last executing test programs: 16.072069833s ago: executing program 3 (id=5966): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000007000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) recvmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12010, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001200af5a2cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02400000400a000008000a00", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x400d0}, 0x58) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000880)={0x0, 0x23, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000000000000004c100fcdbdf25080001e600000065163605ce400f86000000030003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) unshare(0x24020400) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r5) 15.691731915s ago: executing program 3 (id=5970): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async, rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) socket$kcm(0x29, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a4000180"], 0x40c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006911d4000000000086000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x19) 14.333940124s ago: executing program 3 (id=5985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) shutdown(0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000280)=0x2, 0x4) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet_SIOCSIFNETMASK(r9, 0x891c, &(0x7f0000000180)={'bond_slave_1\x00', {0x2, 0x4e23, @remote}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = socket$packet(0x11, 0x2, 0x300) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) socket(0x400000000010, 0x3, 0x0) 13.294035084s ago: executing program 3 (id=5992): syz_emit_ethernet(0x4f, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r3 = socket$kcm(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, 0x0}, 0x44005) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r5, 0x0, 0x32, 0x0, &(0x7f0000000000)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r6 = socket$tipc(0x1e, 0x5, 0x0) listen(r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x40f00, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x5, 0xf, 0x90}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) unshare(0x20000400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x1, 0x6, 0x10001, @vifc_lcl_ifindex=r4, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001100)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa01", 0x38}, {&(0x7f0000000200)="72e23a", 0x3}], 0x2, &(0x7f0000000b00)=[@assoc={0x18, 0x117, 0x4, 0x1a}], 0x18, 0x10}], 0x1, 0x800) recvmsg$can_j1939(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/40, 0x28}, {&(0x7f0000000400)=""/50, 0x32}], 0x2}, 0x40000223) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x62b04766, 0x1, 0xff, 0x6, 0xfff9, 0xfa55}, 0x20) 12.288117225s ago: executing program 3 (id=6002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000840), 0x8, 0x27, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000003a00010325bd70001800dd1904792d2f5ef81034ef5556ffff080000004bb1f9f83927f52911d63014e0a28e9dd1a79e33ad2bdd2d1519fafb7f39102f964531cb92ded81c0b050c2bf5f166ae5b61543858c24ceddf1092c64edfb03dec22b73cff9e8fcd5db7823843f76e72272a83947214b2d6ac97d70b7330b4a4da343d6f16f035b25b2d755d2fe5aacd417195ce6f5e9691196226f4609b3f43dc54a603abcb8d628db77f6b682b43eb1e59879c3b710ebc5b3ed1bff4"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000600)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffac0, 0x53}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x20020010) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4ca87e4f23ac6b29d56e0d33f957912a6684b93ca085bdaa40e60c9baea75f18715e21b4a9863a42a073067acb5e1b8591ac53656b36a17e974045fd9e845c76e3c284bf46aea31184ccad40e7c1e5c97ad156c25a6f2420da5933f46c4d9555db1fc9e2999159055c67e502db04746b09c23399c6d5a0a44762bc57566f6e194796a39d957fee9a8fb03e96788e1e07ac3200f355c2736eead3cf191090075c75400273bd5f63a8693954660b", @ANYRES8=r0, @ANYRES32=r0], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x20000000}, 0x4000801) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0x4, 0x12}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 11.866917786s ago: executing program 3 (id=6006): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x83, &(0x7f0000000040)={0x21, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, 0x0, 0x0, 0x3) close(r7) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x8, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0x2, 0xa}, {0xc, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$nci(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="500403"], 0x7) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r2) sendmsg$SMC_PNETID_DEL(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r10, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4010000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) epoll_create(0x5dec346f) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x2, 0x4, 0x8e, 0x4b, 0xc, 0x9, 0x3, 0x3, 0xc, 0x0, 0x9, 0x9, 0x8, 0x8}, 0xe) 3.540508443s ago: executing program 1 (id=6073): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xac, 0x0, 0xf}]}}}], 0x18}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xac, 0x0, 0xf}]}}}], 0x18}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000a000200000000eb144594000800090004"], 0x30}}, 0x10004084) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000a000200000000eb144594000800090004"], 0x30}}, 0x10004084) r5 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_ifreq(r5, 0x8995, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_addrs=@rc={0x1f, @none, 0x7}}) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.95290819s ago: executing program 1 (id=6083): socket$kcm(0x10, 0x2, 0x0) 1.919858503s ago: executing program 2 (id=6085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13092abd7000ffdbdf25210000000c000500000200000000000009001f007068cbf073"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x14) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x27, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x6}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x34008805}, 0x20008090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_bt_hci(r3, 0x3f, 0x0) socket(0x11, 0x3, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x12}, [@CTA_LABELS_MASK={0xc, 0x17, [0x896, 0x8]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) write$tun(r0, &(0x7f0000000240)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x5, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0x28, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @broadcast}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x141a, 0x0, 0x15f1}}}}, 0x36) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x6, "fc5cad8c"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) 1.79714858s ago: executing program 1 (id=6086): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000186000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) epoll_create(0x7) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4], 0x4c}}, 0x0) 1.795758868s ago: executing program 4 (id=6087): r0 = socket(0x22, 0x2, 0x2) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00'}) 1.541420814s ago: executing program 4 (id=6089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x47}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x9}]}}}}}}}, 0x0) 1.412218941s ago: executing program 0 (id=6090): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0xe3d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3, @local, 0x8}}]}, 0x70}}, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.302568767s ago: executing program 1 (id=6091): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c000280080001400004f27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000300003802c0000800800034000000002200007800e000100636f6e6e6c696d69740000000c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) 1.210802447s ago: executing program 2 (id=6092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0085000000000000140012a00900010076650335137468000000000400028008", @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 1.167949387s ago: executing program 0 (id=6093): r0 = socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x2, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x9, 0x201, 0x489c, 0x6}, 0x3c) 997.493533ms ago: executing program 4 (id=6094): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r2 = socket(0x1e, 0xa, 0x3ff) write$bt_hci(r2, &(0x7f0000000100)={0x1, @write_current_iac_lap={{0xc3a, 0x7}, {0x6, "609a8dd897a3"}}}, 0xb) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltaction={0x5c, 0x31, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000006) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x1, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40005}, 0x40040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)={0x254, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "205c092858bb19957196cc60cd4869fa3acb6510173df5c1792168"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff7}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9d3566f8b18171806d98e00868a921c0ab340028a27cb6ae026e7128ca"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "867a1fd807ff67a350dfd84b1daac39bcf66d148cc"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x700}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x87d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x80}, 0x800) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000740)=0x100000, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000780)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000007c0)={0xd, 0x5, 0x6, 0x3, 0x0}, &(0x7f0000000800)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000840)={r5, 0x101, 0x30}, &(0x7f0000000880)=0xc) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=@deltclass={0x58, 0x29, 0x20, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x7, 0x5}, {0x5, 0xffff}, {0xffe0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0xd}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x6, 0xd}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000a00)={0x80, 0x21, 0x13, 0x48, 0x5, 0x6, 0x4, 0x9, 0x1, 0x7, 0x9, 0xfc, 0xff, 0x2}, 0xe) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r8) sendto$packet(r2, &(0x7f0000000a80)="cb0d7803976124fe389e815606d459ad861e90411adf51378fdb82d0f1ed1daa2b2b70c4cea0abfd1e6c92cb31c9fed9222dffc10286207b0dec6d54a971cf2341e1c94f633fc4248bf8db3d4744a1df32a78ad5c0718a9edd77bbb4179d69d4d2085928eaae4b888bac3d85da04178e62b71a3364b791629c5af84a4e7ed184315f59a662bc418c4309f5bdb74542d56b9942a2ec6df234180cd9afedb2066b69aab474ab99f95497f541e0b8479ddc7627737152082712dc59f34dc8181ed083de6d1caa6114062b1ddcc0c488d30caa8c5493cde980446e43044b3deaa9489cbf2dd3d6229c1638723657de6b", 0xee, 0x4, 0x0, 0x0) recvmsg(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000c80)=""/52, 0x34}], 0x2, &(0x7f0000000d00)=""/59, 0x3b}, 0x120) syz_genetlink_get_family_id$team(&(0x7f0000000d80), r2) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000dc0)={0x1, [0x5]}, 0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000e00)={r6, 0x7, 0x7}, 0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r2) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r9, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x7c, r9, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x59}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0a9f776f6a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "864715c961ababb6473ff6809d"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "78257f9f3ff288635697380e85"}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x40050) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r11, &(0x7f0000002440)=[{{&(0x7f0000001100)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001140)="797f1f7066b8c4580ab929d87e0eb719ae843db4020d4bd2f0b9108ee4de6170b8febe985446db4bf1e14397bef055379ab54e4afd5c38392a1d9d9f41d868a3501953ca098e40a185b73e8485564428abc06207e4aa7d627051a2df5d389c4bd50d7089a1988233bf37ea", 0x6b}, {&(0x7f00000011c0)="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", 0x1000}], 0x2, &(0x7f0000002200)=[@dstopts_2292={{0xa0, 0x29, 0x4, {0x2c, 0x10, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x71, "e0898abafb67310be1a096054d66138cde3064bdd1bcef94ca46ce85e7da57b22d6adb0cb219578c64062fd787f9933f5af19a7d627955f701fd882327fb6f4f9dc83bed3f3198085185e92b460f40a39a3af94b32e652927c15d67a5d5596602495af6dd9e265a5f2766a73b066428410"}, @enc_lim={0x4, 0x1, 0x8}]}}}, @rthdrdstopts={{0x108, 0x29, 0x37, {0x2b, 0x1d, '\x00', [@enc_lim={0x4, 0x1, 0xeb}, @generic={0x0, 0xb6, "20e2fba418b0cf60bc1143946e6d6fb77a0fb9921814a8b5812eb995fafce3d4cc74cc66ab503bfe595e836fd034834f256b9be93ab50feff773e1c1b445599fe619fd3c2c20c3895404760fb14fea379935f491bd7c097dc95ec6e5158b28569edf2e743562bd04b406739a5cc799438c27cfccad5aa378f07c9b590580effab395be874d47ebcbf9e868a9590a31932540d390c36337a4c0a12224678ddcb4cb5df8f1637c3b4437fc874a2885853d1f31c67fe1bc"}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x2, 0xf, 0x0, [@private1, @mcast2]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x29, 0x2, '\x00', [@ra={0x5, 0x2, 0x7fff}, @pad1, @ra={0x5, 0x2, 0xef4}, @jumbo={0xc2, 0x4, 0x4}, @pad1]}}}], 0x228}}], 0x1, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002480)={'veth0_virt_wifi\x00'}) 949.393208ms ago: executing program 0 (id=6095): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100800000000000000004008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="050427c67002fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x20004080) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) r7 = socket(0x29, 0x2, 0x6) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x88, @private2, 0xa77}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b7e"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r9) recvfrom(r9, 0x0, 0x0, 0x43, 0x0, 0x0) sendto$llc(r8, &(0x7f00000004c0)="af7d5a", 0x3, 0x10004000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 942.823195ms ago: executing program 1 (id=6096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x3f, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000540)={0x88, 0x16, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0x8a, 0x0, [0x4, 0x3, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x8, 0xe, 0x4, 0x6, 0x8000000000000000]}}, @jumbo, @calipso={0x7, 0x58, {0x2, 0x14, 0x4e, 0x3, [0x39, 0x8001, 0x2, 0x8, 0xfffffffffffffff9, 0x9, 0x4, 0x1, 0x7ffffffd, 0x4]}}]}, 0xc0) r5 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000640)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x7, 'syz1\x00', @bcast, 0xf, 0x3, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r9, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000980)={0x48, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x20, 0x111, 0x0, 0x1, {0x1c, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x80}]}]}]}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4008040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r8, 0xa04, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40811) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001007e616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 874.356718ms ago: executing program 2 (id=6097): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x3308, 0xa32, 0xfffb, 0x8, 0x8, 0x6, [0xe, 0xfb]}}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@remote, 0x37, r3}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071128c000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014000700fc020000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) sendto$packet(r5, &(0x7f0000000440)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x3308, 0xa32, 0xfffb, 0x8, 0x8, 0x6, [0xe, 0xfb]}}) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@remote, 0x37, r3}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071128c000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014000700fc020000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) (async) sendto$packet(r5, &(0x7f0000000440)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) 825.809401ms ago: executing program 4 (id=6098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendto(r2, 0x0, 0x0, 0x2004c056, &(0x7f0000000280)=@nfc_llcp={0x27, r4, 0x1, 0x1, 0x0, 0x1, "14c698bbcffd81f16a46dcdd6f29ec1546f7f5f0d3eb210cc15ea0dd9f79459c29d4c5e2023d32d39da81f5812a345ed8ce6135638341c56f2ef4c48ae896a", 0x3f}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r6, 0x3, 0x2}, 0x50) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r7, &(0x7f0000000400)={0x1f, @none, 0x4}, 0xa) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r9, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffff075}]}, 0x24}}, 0x20008000) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4004080) 692.697076ms ago: executing program 2 (id=6099): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x2, 0xfffff69f, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x3ff, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f00000004c0)={'ip_vti0\x00', r2, 0x7800, 0x8, 0x80000000, 0xfe4, {{0x19, 0x4, 0x3, 0xe, 0x64, 0x64, 0x0, 0x9, 