond_slave_0: left allmulticast mode [ 1338.881071][T26633] bond_slave_1: left allmulticast mode [ 1338.922598][T26640] geneve2: entered promiscuous mode [ 1338.930023][T26640] geneve2: entered allmulticast mode [ 1338.948925][T26651] batman_adv: batadv0: Adding interface: macvtap1 [ 1338.956162][T26651] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.997657][T26651] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1339.029667][T26644] lo speed is unknown, defaulting to 1000 [ 1339.038164][T26644] wg1 speed is unknown, defaulting to 1000 [ 1339.133781][T26657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13777'. [ 1339.175597][T26657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13777'. [ 1339.198293][T26660] x_tables: duplicate entry at hook 2 [ 1339.207528][T26661] openvswitch: netlink: IP tunnel dst address not specified [ 1339.654036][T26677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13782'. [ 1339.706084][T26682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13782'. [ 1339.845401][T26689] lo speed is unknown, defaulting to 1000 [ 1339.852799][T26689] wg1 speed is unknown, defaulting to 1000 [ 1340.051586][ T916] Bluetooth: hci2: command 0x0406 tx timeout [ 1340.056370][T20265] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1340.112799][T26706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13788'. [ 1340.274501][T26708] batadv_slave_1: entered promiscuous mode [ 1340.281632][T26708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13788'. [ 1340.404194][T26708] batadv_slave_1 (unregistering): left promiscuous mode [ 1340.413769][T26708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.521227][T26721] tipc: Enabled bearer , priority 0 [ 1340.547546][T26723] syzkaller0: entered promiscuous mode [ 1340.563607][T26723] syzkaller0: entered allmulticast mode [ 1340.680704][T26728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13792'. [ 1340.772348][T26714] tipc: Resetting bearer [ 1340.788859][T26710] tipc: Resetting bearer [ 1340.839382][T26710] tipc: Disabling bearer [ 1340.879078][T26736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13795'. [ 1340.966335][T26741] xfrm0: entered promiscuous mode [ 1341.061879][T26741] bond6: option lp_interval: invalid value (0) [ 1341.069116][T26741] bond6: option lp_interval: allowed values 1 - 2147483647 [ 1341.154425][T26741] bond6 (unregistering): Released all slaves [ 1341.432269][T26767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13803'. [ 1342.052669][T26801] netlink: 'syz.4.13813': attribute type 1 has an invalid length. [ 1342.171196][T26813] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1342.269065][T26817] sctp: [Deprecated]: syz.3.13812 (pid 26817) Use of int in max_burst socket option. [ 1342.269065][T26817] Use struct sctp_assoc_value instead [ 1342.387139][T26824] netlink: 'syz.4.13819': attribute type 1 has an invalid length. [ 1342.393140][T26828] netlink: 'syz.1.13821': attribute type 1 has an invalid length. [ 1342.498871][T26824] erspan0: entered allmulticast mode [ 1342.594157][T26831] macvlan4: entered promiscuous mode [ 1342.629268][T26831] macvlan4: entered allmulticast mode [ 1342.654884][T26831] bond6: entered promiscuous mode [ 1342.660359][T26831] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1342.700424][T26831] bond6: left promiscuous mode [ 1342.706477][T26843] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1342.801704][T26843] lo speed is unknown, defaulting to 1000 [ 1342.863810][T26849] syzkaller0: entered promiscuous mode [ 1342.872454][T26849] syzkaller0: entered allmulticast mode [ 1342.902895][T26843] wg1 speed is unknown, defaulting to 1000 [ 1342.939222][T26851] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1343.089742][T20265] Bluetooth: hci4: command 0x0406 tx timeout [ 1343.322264][T26859] netlink: 'syz.0.13830': attribute type 1 has an invalid length. [ 1343.345629][T26859] NCSI netlink: No device for ifindex 0 [ 1343.514458][T26857] netlink: 'syz.2.13829': attribute type 13 has an invalid length. [ 1343.716294][T26857] gretap0: refused to change device tx_queue_len [ 1343.730485][T26857] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1344.002986][T26891] netlink: 