last executing test programs: 6.304394567s ago: executing program 4 (id=2070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x2, r5, 0xa}, 0xc) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x2e6969701e69cf3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000000a01020000000000000000030000052b00060073fe722ecb5b151e4a4f30e790afa9e64124e07e0d68054ec1527e81983e7c15afa25001f11e5a0009001000000000000000000008000240000000030c00044000000001000000050900010073797a300000000008000240000000010c00044000000000000000050c0004400000000000000003080002400000000114000000050ae70300000000000000000700004728000000120a010100000000000000000000000614000480060001400004ddb7650001401c530000140000001100010000000000000000000500000a"], 0xf8}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000005) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d1407300000000009500000700"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) bind$can_raw(r6, &(0x7f0000000400)={0x1d, r7}, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket(0x40000000015, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x1c) (async) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000300)) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.170538184s ago: executing program 4 (id=2071): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x3928aa90}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) (async) write$bt_hci(r1, &(0x7f0000000580)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0x9, 0x6, 0x68e, 0x5}}}, 0xa) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r4, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 5.735878244s ago: executing program 4 (id=2075): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8000) listen(r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x6, 0x2, {{0x6, 0xff, 0x4, 0x5, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x2000a804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000280)={0x2a, 0x0, 0x1}, 0xc) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000a00)={0x448, r8, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x635}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff51}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbd25}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9103}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @remote, 0x6}}, {0x14, 0x2, @in={0x2, 0xfa00, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xffffff7f, @mcast1, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000300)="bb15be974f77a61662af235ec0b48ea3", 0x10) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f00000002c0)="96a2ed8af9c8", 0x6}], 0x2, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}], 0x18}, 0x400e055) 5.434991639s ago: executing program 4 (id=2078): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, r0, 0xa78f2000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x5, 0x0, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x8001) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYBLOB="e1ed6f2409000000c8e7a7232e84e348930eeb2518c47315734d"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcf0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400c800}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x60000}, 0x20008804) 4.632449875s ago: executing program 4 (id=2084): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f0000000980), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff}, 0x10, r0}, 0x94) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES64], 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd28, 0x25dfd402, {0x0, 0x0, 0x0, r8, 0x64e98, 0x12ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'vlan0\x00', 0x0}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0xb, 0x7, 0x2}, @ldst={0x0, 0x3, 0x4, 0x8, 0x8, 0x10, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x13, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xf7e7, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a00)=@newchain={0xb0, 0x64, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x3, 0xe}, {0x3, 0xa}, {0xffe0, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xffff}}, @TCA_BPF_FD={0x8, 0x6, r10}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x3ff, 0xf, 0x4, 0x1}, {0x1, 0xf0, 0x0, 0xf}, {0x2, 0x3, 0x9, 0xff}, {0x200, 0x5, 0x0, 0x2}, {0x486, 0xc, 0x1, 0x28}, {0x8001, 0x80, 0xfd, 0x4714}, {0x7, 0x40, 0xf3, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xb}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xfff3}}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1900000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000001a"], 0x20) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r15, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0x10}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x320}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x2) 3.642526912s ago: executing program 4 (id=2090): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) close(0x4) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9cf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x60a}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc6}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10) write(r2, &(0x7f0000000000)='\"', 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 3.046122579s ago: executing program 0 (id=2094): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="aabb", 0x2}], 0x1}}], 0x1, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x3, [@ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x66, 0x6}, @ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @struct={0x10, 0x5, 0x0, 0x4, 0x0, 0x1fc, [{0x9, 0x1, 0x7fffffff}, {0x8, 0x1, 0x6c}, {0xc, 0x5, 0x9}, {0x5, 0x3, 0xffff40d1}, {0x4, 0x4, 0x41b}]}, @fwd={0xb}]}, {0x0, [0x5f]}}, &(0x7f0000000300)=""/144, 0x97, 0x90, 0x1, 0x7, 0xa24901cef4241f07}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r2, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0xfffffffffffffe92, 0x3, r3}, @val={0xc, 0x99, {0xc, 0x40}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) unshare(0x6a040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xa}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) unshare(0x8040480) r9 = socket$kcm(0xa, 0x5, 0x0) (async) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f00000005c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) (async) sendmsg$kcm(r9, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000180)=[{0x10, 0x102}, {0x20, 0x84, 0x8, "eeb4fe8ba15e3999ef"}], 0x30}, 0x41) (async) shutdown(r8, 0x0) 2.871741221s ago: executing program 0 (id=2095): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) r2 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x28c, 0x2f, 0x100, 0x70bd27, 0x25dfdbff, {0x1e}, [@typed={0x8, 0x20, 0x0, 0x0, @pid=r1}, @generic="548bde53b512ed66cde87aa9ba5a65e304eeb9c0180b2e0b2fe0560934f8842b09debb072860393470686082cf806ca8dab223f3675becf1708d4b5aef560c17435ed4eb1d442d2218ca69b5919ed9d6f0ae5b59b7e54b9c3f127fad85cd057bc26eea7d09ec155a2a008330b2c71cfffecc35e2b94c706bfef6a13a410c76b1dc1933c421a454a159a1f2243a49221b96aadb90420ca584766d7759f8eaad5339cb34a37b16ce258c06793c03f1cf02b6b0b56333cdb91452d5f440b289f4a55fde06879fff1236264449cf1bf93363668bb0b2874a12ac", @generic="ce49978a0c191c75df39a28ba3baa9a70ef374d9c0c7309da63d1e7cbc98e759f964953ca614f9f9a5ee403a88a0e2cbc8550382e2df581ee7f7b8777139467f0a16f047a0779639493187a4ade0ba9c739c6e900672467f78c8ed8f2cfd329100c16ac2409f82bffb746029b1ded9732b7e31d3a566eed9ae0028d37cf4e7ca41aba58f6a96236ea15138e3b4c254b303143f7df9cb8944e746b69c2176b54b625b0a5359aa1e739ca15c1c808bd3b3874393256fb17864643cf982fa79b4a23eb4bc8794357466", @typed={0x8, 0x5e, 0x0, 0x0, @fd=r2}, @generic="140d9829cf7c7cc2922856b08f660cd4910e4834c525ecee31f6d9c47c7b1b155cc93950dbbb207d599d689ca79f460fb68803e55411dec243ea0d69ba0cba2edb314caef4d1dab1d81b68adc74f5d3053d3e09b1ee49e6c419b1cabdfff868048499aebe725dea6a21930db96a6c60a71a1cf689d920de3bb7ed6c5c76bced1ea50cf091b7019409f2e75ad452b8ab71b4e7f02bd487cffb7f133f9f55970e756d80927304542", @nested={0x20, 0xf1, 0x0, 0x1, [@nested={0x4, 0x118}, @generic="5de8fc986a87d786906d4780ea0c8ad7371ae2c7b32e0bce"]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40004}, 0x8084) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef43b000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000006680)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}], 0x2c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010b00000000010000000e00000008000300", @ANYRES8=r7], 0x1c}}, 0x2000c000) ioctl$sock_netdev_private(r5, 0x89f5, &(0x7f0000000040)="ca0d702119feb97cfcf4ff7e0bcc12874cbd8f578807049308a3036483d37997906c36ec3a94924a90706e997fd48bbc1c92399882463da0bdc0c52ff3c8c229") setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"/324], 0xc8}}, 0x20050800) 1.999359828s ago: executing program 0 (id=2099): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=ANY=[@ANYBLOB="b41100005200010000000000000000001c0000009e110280"], 0x11b4}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x7, 0x3, "e1e80e3c73cd"}}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8f0) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000015c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x6c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x68, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd0}, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x8, 0x0, 0x6b, @empty, @empty, 0x8000, 0x40, 0x68, 0x2}}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x5, @remote, 'gre0\x00'}}, 0x1e) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x20048400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x2000300, 0xe, 0x0, &(0x7f00000004c0)="6371ed8ebd004b69f81cfe05062f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000700000011124000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.775740718s ago: executing program 1 (id=2102): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="900000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000600012800b000100697036746e6c000050000280"], 0x90}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2080}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0xfffffffffffffc85, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x24, 0x31, 0x200, 0x70bd2d, 0x25dfdc02, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004801}, 0x4800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, {0xa, 0x4, @multicast}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xfffffffffffffef8, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x2, 0xfffffff6, 0x4, 0x5}}}}]}, 0x58}}, 0x20040084) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 1.595055757s ago: executing program 0 (id=2104): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010076657468305f746f5f6873720000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30400000000900010073797a300000000030000380"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f67fd6211289f3da"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffe}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dff7377732a8a689878be45a11be8da7dc9b391a257a4091"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3c65811fe94a06d2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4008091) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x1, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@broadcast, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) 1.520318373s ago: executing program 3 (id=2105): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a050000000000000000000a0000040900020073797a311100000008000a40fffffffc0900010073797a3100000000080005400000000b"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000007, 0x30, r0, 0xcbe43000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000040000701feffffff02000000017c0000040042800c00018006000600800a00000c00028008001480040005"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8180) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r1, r3, 0x2f, 0x18, 0x4}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x140b, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x20008001) 1.338680718s ago: executing program 0 (id=2107): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x8082) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2362561010dfab65c28006800000921907864010100ac1414aa820200004e21"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0x0, 0x2) r4 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) socketpair(0x2, 0x5, 0x4, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.232837543s ago: executing program 2 (id=2108): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@RTM_DELMDB={0x18, 0x55, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) 1.231660302s ago: executing program 1 (id=2109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800010010000504000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280050016000200000006000e000000000004001200"], 0x48}}, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000000)) 1.156442189s ago: executing program 3 (id=2110): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x0, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={&(0x7f0000000000)="7d7983ebc59053b67fd66400d9095263e39ba1b84e22f25cb2810b922fc4b00e638e636b437796", &(0x7f0000000040)=""/111, &(0x7f00000000c0)="1916afbf9aac81ae5126bed3", &(0x7f0000000140)="6db6f3cc0005732bb86fab083436af29a6efbf615c18536311834b0d564a842268abf7a2cd8ebca9448294f8ac7964dd306e596fcb912b1c49ecc6eb53b92858c536b0edc90d51830c4b53c9c7547710e672d1f85f1901d53795986cbf09f487dde6c8e314e1d5e2b20faccdfd5c25b1fc9de0ec3a03ac71d7b3c4b3625f1e5383606b6d1b130c6521a57091f85f7e4ee389fea13d7911c43ff56e5813b541b5a06f6fbd68df", 0x3, r0}, 0x38) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) 1.026478166s ago: executing program 1 (id=2111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@ipv6_newroute={0x2c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, [@RTA_PRIORITY={0x8, 0x6, 0x7fffffff}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) 957.34076ms ago: executing program 2 (id=2112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x4000810, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01980400ff0100000000000008000100736974001400028008000300ac1e01010700040000000000"], 0x40}}, 0x0) (async) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 848.930701ms ago: executing program 3 (id=2113): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x0, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d000000000000007110b3000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r0, 0x0, 0x0) 741.161026ms ago: executing program 2 (id=2114): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xffffffffffffffb4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0x90) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) 737.053627ms ago: executing program 1 (id=2115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100006900000400048008007a8004000b800800020001000000a00008801c000780080077144ebb0000080005"], 0xd0}}, 0x571f68543cec8180) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @sk_msg}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x10}, 0x18) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYBLOB="380000001800000000000000", @ANYRES32=r5, @ANYBLOB="7e18fbb9ca15cde6a4959a1c31bae5d327896ee55d193587963d83112f120000e0863cfceb45d5ea68c69b06a5cde8b170a58db945c78d4cb39dff3bfbb9192265032d9072c2b223bd6865f32c0e2babb371ec316002a5291324807e9a8939bdb15fcb32a31bd4309d4a4c0d2a97d6655d70bca42bacd6e67454b35317fcb57a84e1a9bc82d3e2a7f1b8a39d0b6dffa89968e7e0a3315ddac00b0a1bdfda591e318d99ba4be09e32e49c19680e5fa7a6bb2b2e7ad92cdd5dc9b196ff07323a96ba4c", @ANYRES64=0x0], 0x20) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@timestamping={{0x18, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x18, 0x24044050) recvfrom$inet(r6, &(0x7f0000000700)=""/237, 0xed, 0x12000, &(0x7f0000000840)={0x2, 0x4e22, @empty}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 645.090164ms ago: executing program 3 (id=2116): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='.\\].