last executing test programs: 3m38.615028443s ago: executing program 3 (id=3763): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5f02ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000025c0)=""/4085, 0xff5}], 0x1}, 0x10000) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000035c0)=@newtaction={0xf40, 0x30, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{0x654, 0x1, [@m_ipt={0x84, 0x0, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6411}]}, {0x2f, 0x6, "30ed3f3c73115e5bdc77432c5c4f2110f884f94f439eff4551183f9cc4367bd0b57f3136978f33161296a9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x430, 0x16, 0x0, 0x0, {{0x8}, {0x328, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xea, 0x6, {0x6, 'nat\x00', 0xf, 0x401, "f70fd147c87ba9e696d531664d6f21ffe957b00bb049575c0f409a2e8810fd27116ac007703a22d145c75deb06f02ab6fc5c4b1f62f9a24f60aa34a5484a9511d0ed4ebdb244029d302cc4f37e5d7835088cc0cf6d29b1ad487f6487d6090a7b065e8aaaed0b2ebe53a056b5ac2974d9500dd81512f6998977cb7fbc392aa8113396adc3c6ea1901f8f365749640fb7ff8f1c7033c192fa93aa744af0d50e6cd7745cd134af85860854bc1b5f345a3ae7abdf9de45acd0f5d4f195713ab2e6fd"}}, @TCA_IPT_TARG={0xf6, 0x6, {0x38, 'security\x00', 0x40, 0x7, "748f1a0ee7427f470ca03547d65e9a5c047ba1b4e266a5f8a0c96b8d30101303bdce2a20aa4c853b77ae3ac76dc0aac42dfc45ab29df8560426ce524c0e28c706b551db3a77ab73cef04d176c3346a1c838dfc7fd6a29a6e580389adec63bf5c32c9cac1ad2fa5f06f07149be8e398747204e0dc6a3cd77eac236697caccfc914ccc3739f740831c66af39bdb39f60eb4e0c1aa443da4a8409ac8ced96e244d327bc143a0866bc86e4d7455434dec5264d347d0c19feace80a24b0436ff60dcb1519d340a1996d642c36868f"}}, @TCA_IPT_TARG={0x104, 0x6, {0x5, 'nat\x00', 0x5, 0x4, "26016341aaf87b404b53bd4da54311ddc8a29273c790e6f5a86a2cd00378f220781086476f441396584c4faace76e0940d26dea2497a8c4e6b633eb68d5cfe76c8c58f9f8c7664194accabd33fdfcedeff065a7d69c33ab50614aed3787f2834da55d6e31be87028a2a6162c0589feb33e0b5fd87949fda42bf68d72efa1645c6f0c00a8faf727d45e3d71fbb1bbdc38b76480589398de831e047d546361cf8bdc7cb175505c80da9775bbf4ad5f4676e22822fe9d8767618205be5f446dfdf7bdfb8ea6482d53d87195746c935dd1041619ef1a0041f8907283"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9b1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xe1, 0x6, "c6beff12a26cb8f655fcbcc4bccf752fbaf7edc666b2b6623e78dc6d987aa2baf65721f0199c619662b839ab673f6d112f00ba8e07dc01da94c9630c217003ecbb06840e16513d17ad0b90103d47ce225156cb731be2a90bc9d75556d74d1051557fbb08c8c489a5b2858c9fd3d3f7f0efa47520b38c54388e5aedacbe205114ff5e95a69f4b8321f72b41cb28ce256ebfbcc844b0cb2cd4484d3bc161ebadb58a609d207527a8fe2cc2cedff5868fa002df1d19fbcd3f44c1240c93b8d8c25c9f30e2e01d045ae0b58febb6e23846d5a5183ea35187d7352379d71a7a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x19c, 0x1b, 0x0, 0x0, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf2, 0x6, {0x6, 'nat\x00', 0x3, 0x1, "ea1a73954271d0133fa3f920bdb095548fdcc25d13a8d5f1e1b5cb407d60f99bbd7a2b2dada3982c8d45498ad72f213a43448d5573e83b4cd7cda9bf1a1707087aef060d4277cbf37734dc09b17b583b8fba4ad1c0075b86112fe8c46354426647be80d59a1d8be05d57b0817a65bd4567c05812f5eef3eff55197d8c04ff106706fe94c0a34a8ef82b93147c40486f18b392bef7ae7ed20fbe8defaa0cee65004f8643c95232ea9a0b8c4e958e7e88fbcde451058848633306069b4432ac24210c01ea3bc6a9ade"}}]}, {0x7e, 0x6, "f2f205a5bf25ffa270cfdd362fd591b7387648a6b305ed7dcefb3edad32b1fa48fb831543ac358fbd6cdee83b1d66e6876d1023c69c42137b1eae3a8ec1aa3a06f3347c66eb3064480d300ca24d3ca846f8f1ebbee862b1514466cf9c192e7f205e0ce90c16b5c909ffb3cfd84832b63180a038d671555f4432d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x7e8, 0x1, [@m_ipt={0x2c4, 0x12, 0x0, 0x0, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xa9, 0x6, {0x4, 'nat\x00', 0x4, 0x2, "6cf8e8b0d07ce7e86d36c6b3421412493733d4307d52a3c6344da7a19c91ac16255b20583b5665c0aed22cc2901f4b6d8b04e1012fe8133457c7b3dc8b5cda3a940eb43e1cea41e0ba4cf86cd463bbc266659bafed1e0f88a0292566d9ca1ef85bb3ad3436bf04a4ee01c3f21f8ebc9bb3ac50c6d940f973014c7b1edd372f"}}, @TCA_IPT_TARG={0xc9, 0x6, {0x3, 'raw\x00', 0x1, 0x6, "d196abcb2964a5bc69254fd66a690c9f85d7b8e3251496cb8572e7b565816966522aa4a46ddefccd86d3047cf843afd71905bf783ac55d5817fdb063773fef0612af30cf082b8b1a8d86d8554302f6d7e1518db279ee53c9bda6ae72d1bedcdae99bc0c837f7e9290ed992b18d17535c6ffafbce31c9a9e7c55becff4bfb71726857991d871b905cb880e489d816cf29be0d5b6ccd8ab35549907f97327afc"}}]}, {0xf2, 0x6, "5873e4867a7832551ac0c0463f4198bb8bf713453fa004fcd61f745dbfa6ab7a9846bf435c3a02e9e1578db592de35874299f4430ff9f38a13ec247cdc7209916cd0bf30f962e7bb583c08f82d7bbdcbfd22480d61e805b0337231e12a7b09ca1819e54d960f42b1370f05dd723add6be93c3c261afb3e33910e15f573d2ac40acdfcbdfe176f8695b6b32f83465d83a8c6c820f01007c6f12ef24084ce04f1a519b44c716e74e276c3f479623a4b2550d70433391cd8df8f0cc6764f873539110e6318ecfe29b538d53605bfc2cd9f177e3fffaa73e29ed148d93c1d8f03c09daed68b814e84992319c2a1c4ddd"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ipt={0x148, 0x1c, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xfa, 0x6, "3968c5e01f9ff1be0cfde486eff144a813e1414b88d355a57135bd12d5e0585913822fe43686ef251e4eab6b277be29c20dcbd2f60df7c67eeec9d596cf10c61d3847fd9aea5e79b7d1365728f1b220b3655c384ed49085976a74de6fc23edfbda0690501607441357f2e1c644d4fa18c1ad049eff599b7d2aa4b9224472f2a86625b6ab49b93e44cb78cef1dd374ef5c1b716bc8967ee247deef802eb13c088496ebf33bf199dfada2c7ec8844a890d0a1e1683cee6f3514b01a5b7f704c8db29a6774ae87cf3eaee00071a4d0bfb9d4d9521d89ecb3054d850a4e0ccfa257968c8c069305b556c1e4b49b8f9514130b8daf3d1ca69"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0xd0, 0xd, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x9e, 0x6, "f4cb6d41aee30c68ccbf64ceb96a2193aec527a0686b8b7950a1b6db58afbd09ad5d9fab33a41c5e7c921fed45ec975333dacf4fc1ce85cf9b82c749830b4257ffdb9b8f0122831da085932500379d6ade0643214603a92e7dc3cff9bb833882e1c21a71eeaf746348feb8aaa244f5ffea00d308b257bfd9d0fc091f7630d6b5fdfee05e4d9df433abfc59da15dc2d6b3a93bdf81d364db6fee1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x128, 0x1e, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xd4, 0x6, "7248c77d364247457493ad3c787a3d4b913b6af57a0f96d9e107347f611c90586dea27931bc89fd39a3a20d4db079493afa6bf193884c3be4e006087fb48017bbd769ea5fcb3f398eeebe7ea4dc72a5ac2a16d0ce13e9b3210ac52e97cda23cb14f7d5afc71b24551deff541006ad4bcf3e814a5b202d70c834b1e8649d5068125bd67e0675ddea34c60a970d5db4db427d2c134f33df6a39f461f585a717a1bf613e9ad825ebe451278ecd8239bfa21cd5928a48483c1039eed6cce0f327f68b710dee35155fe3bff2c869075c9b14b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x1e0, 0x7, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x62, 0x6, {0xf3c4, 'mangle\x00', 0xd, 0x2, "5f81ae4493c749472e88001652ad610936df852342e98b7ee753ef5484f9fa2807586b1e9300e5d4df5e990d0a4e2d8ef60fe28e70be1d6a"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4a2409809c2a56b9}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x101, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xf0, 0x1, [@m_ipt={0xec, 0xb, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x98, 0x6, "23a203a5e3e56b7a478d3d9b54d8d05e4cb86d903b755a4dae0055c1b27460d36d5b43f7bf60bbaeabbb2b7238958f471b169a33235cd4acb4979b5e169c216a3fb87158a1f23ae4c0eb0bf5fa873b72056db84e76347eb94c44bde9fe76d1e5921078523097d3816494f633757af1a0b48fa2c09fe4f9a0c9e04ca6f7bf9edbb0f6af6aefd01c088cc5a8cba7012f88dfa47343"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xf40}, 0x1, 0x0, 0x0, 0x90}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x7ff, @empty, 0x7}], 0x38) r1 = socket(0x840000000002, 0x3, 0xff) shutdown(r1, 0x1) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_int(r1, 0x0, 0x16, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}], 0x1}, 0xf5ffffff}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="61106f000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0x400000, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8050) 3m38.496359837s ago: executing program 3 (id=3766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000800000003125ce882cbf490d908f1523f001400000000", 0x2e}, {&(0x7f0000000640)="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", 0x320}, {&(0x7f0000002680)="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", 0xb17}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15829d9d419713d523ff60e494f69a880b0888b6b023dc9b5f6a05f99fe7cf5d148c5b", 0xd6}, {&(0x7f0000000980)="281a9d23fdff85a6f28bf48173b0e3b782453b0ad70cf48abf0b0ab0071d3c3d7b736f8f27fe30efd1bbe7b703e34502c0da00f7dee9782d8c52f31b1f69a6ebc9ade94566ea5d541e4e11a1c42a24ab80d01f836864e5ccf2b525074fe96a2c62ce224fee666f0f8d6ed490152373b15d394974fe3925f81e59194dc94dce66bf2cc8f4b2029aa530aa6e0bfae783c3ae787158726c450f9ac7ade3b2d2687a097200e4b25fe2bfe5a319a550b94b10d8dbd47286e42b64b97d3857ebc356e1", 0xc0}], 0x5}, 0x4005) 3m38.28899712s ago: executing program 3 (id=3771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000054000000020a01020000000000000000010000000900030073797a320000000028000c80080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000f9db00000900010073797a31"], 0xe8}}, 0x40) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003080)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3m38.026610128s ago: executing program 3 (id=3772): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418000000120800040043000000a80016000a0001400600d4c140e99d5a57dfcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8004cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed92d2f52eb233dcb9ef3d93452a", 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 3m37.855627296s ago: executing program 3 (id=3773): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000006060500000000000000000000000007050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 3m37.67462502s ago: executing program 3 (id=3776): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) 3m21.83205143s ago: executing program 32 (id=3776): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) 2m33.994481662s ago: executing program 4 (id=4793): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @rand_addr=0x64010102, 0x0, "028a3f6e588c74e6d8451697efe42811970548fc3c7b00000100000000a07242", 0xb3, 0x2, 0x9, 0x40000006}, 0x3c) 2m33.95731862s ago: executing program 4 (id=4795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000800000003125ce882cbf490d908f1523f001100000000", 0x2e}, {&(0x7f0000000640)="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", 0x320}, {&(0x7f0000002680)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc302fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355ea32dfc72e59254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656c22b8a5597c3c50cbf4efa9c8d2e4200ccab35ad8badc09d8e05a7abc3dfdce491ecd682dde18f2da41bff3c2e293ddc82df8a1ca558a08b7937bd7228ed25522f41bcdfba8c01a7aa93af6e58b3912dace81ffc5f079e8a4e9d45778afa57909a8e9138abbf4ae6bdbc571d8cc0fb68755b644934fc98fdb263098afab3ffed8e80ea4e935852d9577935c0a5b03425e5e1c3327213d0068dea19165602000000076fe3ad291b73f08e5bf3cb50f60510b85f09bec5dd2118eee65909ef08bbad2e38ef2fa7d6c0bbb2fbf90e1a63b26c8e41f17b35b1e55885ac66f263d0f42a27a7823d664e3ae65909dd411f05371f21e5bbf7424d41b966e2e8891ae13c3fb700987789f79cca95807ab3068549f250caee6ab7f924afec4b6c821f82f3683d42fde5ccbfafba73c720f8481a7e4d2315e2219f4925893268649dddf696586916bb8c02a3697c38016788d4c799cbbc52043d0ebd08d74efb4619a46db86c744928a580f53ae2d5bbbc69342f722ab65b305975ab500ce7335ceb7d0f726c83a2c47eccf416fdb79f8439d2c608019ea2ef94d1fe8a7367013ae57330165228509d62fab87f04b73a76f80049f23d11a3068721414f8e45b18f4c1d56c11da71c949b35e6c5305452057f947520abbaf701c9b7cbfe623adc65a050458cb5948d1c1699b452b3d9fbba6b3bcdb537bbbf95d8267760cd943de819349966dc515babfca73d5ff3551bc56fe0f9dedb6dd5f4463a3aa652dab81a589ca4e4b0f19ee3b4b20c3986df2f72ba990b421c77b00a9b5cca5d850d607d0a46c2f1b1bbf8dc7f0cc6fea3104615a6cd698d89fca37adf4edfe4ba7c16231a9f2a89c55612e9c7031b7d56d2eb88745ba43a63a122d4d6661e83408a807f9b4519c05f01383811e9a2506c0c23618528599152f7a0481d1e576e4eba29c7725f24f649be7e5d7b9678a91e22d559ee77a1ddfe7225afa40085061c492fc4714f90e481cf494ec6d108fe0be6633d4f4785cb1c82f15190333398283ade4cb97f8104a195098a5a1c90227797fa8216d4762b6e78c60030e69f413cccf052df64a3d1bda69f6dbff49a68ef298809390f39a91e3b5b1971dac8554ed9ae24b4789ba60c145c059b1cfbf6594ed3c734bb4e1172f2e31a18659764bf324621d68b8e356ac3faee71ea97b0b78eeaa29c0f7ee1129777ef1ecd4d7f6586f8d0308709a94489951a04d7eba9793af6c929a0e91cda90457ca1c128cb6aa23f6da8f64f0d78a59f07a19515d9f607aa79c7b6c466e474e45ad85b0f2b82d470c03f7bbfb2fa68b32d4ac188d4a64f22b29c3af9f0b39bc2bb6b399e50f71968effe5b2f0d51489aca30993a67dbd80698f9a0c2ba9addffa3c3712215e63f424ebb5ebaf24fbf476f1d85493050c8be181f7f8783a344849e5b58a7038979d2dff546eac853be1529fbe865a3f97643e8522956e0e361ac278e014328aea0b8d4268fd157513bd0f64f589ff8aaa0df2eb929984661031626bc661a5d3035b373177a4703a5000ef9b3ccb84b3dbaecb25ca341c5f12959d214e84b6545f47704d635765b336e4374975c2c40d5814b68b02965e517197edb553e7d3d8432544f66ce84990e7873fa2fadfaaeaa9915f907b3396b8529b03b646cf29be65784b5c08aa77521dd5064669f5ab33cc8ea168ea80949af9ee3937b2aa54250bd733c51c7c4be47c5848abf86b6f522e2a2dd4aa39693af731d70314e1d7af25c57a2dd126121bcd316118c66c18e2109a0c87714f00deaef07648e75f498eb7a8f30784376d14121a1ff34d402c5255fd2c0569624e93a796eb92980ee82ed283bb538e20dd8b02db072f897004f0e11de081cab5bedd9438c612982f1c73388ed98ae3b2d3adc6b8e70434c8992f52ab7c9488da5b67c6c003fdf530ef4172e0ccc16ff75fe6c919619c7ae513a8fcdfdb01410df94978f88b44e60b17a1984a600e04bd072fa731e19f75034d78b57f9", 0xb17}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15829d9d419713d523ff60e494f69a880b0888b6b023dc9b5f6a05f99fe7cf5d148c5b", 0xd6}, {&(0x7f0000000980)="281a9d23fdff85a6f28bf48173b0e3b782453b0ad70cf48abf0b0ab0071d3c3d7b736f8f27fe30efd1bbe7b703e34502c0da00f7dee9782d8c52f31b1f69a6ebc9ade94566ea5d541e4e11a1c42a24ab80d01f836864e5ccf2b525074fe96a2c62ce224fee666f0f8d6ed490152373b15d394974fe3925f81e59194dc94dce66bf2cc8f4b2029aa530aa6e0bfae783c3ae787158726c450f9ac7ade3b2d2687a097200e4b25fe2bfe5a319a550b94b10d8dbd47286e42b64b97d3857ebc356e1", 0xc0}], 0x5}, 0x4005) 2m33.741295653s ago: executing program 4 (id=4800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d000137440000000000487007"], 0x14}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x99, 0x6}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x3}}, 0xffffffff, 0x4, 0x8502, 0xfffffc01, 0x18, 0x4, 0x8}, 0x9c) 2m33.664143945s ago: executing program 4 (id=4803): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 2m33.587956159s ago: executing program 4 (id=4806): pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001300), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000400)=""/4083, 0xff3}], 0x2}, 0x8}], 0x4, 0x180, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'vlan1\x00', {0xe}, 0xc3c}) 2m33.515362043s ago: executing program 4 (id=4808): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) close(r4) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1840}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x27f}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r12 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="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", 0x142}, {&(0x7f0000000180)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56319ff90032d5b900000000c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa00000000000000", 0x55}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000840)="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", 0x15c}, {&(0x7f0000000280)="1b1eb47967b8c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c10900000000000000169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf5230d77cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4aabeb6fd575b631eedf691f55e7f6d2c2a8b3e08520a96eb0aa5db49afc24b7a78cf11373b0000", 0xca}], 0x5, 0x0, 0x0, 0x4}], 0x1, 0x4014) recvmmsg(r12, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) write(r13, &(0x7f0000000300)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24) 2m18.472576749s ago: executing program 33 (id=4808): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200480c9}, 0x20048000) close(r4) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1840}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x27f}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r12 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r12, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="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", 0x142}, {&(0x7f0000000180)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56319ff90032d5b900000000c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa00000000000000", 0x55}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000840)="000000000100000058473cabd427d746ca7d9bbf4f24ec7659b1c254940281f0a248dfc8c103fad1369a53e340d110b77170735064ceae5fcf381d21cc8960440e0a459705262c4c53065f369fe8e63b46a53009cec75dd608e2e86ff9b9c7650112b91fdcca8616f6013241ceff93fd8cdab5a479b9614318eedd5a609b633b114f0030c80bc3b7fe6320e9f2e5a824c14aa3cccac383bacd0a126a9675ad5c41c171807570ac0501332c2794950f4633a074325e58cd43cf8340513dbc10eaaf4ff3c4b8d98621267d8b1abdbf01d7de9a86c2d4373dd907da5ae1d44537fb96b50a65e0dd0ab100020000000000004c8f4e350b487c88a5fababc1cd73038625a27280000005c5610ba38f13d9f3b2605404c5137fc4a61d3fc2b061cd0820e0ce9489901d6854860a57b2f0cf41d58b8182bb215f5a5909782e2c0c18d78f7f0b8824f57a970d361d041f859641cb7e287c1c31307b48ff5f69f", 0x15c}, {&(0x7f0000000280)="1b1eb47967b8c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c10900000000000000169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf5230d77cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4aabeb6fd575b631eedf691f55e7f6d2c2a8b3e08520a96eb0aa5db49afc24b7a78cf11373b0000", 0xca}], 0x5, 0x0, 0x0, 0x4}], 0x1, 0x4014) recvmmsg(r12, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) write(r13, &(0x7f0000000300)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24) 2.157020802s ago: executing program 5 (id=6791): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x69a}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={r0, 0x5}, &(0x7f00000000c0)=0x8) r2 = socket(0xb, 0x80000, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000100)={r0, 0x5e, "7ec9b0e006353c6735485ee9d906239ead7c3e3d1db77434fb8cd54d2dc75f034495272a3841589abce3e83bb8636fc27d192ea1790b82e9dc5f10dff867c114778b304f602eb2048c025134f2d56e39ff6af5cad08dd379830553096f42"}, &(0x7f0000000180)=0x66) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={r0, @in6={{0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, [0x3, 0x8000000000000001, 0xfffffffffffffffb, 0x40, 0x1, 0x2, 0xff, 0x10000, 0x5, 0x5df18408, 0x4, 0x2, 0xc753, 0xad07, 0x56]}, &(0x7f0000000340)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380)={r0, 0x1}, 0x8) (async) r5 = socket(0x26, 0x5, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x80}, 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000400)={r0, 0x4}, &(0x7f0000000440)=0x8) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000480)={r3, 0x1, 0x10}, 0xc) (async) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000540), &(0x7f0000000580)=0xe) (async) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000005c0)=0x5, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000600)=0x6, 0x4) r8 = socket$inet(0x2, 0x5, 0xd) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f0000000640)=""/112, &(0x7f00000006c0)=0x70) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000700)={r4, 0x7, 0x30, 0x5, 0x3}, &(0x7f0000000740)=0x18) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r5) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd0, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040080}, 0x4800) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000980)={r4, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) (async) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r11, 0x0, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000b00)={0x5, &(0x7f0000000ac0)=[{0x10, 0xd, 0x83}, {0xd5a, 0x8, 0xff, 0x2}, {0x4, 0x6, 0x6, 0x9}, {0x18, 0x71, 0x4, 0xa}, {0x4, 0xc, 0xfa, 0x6}]}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000c40)={r2, &(0x7f0000000b40)='IPVS\x00', 0xca241, &(0x7f0000000b80)={@_ha_fsid={[0xb2d, 0xfffffffc]}, {0x1, 0x4, 0x6, 0x4}}, 0x2, &(0x7f0000000bc0)={@_ha_fsid}, &(0x7f0000000c00)=0x3}) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000c80)={r1, 0x5}, 0x8) 1.925360213s ago: executing program 5 (id=6794): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newneigh={0x2e, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd4}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004854}, 0x40) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x44050) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x40000000000000ab, 0x80}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f00000005c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdc01}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r14, @ANYBLOB="24005a802000008014000387ff0c2b0008000800010000010000000004000200040001"], 0x40}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x10, @val=@netfilter={0x0, 0x0, 0x8, 0x1}}, 0x20) write$tun(r4, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x64, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "42778569ee7ac246c18ba44917e8c94daaac1927983807efd339e5da070c4ce9", "679d165ec13567e8e3a7118dab629644", {"01197cd2fb78f4e0fd39cfecd9700cfe", "65809814935f08703e677d8e3026bd8e"}}}}}}}}}, 0x9e) 1.605596939s ago: executing program 5 (id=6802): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r3) sendmsg$alg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4008080) recvfrom$inet(r3, &(0x7f0000000100)=""/252, 