'syz.2.13838': attribute type 1 has an invalid length. [ 1344.044580][T26891] bond3: entered promiscuous mode [ 1344.060640][T26891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1344.069628][T26898] __nla_validate_parse: 6 callbacks suppressed [ 1344.069645][T26898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13838'. [ 1344.106657][T26896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13839'. [ 1344.194347][T26901] lo speed is unknown, defaulting to 1000 [ 1344.274088][T26901] wg1 speed is unknown, defaulting to 1000 [ 1344.522117][T26917] xt_cgroup: invalid path, errno=-2 [ 1344.698469][T26931] netlink: 'syz.4.13851': attribute type 25 has an invalid length. [ 1344.716078][T26931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13851'. [ 1344.779773][ T4217] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.788206][ T4217] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.802352][ T4217] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1344.816175][ T4217] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1345.193184][T26955] netlink: 'syz.3.13859': attribute type 31 has an invalid length. [ 1345.298700][T26961] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13862'. [ 1345.315591][T26962] netlink: 'syz.3.13859': attribute type 1 has an invalid length. [ 1345.610008][T26971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1345.639305][T26976] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13867'. [ 1345.676720][T26976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13867'. [ 1345.706279][T26976] netlink: 87 bytes leftover after parsing attributes in process `syz.3.13867'. [ 1345.795452][T26980] netlink: 92 bytes leftover after parsing attributes in process `syz.2.13869'. [ 1346.019337][T26988] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13873'. [ 1346.046646][T26989] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13873'. [ 1346.684417][T27015] netlink: 'syz.4.13878': attribute type 58 has an invalid length. [ 1347.098612][T27024] netlink: 'syz.2.13881': attribute type 1 has an invalid length. [ 1347.160541][T27024] bond4: (slave geneve3): making interface the new active one [ 1347.172030][T27024] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 1347.190976][ T4209] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1347.207265][T27024] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1347.220659][T27024] bond4 (unregistering): Released all slaves [ 1347.275212][ T4209] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1347.989766][T27059] sctp: [Deprecated]: syz.4.13888 (pid 27059) Use of int in maxseg socket option. [ 1347.989766][T27059] Use struct sctp_assoc_value instead [ 1348.170756][T27069] netlink: 'syz.2.13891': attribute type 39 has an invalid length. [ 1348.393202][T27078] syzkaller0: entered promiscuous mode [ 1348.402487][T27078] syzkaller0: entered allmulticast mode [ 1348.784294][T27095] lo speed is unknown, defaulting to 1000 [ 1348.813378][T27095] wg1 speed is unknown, defaulting to 1000 [ 1349.116161][T27110] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1349.122338][T27106] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1349.239376][T27108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1349.532868][T27131] __nla_validate_parse: 11 callbacks suppressed [ 1349.532885][T27131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13905'. [ 1349.972986][T27160] netlink: 248 bytes leftover after parsing attributes in process `syz.3.13910'. [ 1350.017001][T27163] : entered promiscuous mode [ 1350.037052][T27165] tipc: Enabling of bearer rejected, failed to enable media [ 1350.333469][T27179] x_tables: duplicate underflow at hook 2 [ 1350.350409][T27179] IPVS: set_ctl: invalid protocol: 115 172.30.0.5:20000 [ 1350.360373][T27175] syzkaller0: entered promiscuous mode [ 1350.367392][T27175] syzkaller0: entered allmulticast mode [ 1350.698368][T27188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13919'. [ 1352.419722][T27185] lo speed is unknown, defaulting to 1000 [ 1352.447226][T27185] wg1 speed is unknown, defaulting to 1000 [ 1352.670366][T27225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13923'. [ 1352.961134][T27220] syzkaller0: entered