0x4, 0x0, @local, @multicast2, {[@noop, @end, @timestamp_prespec={0x44, 0x4c, 0xdd, 0x3, 0xc, [{@private=0xa010102, 0x3}, {@multicast2, 0xffffffff}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7fffffff}, {@remote, 0xffffff00}, {@rand_addr=0x64010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4}, {@local, 0xa}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1}]}]}}}}}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f5f, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000800)=0xfffffffd, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r11, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x3, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f0000000600)={0x2, 0x4e23, 0x6, @empty, 0x4}, 0x9) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000880)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000640)="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", 0x17f}], 0x3}, 0x0) r14 = socket$tipc(0x1e, 0x2, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c4, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4a8, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x49a, 0x1c, 0x0, 0x0, @binary="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"}]}, @nested={0x4, 0x2}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r16 = gettid() ioctl$sock_SIOCSPGRP(r14, 0x8902, &(0x7f00000007c0)=r16) 550.182824ms ago: executing program 0 (id=6100): unshare(0x20000400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xc, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) 472.205888ms ago: executing program 0 (id=6101): r0 = socket$inet6(0xa, 0x4, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x8, 0x8000, 0x1, 0x4, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast2, @local, {[@generic={0x44, 0x7, "423a7baac8"}, @rr={0x7, 0x17, 0x27, [@private=0xa010102, @multicast2, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x23}]}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r0, 0x1, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%+9llu \x00'}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5e3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f00000000c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @func, @exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], &(0x7f0000000140)='GPL\x00', 0xfffffc00, 0x29, &(0x7f0000000180)=""/41, 0x41100, 0x68, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x1, 0x4, 0x4e21}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r4, r5, r6, r7, r8, r9], &(0x7f0000000680)=[{0x1, 0x1, 0x4, 0x2}, {0x5, 0x5, 0x8, 0xa}, {0x4, 0x2, 0x8, 0x6}], 0x10, 0xc}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r5, r6}, 0xc) ioctl$sock_ifreq(r0, 0x8930, &(0x7f00000007c0)={'pimreg1\x00', @ifru_names='dummy0\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000840)={r7, &(0x7f0000000800)="91ba4c6066ac5272ada8ad1b4c17af81bf9a4a024c6dc232f4f7"}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x8000, 0x9, 0x8, 0x20004, r4, 0x0, '\x00', r2, r3, 0x3, 0x0, 0x3}, 0x50) ioctl$BTRFS_IOC_SCRUB_CANCEL(r10, 0x941c, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900), 0x203, 0x0) write$ppp(r11, &(0x7f0000000940)="beeb8eedd100fa1eb1947e01a32d128d5c32068ba782c663054848f5ab59c3bd63936175c8633fa457f4f4d706be56ea4a9731a917bf6ea7626ef7c0118d5a5c7f8f99aee5f0b152fd06db4133e96ced0c8eac9adfc75fd932", 0x59) write(r7, &(0x7f00000009c0)="a954cfdd977aad71e0df6e7adaf66d8c0e3fce63fb63039700a26ab51d6847e856b2404fe8593af41b48b51d98ee5f962cb616b5ff7931e815fe51a05a8c3686acafa4dc254496d30c50399b36d05e7eea17905df62da84115c572bb39ed80dcebc30515686765501a2980dbbd4e34", 0x6f) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r11, 0xf502, 0x0) r12 = socket$inet(0x2, 0x2, 0x8) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40), 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(r13, 0x400448c8, &(0x7f0000000b40)={r0, r12, 0x7d, 0xaf, &(0x7f0000000a80)="f5651a2236f143ffd81c5406541d58a4d58e55104808bb34c3832ed3773973bd790b896cfcd8b5434dac4315b4e5e1d1ca53b835e54046d92e0e4796fe49b857a0c0647afda527d7a3408c47b4649a5f218c8f5e5e618e640b9f40dd5385530958ea340cce4ff720d86e2b0a64ba529c5842fb1f3e307b2458d46ade6c389cf9fc8eddf9f2de28133d5fc3e2be6ee091f63ab9a2ac48df7e79cb01c7111d9177ab8e8387a5b031fc98c42dccd02d75", 0xd, 0x5, 0x2, 0x6, 0x0, 0x5, 0xc120, 'syz0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$MRT_DEL_MFC(r12, 0x0, 0xcd, &(0x7f0000000c00)={@broadcast, @remote, 0xffffffffffffffff, "0d16bc695795861376a510804235377f96ed86097d2369ce1595aa14522f4c14", 0x101, 0x4, 0x7, 0x4}, 0x3c) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x86410200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x74, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x8}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}], @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x2c}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c801}, 0x20008014) r14 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$EXT4_IOC_GROUP_ADD(r14, 0x40286608, &(0x7f0000000d80)={0x7, 0x750, 0x9, 0x1, 0x8000, 0xd}) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e00), r13) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r13, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r15, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10) 448.488176ms ago: executing program 4 (id=6102): syz_emit_ethernet(0xcb, &(0x7f0000000080)={@local, @local, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x1, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8d, 0x0, 0x1, @private2, @local, {[@routing={0x89, 0x0, 0x2, 0x4, 0x11}], "410c9891212b7b0440514cef218532dd39783ee412741782a237722205ef83286c5893c9898f216035c5f19178999b01043726477b5a5440f0bc180d04629ba2fe703d18d80bf75bda2faa462e9d57990ac488c092c49a21046ef553e579efef3da36bf12ffb1143a795330a8255aa4d1d4aa2cb9d7f8ce314c604c28f6c483d3b56b31f1f"}}}}}, 0x0) 354.028051ms ago: executing program 1 (id=6103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x82, &(0x7f0000000180)={r4, 0x8000}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x114, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x3, 0xe, 0xf, 0x1, 0x9375, 0xc, 0x3}}, {0xa, 0x2, [0x3, 0x5bd, 0x8]}}, {{0x1c, 0x1, {0x9, 0x7, 0x9, 0x0, 0x1, 0x2, 0xffff0034, 0x4}}, {0xc, 0x2, [0x101, 0x9, 0x1, 0x92a]}}, {{0x1c, 0x1, {0x5, 0x7, 0x4, 0x8, 0x2, 0x4, 0xb, 0x3}}, {0xa, 0x2, [0x6, 0x2, 0x4]}}, {{0x1c, 0x1, {0x8, 0x7, 0x401, 0x81, 0x1, 0x505, 0x7a94, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}, {{0x1c, 0x1, {0x80, 0xb, 0x942, 0x10000, 0x1, 0x81, 0x401, 0x3}}, {0xa, 0x2, [0x9, 0x7, 0x9]}}, {{0x1c, 0x1, {0x9, 0x0, 0x7, 0x2, 0x1, 0x2, 0xc, 0x4}}, {0xc, 0x2, [0x5, 0x9, 0xa, 0x9]}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x26ca40, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) close(r10) socket$unix(0x1, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'pimreg1\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r15, @ANYRES32=0x0, @ANYRES16=r14], 0x3c}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 306.317225ms ago: executing program 4 (id=6104): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000014000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b50a0200550d0000639af8ff00000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b6090b00080000004608f0ff76000000180100002020752500000000002020207b94f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff85000000060000007f9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x6, [@restrict={0x10001, 0x0, 0x0, 0xb, 0x2}, @enum={0xd, 0xa, 0x0, 0x6, 0x4, [{0x0, 0x1}, {}, {0xa, 0x1000}, {0xe, 0x3ff}, {0x7, 0xfffffff8}, {0x0, 0x81}, {0x1, 0xffff}, {0x4, 0x3}, {0x4, 0x1}, {0x0, 0x594ae9e2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0xffffff20}}, @union={0xd, 0x2, 0x0, 0x5, 0x1, 0x10001, [{0x3, 0x0, 0x8000}, {0xc, 0x4, 0x7}]}]}, {0x0, [0x2e, 0x61, 0x30, 0x61]}}, &(0x7f0000000e80)=""/178, 0xc2, 0xb2, 0x0, 0xd3, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x26, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x7, 0x1, 0x9, 0x0, 0x2, 0x80, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000d00)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x20, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000f80)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000fc0)={0x3, 0x5, 0x4, 0x100}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001000), &(0x7f0000001040)=[{0x3, 0x2, 0x2, 0xb}, {0x0, 0x4, 0xd, 0x4}, {0x0, 0x4, 0x5, 0x4}, {0x2, 0x2, 0x5, 0x3}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0x3, 0x10, 0x8}, {0x4, 0x1, 0x1, 0xa}, {0x0, 0x5, 0xd}], 0x10, 0x4}, 0x94) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000740)={{r1, &(0x7f0000000180)='\x00', 0x2, &(0x7f00000001c0)={@align=0x9, {0x858f, 0x8, 0x7f, 0x4e1}}, 0x28c8, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x2}, 0x5, &(0x7f00000009c0)=[{0x2, 0xfffffff9, &(0x7f0000000280)='\x00', &(0x7f0000000400)="3f22b89243ddcc86b07ec68321471daefa8d48929eda702465ce7c58124e82ce81dd8d7533418fa8454e9b12038b84068949fa42da26c657bfe08ef1ceaef4a975bec076145438f3f52038b8272122009f2d189d8b71d1647ee9cf774084ecd26d6bc936e2a9", 0x66, 0x20}, {0x1, 0xffffffc0, &(0x7f0000000480)='GPL\x00', &(0x7f00000004c0)="e1468db5bed955c2a6f497b37e89", 0xe, 0x18}, {0x2, 0x0, &(0x7f0000000500)='\x00', &(0x7f0000000540)="fd01294c3c0cf3ee565fbceb2351b5cbab4ad373510c", 0x16, 0x20}, {0x38d8cc6bb1d54e75, 0x18, &(0x7f0000000580)='\x00', &(0x7f00000005c0)="0ac060b07310de100a22594369f64d2ede3b43f786d51b1b541d0238eb7a3cc7630c38a4c98579311e29c46e39e166612e222e794b8559e5773274b4b1aeb80a789ff0275d9f723f69418062c0d293849af16844f976264180b883d819f33ed4d894740f6ece380ae4075d839af2", 0x6e, 0x3}, {0xf0387411f62ab47d, 0x7, &(0x7f0000000640)='%$\x00', &(0x7f0000000680)="ec1ab850a8f54f9227714d0ab32332c5f6d223413ed7c4da975305d41b2e80bc91fd533ead7ca379fdf166114621798d734ed5a592f7d4c284f842ca68d1b2b42692ddab359fd8139c9d49e44b4d27c0254fe4c3cdb2995f7ba685200645bc8f2c83b482cfe768f594b2d7fb70ccbf9276856a6a98304760dfe6229963c5aea0d801f690dc215c8588a7160dd5b45820a2361d56a4c5c619d1eb79246deb92cf7770e0709257bf9cbc5819cd5c150d9a03511c1f345a473817", 0xb9, 0xe}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) socket$key(0xf, 0x3, 0x2) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r8, 0x4) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r9, r7, 0x0, r6}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000b80)={0x1, "c8"}, 0x2) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x5, &(0x7f0000000080)=0x7, 0x4) sendmmsg$inet(r10, &(0x7f00000030c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x24004094) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, [@alu={0x4, 0x0, 0xb, 0x5, 0x4, 0x2, 0x10}, @ldst={0x1, 0x3, 0x0, 0x4, 0x9, 0x4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x4f, &(0x7f0000000100)=""/79, 0x41000, 0xc, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000900)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0xc, 0x5, 0xc}, 0x10, 0xb5ad, r5, 0x0, &(0x7f0000000a80)=[r0, r1, r6], 0x0, 0x10, 0x9}, 0x94) 204.511406ms ago: executing program 2 (id=6105): syz_emit_ethernet(0x1116, &(0x7f0000000080)={@broadcast, @remote, @val={@void, {0x8100, 0x4, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0xffff9}], @ipv4=@gre={{0xd, 0x4, 0x3, 0x3f, 0x1100, 0x64, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @timestamp_addr={0x44, 0x1c, 0x56, 0x1, 0x1, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x29}, {@multicast1, 0xfffffff1}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xb, 0x3, [0x6], "3cbaef8b679167673ba87c"}, {0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "75ec1bbca12422cc9fd2d552efb431e5113a024f61132426b9a25cf4fd58385c5da06d8f1735d9cee517b6c82db2dba2477cc7536c42edbc65e5744b00a829dd1d548dbf9ed412953dd744d7e8bf69262e078562e020d966997dee8289d3d7e3df07efbb4906a84094d02d845f681962b1ef99088b08a212a8792c"}, {0x8, 0x88be, 0x0, {{0xd, 0x1, 0xc, 0x2, 0x1, 0x1, 0x7, 0xae}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x4, 0x0, 0x0, 0x3, 0x0, 0xff}, 0x2, {0x1, 0xc, 0x1, 0xe, 0x1, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x3, "276df39d0e1e9bce415ebeaf4aac531f594bb7d59a4a88ed5bc00947a2a10d3cd1139ca25579dd2204cebbd49d9a035af6343659c6a4cd6da9fd49600666e8c3e30e66c12afe0d389d02c4ce3343f810c5b1e94a7d969f5de297be5d55c81b14c77b271dc1ef3219c25536525c988a922ec656f6dbb76d5dcda522fa160147145ba65001aa083f758bec44a1e5846f465840a4e9b98c02ac3f116ab58b6fc518c5144cc4df1df739a26c6f61e8e47b91c50cfda443a801c0b44ba8805ae56f3110f589e0bb200f1b86496f39fdc451b76512bcd0d9e750b2fac41feb4f87746a5b24dd99c9cd4eed36469d15cc057d08566168e41434108afb68585b2eb9c01d8d5b72901baf677eb3653b4d1da0332fac98b61feeec4861b44c9a789ed514e487c0866052de235457074b1f2cf02abc792dcc6a82a95138e7d8c0e9782d08daf6ca1ae361d526a504c512686bdb2cf8411fe54381850ad9b413efdf8bd4671add6483be9c6c4ad043f3d1c1adb6db3f3b811d8312be486b751ff5a4e173cd646113de0dbf086948001522ea4d834435d1c08cc44daab16852a840d260845982db9518e9c1a24c6cd36d18f0176b8f9f7e5f923b4769f1ce1c82745f1d31eb23d159dd2a28a2111b23663a4289e6ee1143b96eb686aa0d8a336678e5b3e510d38f07fea9b1c1143abfdd4e3a67106e10b4ff2332e7b5ccf3159a4068d99e479e4aaa41eb8c41b3a80ae0c4fddefee720c9b6fe2437e5190c9acfa625d8d6d800abe55336a1c78b171134f3c55a48eeafecf17d7ed33991cea8c9cb9ad8146f45264ad27f31b7af9339db8b47bf05d5ba263cc9882fea346d0702b6d8bfda39546535bdf3621c534c3772c3398cdef4c166943a1e08245aa5904c3b7463baf2ac53d72372fdf0e14d3930f3933ee4cdc498976da4b18c7512464a762950364727433781b6c35be24f6a1677741659941e33c5df957f60ff2e0392cb6db8327f561aa67c542a7982b42453d4d0f7a7c41aea2850b8e195ffdfc145615143d0fa49b793ba19bfc51f987778075e6a232c681434f0b835b36e534c2992daa92c28342500c40350deee6f5f84fc294d542f0dab484e84938e0168f3b3601fe34e2ff7155397ba444701a0560909a4e9298d3d1268b62c1ef27985dc3120424ccfb249d4ca8a474b2227c81545df98a0561cc6a78e2ee7b44142abfb9137ba008022631598cce5379769e8d34250d478f209e5ec1c54abdfab7e0899d2eb620fa1c37b82ecf48cfc2c78b1addc6b67648d776cd92042a51c4e28c925fa196cc146bec48eb37ace79d7327ad759b2e1047c2e8847287b023cce3497625af602497e747283b7837b02ca304321d55378249472bad7372a8f1373e4f7d419f7b543c40b252dc9350fc04bde00f5e42faed58705cb09435808c3702d7241b74a68e2c3a508fd2d1db15a812041c1641aa94538cca793b83b0c6c41ad0bf1d4e3195a3878006788727727a5aa25ce2ef5e905d15f73b0840a1d6451d23506cfefbd8afafd1c44111167ee322c38622b6b8752bbdf6749f7fc71fc17153c6356adb836e8f56770e879ba2867ea4c8bc08f16b8e8a0ec1914bc03cb51a303b87a6829aa50f3b4ca3f52f6726bc28f3d8c9746abfd51b06dff6ac8c68efb207b7877447bd4d29db6ac9f745dcce262a5b041d9719601e500583caab9ae443a7d8e3171bc3dd094bd041cde1f8f1a6c09269482e03d3fda07bdd58ca05c6fc18f5c49b6331741c592fbaa277ff4c01e28c8ad359a1189a4bd9b6de69c365d254a6b0d80e51cae48038bfa1c63a6bf9888b82b60c277e2d9cddcc29c1259b024d38cd2d3dcc48fe64d100c6685eff5d15ec5a4dbc11f526329b840540c27846b6a2f7f38ba001a17066b9dc9e284e949ad0e2d59e1b662125035c9471b5c867862f50514b47bef04670efb4c50eb8775c05f7ffa0d65f6a0afbf6d0d492acfddffecdf7264e8dfb540b0ce014acdf1fa0dc21e5253388e051d806b70e8ecf09ec05dcee4155d46257af746b6eaed5610665a11179a989a7a2be49453b59f77def3dc6b425994f9167dcc3d74412296177dce62a964c522bdb011affc899e98b43ef488a324a4b9c1c7fc4ad2b8190d1d9efbc4ae44ab831be5d5a1c775a8bde51842346e7c58d617573869e7bdceb0357efc4d11fd14a4f6717e8e36ea983d22f27fbb75df36ea65905058c466439cd1fa2605f7674f7f671e779f1fd96ae7caeb557be89fcc45802c5ec7019feb27794f9ade54c0c0cc245b5f7460390ff62a00f777101d87bf5f3f6de723c93b9d47dd7d9f4a4c802383bda31a688efef67849a479da3385665d29223694b2f34f9e0cf5d5e544c35b903a4acd33521c02f8c9fc7fa94c5154d3162ee75aa3142552c92ce4219ff4c4901d776943cdff2aba67131347ff8fff0b62a59fbcbaa0ec029e82f2242af980132b3ad009c5e5264f92e5f70dfa577aedfc030722674c2dd540d63a33a1755427c132c41160b3398896153f4082174839c88549fe93580a6296591ca6047d3dd67093e2239602082ec3b06e094fcea861fa8e5dadc60504474887019bb31e10f12365dcf821d6052c2e43dc390ea9141262c99f1f149a890f92998a15fa2870031b9a456437fd1171e55c1ac3716f09cfaf557bd807f9a87fe32c583987ff608c3c020af97d796070d4b0507b0fdc677193ca0aa05783d0553eed7f3af986e88f16697743bc365ebacd8c2d90e55fdb62fbd714b0b83b65af07f6556160ae63a508e07602b6298d8847cf40999d8ff92c9e18c3ba2e5475eb19e60e20acf530aecad0b2e8e68a7eecee7df5570c0aafc0c3f93b1bd6b7df3311b0374b45895d976e6874f00f57ebee330eba5091e89ace1e08e8afffb7c4a0e3a72cdad81d91741d5cd8ff9d0a36fd3f029c753afe93bba3ae0724462d1a86fc2659d2ce718b5973aa8be64b5fb9423cd02b26406ce0d7ed6e3895112ff3a327f2f221e491c4fae7039014c7d180a152c608076ed040c83b85820232e832906e326e18d715657a4e3d8c6670441b9afe9ea137707165f0dd94c7703d1a4b5a97daa7b7ca8f4385e933eae40a3f4dbcabb9d51f073f0615eedd6b162ee3b0ae54ace1ed50b18336c170384ebfaf6666a67e0672e81f0ea213ef03403e54716b05e6198d19c112b6d0b88152b825cdbe8f92c141a5135359d1006564dc36288ae1c463391b689ae90b912d8e38d8afa82f915a849c9a5c73c655c2170535aab51b18305a445678b746884bb6af29712cb3f6ee2c6ad728f419bd18939f890dd4803226c66fba11bff674b7cd0a6c7cac6bf4335429485f885c7bccf2337935fa187704cc9b9493a109b17f98494bb889b8673374382cca8c803002236dd13417fb6e6c0d84aca7b05b1da918053b16f640dc3bbde680775f09abeb526b748b6322003a545681638856ba8de8474247799e7413b660dfa1a54f8852fe7f944fe05536cfd048774222af3442a3144055950b6f6f525c5980338c3c483f47672e4992ffb88e7248ac4aa41ee881b99fc5461b556229698033a581db58d9d5887b0bac0fcdbbc78ea269c34843219b3bf0f6160e554898f6cb96c11f41e5c99d87b69f85f2ba32ff4064543