\x00', 0x420800, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x10000]}, {0x2, 0xd, 0xfff, 0x1}}, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20008000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r2}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x110, r3, 0x208c8000) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)={r4}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r5) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r6, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x83f0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3ff, @mcast2, 0x56}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x8) recvmsg(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/39, 0x27}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/62, 0x3e}], 0x3, &(0x7f0000000680)=""/73, 0x49}, 0x10041) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x40010, r5, 0xaabe3000) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000400}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$alg(r3, &(0x7f0000001b00)=[{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="9599041675984ce8bf761d0864eb8cfbdc9da41189e72775e98482c4db43a3f2f380e49c653ca2f0639900ecbbf1c6b642ece2a4ed17b6ee6b1295517fa23a22f778f2fbca6284af70b8c2b5fa30e74d966d6fdf17d1b072f031e9c35840bb1f36eebcee963ccf00069d0bd544ec4d32ce13e4a4e6f58c20d87e1b4d720c568dc443cd4b63577ec8fc21e2ec8d89b18eaed951abb9e946c35cd7bfb8493a97a71b25aebfa72f4300915dbd", 0xab}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x10044041) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001b40)={'caif0\x00', 0x20}) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000001b80)={0x2, 0x1, "71900e", 0x0, 0x81}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001bc0)={0x1, 0x8, 0x209, 0x3, 0x1, 0x7, 0x17, 0xffffffff, 0x0}, &(0x7f0000001c00)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001c40)={r9, 0x5b, "eec7a9e060b33ca79dd3f376d54d2ad0289ac783996a86676f47a77b5749309c306eca1788633236385803be74e227d9cec759a50f222c710c188224570e9a5e32d04008210d29e2ee43ba56bc27f38c53c22067eef113d74540ba"}, &(0x7f0000001cc0)=0x63) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001d00), &(0x7f0000001d40)=0x4) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8982, &(0x7f0000001d80)={0x7, 'vcan0\x00', {0x4}, 0x7}) recvmsg$unix(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/32, 0x20}, {&(0x7f0000002e00)=""/163, 0xa3}, {&(0x7f0000002ec0)=""/177, 0xb1}, {&(0x7f0000002f80)=""/167, 0xa7}, {&(0x7f0000003040)=""/244, 0xf4}], 0x6, &(0x7f00000031c0)=[@cred={{0x1c}}], 0x20}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000003280)={'wg1\x00', 0x0}) sendto(r10, &(0x7f0000003240)="6db58a4e13516ff4cbeaeb7bd4fe0bce3e4e7802c9dd", 0x16, 0x80, &(0x7f00000032c0)=@xdp={0x2c, 0xe, r12, 0x37}, 0x80) 474.90046ms ago: executing program 2 (id=2117): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x10, 0x7], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffd, 0x0, 0x0, 0x6, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 474.717096ms ago: executing program 1 (id=2118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xd0, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000a004f00ffffffffffff000008002600641400f10700a0000f000000"], 0x44}}, 0x0) 320.374273ms ago: executing program 3 (id=2119): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0xc081) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0xc081) 314.353653ms ago: executing program 2 (id=2120): r0 = socket(0x10, 0x5, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffe984c6f2f1cd1377f3768d75d2ca8d01aaaa021000703afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0000000000000000"], 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val={0x1, 0x4, 0x200, 0x0, 0x8000, 0x3}, @llc={@llc={0x6, 0xf5, "fe", "752aefd5fd30217c3e9be63bebd52c7f30"}}}, 0x1e) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x10000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x53, 0x1, 0x0, 0x80, 0x40000000, 0x7}, &(0x7f0000000280)=0x9c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x100}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018", @ANYRES32, @ANYBLOB="000000000000000066500000000000001800000000000000000000000000000095000000000000001801000020207025000000000020"], 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x402) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00'], 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102397, &(0x7f0000000040)=0x18ffd) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) 216.831666ms ago: executing program 0 (id=2121): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x10001, 0x12) sendfile(r1, r0, 0x0, 0x9799) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0x12, 0x9, 0x8, 0x1}, 0x50) 124.363141ms ago: executing program 3 (id=2122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg$can_bcm(r3, &(0x7f0000002840)={&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000002700)=[{0x0}, {&(0x7f0000002500)=""/189, 0xbd}, {&(0x7f00000025c0)=""/75, 0x4b}, {&(0x7f0000002640)=""/82, 0x52}, {&(0x7f00000026c0)=""/23, 0x17}], 0x5, &(0x7f0000002780)=""/134, 0x86}, 0x10100) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 41.484021ms ago: executing program 1 (id=2123): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x20001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, "f1ffff67f0800f04", "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", "0000ff80", '\x00\x00\x00@\x00'}, 0x38) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014ec0280100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x20000000) socket$kcm(0xa, 0x2, 0x0) socket(0x23, 0x5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r7) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x80005, 0x6f}, 0x2c) pipe(&(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) 0s ago: executing program 2 (id=2124): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x184, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x158, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0xee8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16f53e3b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0xe25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x5c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfeff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040080) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) kernel console output (not intermixed with test programs): al address not yet configured! [ 160.152072][ T7265] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.293370][ T8264] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.549'. [ 160.315204][ T8257] bond6: entered promiscuous mode [ 160.336160][ T8257] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.418452][ T8266] netlink: 332 bytes leftover after parsing attributes in process `syz.1.548'. [ 160.453896][ T8266] netlink: 'syz.1.548': attribute type 9 has an invalid length. [ 160.480036][ T8260] bond6: (slave bridge2): making interface the new active one [ 160.491807][ T8266] netlink: 108 bytes leftover after parsing attributes in process `syz.1.548'. [ 160.506609][ T8272] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 160.523135][ T8266] netlink: 32 bytes leftover after parsing attributes in process `syz.1.548'. [ 160.543201][ T8260] bridge2: entered promiscuous mode [ 160.564114][ T8260] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 160.687309][ T8272] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 160.909882][ T8295] netlink: 280 bytes leftover after parsing attributes in process `syz.4.553'. [ 161.251333][ T7265] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 161.277195][ T8312] netlink: 272 bytes leftover after parsing attributes in process `syz.4.558'. [ 161.437473][ T8318] netlink: 'syz.0.561': attribute type 10 has an invalid length. [ 161.709602][ T8318] team0: Port device geneve1 added [ 161.758172][ T8331] syzkaller1: entered promiscuous mode [ 161.781740][ T8331] syzkaller1: entered allmulticast mode [ 162.080311][ T8339] tun0: tun_chr_ioctl cmd 1074025675 [ 162.125880][ T8339] tun0: persist enabled [ 162.240051][ T8339] tun0: tun_chr_ioctl cmd 1074025675 [ 162.253553][ T8339] tun0: persist enabled [ 162.265302][ T8341] tun0: tun_chr_ioctl cmd 1074025673 [ 162.311712][ T8343] ip6gre1: entered promiscuous mode [ 162.324842][ T8343] ip6gre1: entered allmulticast mode [ 162.476887][ T8350] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.486586][ T1118] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.495075][ T1118] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.511575][ T7269] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.570162][ T8354] gretap2: entered allmulticast mode [ 162.591777][ T8354] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 162.666522][ T8359] bond5 (unregistering): (slave gretap2): Releasing backup interface [ 162.681716][ T8359] bond5 (unregistering): Released all slaves [ 162.894778][ T8370] ip6gre1: entered promiscuous mode [ 162.911794][ T8370] ip6gre1: entered allmulticast mode [ 162.923310][ T5753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.926797][ T8372] syzkaller0: entered promiscuous mode [ 162.936717][ T8372] syzkaller0: entered allmulticast mode [ 162.944547][ T8373] tipc: Started in network mode [ 162.949516][ T8373] tipc: Node identity 72e35856d219, cluster identity 4711 [ 162.958468][ T8373] tipc: Enabled bearer , priority 0 [ 162.983784][ T8371] tipc: Resetting bearer [ 163.078029][ T8371] tipc: Disabling bearer [ 163.127657][ T8391] macsec2: entered promiscuous mode [ 163.136482][ T8391] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 163.152803][ T8393] openvswitch: netlink: Flow actions attr not present in new flow. [ 163.164004][ T8391] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 163.200492][ T8390] bond0: (slave syz_tun): Releasing backup interface [ 163.241029][ T8390] bridge_slave_0: left allmulticast mode [ 163.249557][ T7269] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.258174][ T8390] bridge_slave_0: left promiscuous mode [ 163.268939][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.287065][ T8390] bridge_slave_1: left allmulticast mode [ 163.293866][ T8390] bridge_slave_1: left promiscuous mode [ 163.300008][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.332951][ T8390] bond0: (slave bond_slave_0): Releasing backup interface [ 163.365772][ T8390] bond0: (slave bond_slave_1): Releasing backup interface [ 163.397768][ T8390] team0: Port device team_slave_0 removed [ 163.437360][ T8390] team0: Port device team_slave_1 removed [ 163.454717][ T8390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.473745][ T8390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.489394][ T8390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.497947][ T8390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.512223][ T8390] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.350882][ T8449] __nla_validate_parse: 7 callbacks suppressed [ 164.350904][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.587'. [ 164.456149][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 164.483110][ T8440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.585'. [ 164.550052][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'. [ 164.588479][ T8455] bond5: Invalid ad_actor_system MAC address. [ 164.609456][ T8455] bond5: option ad_actor_system: invalid value (7) [ 164.624211][ T8455] bond5 (unregistering): Released all slaves [ 164.637410][ T8450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.585'. [ 164.813677][ T8469] netlink: 'syz.0.591': attribute type 21 has an invalid length. [ 164.833302][ T8469] netlink: 'syz.0.591': attribute type 21 has an invalid length. [ 164.920989][ T8482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'. [ 165.024100][ T8487] sctp: [Deprecated]: syz.3.593 (pid 8487) Use of int in maxseg socket option. [ 165.024100][ T8487] Use struct sctp_assoc_value instead [ 165.075340][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.592'. [ 165.868499][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'. [ 166.237504][ T8550] lo: Caught tx_queue_len zero misconfig [ 166.681337][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.693533][ T8580] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.610'. [ 166.801967][ T8584] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 166.854387][ T8584] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 166.914415][ T8584] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 166.989125][ T8584] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 166.994151][ T8591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 167.070885][ T8584] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.569467][ T8603] lo speed is unknown, defaulting to 1000 [ 167.910330][ T8625] IPVS: Error connecting to the multicast addr [ 168.719717][ T8666] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 169.257402][ T8681] netlink: Conntrack attr has 4 unknown bytes [ 169.570397][ T8683] syzkaller1: entered promiscuous mode [ 169.593764][ T8683] syzkaller1: entered allmulticast mode [ 169.726817][ T8702] __nla_validate_parse: 11 callbacks suppressed [ 169.726836][ T8702] netlink: 428 bytes leftover after parsing attributes in process `syz.3.646'. [ 169.743159][ T8701] ipt_REJECT: TCP_RESET invalid for non-tcp [ 169.765721][ T8701] netlink: 144 bytes leftover after parsing attributes in process `syz.0.645'. [ 169.792794][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880557a5c00: rx timeout, send abort [ 170.047596][ T8709] netlink: 'syz.4.647': attribute type 11 has an invalid length. [ 170.214742][ T8714] bond2 (unregistering): Released all slaves [ 170.293707][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cd36c00: rx timeout, send abort [ 170.304148][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880557a5c00: abort rx timeout. Force session deactivation [ 170.420147][ T8721] ipt_REJECT: ECHOREPLY no longer supported. [ 170.802109][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cd36c00: abort rx timeout. Force session deactivation [ 171.069817][ T8753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 171.100174][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 171.130429][ T8753] netlink: 44 bytes leftover after parsing attributes in process `syz.2.659'. [ 171.485075][ T8769] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 171.565511][ T8773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.666'. [ 171.580075][ T8774] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 171.674705][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'. [ 171.738092][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 171.759330][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.664'. [ 171.867412][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 171.925140][ T8774] veth5: entered promiscuous mode [ 172.074348][ T8778] hsr_slave_1 (unregistering): left promiscuous mode [ 172.334915][ T8805] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 172.366475][ T8803] xt_hashlimit: size too large, truncated to 1048576 [ 172.546566][ T8819] netlink: 'syz.3.676': attribute type 11 has an invalid length. [ 172.624046][ T4946] block nbd0: Receive control failed (result -1) [ 172.735121][ T8819] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 172.760501][ T8819] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 172.783036][ T8826] netlink: 'syz.0.678': attribute type 12 has an invalid length. [ 172.803777][ T8826] netlink: 'syz.0.678': attribute type 13 has an invalid length. [ 173.384650][ T8844] netlink: 'syz.3.683': attribute type 16 has an invalid length. [ 173.403215][ T8844] netlink: 'syz.3.683': attribute type 17 has an invalid length. [ 173.474815][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.502550][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.711641][ T7269] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 173.806686][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.813983][ T8844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.828908][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.836203][ T8844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.887709][ T8844] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 174.151773][ T7269] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 174.172264][ T8871] : entered promiscuous mode [ 174.784983][ T8906] __nla_validate_parse: 15 callbacks suppressed [ 174.785002][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 174.851861][ T8907] vlan2: entered promiscuous mode [ 174.884181][ T8907] hsr0: entered promiscuous mode [ 174.894347][ T8907] vlan2: entered allmulticast mode [ 174.899574][ T8907] hsr0: entered allmulticast mode [ 174.905770][ T8907] hsr_slave_0: entered allmulticast mode [ 174.930901][ T8907] hsr_slave_1: entered allmulticast mode [ 174.949102][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.699'. [ 175.407135][ T8907] hsr_slave_0: left promiscuous mode [ 175.427709][ T8907] hsr_slave_1: left promiscuous mode [ 175.716139][ T8927] bridge1: entered promiscuous mode [ 175.721679][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.792099][ T8927] bridge1: entered allmulticast mode [ 175.861088][ T8927] team0: Port device bridge1 added [ 175.883923][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.707'. [ 175.899962][ T8926] netlink: 32 bytes leftover after parsing attributes in process `syz.3.707'. [ 175.920451][ T8926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.707'. [ 175.935995][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 176.165183][ T8957] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 176.296121][ T8963] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 176.311447][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 176.329033][ T8961] unsupported nla_type 40920 [ 176.346447][ T8962] netlink: 480 bytes leftover after parsing attributes in process `syz.1.713'. [ 176.437572][ T8970] sctp: [Deprecated]: syz.3.715 (pid 8970) Use of int in maxseg socket option. [ 176.437572][ T8970] Use struct sctp_assoc_value instead [ 176.608435][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 176.845751][ T8987] netlink: 104 bytes leftover after parsing attributes in process `syz.4.718'. [ 177.234355][ T8994] netlink: 'syz.3.722': attribute type 1 has an invalid length. [ 177.264737][ T8994] netlink: 'syz.3.722': attribute type 2 has an invalid length. [ 177.352233][ T8986] block nbd1: not configured, cannot reconfigure [ 177.397367][ T8994] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.412808][ T8994] bond2: (slave bond3): Enslaving as an active interface with an up link [ 177.534183][ T9013] netlink: 'syz.1.720': attribute type 4 has an invalid length. [ 177.683453][ T9018] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.773425][ T9001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.518064][ T9049] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 178.700783][ T9058] netlink: 'syz.3.736': attribute type 25 has an invalid length. [ 178.812507][ T9058] netlink: 'syz.3.736': attribute type 25 has an invalid length. [ 178.878287][ T9064] pim6reg1: entered promiscuous mode [ 178.898684][ T9064] pim6reg1: entered allmulticast mode [ 179.144971][ T9077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.182999][ T9079] netlink: 'syz.0.742': attribute type 6 has an invalid length. [ 179.820954][ T9111] FAULT_INJECTION: forcing a failure. [ 179.820954][ T9111] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 179.873491][ T9111] CPU: 0 UID: 0 PID: 9111 Comm: syz.4.752 Not tainted syzkaller #0 PREEMPT(full) [ 179.873520][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.873538][ T9111] Call Trace: [ 179.873549][ T9111] [ 179.873557][ T9111] dump_stack_lvl+0xe8/0x150 [ 179.873597][ T9111] should_fail_ex+0x40c/0x560 [ 179.873638][ T9111] _copy_from_user+0x2d/0xb0 [ 179.873664][ T9111] ___sys_sendmsg+0x1c6/0x360 [ 179.873687][ T9111] ? __lock_acquire+0x683/0x2cd0 [ 179.873715][ T9111] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.873775][ T9111] ? __fget_files+0x2a/0x420 [ 179.873799][ T9111] ? __fget_files+0x3a2/0x420 [ 179.873841][ T9111] __x64_sys_sendmsg+0x1bd/0x2a0 [ 179.873867][ T9111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.873900][ T9111] ? rcu_is_watching+0x15/0xb0 [ 179.873934][ T9111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.873956][ T9111] do_syscall_64+0x174/0x580 [ 179.873980][ T9111] ? trace_irq_disable+0x3b/0x140 [ 179.874011][ T9111] ? clear_bhb_loop+0x40/0x90 [ 179.874037][ T9111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.874057][ T9111] RIP: 0033:0x7f99ecd9ce59 [ 179.874089][ T9111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.874106][ T9111] RSP: 002b:00007f99edc6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.874130][ T9111] RAX: ffffffffffffffda RBX: 00007f99ed015fa0 RCX: 00007f99ecd9ce59 [ 179.874144][ T9111] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 179.874154][ T9111] RBP: 00007f99edc6a090 R08: 0000000000000000 R09: 0000000000000000 [ 179.874164][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.874173][ T9111] R13: 00007f99ed016038 R14: 00007f99ed015fa0 R15: 00007ffca916ebe8 [ 179.874203][ T9111] [ 180.125955][ T9120] syzkaller0: entered promiscuous mode [ 180.131589][ T9120] syzkaller0: entered allmulticast mode [ 180.425251][ T9131] __nla_validate_parse: 25 callbacks suppressed [ 180.425274][ T9131] netlink: 516 bytes leftover after parsing attributes in process `syz.3.758'. [ 180.515686][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 180.666206][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 180.763283][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 180.885141][ T9159] netlink: 'syz.2.762': attribute type 16 has an invalid length. [ 180.899468][ T9159] netlink: 'syz.2.762': attribute type 17 has an invalid length. [ 181.116756][ T9139] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 181.169863][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 181.195798][ T9139] bond1: left promiscuous mode [ 181.200678][ T9139] bridge1: left promiscuous mode [ 181.274160][ T9167] FAULT_INJECTION: forcing a failure. [ 181.274160][ T9167] name failslab, interval 1, probability 0, space 0, times 1 [ 181.311209][ T9167] CPU: 0 UID: 0 PID: 9167 Comm: syz.1.766 Not tainted syzkaller #0 PREEMPT(full) [ 181.311240][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 181.311253][ T9167] Call Trace: [ 181.311261][ T9167] [ 181.311270][ T9167] dump_stack_lvl+0xe8/0x150 [ 181.311300][ T9167] should_fail_ex+0x40c/0x560 [ 181.311339][ T9167] should_failslab+0xa8/0x100 [ 181.311362][ T9167] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 181.311394][ T9167] ? __alloc_skb+0x189/0x7a0 [ 181.311425][ T9167] ? __alloc_skb+0x1d7/0x7a0 [ 181.311454][ T9167] ? __local_bh_enable_ip+0xd0/0x130 [ 181.311481][ T9167] __alloc_skb+0x1d7/0x7a0 [ 181.311522][ T9167] netlink_sendmsg+0x5d4/0xb40 [ 181.311556][ T9167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.311583][ T9167] ? aa_sock_msg_perm+0xf1/0x1b0 [ 181.311613][ T9167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.311638][ T9167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.311661][ T9167] ____sys_sendmsg+0x9b9/0xa20 [ 181.311682][ T9167] ? __might_fault+0xaf/0x130 [ 181.311712][ T9167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.311741][ T9167] ? import_iovec+0x73/0xa0 [ 181.311766][ T9167] ___sys_sendmsg+0x2a5/0x360 [ 181.311786][ T9167] ? __lock_acquire+0x683/0x2cd0 [ 181.311810][ T9167] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.311862][ T9167] ? __fget_files+0x2a/0x420 [ 181.311893][ T9167] ? __fget_files+0x3a2/0x420 [ 181.311926][ T9167] __x64_sys_sendmsg+0x1bd/0x2a0 [ 181.311950][ T9167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.311979][ T9167] ? __pfx_ksys_write+0x10/0x10 [ 181.312015][ T9167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.312036][ T9167] do_syscall_64+0x174/0x580 [ 181.312059][ T9167] ? trace_irq_disable+0x3b/0x140 [ 181.312088][ T9167] ? clear_bhb_loop+0x40/0x90 [ 181.312111][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.312130][ T9167] RIP: 0033:0x7f26fad9ce59 [ 181.312149][ T9167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.312166][ T9167] RSP: 002b:00007f26f8fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.312187][ T9167] RAX: ffffffffffffffda RBX: 00007f26fb016180 RCX: 00007f26fad9ce59 [ 181.312201][ T9167] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 181.312213][ T9167] RBP: 00007f26f8fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 181.312225][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.312235][ T9167] R13: 00007f26fb016218 R14: 00007f26fb016180 R15: 00007ffd866d6268 [ 181.312266][ T9167] [ 181.615453][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.625758][ T9159] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.634166][ T9159] geneve1: entered promiscuous mode [ 181.642732][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.714388][ T9159] team_slave_1: entered promiscuous mode [ 181.725679][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.736845][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.755788][ T9159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.766817][ T9159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.785445][ T9159] veth1_vlan: left promiscuous mode [ 181.793582][ T9159] veth0_vlan: left promiscuous mode [ 181.800311][ T9159] veth0_vlan: entered promiscuous mode [ 181.817504][ T9159] veth1_vlan: entered promiscuous mode [ 181.832464][ T9159] veth1_macvtap: left promiscuous mode [ 181.840151][ T9159] veth0_macvtap: left promiscuous mode [ 181.847847][ T9159] veth0_macvtap: entered promiscuous mode [ 181.855807][ T9159] veth1_macvtap: entered promiscuous mode [ 181.869896][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.879872][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.891543][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.900521][ T9159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.916823][ T9159] veth3: left promiscuous mode [ 181.923503][ T9159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.940661][ T9159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.958478][ T9159] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 181.983340][ T9159] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.991622][ T9159] gretap2: left allmulticast mode [ 182.000080][ T9159] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.125425][ T7430] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.132804][ T7430] bridge0: port 1(bridge_slave_0) entered listening state [ 182.153756][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.161139][ T7430] bridge0: port 2(bridge_slave_1) entered listening state [ 182.506779][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.771'. [ 182.533903][ T9183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.771'. [ 182.554813][ T9183] geneve2: entered promiscuous mode [ 182.582953][ T9187] IPv6: NLM_F_REPLACE set, but no existing node found! [ 182.634675][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 182.719023][ T9183] geneve0: entered promiscuous mode [ 182.756713][ T9183] geneve0: left promiscuous mode [ 182.824691][ T9192] Cannot find set identified by id 65534 to match [ 183.458185][ T9213] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.782'. [ 183.509986][ T9213] ksmbd: Unknown IPC event: 1, ignore. [ 183.582715][ T9220] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 183.624267][ T9220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.736007][ T9224] syzkaller1: entered promiscuous mode [ 183.751261][ T9224] syzkaller1: entered allmulticast mode [ 184.243578][ T9242] netlink: 88 bytes leftover after parsing attributes in process `syz.4.791'. [ 184.667049][ T9263] syzkaller0: entered promiscuous mode [ 184.673189][ T9263] syzkaller0: entered allmulticast mode [ 185.109132][ T9277] syzkaller0: entered promiscuous mode [ 185.128501][ T9277] syzkaller0: entered allmulticast mode [ 185.606788][ T9295] syzkaller0: entered promiscuous mode [ 185.650739][ T9295] syzkaller0: entered allmulticast mode [ 185.950239][ T9310] __nla_validate_parse: 4 callbacks suppressed [ 185.950285][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.811'. [ 186.062499][ T9310] netlink: 68 bytes leftover after parsing attributes in process `syz.3.811'. [ 186.392408][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 186.534884][ T9336] netlink: 128 bytes leftover after parsing attributes in process `syz.3.816'. [ 186.554463][ T9336] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 187.356708][ T9374] netlink: 840 bytes leftover after parsing attributes in process `syz.1.821'. [ 187.933149][ T9396] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 187.948649][ T9396] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 188.523613][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 189.673776][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.829'. [ 189.730760][ T9424] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 189.889861][ T9424] 8021q: adding VLAN 0 to HW filter on device bond7 [ 189.940676][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 189.964002][ T9426] 8021q: adding VLAN 0 to HW filter on device bond7 [ 189.979946][ T9426] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 189.991818][ T9426] bond7: (slave gre2): Error -95 calling set_mac_address [ 190.073803][ T9430] gretap2: entered promiscuous mode [ 190.208917][ T9436] bond0: entered promiscuous mode [ 190.229776][ T9436] bond_slave_0: entered promiscuous mode [ 190.249329][ T9436] bond_slave_1: entered promiscuous mode [ 190.269276][ T9436] batadv_slave_0: entered promiscuous mode [ 190.286755][ T9436] batadv_slave_0: left promiscuous mode [ 190.304790][ T9436] bond0: left promiscuous mode [ 190.314870][ T9436] bond_slave_0: left promiscuous mode [ 190.327779][ T9436] bond_slave_1: left promiscuous mode [ 190.396944][ T9458] netlink: 88 bytes leftover after parsing attributes in process `syz.1.837'. [ 190.406453][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 190.513976][ T9458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.837'. [ 190.998658][ T9484] netlink: 'syz.3.844': attribute type 1 has an invalid length. [ 191.092284][ T9483] tipc: Enabled bearer , priority 0 [ 191.261787][ T9483] syzkaller0: entered promiscuous mode [ 191.274224][ T9483] syzkaller0: entered allmulticast mode [ 191.313541][ T9489] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 191.346621][ T9483] netlink: 40 bytes leftover after parsing attributes in process `syz.2.845'. [ 191.440734][ T9507] netlink: 68 bytes leftover after parsing attributes in process `syz.0.848'. [ 191.480250][ T9484] bond4: (slave gretap1): making interface the new active one [ 191.497664][ T9484] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 191.577684][ T9493] bond4: (slave bridge7): Enslaving as an active interface with a down link [ 191.607855][ T9499] tipc: Resetting bearer [ 191.638334][ T9488] macvlan2: entered promiscuous mode [ 191.644562][ T9488] macvlan2: entered allmulticast mode [ 191.651885][ T9488] bond4: entered promiscuous mode [ 191.657145][ T9488] gretap1: entered promiscuous mode [ 191.665964][ T9488] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 191.677878][ T9488] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 191.695054][ T9488] bond4: left promiscuous mode [ 191.700024][ T9488] gretap1: left promiscuous mode [ 191.801366][ T9482] tipc: Resetting bearer [ 191.885606][ T9482] tipc: Disabling bearer [ 192.163097][ T9520] tap0: tun_chr_ioctl cmd 1074025677 [ 192.184477][ T9520] tap0: linktype set to 768 [ 192.584776][ T9542] netlink: 'syz.4.855': attribute type 11 has an invalid length. [ 192.900372][ T9558] xt_hashlimit: size too large, truncated to 1048576 [ 193.001344][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.021945][ T9545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.067106][ T9545] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.110662][ T9545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.398127][ T9545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.466946][ T9545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.558933][ T9545] veth1_vlan: left promiscuous mode [ 193.566578][ T9545] veth0_vlan: left promiscuous mode [ 193.588815][ T9545] veth0_vlan: entered promiscuous mode [ 193.612880][ T9545] veth1_vlan: entered promiscuous mode [ 193.648828][ T9545] veth1_macvtap: left promiscuous mode [ 193.660884][ T9545] veth0_macvtap: left promiscuous mode [ 193.668768][ T9545] veth0_macvtap: entered promiscuous mode [ 193.679620][ T9545] veth1_macvtap: entered promiscuous mode [ 193.707535][ T9545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.724044][ T9545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.742112][ T9545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.759318][ T9545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.784117][ T9545] batman_adv: batadv0: Interface activated: gretap1 [ 193.866509][ T9589] block nbd2: server does not support multiple connections per device. [ 193.877385][ T9545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.886214][ T9545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.894378][ T9545] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 193.918444][ T9589] block nbd2: shutting down sockets [ 193.956112][ T7281] lo speed is unknown, defaulting to 1000 [ 193.979489][ T7281] syz0: Port: 1 Link ACTIVE [ 194.015987][ T9542] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 194.028414][ T9542] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 194.170700][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.193568][ T9599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.863'. [ 194.202066][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.227678][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.247979][ T7278] lo speed is unknown, defaulting to 1000 [ 194.264057][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.284496][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.390504][ T9603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.864'. [ 194.495784][ T9608] FAULT_INJECTION: forcing a failure. [ 194.495784][ T9608] name failslab, interval 1, probability 0, space 0, times 0 [ 194.548200][ T9608] CPU: 0 UID: 0 PID: 9608 Comm: syz.4.865 Not tainted syzkaller #0 PREEMPT(full) [ 194.548242][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.548256][ T9608] Call Trace: [ 194.548265][ T9608] [ 194.548275][ T9608] dump_stack_lvl+0xe8/0x150 [ 194.548309][ T9608] should_fail_ex+0x40c/0x560 [ 194.548354][ T9608] should_failslab+0xa8/0x100 [ 194.548380][ T9608] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 194.548414][ T9608] ? __alloc_skb+0x189/0x7a0 [ 194.548450][ T9608] ? __alloc_skb+0x1d7/0x7a0 [ 194.548484][ T9608] ? __local_bh_enable_ip+0xd0/0x130 [ 194.548515][ T9608] __alloc_skb+0x1d7/0x7a0 [ 194.548556][ T9608] netlink_sendmsg+0x5d4/0xb40 [ 194.548595][ T9608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.548626][ T9608] ? aa_sock_msg_perm+0xf1/0x1b0 [ 194.548663][ T9608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.548694][ T9608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.548723][ T9608] ____sys_sendmsg+0x9b9/0xa20 [ 194.548750][ T9608] ? __might_fault+0xaf/0x130 [ 194.548789][ T9608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.548825][ T9608] ? import_iovec+0x73/0xa0 [ 194.548858][ T9608] ___sys_sendmsg+0x2a5/0x360 [ 194.548882][ T9608] ? __lock_acquire+0x683/0x2cd0 [ 194.548913][ T9608] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.548981][ T9608] ? __fget_files+0x2a/0x420 [ 194.549011][ T9608] ? __fget_files+0x3a2/0x420 [ 194.549052][ T9608] __x64_sys_sendmsg+0x1bd/0x2a0 [ 194.549081][ T9608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.549120][ T9608] ? __pfx_ksys_write+0x10/0x10 [ 194.549164][ T9608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.549190][ T9608] do_syscall_64+0x174/0x580 [ 194.549217][ T9608] ? trace_irq_disable+0x3b/0x140 [ 194.549263][ T9608] ? clear_bhb_loop+0x40/0x90 [ 194.549292][ T9608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.549316][ T9608] RIP: 0033:0x7f99ecd9ce59 [ 194.549339][ T9608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.549358][ T9608] RSP: 002b:00007f99edc6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.549383][ T9608] RAX: ffffffffffffffda RBX: 00007f99ed015fa0 RCX: 00007f99ecd9ce59 [ 194.549401][ T9608] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 194.549415][ T9608] RBP: 00007f99edc6a090 R08: 0000000000000000 R09: 0000000000000000 [ 194.549430][ T9608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.549443][ T9608] R13: 00007f99ed016038 R14: 00007f99ed015fa0 R15: 00007ffca916ebe8 [ 194.549482][ T9608] [ 194.974060][ T9623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.870'. [ 194.999222][ T9611] syz_tun: entered allmulticast mode [ 195.174917][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 195.222873][ T9614] bond0: entered promiscuous mode [ 195.229016][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.866'. [ 195.264011][ T9614] bond_slave_0: entered promiscuous mode [ 195.307178][ T9614] bond_slave_1: entered promiscuous mode [ 195.328618][ T5936] udevd[5936]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 195.380009][ T6206] udevd[6206]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 195.410751][ T9632] FAULT_INJECTION: forcing a failure. [ 195.410751][ T9632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.460811][ T9632] CPU: 1 UID: 0 PID: 9632 Comm: syz.4.870 Not tainted syzkaller #0 PREEMPT(full) [ 195.460841][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.460854][ T9632] Call Trace: [ 195.460862][ T9632] [ 195.460871][ T9632] dump_stack_lvl+0xe8/0x150 [ 195.460900][ T9632] should_fail_ex+0x40c/0x560 [ 195.460940][ T9632] _copy_to_user+0x31/0xb0 [ 195.460967][ T9632] simple_read_from_buffer+0xe1/0x170 [ 195.461005][ T9632] proc_fail_nth_read+0x1bb/0x230 [ 195.461037][ T9632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.461068][ T9632] ? rw_verify_area+0x24a/0x4c0 [ 195.461099][ T9632] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.461126][ T9632] vfs_read+0x213/0xa80 [ 195.461161][ T9632] ? __pfx___mutex_lock+0x10/0x10 [ 195.461188][ T9632] ? __pfx_vfs_read+0x10/0x10 [ 195.461220][ T9632] ? __fget_files+0x2a/0x420 [ 195.461250][ T9632] ? __fget_files+0x3a2/0x420 [ 195.461275][ T9632] ? __fget_files+0x2a/0x420 [ 195.461311][ T9632] ksys_read+0x150/0x270 [ 195.461354][ T9632] ? __pfx_ksys_read+0x10/0x10 [ 195.461395][ T9632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.461419][ T9632] do_syscall_64+0x174/0x580 [ 195.461443][ T9632] ? trace_irq_disable+0x3b/0x140 [ 195.461475][ T9632] ? clear_bhb_loop+0x40/0x90 [ 195.461501][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.461522][ T9632] RIP: 0033:0x7f99ecd5d68e [ 195.461542][ T9632] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.461559][ T9632] RSP: 002b:00007f99edc27fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.461580][ T9632] RAX: ffffffffffffffda RBX: 00007f99edc286c0 RCX: 00007f99ecd5d68e [ 195.461596][ T9632] RDX: 000000000000000f RSI: 00007f99edc280a0 RDI: 0000000000000006 [ 195.461609][ T9632] RBP: 00007f99edc28090 R08: 0000000000000000 R09: 0000000000000000 [ 195.461622][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.461634][ T9632] R13: 00007f99ed016218 R14: 00007f99ed016180 R15: 00007ffca916ebe8 [ 195.461681][ T9632] [ 195.691054][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 195.803636][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.875'. [ 195.915335][ T9661] FAULT_INJECTION: forcing a failure. [ 195.915335][ T9661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.931828][ T9661] CPU: 0 UID: 0 PID: 9661 Comm: syz.0.880 Not tainted syzkaller #0 PREEMPT(full) [ 195.931852][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.931863][ T9661] Call Trace: [ 195.931869][ T9661] [ 195.931877][ T9661] dump_stack_lvl+0xe8/0x150 [ 195.931903][ T9661] should_fail_ex+0x40c/0x560 [ 195.931936][ T9661] _copy_from_iter+0x1d3/0x1660 [ 195.931957][ T9661] ? rcu_is_watching+0x15/0xb0 [ 195.931981][ T9661] ? __pfx__copy_from_iter+0x10/0x10 [ 195.931995][ T9661] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 195.932026][ T9661] ? netlink_sendmsg+0x650/0xb40 [ 195.932044][ T9661] ? skb_put+0x112/0x210 [ 195.932062][ T9661] netlink_sendmsg+0x6c0/0xb40 [ 195.932089][ T9661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.932111][ T9661] ? aa_sock_msg_perm+0xf1/0x1b0 [ 195.932138][ T9661] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.932163][ T9661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.932182][ T9661] ____sys_sendmsg+0x9b9/0xa20 [ 195.932200][ T9661] ? __might_fault+0xaf/0x130 [ 195.932228][ T9661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.932252][ T9661] ? import_iovec+0x73/0xa0 [ 195.932274][ T9661] ___sys_sendmsg+0x2a5/0x360 [ 195.932290][ T9661] ? __lock_acquire+0x683/0x2cd0 [ 195.932311][ T9661] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.932356][ T9661] ? __fget_files+0x2a/0x420 [ 195.932376][ T9661] ? __fget_files+0x3a2/0x420 [ 195.932405][ T9661] __x64_sys_sendmsg+0x1bd/0x2a0 [ 195.932425][ T9661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.932451][ T9661] ? __pfx_ksys_write+0x10/0x10 [ 195.932482][ T9661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.932500][ T9661] do_syscall_64+0x174/0x580 [ 195.932520][ T9661] ? trace_irq_disable+0x3b/0x140 [ 195.932545][ T9661] ? clear_bhb_loop+0x40/0x90 [ 195.932567][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.932583][ T9661] RIP: 0033:0x7f891a99ce59 [ 195.932601][ T9661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.932614][ T9661] RSP: 002b:00007f891b785028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.932633][ T9661] RAX: ffffffffffffffda RBX: 00007f891ac15fa0 RCX: 00007f891a99ce59 [ 195.932645][ T9661] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 195.932655][ T9661] RBP: 00007f891b785090 R08: 0000000000000000 R09: 0000000000000000 [ 195.932667][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.932676][ T9661] R13: 00007f891ac16038 R14: 00007f891ac15fa0 R15: 00007ffd1a07b258 [ 195.932701][ T9661] [ 196.672764][ T9686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 196.707300][ T9686] nbd: device at index 64 is going down [ 196.730897][ T9688] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 196.750715][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 196.779206][ T9685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.883'. [ 196.793915][ T9685] netlink: 'syz.0.883': attribute type 7 has an invalid length. [ 196.805056][ T9685] netlink: 'syz.0.883': attribute type 8 has an invalid length. [ 196.815038][ T9686] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 196.826017][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 197.123273][ T9698] netlink: 44 bytes leftover after parsing attributes in process `syz.2.888'. [ 197.219629][ T6206] udevd[6206]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 197.286222][ T6206] udevd[6206]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 197.343810][ T6206] udevd[6206]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 197.358015][ T9712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.892'. [ 197.370950][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 197.440775][ T9712] macsec1: entered allmulticast mode [ 197.477333][ T9712] bond0: entered allmulticast mode [ 197.484772][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 197.485405][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 197.512390][ T9718] netlink: 136 bytes leftover after parsing attributes in process `syz.3.893'. [ 197.522532][ T9712] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 197.560882][ T9728] openvswitch: netlink: IP tunnel TTL not specified. [ 197.593515][ T9731] tap0: tun_chr_ioctl cmd 2148553947 [ 197.768853][ T9737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.896'. [ 197.925687][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 198.158087][ T30] audit: type=1800 audit(1781666542.003:2): pid=9752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.899" name="memory.events" dev="tmpfs" ino=998 res=0 errno=0 [ 198.574219][ T9774] netlink: 'syz.0.901': attribute type 4 has an invalid length. [ 198.627841][ T9775] netlink: 'syz.0.901': attribute type 4 has an invalid length. [ 198.669934][ T9757] syzkaller1: entered promiscuous mode [ 198.696817][ T9757] syzkaller1: entered allmulticast mode [ 198.853252][ T143] wlan1: Trigger new scan to find an IBSS to join [ 201.130431][ T30] audit: type=1804 audit(1781666544.973:3): pid=9875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.929" name="/newroot/172/cgroup.controllers" dev="tmpfs" ino=894 res=1 errno=0 [ 201.158573][ T30] audit: type=1800 audit(1781666544.973:4): pid=9875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.929" name="cgroup.controllers" dev="tmpfs" ino=894 res=0 errno=0 [ 201.670510][ T9899] tap0: tun_chr_ioctl cmd 1074025677 [ 201.692366][ T9899] tap0: linktype set to 774 [ 201.887589][ T1098] wlan1: Trigger new scan to find an IBSS to join [ 201.994881][ T9917] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 202.147552][ T9917] bond5: entered promiscuous mode [ 202.153630][ T9917] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.391505][ T9926] dvmrp0: entered allmulticast mode [ 202.504906][ T9924] lo speed is unknown, defaulting to 1000 [ 202.823947][ T9934] __nla_validate_parse: 14 callbacks suppressed [ 202.823967][ T9934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.945'. [ 203.029818][ T9941] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 203.055367][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 203.231401][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 203.279072][ T9945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.291577][ T9945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.300647][ T9945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.310615][ T9945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.336620][ T9947] netlink: 80 bytes leftover after parsing attributes in process `syz.4.950'. [ 203.358938][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.950'. [ 203.368261][ T9947] netlink: 'syz.4.950': attribute type 10 has an invalid length. [ 203.439447][ T9955] netlink: 180 bytes leftover after parsing attributes in process `syz.3.949'. [ 203.449215][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 203.620330][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 203.630181][ T9962] netlink: 220 bytes leftover after parsing attributes in process `syz.2.953'. [ 203.769262][ T9957] netlink: 14 bytes leftover after parsing attributes in process `syz.1.948'. [ 203.789811][ T9950] vlan2: entered allmulticast mode [ 203.811154][ T9950] bond0: entered allmulticast mode [ 203.875244][ T9966] bond7: entered promiscuous mode [ 203.880862][ T9966] 8021q: adding VLAN 0 to HW filter on device bond7 [ 203.969822][ T9957] bond0 (unregistering): Released all slaves [ 204.017502][ T1118] smbdirect: ib_dev[syz1] removed [ 204.018100][ T9971] netlink: 'syz.3.955': attribute type 11 has an invalid length. [ 204.324852][ T9992] netlink: 'syz.3.958': attribute type 1 has an invalid length. [ 204.356881][ T9992] netlink: 'syz.3.958': attribute type 2 has an invalid length. [ 204.659420][T10004] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20003 [ 204.830250][T10003] lo speed is unknown, defaulting to 1000 [ 204.927065][ T36] wlan1: Trigger new scan to find an IBSS to join [ 205.004158][T10024] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 205.334518][T10029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.832820][ T7435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.552264][T10079] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 206.569821][T10079] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 206.587582][ T7278] IPVS: starting estimator thread 0... [ 206.608034][T10079] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 206.660317][T10079] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 206.682337][T10081] IPVS: using max 25 ests per chain, 60000 per kthread [ 207.510277][T10105] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 207.556501][T10105] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 207.632650][T10105] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 207.693759][T10105] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 207.760741][T10113] bond2: entered allmulticast mode [ 208.000244][ T7435] smbdirect: ib_dev[syz2] removed [ 208.349756][T10132] pim6reg: entered allmulticast mode [ 208.757867][T10145] __nla_validate_parse: 5 callbacks suppressed [ 208.757885][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 208.778049][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 209.109509][ T30] audit: type=1800 audit(1781666552.953:5): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1003" name="memory.events" dev="tmpfs" ino=1132 res=0 errno=0 [ 209.163384][T10162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.550916][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1011'. [ 209.755192][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 209.776598][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1012'. [ 210.149860][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1013'. [ 210.345292][T10214] syzkaller0: entered promiscuous mode [ 210.365749][T10214] syzkaller0: entered allmulticast mode [ 210.539361][T10218] netlink: 'syz.2.1020': attribute type 58 has an invalid length. [ 210.562820][T10218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'. [ 210.605820][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1021'. [ 210.615461][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1021'. [ 210.708731][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 210.954848][T10236] bridge6: entered promiscuous mode [ 210.977811][T10236] bridge6: entered allmulticast mode [ 211.019282][T10236] team0: Port device bridge6 added [ 211.043114][T10242] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 211.090525][T10245] syz_tun: left promiscuous mode [ 211.304187][T10245] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 211.330004][T10245] veth3: left promiscuous mode [ 211.338281][T10245] gre1: left allmulticast mode [ 211.367739][T10245] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.405922][T10245] bridge1: left promiscuous mode [ 211.427008][T10245] bridge1: left allmulticast mode [ 211.443617][T10245] geneve2: left promiscuous mode [ 211.450503][T10245] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 211.778210][T10265] netlink: 'syz.1.1033': attribute type 1 has an invalid length. [ 211.915742][T10277] netlink: 'syz.4.1036': attribute type 1 has an invalid length. [ 212.841176][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.848733][ C1] bridge0: topology change detected, propagating [ 212.856861][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.864139][ C1] bridge0: topology change detected, propagating [ 213.099359][T10273] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.472859][T10310] netlink: 'syz.1.1046': attribute type 9 has an invalid length. [ 213.918800][ T7435] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 214.487699][T10324] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.495571][T10324] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.845009][T10359] geneve3: entered promiscuous mode [ 215.870653][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.895143][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.922650][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.941494][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.995041][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.032122][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.058722][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.076431][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.317046][T10390] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 216.416090][T10393] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.747711][T10329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.757901][T10386] netlink: 'syz.0.1063': attribute type 23 has an invalid length. [ 216.941462][T10397] syzkaller0: entered promiscuous mode [ 216.953445][T10397] syzkaller0: entered allmulticast mode [ 217.406649][T10413] veth0_macvtap: entered allmulticast mode [ 217.464562][T10413] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 217.607233][T10418] syzkaller1: entered promiscuous mode [ 217.640336][T10418] syzkaller1: entered allmulticast mode [ 217.809795][T10427] xt_hashlimit: size too large, truncated to 1048576 [ 217.848434][T10430] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 217.946464][T10428] __nla_validate_parse: 92 callbacks suppressed [ 217.946494][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1073'. [ 217.972480][T10428] openvswitch: netlink: Flow actions attr not present in new flow. [ 217.977496][T10430] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.036404][T10430] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1074'. [ 218.138627][T10433] vlan2: entered promiscuous mode [ 218.152458][T10433] bond3: entered promiscuous mode [ 218.162785][T10433] vlan2: entered allmulticast mode [ 218.182035][T10433] bond3: entered allmulticast mode [ 218.213522][T10436] netlink: 'syz.3.1075': attribute type 11 has an invalid length. [ 218.234596][T10430] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 218.245301][T10430] bond3: (slave batadv1): making interface the new active one [ 218.254346][T10430] batadv1: entered promiscuous mode [ 218.262131][T10430] batadv1: entered allmulticast mode [ 218.270807][T10430] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 218.409735][T10440] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 218.530163][T10443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1077'. [ 218.566590][T10443] netlink: 'syz.2.1077': attribute type 10 has an invalid length. [ 218.617711][T10445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.083776][T10416] Set syz1 is full, maxelem 65536 reached [ 226.921588][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.442298][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.324541][T10452] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1082'. [ 247.385935][T10457] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1078'. [ 247.496455][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 247.578618][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 247.607331][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 247.666996][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'. [ 247.718509][T10474] netlink: 'syz.0.1083': attribute type 3 has an invalid length. [ 247.916345][T10481] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1086'. [ 247.940953][T10488] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1085'. [ 247.958618][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1086'. [ 247.969824][T10489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1085'. [ 248.260710][T10496] netlink: 'syz.0.1089': attribute type 3 has an invalid length. [ 248.291726][T10496] netlink: 'syz.0.1089': attribute type 9 has an invalid length. [ 248.905805][ T5637] block nbd2: Receive control failed (result -32) [ 248.905805][ T4946] block nbd2: Receive control failed (result -32) [ 249.253284][T10539] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 249.544185][T10549] netlink: 'syz.4.1101': attribute type 11 has an invalid length. [ 249.639204][T10554] netlink: 'syz.4.1101': attribute type 11 has an invalid length. [ 249.665623][T10551] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 249.740379][T10551] xt_hashlimit: size too large, truncated to 1048576 [ 249.857524][T10568] netlink: 'syz.3.1102': attribute type 1 has an invalid length. [ 249.903298][T10558] : option downdelay: invalid value (18446744073709547007) [ 249.942557][T10558] : option downdelay: allowed values 0 - 2147483647 [ 249.957701][T10558]  (unregistering): Released all slaves [ 250.065734][T10555] bridge_slave_0 (unregistering): left allmulticast mode [ 250.075127][T10555] bridge_slave_0 (unregistering): left promiscuous mode [ 250.084461][T10555] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.265313][T10554] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 250.815905][T10606] vlan3: entered promiscuous mode [ 250.852982][T10606] bridge0: entered promiscuous mode [ 251.175782][T10634] xt_hashlimit: size too large, truncated to 1048576 [ 251.331897][T10639] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 251.350366][T10622] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.352601][T10640] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 251.418851][T10647] netlink: 'syz.2.1113': attribute type 1 has an invalid length. [ 251.487652][T10622] bridge_slave_0 (unregistering): left allmulticast mode [ 251.543632][T10622] bridge_slave_0 (unregistering): left promiscuous mode [ 251.567602][T10622] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.375342][T10675] __nla_validate_parse: 9 callbacks suppressed [ 252.375364][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 252.406179][ T30] audit: type=1800 audit(1781666596.253:6): pid=10677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1124" name="memory.events" dev="tmpfs" ino=1106 res=0 errno=0 [ 252.446818][T10675] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1125'. [ 252.500362][T10677] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 252.749004][T10681] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 252.853555][T10685] dummy0: entered promiscuous mode [ 252.914853][T10685] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 252.937783][T10685] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 252.968154][T10685] hsr1: entered allmulticast mode [ 252.979321][T10685] dummy0: entered allmulticast mode [ 252.993734][T10685] bridge0: entered allmulticast mode [ 253.101972][T10706] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.349673][T10714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1131'. [ 253.402857][T10718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1131'. [ 253.714071][T10710] ve: left promiscuous mode [ 253.895713][T10735] netlink: 'syz.3.1136': attribute type 10 has an invalid length. [ 254.326989][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 254.348542][T10735] geneve1: entered promiscuous mode [ 254.369605][T10735] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 254.413855][ T1118] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.458765][ T1118] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.505060][ T1118] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.555644][ T1118] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.599583][ T1118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.635732][ T1118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.666304][ T1118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.787132][T10744] netlink: 'syz.4.1140': attribute type 21 has an invalid length. [ 254.817258][T10748] lo speed is unknown, defaulting to 1000 [ 254.832477][T10744] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1140'. [ 254.853339][T10748] lo speed is unknown, defaulting to 1000 [ 254.877013][T10744] netlink: 'syz.4.1140': attribute type 4 has an invalid length. [ 254.919965][T10744] netlink: 'syz.4.1140': attribute type 3 has an invalid length. [ 254.952616][T10744] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1140'. [ 254.976569][T10748] lo speed is unknown, defaulting to 1000 [ 255.018370][T10748] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 255.113166][T10748] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 255.184237][T10748] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 255.212989][T10759] lo speed is unknown, defaulting to 1000 [ 255.266341][T10748] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 255.449025][T10748] lo speed is unknown, defaulting to 1000 [ 255.495761][T10748] lo speed is unknown, defaulting to 1000 [ 255.542046][T10748] lo speed is unknown, defaulting to 1000 [ 255.622370][T10748] lo speed is unknown, defaulting to 1000 [ 255.660750][T10748] lo speed is unknown, defaulting to 1000 [ 255.710941][T10748] lo speed is unknown, defaulting to 1000 [ 256.177936][T10810] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1154'. [ 256.243082][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 256.253052][T10813] netlink: 'syz.0.1155': attribute type 1 has an invalid length. [ 256.415162][T10813] bond3: (slave dummy0): making interface the new active one [ 256.435499][T10813] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 256.471888][T10816] bond3: entered promiscuous mode [ 256.498583][T10816] dummy0: entered promiscuous mode [ 256.539839][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 256.589219][T10824] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1157'. [ 257.090604][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.098436][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.258696][T10818] bond3: (slave dummy0): Releasing active interface [ 257.277553][T10818] dummy0: left promiscuous mode [ 257.410722][T10818] bridge_slave_0: left allmulticast mode [ 257.423229][T10818] bridge_slave_0: left promiscuous mode [ 257.439345][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.512270][T10818] bridge_slave_1: left allmulticast mode [ 257.518102][T10818] bridge_slave_1: left promiscuous mode [ 257.526823][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.726071][T10818] bond0: (slave bond_slave_0): Releasing backup interface [ 257.743133][T10818] bond_slave_0: left promiscuous mode [ 257.795601][T10818] bond0: (slave bond_slave_1): Releasing backup interface [ 257.812532][T10818] bond_slave_1: left promiscuous mode [ 257.865747][T10818] team0: Port device team_slave_0 removed [ 257.960638][T10818] team0: Port device team_slave_1 removed [ 258.003305][T10818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.041363][T10818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.086469][T10818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.126937][T10818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.309882][T10818] tipc: Resetting bearer [ 258.558413][T10818] team0: Port device geneve1 removed [ 258.570821][T10818] team0: Port device netdevsim1 removed [ 258.754305][T10812] bond3: left promiscuous mode [ 258.824887][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.893454][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.915047][T10878] netlink: 'syz.1.1160': attribute type 10 has an invalid length. [ 258.932645][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.957228][T10878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1160'. [ 258.974206][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.005664][T10878] team0: Port device geneve1 added [ 259.036962][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.067029][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.141777][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.182879][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.200271][T10888] netlink: 12562 bytes leftover after parsing attributes in process `syz.4.1163'. [ 259.254617][T10897] netlink: 'syz.3.1164': attribute type 10 has an invalid length. [ 259.287821][T10900] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1166'. [ 259.308310][T10898] syzkaller0: entered promiscuous mode [ 259.314466][T10898] syzkaller0: entered allmulticast mode [ 259.327251][T10897] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.336654][T10897] bond0: (slave team0): Enslaving as an active interface with an up link [ 259.360542][T10886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1162'. [ 259.374132][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 259.384670][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1162'. [ 259.583254][T10906] syzkaller1: entered promiscuous mode [ 259.608781][T10906] syzkaller1: entered allmulticast mode [ 260.279867][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 260.295835][T10933] vlan2: left promiscuous mode [ 260.317902][T10933] bond3: left promiscuous mode [ 260.343580][T10933] batadv1: left promiscuous mode [ 260.359716][T10933] vlan2: left allmulticast mode [ 260.384281][T10933] bond3: left allmulticast mode [ 260.394997][T10933] batadv1: left allmulticast mode [ 260.400443][T10933] hsr1: left allmulticast mode [ 260.411406][T10933] dummy0: left allmulticast mode [ 260.417918][T10933] bridge0: left allmulticast mode [ 260.428490][ T7435] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.438502][ T7435] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.480855][T10948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.510038][T10945] vlan2: entered allmulticast mode [ 260.512793][T10962] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 260.526615][T10945] bridge10: entered allmulticast mode [ 260.608804][ T7435] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.642456][ T7435] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.690401][T10962] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 260.911829][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1187'. [ 261.063891][T10985] syzkaller0: entered promiscuous mode [ 261.071483][T10985] syzkaller0: entered allmulticast mode [ 261.142320][T10985] tipc: Enabled bearer , priority 0 [ 261.247544][T10984] tipc: Resetting bearer [ 261.303425][T10984] tipc: Disabling bearer [ 261.407179][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'. [ 261.704468][T11008] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 261.872566][T11015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'. [ 261.946733][T11021] netlink: 'syz.3.1197': attribute type 30 has an invalid length. [ 262.293289][T11038] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 262.355387][T11038] 8021q: adding VLAN 0 to HW filter on device bond8 [ 262.495234][T11043] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 262.503294][T11041] bond8: (slave veth11): Enslaving as an active interface with a down link [ 262.587036][T11038] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 262.669563][T11038] bond8: (slave batadv1): making interface the new active one [ 262.689090][T11038] batadv1: entered promiscuous mode [ 262.702961][T11038] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 263.130828][T11072] netlink: 'syz.0.1212': attribute type 4 has an invalid length. [ 263.169292][T11077] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 263.237941][T11077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.335633][T11062] bond0: left promiscuous mode [ 263.394936][T11072] .`: renamed from bond0 [ 263.964413][T11125] __nla_validate_parse: 15 callbacks suppressed [ 263.964433][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 264.303310][T11136] netlink: 'syz.3.1228': attribute type 1 has an invalid length. [ 264.320062][T11136] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1228'. [ 264.355749][T11141] syzkaller0: entered promiscuous mode [ 264.368792][T11141] syzkaller0: entered allmulticast mode [ 264.466066][T11139] tipc: Enabled bearer , priority 0 [ 264.526936][T11139] tipc: Resetting bearer [ 264.547862][T11148] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1231'. [ 264.588248][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1231'. [ 264.611878][T11148] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1231'. [ 264.623413][T11139] tipc: Disabling bearer [ 264.653424][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 264.916548][T11175] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1236'. [ 265.224817][T11189] netlink: 'syz.3.1239': attribute type 1 has an invalid length. [ 265.278723][T11189] bond6: entered promiscuous mode [ 265.286406][T11189] bond6: entered allmulticast mode [ 265.293220][T11189] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.313532][T11192] sctp: [Deprecated]: syz.0.1240 (pid 11192) Use of int in max_burst socket option. [ 265.313532][T11192] Use struct sctp_assoc_value instead [ 265.316908][T11195] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1241'. [ 265.337735][T11192] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 265.360609][T11195] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1241'. [ 265.562024][T11196] lo speed is unknown, defaulting to 1000 [ 265.788187][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'. [ 265.835434][T11210] ipvlan1: entered promiscuous mode [ 265.846839][T11210] ipvlan1: left promiscuous mode [ 266.271256][T11236] bridge_slave_1: left allmulticast mode [ 266.284126][T11236] bridge_slave_1: left promiscuous mode [ 266.299545][T11236] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.319289][T11236] bond0: (slave bond_slave_0): Releasing backup interface [ 266.340987][T11236] bond0: (slave bond_slave_1): Releasing backup interface [ 266.369036][T11236] team_slave_1: left promiscuous mode [ 266.391952][T11236] team0: Port device team_slave_1 removed [ 266.398756][T11236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.415887][T11236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.425367][T11236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.434189][T11236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.445002][T11236] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 266.462489][T11196] lo speed is unknown, defaulting to 1000 [ 266.631846][T11258] netlink: 'syz.3.1254': attribute type 13 has an invalid length. [ 266.645373][T11258] netlink: 'syz.3.1254': attribute type 17 has an invalid length. [ 266.720205][ T143] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.729762][ T143] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.845558][T11258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.854768][T11258] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.929623][T11258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.940417][T11258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.955872][T11258] veth1_vlan: left promiscuous mode [ 266.962866][T11258] veth0_vlan: left promiscuous mode [ 266.969070][T11258] veth0_vlan: entered promiscuous mode [ 266.979067][T11258] veth1_vlan: entered promiscuous mode [ 266.990587][T11258] veth1_macvtap: left promiscuous mode [ 266.998342][T11258] veth0_macvtap: left promiscuous mode [ 267.004014][T11258] veth0_macvtap: left allmulticast mode [ 267.010894][T11258] veth0_macvtap: entered promiscuous mode [ 267.027067][T11258] veth1_macvtap: entered promiscuous mode [ 267.037998][T11258] geneve1: left promiscuous mode [ 267.045853][T11258] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.059648][T11258] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.074401][T11258] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.088325][T11258] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 267.095440][T11258] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 267.108446][T11258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.123731][T11258] ip6tnl1: left allmulticast mode [ 267.152976][T11258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.161455][T11258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.170980][T11258] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.189772][T11258] bond5: left promiscuous mode [ 267.195110][T11258] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.236557][T11258] vlan2: left allmulticast mode [ 267.242736][T11258] bridge10: left allmulticast mode [ 267.249522][T11258] bond6: left promiscuous mode [ 267.255886][T11258] bond6: left allmulticast mode [ 267.278777][T11258] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.343002][ T143] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.371487][ T143] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.394672][ T143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.406668][ T808] lo speed is unknown, defaulting to 1000 [ 267.416561][ T808] syz2: Port: 1 Link ACTIVE [ 267.491873][T11265] 5nè: entered promiscuous mode [ 267.508684][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.515970][ T7430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.620856][ T36] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 267.846107][ T143] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.884290][ T143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.998246][T11291] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 268.206510][T11296] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 268.230498][T11296] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 268.312972][ T143] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.335313][ T143] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.363468][ T143] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.389462][ T143] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.798469][T11326] netlink: 'syz.4.1272': attribute type 1 has an invalid length. [ 268.910314][T11326] 8021q: adding VLAN 0 to HW filter on device bond9 [ 269.085628][T11330] bond9: (slave veth13): Enslaving as an active interface with a down link [ 269.138274][T11314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.217720][T11345] __nla_validate_parse: 10 callbacks suppressed [ 269.217743][T11345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1275'. [ 269.406609][T11356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1277'. [ 269.416077][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 269.757263][T11372] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 269.767533][T11373] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 270.109152][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 270.145738][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'. [ 270.161305][T11389] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 270.182759][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1288'. [ 270.616847][T11418] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1296'. [ 270.913911][T11430] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1300'. [ 270.929361][ T30] audit: type=1804 audit(1781666614.773:7): pid=11427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1298" name="/newroot/255/cgroup.controllers" dev="tmpfs" ino=1318 