promiscuous mode [ 1352.967697][T27220] syzkaller0: entered allmulticast mode [ 1352.983055][T27229] xt_ecn: cannot match TCP bits for non-tcp packets [ 1353.424908][T27258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13929'. [ 1354.886659][T27256] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13929'. [ 1354.941929][T27265] netlink: 'syz.2.13931': attribute type 1 has an invalid length. [ 1354.985544][T27265] bond4: entered promiscuous mode [ 1354.990934][T27265] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1355.017899][T27240] lo speed is unknown, defaulting to 1000 [ 1355.029872][T27259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13929'. [ 1355.042890][T27240] wg1 speed is unknown, defaulting to 1000 [ 1356.213093][T27252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1356.254832][T27309] netlink: 260 bytes leftover after parsing attributes in process `syz.1.13936'. [ 1356.417249][T27329] Cannot find add_set index 2 as target [ 1356.424198][T27329] Cannot find add_set index 2 as target [ 1356.438258][T27328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13938'. [ 1356.448018][T27328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13938'. [ 1356.478202][T27332] tipc: Disabling bearer [ 1356.679946][T27342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13945'. [ 1356.821046][T27346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13946'. [ 1357.199873][T27351] netlink: 'syz.2.13948': attribute type 1 has an invalid length. [ 1357.255736][T27351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1357.326199][T27351] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1357.365740][T27351] bond5: (slave batadv1): making interface the new active one [ 1357.400675][T27367] netlink: 'syz.4.13949': attribute type 4 has an invalid length. [ 1357.436573][T27351] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 1357.504527][T27370] team0: Port device dummy0 removed [ 1357.531239][T27370] batman_adv: batadv0: Adding interface: dummy0 [ 1357.555380][T27370] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.605654][T27370] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1357.818686][T27393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13959'. [ 1358.352916][T27399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13959'. [ 1358.371069][T27399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13959'. [ 1358.479517][T27404] netlink: 'syz.3.13961': attribute type 13 has an invalid length. [ 1358.567593][T27408] IPVS: set_ctl: invalid protocol: 108 172.30.0.3:20004 [ 1358.668394][T27410] siw: device registration error -23 [ 1358.695701][T27410] bond3: left promiscuous mode [ 1358.706397][T27410] bond4: left promiscuous mode [ 1358.769793][T27412] netlink: 'syz.3.13964': attribute type 14 has an invalid length. [ 1358.794914][T27412] netlink: 'syz.3.13964': attribute type 13 has an invalid length. [ 1358.948097][T27421] bond6 (unregistering): Released all slaves [ 1359.257378][T27444] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1359.460404][T27450] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1359.467688][T27450] IPv6: NLM_F_CREATE should be set when creating new route [ 1359.794345][T27459] tc_dump_action: action bad kind [ 1359.807282][T27434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1360.002536][T27461] netlink: 'syz.0.13978': attribute type 1 has an invalid length. [ 1360.027450][T27461] __nla_validate_parse: 35 callbacks suppressed [ 1360.027469][T27461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13978'. [ 1360.082516][T27465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13980'. [ 1360.139702][T27468] syzkaller0: entered promiscuous mode [ 1360.145683][T27468] syzkaller0: entered allmulticast mode [ 1360.376525][T27481] netlink: 47 bytes leftover after parsing attributes in process `syz.0.13985'. [ 1360.779688][T27516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13987'. [ 1360.938299][T27514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13993'. [ 1360.976984][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13995'. [ 1361.027235][T27519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13994'. [ 