0xfc, 0x1, 0x0, 0x0) getsockopt(r3, 0x8, 0x4, &(0x7f0000000900)=""/4096, &(0x7f00000000c0)=0x1000) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r9, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r9, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x65}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000894) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x4c, r7, 0xc4fc9e906872338b, 0x70bd26, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xfffffffffffffe2a, 0x2, [{0x5}, {0x7, 0x10}, {0x5, 0x8}, {0x3, 0xc}, {0x5, 0x7}]}]}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r10, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20048041}, 0x44080) 1.449541607s ago: executing program 0 (id=6804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) r3 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r3, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0xe, 0x0, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff03, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdb2a3f44a1403edf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002bfd8e0000000000"], 0x3c}}, 0x800) 1.422386425s ago: executing program 1 (id=6806): syz_emit_ethernet(0xd2, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "8742fe4687d86e5da82e41ef2302058dc3b5674f7389ec494011ccec4f7d012c", "f2760709a418c2d54dfc3bcd6b0dc0f026e4dbbd0fc37c4cf9e05eebedd14ed77e5af90f021be4d1922cd5279600538f", "9cd204eeecae9a729ee1662af2f006faf435c215365df6e6c5db8235", {"aeb6eb691496126a2d28d73f1a738b14", "fc81aa717bf9ce692ed96249827491df"}}}}}}}}, 0x0) (async, rerun: 64) r0 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r2, 0x0) (async, rerun: 64) write$tun(r2, &(0x7f0000000240)={@void, @val={0x2, 0x1, 0x6, 0xd, 0x0, 0x6}, @mpls={[{0x4, 0x0, 0x1}, {0x4}, {0x101}, {0xd, 0x0, 0x1}, {0xd67, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x6}, {0x6}], @ipv6=@icmpv6={0xf, 0x6, "1d2354", 0xcd, 0x3a, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@fragment={0x73, 0x0, 0x34, 0x0, 0x0, 0x2, 0x66}, @routing={0x32, 0x8, 0x0, 0x40, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}, @fragment={0x87, 0x0, 0x7, 0x0, 0x0, 0x0, 0x67}, @fragment={0x10d, 0x0, 0x4, 0x0, 0x0, 0x8, 0x66}, @srh={0x3c, 0xa, 0x4, 0x5, 0x4, 0x4, 0x800, [@remote, @rand_addr=' \x01\x00', @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}], @ni={0x8b, 0x0, 0x0, 0x3, 0x8000, 0xc, "dd7bf6b9b4"}}}}}, 0x11f) (async, rerun: 64) r3 = accept4$packet(r1, 0x0, &(0x7f0000000100), 0x800) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x6}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x48}}, 0x0) (async, rerun: 32) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) (async, rerun: 32) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r5, 0x4) 1.361372149s ago: executing program 0 (id=6807): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x18, 0x5, 0x0) (async) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000300)={r1}) (async) r3 = socket$igmp6(0xa, 0x3, 0x3a) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x8001, @remote, 0x4}}, 0x7ff, 0xfff9, 0x8, 0x9, 0xae, 0x3, 0x6}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xcba8}}, 0x291, 0x40}, &(0x7f00000002c0)=0x90) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "e1a4df85181bfbc4c1e30aea57856a20f95d4816d6d1909e36294d4a26e48196", "a94afd3c6761d8c189ba4416c20619af33da236f32d8105fc4e83a55b1ae83a7", "242ccef40f8952455782629808ab8ff69bb175ff5218c700", "84cd7ab832dd393ed9251dd2bba1c90b16802468174a3c4fd13e05a54af5d9be", "81c4839450d41c9be76ff19b07440169751edb23b7fa5b57ffa540780d73a3c7", "5565cecf39917b652fce7f75", 0x50, 0x8, 0x6, 0xccae, 0x1}}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)={0x158, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xec5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f93}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x523}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x81}, 0xc044000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014e6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000680)=r7, 0x4) (async) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r10, 0x113, 0x1, &(0x7f0000000100)=0x4f, 0x4) (async) sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_sfeatures}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x1852, r0, 0xffffe000) 1.273323277s ago: executing program 1 (id=6809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c0001"], 0x98}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x804) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c000000000000000000000014"], 0x114}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@ipv4_newrule={0x54, 0x20, 0x9, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x20, 0xa5, 0x4, 0x0, 0x0, 0x5, 0x1c}, [@FRA_FLOW={0x8, 0xb, 0x6}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xffffffffffffffff}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xbf7a}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) 1.265401912s ago: executing program 0 (id=6810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202dfff9ecf937a"], 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x8814) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000000)=0x44) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000200)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, 0x9, 0x3, @default, @val={0x1, 0x4b, [{0x1}, {0x2, 0x1}, {0x3, 0x1}]}, @void}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r4, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240048d4}, 0x4000004) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1b0, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65addf04}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6070000}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "01eb301f1de72e27a67e11d5d519ffd571a129b2fe607e9d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "ca4d4337598b1c2913965c45f8189d1c5855c973a08cea53d61f57c24c08bbde854d5268d86ace7c5fb428885f8d0c162d0d5665720aad1c70d149b003220c49618a30da441fdd06640e8a654caf6ab2654e402f1d61c83194a2ff59451f2d4e19dc74b14068ff60bf24fb7de2d5692b7abb466c4cdb5f04fd5fd74bf758d3a28f6302c40304c75811d2a3b3c7f7f3e1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x38b2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1a1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffc00}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20008084}, 0x4008001) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 1.094453473s ago: executing program 6 (id=6813): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000006471041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.034667572s ago: executing program 6 (id=6814): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x2070, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x9}, @typed={0xa, 0x131, 0x0, 0x0, @str='vcan0\x00'}, @generic="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", @nested={0x1255, 0x96, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x3}, @generic="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", @nested={0x4, 0x132}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x2}, @generic="a0f95a3b544fa6e72627b669bfc4517affc35533d3620c695f760f097544323b5427bd1666cb5f8ff4cfe8550c3535b9e29a0a4be6fdcd30de4f8222d5cb80869d2bcf3cf2313dd69e293a24e00e4ddd224a2c622b900869426f17a7497ce303ad6d3c187333e1e639651f11", @generic="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", @generic="ea3956933b1b0595c34d80c0e787036b85e41e52cb17439dec444659e24c9873d6c601a08b8702e0e46e4eec61c6ed75326a0a2ecbc7171fa4177a8c0efe409d108321472bf0d81bab140716b6c2ad02da1949ea4f9485e96381a535559fe92b8c0d619860abdbdb07a5f89d97f16ae2d3d9044a80e6b31f837f0c5b1e598388b4736a991136dfe21c88202d62571d0beaf96884bba03f758c0f5b3e7ac53d1e3c29608b00cc10e0c677a044684b276962a6852c0f1dfb921acdba22343a", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@remote}]}, @generic="935510d862d66faab93b0f9f89dfa897211bd1f473a6672ee9d8f4f7f75488617de40196e43580a119d5b81281750c16722242a4a00e071385c98de754d902a4546658f1ba2db9baabab4b214db2eb24addebba8f41ad46f7ddf308fbb644c0e678e0fd22b2389ab1a2f0cc4cc42f77ab1aa310f355987ff1ca37847baaf1fc42a1d2b808a0277e473a2ded918865e8c2eb5c567d89229ec02ee28d29b68126d96cf98a8f9ece3ba1f4b359aa79e1eed37af97a4884edced86a86bc9eac772f7891a52c32b016e843203403e585b5152b2bd8474bd67fe5240f32068e71edc2125916b76d79280f2af2cc1c8dd21b60aead1e6", @generic="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"]}, 0x2070}, 0x1, 0x0, 0x0, 0x8054}, 0x80) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.009403536s ago: executing program 1 (id=6815): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a3f1800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) shutdown(r0, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) (async) setsockopt(r2, 0x10000, 0x10, &(0x7f0000000180)="c8ede4f40036d27c6e36d9a74d482394a9961d47712d5936d9e13ad9634c5f2cbf0eb99e660a9a81ec5eaba9cb16236b4581f152b52ee8523676b54c59b10d51b604fffc6a156f88f659d70db0ae51de61005fe97cd1674adf933a4d", 0x5c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="2b03004000000000263c7ae51491cfa42260574c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005"], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 909.437305ms ago: executing program 2 (id=6816): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a40)={'veth1_to_team\x00', &(0x7f0000002b80)=@ethtool_gstrings={0x1b, 0x8, 0x5, "8aa3fcdf10"}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a40)={'veth1_to_team\x00', &(0x7f0000002b80)=@ethtool_gstrings={0x1b, 0x8, 0x5, "8aa3fcdf10"}}) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) 908.817623ms ago: executing program 1 (id=6817): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000000)={r0, 0x0, 0x5, 0xfff, 0x675, 0x8, [0xd7a, 0x100000001, 0xe, 0x2, 0x2, 0xffffffffffffffff]}) (async) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000000)={r0, 0x0, 0x5, 0xfff, 0x675, 0x8, [0xd7a, 0x100000001, 0xe, 0x2, 0x2, 0xffffffffffffffff]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x33, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20800, 0x22}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_USER_PORT_KEY={0x0, 0x19, 0xa0e}, @IFLA_BOND_PRIMARY_RESELECT={0x0, 0xc, 0x2}, @IFLA_BOND_UPDELAY={0x0, 0x4, 0xa}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2a58b6ca}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x4c}}, 0x40805) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x33, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20800, 0x22}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_USER_PORT_KEY={0x0, 0x19, 0xa0e}, @IFLA_BOND_PRIMARY_RESELECT={0x0, 0xc, 0x2}, @IFLA_BOND_UPDELAY={0x0, 0x4, 0xa}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2a58b6ca}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x4c}}, 0x40805) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x24) (async) bind$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x24) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b4000000010903000000000000000000020000080900010073797a31000000000c0004800800014000000009080005400000001108000540000000140800064000000001080006400000000108000340000001010900010073797a31000000005400020006000340000400001400018008000100ffffffff08000200e00000022c000180e5469a1a6e5d140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0600584718c406348537ff34559cb0aaa09fe49f18ca98000c6e1722882b89d114ab7228b5dfc7bbe08083e7cf52562e"], 0xb4}, 0x1, 0x0, 0x0, 0x4840}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r0, 0x8, 0x3, 0xfffffffffffffffd}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) listen(r5, 0xf15) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x38, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x2000}) 849.9914ms ago: executing program 6 (id=6818): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000a00}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 791.91716ms ago: executing program 2 (id=6819): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}}, 0x1) 671.482105ms ago: executing program 6 (id=6820): write(0xffffffffffffffff, &(0x7f0000000500)="240000001e005f02141f00fffffffff80100000008", 0x15) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000010401020000ff000000000002000002060006400000000006000640000300000a000200000000070200000008000340000000650500010001"], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c000c8014000100"], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) 670.564732ms ago: executing program 1 (id=6821): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet(0xa, 0x801, 0x84) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0xe}, &(0x7f0000000200)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6], 0x44}}, 0x2000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0xf, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000680)=[{0x0, 0x1, 0x3, 0x9}, {0x2, 0x5, 0x7, 0x8}, {0x1, 0x5, 0xa, 0x1}, {0x3, 0x2, 0x3, 0x2}, {0x3, 0x5, 0xe, 0xa}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) 669.471805ms ago: executing program 5 (id=6822): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0xf, 0xa0, 0x5, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7800, 0xefd, 0x4f}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x80, 0x0, 0x10, @mcast2, @remote, 0x700, 0x0, 0x8000, 0x3}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x7, 0x3d58, 0x1, 0x1, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r10, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = socket(0x400000000010, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xed, 0x2, 0xe}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) (async) r14 = socket$netlink(0x10, 0x3, 0x0) (async) r15 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r15, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r16, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r16], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) (async) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000001300)={0x76c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x114, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfff, 0x5, 0x5, 0xfffffff2}, {0x3ff, 0x7, 0x81, 0x3}, {0xa, 0x1, 0x3, 0x6}, {0x15c2, 0x10, 0x80}, {0x1e, 0x7, 0x0, 0x6}, {0x6, 0x0, 0x1, 0xb}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0x4, 0x4, 0x7}, {0x0, 0x4, 0x6, 0x2}, {0x45d4, 0x1, 0x7, 0x3}, {0x7df7, 0xf2, 0x9, 0x7}, {0x9, 0x5, 0x1, 0x3}, {0x3, 0x5, 0x7, 0x10000}, {0x1, 0x6, 0x6, 0x3}]}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe294}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x7, 0x0, 0x3b, 0x1}, {0x5, 0x9, 0xc, 0x7}, {0x44a, 0x5, 0x4, 0x5}, {0x4, 0x0, 0x2, 0x10000}, {0x1ff, 0x9f, 0x41, 0x8}, {0xc8be, 0x5, 0x4d, 0xb}, {0x6, 0x1, 0x9, 0xa}, {0x215f, 0x5, 0x4, 0x7fffffff}, {0xe, 0x3, 0x7, 0x1e}, {0x1712, 0xf9, 0xa, 0x4}]}}}]}}, {{0x8, 0x1, r5}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1a09}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x2189, 0x0, 0x6, 0x100}, {0x2040, 0x7, 0xb3, 0x8000}, {0x7ff, 0x8, 0xae, 0x61}, {0x95, 0x7, 0xf, 0xe2}, {0x3, 0x1, 0x80, 0x7}, {0xb2b, 0xb8, 0xf9, 0x2}, {0x1, 0x2, 0x8}, {0x6, 0x0, 0x4, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8, 0x7, 0xd}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}]}, 0x76c}, 0x1, 0x0, 0x0, 0x4000}, 0x240c9084) (async) r18 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0xffffffffffffff09}, 0x0) 668.718145ms ago: executing program 2 (id=6823): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x2}, {0x2, 0x1, 0xfff7fffc, 0x2}], 0x10, 0xfffffffe}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000040000000000009fc5732a2d6e15b43c2caa4e2914e13fde42447356516ea89e9012d82378577f4e814255cd94dae82a9b044bfb7d5ca8f2b2361cb63289feca26e9165c9d3226cf1bf2b18cca561467631c96635fe27182b148053a3757e0711e2bf0a3a1f83173965d3858e1dc06d4bc72766717ac0f0d38baa9eb75f3d14d"], 0x0, 0x26, 0x0, 0x1}, 0x20) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r7, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)={0x48, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xaa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d000700000007000000000000000000", @ANYRES32=r8, @ANYBLOB='\b\x00z\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r9 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0xa, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x81) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x8, @local, 0x1f39e}, @in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}], 0x38) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={r10, 0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r10}, 0x8) socketpair(0x1d, 0x5, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_EEE_SET(r11, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0xa0, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x5c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "ee0f33e89a95f0285753c100fd055d7150a268d93d6a604d865b75b20db3cca5cf6277b7bfdccd05542edeb1557729f094e9da61a0fd1741b330c0d86a44c6e46985b1066f1979a4670451ba2c50a6322c"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x200}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) getsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 426.023772ms ago: executing program 2 (id=6824): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) 424.844238ms ago: executing program 5 (id=6825): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000003ec0)={0x20, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xee00}]}, 0x20}], 0x1, 0x0, 0x0, 0x24000001}, 0x20001020) r3 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={{r3}, 0x5, 0x2, 0x8000000000000001}) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x7a, 0x4) 424.667783ms ago: executing program 6 (id=6826): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x7, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007019b01f8ffffffb7020000050000000085000000b00000009500"/88], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'macvtap0\x00', 0x20}) 415.35664ms ago: executing program 0 (id=6827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@delqdisc={0x120, 0x25, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {0x10}, {0x3, 0xc}}, [@TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x0, 0xfffd, 0x0, 0x2, 0xf7a, 0x6, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xf9, 0x9, 0x9, 0x81, 0x0, 0x8, 0x6, 0x3}}, {0xa, 0x2, [0x7, 0x5, 0x5]}}, {{0x1c, 0x1, {0x1, 0x6, 0x6, 0x83e, 0x0, 0x9, 0x6, 0x3}}, {0xa, 0x2, [0x8000, 0x8, 0x5]}}, {{0x1c, 0x1, {0x9, 0x9, 0x4, 0x6, 0x1, 0x3ff, 0x6, 0x1}}, {0x6, 0x2, [0x3ff]}}, {{0x1c, 0x1, {0x7, 0x4, 0x2, 0xcdd, 0x2, 0x4, 0x1, 0x3}}, {0xa, 0x2, [0x5, 0x6, 0x2]}}, {{0x1c, 0x1, {0x9, 0x7, 0x6, 0x1, 0x2, 0x3edb, 0xe9, 0x1}}, {0x6, 0x2, [0xfeea]}}]}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x120}}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095", @ANYRES64=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@delqdisc={0x68, 0x25, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0x10}, {0x7, 0xffe0}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x36, 0x6, 0x6, 0x2, 0x4, 0x10, 0x3}}, {0xa, 0x2, [0x3ff, 0x4, 0x9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={r6, 0x0, 0x25, 0x12, @val=@tcx={@void, @value=r6}}, 0x1c) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r10, @ANYBLOB="1000018004"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv4_newnexthop={0x28, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}]}]}, 0x28}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3800003, 0x13, r0, 0x1c457000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0xfffffffffffffe19, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f000200"/26], 0x20}}, 0x0) 349.205139ms ago: executing program 2 (id=6828): clock_gettime(0xfffffffffffffff6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x4044) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b42c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11}, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000006c0)={{r4, &(0x7f0000000040)='syz1\x00', 0x2000, &(0x7f0000000300)={@align=0x3, {0x4, 0x8, 0x8, 0x100}}, 0x4, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x3}, {[0x7f, 0x9, 0x80000001, 0x3]}, 0x8000, 0x84, &(0x7f0000000600)=""/132}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f0000001ac0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="49388dcdb79830e8fe33c11b4d6dc305729eb9e284da45a6ddb0472ca2d3fa9497b9a86a95111b702c71dcbb69a1b71a26799e8c5cd9f2f42f2a45a01cd30c8f598ccd4f82"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000001c0)="b9ff03316844268cb89e14f086dd", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r5}, 0x8) 290.509598ms ago: executing program 6 (id=6829): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xff7f, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 289.09976ms ago: executing program 1 (id=6830): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x34}}, 0x4000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newaddrlabel={0x6c, 0x48, 0x400, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x20, 0x0, r1, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x20}, 0xc) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0xbc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 285.987027ms ago: executing program 5 (id=6831): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}, 0x48010) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 230.58519ms ago: executing program 0 (id=6832): socket$unix(0x1, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 