c58794192bdf2845bb1cee93e8316d00a427a0b24148b13c2169b229a86f2c4cba6ff1e1d75fb52768933d01f7bd4b8328f8d84e99f8e5da33f79dd86e0cdf1d16bdc4a1e686809d3c795b53563b2aaf2617e500eeb9b30e5410b91c9a1e8e959309f2ea3cf731997e4a70b18674a5e6341ef451fc1131d9aaf0a2f71d9eb09949237b225b7c8344d277ac1365950f78e4f9f173ae56e6c9095f74725da88a9e09d1ad0ff36a1a65e3d3ea089407da83137758c47d0c3c879874767c1d4ce7119a2b88463022de834362900d73989df6b8e259b04f95c20c30d2db8ac061cd96bbf6318234526c5822fd4facea391472e5f72044be944a2f7fca5f91c2d8d06fa6d019430042e35a6f8dbda40a25353577c97cdb3fdc3d99de9cb8ffbf554cf515cfaa0d8e2a41ed403bcae75f357f3292f823647a756c0b5afa49c6a088666e6c0c7663392cf1fb727dc1339faa623b4e87011f5d48380392d0bec2deda93bf6a810a7c23a9f921f11ace3babdbaa501edcf293b7750a53f5d53611cd75ebf16304b5bc1cb2d0750eed9538efa3666d687c5b1e71fd03f3919c20e55d76302762799ebcfc49dd69f05cd2411b25ab9ab030aeb0416310f136bc1ea47399c9b51493cb0a33d11a004366ec7df21dd7a5d6c0e2d10c6252e22898daa646090436c54d668e27e98d134796e0d595256a52c693ef767039b5c9552774c3df152c589d273b359e1f4b4124959fe7a50bac94e39b469c37a972eee356a23868b47713cd8363692f919193cc7534cc2a1762f272a32831be48eb3eb8fcb4a51dfb79f374acabd263dbe6515fd489a6700caa5a8cb8a65eeea325512725adb539e4ee37b2d2a03cfe858df3207174a6f44bdb37d70b334bc4e4e61a8ba334669ac81854c010bec9f37cac62e732e72ddf190904ea4b435fb4f29d046cacc60335beb07d2b3d1e4194f29a306cecff87108825563f578a7d66bf48218ab9696c5fa9bb3e94a31aeba7830c9f3ba77d9529298ffdd418e5b72b65aab4f0e65e0a1ca2b710c941e34e5d8fb72559c4ac303b4571f930c6b104d51ea28662cc193e7e2fb3643463a3e2d08aaf99ad3f2008cba9984fcfe5eba831da96e3c59b11bd249c1d36c07be176cf162cb651736425d106ab30062743a30ee1add27697f0052df7be1ef8b4355c941aa10e3bf8a9aede227e6feaa4f16a76be0b562bbf765c8f407c412a960ba6a1d20d84ded4c9a7ea7f1a65f13fade0193c2f6c9fd97123fc4130f0f78108c16606c22656468a93ac1a0aab5ce385294f6f87f76d30f987b63587650160ae8c8cb6fe0f822dd065bda7e9ff042c4c7b89dd062d112bbfce51b4378fd739d3be276fd1394c48e515480a09da0b8746d260b1e7027471c94b0b051ae2f299d5027a0beab9a2862f4dad73002f8d1450554b517348c18aba09b66b7ce472cf73bd4eb278a2d3450d345419ba63a4e313e555f18be655bbd393a2856ebce39af02f894bdaea5aa21903cb0c31e3f7b35cfde911f8455f2c19aa3ed54d707d6ca57b9c8c04e579576d852a985a74b2e82aa59649e40625b0bc88b40a8b0b8725da8f89c20f2febbb972b582be55fec7132334014b0e0db811d325c5192e7f96498dd81bacfebd1c495ab4b6f33b3a42fc2b70a51457b230afba89f160d7f5808c5e90525b0d7dbf6e779945080042da7cf9d3fa20815352fe30a4a9bdfacd1a4694af107c026ae85c2b41a3cfc0e8b0a8598930d8a6cec80af7fed505ec9eaca513a4f0d14ce355baf98641419f52e45e98a05071047567899650c6de02b5cab55f557d591e035b101da81dbb1bc4bfd4cea6c96e3f35c4ca16cde1f584f16cfcecb785280c78dc350fccd328332d5d9422b853400dbd0b8ac35a6821cfb35eb01aa7da0375219fb5c44ffa0de8e373e718a9a4f0267a18295ebb4edfc8ed856cb0b3045e3813555c978225c4a5af172ce0c6a20a5c4cafd78cbb76562b5dbcdf7f1497cdb02543fa6ee490781990f4d17a7cf2f8d3683c1d9c392f98e3c67d98c56d1bb5f7173dca9c9cb0d85f81449733ca7007bec87524366ca0091baaa295e616f3d36d6fa0ed7dd895501d0dc7f94727710745ff02fb9cef55b3df39f93dbebaf5533d0a367145b89e80"}}}}}}}, 0x0) 67.959215ms ago: executing program 0 (id=6106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r2, 0x301, 0x0, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x7, 0x6, 0x4faa43f90e6cc31c, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xaa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x801c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r3, @ANYRES16=r3], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0xe}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0xb, 0x8, 0x8, 0x7, 0x3, 0x2, 0x400, 0x7fffffff, [{0x4, 0xd27a, 0x80000001, 0x1}, {0x8, 0x5, 0x72a, 0x4ea0}, {0x4c, 0x6, 0x1, 0x9}, {0x9, 0xd6, 0x4, 0x83bd}, {0x0, 0x3, 0xe, 0x5}, {0xffffffff, 0xffff0001, 0x2, 0x7}, {0xe2fb, 0x7, 0x8, 0x7ff}]}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000500)={0x1, 0x1, 0x5, 0x7, @vifc_lcl_ifindex=r7, @private=0xa010101}, 0x10) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r9, 0xc7, 0x1}, 0xc) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r10, 0x0) recvmmsg(r10, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 0s ago: executing program 2 (id=6107): unshare(0x26020480) r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) kernel console output (not intermixed with test programs): g attributes in process `syz.1.4565'. [ 607.218349][T24409] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.226223][T24409] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.303978][T24409] veth0: left allmulticast mode [ 607.333764][T24409] veth1: left promiscuous mode [ 607.355912][T24409] veth1: left allmulticast mode [ 607.486945][T24409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.717333][T24409] bond1: left promiscuous mode [ 607.723644][T24409] bond2: left promiscuous mode [ 607.731954][T24409] veth3: left promiscuous mode [ 607.747540][T24406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4569'. [ 607.775546][T24406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4569'. [ 607.812195][T24428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4573'. [ 607.858993][T24406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4569'. [ 607.910850][T10057] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.961270][T10057] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.992747][T10057] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.013219][T10057] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.023690][T10057] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.033991][T10057] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.081136][T20396] lo speed is unknown, defaulting to 1000 [ 608.087492][T20396] syz2: Port: 1 Link DOWN [ 608.097705][ T30] audit: type=1804 audit(1771334495.079:9): pid=24427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4573" name="/newroot/315/cgroup.controllers" dev="tmpfs" ino=1628 res=1 errno=0 [ 608.143351][T10057] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.194103][T10057] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.211132][ T30] audit: type=1800 audit(1771334495.079:10): pid=24427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4573" name="cgroup.controllers" dev="tmpfs" ino=1628 res=0 errno=0 [ 608.330436][T24447] siw: device registration error -23 [ 609.060302][T24484] netlink: 'syz.3.4584': attribute type 1 has an invalid length. [ 609.122412][T24484] gretap2: entered allmulticast mode [ 609.150725][T24484] bond9: (slave gretap2): making interface the new active one [ 609.176351][T24484] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 609.332004][T24490] wlan1 speed is unknown, defaulting to 1000 [ 609.345905][T24490] lo speed is unknown, defaulting to 1000 [ 609.656870][T24506] netlink: 'syz.3.4590': attribute type 1 has an invalid length. [ 609.783590][T24509] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 609.801107][T24509] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 610.110168][T24524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.510780][T24538] batadv_slave_0: entered promiscuous mode [ 610.538465][T24538] __nla_validate_parse: 185 callbacks suppressed [ 610.538486][T24538] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4600'. [ 610.574893][T24539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4601'. [ 610.594426][T24539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4601'. [ 610.642640][T24537] batadv_slave_0: left promiscuous mode [ 610.778436][T24551] tipc: Enabled bearer , priority 0 [ 610.800222][T24551] syzkaller0: entered promiscuous mode [ 610.825423][T24551] syzkaller0: entered allmulticast mode [ 610.836457][T24555] team0: entered promiscuous mode [ 610.841671][T24555] team_slave_0: entered promiscuous mode [ 610.848122][T24555] žÿ: entered promiscuous mode [ 610.853258][T24555] bond0: entered promiscuous mode [ 610.859073][T24555] bond_slave_0: entered promiscuous mode [ 610.875726][T24555] bond_slave_1: entered promiscuous mode [ 610.893340][T24558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4608'. [ 610.895870][T24555] dummy0: entered promiscuous mode [ 610.916327][T24559] siw: device registration error -23 [ 610.946294][T24551] tipc: Resetting bearer [ 610.956088][T24558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4608'. [ 610.969018][T24551] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4605'. [ 610.996140][T24551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.027462][T24550] tipc: Resetting bearer [ 611.067432][T24550] tipc: Disabling bearer [ 611.109733][T24563] IPVS: Error connecting to the multicast addr [ 611.296744][T24570] netlink: 'syz.3.4612': attribute type 1 has an invalid length. [ 611.332008][T24570] bond11: entered promiscuous mode [ 611.338209][T24570] 8021q: adding VLAN 0 to HW filter on device bond11 [ 611.395917][T24578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4614'. [ 611.468478][T24580] netlink: 'syz.3.4615': attribute type 1 has an invalid length. [ 611.477565][T24580] netlink: 'syz.3.4615': attribute type 2 has an invalid length. [ 611.486994][T24580] netlink: 'syz.3.4615': attribute type 1 has an invalid length. [ 611.495697][T24580] netlink: 'syz.3.4615': attribute type 2 has an invalid length. [ 611.761941][T24590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4620'. [ 611.820876][T24598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4620'. [ 611.875341][T24590] 8021q: adding VLAN 0 to HW filter on device bond6 [ 612.203791][T24623] bond0: Caught tx_queue_len zero misconfig [ 612.387194][T24629] wlan1 speed is unknown, defaulting to 1000 [ 612.405702][T24629] lo speed is unknown, defaulting to 1000 [ 612.808508][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4635'. [ 612.818357][T24655] netlink: 'syz.3.4635': attribute type 83 has an invalid length. [ 612.851515][T24664] siw: device registration error -23 [ 613.221894][T24683] tipc: Failed to remove unknown binding: 66,1,1/3824731231:1360678436/1360678438 [ 613.264898][T24683] netlink: 'syz.4.4641': attribute type 1 has an invalid length. [ 613.460613][T24701] : entered promiscuous mode [ 613.653850][T24716] netlink: 'syz.0.4653': attribute type 29 has an invalid length. [ 613.686178][T24716] netlink: 'syz.0.4653': attribute type 29 has an invalid length. [ 613.764081][T24720] IPv6: sit2: Disabled Multicast RS [ 613.785453][T24720] sit2: entered allmulticast mode [ 614.493387][T24736] openvswitch: netlink: Flow actions attr not present in new flow. [ 616.728895][T24746] netlink: 'syz.0.4662': attribute type 13 has an invalid length. [ 616.899536][T24759] __nla_validate_parse: 10 callbacks suppressed [ 616.899557][T24759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4665'. [ 617.215004][T24784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4672'. [ 617.246806][T24787] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 617.316009][T24792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4672'. [ 617.325589][T24792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4672'. [ 617.421441][T24796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4674'. [ 617.455093][T24796] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 617.472627][T24800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'. [ 617.498557][T24800] tc_dump_action: action bad kind [ 617.794501][T24817] Cannot find add_set index 0 as target [ 617.800781][T24815] Cannot find add_set index 0 as target [ 617.822944][T24819] wlan1 speed is unknown, defaulting to 1000 [ 617.838366][T24819] lo speed is unknown, defaulting to 1000 [ 618.204751][T24844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4685'. [ 618.548197][T24865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4689'. [ 618.600104][T24865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4689'. [ 618.714930][T24871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4691'. [ 619.166653][T24871] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.174422][T24871] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.586997][T24871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.621239][T24871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.846291][T24871] bond4: left promiscuous mode [ 619.852996][T24871] ip6erspan0: left allmulticast mode [ 619.892121][T24871] macvtap1: left promiscuous mode [ 619.920646][T24871] geneve2: left promiscuous mode [ 619.925982][T24871] geneve2: left allmulticast mode [ 619.952888][T24874] hsr_slave_0: left promiscuous mode [ 619.995767][T24874] hsr_slave_1: left promiscuous mode [ 620.072561][T20677] wlan1 speed is unknown, defaulting to 1000 [ 620.079810][T20712] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.099767][T20677] óyz2: Port: 1 Link DOWN [ 620.109083][T20712] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.173015][T20712] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.214856][T20712] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.376008][T24915] bridge6: entered promiscuous mode [ 620.633702][T24937] geneve0: entered promiscuous mode [ 620.651387][T24937] geneve0: entered allmulticast mode [ 620.669853][T14167] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.787129][T14167] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.814855][T24943] tunl0: Caught tx_queue_len zero misconfig [ 620.841515][T14167] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.850518][T24946] lo speed is unknown, defaulting to 1000 [ 620.865754][T14167] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.885167][T24946] lo speed is unknown, defaulting to 1000 [ 620.891816][T24946] lo speed is unknown, defaulting to 1000 [ 620.958803][T24954] netlink: 'syz.2.4712': attribute type 21 has an invalid length. [ 621.268940][T24971] xt_cgroup: path and classid specified [ 621.326881][T24946] infiniband sqz0: set down [ 621.331583][T24890] lo speed is unknown, defaulting to 1000 [ 621.343665][T24946] infiniband sqz0: added lo [ 621.423566][T24946] RDS/IB: sqz0: added [ 621.432968][T24946] smc: adding ib device sqz0 with port count 1 [ 621.439566][T24946] smc: ib device sqz0 port 1 has no pnetid [ 621.446151][T24890] lo speed is unknown, defaulting to 1000 [ 621.453332][T24946] lo speed is unknown, defaulting to 1000 [ 621.463622][T24978] veth1: entered promiscuous mode [ 621.712629][T24989] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 621.786286][T24991] FAULT_INJECTION: forcing a failure. [ 621.786286][T24991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.800643][T24991] CPU: 1 UID: 0 PID: 24991 Comm: syz.3.4724 Not tainted syzkaller #0 PREEMPT(full) [ 621.800672][T24991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 621.800685][T24991] Call Trace: [ 621.800693][T24991] [ 621.800702][T24991] dump_stack_lvl+0xe8/0x150 [ 621.800738][T24991] should_fail_ex+0x412/0x560 [ 621.800773][T24991] _copy_from_iter+0x1d3/0x1670 [ 621.800813][T24991] ? rcu_is_watching+0x15/0xb0 [ 621.800838][T24991] ? __pfx__copy_from_iter+0x10/0x10 [ 621.800883][T24991] ? netlink_sendmsg+0x650/0xb40 [ 621.800903][T24991] ? skb_put+0x11b/0x210 [ 621.800930][T24991] netlink_sendmsg+0x6c0/0xb40 [ 621.800961][T24991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.800985][T24991] ? aa_sock_msg_perm+0xf1/0x1b0 [ 621.801022][T24991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 621.801051][T24991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.801070][T24991] ____sys_sendmsg+0xa68/0xad0 [ 621.801095][T24991] ? __might_fault+0xaf/0x130 [ 621.801125][T24991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.801159][T24991] ? import_iovec+0x73/0xa0 [ 621.801185][T24991] ___sys_sendmsg+0x2a5/0x360 [ 621.801209][T24991] ? __lock_acquire+0x6b5/0x2cf0 [ 621.801234][T24991] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.801300][T24991] ? __fget_files+0x2a/0x420 [ 621.801317][T24991] ? __fget_files+0x3a0/0x420 [ 621.801347][T24991] __x64_sys_sendmsg+0x1bd/0x2a0 [ 621.801377][T24991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.801414][T24991] ? __pfx_ksys_write+0x10/0x10 [ 621.801452][T24991] do_syscall_64+0x14d/0xf80 [ 621.801480][T24991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.801499][T24991] ? trace_irq_disable+0x37/0x100 [ 621.801521][T24991] ? clear_bhb_loop+0x40/0x90 [ 621.801587][T24991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.801607][T24991] RIP: 0033:0x7f3144f9bf79 [ 621.801626][T24991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.801644][T24991] RSP: 002b:00007f3145e59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.801666][T24991] RAX: ffffffffffffffda RBX: 00007f3145215fa0 RCX: 00007f3144f9bf79 [ 621.801682][T24991] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 621.801694][T24991] RBP: 00007f3145e59090 R08: 0000000000000000 R09: 0000000000000000 [ 621.801707][T24991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.801742][T24991] R13: 00007f3145216038 R14: 00007f3145215fa0 R15: 00007ffd40cca908 [ 621.801777][T24991] [ 621.975994][T24946] lo speed is unknown, defaulting to 1000 [ 622.380590][T24946] lo speed is unknown, defaulting to 1000 [ 622.469919][T25005] netlink: 'syz.4.4729': attribute type 1 has an invalid length. [ 622.798067][T25019] __nla_validate_parse: 10 callbacks suppressed [ 