1361.073175][T27519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13994'. [ 1361.457724][T27534] netlink: 'syz.4.13997': attribute type 2 has an invalid length. [ 1361.471555][T27537] netlink: 'syz.3.13998': attribute type 13 has an invalid length. [ 1361.492447][T27534] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13997'. [ 1361.494084][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 1361.508245][ T1304] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1361.976351][T27560] geneve2: entered promiscuous mode [ 1361.988845][T27560] geneve2: entered allmulticast mode [ 1362.358834][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14012'. [ 1362.442133][T27605] erspan2: entered allmulticast mode [ 1362.753849][T27590] delete_channel: no stack [ 1362.875980][T27625] "syz.4.14017" (27625) uses obsolete ecb(arc4) skcipher [ 1363.106026][T27635] lo speed is unknown, defaulting to 1000 [ 1363.115993][T27635] wg1 speed is unknown, defaulting to 1000 [ 1363.314197][T27649] syzkaller0: entered promiscuous mode [ 1363.319861][T27649] syzkaller0: entered allmulticast mode [ 1363.831934][T27682] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1363.899104][T27682] team0: Port device batadv1 added [ 1363.982366][T13028] IPVS: starting estimator thread 0... [ 1364.074898][T27698] IPVS: using max 29 ests per chain, 69600 per kthread [ 1364.935821][T27758] netlink: 'syz.3.14052': attribute type 8 has an invalid length. [ 1364.974144][T27758] netlink: 'syz.3.14052': attribute type 1 has an invalid length. [ 1365.263444][T27775] __nla_validate_parse: 7 callbacks suppressed [ 1365.263463][T27775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14056'. [ 1365.297968][T27775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14056'. [ 1365.522970][T27790] netlink: 'syz.0.14062': attribute type 1 has an invalid length. [ 1365.531261][T27790] netlink: 'syz.0.14062': attribute type 4 has an invalid length. [ 1365.546314][T27790] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.14062'. [ 1365.773892][T27812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14069'. [ 1365.946433][T27819] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1365.991533][T27824] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14072'. [ 1366.005493][T27825] netlink: 64 bytes leftover after parsing attributes in process `syz.1.14072'. [ 1366.061517][T27833] netlink: 'syz.4.14074': attribute type 1 has an invalid length. [ 1366.085008][T27833] netlink: 256 bytes leftover after parsing attributes in process `syz.4.14074'. [ 1366.249905][T27839] lo speed is unknown, defaulting to 1000 [ 1366.258221][T27839] wg1 speed is unknown, defaulting to 1000 [ 1366.316969][T27844] xt_hashlimit: size too large, truncated to 1048576 [ 1366.374670][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14077'. [ 1366.473303][T27849] bridge_slave_0 (unregistering): left allmulticast mode [ 1366.483432][T27849] bridge_slave_0 (unregistering): left promiscuous mode [ 1366.491891][T27849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.568093][T27860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14081'. [ 1366.577854][T27860] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1366.765185][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 1366.773248][ C0] lec:lec_tx_timeout: lec0 [ 1366.791599][T27864] lo speed is unknown, defaulting to 1000 [ 1366.814216][T27872] gretap2: entered promiscuous mode [ 1366.905423][T27864] wg1 speed is unknown, defaulting to 1000 [ 1366.998897][ T916] block nbd13: Receive control failed (result -32) [ 1367.110126][T27885] IPVS: persistence engine module ip_vs_pe_ not found [ 1367.203513][T27894] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1367.213787][T27892] pim6reg1: entered promiscuous mode [ 1367.223796][T27892] pim6reg1: entered allmulticast mode [ 1367.442939][T27905] netlink: 830 bytes leftover after parsing attributes in process `syz.0.14090'. [ 1367.740150][T27914] syzkaller0: entered promiscuous mode [ 1367.746440][T27914] syzkaller0: entered allmulticast mode [ 1367.979798][T27928] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1368.031257][T27932] sctp: [Deprecated]: syz.4.14095 (pid 27932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1368.031257][T27932] Use