141.904654ms ago: executing program 2 (id=6833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "c9bae94572726b2d", "4c502b3961ae7dacec77d5362bc897ab", "bd18e953", "091000c56a001700"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)='.', 0x1}], 0x1}, 0x40000) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000009a5987d01bd763000000000000001c00002c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) (async) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, r4}, 0xc) 0s ago: executing program 0 (id=6834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x9c, @private0, 0x6}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000100)="461e18d6af8aecc0ea6e1b2c4d85a4e56b96186c3a9d924b50ed56dfab5f5025edebdc432d18d122b7e973d6a69219ac2ffa89fbcbcab27d36a0e364b36640c0e8b3969c7189ee410ebfa65c8109890a7c510958e89a8f778009e3f31f5cfb1a7e9eda84fc76d8de09cc0552273ed49539cfb3fd303567c71f99", 0x7a}, {&(0x7f00000002c0)="ca469b40649aacf8fbd08743db22d39226c881767801c5f9cf6f2f24c129ad650335d16a5433050f98a007ee8e53c23b946ad30e409266d1fd6b4cb3ffeeebdf99d8db2f9b30f74841dd17dd8dd7e72ebe", 0x51}, {&(0x7f0000000440)="56919a67b3d5597a21bc43ee4f39d3b22d9784b36551c535510a6fb9b3cc0672df4438ad707a8ce0bc37fc6f328cbcba785d5beb63c04d64e406be07a2f53e999dd5c76476b1fcb7c70873781b15fad79d1aa4b84df54ebe92722d8771a1b8778f207dde046bf6859c49d98c591eea486634f3286c81ea5d793f31b5d7aa558e423a268bc94c6190fdddfd5c0d439e2467", 0x91}, {&(0x7f0000000500)="5855a94294cf2d834193383692246bf1c5ceeca941f335a728ef3da47e1ec337234944e399487eb3dfa410484d445bdb5c8dd96ba954f8f527218184fa9c9bf834898741ee31828d9b1e3fccdf0be8dd07d030c0eee3afedfaa9e5eda56c23fe853167b150bac18258bf364620c0629e71b1ea05", 0x74}, {&(0x7f0000000580)="146f067bc7c4beadbbaff1adf87330976500ae2f063dcd493fbb2b27f402d3d366f50877229ae98cef791ed5d8a24211b941e872ba51fd0c6dd8b54e2daa817026a4795273c9eaf976de6c78ed048d45e7e7cfd7d477d44b69fcc991f9c761b6cedc66047daeb244f0f4d049a432db4f206e4289714c940514443fc91b2cc8df256151f174a619eab1778a37cfab2a2b8301f2ae353cd3cfdb07a3a69699747b8dd366802413d55283c3e786d61c189ac7c1d51e382d7aea8de9a17fe5c7fd", 0xbf}, {&(0x7f0000000640)="a08cc4dfe9b5e4ca9e9c991205d6027e329dd38d53853587ac0a9124e250df89b69cdea663085fb6e5d9fcc5400bedc18fe3b5a0a39c58664d50008b680b8cc8f4009ae1ccb95d6ef9f4c627c867e5ddf17cf4c98ab77c2bdf166f2220969b9bd118843a43dde2e0c21ab648c40f68d1c816b7b401bb895bc5d2d4c78d22ab911c180eeb49464e4aef92db0492b02e9cea0aa8056352ad4c38e799a9477c9520bb82056bfb88b0bbc1fee204361a6a9be2d8e4c2e65fb46a80b105dc2f4a81ac2afc01cfa87f68d491a4ad22ead0821aa0ea8f496e7d60627442ffd71fa24699fbca4c4fe08c1cd156623909c7fbec2e8cde0f45", 0xf4}], 0x6, &(0x7f00000007c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit_2292={{0x14}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x6, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0xab}, @enc_lim, @pad1, @enc_lim={0x4, 0x1, 0x1}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x3a, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0xaa0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x84, 0x6, 0x1, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x571}}], 0x118}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0xabd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x81}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000900)="38cf4ee7b7ff35f587b0c4a71f3517b2cf67b21f029ff9305aca41ad7d4350c2bfd2b53b43dce3b500b6d79d1072120572ce4ed6d9d33f595348eee88b6a1fe54effdb15571e22be4f2f931175fc6d13b47943e55ccdda61468d1d078a1670d041219b", 0x63}, {&(0x7f0000000980)="624f299abf95d75332098dc28980a828385fa0fe6e1612366f1e6a197135e796d8ef2cc1051d152481bed6e8e8b7ec0a69fadac3a39363d6f45393d837a7cf8231c78812dbdf38f8f2e60004559518b5b378ab338bc2a909fb3762dcbdf1c5622190f8e845f0108bbc9d1d36942172b387e277a3f0223cc1a43203cb169b0a98104445e6f18437e856b8445b9783d7ca8c0c4848a5e57398f56c5660c130668e0ac3038b9a14d96f6b62450588ab56b0f4fb1d4f17aa8410b10b7c5a1e2f4be1b569527b60dc484f5cd4fd03af971b05f69afdc5c53f6ed989c9b97389d7319ea61420e16a", 0xe5}], 0x2}}, {{&(0x7f0000000a80)={0xa, 0x4e23, 0x4, @empty, 0x10}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="94b4730b8e09b3284598763b3da94c0649e4455360b52930ba2b17cb73213deb28d93d3bcf48f0c23c3270ed1299da0a78", 0x31}, {&(0x7f0000000b00)="17928738b50f100744664819614c69d2f966", 0x12}], 0x2, &(0x7f0000001080)=[@hopopts={{0x60, 0x29, 0x36, {0x1, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0xf, 0x40, [0xfffffffffffffffe, 0xffff, 0x8, 0x80000001, 0x7fffffff, 0x7, 0x2c]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x7fff}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xfdc1}, @enc_lim={0x4, 0x1, 0xe}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x100}}, {{0x0, 0x0, &(0x7f0000000b80)}}, {{&(0x7f0000000bc0)={0xa, 0x4e20, 0x80000001, @empty, 0x8}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000001180)="5463202494492b88ff34f577ce51258f45ee9173ca91f316c9a3a9f1e505420cbbfc1e7efd29953c37ae8789fff7c513d67dcb37cd902bc50f3e4c3b86f778075748f178ec29e9ffe5fb2bfdc59c42bf9ee51949fa112a812c8529b8d45ae121806fc928f0f82d378ab5a5290784a6c9c3894b2ac216f4c392f6f001f0ff9d2fe1623ebeed39db740d0590e5e51b40ce64c4b51060d5bc32c3d505b7eab51873929b16b966aad8898edcbb0fb13d0118917484da981ebd99bce5fd1a68aa5cadab82d1766176580310c18177857ce8e0d58911ecc91b65f105db8806dae4bdaa2f33fdab01e4f4a2b8dc51feb7", 0xed}, {&(0x7f0000001280)="caefd5a41f521f818c35075f4968561789f4b37de7a3464346a1fc7b617aebdb32affba4fc5fd638d048dadaea674792e5a6afc2d9589cb719543dbeca5470a451c084cad5ae1d915987c6320e10a9", 0x4f}, {&(0x7f0000001300)="9bfa82af4694178a9e2884d5534c045bf88894f12083fcaac06b6c9e260c79116ff17b99b73ea20ef0c3327ddc0ef217b5", 0x31}], 0x3, &(0x7f0000001380)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdr={{0x48, 0x29, 0x39, {0x21, 0x6, 0x1, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @local]}}}, @dstopts={{0x108, 0x29, 0x37, {0x8, 0x1d, '\x00', [@generic={0x4, 0x9a, "d8e5f3fc89aefa6d931df57927e88861a534f1c3dfe55e9ba56e4348674d111fd6dacdf4f96a266cb64be646c84a9c501ee625ef875ac3d461cf4a854a53ea0c6541be719c3e3c88a6b308af300c3e4fb3b212ab9b460f58a9786a7e12cd8debee9beaf7be3440db133bdbc7a480ffb25887a7a4222bf5e9deed7f725b4f70978960605575b97e361479b49b5d349ed19fe23194eb1791c328fc"}, @jumbo={0xc2, 0x4, 0xffff}, @calipso={0x7, 0x48, {0x3, 0x10, 0x5, 0x2, [0x6e6d, 0x1000, 0x6, 0x80000001, 0x1, 0x7, 0x6, 0x1000]}}, @pad1]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x33, 0x9, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x2, 0xc, 0x4, 0x6, [0x3, 0x10000, 0x8, 0x7ab, 0x2, 0x1f24]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @hopopts_2292={{0x108, 0x29, 0x36, {0x3c, 0x1d, '\x00', [@calipso={0x7, 0x50, {0x2d1ac95c65db4a7d, 0x12, 0x7, 0x4, [0x2, 0x80000000, 0x3ff, 0x100000001, 0x3, 0x100000000, 0x3e40, 0x8, 0xffffffff]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x1, 0x32e, [0xff, 0xfffffffffffffff9, 0xff, 0x2, 0x3]}}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x10, {0x2, 0x2, 0xf7, 0x3, [0x6]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x1ff, [0x4eca, 0x6, 0xa]}}, @pad1, @pad1, @ra={0x5, 0x2, 0xba}, @hao={0xc9, 0x10, @mcast2}]}}}], 0x308}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000016c0)="0b93d6a895d2131b33654444df5ceeed424b55e52be9d43132addc5fd81f7d64daf7ada49d7abb65ade9705a7e6e2c6a3b80ad1e555b931c12dca8a8a5de52ab12ecf1a75bf3ae518b1d1c00e0727ff7634b0a19a10a7beac4d6841f5c55ad1fb38f94b5722b43283c962e84d7", 0x6d}], 0x1, &(0x7f0000001780)=[@hopopts_2292={{0x48, 0x29, 0x36, {0x0, 0x5, '\x00', [@ra={0x5, 0x2, 0xfff}, @jumbo={0xc2, 0x4, 0xfffff000}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @private2}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x73, 0x4, 0x1, 0x5, 0x0, [@remote, @loopback]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x3a, 0xc, 0x1, 0x7, 0x0, [@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x33, 0x0, '\x00', [@pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0x3b, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x3}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x33, 0x6, 0x0, 0x5, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x84, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xfb}, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xb}, @ra={0x5, 0x2, 0x3}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x3a, 0x3, '\x00', [@jumbo, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}], 0x1e8}}], 0x6, 0x881) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1111], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x71e}, 0x28) kernel console output (not intermixed with test programs): supported in mode balance-rr(0) [ 501.358528][T22260] bond10 (unregistering): Released all slaves [ 501.567495][T22275] syzkaller0: entered promiscuous mode [ 501.573273][T22275] syzkaller0: entered allmulticast mode [ 501.684750][T22279] tipc: Started in network mode [ 501.689648][T22279] tipc: Node identity 1ac8c5f770d6, cluster identity 4711 [ 501.700283][T22279] tipc: Enabled bearer , priority 0 [ 501.743604][T22291] validate_nla: 5 callbacks suppressed [ 501.743622][T22291] netlink: 'syz.0.5243': attribute type 1 has an invalid length. [ 501.799056][T22279] syzkaller0: entered promiscuous mode [ 501.805372][T22279] syzkaller0: entered allmulticast mode [ 501.811660][T22279] tipc: Resetting bearer [ 501.852439][T22279] netlink: 'syz.6.5241': attribute type 10 has an invalid length. [ 501.877847][T22299] macvlan2: entered promiscuous mode [ 501.883845][T22299] macvlan2: entered allmulticast mode [ 501.890344][T22299] bond8: entered promiscuous mode [ 501.896635][T22299] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 501.906150][T22299] bond8: left promiscuous mode [ 501.925702][T22279] team0: Device vxcan1 is of different type [ 501.953082][T22278] tipc: Resetting bearer [ 502.728135][T22316] netlink: 'syz.1.5252': attribute type 2 has an invalid length. [ 502.739239][T22316] siw: device registration error -23 [ 502.857016][T22320] __nla_validate_parse: 13 callbacks suppressed [ 502.857036][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5254'. [ 503.332241][ T1165] net_ratelimit: 137 callbacks suppressed [ 503.332268][ T1165] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.363597][ T1165] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.385972][ T1165] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.416008][ T1165] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.440441][T22278] tipc: Disabling bearer [ 503.446271][ T1054] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.468873][ T5876] tipc: Node number set to 1780401655 [ 503.475641][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5254'. [ 503.482175][ T60] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.535834][ T60] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 503.674561][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.692965][T22333] netlink: 'syz.0.5260': attribute type 1 has an invalid length. [ 503.700760][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 503.822218][ T1165] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.836873][T22345] macvlan2: entered promiscuous mode [ 503.843394][T22345] macvlan2: entered allmulticast mode [ 503.857365][T22345] bond9: entered promiscuous mode [ 503.863867][T22345] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 503.883568][T22345] bond9: left promiscuous mode [ 503.974494][T22358] IPv6: NLM_F_CREATE should be specified when creating new route [ 504.068489][T22364] sctp: [Deprecated]: syz.2.5268 (pid 22364) Use of int in maxseg socket option. [ 504.068489][T22364] Use struct sctp_assoc_value instead [ 504.089956][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5268'. [ 504.109810][T22364] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 504.122866][T22364] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 504.130671][T22364] gretap2: entered promiscuous mode [ 504.136250][T22364] gretap2: entered allmulticast mode [ 504.316339][T22381] netlink: 'syz.5.5276': attribute type 4 has an invalid length. [ 504.322916][T22383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5275'. [ 504.339429][T22381] netlink: 'syz.5.5276': attribute type 4 has an invalid length. [ 504.349492][T22383] syz_tun: entered allmulticast mode [ 504.384470][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5277'. [ 504.558111][T22397] FAULT_INJECTION: forcing a failure. [ 504.558111][T22397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.571559][T22397] CPU: 1 UID: 0 PID: 22397 Comm: syz.5.5282 Not tainted syzkaller #0 PREEMPT(full) [ 504.571585][T22397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.571596][T22397] Call Trace: [ 504.571604][T22397] [ 504.571612][T22397] dump_stack_lvl+0xe8/0x150 [ 504.571643][T22397] should_fail_ex+0x412/0x560 [ 504.571668][T22397] _copy_from_iter+0x1d3/0x1670 [ 504.571694][T22397] ? rcu_is_watching+0x15/0xb0 [ 504.571724][T22397] ? __pfx__copy_from_iter+0x10/0x10 [ 504.571762][T22397] ? netlink_sendmsg+0x650/0xb40 [ 504.571784][T22397] ? skb_put+0x11b/0x210 [ 504.571812][T22397] netlink_sendmsg+0x6c0/0xb40 [ 504.571843][T22397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.571869][T22397] ? aa_sock_msg_perm+0xf1/0x1b0 [ 504.571892][T22397] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.571914][T22397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.571935][T22397] ____sys_sendmsg+0xa68/0xad0 [ 504.571969][T22397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.572004][T22397] ? import_iovec+0x73/0xa0 [ 504.572032][T22397] ___sys_sendmsg+0x2a5/0x360 [ 504.572063][T22397] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.572120][T22397] ? __fget_files+0x2a/0x420 [ 504.572144][T22397] ? __fget_files+0x3a0/0x420 [ 504.572176][T22397] __x64_sys_sendmsg+0x1bd/0x2a0 [ 504.572204][T22397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.572237][T22397] ? __pfx_ksys_write+0x10/0x10 [ 504.572263][T22397] do_syscall_64+0x14d/0xf80 [ 504.572280][T22397] ? trace_irq_disable+0x3b/0x150 [ 504.572304][T22397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.572322][T22397] ? clear_bhb_loop+0x40/0x90 [ 504.572343][T22397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.572361][T22397] RIP: 0033:0x7f0717b9c799 [ 504.572378][T22397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.572393][T22397] RSP: 002b:00007f07189f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.572413][T22397] RAX: ffffffffffffffda RBX: 00007f0717e15fa0 RCX: 00007f0717b9c799 [ 504.572427][T22397] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 504.572439][T22397] RBP: 00007f07189f8090 R08: 0000000000000000 R09: 0000000000000000 [ 504.572450][T22397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.572461][T22397] R13: 00007f0717e16038 R14: 00007f0717e15fa0 R15: 00007ffcd1b8ca78 [ 504.572489][T22397] [ 504.956093][T22407] netlink: 13 bytes leftover after parsing attributes in process `syz.1.5285'. [ 504.965893][T22407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5285'. [ 504.975115][T22407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5285'. [ 504.984662][T22407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5285'. [ 505.051416][T22410] netlink: 'syz.6.5287': attribute type 33 has an invalid length. [ 505.053668][T22411] netlink: 'syz.5.5288': attribute type 10 has an invalid length. [ 505.067719][T22411] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5288'. [ 505.147261][T22410] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 505.202290][T22410] bond2 (unregistering): Released all slaves [ 505.388888][T22431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.474639][T22434] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 505.493648][T22427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.533382][T22439] tipc: Enabled bearer , priority 0 [ 505.560515][T22439] +: renamed from syzkaller0 [ 505.574199][T22439] tipc: Disabling bearer [ 505.755949][T22450] syzkaller0: entered promiscuous mode [ 505.788916][T22450] syzkaller0: entered allmulticast mode [ 505.984595][T22471] veth1_to_bond: entered allmulticast mode [ 505.994759][T22470] veth1_to_bond: left allmulticast mode [ 506.243810][ T5876] IPVS: starting estimator thread 0... [ 506.322967][T22499] netlink: 'syz.1.5317': attribute type 10 has an invalid length. [ 506.342215][T22495] IPVS: using max 32 ests per chain, 76800 per kthread [ 506.389708][T22499] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 506.426965][T22505] syzkaller0: entered promiscuous mode [ 506.444339][T22505] syzkaller0: entered allmulticast mode [ 506.445437][T22503] xt_connbytes: Forcing CT accounting to be enabled [ 506.570217][T22511] syzkaller0: entered promiscuous mode [ 506.575836][T22511] syzkaller0: entered allmulticast mode [ 506.585150][T22511] tipc: Enabled bearer , priority 0 [ 506.604114][T22512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.620133][T22510] tipc: Resetting bearer [ 506.653959][T22510] tipc: Disabling bearer [ 506.675870][T22508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.124264][T22549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.131625][T22549] IPv6: NLM_F_CREATE should be set when creating new route [ 507.665003][T22593] netlink: 'syz.6.5351': attribute type 12 has an invalid length. [ 507.673821][T22593] netlink: 'syz.6.5351': attribute type 29 has an invalid length. [ 507.682302][T22593] netlink: 'syz.6.5351': attribute type 1 has an invalid length. [ 507.696265][T22591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.775348][T22591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.887478][T22608] Bluetooth: hci1: too big key_count value 32778 [ 508.184573][T22629] netlink: 'syz.6.5365': attribute type 3 has an invalid length. [ 508.273385][T22629] delete_channel: no stack [ 508.285015][T22629] __nla_validate_parse: 14 callbacks suppressed [ 508.285032][T22629] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5365'. [ 508.330094][T22629] netlink: 'syz.6.5365': attribute type 10 has an invalid length. [ 508.352490][T12409] net_ratelimit: 94 callbacks suppressed [ 508.352508][T12409] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 508.390342][T22629] team0 (unregistering): Port device team_slave_0 removed [ 508.399974][T10697] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 508.420011][T22629] team0 (unregistering): Port device team_slave_1 removed [ 508.428433][T10697] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 508.462531][T10697] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 508.483659][T12409] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 508.491414][T12409] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.572002][T22648] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 508.636897][ T13] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 508.657964][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.784187][T12406] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 508.877699][T22668] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5380'. [ 508.930467][T22673] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5381'. [ 509.051781][T22682] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5384'. [ 509.230102][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5391'. [ 509.246084][T22693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5391'. [ 509.397125][T22706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5395'. [ 509.573729][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.579735][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.581486][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5401'. [ 509.587023][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.618703][T22718] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 509.681475][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.698490][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.705451][T22668] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 509.715525][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.724013][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.731802][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.745688][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.777439][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.820352][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.835878][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.844295][T22718] wg1 speed is unknown, defaulting to 1000 [ 509.876087][T22738] netlink: 'syz.0.5408': attribute type 7 has an invalid length. [ 509.891349][T22738] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5408'. [ 509.913617][T22739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5407'. [ 509.951054][T22738] netlink: 'syz.0.5408': attribute type 5 has an invalid length. [ 510.428615][T22746] wg1 speed is unknown, defaulting to 1000 [ 510.754389][T22790] IPv6: NLM_F_REPLACE set, but no existing node found! [ 510.763211][T22790] syzkaller0: entered promiscuous mode [ 510.771275][T22790] syzkaller0: entered allmulticast mode [ 510.952192][ T5835] Bluetooth: hci1: command 0x0405 tx timeout [ 511.261308][T22792] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.268994][T22792] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.356496][T22792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.373761][T22792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.460662][T22802] bridge_slave_0: invalid flags given to default FDB implementation [ 