622.798087][T25019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4731'. [ 622.822906][T25020] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4732'. [ 622.844967][T25019] macvlan0: entered promiscuous mode [ 622.910637][T24946] lo speed is unknown, defaulting to 1000 [ 622.940022][T25024] netlink: 'syz.4.4734': attribute type 29 has an invalid length. [ 622.995620][T25024] netlink: 'syz.4.4734': attribute type 29 has an invalid length. [ 623.157122][T15999] lec:lec_start_xmit: lec0:No lecd attached [ 623.369622][T24946] lo speed is unknown, defaulting to 1000 [ 623.754383][T24946] lo speed is unknown, defaulting to 1000 [ 623.914157][T25038] tipc: Enabled bearer , priority 0 [ 623.939586][T25038] syzkaller0: entered promiscuous mode [ 623.948043][T25038] syzkaller0: entered allmulticast mode [ 624.094470][T25046] veth1: entered promiscuous mode [ 624.101657][T25046] veth1: entered allmulticast mode [ 624.114622][T25046] netlink: 'syz.1.4741': attribute type 2 has an invalid length. [ 624.227044][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.296379][T25050] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 624.346660][T25052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4743'. [ 624.448332][T25052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4743'. [ 624.462741][T25039] tipc: Resetting bearer [ 624.536580][T25039] tipc: Disabling bearer [ 624.821202][T25078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.860864][T25085] ip6tnl0: Caught tx_queue_len zero misconfig [ 624.986756][T25094] netlink: 'syz.2.4753': attribute type 4 has an invalid length. [ 625.038067][T25084] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 625.058389][T25092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4755'. [ 625.113389][T25088] netlink: 'syz.2.4753': attribute type 4 has an invalid length. [ 625.219856][T25107] veth0_to_bridge: entered promiscuous mode [ 625.290761][T25111] veth0_to_bridge: left promiscuous mode [ 625.408964][T25123] syzkaller1: entered promiscuous mode [ 625.414953][T25123] syzkaller1: entered allmulticast mode [ 625.484457][T25109] wlan1 speed is unknown, defaulting to 1000 [ 625.484968][T25131] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4763'. [ 625.526059][T25109] lo speed is unknown, defaulting to 1000 [ 625.546516][T25109] lo speed is unknown, defaulting to 1000 [ 626.137725][T25172] x_tables: duplicate underflow at hook 2 [ 626.158834][T25171] pim6reg1: entered promiscuous mode [ 626.164200][T25171] pim6reg1: entered allmulticast mode [ 626.276910][T25183] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4779'. [ 626.293987][T25183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.370602][T25185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4778'. [ 626.401222][T25185] team0 (unregistering): Port device team_slave_0 removed [ 626.426174][T25185] team0 (unregistering): Port device team_slave_1 removed [ 626.526385][T25192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4782'. [ 626.556155][T25192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4782'. [ 627.003834][T25210] netlink: 'syz.3.4787': attribute type 10 has an invalid length. [ 627.227104][T25220] vti0: entered promiscuous mode [ 627.232123][T25220] vti0: entered allmulticast mode [ 627.359883][T25225] netlink: 'syz.2.4793': attribute type 1 has an invalid length. [ 627.596876][T25243] FAULT_INJECTION: forcing a failure. [ 627.596876][T25243] name failslab, interval 1, probability 0, space 0, times 1 [ 627.611970][T25243] CPU: 1 UID: 0 PID: 25243 Comm: syz.2.4800 Not tainted syzkaller #0 PREEMPT(full) [ 627.611998][T25243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.612011][T25243] Call Trace: [ 627.612019][T25243] [ 627.612028][T25243] dump_stack_lvl+0xe8/0x150 [ 627.612059][T25243] should_fail_ex+0x412/0x560 [ 627.612093][T25243] should_failslab+0xa8/0x100 [ 627.612124][T25243] __kmalloc_noprof+0xe8/0x760 [ 627.612150][T25243] ? nsim_set_coalesce+0x29/0x40 [ 627.612174][T25243] ? ethnl_default_notify+0x1f5/0xbe0 [ 627.612194][T25243] ? __kmalloc_noprof+0x1b8/0x760 [ 627.612224][T25243] ethnl_default_notify+0x1f5/0xbe0 [ 627.612257][T25243] ? __pfx_ethnl_default_notify+0x10/0x10 [ 627.612308][T25243] ? mutex_is_locked+0x17/0x50 [ 627.612332][T25243] ? rtnl_is_locked+0x15/0x20 [ 627.612367][T25243] ethnl_default_set_doit+0x6a5/0xad0 [ 627.612422][T25243] genl_family_rcv_msg_doit+0x22a/0x330 [ 627.612451][T25243] ? __asan_memcpy+0x40/0x70 [ 627.612478][T25243] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 627.612521][T25243] ? bpf_lsm_capable+0x9/0x20 [ 627.612542][T25243] ? security_capable+0x7e/0x2c0 [ 627.612577][T25243] genl_rcv_msg+0x61c/0x7a0 [ 627.612610][T25243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.612636][T25243] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 627.612678][T25243] netlink_rcv_skb+0x232/0x4b0 [ 627.612700][T25243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.612728][T25243] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.612746][T25243] ? genl_rcv+0x19/0x40 [ 627.612791][T25243] ? down_read+0x272/0x2e0 [ 627.612819][T25243] ? genl_rcv+0xd/0x40 [ 627.612847][T25243] genl_rcv+0x28/0x40 [ 627.612870][T25243] netlink_unicast+0x80f/0x9b0 [ 627.612909][T25243] ? __pfx_netlink_unicast+0x10/0x10 [ 627.612941][T25243] ? netlink_sendmsg+0x650/0xb40 [ 627.612964][T25243] ? skb_put+0x11b/0x210 [ 627.612993][T25243] netlink_sendmsg+0x813/0xb40 [ 627.613026][T25243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.613052][T25243] ? aa_sock_msg_perm+0xf1/0x1b0 [ 627.613082][T25243] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 627.613112][T25243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.613133][T25243] ____sys_sendmsg+0xa68/0xad0 [ 627.613158][T25243] ? __might_fault+0xaf/0x130 [ 627.613190][T25243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.613228][T25243] ? import_iovec+0x73/0xa0 [ 627.613254][T25243] ___sys_sendmsg+0x2a5/0x360 [ 627.613285][T25243] ? __lock_acquire+0x6b5/0x2cf0 [ 627.613313][T25243] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.613382][T25243] ? __fget_files+0x2a/0x420 [ 627.613402][T25243] ? __fget_files+0x3a0/0x420 [ 627.613435][T25243] __x64_sys_sendmsg+0x1bd/0x2a0 [ 627.613465][T25243] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.613504][T25243] ? __pfx_ksys_write+0x10/0x10 [ 627.613544][T25243] do_syscall_64+0x14d/0xf80 [ 627.613573][T25243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.613603][T25243] ? trace_irq_disable+0x37/0x100 [ 627.613627][T25243] ? clear_bhb_loop+0x40/0x90 [ 627.613651][T25243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.613670][T25243] RIP: 0033:0x7fd25739bf79 [ 627.613689][T25243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.613706][T25243] RSP: 002b:00007fd258257028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.613727][T25243] RAX: ffffffffffffffda RBX: 00007fd257615fa0 RCX: 00007fd25739bf79 [ 627.613741][T25243] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 627.613753][T25243] RBP: 00007fd258257090 R08: 0000000000000000 R09: 0000000000000000 [ 627.613766][T25243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.613777][T25243] R13: 00007fd257616038 R14: 00007fd257615fa0 R15: 00007ffe9f574d28 [ 627.613811][T25243] [ 627.652092][T25245] netlink: 'syz.4.4801': attribute type 4 has an invalid length. [ 627.992690][T25245] __nla_validate_parse: 9 callbacks suppressed [ 627.992708][T25245] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4801'. [ 628.021398][T25245] .`: renamed from bond0 (while UP) [ 628.226557][T25263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4804'. [ 628.694629][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 628.702715][ C1] lec:lec_tx_timeout: lec0 [ 628.702769][ T5142] Bluetooth: hci3: command 0x0405 tx timeout [ 628.709183][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 628.873898][T25295] FAULT_INJECTION: forcing a failure. [ 628.873898][T25295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.914502][T25295] CPU: 1 UID: 0 PID: 25295 Comm: syz.1.4812 Not tainted syzkaller #0 PREEMPT(full) [ 628.914532][T25295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 628.914546][T25295] Call Trace: [ 628.914554][T25295] [ 628.914563][T25295] dump_stack_lvl+0xe8/0x150 [ 628.914597][T25295] should_fail_ex+0x412/0x560 [ 628.914632][T25295] _copy_from_user+0x2d/0xb0 [ 628.914657][T25295] kstrtouint_from_user+0xd6/0x180 [ 628.914691][T25295] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 628.914738][T25295] proc_fail_nth_write+0x8e/0x210 [ 628.914768][T25295] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 628.914803][T25295] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 628.914833][T25295] vfs_write+0x29a/0xb90 [ 628.914869][T25295] ? __pfx_vfs_write+0x10/0x10 [ 628.914897][T25295] ? __fget_files+0x2a/0x420 [ 628.914922][T25295] ? __fget_files+0x3a0/0x420 [ 628.914941][T25295] ? __fget_files+0x2a/0x420 [ 628.914972][T25295] ksys_write+0x150/0x270 [ 628.915001][T25295] ? __pfx_ksys_write+0x10/0x10 [ 628.915039][T25295] do_syscall_64+0x14d/0xf80 [ 628.915067][T25295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.915086][T25295] ? trace_irq_disable+0x37/0x100 [ 628.915110][T25295] ? clear_bhb_loop+0x40/0x90 [ 628.915136][T25295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.915155][T25295] RIP: 0033:0x7fda3ff5c84e [ 628.915176][T25295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 628.915193][T25295] RSP: 002b:00007fda40e96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 628.915215][T25295] RAX: ffffffffffffffda RBX: 00007fda40e976c0 RCX: 00007fda3ff5c84e [ 628.915239][T25295] RDX: 0000000000000001 RSI: 00007fda40e970a0 RDI: 0000000000000004 [ 628.915253][T25295] RBP: 00007fda40e97090 R08: 0000000000000000 R09: 0000000000000000 [ 628.915265][T25295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 628.915277][T25295] R13: 00007fda40216038 R14: 00007fda40215fa0 R15: 00007ffe38261698 [ 628.915313][T25295] [ 628.953304][T25298] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 629.138891][T25299] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4813'. [ 629.439161][T25323] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.4820'. [ 629.633145][T25337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4825'. [ 629.642681][T25337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4825'. [ 629.652457][T25337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4825'. [ 629.662943][T25337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4825'. [ 629.942272][T25357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4832'. [ 630.101174][T25368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4836'. [ 630.775291][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 630.942533][T25406] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 630.950463][T25406] syzkaller1: linktype set to 270 [ 631.083199][T25421] netlink: 'syz.4.4847': attribute type 2 has an invalid length. [ 631.288535][T16175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.304402][T16175] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.332152][T16175] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.360165][T16175] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.617921][T25442] netlink: 'syz.1.4857': attribute type 16 has an invalid length. [ 631.626446][T25442] netlink: 'syz.1.4857': attribute type 17 has an invalid length. [ 631.681265][T25442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.700563][T25442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.730249][T25446] IPVS: Unknown mcast interface: pimreg1 [ 631.888477][T25458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.974159][T25464] veth0: entered promiscuous mode [ 632.026017][T25464] veth0: left promiscuous mode [ 632.204814][T25480] netlink: 'syz.3.4866': attribute type 5 has an invalid length. [ 632.266476][T25484] netlink: 'syz.3.4866': attribute type 1 has an invalid length. [ 632.283505][T25490] Bluetooth: MGMT ver 1.23 [ 632.528218][T25500] syzkaller0: entered promiscuous mode [ 632.533769][T25500] syzkaller0: entered allmulticast mode [ 632.690502][T25507] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 633.744313][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 633.761574][ C1] lec:lec_tx_timeout: lec0 [ 634.886392][T25524] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 634.905839][T25527] __nla_validate_parse: 8 callbacks suppressed [ 634.905861][T25527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4879'. [ 634.938852][T25528] tipc: Enabled bearer , priority 0 [ 634.956818][T25528] syzkaller0: entered promiscuous mode [ 634.962372][T25528] syzkaller0: entered allmulticast mode [ 635.084394][T25537] tipc: Resetting bearer [ 635.136335][T25526] tipc: Resetting bearer [ 635.211731][T25526] tipc: Disabling bearer [ 635.773063][T25581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4894'. [ 635.902510][T25589] openvswitch: netlink: Message has 4 unknown bytes. [ 636.135949][T25606] dummy0: Caught tx_queue_len zero misconfig [ 636.145696][T25609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4903'. [ 636.170603][T25606] skbuff: bad partial csum: csum=65411/0 headroom=162 headlen=65419 [ 636.180828][T25614] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4902'. [ 636.226819][T25609] vlan3: entered promiscuous mode [ 636.242147][T25609] gretap0: entered promiscuous mode [ 636.353907][T25623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4905'. [ 636.366024][T25621] tipc: Enabled bearer , priority 0 [ 636.498936][T25621] syzkaller0: entered promiscuous mode [ 636.517609][T25621] syzkaller0: entered allmulticast mode [ 636.523831][T25621] tipc: Resetting bearer [ 636.642486][T25643] pimreg: tun_chr_ioctl cmd 1074025677 [ 636.648873][T25643] pimreg: linktype set to 6 [ 636.689124][T25648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4912'. [ 636.831187][T25655] netlink: 'syz.0.4914': attribute type 11 has an invalid length. [ 636.869450][T25659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4915'. [ 636.875819][T14167] tipc: Resetting bearer [ 636.931570][T25661] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4916'. [ 636.945279][T25662] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4916'. [ 636.974641][T25661] openvswitch: netlink: EtherType 0 is less than min 600 [ 636.990798][T25662] openvswitch: netlink: EtherType 0 is less than min 600 [ 637.151972][T25620] tipc: Resetting bearer [ 637.631174][T25690] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4922'. [ 638.453367][T25697] nbd: nbd64 already in use [ 638.625267][T25566] udevd[25566]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 639.038136][T25620] tipc: Disabling bearer [ 639.126914][T25707] syzkaller0: entered promiscuous mode [ 639.132522][T25707] syzkaller0: entered allmulticast mode [ 639.169790][T25643] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 639.189214][T25710] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 639.408796][T25732] netlink: 'syz.0.4929': attribute type 21 has an invalid length. [ 639.577976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.594737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.614501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.623454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.482882][T25722] gtp0: entered promiscuous mode [ 641.654582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.663530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.967806][T25774] syzkaller0: entered promiscuous mode [ 641.977910][T25774] syzkaller0: entered allmulticast mode [ 641.985642][T25778] tipc: New replicast peer: 255.255.255.255 [ 641.992690][T25778] tipc: Enabled bearer , priority 10 [ 642.010150][T25778] netlink: 'syz.0.4940': attribute type 13 has an invalid length. [ 642.026917][T25778] netlink: 'syz.0.4940': attribute type 27 has an invalid length. [ 642.037211][T25778] netlink: 'syz.0.4940': attribute type 1 has an invalid length. [ 642.082942][T25776] syzkaller0: entered promiscuous mode [ 642.090954][T25776] syzkaller0: entered allmulticast mode [ 642.278575][T25792] __nla_validate_parse: 2 callbacks suppressed [ 642.278593][T25792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4945'. [ 642.694648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.703365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.760135][T25828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4956'. [ 642.871954][T25843] lo: Caught tx_queue_len zero misconfig [ 643.038296][T25851] netlink: 'syz.1.4960': attribute type 10 has an invalid length. [ 643.069561][T25854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4962'. [ 643.160487][T24890] tipc: Node number set to 4165884332 [ 643.265280][T25866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4965'. [ 643.301025][T25867] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4964'. [ 643.467817][T25878] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4970'. [ 643.506689][T25878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.520738][T25878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.533577][T25878] bond0 (unregistering): Released all slaves [ 643.561530][T25872] wlan1 speed is unknown, defaulting