res=1 errno=0 [ 270.957811][ T30] audit: type=1800 audit(1781666614.773:8): pid=11427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1298" name="cgroup.controllers" dev="tmpfs" ino=1318 res=0 errno=0 [ 271.016931][T11430] macsec2: entered promiscuous mode [ 271.150790][T11440] netlink: 'syz.0.1302': attribute type 10 has an invalid length. [ 271.168039][T11440] syz_tun: entered promiscuous mode [ 271.198559][T11440] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 271.224705][T11444] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1302'. [ 271.299735][T11444] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1302'. [ 271.642533][T11455] bridge0: port 1(vlan3) entered blocking state [ 271.662561][T11455] bridge0: port 1(vlan3) entered disabled state [ 271.696572][T11455] vlan3: entered allmulticast mode [ 271.711833][T11455] bridge0: entered allmulticast mode [ 271.732609][T11455] vlan3: left allmulticast mode [ 271.738106][T11455] bridge0: left allmulticast mode [ 271.823923][T11461] ip6tnl1: entered allmulticast mode [ 272.316237][T11485] sit0: left promiscuous mode [ 272.336261][T11485] syz_tun: left promiscuous mode [ 272.404753][T11485] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 272.433200][T11485] bond1: left promiscuous mode [ 272.455532][T11485] ip6gre1: left promiscuous mode [ 272.473260][T11485] ip6gre1: left allmulticast mode [ 272.494148][T11485] bond2: left allmulticast mode [ 272.513197][T11485] geneve3: left promiscuous mode [ 273.289087][T11541] 8021q: VLANs not supported on ip_vti0 [ 273.296218][T11543] netlink: 'syz.4.1328': attribute type 1 has an invalid length. [ 273.330740][T11543] bond10: entered promiscuous mode [ 273.337647][T11543] 8021q: adding VLAN 0 to HW filter on device bond10 [ 273.374830][T11543] macvtap1: entered allmulticast mode [ 273.428305][T11543] bond10: (slave bridge13): making interface the new active one [ 273.437427][T11543] bridge13: entered promiscuous mode [ 273.446202][T11543] bond10: (slave bridge13): Enslaving as an active interface with an up link [ 273.632823][ T5639] block nbd4: Receive control failed (result -32) [ 273.634525][ T4946] block nbd3: Receive control failed (result -32) [ 273.648599][ T5637] block nbd3: Receive control failed (result -32) [ 273.651470][ T50] block nbd4: Receive control failed (result -32) [ 273.793271][ T7433] batadv1: left promiscuous mode [ 273.874156][T11556] xt_policy: output policy not valid in PREROUTING and INPUT [ 273.908982][T11558] x_tables: duplicate underflow at hook 3 [ 274.095834][T11565] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 274.493746][T11586] __nla_validate_parse: 9 callbacks suppressed [ 274.493763][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1341'. [ 274.515950][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 274.526711][T11586] netlink: 'syz.2.1341': attribute type 14 has an invalid length. [ 274.535182][T11586] netlink: 'syz.2.1341': attribute type 12 has an invalid length. [ 274.676137][T11593] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 274.684637][T11593] netlink: 'syz.4.1343': attribute type 2 has an invalid length. [ 274.693388][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 274.706976][T11596] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 274.715271][T11596] netlink: 'syz.4.1343': attribute type 2 has an invalid length. [ 274.724359][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 274.860254][T11600] bond8: (slave tunl0): Device is not bonding slave [ 274.875352][T11600] bond8: option active_slave: invalid value (tunl0) [ 274.892988][T11600] bond8 (unregistering): Released all slaves [ 275.168277][T11612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.339013][T11619] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1348'. [ 275.535179][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1351'. [ 275.587024][T11628] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1351'. [ 275.650310][T11631] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1352'. [ 276.069758][T11647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.087071][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 276.357650][T11654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1359'. [ 276.423263][T11656] netlink: 'syz.0.1359': attribute type 10 has an invalid length. [ 276.433299][T11656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.445141][T11656] team0: Port device netdevsim1 added [ 276.785625][T11668] netlink: 'syz.2.1362': attribute type 7 has an invalid length. [ 276.794554][T11668] netlink: 'syz.2.1362': attribute type 8 has an invalid length. [ 276.907420][T11674] netlink: 'syz.0.1363': attribute type 16 has an invalid length. [ 276.916495][T11674] netlink: 'syz.0.1363': attribute type 3 has an invalid length. [ 276.917743][T11676] xt_bpf: check failed: parse error [ 277.115015][T11688] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 277.624016][T11727] sctp: [Deprecated]: syz.1.1376 (pid 11727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.624016][T11727] Use struct sctp_sack_info instead [ 277.661349][T11727] sctp: [Deprecated]: syz.1.1376 (pid 11727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.661349][T11727] Use struct sctp_sack_info instead [ 277.952145][T11732] syzkaller1: entered promiscuous mode [ 277.971304][T11732] syzkaller1: entered allmulticast mode [ 278.430787][T11758] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.511733][T11774] sctp: [Deprecated]: syz.4.1392 (pid 11774) Use of int in maxseg socket option. [ 278.511733][T11774] Use struct sctp_assoc_value instead [ 278.544261][T11776] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 278.572926][T11776] netlink: 'syz.1.1388': attribute type 3 has an invalid length. [ 278.823387][T11790] netlink: 'syz.4.1396': attribute type 14 has an invalid length. [ 278.837750][T11790] netlink: 'syz.4.1396': attribute type 13 has an invalid length. [ 278.853965][T11786] vlan3: entered promiscuous mode [ 279.100829][T11800] ipip1: entered promiscuous mode [ 279.219956][T11799] xt_CT: No such helper "syz0" [ 279.397349][T11815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.620541][T11823] __nla_validate_parse: 20 callbacks suppressed [ 279.620573][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 279.706802][T11830] xt_l2tp: invalid flags combination: 0 [ 279.715097][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1407'. [ 279.870494][T11838] x_tables: duplicate underflow at hook 1 [ 280.147711][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1413'. [ 280.158379][T11854] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 280.352167][T11862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1415'. [ 280.437213][T11866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1416'. [ 280.525849][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 280.548608][T11869] bridge_slave_0: entered promiscuous mode [ 280.903182][T11890] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1422'. [ 280.934636][T11890] netlink: Conntrack attr has 4 unknown bytes [ 281.121630][T11901] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 282.156411][T11926] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1430'. [ 282.185323][T11925] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1430'. [ 282.421470][T11933] xt_TCPMSS: Only works on TCP SYN packets [ 282.805089][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1437'. [ 283.173373][T11965] 8021q: adding VLAN 0 to HW filter on device bond10 [ 283.197556][T11965] bond9: (slave bond10): Enslaving as an active interface with an up link [ 283.207524][T11968] validate_nla: 4 callbacks suppressed [ 283.207545][T11968] netlink: 'syz.3.1438': attribute type 4 has an invalid length. [ 283.236563][T11966] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.285181][T11975] ip6tnl2: entered promiscuous mode [ 283.550579][T11984] syzkaller1: entered promiscuous mode [ 283.584531][T11984] syzkaller1: entered allmulticast mode [ 283.727257][T11995] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 284.055934][T12007] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 284.350650][T12016] ip6gre1: entered promiscuous mode [ 284.362513][T12016] ip6gre1: entered allmulticast mode [ 285.214596][ T7435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.223928][T12041] __nla_validate_parse: 3 callbacks suppressed [ 285.223950][T12041] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1456'. [ 285.241892][ T7435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.505934][T12051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1458'. [ 285.669660][T12061] netlink: 'syz.0.1459': attribute type 3 has an invalid length. [ 285.698242][T12061] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1459'. [ 285.743931][T12061] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 286.103571][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 286.225930][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'. [ 286.303496][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 286.354509][T12079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1465'. [ 286.377262][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 286.476057][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 286.562354][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 287.443594][T12114] tipc: Enabling of bearer rejected, failed to enable media [ 287.851860][T12120] netlink: 'syz.2.1476': attribute type 3 has an invalid length. [ 288.138581][T12123] lo speed is unknown, defaulting to 1000 [ 288.703171][T12130] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 288.986925][T12123] lo speed is unknown, defaulting to 1000 [ 289.543169][T12188] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 289.559301][T12188] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 290.404700][T12224] __nla_validate_parse: 36 callbacks suppressed [ 290.404717][T12224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1497'. [ 290.496740][T12223] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 290.529754][T12224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.654373][T12229] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 290.674305][T12232] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1501'. [ 290.684062][T12229] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 291.113962][T12248] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1506'. [ 291.178277][T12248] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1506'. [ 291.246574][T12248] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1506'. [ 291.353044][T12265] netlink: 'syz.1.1510': attribute type 5 has an invalid length. [ 291.410271][T12265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1510'. [ 291.479240][T12261] lo speed is unknown, defaulting to 1000 [ 291.504334][T12268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.511703][T12268] IPv6: NLM_F_CREATE should be set when creating new route [ 291.519039][T12268] IPv6: NLM_F_CREATE should be set when creating new route [ 291.526388][T12268] IPv6: NLM_F_CREATE should be set when creating new route [ 291.602515][T12268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.863932][T12276] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1512'. [ 292.570447][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1520'. [ 292.604141][T10605] udevd[10605]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 292.627818][T12261] lo speed is unknown, defaulting to 1000 [ 293.655849][T12326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1525'. [ 293.688594][T12325] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 293.710045][T12327] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1525'. [ 294.684459][T12348] tipc: Enabled bearer , priority 10 [ 294.751809][T12344] syz_tun (unregistering): left allmulticast mode [ 294.778849][T12344] .`: (slave syz_tun): Releasing backup interface [ 295.317168][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.360229][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.573088][T12372] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 295.625430][T12372] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 295.658866][T12372] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 295.733100][T12390] __nla_validate_parse: 4 callbacks suppressed [ 295.733119][T12390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1542'. [ 295.766177][T12372] bond1: left promiscuous mode [ 295.788569][T12372] bond2: left promiscuous mode [ 295.823222][T12372] geneve2: left promiscuous mode [ 295.834930][T12372] geneve2: left allmulticast mode [ 295.840164][T12372] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 296.347237][T12410] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1547'. [ 296.357801][T12410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1547'. [ 296.369688][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1548'. [ 296.372726][T12410] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1547'. [ 296.638026][ T30] audit: type=1800 audit(1781666640.483:9): pid=12425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1551" name="memory.events" dev="tmpfs" ino=1472 res=0 errno=0 [ 296.708934][T12425] netlink: 'syz.1.1551': attribute type 1 has an invalid length. [ 296.775417][T12432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1553'. [ 296.820460][T12434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1553'. [ 296.876957][T12425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.909489][T12436] bond5: entered allmulticast mode [ 296.916508][T12436] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.926083][T12433] tipc: Enabling of bearer rejected, failed to enable media [ 296.956497][T12443] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 297.274607][T12455] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 297.678937][T12467] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 297.776980][T12467] 8021q: adding VLAN 0 to HW filter on device bond11 [ 297.800586][T12471] xt_hashlimit: size too large, truncated to 1048576 [ 297.882192][ T1118] wlan1: Trigger new scan to find an IBSS to join [ 297.971731][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 297.994930][T12477] openvswitch: netlink: Flow actions attr not present in new flow. [ 298.038897][T12475] erspan0: entered promiscuous mode [ 298.062382][T12475] macvtap0: entered promiscuous mode [ 298.085686][T12475] macvtap0: entered allmulticast mode [ 298.100156][T12475] erspan0: entered allmulticast mode [ 298.178084][T12479] erspan0: left allmulticast mode [ 298.205731][T12479] erspan0: left promiscuous mode [ 298.232991][T12479] macvtap0: left promiscuous mode [ 298.243677][T12479] macvtap0: left allmulticast mode [ 298.386666][T12488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.439921][T12490] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 298.474581][T12490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.648727][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 298.669137][T12501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1573'. [ 298.982509][T12494] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.204868][ T5746] lo speed is unknown, defaulting to 1000 [ 301.228408][ T5746] syz2: Port: 1 Link DOWN [ 301.295777][ T7430] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.329021][ T7430] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.384527][ T7430] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.420056][ T7430] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.466610][ T7430] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.493123][ T7430] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.802059][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.886307][T12538] xt_HMARK: spi-set and port-set can't be combined [ 302.026263][T12543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1584'. [ 302.111975][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1584'. [ 302.133516][T12543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1584'. [ 302.159508][T12545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1584'. [ 302.170501][T12543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1584'. [ 302.195122][T12543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1584'. [ 302.214602][T12547] netlink: 15816 bytes leftover after parsing attributes in process `syz.2.1585'. [ 302.241391][T12543] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1584'. [ 302.254879][T12541] lo speed is unknown, defaulting to 1000 [ 302.633772][T12557] pimreg: entered allmulticast mode [ 302.912819][T12541] lo speed is unknown, defaulting to 1000 [ 304.883924][T12605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1596'. [ 304.917250][T12605] netlink: 'syz.0.1596': attribute type 58 has an invalid length. [ 304.952902][T12610] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 304.992022][T12610] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 305.006585][T12610] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.1598'. [ 306.257844][T12685] netlink: 'syz.0.1612': attribute type 10 has an invalid length. [ 306.272162][T12685] team0: Port device geneve1 added [ 306.278002][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.313466][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.323338][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.334940][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.416975][T12689] openvswitch: netlink: IP tunnel TTL not specified. [ 306.564242][T12692] syzkaller0: entered promiscuous mode [ 306.569888][T12692] syzkaller0: entered allmulticast mode [ 308.488641][T12630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.769535][T12652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.172715][T12719] __nla_validate_parse: 6 callbacks suppressed [ 309.172737][T12719] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1618'. [ 309.319133][T12717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1622'. [ 310.253265][T12747] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1628'. [ 310.270241][T12747] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1628'. [ 