511.619265][T10697] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.629009][T10697] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.650966][T10697] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.662930][T10697] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.671975][T10697] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.681345][T10697] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.692921][T10697] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.704805][T10697] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.722966][T22816] netlink: 'syz.6.5438': attribute type 29 has an invalid length. [ 511.742506][T22819] netlink: 'syz.6.5438': attribute type 29 has an invalid length. [ 511.988729][T22828] syzkaller0: entered promiscuous mode [ 512.003876][T22828] syzkaller0: entered allmulticast mode [ 512.460200][T22843] syzkaller0: entered promiscuous mode [ 512.472715][T22843] syzkaller0: entered allmulticast mode [ 512.611806][T22872] netlink: 'syz.5.5457': attribute type 39 has an invalid length. [ 513.372180][ T1054] net_ratelimit: 148 callbacks suppressed [ 513.372202][ T1054] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.405994][ T1054] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.433875][ T1054] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.464090][ T1165] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.486300][ T1165] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.522662][ T1165] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.545371][ T1165] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.573437][ T1165] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.597385][T12408] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 513.625281][T12408] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.078496][T22879] __nla_validate_parse: 12 callbacks suppressed [ 514.078515][T22879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5459'. [ 514.172647][T22884] tipc: Can't bind to reserved service type 2 [ 514.457226][T22908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5469'. [ 514.477390][T22908] netlink: 'syz.1.5469': attribute type 7 has an invalid length. [ 514.493331][T22908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5469'. [ 514.497041][T22911] syzkaller0: entered promiscuous mode [ 514.522231][T22911] syzkaller0: entered allmulticast mode [ 514.539060][T22908] syz_tun: entered promiscuous mode [ 514.546032][T22908] syz_tun: left promiscuous mode [ 514.672038][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5471'. [ 514.695922][T22922] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5472'. [ 514.761077][T22926] netlink: 401 bytes leftover after parsing attributes in process `syz.1.5474'. [ 514.800443][T22928] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5475'. [ 514.996269][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5478'. [ 515.164571][T22951] syzkaller0: entered promiscuous mode [ 515.170041][T22951] syzkaller0: entered allmulticast mode [ 515.240892][T22953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5483'. [ 515.325399][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5484'. [ 515.429882][T22965] netlink: 'syz.2.5485': attribute type 13 has an invalid length. [ 515.438382][T22965] netlink: 'syz.2.5485': attribute type 17 has an invalid length. [ 515.517221][T22965] bridge0: left allmulticast mode [ 515.525558][T22965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.534774][T22965] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.859393][T22986] vlan3: entered allmulticast mode [ 515.864996][T22986] gretap0: entered allmulticast mode [ 516.316456][T23013] netlink: 'syz.2.5503': attribute type 33 has an invalid length. [ 516.365252][T23013] bond15: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 516.382477][T23013] bond15 (unregistering): Released all slaves [ 516.705972][T12408] macvlan2: left allmulticast mode [ 516.711147][T12408] macvlan2: left promiscuous mode [ 516.755017][T12408] bridge0: port 3(macvlan2) entered disabled state [ 516.809737][T12408] bridge_slave_1: left allmulticast mode [ 516.822465][T12408] bridge_slave_1: left promiscuous mode [ 516.833874][T12408] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.856617][T12408] bridge_slave_0: left promiscuous mode [ 516.863021][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.972618][T12408] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 517.056536][T12408] bond2 (unregistering): (slave gretap1): Releasing active interface [ 517.347341][T12408] bond1 (unregistering): (slave bridge6): Releasing backup interface [ 517.360385][T12408] bridge6 (unregistering): left promiscuous mode [ 517.450196][T12408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.463575][T12408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.477397][T12408] bond0 (unregistering): Released all slaves [ 517.487508][T12408] bond1 (unregistering): Released all slaves [ 517.503670][T12408] bond2 (unregistering): Released all slaves [ 517.517200][T12408] bond3 (unregistering): Released all slaves [ 517.530793][T12408] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 517.546931][T12408] bond4 (unregistering): Released all slaves [ 517.559779][T12408] bond5 (unregistering): Released all slaves [ 517.574509][T23056] netlink: 'syz.5.5519': attribute type 3 has an invalid length. [ 517.641520][T23063] netlink: 'syz.6.5520': attribute type 33 has an invalid length. [ 517.734357][T23063] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 517.814208][T23063] bond2 (unregistering): Released all slaves [ 517.890658][T12408] tipc: Disabling bearer [ 517.907906][T12408] tipc: Disabling bearer [ 517.937088][T12408] tipc: Left network mode [ 517.939306][T23081] netlink: 'syz.2.5526': attribute type 29 has an invalid length. [ 518.085722][T23097] netlink: 'syz.6.5528': attribute type 33 has an invalid length. [ 518.161094][T23102] netlink: 'syz.6.5528': attribute type 33 has an invalid length. [ 518.459476][T23086] syzkaller0: entered promiscuous mode [ 518.479735][T23086] syzkaller0: entered allmulticast mode [ 518.600926][T23121] FAULT_INJECTION: forcing a failure. [ 518.600926][T23121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.634007][T23121] CPU: 0 UID: 0 PID: 23121 Comm: syz.0.5535 Not tainted syzkaller #0 PREEMPT(full) [ 518.634064][T23121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.634079][T23121] Call Trace: [ 518.634088][T23121] [ 518.634096][T23121] dump_stack_lvl+0xe8/0x150 [ 518.634126][T23121] should_fail_ex+0x412/0x560 [ 518.634151][T23121] _copy_from_user+0x2d/0xb0 [ 518.634177][T23121] ___sys_sendmsg+0x1c6/0x360 [ 518.634207][T23121] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.634262][T23121] ? __fget_files+0x2a/0x420 [ 518.634285][T23121] ? __fget_files+0x3a0/0x420 [ 518.634316][T23121] __x64_sys_sendmsg+0x1bd/0x2a0 [ 518.634338][T23121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.634365][T23121] ? __pfx_ksys_write+0x10/0x10 [ 518.634396][T23121] do_syscall_64+0x14d/0xf80 [ 518.634409][T23121] ? trace_irq_disable+0x3b/0x150 [ 518.634427][T23121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.634440][T23121] ? clear_bhb_loop+0x40/0x90 [ 518.634457][T23121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.634470][T23121] RIP: 0033:0x7f92ac39c799 [ 518.634484][T23121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.634495][T23121] RSP: 002b:00007f92ad1ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.634510][T23121] RAX: ffffffffffffffda RBX: 00007f92ac615fa0 RCX: 00007f92ac39c799 [ 518.634520][T23121] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 518.634528][T23121] RBP: 00007f92ad1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 518.634536][T23121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.634544][T23121] R13: 00007f92ac616038 R14: 00007f92ac615fa0 R15: 00007ffefcf536e8 [ 518.634566][T23121] [ 518.968845][T23131] netlink: 'syz.6.5538': attribute type 1 has an invalid length. [ 520.232926][T23131] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 520.305860][T23138] __nla_validate_parse: 17 callbacks suppressed [ 520.305881][T23138] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5541'. [ 520.563419][T23151] netlink: 'syz.1.5544': attribute type 178 has an invalid length. [ 520.595135][T23156] net_ratelimit: 91 callbacks suppressed [ 520.595153][T23156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.599458][T23151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.652799][T23157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.891739][T23173] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.5554'. [ 520.940298][T23173] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 520.961691][T23179] netlink: 'syz.2.5557': attribute type 1 has an invalid length. [ 520.982240][T23179] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5557'. [ 521.237734][T23202] netlink: 81 bytes leftover after parsing attributes in process `syz.0.5563'. [ 521.591781][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5570'. [ 521.605974][T23224] openvswitch: netlink: Unknown nsh attribute 0 [ 521.843558][T12408] hsr_slave_1: left promiscuous mode [ 521.851944][T12408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.862995][T12408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.876101][T12408] pimreg (unregistering): left allmulticast mode [ 521.927146][T12408] team0 (unregistering): Port device batadv1 removed [ 522.158564][T12408] team0 (unregistering): Port device team_slave_1 removed [ 522.181806][T12408] team0 (unregistering): Port device team_slave_0 removed [ 522.284128][T12408] lo (unregistering): left allmulticast mode [ 522.523187][T23272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5583'. [ 522.533212][T23272] openvswitch: netlink: Message has 16 unknown bytes. [ 522.618480][T23274] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.5584'. [ 522.639259][T23276] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5585'. [ 522.648612][T23274] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 522.677561][T23278] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5585'. [ 522.740415][T12408] IPVS: stop unused estimator thread 0... [ 522.828393][T23287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5589'. [ 523.799039][T23309] netlink: 'syz.6.5596': attribute type 33 has an invalid length. [ 523.821504][T23309] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 523.835433][T23309] bond2 (unregistering): Released all slaves [ 525.047034][T23250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.232744][T23322] openvswitch: netlink: Unknown nsh attribute 0 [ 525.364611][T23336] netlink: 'syz.0.5604': attribute type 1 has an invalid length. [ 525.488374][T23348] __nla_validate_parse: 4 callbacks suppressed [ 525.488392][T23348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5609'. [ 525.517460][T23352] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.5608'. [ 525.528436][T23352] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 525.541107][T23340] syzkaller0: entered promiscuous mode [ 525.577100][T23340] syzkaller0: entered allmulticast mode [ 525.611041][T23356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.630139][T23356] netlink: 'syz.6.5611': attribute type 7 has an invalid length. [ 525.681099][T23343] openvswitch: netlink: Key type 34 is out of range max 32 [ 525.782472][T23365] syzkaller0: entered promiscuous mode [ 525.797584][T23369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5616'. [ 525.798728][T23365] syzkaller0: entered allmulticast mode [ 525.810594][T23369] openvswitch: netlink: Unknown nsh attribute 0 [ 526.024356][T23389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5621'. [ 526.039704][T23385] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.5620'. [ 526.049984][T23385] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 526.152502][T23394] netlink: 'syz.2.5622': attribute type 1 has an invalid length. [ 526.181199][T23399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5623'. [ 526.249829][T23396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.339175][T23409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5628'. [ 526.349273][T23409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5628'. [ 526.577027][T23427] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.5633'. [ 526.601145][T23427] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 526.644013][T23430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5634'. [ 526.796536][T23434] bond16: option arp_all_targets: invalid value (18446744073709551613) [ 526.827654][T23434] bond16 (unregistering): Released all slaves [ 526.953765][T21820] udevd[21820]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 527.117861][T23464] netlink: 'syz.5.5641': attribute type 1 has an invalid length. [ 527.194285][T23471] tipc: Bearer : already 2 bearers with priority 10 [ 527.219830][T23471] tipc: Bearer : trying with adjusted priority [ 527.240017][T23471] tipc: Enabled bearer , priority 9 [ 527.249900][T23478] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 527.552261][T23499] netlink: 'syz.2.5655': attribute type 17 has an invalid length. [ 527.588699][T23488] delete_channel: no stack [ 527.907341][T23520] syzkaller0: entered promiscuous mode [ 527.913836][T23520] syzkaller0: entered allmulticast mode [ 528.146774][T23537] tipc: Enabling of bearer rejected, already enabled [ 528.675009][T23588] netlink: 'syz.0.5682': attribute type 1 has an invalid length. [ 528.715993][ T1165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.745975][ T1165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.772406][ T1165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.833370][ T1165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.901310][T23602] syzkaller0: entered promiscuous mode [ 528.935063][T23602] syzkaller0: entered allmulticast mode [ 529.304193][T23630] IPVS: set_ctl: invalid protocol: 29 172.30.1.3:20004 [ 529.342874][T23630] sctp: [Deprecated]: syz.2.5695 (pid 23630) Use of int in maxseg socket option. [ 529.342874][T23630] Use struct sctp_assoc_value instead [ 529.450618][T23635] syzkaller0: entered promiscuous mode [ 529.463047][T23635] syzkaller0: entered allmulticast mode [ 529.617489][T23644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.727293][T23646] bond3: (slave veth0_to_bond): Releasing active interface [ 529.737078][T23646] bridge4: port 1(veth0_to_bond) entered blocking state [ 529.782637][T23646] bridge4: port 1(veth0_to_bond) entered disabled state [ 529.790022][T23646] veth0_to_bond: entered allmulticast mode [ 529.798122][T23646] veth0_to_bond: entered promiscuous mode [ 529.817068][T23652] veth1_to_bond: entered allmulticast mode [ 529.893145][T23654] veth1_to_bond: left allmulticast mode [ 530.200434][T23675] tipc: Resetting bearer [ 530.301704][T23679] x_tables: unsorted underflow at hook 4 [ 530.341084][T23686] netlink: 'syz.0.5713': attribute type 1 has an invalid length. [ 530.496063][T23686] 8021q: adding VLAN 0 to HW filter on device bond12 [ 530.588630][T23705] __nla_validate_parse: 18 callbacks suppressed [ 530.588650][T23705] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5719'. [ 530.733807][T23710] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 531.040666][T23735] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5729'. [ 531.077899][T23744] syzkaller0: entered promiscuous mode [ 531.096796][T23744] syzkaller0: entered allmulticast mode [ 531.490061][T23775] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5736'. [ 531.574474][T23779] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5739'. [ 531.591490][T23779] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5739'. [ 531.792717][T23788] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 531.803369][T23788] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 531.824940][T23788] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 531.850367][T23794] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 531.863632][T23788] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 531.875314][T23788] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 531.943683][T23796] tipc: Enabled bearer , priority 0 [ 532.071310][T23796] syzkaller0: entered promiscuous mode [ 532.078306][T23796] syzkaller0: entered allmulticast mode [ 532.084900][T23796] tipc: Resetting bearer [ 532.138350][T12408] tipc: Resetting bearer [ 532.148157][T23791] tipc: Resetting bearer [ 533.532733][T23791] tipc: Disabling bearer [ 533.542219][T23787] wg1 speed is unknown, defaulting to 1000 [ 533.630101][T23812] netlink: 'syz.5.5746': attribute type 1 has an invalid length. [ 533.710797][T23818] netlink: 'syz.2.5749': attribute type 1 has an invalid length. [ 533.721850][T23820] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5748'. [ 533.727587][T23812] bond6: entered promiscuous mode [ 533.732999][T23818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.750983][T23812] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.777745][T23825] netlink: 294 bytes leftover after parsing attributes in process `syz.1.5750'. [ 533.780510][T23812] bond6: (slave bridge5): making interface the new active one [ 533.790411][T23825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.796371][T23812] bridge5: entered promiscuous mode [ 533.810540][T23812] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 533.912886][ T5835] Bluetooth: hci7: command tx timeout [ 534.102985][T23842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5754'. [ 534.125831][T23787] chnl_net:caif_netlink_parms(): no params data found [ 534.134249][T23843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5753'. [ 534.164604][T23837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5754'. [ 534.394599][T23787] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.401906][T23787] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.403167][T23855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 534.413412][T23787] bridge_slave_0: entered allmulticast mode [ 534.426951][T23787] bridge_slave_0: entered promiscuous mode [ 534.436118][T23787] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.443413][T23787] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.451055][T23860] FAULT_INJECTION: forcing a failure. [ 534.451055][T23860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.465940][T23787] bridge_slave_1: entered allmulticast mode [ 534.472503][T23860] CPU: 0 UID: 0 PID: 23860 Comm: syz.1.5759 Not tainted syzkaller #0 PREEMPT(full) [ 534.472527][T23860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 534.472537][T23860] Call Trace: [ 534.472545][T23860] [ 534.472552][T23860] dump_stack_lvl+0xe8/0x150 [ 534.472584][T23860] should_fail_ex+0x412/0x560 [ 534.472611][T23860] _copy_to_user+0x31/0xb0 [ 534.472638][T23860] simple_read_from_buffer+0xe1/0x170 [ 534.472668][T23860] proc_fail_nth_read+0x1bb/0x230 [ 534.472728][T23860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.472754][T23860] ? rw_verify_area+0x2a6/0x4d0 [ 534.472772][T23860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.472798][T23860] vfs_read+0x20c/0xa70 [ 534.472814][T23860] ? fdget_pos+0x246/0x320 [ 534.472836][T23860] ? __local_bh_enable_ip+0xd0/0x130 [ 534.472864][T23860] ? __pfx___mutex_lock+0x10/0x10 [ 534.472884][T23860] ? __pfx_vfs_read+0x10/0x10 [ 534.472904][T23860] ? __fget_files+0x2a/0x420 [ 534.472932][T23860] ? __fget_files+0x3a0/0x420 [ 534.472955][T23860] ? __fget_files+0x2a/0x420 [ 534.472985][T23860] ksys_read+0x150/0x270 [ 534.473005][T23860] ? __pfx_ksys_read+0x10/0x10 [ 534.473034][T23860] do_syscall_64+0x14d/0xf80 [ 534.473051][T23860] ? trace_irq_disable+0x3b/0x150 [ 534.473076][T23860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.473094][T23860] ? clear_bhb_loop+0x40/0x90 [ 534.473116][T23860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.473133][T23860] RIP: 0033:0x7fb01a95cfce [ 534.473148][T23860] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 534.473163][T23860] RSP: 002b:00007fb018bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.473181][T23860] RAX: ffffffffffffffda RBX: 00007fb018bf66c0 RCX: 00007fb01a95cfce [ 534.473194][T23860] RDX: 000000000000000f RSI: 00007fb018bf60a0 RDI: 0000000000000004 [ 534.473203][T23860] RBP: 00007fb018bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.473214][T23860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.473224][T23860] R13: 00007fb01ac16128 R14: 00007fb01ac16090 R15: 00007ffd5adb44c8 [ 534.473254][T23860] [ 534.475632][T23787] bridge_slave_1: entered promiscuous mode [ 534.527760][T23855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 534.631951][T23787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.662246][T23855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 534.703622][T23787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.737711][T23855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 534.753176][T23855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 534.763212][T23855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 534.773337][T23855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 534.783307][T23855] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 535.204821][T23863] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 535.287722][T23787] team0: Port device team_slave_0 added [ 535.293941][T23878] netlink: 'syz.1.5766': attribute type 1 has an invalid length. [ 535.315284][T23787] team0: Port device team_slave_1 added [ 