to 1000 [ 643.569440][T25872] lo speed is unknown, defaulting to 1000 [ 643.612072][T25872] lo speed is unknown, defaulting to 1000 [ 643.684027][T25886] xt_hashlimit: max too large, truncated to 1048576 [ 643.692706][T25885] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4972'. [ 643.707149][T25886] xt_hashlimit: overflow, try lower: 13/0 [ 643.734640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.744738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.758255][T25885] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4972'. [ 643.932032][T25901] netlink: 'syz.3.4975': attribute type 6 has an invalid length. [ 643.954918][T25901] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4975'. [ 644.078089][T25908] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4977'. [ 644.325173][T25919] netlink: 'syz.3.4979': attribute type 1 has an invalid length. [ 644.450170][T25925] netlink: 'syz.3.4981': attribute type 1 has an invalid length. [ 644.458317][T25925] netlink: 'syz.3.4981': attribute type 2 has an invalid length. [ 644.688983][T25936] netlink: 'syz.2.4984': attribute type 1 has an invalid length. [ 644.740735][T25936] bond5: (slave bridge4): making interface the new active one [ 644.749194][T25936] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 644.774574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.783657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.891778][T25944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.901310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.928672][T25945] syzkaller0: entered promiscuous mode [ 645.227636][T25960] ip6gretap2: entered promiscuous mode [ 645.310721][T25969] netlink: 'syz.4.4997': attribute type 32 has an invalid length. [ 645.758371][T25999] syzkaller1: entered promiscuous mode [ 645.810409][T25999] syzkaller1: entered allmulticast mode [ 645.816508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.825785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.099017][T26024] wlan1 speed is unknown, defaulting to 1000 [ 646.142546][T26024] lo speed is unknown, defaulting to 1000 [ 646.160863][T26024] lo speed is unknown, defaulting to 1000 [ 646.296937][T26041] netlink: 'syz.3.5017': attribute type 1 has an invalid length. [ 646.405148][T26041] bond12: entered promiscuous mode [ 646.411947][T26041] 8021q: adding VLAN 0 to HW filter on device bond12 [ 646.517342][T26046] bond12: (slave veth3): making interface the new active one [ 646.524970][T26046] veth3: entered promiscuous mode [ 646.531114][T26046] bond12: (slave veth3): Enslaving as an active interface with an up link [ 646.542072][T26038] wlan1 speed is unknown, defaulting to 1000 [ 646.572260][T26038] lo speed is unknown, defaulting to 1000 [ 646.607713][T26038] lo speed is unknown, defaulting to 1000 [ 647.331630][T26085] __nla_validate_parse: 9 callbacks suppressed [ 647.331649][T26085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5028'. [ 647.755559][T26100] bond5: Removing last arp target with arp_interval on [ 647.821705][T26115] net_ratelimit: 2 callbacks suppressed [ 647.821726][T26115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.836519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.857173][T26111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5034'. [ 647.894463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.903122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.022769][T26100] syzkaller0: entered promiscuous mode [ 648.271138][T26144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5041'. [ 648.339131][T26148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5041'. [ 648.369067][T26149] netlink: 71 bytes leftover after parsing attributes in process `syz.0.5042'. [ 648.575138][T26155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5047'. [ 648.907618][T26176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5052'. [ 648.934548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.943350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.000324][T26175] tipc: Enabled bearer , priority 0 [ 649.046253][T26175] tipc: Resetting bearer [ 649.216150][T26182] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5053'. [ 649.451436][T26175] tipc: Disabling bearer [ 649.617407][T26199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5059'. [ 649.904497][T26212] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5061'. [ 649.975123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.983796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.286322][T26223] veth0_to_team: entered allmulticast mode [ 651.014513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.023221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.129617][T26249] netlink: 'syz.2.5074': attribute type 1 has an invalid length. [ 651.332918][T26260] xt_bpf: check failed: parse error [ 651.443162][T26261] wlan1 speed is unknown, defaulting to 1000 [ 651.455549][T26255] netlink: 'syz.2.5076': attribute type 11 has an invalid length. [ 651.466844][T26261] lo speed is unknown, defaulting to 1000 [ 651.474894][T26261] lo speed is unknown, defaulting to 1000 [ 652.221977][T26287] netlink: 'syz.0.5085': attribute type 1 has an invalid length. [ 652.947263][T26299] __nla_validate_parse: 9 callbacks suppressed [ 652.947282][T26299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5087'. [ 653.094417][ C0] net_ratelimit: 2 callbacks suppressed [ 653.094439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.108615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.588815][T26309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5090'. [ 653.827167][T26324] IPVS: set_ctl: invalid protocol: 92 172.30.1.2:20001 [ 653.862823][T26326] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 653.939691][T26326] netlink: 'syz.0.5095': attribute type 39 has an invalid length. [ 653.968607][T26326] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5095'. [ 654.027225][T26330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.097479][T26331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5096'. [ 654.134442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.143370][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.147451][T26341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.220324][T26341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5101'. [ 654.240100][T26341] netlink: 'syz.0.5101': attribute type 7 has an invalid length. [ 654.264319][T26341] netlink: 'syz.0.5101': attribute type 8 has an invalid length. [ 654.282555][T26341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5101'. [ 654.294926][T26346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.332634][T26341] ip6gretap0: entered promiscuous mode [ 654.349223][T26341] erspan0: entered promiscuous mode [ 654.385180][T26341] ip6gretap0: left promiscuous mode [ 654.399311][T26341] erspan0: left promiscuous mode [ 654.833662][T26372] 0: reclassify loop, rule prio 0, protocol 700 [ 655.174425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.183005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.247053][T26387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5112'. [ 655.276319][T26388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.340738][T26388] x_tables: duplicate underflow at hook 2 [ 655.384079][T26400] netlink: 'syz.0.5115': attribute type 31 has an invalid length. [ 655.436617][T26400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.611235][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5119'. [ 655.635604][T26413] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5119'. [ 655.649422][T26412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5121'. [ 655.730873][T26417] 8021q: adding VLAN 0 to HW filter on device .` [ 655.757680][T26417] batman_adv: batadv0: Interface activated: dummy0 [ 655.833800][T26421] syzkaller0: entered promiscuous mode [ 655.840544][ T30] audit: type=1107 audit(1771334542.809:11): pid=26416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 655.853035][T26421] syzkaller0: entered allmulticast mode [ 656.305331][T26456] syzkaller1: entered promiscuous mode [ 656.310880][T26456] syzkaller1: entered allmulticast mode [ 656.426271][T26457] udevd[26457]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 656.451124][T26457] udevd[26457]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 656.550874][T26469] tipc: Enabled bearer , priority 0 [ 656.558744][T26469] syzkaller0: entered promiscuous mode [ 656.564339][T26469] syzkaller0: entered allmulticast mode [ 656.585114][T26469] tipc: Resetting bearer [ 656.630516][T26467] tipc: Resetting bearer [ 656.819075][T26467] tipc: Disabling bearer [ 656.937809][T26483] tipc: Enabled bearer , priority 0 [ 656.945692][T26483] syzkaller0: entered promiscuous mode [ 656.954538][T26483] syzkaller0: entered allmulticast mode [ 657.018205][T26483] tipc: Resetting bearer [ 657.046148][T26482] tipc: Resetting bearer [ 657.112501][T26482] tipc: Disabling bearer [ 657.131714][T26481] syzkaller0: entered promiscuous mode [ 657.141002][T26491] netlink: 'syz.1.5141': attribute type 6 has an invalid length. [ 657.154567][T26491] netlink: 'syz.1.5141': attribute type 7 has an invalid length. [ 657.165554][T26481] syzkaller0: entered allmulticast mode [ 657.228950][T26491] netlink: 'syz.1.5141': attribute type 8 has an invalid length. [ 657.337658][T26497] bridge_slave_0: left allmulticast mode [ 657.343369][T26497] bridge_slave_0: left promiscuous mode [ 657.377976][T26497] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.187045][T26492] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 658.252215][T26492] netlink: 'syz.4.5140': attribute type 10 has an invalid length. [ 658.294542][ C0] net_ratelimit: 26 callbacks suppressed [ 658.294564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.308945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.352778][T26492] __nla_validate_parse: 15 callbacks suppressed [ 658.352799][T26492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5140'. [ 658.455979][T26492] dummy0: entered promiscuous mode [ 658.469440][T26492] batman_adv: batadv0: Interface deactivated: dummy0 [ 658.503381][T26492] batman_adv: batadv0: Removing interface: dummy0 [ 658.553699][T26492] bridge0: port 3(dummy0) entered blocking state [ 658.578739][T26492] bridge0: port 3(dummy0) entered disabled state [ 658.615392][T26492] dummy0: entered allmulticast mode [ 658.623216][T26492] bridge0: port 3(dummy0) entered blocking state [ 658.629760][T26492] bridge0: port 3(dummy0) entered listening state [ 658.792884][T26541] wlan1 speed is unknown, defaulting to 1000 [ 658.854559][T26541] lo speed is unknown, defaulting to 1000 [ 658.876270][T26541] lo speed is unknown, defaulting to 1000 [ 659.334444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.343560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.268161][T26591] syzkaller0: entered promiscuous mode [ 660.273705][T26591] syzkaller0: entered allmulticast mode [ 660.311128][T26596] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5165'. [ 660.374484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.383325][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.872868][T26609] sctp: [Deprecated]: syz.1.5168 (pid 26609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 660.872868][T26609] Use struct sctp_sack_info instead [ 660.900538][T26604] bridge0: port 3(dummy0) entered disabled state [ 661.065732][T10057] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 661.075208][T10057] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 661.084713][T10057] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 661.093803][T10057] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 661.209207][T26617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5169'. [ 661.302541][T26620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5170'. [ 661.380574][T26620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5170'. [ 661.414425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.423003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.639565][T26628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5172'. [ 661.649223][T26627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5172'. [ 661.674486][T26623] wlan1 speed is unknown, defaulting to 1000 [ 661.682360][T26623] lo speed is unknown, defaulting to 1000 [ 661.726659][T26623] lo speed is unknown, defaulting to 1000 [ 661.893209][T26638] 8021q: adding VLAN 0 to HW filter on device bond6 [ 661.926634][T26644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.454418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.463047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.577386][T26669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5187'. [ 662.648373][T26673] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5187'. [ 662.839826][T26681] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5189'. [ 663.188416][T26692] wlan1 speed is unknown, defaulting to 1000 [ 663.215753][T26692] lo speed is unknown, defaulting to 1000 [ 663.329963][T26700] syzkaller0: entered promiscuous mode [ 663.345770][T26710] openvswitch: netlink: Message has 4 unknown bytes. [ 663.352658][T26710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 663.371646][T26700] syzkaller0: entered allmulticast mode [ 663.392602][T26692] lo speed is unknown, defaulting to 1000 [ 663.494564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.503443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.537670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.546297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.574713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.583364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.758191][T26738] __nla_validate_parse: 4 callbacks suppressed [ 665.758228][T26738] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5199'. [ 665.952929][T26750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5201'. [ 665.998348][T26753] netlink: 'syz.0.5202': attribute type 7 has an invalid length. [ 666.019218][T26750] 8021q: adding VLAN 0 to HW filter on device bond13 [ 666.029725][T26754] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5201'. [ 666.181685][T26758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5203'. [ 666.614452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.623330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.640085][T26774] netlink: 'syz.0.5208': attribute type 21 has an invalid length. [ 666.936912][T26787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5212'. [ 667.141628][T26802] netlink: 'syz.4.5215': attribute type 1 has an invalid length. [ 667.213476][T26802] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5215'. [ 667.308376][T26812] macvlan2: entered promiscuous mode [ 667.316715][T26812] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 667.363568][T26814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5221'. [ 667.375968][T26814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5221'. [ 667.385542][T26814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5221'. [ 667.468104][T26821] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 667.480983][T26821] batman_adv: batadv0: Adding interface: gretap1 [ 667.488228][T26821] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.517411][T26821] batman_adv: batadv0: Interface activated: gretap1 [ 667.540746][T26814] netlink: 'syz.1.5221': attribute type 2 has an invalid length. [ 667.860776][T26848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5229'. [ 667.882582][T26845] syzkaller1: entered promiscuous mode [ 667.889804][T26845] syzkaller1: entered allmulticast mode [ 667.927500][T26850] netlink: 'syz.4.5231': attribute type 15 has an invalid length. [ 668.052536][T26850] syzkaller1: entered promiscuous mode [ 668.080269][T26850] syzkaller1: entered allmulticast mode [ 668.097187][T26843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.486818][T26883] tipc: Enabling of bearer rejected, failed to enable media [ 669.256260][T26921] syzkaller0: entered promiscuous mode [ 669.261792][T26921] syzkaller0: entered allmulticast mode [ 669.595377][T26892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.338455][T26962] ip6erspan0: entered allmulticast mode [ 670.370138][T26954] wlan1 speed is unknown, defaulting to 1000 [ 670.396441][T26954] lo speed is unknown, defaulting to 1000 [ 670.427668][T26954] lo speed is unknown, defaulting to 1000 [ 671.051268][T26995] batadv_slave_0: Caught tx_queue_len zero misconfig [ 671.743123][T27022] __nla_validate_parse: 6 callbacks suppressed [ 671.743145][T27022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5264'. [ 672.021642][T27028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5266'. [ 674.141746][T27066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5271'. [ 675.094776][T27085] netlink: 'syz.3.5276': attribute type 66 has an invalid length. [ 675.248514][T27090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5273'. [ 675.257938][T27090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5273'. [ 675.376962][T27103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5280'. [ 675.394674][T27103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5280'. [ 