310.642628][T12757] IPVS: persistence engine module ip_vs_pe_À not found [ 310.650665][T12763] sctp: [Deprecated]: syz.1.1629 (pid 12763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.650665][T12763] Use struct sctp_sack_info instead [ 310.740652][T12765] netlink: 'syz.2.1630': attribute type 8 has an invalid length. [ 310.976449][T12769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1633'. [ 311.003046][T12774] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1634'. [ 311.036823][T12774] 0ªX¹¦À: renamed from batadv0 (while UP) [ 311.045470][T12775] netlink: 'syz.1.1632': attribute type 3 has an invalid length. [ 311.104963][T12775] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1632'. [ 311.120414][T12774] 0ªX¹¦À: entered allmulticast mode [ 311.130639][T12779] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1635'. [ 311.157629][T12774] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 311.180286][T12778] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 311.206708][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 311.245994][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1636'. [ 311.298335][T12781] dummy0: entered promiscuous mode [ 311.320226][T12781] dummy0: left promiscuous mode [ 311.719879][T12795] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 311.849905][T12809] netlink: 'syz.1.1643': attribute type 1 has an invalid length. [ 312.034463][T12802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.975547][T12850] tipc: Bearer : already 2 bearers with priority 10 [ 312.987479][T12850] tipc: Bearer : trying with adjusted priority [ 312.996994][T12850] tipc: New replicast peer: 172.30.0.1 [ 313.003373][T12850] tipc: Enabled bearer , priority 9 [ 313.322982][T12862] ip6tnl3: entered allmulticast mode [ 313.576244][T12868] bridge11: entered promiscuous mode [ 313.622204][T12868] bridge11: entered allmulticast mode [ 313.668092][T12868] team0: Port device bridge11 added [ 314.330619][T12895] xt_hashlimit: size too large, truncated to 1048576 [ 314.343304][T12899] __nla_validate_parse: 5 callbacks suppressed [ 314.343328][T12899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1659'. [ 315.018033][T12912] netlink: 'syz.3.1665': attribute type 62 has an invalid length. [ 315.092822][T12912] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1665'. [ 315.153021][T12916] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1667'. [ 315.206222][T12917] netlink: 'syz.1.1667': attribute type 12 has an invalid length. [ 315.642648][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1674'. [ 315.829309][T12948] netlink: 'syz.3.1677': attribute type 4 has an invalid length. [ 315.849927][T12948] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1677'. [ 315.969693][T12952] netlink: 'syz.0.1680': attribute type 89 has an invalid length. [ 316.477960][T12970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.037436][T12994] geneve3: entered allmulticast mode [ 317.059380][T12994] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1692'. [ 317.079331][T12994] netlink: 'syz.4.1692': attribute type 1 has an invalid length. [ 317.090840][T12997] netlink: 'syz.3.1693': attribute type 21 has an invalid length. [ 317.105372][T12994] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1692'. [ 317.125242][T12997] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1693'. [ 317.319475][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1694'. [ 317.940890][T13032] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1701'. [ 319.283467][T13082] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 319.526510][T13084] __nla_validate_parse: 2 callbacks suppressed [ 319.526534][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1721'. [ 319.620397][T13084] xfrm0: entered allmulticast mode [ 319.657482][T13084] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 320.770157][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1738'. [ 320.790589][T13152] openvswitch: netlink: Flow actions attr not present in new flow. [ 320.846154][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1738'. [ 320.967428][T13150] team1: entered promiscuous mode [ 320.981406][T13150] team1: entered allmulticast mode [ 320.999985][T13150] 8021q: adding VLAN 0 to HW filter on device team1 [ 321.082731][T13153] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 321.130291][T13153] team2: entered promiscuous mode [ 321.136536][T13153] team2: entered allmulticast mode [ 321.143034][T13153] 8021q: adding VLAN 0 to HW filter on device team2 [ 321.548545][T13181] netlink: 'syz.4.1746': attribute type 1 has an invalid length. [ 321.640599][T13181] 8021q: adding VLAN 0 to HW filter on device bond12 [ 321.754523][T13196] netlink: 'syz.4.1746': attribute type 1 has an invalid length. [ 321.770076][T13197] netlink: 566 bytes leftover after parsing attributes in process `syz.2.1749'. [ 321.788069][T13196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.808546][T13184] bond6: ARP target 9.0.0.0 is already present [ 321.829896][T13184] bond6: option arp_ip_target: invalid value (9) [ 322.079634][T13184] bond6 (unregistering): Released all slaves [ 322.188844][T13187] bond12: (slave veth1): Enslaving as an active interface with a down link [ 322.635646][T13218] lo speed is unknown, defaulting to 1000 [ 322.756759][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 322.983765][T13233] syzkaller1: entered allmulticast mode [ 323.171520][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 323.251961][T13252] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1754'. [ 323.297556][T13246] 8021q: adding VLAN 0 to HW filter on device bond11 [ 323.755983][T13277] netlink: 'syz.0.1766': attribute type 13 has an invalid length. [ 323.800796][T13278] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 324.105303][T13218] lo speed is unknown, defaulting to 1000 [ 324.202459][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 324.248514][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1768'. [ 324.358885][T13297] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 324.371792][T13297] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 324.860677][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 325.182426][T13320] (: renamed from bridge_slave_0 (while UP) [ 325.222924][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1776'. [ 325.282265][T13322] 8021q: adding VLAN 0 to HW filter on device bond7 [ 325.390380][T13329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1779'. [ 326.260805][T13356] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.295013][T13356] erspan0: entered promiscuous mode [ 327.564366][T13305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.109433][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 328.247932][T13403] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 328.366020][T13406] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 328.536347][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1796'. [ 328.547413][T13411] veth1_to_batadv: entered allmulticast mode [ 330.832732][T13381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.553677][T13443] netlink: 'syz.2.1803': attribute type 8 has an invalid length. [ 331.754388][T13456] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1807'. [ 331.901351][T13465] netlink: 'syz.0.1806': attribute type 9 has an invalid length. [ 331.974698][T13465] netlink: 'syz.0.1806': attribute type 6 has an invalid length. [ 332.016653][T13465] netlink: 'syz.0.1806': attribute type 7 has an invalid length. [ 332.064670][T13465] netlink: 'syz.0.1806': attribute type 8 has an invalid length. [ 332.126639][T13470] veth0: entered promiscuous mode [ 332.162052][T13470] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 332.415324][T13469] veth0: left promiscuous mode [ 332.784317][T13496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1820'. [ 333.084552][T13503] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1822'. [ 333.129990][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 333.151278][T13508] nbd: socks must be embedded in a SOCK_ITEM attr [ 333.271654][T13507] syzkaller1: entered promiscuous mode [ 333.291983][T13507] syzkaller1: entered allmulticast mode [ 333.534655][T13507] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 333.564229][T13530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.626400][T13511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.939619][T13537] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1831'. [ 334.006503][T13537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1831'. [ 334.109896][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1831'. [ 334.240820][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1834'. [ 334.666359][T13578] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 334.833885][T13582] netlink: 'syz.2.1841': attribute type 11 has an invalid length. [ 334.861772][T13578] 8021q: adding VLAN 0 to HW filter on device bond13 [ 334.891542][T13579] bond13: (slave gretap3): making interface the new active one [ 334.900610][T13579] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 335.086856][T13584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1842'. [ 335.106380][T13584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1842'. [ 335.144590][T13592] 8021q: VLANs not supported on vcan0 [ 335.252905][T13565] team0: Failed to send options change via netlink (err -105) [ 335.268699][T13565] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 335.306156][T13565] team0: Port device netdevsim1 removed [ 335.392227][T13597] bond8: (slave tunl0): Device is not bonding slave [ 335.399056][T13597] bond8: option active_slave: invalid value (tunl0) [ 335.416577][T13597] bond8 (unregistering): Released all slaves [ 335.452679][T13603] netlink: 'syz.4.1848': attribute type 4 has an invalid length. [ 335.591772][T13610] netlink: 'syz.2.1850': attribute type 5 has an invalid length. [ 335.607193][T13610] netlink: 'syz.2.1850': attribute type 3 has an invalid length. [ 335.667771][T13610] geneve2: entered promiscuous mode [ 335.673890][T13610] geneve2: entered allmulticast mode [ 335.684615][ T7435] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 53653 - 0 [ 335.699044][ T7435] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 53653 - 0 [ 335.714871][T13615] netlink: 'syz.4.1851': attribute type 21 has an invalid length. [ 335.729300][ T7435] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 53653 - 0 [ 335.751293][ T7435] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 53653 - 0 [ 336.021925][T13626] syzkaller1: entered promiscuous mode [ 336.032863][T13626] syzkaller1: entered allmulticast mode [ 336.807655][T13663] tipc: Enabling of bearer rejected, failed to enable media [ 336.819823][T13663] __nla_validate_parse: 10 callbacks suppressed [ 336.819847][T13663] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1864'. [ 337.199621][T13673] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1865'. [ 338.444336][T13714] bond12: entered allmulticast mode [ 338.467066][T13714] 8021q: adding VLAN 0 to HW filter on device bond12 [ 339.339079][T13743] lo speed is unknown, defaulting to 1000 [ 339.982694][T13777] validate_nla: 2 callbacks suppressed [ 339.982717][T13777] netlink: 'syz.4.1884': attribute type 89 has an invalid length. [ 340.074850][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1886'. [ 340.093458][T13782] netlink: 'syz.1.1886': attribute type 2 has an invalid length. [ 340.252634][T13743] lo speed is unknown, defaulting to 1000 [ 340.283718][T13786] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1887'. [ 340.435133][T13791] netlink: 'syz.1.1888': attribute type 3 has an invalid length. [ 340.477172][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1888'. [ 340.758441][T13805] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 340.822285][T13805] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 340.868053][T13805] netlink: 'syz.3.1890': attribute type 2 has an invalid length. [ 340.896165][T13805] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 341.055113][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1892'. [ 341.101685][T13809] nbd: must specify a size in bytes for the device [ 341.348976][T13826] dummy0: entered promiscuous mode [ 341.375894][T13826] erspan0: entered promiscuous mode [ 341.394568][T13826] debugfs: 'hsr0' already exists in 'hsr' [ 341.410741][T13826] Cannot create hsr debugfs directory [ 341.420981][T13826] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 341.447967][T13828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.458985][T13826] hsr0: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 341.469888][T13826] hsr0: entered allmulticast mode [ 341.496878][T13826] dummy0: entered allmulticast mode [ 341.526460][T13826] erspan0: entered allmulticast mode [ 341.548276][T13834] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1895'. [ 341.562152][T13830] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1896'. [ 341.594760][T13830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1896'. [ 341.605413][T13830] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1896'. [ 341.856230][T13842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1897'. [ 342.126178][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 342.135690][T13847] hsr_slave_0: left promiscuous mode [ 342.145227][T13847] hsr_slave_1: left promiscuous mode [ 342.175648][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 342.185317][T13850] v: renamed from gre0 (while UP) [ 342.193985][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 342.206886][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 342.218126][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 342.255545][T13850] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 342.418323][T13857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1903'. [ 342.979342][T13859] netlink: 'syz.1.1904': attribute type 8 has an invalid length. [ 343.213644][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1912'. [ 343.693468][T13906] syzkaller0: entered promiscuous mode [ 343.735393][T13906] syzkaller0: entered allmulticast mode [ 343.899986][T13916] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1915'. [ 344.164676][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.216074][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.404578][T13948] vlan3: entered promiscuous mode [ 344.741321][T13958] syzkaller1: entered promiscuous mode [ 344.749098][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1924'. [ 344.774822][T13958] syzkaller1: entered allmulticast mode [ 344.920680][T13959] 8021q: adding VLAN 0 to HW filter on device bond14 [ 345.328144][T13979] netlink: 'syz.0.1931': attribute type 10 has an invalid length. [ 345.427307][T13979] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.458959][T13979] .`: (slave team0): Enslaving as an active interface with an up link [ 345.773117][T13999] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 345.883035][ T1098] wlan1: Trigger new scan to find an IBSS to join [ 346.080472][T14010] netlink: 'syz.0.1937': attribute type 1 has an invalid length. [ 346.211606][T14010] bond6: entered promiscuous mode [ 346.230438][T14010] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.673182][T14037] pim6reg: entered allmulticast mode [ 346.767233][T14040] syzkaller0: entered promiscuous mode [ 346.786178][T14040] syzkaller0: entered allmulticast mode [ 346.820281][T14037] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 346.833451][T14040] tipc: Enabled bearer , priority 0 [ 346.865430][T14040] netlink: 'syz.1.1944': attribute type 21 has an invalid length. [ 346.973376][T14040] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 346.990217][T14040] __nla_validate_parse: 11 callbacks suppressed [ 346.990237][T14040] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1944'. [ 347.049567][T14039] tipc: Resetting bearer [ 347.152349][T14039] tipc: Disabling bearer [ 347.569275][T14067] bridge7: entered promiscuous mode [ 347.610497][T14067] bridge7: entered allmulticast mode [ 347.704275][T14067] team0: Port device bridge7 added [ 347.720451][T14075] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1952'. [ 347.867797][T14079] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1954'. [ 347.955825][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 348.002902][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 348.047810][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 348.389921][T14105] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 348.610762][T14105] bond15: entered promiscuous mode [ 348.634039][T14105] 8021q: adding VLAN 0 to HW filter on device bond15 [ 348.843058][ T1126] wlan1: Trigger new scan to find an IBSS to join [ 348.860781][T14119] 8021q: adding VLAN 0 to HW filter on device bond15 [ 348.877852][T14119] bond15: (slave vti0): The slave device specified does not support setting the MAC address [ 348.904498][T14119] bond15: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 348.930338][T14119] bond15: (slave vti0): making interface the new active one [ 348.939080][T14119] vti0: entered promiscuous mode [ 348.948105][T14119] bond15: (slave vti0): Enslaving as an active interface with an up link [ 348.957481][T14123] xfrm0: entered allmulticast mode [ 349.040591][T14108] 8021q: adding VLAN 0 to HW filter on device bond13 [ 349.051413][T14145] xt_SECMARK: invalid mode: 4 [ 349.517795][T14169] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1971'. [ 349.736570][T14170] lo speed is unknown, defaulting to 1000 [ 349.987899][T14188] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1979'. [ 350.328301][T14200] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1982'. [ 350.653478][T14208] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 350.682471][T14208] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 350.720724][T14170] lo speed is unknown, defaulting to 1000 [ 350.909062][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1990'. [ 351.129467][T14221] lo speed is unknown, defaulting to 1000 [ 351.169947][T14228] netlink: 'syz.1.1993': attribute type 6 has an invalid length. [ 351.191447][T14228] IPv6: NLM_F_CREATE should be specified when creating new route [ 351.892099][ T12] wlan1: Trigger new scan to find an IBSS to join [ 352.061132][T14221] lo speed is unknown, defaulting to 1000 [ 352.264407][T14277] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 352.525557][T14279] syzkaller0: entered promiscuous mode [ 352.531450][T14279] syzkaller0: entered allmulticast mode [ 352.857978][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.916132][T14272] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 353.979441][T14329] __nla_validate_parse: 3 callbacks suppressed [ 353.979462][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 354.266013][T14345] sit0: entered promiscuous mode [ 354.364192][T14345] netlink: 'syz.4.2022': attribute type 1 has an invalid length. [ 354.432897][T14345] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2022'. [ 354.554599][T14360] Unsupported ieee802154 address type: 0 [ 354.783234][T14367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2028'. [ 354.938259][T14373] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2032'. [ 354.991636][T14373] netlink: 'syz.4.2032': attribute type 2 has an invalid length. [ 355.029101][T14373] netlink: 'syz.4.2032': attribute type 1 has an invalid length. [ 355.616553][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 355.684257][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 355.727601][T14403] geneve3: entered promiscuous mode [ 355.732954][T14403] geneve3: entered allmulticast mode [ 356.160118][T14417] netlink: 'syz.1.2044': attribute type 1 has an invalid length. [ 356.463614][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2046'. [ 356.941962][T14438] lo speed is unknown, defaulting to 1000 [ 357.538786][T14452] netlink: 'syz.2.2052': attribute type 2 has an invalid length. [ 357.716510][T14438] lo speed is unknown, defaulting to 1000 [ 358.427529][T14476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.504193][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'. [ 360.663691][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'. [ 360.990120][T14517] netlink: 'syz.0.2068': attribute type 3 has an invalid length. [ 361.424142][T14535] bond16: Removing last ns target with arp_interval on [ 361.572855][T14548] tipc: Can't bind to reserved service type 0 [ 361.617939][T14551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2074'. [ 361.784758][T14556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2076'. [ 362.556422][T14577] 8021q: adding VLAN 0 to HW filter on device .