535.395508][T23787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.404200][T23881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.408388][T23787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.447787][T23787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.464104][T23787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.482134][T23787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.492561][T23881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.513959][T23787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.623511][T23787] hsr_slave_0: entered promiscuous mode [ 535.632649][T23787] hsr_slave_1: entered promiscuous mode [ 535.647302][T23898] __nla_validate_parse: 2 callbacks suppressed [ 535.647319][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5774'. [ 535.679378][T23894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5772'. [ 535.688465][T23894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5772'. [ 535.697756][T23894] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5772'. [ 535.721605][T23898] bond0: entered promiscuous mode [ 535.729051][T23898] bond_slave_1: entered promiscuous mode [ 535.735981][T23898] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 535.749331][T23898] bond0: left promiscuous mode [ 535.755228][T23898] bond_slave_1: left promiscuous mode [ 535.764545][T23898] mac80211_hwsim hwsim42 wlan1: left promiscuous mode [ 535.774151][T23905] netlink: 'syz.1.5774': attribute type 10 has an invalid length. [ 535.789504][T23900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5772'. [ 535.801144][T23900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5772'. [ 535.810345][T23900] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5772'. [ 535.838908][T23905] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.855767][T23905] bridge_slave_1: left allmulticast mode [ 535.881584][T23905] bridge_slave_1: left promiscuous mode [ 535.888412][T23905] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.917929][T23905] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 535.995873][ T5835] Bluetooth: hci7: command tx timeout [ 536.128595][T23920] netlink: 'syz.1.5781': attribute type 10 has an invalid length. [ 536.186848][T23787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.209081][T23920] bridge0: port 3(gretap0) entered disabled state [ 536.244598][T23920] bridge0: port 3(gretap0) entered blocking state [ 536.251218][T23920] bridge0: port 3(gretap0) entered forwarding state [ 536.264248][T23920] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 536.350113][T23787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.490896][T23787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.601538][T23787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.822006][T23972] ip6tnl0: Caught tx_queue_len zero misconfig [ 536.838226][T23972] netlink: 'syz.5.5796': attribute type 2 has an invalid length. [ 536.887524][T23787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 536.906195][T23787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 536.932002][T23972] syzkaller1: entered promiscuous mode [ 536.937619][T23972] syzkaller1: entered allmulticast mode [ 536.955525][T23787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 536.981359][T23787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 537.028244][T23982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5800'. [ 537.278708][T23787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.331147][T23787] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.361686][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.368840][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.392910][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.400096][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.570737][T24015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.578026][T24015] IPv6: NLM_F_CREATE should be set when creating new route [ 537.700163][T24018] block nbd6: NBD_DISCONNECT [ 537.809116][T23787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.895659][T23787] veth0_vlan: entered promiscuous mode [ 537.909178][T23787] veth1_vlan: entered promiscuous mode [ 537.951393][T23787] veth0_macvtap: entered promiscuous mode [ 537.963434][T23787] veth1_macvtap: entered promiscuous mode [ 537.998500][T23787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.026914][T23787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.056432][T11763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.071022][T11763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.075590][ T5835] Bluetooth: hci7: command tx timeout [ 538.134167][T11763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.161793][ T1054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.325170][T12409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.333266][T12409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.431297][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.450160][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.490546][T24056] netlink: 'syz.2.5824': attribute type 33 has an invalid length. [ 538.593038][T24056] bond17: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 538.606152][T24056] bond17 (unregistering): Released all slaves [ 538.831760][T24081] netlink: 'syz.0.5830': attribute type 2 has an invalid length. [ 538.853075][T24083] netlink: 'syz.5.5831': attribute type 21 has an invalid length. [ 538.877369][T24083] IPv6: NLM_F_CREATE should be specified when creating new route [ 538.919891][T24089] ip6t_srh: unknown srh match flags 5F28 [ 538.930281][T24090] net_ratelimit: 5651 callbacks suppressed [ 538.930298][T24090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.956396][T24089] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5833'. [ 538.987052][T24089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.199588][T24103] netlink: 'syz.2.5839': attribute type 33 has an invalid length. [ 539.320163][T24103] bond17: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 539.333713][T24103] bond17 (unregistering): Released all slaves [ 539.362683][T24108] lo speed is unknown, defaulting to 1000 [ 539.391245][T24108] lo speed is unknown, defaulting to 1000 [ 539.499127][T24117] bond1: Unable to set up delay as MII monitoring is disabled [ 539.543256][T24117] bond1 (unregistering): Released all slaves [ 539.582907][T23788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 539.586946][T24130] netlink: 'syz.6.5845': attribute type 16 has an invalid length. [ 539.619006][T23788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 539.628430][T23788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 539.637477][T23788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 539.646702][T23788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.657419][T24108] lo speed is unknown, defaulting to 1000 [ 539.669978][T24121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.721481][T24121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.747629][T24121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.773042][T24121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.038234][T14661] syz_tun (unregistering): left allmulticast mode [ 540.116960][T24142] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 540.138934][T24142] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 540.152880][ T5835] Bluetooth: hci7: command tx timeout [ 540.231510][T12409] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.249509][T12409] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.300380][T24142] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 540.310912][T24142] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 540.350295][T12409] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.393300][T12409] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.426480][T24128] wg1 speed is unknown, defaulting to 1000 [ 540.426933][ T9] wg1 speed is unknown, defaulting to 1000 [ 540.438637][T24108] infiniband syz0: set active [ 540.443561][T24108] infiniband syz0: added lo [ 540.461300][ T9] syz2: Port: 1 Link DOWN [ 540.476231][T24142] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 540.503221][T24108] RDS/IB: syz0: added [ 540.507419][T24108] smc: adding ib device syz0 with port count 1 [ 540.514194][T24108] smc: ib device syz0 port 1 has no pnetid [ 540.529304][T24142] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 540.547025][ T10] lo speed is unknown, defaulting to 1000 [ 540.558958][T24157] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5854'. [ 540.575622][T12409] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.590451][T12409] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.613722][ T9] lo speed is unknown, defaulting to 1000 [ 540.637049][T24142] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 540.648627][T24142] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 540.667372][T24108] lo speed is unknown, defaulting to 1000 [ 540.685963][T12409] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.704405][T12409] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.880717][T12408] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 540.890579][T12408] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 540.920971][T12408] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 540.929526][T12408] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 541.082004][ T1165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.100853][T24171] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5859'. [ 541.120874][ T1165] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 541.131511][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5859'. [ 541.160282][T12408] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 541.172198][T12408] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 541.183472][T12409] gretap0: left allmulticast mode [ 541.191332][T12409] gretap0: left promiscuous mode [ 541.201011][T12409] bridge0: port 3(gretap0) entered disabled state [ 541.255872][T24178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.263156][T24178] IPv6: NLM_F_CREATE should be set when creating new route [ 541.451447][T12409] dvmrp0 (unregistering): left allmulticast mode [ 541.486440][T12409] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 541.597010][T12409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.609538][T12409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.620251][T12409] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 541.635199][T12409] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 541.645311][T12409] bond0 (unregistering): Released all slaves [ 541.655874][T12409] bond1 (unregistering): (slave veth3): Releasing active interface [ 541.665198][T12409] bond1 (unregistering): Released all slaves [ 541.680397][T12409] bond2 (unregistering): (slave veth5): Releasing active interface [ 541.690386][T12409] bond2 (unregistering): Released all slaves [ 541.705900][T12409] bond3 (unregistering): Released all slaves [ 541.721653][T12409] bond4 (unregistering): (slave lo): Releasing backup interface [ 541.735640][T12409] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 541.747916][T12409] bond4 (unregistering): Released all slaves [ 541.754450][ T5835] Bluetooth: hci2: command tx timeout [ 541.766415][T12409] bond5 (unregistering): Released all slaves [ 541.778475][T12409] bond6 (unregistering): Released all slaves [ 541.790835][T12409] bond7 (unregistering): Released all slaves [ 541.809966][T12409] bond8 (unregistering): Released all slaves [ 541.826589][T12409] bond9 (unregistering): (slave veth9): Releasing active interface [ 541.834682][T12409] veth0_to_bond: entered promiscuous mode [ 541.843960][T12409] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 541.854709][T12409] bond9 (unregistering): Released all slaves [ 541.876153][T24108] lo speed is unknown, defaulting to 1000 [ 541.923897][T24128] chnl_net:caif_netlink_parms(): no params data found [ 542.060371][T12409] tipc: Left network mode [ 542.265674][T12409] IPVS: stopping backup sync thread 17761 ... [ 542.334858][T24128] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.372244][T24128] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.389071][T24128] bridge_slave_0: entered allmulticast mode [ 542.428211][T24128] bridge_slave_0: entered promiscuous mode [ 542.429724][T24209] FAULT_INJECTION: forcing a failure. [ 542.429724][T24209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.456571][T24128] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.477475][T24128] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.500556][T24128] bridge_slave_1: entered allmulticast mode [ 542.505932][T24209] CPU: 1 UID: 0 PID: 24209 Comm: syz.6.5869 Not tainted syzkaller #0 PREEMPT(full) [ 542.505957][T24209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 542.505968][T24209] Call Trace: [ 542.505976][T24209] [ 542.505984][T24209] dump_stack_lvl+0xe8/0x150 [ 542.506014][T24209] should_fail_ex+0x412/0x560 [ 542.506040][T24209] _copy_from_iter+0x1d3/0x1670 [ 542.506063][T24209] ? trace_kmem_cache_alloc+0x29/0xf0 [ 542.506106][T24209] ? __pfx__copy_from_iter+0x10/0x10 [ 542.506133][T24209] ? skb_page_frag_refill+0x1be/0x310 [ 542.506168][T24209] tcp_sendmsg_locked+0x2151/0x5490 [ 542.506237][T24209] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 542.506261][T24209] ? tcp_sendmsg+0x21/0x50 [ 542.506281][T24209] ? __local_bh_enable_ip+0xd0/0x130 [ 542.506308][T24209] tcp_sendmsg+0x2f/0x50 [ 542.506326][T24209] __sys_sendto+0x627/0x7a0 [ 542.506352][T24209] ? __pfx___sys_sendto+0x10/0x10 [ 542.506372][T24209] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 542.506403][T24209] ? __fget_files+0x3a0/0x420 [ 542.506439][T24209] ? ksys_write+0x242/0x270 [ 542.506460][T24209] ? __pfx_ksys_write+0x10/0x10 [ 542.506483][T24209] __x64_sys_sendto+0xde/0x100 [ 542.506510][T24209] do_syscall_64+0x14d/0xf80 [ 542.506527][T24209] ? trace_irq_disable+0x3b/0x150 [ 542.506551][T24209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.506570][T24209] ? clear_bhb_loop+0x40/0x90 [ 542.506592][T24209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.506610][T24209] RIP: 0033:0x7fc818b9c799 [ 542.506628][T24209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.506644][T24209] RSP: 002b:00007fc819984028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 542.506664][T24209] RAX: ffffffffffffffda RBX: 00007fc818e15fa0 RCX: 00007fc818b9c799 [ 542.506678][T24209] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 542.506691][T24209] RBP: 00007fc819984090 R08: 0000000000000000 R09: 0000000000000000 [ 542.506704][T24209] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 542.506716][T24209] R13: 00007fc818e16038 R14: 00007fc818e15fa0 R15: 00007ffdd2fc9c08 [ 542.506748][T24209] [ 542.656937][T24214] netlink: 'syz.2.5870': attribute type 1 has an invalid length. [ 542.788536][T24128] bridge_slave_1: entered promiscuous mode [ 542.813130][T24214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5870'. [ 542.928685][T24128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.002305][T24108] lo speed is unknown, defaulting to 1000 [ 543.016120][T24128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.349582][T24128] team0: Port device team_slave_0 added [ 543.370723][T24240] netlink: 'syz.6.5877': attribute type 1 has an invalid length. [ 543.379825][T24242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5878'. [ 543.385370][T24128] team0: Port device team_slave_1 added [ 543.409476][T24240] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5877'. [ 543.420859][T24242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5878'. [ 543.586333][T24128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.610204][T24128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.677501][T24128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.712391][T24128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.719364][T24128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.760113][T24128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.792049][T24108] lo speed is unknown, defaulting to 1000 [ 543.832741][ T5835] Bluetooth: hci2: command tx timeout [ 543.862354][T24257] netlink: 576 bytes leftover after parsing attributes in process `syz.6.5881'. [ 543.946472][T24259] sch_fq: defrate 0 ignored. [ 544.167919][T24128] hsr_slave_0: entered promiscuous mode [ 544.193363][T24128] hsr_slave_1: entered promiscuous mode [ 544.205819][T24128] debugfs: 'hsr0' already exists in 'hsr' [ 544.241972][T24128] Cannot create hsr debugfs directory [ 544.414092][T24289] netlink: 'syz.2.5886': attribute type 9 has an invalid length. [ 544.517136][T24108] lo speed is unknown, defaulting to 1000 [ 545.242266][T24108] lo speed is unknown, defaulting to 1000 [ 545.522338][ T30] audit: type=1107 audit(1772356270.196:4): pid=24325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 545.923289][ T5835] Bluetooth: hci2: command tx timeout [ 546.050788][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5900'. [ 546.060183][T24108] lo speed is unknown, defaulting to 1000 [ 546.073753][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5900'. [ 546.074924][T24351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5901'. [ 546.226594][T24128] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.311711][T24128] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.319120][T24361] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20003 [ 546.366049][T24128] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.412911][T24128] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 546.650426][T24377] syz_tun: entered allmulticast mode [ 546.659883][T24128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.695261][T24128] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.719912][T12406] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.727093][T12406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.785842][T12406] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.793033][T12406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.844443][T24108] lo speed is unknown, defaulting to 1000 [ 547.130288][T24394] syzkaller0: entered promiscuous mode [ 547.164055][T24394] syzkaller0: entered allmulticast mode [ 547.206816][T24394] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5909'. [ 547.237847][T24394] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 547.514740][T24128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.676646][T24108] lo speed is unknown, defaulting to 1000 [ 547.764961][T24128] veth0_vlan: entered promiscuous mode [ 547.849260][T24128] veth1_vlan: entered promiscuous mode [ 548.044758][T24128] veth0_macvtap: entered promiscuous mode [ 548.071362][T24128] veth1_macvtap: entered promiscuous mode [ 548.080141][ T5835] Bluetooth: hci2: command tx timeout [ 548.189787][T24128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.216468][T24108] lo speed is unknown, defaulting to 1000 [ 548.226885][T24128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.262940][T24447] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5919'. [ 548.296898][T11763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.314230][T11763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.334916][T11763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.353241][T12406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.532557][T24457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5921'. [ 548.544664][T24457] openvswitch: netlink: Unknown nsh attribute 0 [ 548.618826][T24461] SET target dimension over the limit! [ 548.628983][T24461] netlink: 'syz.0.5922': attribute type 1 has an invalid length. [ 548.642434][T24108] lo speed is unknown, defaulting to 1000 [ 548.644902][T24461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5922'. [ 549.080952][T24476] Cannot find add_set index 0 as target [ 549.261671][T24480] netlink: 'syz.5.5924': attribute type 30 has an invalid length. [ 549.365509][T12409] hsr_slave_0: left promiscuous mode [ 549.373747][T12409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.391804][T12409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.402037][T12409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.411759][T12409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.429827][T12409] veth1_vlan: left allmulticast mode [ 549.436076][T12409] veth1_macvtap: left promiscuous mode [ 549.441855][T12409] veth1_vlan: left promiscuous mode [ 549.453023][T12409] veth0_vlan: left promiscuous mode [ 549.698698][T12409] team0 (unregistering): Port device batadv1 removed [ 549.890236][T12409] team0 (unregistering): Port device team_slave_1 removed [ 549.925221][T12409] team0 (unregistering): Port device team_slave_0 removed [ 550.232254][T24508] syzkaller1: entered promiscuous mode [ 550.237929][T24508] syzkaller1: entered allmulticast mode [ 550.247487][T24508] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.5928'. [ 550.258817][T24508] netlink: zone id is out of range [ 550.264791][T24508] netlink: zone id is out of range [ 550.269991][T24508] netlink: zone id is out of range [ 550.275533][T24508] netlink: zone id is out of range [ 550.280681][T24508] netlink: zone id is out of range [ 550.286213][T24508] netlink: zone id is out of range [ 550.291343][T24508] netlink: zone id is out of range [ 550.296996][T24508] netlink: set zone limit has 4 unknown bytes [ 550.441940][T12409] IPVS: stop unused estimator thread 0... [ 550.921143][T24434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.996674][T24510] netlink: 'syz.5.5927': attribute type 1 has an invalid length. [ 