675.886180][T27128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5286'. [ 675.965874][T27138] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5288'. [ 676.424766][T27164] netlink: 'syz.0.5295': attribute type 4 has an invalid length. [ 676.458721][T27164] netlink: 'syz.0.5295': attribute type 4 has an invalid length. [ 676.493341][T24887] lo speed is unknown, defaulting to 1000 [ 676.498455][T27160] block nbd3: server does not support multiple connections per device. [ 676.504459][T24887] sqz0: Port: 1 Link ACTIVE [ 676.512977][T27164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.530650][T27160] block nbd3: shutting down sockets [ 676.545241][T24890] lo speed is unknown, defaulting to 1000 [ 676.554829][T27170] netlink: 'syz.2.5297': attribute type 1 has an invalid length. [ 676.573587][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5293'. [ 676.631464][T27171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.701593][T27170] bond6: entered promiscuous mode [ 676.723744][T27180] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 676.741744][T27167] Unsupported ieee802154 address type: 0 [ 676.760555][T27170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 676.876127][T27186] __nla_validate_parse: 3 callbacks suppressed [ 676.876147][T27186] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5299'. [ 676.897479][T27181] bond6: (slave bridge5): making interface the new active one [ 676.910755][T27181] bridge5: entered promiscuous mode [ 676.928477][T27189] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5299'. [ 676.951148][T27181] bridge5: left promiscuous mode [ 677.014924][T27186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.026552][T27186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.037427][T27186] bond0 (unregistering): Released all slaves [ 677.144075][T27198] syzkaller0: entered promiscuous mode [ 677.168031][T27198] syzkaller0: entered allmulticast mode [ 677.335857][T27205] mac80211_hwsim hwsim31 wlan1 (unregistering): left promiscuous mode [ 677.543408][T27217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5309'. [ 677.553894][T27219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5307'. [ 677.745535][T27233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5311'. [ 677.885717][T27242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.348205][T27266] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5319'. [ 678.358881][T27267] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5319'. [ 678.374186][T27266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5319'. [ 678.487662][T20718] nci: nci_rx_work: unknown MT 0x5 [ 678.494738][T20718] nci: nci_rx_work: unknown MT 0x4 [ 678.501252][T20718] nci: nci_rx_work: unknown MT 0x7 [ 678.524084][T27279] netlink: 'syz.3.5318': attribute type 3 has an invalid length. [ 678.533977][T27279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5318'. [ 678.547175][T27278] netlink: 'syz.2.5324': attribute type 1 has an invalid length. [ 678.555096][T27278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5324'. [ 679.510614][T27294] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 679.531470][T27294] batman_adv: batadv0: Adding interface: gretap2 [ 679.538540][T27294] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.566578][T27294] batman_adv: batadv0: Interface activated: gretap2 [ 681.153200][T27254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 681.419271][T27313] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.482994][T27313] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.506102][T27318] ip6tnl0: Caught tx_queue_len zero misconfig [ 681.551414][T27313] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.616630][T27313] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.030925][T14166] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.052404][T14166] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.076748][T14166] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.097441][T20718] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.210815][T27329] __nla_validate_parse: 3 callbacks suppressed [ 682.210830][T27329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5338'. [ 682.252746][T27329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5338'. [ 682.263869][T27329] netlink: 'syz.2.5338': attribute type 13 has an invalid length. [ 682.282867][T27329] netlink: 'syz.2.5338': attribute type 12 has an invalid length. [ 682.303235][T27335] netlink: 71 bytes leftover after parsing attributes in process `syz.0.5339'. [ 682.341773][T27329] nbd: couldn't find device at index 2 [ 682.394161][T27338] netlink: 'syz.1.5340': attribute type 1 has an invalid length. [ 682.480718][T27338] 8021q: adding VLAN 0 to HW filter on device bond7 [ 682.516554][T27344] : entered promiscuous mode [ 682.734639][T27354] syzkaller0: entered promiscuous mode [ 682.740405][T27354] syzkaller0: entered allmulticast mode [ 682.766553][T27354] tipc: Enabled bearer , priority 0 [ 682.777628][T27354] tipc: Resetting bearer [ 682.799021][T27353] tipc: Resetting bearer [ 682.835247][T27353] tipc: Disabling bearer [ 683.163621][T27382] wlan1 speed is unknown, defaulting to 1000 [ 683.177763][T27382] lo speed is unknown, defaulting to 1000 [ 683.186166][T27382] lo speed is unknown, defaulting to 1000 [ 683.333344][T27395] netlink: 'syz.1.5354': attribute type 83 has an invalid length. [ 683.933241][T27424] geneve2: entered promiscuous mode [ 683.971334][T27413] syzkaller0: entered promiscuous mode [ 683.979390][T27386] siw: device registration error -23 [ 684.004796][T27413] syzkaller0: entered allmulticast mode [ 684.022620][T14167] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 684.059808][T27406] wlan1 speed is unknown, defaulting to 1000 [ 684.142527][T20710] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 684.156874][T27435] netlink: 'syz.3.5360': attribute type 2 has an invalid length. [ 684.170849][T27406] lo speed is unknown, defaulting to 1000 [ 684.215665][T20710] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 684.234498][T20710] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 684.242891][T27406] lo speed is unknown, defaulting to 1000 [ 684.560557][T27444] macsec1: entered promiscuous mode [ 684.567118][T27444] macsec1: entered allmulticast mode [ 684.583469][T27421] wlan1 speed is unknown, defaulting to 1000 [ 684.609782][T27421] lo speed is unknown, defaulting to 1000 [ 684.628404][T27421] lo speed is unknown, defaulting to 1000 [ 684.811550][T27450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5364'. [ 684.865200][T27450] netem: unknown loss type 13 [ 684.870321][T27450] netem: change failed [ 685.662489][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 685.669699][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 685.975695][T27466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5368'. [ 686.025985][T27463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5368'. [ 686.309530][T27474] pim6reg1: entered promiscuous mode [ 686.327010][T27474] pim6reg1: entered allmulticast mode [ 686.619666][T27489] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 686.815408][T27481] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 687.016665][T27508] veth1_to_batadv: entered allmulticast mode [ 687.128536][T27519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5377'. [ 687.413338][T27530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5381'. [ 687.746626][T27555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5383'. [ 688.040100][T27565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5386'. [ 688.141161][T27568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5388'. [ 688.498594][T27589] netlink: 'syz.2.5393': attribute type 10 has an invalid length. [ 688.584578][T27591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5394'. [ 688.793259][T27605] netlink: 'syz.4.5396': attribute type 7 has an invalid length. [ 688.822752][T27605] netlink: 'syz.4.5396': attribute type 8 has an invalid length. [ 688.854305][T27605] netlink: 209828 bytes leftover after parsing attributes in process `syz.4.5396'. [ 688.969220][T27598] syzkaller0: entered promiscuous mode [ 688.984372][T27598] syzkaller0: entered allmulticast mode [ 689.314612][T27624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5403'. [ 689.449299][T27626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5404'. [ 689.452027][T27624] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5403'. [ 689.727020][T27643] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5409'. [ 690.165101][T27663] netlink: 'syz.1.5413': attribute type 12 has an invalid length. [ 690.183312][T27663] bond0: option primary_reselect: invalid value (8) [ 690.694281][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 690.702361][ C1] lec:lec_tx_timeout: lec0 [ 690.707120][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 690.906432][T27690] syzkaller0: entered promiscuous mode [ 690.925465][T27690] syzkaller0: entered allmulticast mode [ 691.015930][T27690] tipc: Enabled bearer , priority 0 [ 691.046020][T27693] tipc: Resetting bearer [ 691.052158][T27693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.060707][T27693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.129252][T27689] tipc: Resetting bearer [ 691.186307][T27689] tipc: Disabling bearer [ 691.366375][T27707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.639607][T27716] wlan1 speed is unknown, defaulting to 1000 [ 691.656856][T27716] lo speed is unknown, defaulting to 1000 [ 691.686765][T27716] lo speed is unknown, defaulting to 1000 [ 692.461648][T27747] __nla_validate_parse: 2 callbacks suppressed [ 692.461685][T27747] netlink: 211792 bytes leftover after parsing attributes in process `syz.2.5437'. [ 692.585296][T27748] netlink: 'syz.1.5439': attribute type 3 has an invalid length. [ 692.846236][T27757] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5442'. [ 693.168822][T27773] bridge_slave_1: left allmulticast mode [ 693.180455][T27773] bridge_slave_1: left promiscuous mode [ 693.193789][T27773] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.207035][T27771] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 693.228424][T27773] bridge_slave_1: entered promiscuous mode [ 693.248388][T27773] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 693.322800][T27776] tipc: Enabled bearer , priority 0 [ 693.360168][T27776] syzkaller0: entered promiscuous mode [ 693.374964][T27776] syzkaller0: entered allmulticast mode [ 693.458277][T27776] tipc: Resetting bearer [ 693.502111][T27793] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5451'. [ 693.549211][T27793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 693.581609][T27787] netlink: 'syz.1.5450': attribute type 3 has an invalid length. [ 693.600167][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5450'. [ 693.673782][T27798] netlink: 'syz.4.5449': attribute type 10 has an invalid length. [ 693.682710][T27775] tipc: Resetting bearer [ 693.793616][T27775] tipc: Disabling bearer [ 694.202736][T27821] gtp0: entered promiscuous mode [ 694.284701][T27825] netlink: 'syz.0.5458': attribute type 4 has an invalid length. [ 694.343677][T24891] lo speed is unknown, defaulting to 1000 [ 694.349691][T24891] sqz0: Port: 1 Link DOWN [ 694.356422][T24891] lo speed is unknown, defaulting to 1000 [ 694.507871][T27836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5461'. [ 694.926888][T27859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5467'. [ 694.948211][T27859] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 695.032609][T27865] syzkaller0: entered promiscuous mode [ 695.038536][T27865] syzkaller0: entered allmulticast mode [ 695.167884][T27872] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5470'. [ 695.508922][T27890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5475'. [ 695.734347][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 695.742467][ C1] lec:lec_tx_timeout: lec0 [ 696.990758][T27808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 697.191532][T27900] siw: device registration error -23 [ 697.207599][T27900] syzkaller0: entered promiscuous mode [ 697.224361][T27900] syzkaller0: entered allmulticast mode [ 697.271806][T27905] bond7: entered promiscuous mode [ 697.369458][T27914] netlink: 510 bytes leftover after parsing attributes in process `syz.2.5477'. [ 697.660920][T27931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5485'. [ 697.709586][T27931] bridge_slave_0: left promiscuous mode [ 697.742707][T27931] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.829675][T27937] tipc: Enabling of bearer rejected, failed to enable media [ 697.843912][T27948] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5483'. [ 697.885419][T27936] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5483'. [ 698.100267][T27959] netlink: 211860 bytes leftover after parsing attributes in process `syz.3.5492'. [ 698.132274][T27959] syzkaller0: entered promiscuous mode [ 698.139810][T27959] syzkaller0: entered allmulticast mode [ 698.627405][T27987] netlink: 'syz.1.5500': attribute type 2 has an invalid length. [ 698.635897][T27985] netlink: 'syz.2.5499': attribute type 3 has an invalid length. [ 698.662726][T27985] syz_tun: entered allmulticast mode [ 698.683520][T27988] netlink: 'syz.1.5500': attribute type 2 has an invalid length. [ 698.716007][T27987] !©9: entered promiscuous mode [ 698.744134][T27992] netlink: 'syz.1.5500': attribute type 32 has an invalid length. [ 698.745933][T27985] siw: device registration error -23 [ 698.761148][T27988] !©9: left promiscuous mode [ 698.773350][T27992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5500'. [ 698.916754][T27985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.966000][T27985] team0: left promiscuous mode [ 698.981137][T27985] team_slave_0: left promiscuous mode [ 699.015890][T27985] žÿ: left promiscuous mode [ 699.034995][T27985] bond0: left promiscuous mode [ 699.050103][T27985] bond_slave_0: left promiscuous mode [ 699.067999][T27985] bond_slave_1: left promiscuous mode [ 699.085679][T27985] dummy0: left promiscuous mode [ 699.091544][T27985] bridge_slave_1: left promiscuous mode [ 699.120443][T27985] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.139857][T27985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 699.201295][T27992] bond8: Setting coupled_control to off (0) [ 699.219778][T27983] syz_tun: left allmulticast mode [ 699.262416][T14167] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 699.284207][T14167] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 699.319312][T27999] syzkaller1: entered promiscuous mode [ 699.334505][T27999] syzkaller1: entered allmulticast mode [ 699.538491][T28026] netlink: 'syz.3.5506': attribute type 21 has an invalid length. [ 699.560352][T28027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5507'. [ 699.570679][T28026] netlink: 'syz.3.5506': attribute type 21 has an invalid length. [ 699.595819][T28026] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5506'. [ 699.605356][T28027] openvswitch: netlink: Flow actions attr not present in new flow. [ 699.634089][T28026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5506'. [ 699.644898][T28030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5508'. [ 699.991049][T28053] delete_channel: no stack [ 700.461286][T28083] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5520'. [ 700.577384][T28086] block nbd0: reconnected socket [ 700.589724][T20720] bridge_slave_0: left allmulticast mode [ 700.596675][T20720] bridge_slave_0: left promiscuous mode [ 700.603824][T20720] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.372036][T20720] team0: Port device geneve0 removed [ 701.385853][ T5839] block nbd0: Receive control failed (result -32) [ 701.930435][T20720] team0: Port device bond0 removed [ 701.938324][T20720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.948666][T20720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.959217][T20720] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 701.970288][T20720] bond0 (unregistering): Released all slaves [ 701.982242][T20720] bond1 (unregistering): Released all slaves [ 702.002139][T20720] bond2 (unregistering): Released all slaves [ 702.017423][T20720] bond3 (unregistering): Released all slaves [ 702.037463][T20720] bond4 (unregistering): (slave lo): Releasing backup interface [ 702.054079][T20720] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 702.065758][T20720] bond4 (unregistering): Released all slaves [ 702.081307][T20720] bond5 (unregistering): Released all slaves [ 702.433479][T28138] gtp1: entered promiscuous mode [ 702.438891][T28138] gtp1: entered allmulticast mode [ 702.466116][T28136] tipc: Enabled bearer , priority 0 [ 702.482514][T28136] syzkaller0: entered promiscuous mode [ 702.497940][T28136] syzkaller0: entered allmulticast mode [ 702.558177][T28133] tipc: Resetting bearer [ 702.633942][T28133] tipc: Disabling bearer [ 702.947392][T28165] __nla_validate_parse: 4 callbacks suppressed [ 702.947413][T28165] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5539'. [ 702.984041][T28165] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5539'. [ 