struct sctp_sack_info instead [ 1368.142285][T27941] lo speed is unknown, defaulting to 1000 [ 1368.157062][T27941] wg1 speed is unknown, defaulting to 1000 [ 1369.527644][T27987] bond0: Caught tx_queue_len zero misconfig [ 1369.978159][T28013] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1370.330426][T28022] __nla_validate_parse: 6 callbacks suppressed [ 1370.330444][T28022] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14118'. [ 1370.362090][ T916] block nbd14: Receive control failed (result -32) [ 1370.459334][T28039] hsr0: entered promiscuous mode [ 1370.466652][T28039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14122'. [ 1370.476197][T28039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14122'. [ 1370.536868][T28039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14122'. [ 1370.563593][T28039] hsr_slave_0: left promiscuous mode [ 1370.582201][T28039] hsr_slave_1: left promiscuous mode [ 1370.607850][T28039] hsr0 (unregistering): left promiscuous mode [ 1370.643591][T28046] team0 (unregistering): Port device team_slave_0 removed [ 1370.679924][T28046] team0 (unregistering): Port device team_slave_1 removed [ 1370.700711][T28046] team0 (unregistering): Port device syz_tun removed [ 1370.756305][T28046] team0 (unregistering): Port device batadv1 removed [ 1370.758940][T28050] netlink: 'syz.3.14125': attribute type 3 has an invalid length. [ 1370.959938][T28053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14126'. [ 1370.987932][T28053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14126'. [ 1371.586031][T28083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14135'. [ 1371.716019][T28090] netlink: 100 bytes leftover after parsing attributes in process `syz.2.14136'. [ 1371.808642][T28089] lo speed is unknown, defaulting to 1000 [ 1371.828891][T28089] wg1 speed is unknown, defaulting to 1000 [ 1372.348694][T28102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14138'. [ 1372.396274][T28106] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1372.488966][T28112] xt_limit: Overflow, try lower: 271964/0 [ 1372.515983][T28112] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14142'. [ 1372.549105][T28115] lo speed is unknown, defaulting to 1000 [ 1372.582595][T28115] wg1 speed is unknown, defaulting to 1000 [ 1372.856572][T28129] syzkaller1: entered promiscuous mode [ 1372.867369][T28129] syzkaller1: entered allmulticast mode [ 1373.561436][T28171] netlink: 'syz.2.14155': attribute type 2 has an invalid length. [ 1373.585594][T28171] netlink: 'syz.2.14155': attribute type 1 has an invalid length. [ 1373.610304][T28171] netlink: 'syz.2.14155': attribute type 1 has an invalid length. [ 1373.857426][T28179] bond0: entered promiscuous mode [ 1373.862506][T28179] bond_slave_0: entered promiscuous mode [ 1373.875790][T28179] bond_slave_1: entered promiscuous mode [ 1373.889430][T28181] netlink: 'syz.0.14159': attribute type 1 has an invalid length. [ 1373.909721][T28179] bridge0: entered promiscuous mode [ 1373.936826][T28179] batadv0: entered promiscuous mode [ 1373.949690][T28179] debugfs: 'hsr0' already exists in 'hsr' [ 1373.973671][T28179] Cannot create hsr debugfs directory [ 1374.100396][T28192] ip6tnl0: Caught tx_queue_len zero misconfig [ 1374.125513][T28194] netlink: 'syz.2.14167': attribute type 3 has an invalid length. [ 1374.231325][T28199] lo speed is unknown, defaulting to 1000 [ 1374.243014][T28199] wg1 speed is unknown, defaulting to 1000 [ 1374.472229][T28213] lo speed is unknown, defaulting to 1000 [ 1374.487753][T28213] wg1 speed is unknown, defaulting to 1000 [ 1374.758075][T28231] netlink: 'syz.3.14177': attribute type 13 has an invalid length. [ 1374.798739][T28231] gretap0: refused to change device tx_queue_len [ 1374.866126][T28231] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1375.349625][T28267] netlink: 'syz.1.14188': attribute type 1 has an invalid length. [ 1375.383595][T28267] netlink: 'syz.1.14188': attribute type 1 has an invalid length. [ 1375.395432][T28273] netlink: 'syz.4.14189': attribute type 13 has an invalid length. [ 1375.406835][ T916] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1375.414265][ T916] Bluetooth: hci2: command 0x0406 tx timeout [ 1375.584312][T28278] __nla_validate_parse: 12 callbacks suppressed [ 1375.584339][T28278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14184'. [ 1375.709193][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.721255][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.793907][ T36] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.823889][ T36] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.936225][T28301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14192'. [ 1375.950156][T28300] openvswitch: netlink: Unknown key attributes 2 [ 1376.048158][T28300] bond3 (unregistering): Released all slaves [ 1376.189022][T28306] netlink: 5 bytes leftover after parsing attributes in process `syz.2.14196'. [ 1376.246145][T28311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14197'. [ 1376.579693][T28325] syzkaller1: entered promiscuous mode [ 1376.581999][T28330] atomic_op ffff888090056198 conn xmit_atomic 0000000000000000 [ 1376.593218][T28325] syzkaller1: entered allmulticast mode [ 1376.644326][T28302] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1376.653288][T28302] pim6reg1: linktype set to 774 [ 1376.906562][T28344] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1376.967288][T28348] xt_policy: output policy not valid in PREROUTING and INPUT [ 1377.418095][T28380] netlink: 'syz.0.14218': attribute type 39 has an invalid length. [ 1377.622569][T28407] netlink: 'syz.2.14224': attribute type 2 has an invalid length. [ 1377.632417][T28407] netlink: 'syz.2.14224': attribute type 2 has an invalid length. [ 1377.651118][T28407] netlink: 'syz.2.14224': attribute type 2 has an invalid length. [ 1377.675758][T28407] netlink: 'syz.2.14224': attribute type 2 has an invalid length. [ 1377.690514][T28407] netlink: 'syz.2.14224': attribute type 2 has an invalid length. [ 1377.701070][T28411] netlink: 'syz.0.14226': attribute type 10 has an invalid length. [ 1377.710400][T28411] netlink: 'syz.0.14226': attribute type 10 has an invalid length. [ 1377.713411][T28414] netlink: 'syz.3.14223': attribute type 1 has an invalid length. [ 1377.722668][T28411] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1377.824463][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14223'. [ 1377.850089][T28415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14227'. [ 1377.866312][T28414] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1377.896810][T28417] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1377.906222][T28417] bond4: (slave batadv1): making interface the new active one [ 1377.915372][T28417] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 1377.928987][T28403] bond4 (unregistering): (slave batadv1): Releasing active interface [ 1377.963431][T28403] bond4 (unregistering): Released all slaves [ 1378.265511][T28435] lo speed is unknown, defaulting to 1000 [ 1378.277605][T28435] wg1 speed is unknown, defaulting to 1000 [ 1378.543251][T28411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14226'. [ 1378.755749][T28470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14240'. [ 1378.768872][T28471] netlink: 'syz.3.14241': attribute type 1 has an invalid length. [ 1378.780163][T28471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14241'. [ 1378.803560][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14241'. [ 1379.255207][T28495] tipc: Enabled bearer , priority 0 [ 1379.377148][T28495] tipc: Disabling bearer [ 1379.420055][T28515] xt_hashlimit: size too large, truncated to 1048576 [ 1379.511015][T28520] xt_hashlimit: size too large, truncated to 1048576 [ 1379.527348][T28505] x_tables: duplicate entry at hook 1 [ 1379.539168][T28520] xt_hashlimit: max too large, truncated to 1048576 [ 1379.602737][T28527] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1379.963410][T28551] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1379.980338][T28549] tipc: Enabled bearer , priority 0 [ 1380.018830][T28542] tipc: Resetting bearer [ 1380.073639][T28541] tipc: Disabling bearer [ 1380.516936][T28587] batman_adv: batadv0: Adding interface: dummy0 [ 1380.523507][T28587] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1380.573089][T28587] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1380.593442][T28593] tipc: Enabled bearer , priority 0 [ 1380.600846][T28593] syzkaller0: entered promiscuous mode [ 1380.608228][T28593] syzkaller0: entered allmulticast mode [ 1380.694532][T28593] __nla_validate_parse: 10 callbacks suppressed [ 1380.694550][T28593] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14268'. [ 1380.697242][T28597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14269'. [ 1380.836493][T28606] netlink: 2 bytes leftover after parsing attributes in process `syz.1.14272'. [ 1380.851589][T28592] tipc: Resetting bearer [ 1380.870650][T28592] tipc: Disabling bearer [ 1380.882213][T28606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.143971][T28625] netlink: 9 bytes leftover after parsing attributes in process `syz.1.14277'. [ 1381.176822][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14278'. [ 1381.203204][T28629] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1384.109045][T28648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14282'. [ 1384.148236][T28649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1384.157608][T28654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14284'. [ 1384.167628][T28649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1384.177142][T28635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1384.192610][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14284'. [ 1384.215693][T28658] validate_nla: 6 callbacks suppressed [ 1384.215711][T28658] netlink: 'syz.3.14282': attribute type 1 has an invalid length. [ 1384.235814][T28658] netlink: 248 bytes leftover after parsing attributes in process `syz.3.14282'. [ 1384.412634][T28667] [ 1384.414999][T28667] ====================================================== [ 1384.422012][T28667] WARNING: possible circular locking dependency detected [ 1384.429042][T28667] syzkaller #0 Not tainted [ 1384.433457][T28667] ------------------------------------------------------ [ 1384.440470][T28667] syz.1.14285/28667 is trying to acquire lock: [ 1384.446616][T28667] ffffffff8fb28318 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90 [ 1384.455771][T28667] [ 1384.455771][T28667] but task is already holding lock: [ 1384.463137][T28667] ffff88814c5ffd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1384.472381][T28667] [ 1384.472381][T28667] which lock already depends on the new lock. [ 1384.472381][T28667] [ 1384.482781][T28667] [ 1384.482781][T28667] the existing dependency chain (in reverse order) is: [ 1384.491791][T28667] [ 1384.491791][T28667] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1384.499790][T28667] _raw_spin_lock_bh+0x36/0x50 [ 1384.505057][T28667] nr_rt_device_down+0x153/0x860 [ 1384.510498][T28667] nr_device_event+0x137/0x150 [ 1384.515775][T28667] notifier_call_chain+0x19d/0x3a0 [ 1384.518741][T28665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14288'. [ 1384.521405][T28667] __dev_notify_flags+0x16d/0x310 [ 1384.535868][T28667] netif_change_flags+0xe8/0x1a0 [ 1384.541334][T28667] dev_change_flags+0x130/0x260 [ 1384.546710][T28667] dev_ioctl+0x7b4/0x1150 [ 1384.551563][T28667] sock_do_ioctl+0x23e/0x320 [ 1384.556673][T28667] sock_ioctl+0x5c6/0x7f0 [ 1384.561526][T28667] __se_sys_ioctl+0xfc/0x170 [ 1384.566646][T28667] do_syscall_64+0xe2/0xf80 [ 1384.571685][T28667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.578100][T28667] [ 1384.578100][T28667] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1384.585926][T28667] _raw_spin_lock_bh+0x36/0x50 [ 1384.591217][T28667] nr_rt_device_down+0xbe/0x860 [ 1384.596598][T28667] nr_device_event+0x137/0x150 [ 1384.601885][T28667] notifier_call_chain+0x19d/0x3a0 [ 1384.607518][T28667] __dev_notify_flags+0x16d/0x310 [ 1384.613067][T28667] netif_change_flags+0xe8/0x1a0 [ 1384.618531][T28667] dev_change_flags+0x130/0x260 [ 1384.623908][T28667] dev_ioctl+0x7b4/0x1150 [ 1384.628761][T28667] sock_do_ioctl+0x23e/0x320 [ 1384.633873][T28667] sock_ioctl+0x5c6/0x7f0 [ 1384.638735][T28667] __se_sys_ioctl+0xfc/0x170 [ 1384.643854][T28667] do_syscall_64+0xe2/0xf80 [ 1384.648888][T28667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.655298][T28667] [ 1384.655298][T28667] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1384.663211][T28667] __lock_acquire+0x15a5/0x2cf0 [ 1384.668594][T28667] lock_acquire+0x106/0x330 [ 1384.673617][T28667] _raw_spin_lock_bh+0x36/0x50 [ 1384.678897][T28667] nr_rt_ioctl+0x40c/0xf90 [ 1384.683828][T28667] sock_do_ioctl+0x101/0x320 [ 1384.688925][T28667] sock_ioctl+0x5c6/0x7f0 [ 1384.693757][T28667] __se_sys_ioctl+0xfc/0x170 [ 1384.698855][T28667] do_syscall_64+0xe2/0xf80 [ 1384.703867][T28667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.710267][T28667] [ 1384.710267][T28667] other info that might help us debug this: [ 1384.710267][T28667] [ 1384.720477][T28667] Chain exists of: [ 1384.720477][T28667] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1384.720477][T28667] [ 1384.734289][T28667] Possible unsafe locking scenario: [ 1384.734289][T28667] [ 1384.741721][T28667] CPU0 CPU1 [ 1384.747066][T28667] ---- ---- [ 1384.752413][T28667] lock(&nr_node->node_lock); [ 1384.757163][T28667] lock(nr_node_list_lock); [ 1384.764258][T28667] lock(&nr_node->node_lock); [ 1384.771526][T28667] lock(nr_neigh_list_lock); [ 1384.776191][T28667] [ 1384.776191][T28667] *** DEADLOCK *** [ 1384.776191][T28667] [ 1384.784317][T28667] 2 locks held by syz.1.14285/28667: [ 1384.789578][T28667] #0: ffffffff8fb28378 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90 [ 1384.799059][T28667] #1: ffff88814c5ffd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90 [ 1384.808711][T28667] [ 1384.808711][T28667] stack backtrace: [ 1384.814582][T28667] CPU: 1 UID: 0 PID: 28667 Comm: syz.1.14285 Not tainted syzkaller #0 PREEMPT(full) [ 1384.814601][T28667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1384.814612][T28667] Call Trace: [ 1384.814620][T28667] [ 1384.814627][T28667] dump_stack_lvl+0xe8/0x150 [ 1384.814649][T28667] print_circular_bug+0x2e1/0x300 [ 1384.814668][T28667] check_noncircular+0x12e/0x150 [ 1384.814687][T28667] __lock_acquire+0x15a5/0x2cf0 [ 1384.814719][T28667] ? nr_rt_ioctl+0x40c/0xf90 [ 1384.814740][T28667] lock_acquire+0x106/0x330 [ 1384.814763][T28667] ? nr_rt_ioctl+0x40c/0xf90 [ 1384.814788][T28667] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1384.814810][T28667] ? nr_rt_ioctl+0x40c/0xf90 [ 1384.814833][T28667] _raw_spin_lock_bh+0x36/0x50 [ 1384.814854][T28667] ? nr_rt_ioctl+0x40c/0xf90 [ 1384.814877][T28667] nr_rt_ioctl+0x40c/0xf90 [ 1384.814904][T28667] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1384.814930][T28667] ? apparmor_capable+0x137/0x1a0 [ 1384.814956][T28667] ? capable+0x88/0xe0 [ 1384.814970][T28667] ? nr_ioctl+0x1b1/0x3b0 [ 1384.814991][T28667] sock_do_ioctl+0x101/0x320 [ 1384.815008][T28667] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1384.815023][T28667] ? do_futex+0x395/0x420 [ 1384.815050][T28667] sock_ioctl+0x5c6/0x7f0 [ 1384.815066][T28667] ? __pfx_sock_ioctl+0x10/0x10 [ 1384.815081][T28667] ? __fget_files+0x2a/0x420 [ 1384.815099][T28667] ? __fget_files+0x3a0/0x420 [ 1384.815115][T28667] ? __fget_files+0x2a/0x420 [ 1384.815133][T28667] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1384.815152][T28667] ? __pfx_sock_ioctl+0x10/0x10 [ 1384.815167][T28667] __se_sys_ioctl+0xfc/0x170 [ 1384.815190][T28667] do_syscall_64+0xe2/0xf80 [ 1384.815211][T28667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.815227][T28667] ? trace_irq_disable+0x37/0x100 [ 1384.815243][T28667] ? clear_bhb_loop+0x60/0xb0 [ 1384.815260][T28667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.815277][T28667] RIP: 0033:0x7f66d699aeb9 [ 1384.815292][T28667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.815306][T28667] RSP: 002b:00007f66d77f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.815323][T28667] RAX: ffffffffffffffda RBX: 00007f66d6c15fa0 RCX: 00007f66d699aeb9 [ 1384.815336][T28667] RDX: 0000200000000100 RSI: 00000000000089e2 RDI: 000000000000000a [ 1384.815347][T28667] RBP: 00007f66d6a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1384.815358][T28667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.815368][T28667] R13: 00007f66d6c16038 R14: 00007f66d6c15fa0 R15: 00007ffd2df03f08 [ 1384.815387][T28667] [ 1384.833647][T28670] veth0: entered promiscuous mode [ 1385.182474][T28660] veth0: left promiscuous mode [ 1390.961950][T10572] lec:lec_start_xmit: lec0:No lecd attached