551.003266][T10697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.024143][T10697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.040684][T24510] netlink: 'syz.5.5927': attribute type 1 has an invalid length. [ 551.177563][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.212216][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.392894][T24538] Cannot find add_set index 65532 as target [ 551.863821][T24553] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5937'. [ 552.305535][T24584] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5947'. [ 552.516471][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 552.531087][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 552.541282][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 552.549799][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 552.563855][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 552.639322][T14942] syz_tun (unregistering): left allmulticast mode [ 552.773770][T24595] lo speed is unknown, defaulting to 1000 [ 552.979296][T24595] chnl_net:caif_netlink_parms(): no params data found [ 553.043992][T24595] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.051116][T24595] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.058351][T24595] bridge_slave_0: entered allmulticast mode [ 553.065240][T24595] bridge_slave_0: entered promiscuous mode [ 553.074730][T24595] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.081844][T24595] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.089203][T24595] bridge_slave_1: entered allmulticast mode [ 553.096245][T24595] bridge_slave_1: entered promiscuous mode [ 553.125499][T24595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.137810][T24595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.166312][T24595] team0: Port device team_slave_0 added [ 553.175324][T24595] team0: Port device team_slave_1 added [ 553.197502][T24595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.205136][T24595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.231073][T24595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.243569][T24595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.250513][T24595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.277782][T24595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.316130][T24595] hsr_slave_0: entered promiscuous mode [ 553.322653][T24595] hsr_slave_1: entered promiscuous mode [ 553.328709][T24595] debugfs: 'hsr0' already exists in 'hsr' [ 553.334477][T24595] Cannot create hsr debugfs directory [ 553.426020][T24595] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 553.436382][T24595] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 553.478845][T24595] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 553.488905][T24595] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 553.525326][T24595] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 553.535586][T24595] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 553.576570][T24595] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 553.587947][T24595] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 554.552596][T23788] Bluetooth: hci1: command 0x0405 tx timeout [ 554.632557][ T5835] Bluetooth: hci5: command tx timeout [ 554.914134][T24556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.953747][T24595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 555.015263][T24595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 555.068227][T24595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 555.110850][T24595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 555.350868][T24639] bond0: Caught tx_queue_len zero misconfig [ 555.487572][T24595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.546046][T24595] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.599083][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.606258][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.636402][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.643935][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.894725][T24664] netlink: 'syz.6.5967': attribute type 64 has an invalid length. [ 555.927486][T24664] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5967'. [ 555.951301][T24667] netlink: 'syz.5.5968': attribute type 3 has an invalid length. [ 555.959966][T24667] netlink: 'syz.5.5968': attribute type 1 has an invalid length. [ 555.992606][T24667] netlink: 212 bytes leftover after parsing attributes in process `syz.5.5968'. [ 556.022026][T24671] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5968'. [ 556.053824][T24667] NCSI netlink: No device for ifindex 813332851 [ 556.064798][T24670] netlink: 'syz.0.5969': attribute type 1 has an invalid length. [ 556.089373][T24672] netlink: 'syz.0.5969': attribute type 1 has an invalid length. [ 556.124675][T24672] netlink: 'syz.0.5969': attribute type 1 has an invalid length. [ 556.142020][T24670] netlink: 'syz.0.5969': attribute type 1 has an invalid length. [ 556.249842][T24686] netlink: 'syz.6.5974': attribute type 2 has an invalid length. [ 556.257833][T24686] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5974'. [ 556.269307][T24685] openvswitch: netlink: IPv4 tun info is not correct [ 556.276179][T24595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.293486][T24685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5973'. [ 556.373707][T24691] netlink: 'syz.0.5976': attribute type 1 has an invalid length. [ 556.428715][T24595] veth0_vlan: entered promiscuous mode [ 556.453211][T24595] veth1_vlan: entered promiscuous mode [ 556.578454][T24595] veth0_macvtap: entered promiscuous mode [ 556.591260][T24703] syz.5.5979 uses old SIOCAX25GETINFO [ 556.605868][T24595] veth1_macvtap: entered promiscuous mode [ 556.669450][T24595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.708501][T24595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.716879][ T5835] Bluetooth: hci5: command tx timeout [ 556.770631][T12406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.801093][T12406] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.844539][T12406] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.887650][T12406] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.968783][T24729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.970563][T24725] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 556.998869][T24725] bond4 (unregistering): Released all slaves [ 557.087771][T24735] netlink: 'syz.5.5989': attribute type 1 has an invalid length. [ 557.106848][T24723] syzkaller0: entered promiscuous mode [ 557.112870][T24723] syzkaller0: entered allmulticast mode [ 558.677794][T24753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5994'. [ 558.691600][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.712613][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.777265][T24756] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 558.793927][ T5835] Bluetooth: hci5: command tx timeout [ 558.801634][T24756] bridge2: entered allmulticast mode [ 558.860633][T12406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.883841][T24761] syzkaller0: entered promiscuous mode [ 558.889493][T12406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.898220][T24761] syzkaller0: entered allmulticast mode [ 558.956879][T24767] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.6000'. [ 558.983498][T24774] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 559.261727][T24796] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6004'. [ 559.482246][T24812] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6011'. [ 559.736046][T24826] s5ÿÿø: renamed from vlan1 (while UP) [ 559.769383][T24828] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6016'. [ 559.923743][T24843] netlink: 'syz.2.6022': attribute type 9 has an invalid length. [ 559.926678][T24845] netlink: 'syz.2.6022': attribute type 9 has an invalid length. [ 559.943577][T24843] netlink: 'syz.2.6022': attribute type 11 has an invalid length. [ 559.951414][T24843] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.6022'. [ 559.969680][T24845] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.6022'. [ 559.980591][T24845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6022'. [ 559.986928][T24849] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6023'. [ 559.998008][T24843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6022'. [ 560.275914][T24858] bond4: (slave gretap2): making interface the new active one [ 560.304672][T24858] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 560.873002][ T5835] Bluetooth: hci5: command tx timeout [ 561.705631][T24909] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 561.835560][T24909] nbd2: detected capacity change from 0 to 127 [ 561.843835][ T5835] block nbd2: Receive control failed (result -32) [ 561.852419][T24170] block nbd2: Send control failed (result -32) [ 561.893760][T24170] block nbd2: Request send failed, requeueing [ 561.904830][ T2320] block nbd2: Dead connection, failed to find a fallback [ 561.912857][ T2320] block nbd2: shutting down sockets [ 561.918558][ T2320] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 561.929158][ T2320] Buffer I/O error on dev nbd2, logical block 0, async page read [ 561.937124][T24170] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 561.947116][T24170] Buffer I/O error on dev nbd2, logical block 1, async page read [ 561.955789][T24170] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 561.965508][T24170] Buffer I/O error on dev nbd2, logical block 2, async page read [ 561.973411][T24170] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 561.984213][T24170] Buffer I/O error on dev nbd2, logical block 3, async page read [ 561.992010][T24170] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 562.004120][T24170] Buffer I/O error on dev nbd2, logical block 0, async page read [ 562.011916][T24170] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 562.032456][T24170] Buffer I/O error on dev nbd2, logical block 1, async page read [ 562.042649][T24170] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 562.052746][T24170] Buffer I/O error on dev nbd2, logical block 2, async page read [ 562.060616][T24170] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 562.070328][T24170] Buffer I/O error on dev nbd2, logical block 3, async page read [ 562.108283][T24170] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 562.120264][T24170] Buffer I/O error on dev nbd2, logical block 0, async page read [ 562.128351][T24170] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 562.150833][T24170] Buffer I/O error on dev nbd2, logical block 1, async page read [ 562.173789][T24170] ldm_validate_partition_table(): Disk read failed. [ 562.191672][T24170] Dev nbd2: unable to read RDB block 0 [ 562.199773][T24170] nbd2: unable to read partition table [ 562.275397][T24170] ldm_validate_partition_table(): Disk read failed. [ 562.276152][T24928] validate_nla: 4 callbacks suppressed [ 562.276168][T24928] netlink: 'syz.0.6043': attribute type 1 has an invalid length. [ 562.314243][T24170] Dev nbd2: unable to read RDB block 0 [ 562.320290][T24170] nbd2: unable to read partition table [ 562.476534][T24941] netlink: 'syz.5.6048': attribute type 33 has an invalid length. [ 562.540014][T24941] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 562.587229][T24941] bond8 (unregistering): Released all slaves [ 562.717446][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.426876][T24980] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.434348][T24980] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.500770][T25001] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 563.577993][T25006] netlink: 'syz.6.6068': attribute type 33 has an invalid length. [ 563.736549][T24980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.768648][T24980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.103119][T24983] geneve2: entered promiscuous mode [ 564.108449][T24983] geneve2: entered allmulticast mode [ 564.179234][T25006] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 564.217482][T25019] __nla_validate_parse: 18 callbacks suppressed [ 564.217502][T25019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6069'. [ 564.238138][T25006] bond5 (unregistering): Released all slaves [ 564.267840][T25021] netlink: 'syz.0.6070': attribute type 1 has an invalid length. [ 564.276945][T25021] netlink: 476 bytes leftover after parsing attributes in process `syz.0.6070'. [ 564.291768][T25021] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.6070'. [ 564.485704][T25035] netlink: 'syz.5.6074': attribute type 1 has an invalid length. [ 564.535450][T25039] netlink: 'syz.0.6076': attribute type 11 has an invalid length. [ 564.554886][T25035] macvlan2: entered promiscuous mode [ 564.560325][T25035] macvlan2: entered allmulticast mode [ 564.566978][T25035] bond8: (slave macvlan2): Opening slave failed [ 564.585933][T25039] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6076'. [ 564.600966][T25043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6077'. [ 564.617942][T25043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.622422][T25041] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6078'. [ 564.681520][T25043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.780386][T25054] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 565.092376][T25067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 565.099618][T25067] IPv6: NLM_F_CREATE should be set when creating new route [ 565.209106][T25072] netlink: 'syz.6.6090': attribute type 1 has an invalid length. [ 565.295300][T25075] macvlan0: entered promiscuous mode [ 565.300313][T25079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6093'. [ 565.300678][T25075] macvlan0: entered allmulticast mode [ 565.317037][T25075] bond5: (slave macvlan0): Opening slave failed [ 565.412930][T25081] dvmrp6: entered allmulticast mode [ 565.419379][T25083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6096'. [ 565.425121][T25085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6097'. [ 565.526723][T25083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6096'. [ 565.673565][T25103] netlink: 'syz.2.6101': attribute type 8 has an invalid length. [ 565.707906][T25108] netlink: 'syz.1.6103': attribute type 83 has an invalid length. [ 565.717367][T25108] Cannot find map_set index 65533 as target [ 565.861608][T25116] netlink: 'syz.2.6105': attribute type 33 has an invalid length. [ 565.916434][T25124] netlink: 'syz.1.6108': attribute type 15 has an invalid length. [ 566.077534][T25130] openvswitch: netlink: Flow key attr not present in new flow. [ 566.136531][T25099] lo speed is unknown, defaulting to 1000 [ 566.298161][T25138] macvlan2: entered promiscuous mode [ 566.303654][T25138] macvlan2: entered allmulticast mode [ 566.312623][T25138] bond9: entered promiscuous mode [ 566.318402][T25138] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 566.328219][T25138] bond9: left promiscuous mode [ 566.356890][T25142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.908410][T25172] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 567.014920][T25179] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 569.531442][T25251] validate_nla: 1 callbacks suppressed [ 569.531463][T25251] netlink: 'syz.2.6141': attribute type 33 has an invalid length. [ 569.538233][T25249] __nla_validate_parse: 12 callbacks suppressed [ 569.538249][T25249] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6140'. [ 569.566569][T25251] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 569.573531][T25252] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6142'. [ 569.597179][T25251] bond1 (unregistering): Released all slaves [ 569.597368][T25249] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6140'. [ 569.827161][T25269] delete_channel: no stack [ 569.841424][T25270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6147'. [ 569.881419][T25268] delete_channel: no stack [ 570.038747][T25283] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6151'. [ 570.054331][T25285] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6153'. [ 570.117839][T25291] Unsupported ieee802154 address type: 0 [ 570.215856][T25294] netlink: 'syz.2.6157': attribute type 33 has an invalid length. [ 570.287261][T25294] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 570.307688][T25294] bond1 (unregistering): Released all slaves [ 570.319198][T25306] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6159'. [ 570.342369][T25304] tipc: Enabling of bearer rejected, failed to enable media [ 570.358723][T25306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.412964][T25306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.425961][T25310] netlink: 'syz.0.6161': attribute type 1 has an invalid length. [ 570.445123][T25306] bond0 (unregistering): Released all slaves [ 570.595652][T25305] lec:lec_atm_close: lec0: Shut down! [ 570.719955][T25324] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6165'. [ 570.975430][T25344] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 571.413468][T25374] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6179'. [ 571.721289][T25384] netlink: 'syz.0.6181': attribute type 2 has an invalid length. [ 571.734081][T25384] netlink: 'syz.0.6181': attribute type 5 has an invalid length. [ 571.760483][T25384] netlink: 'syz.0.6181': attribute type 10 has an invalid length. [ 571.804034][T25384] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.811830][T25384] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.896143][T25384] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.903356][T25384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.910858][T25384] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.918049][T25384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.930942][T25384] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 572.012887][ T1165] lec:lec_start_xmit: lec0:No lecd attached [ 572.136432][T25392] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6184'. [ 572.171263][T25370] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 572.205166][T25399] netlink: 'syz.2.6186': attribute type 1 has an invalid length. [ 572.219207][T25399] netlink: 'syz.2.6186': attribute type 1 has an invalid length. [ 572.570762][T25409] syzkaller0: entered promiscuous mode [ 572.607627][T25409] syzkaller0: entered allmulticast mode [ 573.127272][T25432] x_tables: duplicate underflow at hook 2 [ 573.524637][T25447] netlink: 'syz.0.6198': attribute type 26 has an invalid length. [ 573.555971][T25447] netlink: 'syz.0.6198': attribute type 26 has an invalid length. [ 574.125174][T25481] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 574.253467][T25484] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 574.272459][T25484] bond1 (unregistering): Released all slaves [ 574.319737][ T9] lo speed is unknown, defaulting to 1000 [ 574.737444][T25527] validate_nla: 2 callbacks suppressed [ 574.737460][T25527] netlink: 'syz.1.6228': attribute type 1 has an invalid length. [ 574.804754][T25527] team0: Port device team_slave_0 removed [ 574.825680][T25531] netlink: 'syz.6.6230': attribute type 33 has an invalid length. [ 574.830717][T25527] bond0: (slave team_slave_0): Enslaving as a backup interface with a down link [ 574.888274][T25531] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 574.901323][T25531] bond6 (unregistering): Released all slaves [ 574.911499][T25537] __nla_validate_parse: 12 callbacks suppressed [ 574.911512][T25537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6229'. [ 574.933338][T25538] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6231'. [ 575.214266][T25560] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6236'. [ 575.217833][T25562] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6236'. [ 575.389699][T25569] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6238'. [ 575.469805][T25573] IPv6: sit1: Disabled Multicast RS [ 575.599453][T25579] tipc: Enabling of bearer rejected, failed to enable media [ 575.624869][T25579] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6242'. [ 575.642032][T25580] netlink: 'syz.1.6243': attribute type 1 has an invalid length. [ 575.657391][T25582] netlink: 'syz.6.6244': attribute type 33 has an invalid length. [ 575.674752][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058d87c00: rx timeout, send abort [ 575.685537][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058d87c00: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 575.768713][T25580] bond1 (unregistering): Released all slaves [ 575.777273][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6247'. [ 575.807386][T25594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6243'. [ 575.833760][T25582] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 575.845980][T25596] netlink: 'syz.0.6247': attribute type 1 has an invalid length. [ 575.856256][T25596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6247'. [ 575.866013][T25596] netlink: 658 bytes leftover after parsing attributes in process `syz.0.6247'. [ 575.877773][T25596] netlink: 'syz.0.6247': attribute type 1 has an invalid length. [ 575.887566][T25582] bond6 (unregistering): Released all slaves [ 576.173492][T25613] syzkaller0: entered promiscuous mode [ 576.178998][T25613] syzkaller0: entered allmulticast mode [ 576.753812][T25660] veth0: Caught tx_queue_len zero misconfig [ 576.869859][T25658] bond1 (unregistering): Released all slaves [ 577.067255][T25681] netlink: 