` [ 362.619865][T14583] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 362.647471][T14583] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2081'. [ 362.705330][T14577] veth1_vlan: left promiscuous mode [ 362.712537][T14577] veth0_vlan: left promiscuous mode [ 362.718792][T14577] veth0_vlan: entered promiscuous mode [ 362.729291][T14577] tipc: Resetting bearer [ 362.737345][T14577] veth1_vlan: entered promiscuous mode [ 362.755407][T14577] veth1_macvtap: left promiscuous mode [ 362.769007][T14577] veth0_macvtap: left promiscuous mode [ 362.787175][T14577] veth0_macvtap: entered promiscuous mode [ 362.794969][T14577] veth1_macvtap: entered promiscuous mode [ 362.825730][T14577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.835853][T14577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.845248][T14577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.865762][T14577] ieee802154 phy0 wpan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 362.876733][T14577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.034117][T14577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.048214][T14577] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.057397][T14577] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 363.446330][T14595] 8021q: adding VLAN 0 to HW filter on device bond14 [ 363.453327][T14615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2088'. [ 363.469380][ T7430] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.480177][ T7430] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.524471][ T7430] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.543741][ T7430] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.554103][ T1126] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.599579][ T5824] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.610046][ T1126] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.647225][T14618] netlink: 'syz.3.2087': attribute type 1 has an invalid length. [ 363.838707][T14628] netlink: 'syz.1.2091': attribute type 2 has an invalid length. [ 363.866076][T14629] netlink: 'syz.4.2090': attribute type 1 has an invalid length. [ 363.906026][T14629] netlink: 'syz.4.2090': attribute type 2 has an invalid length. [ 363.932470][ T7264] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.956703][T14629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2090'. [ 364.042522][ T7264] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.408278][T14658] netlink: 'syz.0.2095': attribute type 10 has an invalid length. [ 364.416744][T14646] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 364.451258][T14658] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2095'. [ 364.680803][T14646] bond6 (unregistering): Released all slaves [ 365.073444][T14664] netlink: 'syz.1.2096': attribute type 1 has an invalid length. [ 365.107891][T14664] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2096'. [ 365.376166][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'. [ 365.397974][T14670] siw: device registration error -23 [ 365.473172][T14670] netlink: 'syz.3.2098': attribute type 6 has an invalid length. [ 365.527385][T14670] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.748662][T14681] IPVS: Error connecting to the multicast addr [ 365.781447][T14681] tipc: Enabling of bearer rejected, failed to enable media [ 365.794553][T14687] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2104'. [ 365.826836][T14681] netlink: 'syz.1.2102': attribute type 1 has an invalid length. [ 365.843094][T14688] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2105'. [ 365.844899][T14681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.898574][T14691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.405000][T14708] IPv6: NLM_F_REPLACE set, but no existing node found! [ 366.640322][T14719] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2115'. [ 366.668872][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 367.319180][T14745] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 367.407167][T14750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2123'. [ 367.431854][ C1] ================================================================== [ 367.440047][ C1] BUG: KASAN: double-free in rcu_free_sheaf+0x31/0x200 [ 367.447081][ C1] Free of addr ffff888022b3a100 by task kworker/u8:9/1126 [ 367.454312][ C1] [ 367.456768][ C1] CPU: 1 UID: 0 PID: 1126 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 367.456805][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 367.456822][ C1] Workqueue: krds_cp_wq#4/3 rds_connect_worker [ 367.456992][ C1] Call Trace: [ 367.457033][ C1] [ 367.457071][ C1] dump_stack_lvl+0xe8/0x150 [ 367.457180][ C1] print_address_description+0x55/0x1e0 [ 367.457241][ C1] print_report+0x58/0x70 [ 367.457260][ C1] ? rcu_free_sheaf+0x31/0x200 [ 367.457319][ C1] kasan_report_invalid_free+0xea/0x110 [ 367.457366][ C1] ? rcu_free_sheaf+0x31/0x200 [ 367.457399][ C1] ? rcu_free_sheaf+0x31/0x200 [ 367.457429][ C1] __kasan_slab_pre_free+0x104/0x120 [ 367.457462][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 367.457486][ C1] ? rcu_core+0x70d/0x10a0 [ 367.457528][ C1] ? rcu_core+0x70d/0x10a0 [ 367.457549][ C1] rcu_free_sheaf+0x31/0x200 [ 367.457580][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 367.457648][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 367.457679][ C1] ? rcu_core+0x70d/0x10a0 [ 367.457700][ C1] rcu_core+0x78b/0x10a0 [ 367.457731][ C1] ? __pfx_rcu_core+0x10/0x10 [ 367.457755][ C1] ? sched_balance_domains+0xe8/0x880 [ 367.457786][ C1] handle_softirqs+0x225/0x840 [ 367.457820][ C1] ? do_softirq+0x76/0xd0 [ 367.457843][ C1] ? __inet6_bind+0x386/0xf30 [ 367.457924][ C1] do_softirq+0x76/0xd0 [ 367.457944][ C1] [ 367.457980][ C1] [ 367.458016][ C1] __local_bh_enable_ip+0xf8/0x130 [ 367.458039][ C1] __inet6_bind+0x386/0xf30 [ 367.458067][ C1] kernel_bind+0x13e/0x1c0 [ 367.458169][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 367.458201][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 367.458260][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 367.458298][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 367.458329][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 367.458366][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 367.458395][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 367.458420][ C1] rds_connect_worker+0x1d8/0x290 [ 367.458445][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 367.458466][ C1] process_scheduled_works+0xa8e/0x14e0 [ 367.458504][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 367.458530][ C1] ? assign_work+0x3cf/0x5d0 [ 367.458553][ C1] worker_thread+0xa47/0xfb0 [ 367.458583][ C1] ? __kthread_parkme+0x71/0x1f0 [ 367.458613][ C1] kthread+0x389/0x470 [ 367.458640][ C1] ? __pfx_worker_thread+0x10/0x10 [ 367.458661][ C1] ? __pfx_kthread+0x10/0x10 [ 367.458688][ C1] ret_from_fork+0x514/0xb70 [ 367.458728][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 367.458748][ C1] ? __switch_to+0xc89/0x1420 [ 367.458779][ C1] ? __pfx_kthread+0x10/0x10 [ 367.458806][ C1] ret_from_fork_asm+0x1a/0x30 [ 367.458837][ C1] [ 367.458844][ C1] [ 367.736098][ C1] Allocated by task 5616: [ 367.740536][ C1] kasan_save_track+0x3e/0x80 [ 367.745263][ C1] __kasan_kmalloc+0x93/0xb0 [ 367.749901][ C1] __kmalloc_cache_noprof+0x318/0x660 [ 367.755313][ C1] hwsim_update_pib+0x88/0x450 [ 367.760239][ C1] hwsim_set_promiscuous_mode+0x196/0x2e0 [ 367.762776][T14749] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2124'. [ 367.766009][ C1] drv_set_promiscuous_mode+0x159/0x2e0 [ 367.780570][ C1] mac802154_wpan_open+0x196e/0x29f0 [ 367.785900][ C1] __dev_open+0x46f/0x850 [ 367.790362][ C1] __dev_change_flags+0x329/0x820 [ 367.795483][ C1] netif_change_flags+0x7c/0x1b0 [ 367.800458][ C1] do_setlink+0xdd6/0x4670 [ 367.804984][ C1] rtnl_newlink+0x15c2/0x1bd0 [ 367.809767][ C1] rtnetlink_rcv_msg+0x802/0xc00 [ 367.814761][ C1] netlink_rcv_skb+0x226/0x4a0 [ 367.819676][ C1] netlink_unicast+0x7bb/0x940 [ 367.824496][ C1] netlink_sendmsg+0x813/0xb40 [ 367.829367][ C1] __sys_sendto+0x672/0x710 [ 367.833955][ C1] __x64_sys_sendto+0xde/0x100 [ 367.838781][ C1] do_syscall_64+0x174/0x580 [ 367.843502][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.849490][ C1] [ 367.851844][ C1] Freed by task 1126: [ 367.855843][ C1] kasan_save_track+0x3e/0x80 [ 367.860573][ C1] kasan_save_free_info+0x40/0x50 [ 367.865642][ C1] __kasan_slab_free+0x5c/0x80 [ 367.870485][ C1] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 367.876071][ C1] rcu_free_sheaf+0x31/0x200 [ 367.880708][ C1] rcu_core+0x78b/0x10a0 [ 367.885029][ C1] handle_softirqs+0x225/0x840 [ 367.889836][ C1] do_softirq+0x76/0xd0 [ 367.894028][ C1] __local_bh_enable_ip+0xf8/0x130 [ 367.899180][ C1] __inet6_bind+0x386/0xf30 [ 367.903732][ C1] kernel_bind+0x13e/0x1c0 [ 367.908195][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 367.913906][ C1] rds_connect_worker+0x1d8/0x290 [ 367.918974][ C1] process_scheduled_works+0xa8e/0x14e0 [ 367.921359][T14749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2124'. [ 367.924551][ C1] worker_thread+0xa47/0xfb0 [ 367.924580][ C1] kthread+0x389/0x470 [ 367.942202][ C1] ret_from_fork+0x514/0xb70 [ 367.946844][ C1] ret_from_fork_asm+0x1a/0x30 [ 367.951651][ C1] [ 367.954034][ C1] The buggy address belongs to the object at ffff888022b3a100 [ 367.954034][ C1] which belongs to the cache kmalloc-64 of size 64 [ 367.968053][ C1] The buggy address is located 0 bytes inside of [ 367.968053][ C1] 64-byte region [ffff888022b3a100, ffff888022b3a140) [ 367.981118][ C1] [ 367.983476][ C1] The buggy address belongs to the physical page: [ 367.989938][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22b3a [ 367.992172][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.998743][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 367.998770][ C1] page_type: f5(slab) [ 367.998807][ C1] raw: 00fff00000000000 ffff88813fe168c0 dead000000000100 dead000000000122 [ 367.998826][ C1] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 367.998837][ C1] page dumped because: kasan: bad access detected [ 367.998854][ C1] page_owner tracks the page as allocated [ 367.998871][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4997, tgid 4997 (udevadm), ts 32940877688, free_ts 29794072983 [ 368.067135][ C1] post_alloc_hook+0x22d/0x280 [ 368.071958][ C1] get_page_from_freelist+0x24ae/0x2530 [ 368.077561][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 368.083419][ C1] allocate_slab+0x77/0x660 [ 368.087971][ C1] refill_objects+0x336/0x3d0 [ 368.092682][ C1] __pcs_replace_empty_main+0x320/0x720 [ 368.098282][ C1] __kmalloc_noprof+0x464/0x750 [ 368.103186][ C1] tomoyo_encode+0x2ad/0x570 [ 368.107985][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 368.113677][ C1] tomoyo_path_perm+0x283/0x560 [ 368.118573][ C1] security_inode_getattr+0x12b/0x310 [ 368.124076][ C1] vfs_getattr+0x23/0x70 [ 368.128397][ C1] vfs_statx_path+0x2b/0x230 [ 368.133033][ C1] vfs_statx+0x12e/0x200 [ 368.137316][ C1] vfs_fstatat+0x11b/0x170 [ 368.141778][ C1] __x64_sys_newfstatat+0x151/0x200 [ 368.147022][ C1] page last free pid 1 tgid 1 stack trace: [ 368.150282][T14749] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2124'. [ 368.152860][ C1] __free_frozen_pages+0xc0d/0xd20 [ 368.152896][ C1] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 368.152926][ C1] __apply_to_page_range+0xbd8/0x1420 [ 368.178097][ C1] __kasan_release_vmalloc+0xa2/0xd0 [ 368.183439][ C1] purge_vmap_node+0x220/0x960 [ 368.188258][ C1] __purge_vmap_area_lazy+0x783/0xb40 [ 368.193688][ C1] _vm_unmap_aliases+0x732/0x7e0 [ 368.198665][ C1] change_page_attr_set_clr+0x307/0xf60 [ 368.204285][ C1] set_memory_nx+0xd6/0x110 [ 368.208824][ C1] free_kernel_image_pages+0x85/0x100 [ 368.214245][ C1] kernel_init+0x31/0x1d0 [ 368.218719][ C1] ret_from_fork+0x514/0xb70 [ 368.223353][ C1] ret_from_fork_asm+0x1a/0x30 [ 368.228170][ C1] [ 368.230522][ C1] Memory state around the buggy address: [ 368.236181][ C1] ffff888022b3a000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 368.244307][ C1] ffff888022b3a080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 368.252485][ C1] >ffff888022b3a100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 368.260587][ C1] ^ [ 368.264689][ C1] ffff888022b3a180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 368.272784][ C1] ffff888022b3a200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 368.280882][ C1] ================================================================== [ 368.289146][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 368.296404][ C1] CPU: 1 UID: 0 PID: 1126 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 368.305911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.316009][ C1] Workqueue: krds_cp_wq#4/3 rds_connect_worker [ 368.322243][ C1] Call Trace: [ 368.325568][ C1] [ 368.328451][ C1] vpanic+0x56c/0xa60 [ 368.332518][ C1] ? __pfx_vpanic+0x10/0x10 [ 368.337097][ C1] panic+0xc5/0xd0 [ 368.340865][ C1] ? __pfx_panic+0x10/0x10 [ 368.345332][ C1] check_panic_on_warn+0x89/0xb0 [ 368.350325][ C1] end_report+0x73/0x170 [ 368.354624][ C1] ? rcu_free_sheaf+0x31/0x200 [ 368.359447][ C1] kasan_report_invalid_free+0xfa/0x110 [ 368.365063][ C1] ? rcu_free_sheaf+0x31/0x200 [ 368.369877][ C1] ? rcu_free_sheaf+0x31/0x200 [ 368.374679][ C1] __kasan_slab_pre_free+0x104/0x120 [ 368.380015][ C1] __rcu_free_sheaf_prepare+0x10a/0x2a0 [ 368.385598][ C1] ? rcu_core+0x70d/0x10a0 [ 368.390053][ C1] ? rcu_core+0x70d/0x10a0 [ 368.394542][ C1] rcu_free_sheaf+0x31/0x200 [ 368.399178][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 368.405021][ C1] ? __pfx_rcu_free_sheaf+0x10/0x10 [ 368.410266][ C1] ? rcu_core+0x70d/0x10a0 [ 368.414712][ C1] rcu_core+0x78b/0x10a0 [ 368.419000][ C1] ? __pfx_rcu_core+0x10/0x10 [ 368.423715][ C1] ? sched_balance_domains+0xe8/0x880 [ 368.429120][ C1] handle_softirqs+0x225/0x840 [ 368.433924][ C1] ? do_softirq+0x76/0xd0 [ 368.438289][ C1] ? __inet6_bind+0x386/0xf30 [ 368.443000][ C1] do_softirq+0x76/0xd0 [ 368.447198][ C1] [ 368.450155][ C1] [ 368.453108][ C1] __local_bh_enable_ip+0xf8/0x130 [ 368.458251][ C1] __inet6_bind+0x386/0xf30 [ 368.462826][ C1] kernel_bind+0x13e/0x1c0 [ 368.467284][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 368.472266][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 368.478121][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 368.483893][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 368.490088][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 368.495509][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 368.501264][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 368.507032][ C1] rds_connect_worker+0x1d8/0x290 [ 368.512115][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 368.517878][ C1] process_scheduled_works+0xa8e/0x14e0 [ 368.523485][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 368.529519][ C1] ? assign_work+0x3cf/0x5d0 [ 368.534165][ C1] worker_thread+0xa47/0xfb0 [ 368.538817][ C1] ? __kthread_parkme+0x71/0x1f0 [ 368.543806][ C1] kthread+0x389/0x470 [ 368.547927][ C1] ? __pfx_worker_thread+0x10/0x10 [ 368.553079][ C1] ? __pfx_kthread+0x10/0x10 [ 368.557710][ C1] ret_from_fork+0x514/0xb70 [ 368.562345][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 368.567506][ C1] ? __switch_to+0xc89/0x1420 [ 368.572237][ C1] ? __pfx_kthread+0x10/0x10 [ 368.576876][ C1] ret_from_fork_asm+0x1a/0x30 [ 368.581701][ C1] [ 368.585402][ C1] Kernel Offset: disabled [ 368.589739][ C1] Rebooting in 86400 seconds..