703.109084][T28147] netlink: 'syz.1.5533': attribute type 1 has an invalid length. [ 703.180457][T28174] xt_TCPMSS: Only works on TCP SYN packets [ 703.295288][T20710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.314108][T20710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.327190][T28187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.458968][T28191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.572433][T28195] 8021q: VLANs not supported on wg2 [ 703.706712][T28210] pimreg: tun_chr_ioctl cmd 1074025677 [ 703.713122][T28210] pimreg: linktype set to 1 [ 703.776627][T20720] !: left promiscuous mode [ 703.853649][T28219] wlan1 speed is unknown, defaulting to 1000 [ 703.864007][T28219] lo speed is unknown, defaulting to 1000 [ 703.871657][T28219] lo speed is unknown, defaulting to 1000 [ 703.878091][T20720] tipc: Disabling bearer [ 703.884552][T20720] tipc: Left network mode [ 704.023057][T28222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5555'. [ 704.078143][T28225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5555'. [ 704.156977][T28230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.183031][T28230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5557'. [ 704.284001][T28222] syzkaller0: entered promiscuous mode [ 704.292281][T28222] syzkaller0: entered allmulticast mode [ 704.433544][T28241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5559'. [ 704.555552][T28247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5561'. [ 704.623163][T28248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5561'. [ 704.866120][T28256] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5563'. [ 705.131526][T28253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5562'. [ 705.205777][T20720] hsr_slave_0: left promiscuous mode [ 705.212564][T20720] hsr_slave_1: left promiscuous mode [ 705.221914][T20720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.230876][T20720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.241309][T20720] batman_adv: batadv0: Removing interface: macvtap1 [ 705.273209][T28275] netlink: 'syz.2.5566': attribute type 11 has an invalid length. [ 705.594145][T20720] team0 (unregistering): Port device team_slave_1 removed [ 705.618872][T20720] team0 (unregistering): Port device team_slave_0 removed [ 705.901176][T28286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.971718][T28278] syzkaller0: entered promiscuous mode [ 705.980528][T28278] syzkaller0: entered allmulticast mode [ 707.982296][T28331] __nla_validate_parse: 1 callbacks suppressed [ 707.982316][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5577'. [ 708.013252][T28331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5577'. [ 708.026715][T28334] netlink: zone id is out of range [ 708.031965][T28334] netlink: zone id is out of range [ 708.037356][T28334] netlink: zone id is out of range [ 708.042583][T28334] netlink: zone id is out of range [ 708.060303][T28336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5579'. [ 708.072035][T28334] netlink: zone id is out of range [ 708.097794][T28334] netlink: zone id is out of range [ 708.103099][T28334] netlink: zone id is out of range [ 708.110151][T28333] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 708.120103][T28334] netlink: zone id is out of range [ 708.122680][T28340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5579'. [ 708.232987][T28344] netlink: 'syz.0.5580': attribute type 1 has an invalid length. [ 708.241232][T28344] netlink: 'syz.0.5580': attribute type 2 has an invalid length. [ 708.251603][T28344] netlink: 'syz.0.5580': attribute type 1 has an invalid length. [ 708.259928][T28344] netlink: 'syz.0.5580': attribute type 2 has an invalid length. [ 708.280419][T20720] IPVS: stop unused estimator thread 0... [ 708.494128][T28352] ipvlan2: entered allmulticast mode [ 708.503590][T28352] veth1_macvtap: entered allmulticast mode [ 708.520695][T28354] SET target dimension over the limit! [ 708.580472][T28357] netlink: 704 bytes leftover after parsing attributes in process `syz.2.5585'. [ 708.599560][T28359] netlink: 'syz.3.5583': attribute type 1 has an invalid length. [ 708.614843][T28359] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5583'. [ 708.910984][T28372] netlink: 'syz.2.5589': attribute type 1 has an invalid length. [ 708.983227][T28381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5589'. [ 708.993506][T28372] 8021q: adding VLAN 0 to HW filter on device bond8 [ 709.057517][T28383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5592'. [ 709.116051][T28383] erspan0: entered promiscuous mode [ 709.209221][T28392] team_slave_1: Caught tx_queue_len zero misconfig [ 709.251409][T28393] netlink: 165 bytes leftover after parsing attributes in process `syz.2.5596'. [ 709.261737][T28393] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5596'. [ 709.432987][T28407] pimreg: tun_chr_ioctl cmd 2147767520 [ 709.767652][T28434] netlink: 'syz.4.5607': attribute type 1 has an invalid length. [ 709.777476][T28434] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 710.083388][T28447] wlan1 speed is unknown, defaulting to 1000 [ 710.115977][T28447] lo speed is unknown, defaulting to 1000 [ 710.123959][T28447] lo speed is unknown, defaulting to 1000 [ 710.338349][T28459] net_ratelimit: 770 callbacks suppressed [ 710.338369][T28459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.355748][T28457] syzkaller0: entered promiscuous mode [ 710.364567][T28457] syzkaller0: entered allmulticast mode [ 710.432539][T28457] tipc: Enabled bearer , priority 0 [ 710.454452][T28461] batman_adv: batadv0: Adding interface: geneve4 [ 710.460862][T28461] batman_adv: batadv0: The MTU of interface geneve4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.518367][T28461] batman_adv: batadv0: Not using interface geneve4 (retrying later): interface not active [ 710.558964][T28456] tipc: Resetting bearer [ 710.604920][T28456] tipc: Disabling bearer [ 710.870327][T28479] gretap0: entered promiscuous mode [ 710.945688][T28484] netlink: 'syz.4.5621': attribute type 3 has an invalid length. [ 710.948575][T20710] nci: nci_rx_work: unknown MT 0x5 [ 711.170914][T20710] nci: nci_rx_work: unknown MT 0x4 [ 711.178608][T20710] nci: nci_rx_work: unknown MT 0x7 [ 711.657302][T28498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 711.782440][T28504] bond7: option broadcast_neighbor: invalid value (30) [ 711.791563][T28504] bond7 (unregistering): Released all slaves [ 711.919193][T28512] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20003 [ 713.630216][T28471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 713.797813][T28531] batadv_slave_1: entered promiscuous mode [ 713.847650][T28536] __nla_validate_parse: 7 callbacks suppressed [ 713.847669][T28536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5634'. [ 713.875461][T28536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5634'. [ 713.884996][T28536] netlink: 'syz.0.5634': attribute type 11 has an invalid length. [ 713.885304][T28531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5633'. [ 713.912702][T28536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5634'. [ 713.929837][T28538] netlink: 'syz.1.5632': attribute type 4 has an invalid length. [ 713.941092][T28536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5634'. [ 713.944861][T28538] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.971264][T28536] netlink: 'syz.0.5634': attribute type 11 has an invalid length. [ 713.985178][T20720] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.993919][T20720] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.006860][T28531] batadv_slave_1 (unregistering): left promiscuous mode [ 714.017214][T28531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.046933][T20720] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.067415][T20720] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.150906][T28549] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5637'. [ 714.228610][T28554] netlink: 'syz.3.5639': attribute type 29 has an invalid length. [ 714.242420][T28554] netlink: 'syz.3.5639': attribute type 29 has an invalid length. [ 714.286146][T28561] netlink: 'syz.1.5640': attribute type 15 has an invalid length. [ 714.294057][T28561] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5640'. [ 714.319966][T28559] netlink: 'syz.2.5641': attribute type 1 has an invalid length. [ 714.565519][T28578] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5645'. [ 714.654772][T28583] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.5649'. [ 714.695832][T28583] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.5649'. [ 715.176668][T28604] team0 (unregistering): Port device team_slave_0 removed [ 715.213401][T28604] team0 (unregistering): Port device 76žÿ removed [ 715.269043][T28604] team0 (unregistering): Port device bond0 removed [ 716.094903][T28673] xt_TCPMSS: Only works on TCP SYN packets [ 716.202500][T28679] netlink: 'syz.4.5677': attribute type 3 has an invalid length. [ 717.196942][T28696] netlink: 'syz.0.5684': attribute type 1 has an invalid length. [ 717.419574][T28700] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 717.431741][T28700] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 718.036942][T28696] bond7: (slave bridge8): Enslaving as an active interface with a down link [ 718.085518][T28704] bond7: (slave bridge9): Enslaving as an active interface with a down link [ 718.105759][T28714] macvlan2: entered promiscuous mode [ 718.114905][T28714] macvlan2: entered allmulticast mode [ 718.136827][T28714] bond7: entered promiscuous mode [ 718.142885][T28714] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 718.181560][T28714] bond7: left promiscuous mode [ 718.751021][T28756] 8021q: adding VLAN 0 to HW filter on device .` [ 718.762995][T28756] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.774384][T28756] bridge0: port 3(dummy0) entered blocking state [ 718.781356][T28756] bridge0: port 3(dummy0) entered listening state [ 718.795194][T28756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 718.928809][T16175] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.946012][T16175] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.972003][T16175] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.985724][T16175] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.203334][T28796] x_tables: duplicate underflow at hook 2 [ 719.296862][T28801] __nla_validate_parse: 7 callbacks suppressed [ 719.296881][T28801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5713'. [ 719.340382][T28801] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5713'. [ 719.454395][T28803] bond9: Removing last arp target with arp_interval on [ 719.466698][T28818] tipc: Failed to remove unknown binding: 66,0,0/0:750522139/750522141 [ 719.478556][T28800] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 719.514350][T28818] tipc: Failed to remove unknown binding: 66,0,0/0:750522139/750522140 [ 719.548664][T28817] syzkaller0: entered promiscuous mode [ 719.582343][T28817] syzkaller0: entered allmulticast mode [ 719.629502][T28818] tipc: Failed to remove unknown binding: 66,0,0/0:750522139/750522141 [ 719.667767][T28818] tipc: Failed to remove unknown binding: 66,0,0/0:750522139/750522140 [ 719.707414][T28837] syzkaller0: entered promiscuous mode [ 719.723288][T28837] syzkaller0: entered allmulticast mode [ 719.773751][T16175] nci: nci_rx_work: unknown MT 0x5 [ 719.781656][T28841] netlink: 'syz.1.5717': attribute type 3 has an invalid length. [ 719.789420][T28840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5721'. [ 719.789629][T28840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5721'. [ 719.808034][T16175] nci: nci_rx_work: unknown MT 0x4 [ 719.808122][T16175] nci: nci_rx_work: unknown MT 0x7 [ 719.851845][T28841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5717'. [ 720.862795][T28862] netlink: 'syz.2.5726': attribute type 1 has an invalid length. [ 720.891679][T28862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5726'. [ 720.911149][T28862] bond10: (slave bridge5): making interface the new active one [ 720.920022][T28862] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 721.064093][T28869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5729'. [ 721.112218][T28871] netlink: 'syz.2.5730': attribute type 13 has an invalid length. [ 721.206255][T28871] batman_adv: batadv0: Interface deactivated: gretap2 [ 721.341284][T28879] netlink: 'syz.2.5732': attribute type 25 has an invalid length. [ 721.349656][T28879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5732'. [ 721.361136][T28879] netlink: 'syz.2.5732': attribute type 25 has an invalid length. [ 721.369980][T28879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5732'. [ 721.446758][T28881] netlink: 'syz.2.5733': attribute type 1 has an invalid length. [ 721.472007][T28881] 8021q: adding VLAN 0 to HW filter on device bond11 [ 721.487797][T28881] vlan0: entered promiscuous mode [ 721.492875][T28881] bond11: entered promiscuous mode [ 721.499040][T28881] vlan0: entered allmulticast mode [ 721.504189][T28881] bond11: entered allmulticast mode [ 721.522257][T28881] bond11: (slave bridge6): making interface the new active one [ 721.530309][T28881] bridge6: entered promiscuous mode [ 721.536094][T28881] bridge6: entered allmulticast mode [ 721.542364][T28881] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 721.711152][T28887] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5735'. [ 721.723284][T28887] bond0: (slave dummy0): Releasing backup interface [ 722.482735][T28822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.824687][T28898] syzkaller0: entered promiscuous mode [ 722.830685][T28898] syzkaller0: entered allmulticast mode [ 722.890509][T28905] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 723.490130][ T12] nci: nci_rx_work: unknown MT 0x5 [ 723.502783][T28941] netlink: 'syz.0.5746': attribute type 3 has an invalid length. [ 723.515210][ T12] nci: nci_rx_work: unknown MT 0x4 [ 723.541302][ T12] nci: nci_rx_work: unknown MT 0x7 [ 726.250783][T28920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 726.452879][T29005] __nla_validate_parse: 5 callbacks suppressed [ 726.452899][T29005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5759'. [ 726.532494][T29005] vlan3: entered promiscuous mode [ 726.541335][T29005] veth0: entered promiscuous mode [ 726.572771][T29013] erspan0: entered promiscuous mode [ 726.591610][T29020] syzkaller0: entered promiscuous mode [ 726.604445][T29020] syzkaller0: entered allmulticast mode [ 726.845589][T29026] netlink: 'syz.2.5765': attribute type 7 has an invalid length. [ 726.989589][T29045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5770'. [ 727.013020][T29045] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 727.137643][T29067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5773'. [ 727.234132][T28975] nci: nci_rx_work: unknown MT 0x5 [ 727.241056][T28975] nci: nci_rx_work: unknown MT 0x4 [ 727.247138][T28975] nci: nci_rx_work: unknown MT 0x7 [ 727.249328][T29071] netlink: 'syz.2.5772': attribute type 3 has an invalid length. [ 727.272217][T29071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5772'. [ 727.384905][T29080] tunl0: Caught tx_queue_len zero misconfig [ 727.508621][T29086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5779'. [ 730.015650][T29049] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.285093][T29104] netlink: 'syz.4.5786': attribute type 58 has an invalid length. [ 730.348197][T29102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5785'. [ 730.375812][T29106] SET target dimension over the limit! [ 730.445933][T29110] netlink: zone id is out of range [ 730.451373][T29110] netlink: zone id is out of range [ 730.461904][T29110] netlink: zone id is out of range [ 730.491786][T29110] netlink: zone id is out of range [ 730.510645][T29110] netlink: zone id is out of range [ 730.556093][T29110] netlink: zone id is out of range [ 730.593450][T29117] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5788'. [ 730.635174][T29128] žÿ: renamed from team_slave_1 [ 730.642577][T29110] netlink: zone id is out of range [ 730.674576][T29117] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5788'. [ 730.730002][T29134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5793'. [ 730.739157][T29134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5793'. [ 730.761906][T29134] netlink: 'syz.4.5793': attribute type 1 has an invalid length. [ 730.805704][T29134] block nbd3: Unsupported socket: should be TCP or UNIX. [ 731.046674][T29149] netlink: 'syz.2.5797': attribute type 1 has an invalid length. [ 731.054864][T29149] netlink: 'syz.2.5797': attribute type 8 has an invalid length. [ 731.064570][T29149] netlink: 'syz.2.5797': attribute type 9 has an invalid length. [ 731.074645][T29149] netlink: 'syz.2.5797': attribute type 10 has an invalid length. [ 731.082524][T29149] netlink: 'syz.2.5797': attribute type 11 has an invalid length. [ 731.252286][T29158] netlink: 'syz.2.5800': attribute type 2 has an invalid length. [ 731.796127][T29193] __nla_validate_parse: 6 callbacks suppressed [ 