'syz.6.6280': attribute type 1 has an invalid length. [ 577.246792][T25694] netlink: 'syz.5.6285': attribute type 1 has an invalid length. [ 577.672468][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 577.682188][ C1] lec:lec_tx_timeout: lec0 [ 577.687186][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 578.056861][T25743] netlink: 'syz.1.6301': attribute type 1 has an invalid length. [ 578.105205][T25743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.130696][T25736] bond1: (slave ip6erspan0): making interface the new active one [ 578.143664][T25736] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 578.359287][T25749] netlink: 'syz.6.6304': attribute type 1 has an invalid length. [ 578.410868][T25749] macvlan0: entered promiscuous mode [ 578.416242][T25749] macvlan0: entered allmulticast mode [ 578.424040][T25749] bond6: entered promiscuous mode [ 578.429660][T25749] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 578.447431][T25749] bond6: left promiscuous mode [ 579.290389][T25762] lo speed is unknown, defaulting to 1000 [ 579.332829][T25808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.547654][T25827] syzkaller0: entered promiscuous mode [ 579.576321][T25827] syzkaller0: entered allmulticast mode [ 579.937581][T25853] validate_nla: 1 callbacks suppressed [ 579.937600][T25853] netlink: 'syz.1.6339': attribute type 22 has an invalid length. [ 579.951098][T25853] __nla_validate_parse: 26 callbacks suppressed [ 579.951115][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6339'. [ 579.962871][T25854] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.6337'. [ 579.983099][T12397] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.991902][T12397] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.997279][T25853] netlink: 'syz.1.6339': attribute type 22 has an invalid length. [ 580.009093][T12397] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.018282][T12397] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.031105][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6339'. [ 580.098064][T25765] lo speed is unknown, defaulting to 1000 [ 580.385570][T25869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6343'. [ 582.702112][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 582.710163][ C1] lec:lec_tx_timeout: lec0 [ 582.714793][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 582.821386][T25846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.964770][T25895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6351'. [ 582.991571][T25895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.027379][T25903] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6355'. [ 583.038925][T25902] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6355'. [ 583.040473][T25895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.065741][T25898] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6352'. [ 583.248884][T25916] netlink: 412 bytes leftover after parsing attributes in process `syz.2.6358'. [ 583.299518][T25916] veth0: entered promiscuous mode [ 583.324155][T25916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6358'. [ 583.648575][T25935] netlink: 'syz.2.6364': attribute type 1 has an invalid length. [ 583.658134][T25935] netlink: 'syz.2.6364': attribute type 1 has an invalid length. [ 583.674020][T25935] nbd: must specify a size in bytes for the device [ 583.766630][T25941] netlink: 'syz.2.6367': attribute type 2 has an invalid length. [ 585.774480][T26067] __nla_validate_parse: 3 callbacks suppressed [ 585.774497][T26067] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.6404'. [ 585.799418][T26075] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 4, id = 0 [ 585.819629][T26067] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.6404'. [ 585.981881][T26089] veth0: entered promiscuous mode [ 586.096476][T26086] xt_hashlimit: size too large, truncated to 1048576 [ 586.260374][T26091] syzkaller0: entered promiscuous mode [ 586.275336][T26091] syzkaller0: entered allmulticast mode [ 586.511971][T26122] netlink: 'syz.0.6416': attribute type 21 has an invalid length. [ 587.722114][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 587.730180][ C1] lec:lec_tx_timeout: lec0 [ 587.734793][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 588.038749][T26122] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6416'. [ 588.048162][T26089] veth0: left promiscuous mode [ 588.054714][T26135] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6419'. [ 588.186868][T26144] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6422'. [ 588.219151][T26154] netlink: 'syz.5.6426': attribute type 1 has an invalid length. [ 588.374491][T17830] NFSD: Failed to start, no listeners configured. [ 588.382993][T26161] macvlan2: entered promiscuous mode [ 588.388313][T26161] macvlan2: entered allmulticast mode [ 588.404482][T26161] bond10: entered promiscuous mode [ 588.410234][T26161] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 588.425716][T26161] bond10: left promiscuous mode [ 588.454539][T26166] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 588.511225][T26172] syzkaller0: entered promiscuous mode [ 588.547173][T26172] syzkaller0: entered allmulticast mode [ 588.575663][T26178] netlink: 'syz.2.6433': attribute type 1 has an invalid length. [ 588.611286][T26180] syzkaller0: entered promiscuous mode [ 588.617068][T26180] syzkaller0: entered allmulticast mode [ 588.659754][T26178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 588.771331][T26190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6438'. [ 588.811118][T26194] netlink: 'syz.1.6440': attribute type 33 has an invalid length. [ 588.815278][T26184] bond1: (slave veth1): Enslaving as an active interface with a down link [ 588.837092][T26178] bond1: (slave veth0_to_bond): making interface the new active one [ 588.853938][T26178] veth0_to_bond: entered promiscuous mode [ 588.860234][T26178] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 588.936871][T26194] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 588.975861][T26194] bond2 (unregistering): Released all slaves [ 589.137140][T26214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6446'. [ 589.235058][T26214] bond11: entered promiscuous mode [ 589.241653][T26214] 8021q: adding VLAN 0 to HW filter on device bond11 [ 589.606651][T26253] netlink: 'syz.2.6458': attribute type 33 has an invalid length. [ 589.653215][T26253] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 589.666134][T26253] bond2 (unregistering): Released all slaves [ 589.773391][T26266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6461'. [ 589.968374][T26274] netlink: 'syz.2.6463': attribute type 1 has an invalid length. [ 589.992512][T26280] netlink: 'syz.6.6468': attribute type 1 has an invalid length. [ 590.010212][T26282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6469'. [ 590.040746][T26274] bond2: entered promiscuous mode [ 590.047582][T26274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 590.104788][T26274] bond2: (slave bridge2): making interface the new active one [ 590.121676][T26274] bridge2: entered promiscuous mode [ 590.144729][T26293] netlink: 'syz.5.6471': attribute type 11 has an invalid length. [ 590.171525][T26274] bridge2: left promiscuous mode [ 590.171552][T26295] FAULT_INJECTION: forcing a failure. [ 590.171552][T26295] name failslab, interval 1, probability 0, space 0, times 0 [ 590.189420][T26295] CPU: 0 UID: 0 PID: 26295 Comm: syz.0.6472 Not tainted syzkaller #0 PREEMPT(full) [ 590.189443][T26295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 590.189453][T26295] Call Trace: [ 590.189460][T26295] [ 590.189467][T26295] dump_stack_lvl+0xe8/0x150 [ 590.189496][T26295] should_fail_ex+0x412/0x560 [ 590.189523][T26295] should_failslab+0xa8/0x100 [ 590.189546][T26295] __kmalloc_node_noprof+0xf0/0x7c0 [ 590.189567][T26295] ? alloc_slab_obj_exts+0x4b/0x1b0 [ 590.189596][T26295] alloc_slab_obj_exts+0x4b/0x1b0 [ 590.189624][T26295] __memcg_slab_post_alloc_hook+0x53c/0xa80 [ 590.189662][T26295] ? dst_alloc+0x105/0x170 [ 590.189759][T26295] kmem_cache_alloc_noprof+0x347/0x650 [ 590.189783][T26295] ? dst_alloc+0x105/0x170 [ 590.189799][T26295] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 590.189826][T26295] ? __pfx_ip6_dst_gc+0x10/0x10 [ 590.189898][T26295] dst_alloc+0x105/0x170 [ 590.189919][T26295] ip6_pol_route+0xafb/0x13d0 [ 590.189949][T26295] ? ip6_pol_route+0x160/0x13d0 [ 590.189975][T26295] ? __pfx_ip6_pol_route+0x10/0x10 [ 590.189999][T26295] ? __lock_acquire+0x6b5/0x2cf0 [ 590.190034][T26295] fib6_rule_lookup+0x36b/0x730 [ 590.190108][T26295] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 590.190124][T26295] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 590.190139][T26295] ? ipv6_find_hdr+0xcb4/0x1110 [ 590.190211][T26295] ? lock_acquire+0xf0/0x2e0 [ 590.190234][T26295] ? __pfx_ipv6_find_hdr+0x10/0x10 [ 590.190259][T26295] ip6_route_output_flags+0x364/0x5d0 [ 590.190279][T26295] ? ip6_route_output_flags+0x2e/0x5d0 [ 590.190304][T26295] ip6_update_pmtu+0x213/0x360 [ 590.190330][T26295] ? __pfx_ip6_update_pmtu+0x10/0x10 [ 590.190350][T26295] ? seg6_get_srh+0x336/0x640 [ 590.190394][T26295] icmpv6_err+0x187/0x360 [ 590.190449][T26295] icmpv6_notify+0x407/0x850 [ 590.190470][T26295] ? __pfx_icmpv6_err+0x10/0x10 [ 590.190498][T26295] ? __pfx_icmpv6_notify+0x10/0x10 [ 590.190532][T26295] icmpv6_rcv+0x1525/0x1cc0 [ 590.190558][T26295] ? ipv6_chk_mcast_addr+0x77f/0x860 [ 590.190585][T26295] ? __pfx_icmpv6_rcv+0x10/0x10 [ 590.190604][T26295] ip6_protocol_deliver_rcu+0xe2d/0x1600 [ 590.190705][T26295] ip6_input_finish+0x191/0x370 [ 590.190728][T26295] NF_HOOK+0x336/0x3c0 [ 590.190754][T26295] ? __pfx_ip6_input_finish+0x10/0x10 [ 590.190770][T26295] ? NF_HOOK+0x9e/0x3c0 [ 590.190794][T26295] ? __pfx_NF_HOOK+0x10/0x10 [ 590.190820][T26295] ? __pfx_ip6_input_finish+0x10/0x10 [ 590.190837][T26295] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 590.190865][T26295] ip6_input+0x16a/0x270 [ 590.190880][T26295] ? ip6_input+0x23/0x270 [ 590.190897][T26295] ip6_mc_input+0x655/0xbd0 [ 590.190920][T26295] ? __pfx_ip6_mc_input+0x10/0x10 [ 590.190947][T26295] ? skb_dst+0x71/0xd0 [ 590.190975][T26295] ? ip6_rcv_finish+0x29e/0x2e0 [ 590.191004][T26295] NF_HOOK+0x336/0x3c0 [ 590.191029][T26295] ? skb_orphan+0x4f/0xd0 [ 590.191047][T26295] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 590.191073][T26295] ? NF_HOOK+0x9e/0x3c0 [ 590.191099][T26295] ? __pfx_NF_HOOK+0x10/0x10 [ 590.191128][T26295] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 590.191163][T26295] ? netif_receive_skb+0x102/0xc50 [ 590.191237][T26295] netif_receive_skb+0x278/0xc50 [ 590.191265][T26295] ? __pfx_netif_receive_skb+0x10/0x10 [ 590.191283][T26295] ? __lock_acquire+0x6b5/0x2cf0 [ 590.191312][T26295] ? tun_rx_batched+0x185/0x790 [ 590.191392][T26295] tun_rx_batched+0x1de/0x790 [ 590.191414][T26295] ? __build_skb+0x62/0x440 [ 590.191443][T26295] ? __pfx_tun_rx_batched+0x10/0x10 [ 590.191480][T26295] ? tun_get_user+0x2354/0x3dd0 [ 590.191503][T26295] ? __local_bh_enable_ip+0xd0/0x130 [ 590.191531][T26295] ? tun_get_user+0x2669/0x3dd0 [ 590.191553][T26295] tun_get_user+0x2a78/0x3dd0 [ 590.191599][T26295] ? aa_file_perm+0x50e/0x15e0 [ 590.191623][T26295] ? __pfx_tun_get_user+0x10/0x10 [ 590.191644][T26295] ? aa_file_perm+0x192/0x15e0 [ 590.191688][T26295] ? ref_tracker_alloc+0x35c/0x4c0 [ 590.191736][T26295] ? irqentry_exit+0x59e/0x620 [ 590.191751][T26295] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 590.191776][T26295] ? tun_get+0x1c/0x2f0 [ 590.191803][T26295] ? tun_get+0x1c/0x2f0 [ 590.191824][T26295] ? tun_get+0x1c/0x2f0 [ 590.191852][T26295] tun_chr_write_iter+0x113/0x200 [ 590.191879][T26295] vfs_write+0x61d/0xb90 [ 590.191906][T26295] ? __pfx_vfs_write+0x10/0x10 [ 590.191943][T26295] ? __fget_files+0x2a/0x420 [ 590.191980][T26295] ksys_write+0x150/0x270 [ 590.192002][T26295] ? __pfx_ksys_write+0x10/0x10 [ 590.192034][T26295] do_syscall_64+0x14d/0xf80 [ 590.192050][T26295] ? trace_irq_disable+0x3b/0x150 [ 590.192073][T26295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.192091][T26295] ? clear_bhb_loop+0x40/0x90 [ 590.192113][T26295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.192130][T26295] RIP: 0033:0x7f184a55cfce [ 590.192148][T26295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 590.192164][T26295] RSP: 002b:00007f184b3c2fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 590.192183][T26295] RAX: ffffffffffffffda RBX: 00007f184b3c36c0 RCX: 00007f184a55cfce [ 590.192197][T26295] RDX: 000000000000006e RSI: 0000200000000100 RDI: 00000000000000c8 [ 590.192209][T26295] RBP: 00007f184b3c3090 R08: 0000000000000000 R09: 0000000000000000 [ 590.192221][T26295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.192232][T26295] R13: 00007f184a816038 R14: 00007f184a815fa0 R15: 00007ffe4434db58 [ 590.192267][T26295] [ 590.205271][T26293] netlink: 'syz.5.6471': attribute type 1 has an invalid length. [ 590.312726][T26297] netlink: 'syz.0.6473': attribute type 33 has an invalid length. [ 590.320898][T26293] netlink: 'syz.5.6471': attribute type 3 has an invalid length. [ 590.538879][T26301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.540598][T26293] netlink: 172 bytes leftover after parsing attributes in process `syz.5.6471'. [ 590.609348][T26303] openvswitch: netlink: IP tunnel dst address not specified [ 590.610446][T26293] NCSI netlink: No device for ifindex 813332851 [ 590.812206][T26286] macvlan0: entered promiscuous mode [ 590.817504][T26286] macvlan0: entered allmulticast mode [ 590.828512][T26286] bond7: entered promiscuous mode [ 590.834032][T26286] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 590.844547][T26286] bond7: left promiscuous mode [ 590.870973][T26297] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 590.885474][T26297] bond1 (unregistering): Released all slaves [ 591.081005][T26317] Cannot find set identified by id 0 to match [ 591.123696][T26329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6483'. [ 591.146030][T26328] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6482'. [ 591.170641][T26328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6482'. [ 591.220633][T26328] policy can only be matched on NF_INET_PRE_ROUTING [ 591.220720][T26328] unable to load match [ 591.388031][T26342] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.6486'. [ 591.449850][T26344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6487'. [ 591.759254][T26356] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6491'. [ 591.870854][T26358] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6492'. [ 591.880735][T26358] unsupported nlmsg_type 40 [ 591.989229][T25012] IPVS: starting estimator thread 0... [ 591.996149][T26362] IPVS: ip_vs_add_dest(): server weight less than zero [ 592.014788][T26363] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.6494'. [ 592.088541][T26364] IPVS: using max 31 ests per chain, 74400 per kthread [ 592.365379][T25012] IPVS: starting estimator thread 0... [ 592.452142][T26392] IPVS: using max 31 ests per chain, 74400 per kthread [ 592.541195][T26409] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 592.596223][T26409] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 592.608655][T26409] bond1 (unregistering): Released all slaves [ 592.720137][T26422] syzkaller0: entered promiscuous mode [ 592.725832][T26422] syzkaller0: entered allmulticast mode [ 592.746411][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 592.754455][ C1] lec:lec_tx_timeout: lec0 [ 592.759112][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 592.834883][T26429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6514'. [ 593.026638][T26443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6518'. [ 593.234954][T26455] lo: Caught tx_queue_len zero misconfig [ 593.250368][T26455] netem: change failed [ 593.266601][T26457] geneve3: entered promiscuous mode [ 593.309166][T26457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.342642][T26457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.368888][T12396] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 45150 - 0 [ 593.384848][T12396] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 45150 - 0 [ 593.396195][T12396] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 45150 - 0 [ 593.524854][T26470] validate_nla: 3 callbacks suppressed [ 593.524873][T26470] netlink: 'syz.0.6528': attribute type 1 has an invalid length. [ 594.016234][T26509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.086361][T26509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.201417][T26517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.721904][T26457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.734894][T26457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.756532][T26457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45150 - 0 [ 594.857104][T26457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.871034][T26457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.884463][T26457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45150 - 0 [ 594.975820][T26457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.988270][T26457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.999370][T26457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 45150 - 0 [ 595.114072][T12380] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.123123][T12380] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 45150 - 0 [ 595.136534][T12380] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 595.201278][T11767] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.244461][T11767] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 45150 - 0 [ 595.268033][T11767] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 595.320905][T12394] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.336722][T12394] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 45150 - 0 [ 595.354008][T12394] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 595.419569][T12397] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.438459][T12397] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 45150 - 0 [ 595.479838][T12397] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 595.650913][T26563] sctp: [Deprecated]: syz.5.6554 (pid 26563) Use of int in max_burst socket option deprecated. [ 595.650913][T26563] Use struct sctp_assoc_value instead [ 595.785734][T26565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.800194][T26573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.865459][T26573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.930249][T26565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.015236][T26565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.099222][T26570] syzkaller0: entered promiscuous mode [ 596.105096][T26570] syzkaller0: entered allmulticast mode [ 596.128761][T26565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.576596][T26597] netlink: 'syz.5.6561': attribute type 1 has an invalid length. [ 596.585642][T26597] __nla_validate_parse: 5 callbacks suppressed [ 596.585659][T26597] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6561'. [ 596.699774][T26602] delete_channel: no stack [ 596.712298][ T5835] Bluetooth: hci5: command tx timeout [ 596.830229][T26609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6567'. [ 596.890950][T26610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6567'. [ 597.772237][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 597.780249][ C1] lec:lec_tx_timeout: lec0 [ 597.784956][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 597.955971][T26623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.969131][T12397] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.053675][T26623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.063566][T12396] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.071836][T12396] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.126159][T12380] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.241404][T26639] netlink: 'syz.0.6576': attribute type 16 has an invalid length. [ 598.249705][T26639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6576'. [ 598.364270][T26642] bridge_slave_0: left allmulticast mode [ 598.390807][T26642] bridge_slave_0: left promiscuous mode [ 598.411278][T26642] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.441883][T26642] bridge_slave_1: left allmulticast mode [ 598.449198][T26642] bridge_slave_1: left promiscuous mode [ 598.455351][T26642] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.468543][T26642] bond1: (slave veth0_to_bond): Releasing active interface [ 598.481594][T26642] veth0_to_bond: left promiscuous mode [ 598.494322][T26642] bond0: (slave bond_slave_0): Releasing backup interface [ 598.505329][T26642] bond0: (slave bond_slave_1): Releasing backup interface [ 598.518279][T26642] team0: Port device team_slave_0 removed [ 598.527298][T26642] team0: Port device team_slave_1 removed [ 598.535907][T26642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.543825][T26642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.555583][T26642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 598.721288][T26667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6587'. [ 598.786146][T26671] netlink: 'syz.5.6588': attribute type 33 has an invalid length. [ 598.857219][T26671] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 598.870994][T26671] bond12 (unregistering): Released all slaves [ 598.906407][T26674] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 598.924606][T26672] syz_tun: left allmulticast mode [ 598.962278][T26685] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.6593'. [ 598.971660][T26685] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 599.145094][T26698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.256527][T26698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.276957][T26710] netlink: 'syz.5.6600': attribute type 1 has an invalid length. [ 599.365566][T26717] openvswitch: netlink: Duplicate key (type 2). [ 599.422592][T26721] IPv6: sit1: Disabled Multicast RS [ 599.431001][T26721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6604'. [ 599.441184][T26721] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6604'. [ 599.490679][T26724] netlink: 'syz.0.6605': attribute type 3 has an invalid length. [ 599.499637][T26724] netlink: 'syz.0.6605': attribute type 3 has an invalid length. [ 599.737937][T26740] ip6gre0: Master is either lo or non-ether device [ 599.749217][T26738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6611'. [ 599.772290][T26738] netlink: 'syz.5.6611': attribute type 7 has an invalid length. [ 599.777629][T26745] netlink: 'syz.0.6613': attribute type 1 has an invalid length. [ 599.858398][T26749] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6615'. [ 599.880784][T26749] netlink: 'syz.2.6615': attribute type 9 has an invalid length. [ 599.993454][T26760] netlink: 'syz.1.6620': attribute type 1 has an invalid length. [ 600.144399][T26768] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 600.157044][T26776] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 600.169752][T26768] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 600.199237][T26768] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 600.278182][T26760] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 600.291361][T26760] bond2: (slave vcan1): making interface the new active one [ 600.299421][T26760] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 600.310194][T26772] syzkaller1: entered promiscuous mode [ 600.319350][T26772] syzkaller1: entered allmulticast mode [ 600.359224][T26782] netlink: 'syz.2.6624': attribute type 4 has an invalid length. [ 600.409206][T26782] netlink: 'syz.2.6624': attribute type 4 has an invalid length. [ 600.429463][T26788] syzkaller0: entered promiscuous mode [ 600.435546][T26788] syzkaller0: entered allmulticast mode [ 600.599084][T26795] syzkaller0: entered promiscuous mode [ 600.604861][T26795] syzkaller0: entered allmulticast mode [ 600.643806][T26797] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.703298][T26797] bond3: (slave veth3): Enslaving as an active interface with a down link [ 600.789646][T26797] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 601.021177][T26813] syzkaller0: entered promiscuous mode [ 601.027209][T26813] syzkaller0: entered allmulticast mode [ 601.125657][T26831] syzkaller0: entered promiscuous mode [ 601.131213][T26831] syzkaller0: entered allmulticast mode [ 601.617607][T26852] __nla_validate_parse: 9 callbacks suppressed [ 601.617626][T26852] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6648'. [ 601.728459][T26861] macvlan0: entered promiscuous mode [ 601.737271][T26861] macvlan0: entered allmulticast mode [ 601.743991][T26861] bond13: entered promiscuous mode [ 601.750246][T26861] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 601.761142][T26861] bond13: left promiscuous mode [ 601.818466][T26869] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6654'. [ 601.886178][T26871] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6655'. [ 602.057866][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6658'. [ 602.067451][T26879] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6658'. [ 602.101407][T26881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6659'. [ 602.175205][T26886] syzkaller0: entered promiscuous mode [ 602.180764][T26886] syzkaller0: entered allmulticast mode [ 602.792126][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 602.800181][ C1] lec:lec_tx_timeout: lec0 [ 602.804793][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 603.024029][T26896] xt_ecn: cannot match TCP bits for non-tcp packets [ 603.129044][T26901] macvlan0: entered promiscuous mode [ 603.135996][T26901] macvlan0: entered allmulticast mode [ 603.143493][T26901] bond14: entered promiscuous mode [ 603.149046][T26901] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 603.158385][T26901] bond14: left promiscuous mode [ 603.263814][T26906] syzkaller0: entered promiscuous mode [ 603.269287][T26906] syzkaller0: entered allmulticast mode [ 603.430741][T26913] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6670'. [ 603.445244][T26913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6670'. [ 603.486735][T26915] syzkaller0: entered promiscuous mode [ 603.493163][T26915] syzkaller0: entered allmulticast mode [ 603.509817][T26915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6671'. [ 603.700379][T26917] bond15: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 603.712564][T26917] bond15 (unregistering): Released all slaves [ 603.819701][T26923] 8021q: VLANs not supported on ip_vti0 [ 603.827358][T26923] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6674'. [ 604.013169][T26818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.201047][T26935] syzkaller0: entered promiscuous mode [ 604.206626][T26935] syzkaller0: entered allmulticast mode [ 604.278371][T26943] : renamed from bond0 [ 604.410917][T26961] openvswitch: netlink: Actions may not be safe on all matching packets [ 604.641599][T26973] veth1_to_batadv: entered promiscuous mode [ 604.649701][T26973] veth1_to_batadv: entered allmulticast mode [ 605.204201][T27012] validate_nla: 46 callbacks suppressed [ 605.204219][T27012] netlink: 'syz.1.6694': attribute type 28 has an invalid length. [ 605.218516][T27012] netlink: 'syz.1.6694': attribute type 3 has an invalid length. [ 605.547095][T27033] IPVS: set_ctl: invalid protocol: 98 100.1.1.0:20000 [ 607.599815][T26978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.778220][T27050] netlink: 'syz.2.6704': attribute type 33 has an invalid length. [ 607.812119][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 607.820172][ C1] lec:lec_tx_timeout: lec0 [ 607.825375][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 607.872362][T27050] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 607.917494][T27050] bond4 (unregistering): Released all slaves [ 608.044049][T27056] openvswitch: netlink: Key type 257 is out of range max 32 [ 608.106551][T27077] syzkaller0: entered promiscuous mode [ 608.112263][T27077] syzkaller0: entered allmulticast mode [ 608.126223][T27077] 0: reclassify loop, rule prio 0, protocol 800 [ 609.060143][T27110] __nla_validate_parse: 69 callbacks suppressed [ 609.060162][T27110] netlink: 81 bytes leftover after parsing attributes in process `syz.5.6720'. [ 609.190065][T27121] netlink: 'syz.6.6723': attribute type 33 has an invalid length. [ 609.221748][T27121] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 609.237087][T27121] bond8 (unregistering): Released all slaves [ 609.262210][T27124] wireguard0: entered promiscuous mode [ 609.267792][T27124] wireguard0: entered allmulticast mode [ 609.278091][T27124] team0: Device wireguard0 is of different type [ 609.309167][T27127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6724'. [ 609.465953][T27134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 609.824460][T27155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6733'. [ 609.833725][T27155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6733'. [ 611.837496][T27086] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.963458][T27165] syzkaller0: entered promiscuous mode [ 611.977775][T27165] syzkaller0: entered allmulticast mode [ 612.288993][T27186] team0 (unregistering): Port device team_slave_0 removed [ 612.334679][T27186] team0 (unregistering): Port device team_slave_1 removed [ 612.381181][T27203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6745'. [ 612.398117][T27195] bond15: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 612.398306][T27203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6745'. [ 612.443169][T27195] bond15 (unregistering): Released all slaves [ 612.545799][T27206] netlink: 'syz.1.6747': attribute type 11 has an invalid length. [ 612.563585][T27206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6747'. [ 612.592393][T27206] netlink: 'syz.1.6747': attribute type 11 has an invalid length. [ 612.614815][T27206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6747'. [ 612.832149][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 612.840169][ C1] lec:lec_tx_timeout: lec0 [ 612.844860][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 613.757708][T27251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6762'. [ 613.770702][T27251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6762'. [ 613.807146][T27256] netlink: 'syz.0.6763': attribute type 39 has an invalid length. [ 614.163314][T27266] netlink: 'syz.0.6766': attribute type 12 has an invalid length. [ 614.171360][T27266] netlink: 'syz.0.6766': attribute type 29 has an invalid length. [ 614.179406][T27266] __nla_validate_parse: 1 callbacks suppressed [ 614.179421][T27266] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6766'. [ 614.195372][T27266] netlink: 'syz.0.6766': attribute type 2 has an invalid length. [ 614.204358][T27266] netlink: 23 bytes leftover after parsing attributes in process `syz.0.6766'. [ 614.499715][T27279] ip6t_srh: unknown srh invflags 4000 [ 615.550895][T27210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.934929][T27304] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6780'. [ 616.214668][T27329] syzkaller0: entered promiscuous mode [ 616.220168][T27329] syzkaller0: entered allmulticast mode [ 616.321818][T27339] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6790'. [ 616.355744][T27335] tipc: Enabling of bearer rejected, failed to enable media [ 616.503372][T27352] netlink: 6 bytes leftover after parsing attributes in process `syz.5.6794'. [ 616.597056][T27352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6794'. [ 616.687166][T27362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6797'. [ 616.732888][T27365] netlink: 'syz.1.6799': attribute type 1 has an invalid length. [ 616.787148][T27365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.841707][T27367] bond0: (slave veth5): Enslaving as an active interface with a down link [ 616.856659][T27365] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 616.907846][T27375] syzkaller0: entered promiscuous mode [ 616.922296][T27375] syzkaller0: entered allmulticast mode [ 616.985515][T27384] sctp: [Deprecated]: syz.0.6804 (pid 27384) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.985515][T27384] Use struct sctp_sack_info instead [ 617.174716][T27400] netlink: 'syz.1.6809': attribute type 1 has an invalid length. [ 617.203580][T27400] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6809'. [ 617.223383][T27400] netlink: 'syz.1.6809': attribute type 1 has an invalid length. [ 617.243589][T27400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6809'. [ 617.317563][T27406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.367252][T27402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.415472][T27416] veth0: entered promiscuous mode [ 617.421170][T27416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6814'. [ 617.444042][T27416] veth0 (unregistering): left promiscuous mode [ 617.619933][T27427] netlink: 'syz.1.6817': attribute type 1 has an invalid length. [ 617.648075][T27427] netlink: 'syz.1.6817': attribute type 2 has an invalid length. [ 617.852114][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 617.860174][ C1] lec:lec_tx_timeout: lec0 [ 617.865413][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 617.871051][T27447] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 618.090638][T27468] netlink: 'syz.6.6829': attribute type 1 has an invalid length. [ 618.167292][T27475] macvlan0: entered promiscuous mode [ 618.173879][T27475] macvlan0: entered allmulticast mode [ 618.184620][T27475] bond8: entered promiscuous mode [ 618.207504][T27475] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 618.357603][T27475] bond8: left promiscuous mode [ 618.392850][ T31] INFO: task syz.4.4808:20859 blocked for more than 143 seconds. [ 618.393579][T27471] ieee80211 phy83: Selected rate control algorithm 'minstrel_ht' [ 618.400712][ T31] Not tainted syzkaller #0 [ 618.400728][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.400738][ T31] task:syz.4.4808 state:D stack:27144 pid:20859 tgid:20858 ppid:16275 task_flags:0x400140 flags:0x00080002 [ 618.400793][ T31] Call Trace: [ 618.400801][ T31] [ 618.400815][ T31] __schedule+0x1585/0x5340 [ 618.400880][ T31] ? __pfx___schedule+0x10/0x10 [ 618.400917][ T31] ? schedule+0x90/0x360 [ 618.400947][ T31] schedule+0x164/0x360 [ 618.400976][ T31] schedule_preempt_disabled+0x13/0x30 [ 618.401003][ T31] __mutex_lock+0x7fe/0x1300 [ 618.401028][ T31] ? __mutex_lock+0x5ac/0x1300 [ 618.401050][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 618.401123][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 618.401149][ T31] ? __nlmsg_put+0xef/0x1b0 [ 618.401178][ T31] ? genlmsg_put+0x137/0x2e0 [ 618.401209][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 618.401244][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 618.401272][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 618.401308][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 618.401337][ T31] ? __asan_memcpy+0x40/0x70 [ 618.401368][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 618.401419][ T31] genl_rcv_msg+0x61c/0x7a0 [ 618.401454][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.401480][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 618.401506][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 618.401541][ T31] netlink_rcv_skb+0x232/0x4b0 [ 618.556592][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.561659][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.567056][ T31] ? down_read+0x272/0x2e0 [ 618.571480][ T31] ? genl_rcv+0xd/0x40 [ 618.575699][ T31] genl_rcv+0x28/0x40 [ 618.579700][ T31] netlink_unicast+0x80f/0x9b0 [ 618.584565][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 618.589864][ T31] ? netlink_sendmsg+0x650/0xb40 [ 618.594944][ T31] ? skb_put+0x11b/0x210 [ 618.599216][ T31] netlink_sendmsg+0x813/0xb40 [ 618.604161][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.609466][ T31] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 618.615893][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 618.620851][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 618.626201][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.631502][ T31] ____sys_sendmsg+0xa68/0xad0 [ 618.638813][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.644194][ T31] ? import_iovec+0x73/0xa0 [ 618.648724][ T31] ___sys_sendmsg+0x2a5/0x360 [ 618.653607][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.658843][ T31] ? futex_wake+0x4ac/0x580 [ 618.663933][ T31] ? __fget_files+0x2a/0x420 [ 618.668540][ T31] ? __fget_files+0x3a0/0x420 [ 618.673352][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 618.678310][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.683859][ T31] ? rcu_is_watching+0x15/0xb0 [ 618.688643][ T31] do_syscall_64+0x14d/0xf80 [ 618.693332][ T31] ? trace_irq_disable+0x3b/0x150 [ 618.698367][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.704483][ T31] ? clear_bhb_loop+0x40/0x90 [ 618.709244][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.715301][ T31] RIP: 0033:0x7f1b5e19c799 [ 618.719724][ T31] RSP: 002b:00007f1b5ef96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.728165][ T31] RAX: ffffffffffffffda RBX: 00007f1b5e415fa0 RCX: 00007f1b5e19c799 [ 618.736233][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000008 [ 618.744251][ T31] RBP: 00007f1b5e232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 618.752304][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.760263][ T31] R13: 00007f1b5e416038 R14: 00007f1b5e415fa0 R15: 00007ffda8c7b168 [ 618.768283][ T31] [ 618.771381][ T31] [ 618.771381][ T31] Showing all locks held in the system: [ 618.779515][ T31] 1 lock held by khungtaskd/31: [ 618.784447][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 618.794527][ T31] 2 locks held by getty/5573: [ 618.799253][ T31] #0: ffff8880378a40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 618.809244][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 618.819506][ T31] 2 locks held by syz.3.3776/17830: [ 618.824750][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.833277][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xa00 [ 618.843386][ T31] 2 locks held by syz.4.4808/20859: [ 618.848579][ T31] #0: ffffffff8fc3a630 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.856898][ T31] #1: ffffffff8ea86c28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 618.867096][ T31] 4 locks held by syz.0.6834/27484: [ 618.872535][ T31] #0: ffff88805a550d88 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 618.882998][ T31] #1: ffffffff8fc38670 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 618.894276][ T31] #2: ffff88805b11b8d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 618.904783][ T31] #3: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 618.915949][ T31] [ 618.918283][ T31] ============================================= [ 618.918283][ T31] [ 618.927713][ T31] NMI backtrace for cpu 1 [ 618.927727][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 618.927746][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.927757][ T31] Call Trace: [ 618.927765][ T31] [ 618.927772][ T31] dump_stack_lvl+0xe8/0x150 [ 618.927801][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 618.927825][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 618.927851][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 618.927877][ T31] sys_info+0x135/0x170 [ 618.927896][ T31] watchdog+0xfd9/0x1030 [ 618.927943][ T31] ? watchdog+0x21a/0x1030 [ 618.927976][ T31] kthread+0x388/0x470 [ 618.927995][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.928018][ T31] ? __pfx_kthread+0x10/0x10 [ 618.928038][ T31] ret_from_fork+0x51e/0xb90 [ 618.928063][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 618.928085][ T31] ? __switch_to+0xc7d/0x1450 [ 618.928119][ T31] ? __pfx_kthread+0x10/0x10 [ 618.928138][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.928180][ T31] [ 618.928188][ T31] Sending NMI from CPU 1 to CPUs 0: [ 619.039273][ C0] NMI backtrace for cpu 0 [ 619.039289][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 619.039306][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 619.039316][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 619.039344][ C0] Code: 5e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 fd 1b 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 619.039358][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 619.039372][ C0] RAX: 0000000000283023 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 619.039383][ C0] RDX: 0000000000000001 RSI: ffffffff8def2f90 RDI: ffffffff8c27aa00 [ 619.039395][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 619.039406][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901186b0 [ 619.039418][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 619.039428][ C0] FS: 0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 619.039441][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.039452][ C0] CR2: 00007f184a7e6158 CR3: 0000000034380000 CR4: 00000000003526f0 [ 619.039465][ C0] Call Trace: [ 619.039472][ C0] [ 619.039478][ C0] default_idle+0x9/0x20 [ 619.039495][ C0] default_idle_call+0x72/0xb0 [ 619.039511][ C0] do_idle+0x1bd/0x500 [ 619.039538][ C0] ? __pfx_do_idle+0x10/0x10 [ 619.039558][ C0] ? do_idle+0x4d0/0x500 [ 619.039579][ C0] cpu_startup_entry+0x43/0x60 [ 619.039599][ C0] rest_init+0x2de/0x300 [ 619.039617][ C0] start_kernel+0x385/0x3d0 [ 619.039744][ C0] x86_64_start_reservations+0x24/0x30 [ 619.039787][ C0] x86_64_start_kernel+0x143/0x1c0 [ 619.039805][ C0] common_startup_64+0x13e/0x147 [ 619.039829][ C0] [ 619.220480][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 619.227341][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 619.236442][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 619.246478][ T31] Call Trace: [ 619.249738][ T31] [ 619.252648][ T31] vpanic+0x56c/0xa60 [ 619.256620][ T31] ? __pfx___schedule+0x10/0x10 [ 619.261453][ T31] ? __pfx_vpanic+0x10/0x10 [ 619.265936][ T31] ? __pfx_console_unlock+0x10/0x10 [ 619.271119][ T31] panic+0xc5/0xd0 [ 619.274826][ T31] ? __pfx_panic+0x10/0x10 [ 619.279249][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 619.284609][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 619.290747][ T31] watchdog+0x1023/0x1030 [ 619.295062][ T31] ? watchdog+0x21a/0x1030 [ 619.299463][ T31] kthread+0x388/0x470 [ 619.303508][ T31] ? __pfx_watchdog+0x10/0x10 [ 619.308163][ T31] ? __pfx_kthread+0x10/0x10 [ 619.312729][ T31] ret_from_fork+0x51e/0xb90 [ 619.317301][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 619.322391][ T31] ? __switch_to+0xc7d/0x1450 [ 619.327049][ T31] ? __pfx_kthread+0x10/0x10 [ 619.331615][ T31] ret_from_fork_asm+0x1a/0x30 [ 619.336369][ T31] [ 619.339521][ T31] Kernel Offset: disabled [ 619.343824][ T31] Rebooting in 86400 seconds..