731.796148][T29193] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5810'. [ 731.797487][T29192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5811'. [ 731.842636][T29191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5811'. [ 732.007504][T29200] x_tables: duplicate underflow at hook 1 [ 732.342374][T29218] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5819'. [ 732.363392][T29216] syzkaller0: entered promiscuous mode [ 732.387581][T29216] syzkaller0: entered allmulticast mode [ 732.496312][T29223] netem: incorrect ge model size [ 732.502599][T29223] netem: change failed [ 732.668072][T29228] netlink: 'syz.4.5822': attribute type 1 has an invalid length. [ 732.733461][T29236] bond8: (slave geneve5): making interface the new active one [ 732.743585][T29236] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 732.753158][T28979] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 732.775290][T28979] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 732.826729][T28979] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 732.846630][T28979] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 732.896106][T29228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5822'. [ 732.932005][T29228] bond8 (unregistering): (slave geneve5): Releasing active interface [ 732.963997][T29228] bond8 (unregistering): Released all slaves [ 733.031334][T28955] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 733.049290][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5826'. [ 733.083947][T29241] wlan1 speed is unknown, defaulting to 1000 [ 733.107659][T28955] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 733.136397][T29241] lo speed is unknown, defaulting to 1000 [ 733.150393][T29241] lo speed is unknown, defaulting to 1000 [ 733.156413][T28955] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 733.200496][T28955] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 733.928927][T29280] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 734.081088][T29281] netlink: 'syz.0.5834': attribute type 3 has an invalid length. [ 734.296270][ C1] bridge0: port 3(dummy0) entered learning state [ 735.398987][T29364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5855'. [ 735.417345][T29365] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5854'. [ 735.656749][T29374] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 735.705090][T29374] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 735.744397][T29374] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 735.936862][T29386] mac80211_hwsim hwsim29 wlan1: Caught tx_queue_len zero misconfig [ 735.959257][T29393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5862'. [ 735.975052][T29393] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 736.018917][T29396] netlink: 'syz.4.5859': attribute type 3 has an invalid length. [ 736.063047][T29393] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 736.151593][T29401] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 736.153998][T29403] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 736.191810][T29404] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:0 [ 736.341330][T29403] netlink: 'syz.3.5864': attribute type 13 has an invalid length. [ 736.638495][T29429] wlan1 speed is unknown, defaulting to 1000 [ 736.650954][T29429] lo speed is unknown, defaulting to 1000 [ 736.660634][T29429] lo speed is unknown, defaulting to 1000 [ 736.918024][T29437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5871'. [ 737.093516][T29451] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 737.772184][T29481] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 737.865691][T29481] ipvlan2: entered allmulticast mode [ 737.871059][T29481] veth0_vlan: entered allmulticast mode [ 737.927672][T29488] netlink: 'syz.0.5886': attribute type 1 has an invalid length. [ 737.956501][T29488] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5886'. [ 738.126229][T29495] bridge6: entered promiscuous mode [ 738.162800][T29497] bridge7: entered promiscuous mode [ 738.180783][T29496] sch_tbf: burst 19 is lower than device syzkaller0 mtu (1514) ! [ 738.257209][T29501] bond8: option all_slaves_active: invalid value (13) [ 738.290455][T29501] bond8 (unregistering): Released all slaves [ 738.323333][T29507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5889'. [ 738.388246][T29510] FAULT_INJECTION: forcing a failure. [ 738.388246][T29510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.424173][T29510] CPU: 1 UID: 0 PID: 29510 Comm: syz.4.5891 Not tainted syzkaller #0 PREEMPT(full) [ 738.424207][T29510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.424220][T29510] Call Trace: [ 738.424227][T29510] [ 738.424235][T29510] dump_stack_lvl+0xe8/0x150 [ 738.424268][T29510] should_fail_ex+0x412/0x560 [ 738.424301][T29510] _copy_from_iter+0x1d3/0x1670 [ 738.424333][T29510] ? rep_movs_alternative+0x4a/0x90 [ 738.424360][T29510] ? __pfx__copy_from_iter+0x10/0x10 [ 738.424387][T29510] ? sock_alloc_send_pskb+0x896/0x990 [ 738.424422][T29510] ? __pfx__copy_from_iter+0x10/0x10 [ 738.424454][T29510] ? page_copy_sane+0x16a/0x270 [ 738.424486][T29510] copy_page_from_iter+0xdd/0x170 [ 738.424521][T29510] skb_copy_datagram_from_iter+0x306/0x710 [ 738.424561][T29510] unix_dgram_sendmsg+0x521/0x18e0 [ 738.424611][T29510] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 738.424633][T29510] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 738.424675][T29510] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 738.424701][T29510] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 738.424722][T29510] ____sys_sendmsg+0xa68/0xad0 [ 738.424749][T29510] ? __might_fault+0xaf/0x130 [ 738.424787][T29510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 738.424824][T29510] ? import_iovec+0x73/0xa0 [ 738.424849][T29510] ___sys_sendmsg+0x2a5/0x360 [ 738.424874][T29510] ? __lock_acquire+0x6b5/0x2cf0 [ 738.424900][T29510] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.424933][T29510] ? kstrtouint+0x6e/0xe0 [ 738.424988][T29510] ? __fget_files+0x2a/0x420 [ 738.425007][T29510] ? __fget_files+0x3a0/0x420 [ 738.425038][T29510] __sys_sendmmsg+0x27c/0x4e0 [ 738.425069][T29510] ? __pfx___sys_sendmmsg+0x10/0x10 [ 738.425094][T29510] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 738.425148][T29510] ? ksys_write+0x242/0x270 [ 738.425176][T29510] ? __pfx_ksys_write+0x10/0x10 [ 738.425208][T29510] __x64_sys_sendmmsg+0xa0/0xc0 [ 738.425238][T29510] do_syscall_64+0x14d/0xf80 [ 738.425265][T29510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.425285][T29510] ? trace_irq_disable+0x37/0x100 [ 738.425310][T29510] ? clear_bhb_loop+0x40/0x90 [ 738.425334][T29510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.425354][T29510] RIP: 0033:0x7f917ad9bf79 [ 738.425373][T29510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.425391][T29510] RSP: 002b:00007f917bc7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 738.425413][T29510] RAX: ffffffffffffffda RBX: 00007f917b015fa0 RCX: 00007f917ad9bf79 [ 738.425428][T29510] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 738.425442][T29510] RBP: 00007f917bc7b090 R08: 0000000000000000 R09: 0000000000000000 [ 738.425455][T29510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.425466][T29510] R13: 00007f917b016038 R14: 00007f917b015fa0 R15: 00007fff74279748 [ 738.425500][T29510] [ 738.823229][T29521] netlink: 388 bytes leftover after parsing attributes in process `syz.1.5896'. [ 738.891189][T29496] wlan1 speed is unknown, defaulting to 1000 [ 738.919461][T29527] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 738.933290][T29496] lo speed is unknown, defaulting to 1000 [ 738.966441][T29496] lo speed is unknown, defaulting to 1000 [ 738.973871][T29530] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5894'. [ 739.268485][T29550] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 739.393564][T29562] wlan1 speed is unknown, defaulting to 1000 [ 739.455511][T29564] tipc: New replicast peer: 172.20.20.27 [ 739.465630][T29564] tipc: Enabled bearer , priority 10 [ 739.472720][T29562] lo speed is unknown, defaulting to 1000 [ 739.480209][T29565] syzkaller0: entered promiscuous mode [ 739.486797][T29565] syzkaller0: entered allmulticast mode [ 739.669027][T29562] lo speed is unknown, defaulting to 1000 [ 739.920380][T28975] nci: nci_rx_work: unknown MT 0x5 [ 739.927302][T28975] nci: nci_rx_work: unknown MT 0x4 [ 739.932552][T28975] nci: nci_rx_work: unknown MT 0x7 [ 740.186036][T29588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5909'. [ 740.562566][T29590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5909'. [ 740.608206][T24892] tipc: Node number set to 993446400 [ 740.629343][T29595] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5911'. [ 741.253862][T29612] netlink: 328 bytes leftover after parsing attributes in process `syz.0.5917'. [ 742.297191][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.306825][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 742.317078][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 742.328970][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 742.337117][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 742.373929][T29617] wlan1 speed is unknown, defaulting to 1000 [ 742.383746][T29617] lo speed is unknown, defaulting to 1000 [ 742.393156][T29617] lo speed is unknown, defaulting to 1000 [ 742.474191][T17377] bond3: (slave syz_tun): Releasing backup interface [ 742.627005][T28975] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.638542][T28975] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 742.667849][T29572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.680802][T29599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5912'. [ 742.809200][T28975] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.825303][T28975] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 742.922048][T29621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5921'. [ 742.957864][T28975] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.986258][T28975] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 743.218567][T29632] geneve5: entered promiscuous mode [ 743.223853][T29632] geneve5: entered allmulticast mode [ 743.406051][T28975] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.444337][T28975] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 743.541728][T29617] chnl_net:caif_netlink_parms(): no params data found [ 743.582484][T29653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5927'. [ 744.131177][T29617] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.148148][T29617] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.164855][T29617] bridge_slave_0: entered allmulticast mode [ 744.183115][T29617] bridge_slave_0: entered promiscuous mode [ 744.203801][T28975] bridge_slave_1: left allmulticast mode [ 744.212895][T28975] bridge_slave_1: left promiscuous mode [ 744.239581][T28975] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.269433][T28975] bridge_slave_0: left allmulticast mode [ 744.284372][T28975] bridge_slave_0: left promiscuous mode [ 744.303129][T28975] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.376574][ T5839] Bluetooth: hci0: command tx timeout [ 744.429519][T28975] batman_adv: batadv0: Interface deactivated: gretap1 [ 744.955363][T28975] batman_adv: batadv0: Removing interface: gretap1 [ 745.369597][T28975] bond7 (unregistering): (slave bridge8): Releasing active interface [ 745.428372][T28975] bond7 (unregistering): (slave bridge9): Releasing active interface [ 745.498743][T28975] bond1 (unregistering): Released all slaves [ 745.513804][T28975] bond2 (unregistering): Released all slaves [ 745.529009][T28975] bond3 (unregistering): Released all slaves [ 745.544439][T28975] bond4 (unregistering): Released all slaves [ 745.559898][T28975] bond5 (unregistering): Released all slaves [ 745.578959][T28975] bond6 (unregistering): Released all slaves [ 745.603814][T28975] bond0 (unregistering): Released all slaves [ 745.618906][T28975] bond7 (unregistering): Released all slaves [ 745.644465][T29617] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.651944][T29617] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.660229][T29617] bridge_slave_1: entered allmulticast mode [ 745.668724][T29617] bridge_slave_1: entered promiscuous mode [ 745.855224][T28975] tipc: Disabling bearer [ 745.871295][T28975] tipc: Left network mode [ 745.887271][T29617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.925693][T29617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.944456][T29727] syzkaller0: entered promiscuous mode [ 745.959864][T29727] syzkaller0: entered allmulticast mode [ 746.034720][T28975] IPVS: stopping master sync thread 17991 ... [ 746.056710][T29727] tipc: Enabled bearer , priority 0 [ 746.132636][T29617] team0: Port device team_slave_0 added [ 746.145273][T29731] tipc: Resetting bearer [ 746.151284][T29731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.159976][T29731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.173681][T29617] team0: Port device team_slave_1 added [ 746.217888][T29725] tipc: Resetting bearer [ 746.256419][T29725] tipc: Disabling bearer [ 746.350841][T29617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.358212][T29617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.391363][T29617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.457102][ T5839] Bluetooth: hci0: command tx timeout [ 746.492353][T29617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.513342][T29617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.555385][T29617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.737796][T29617] hsr_slave_0: entered promiscuous mode [ 746.749022][T29617] hsr_slave_1: entered promiscuous mode [ 746.801138][T29761] sctp: [Deprecated]: syz.3.5945 (pid 29761) Use of int in max_burst socket option. [ 746.801138][T29761] Use struct sctp_assoc_value instead [ 747.107191][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 747.117561][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 747.166097][T29745] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 747.293985][T29782] netlink: 'syz.4.5948': attribute type 1 has an invalid length. [ 747.511343][T28975] hsr_slave_0: left promiscuous mode [ 747.535737][T28975] hsr_slave_1: left promiscuous mode [ 747.543242][T28975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.563226][T28975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.570586][T29794] x_tables: duplicate underflow at hook 1 [ 747.570673][T29794] x_tables: duplicate underflow at hook 1 [ 747.570768][T29794] x_tables: duplicate underflow at hook 1 [ 747.570854][T29794] x_tables: duplicate underflow at hook 1 [ 747.570939][T29794] x_tables: duplicate underflow at hook 1 [ 747.571028][T29794] x_tables: duplicate underflow at hook 1 [ 747.571102][T29794] x_tables: duplicate underflow at hook 1 [ 747.571349][T29794] x_tables: duplicate underflow at hook 1 [ 747.629074][T28975] batman_adv: batadv0: Removing interface: macsec1 [ 747.994642][T28975] team_slave_1 (unregistering): left allmulticast mode [ 748.003749][T28975] team0 (unregistering): Port device team_slave_1 removed [ 748.021702][T28975] C (unregistering): left allmulticast mode [ 748.029440][T28975] team0 (unregistering): Port device C removed [ 748.155858][T28972] smc: removing ib device sqz0 [ 748.219442][T29801] bridge_slave_0: left allmulticast mode [ 748.227369][T29801] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 748.367896][T29812] syzkaller0: entered promiscuous mode [ 748.393925][T29812] syzkaller0: entered allmulticast mode [ 748.431314][T29812] tipc: Enabled bearer , priority 0 [ 748.519034][T29823] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 748.534362][ T5839] Bluetooth: hci0: command 0x040f tx timeout [ 748.557698][T29812] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 748.691885][T29813] tipc: Resetting bearer [ 748.699408][T29829] netlink: 'syz.2.5959': attribute type 13 has an invalid length. [ 748.878221][T29811] tipc: Resetting bearer [ 748.945174][T29842] netlink: 'syz.2.5962': attribute type 1 has an invalid length. [ 748.984506][T29842] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5962'. [ 749.010896][T29811] tipc: Disabling bearer [ 749.011458][T29842] netlink: 'syz.2.5962': attribute type 1 has an invalid length. [ 749.044690][T29842] netlink: 'syz.2.5962': attribute type 8 has an invalid length. [ 749.075491][T29842] netlink: 606 bytes leftover after parsing attributes in process `syz.2.5962'. [ 749.118254][T29842] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5962'. [ 749.442654][T29868] netlink: 'syz.4.5965': attribute type 1 has an invalid length. [ 749.442654][T29869] netlink: 'syz.4.5965': attribute type 1 has an invalid length. [ 749.442685][T29869] netlink: 'syz.4.5965': attribute type 2 has an invalid length. [ 749.492826][T29868] netlink: 'syz.4.5965': attribute type 2 has an invalid length. [ 749.654338][ C1] bridge0: port 3(dummy0) entered forwarding state [ 749.660957][ C1] bridge0: topology change detected, propagating [ 749.900461][T29887] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5967'. [ 750.085207][T29892] netlink: 'syz.2.5969': attribute type 1 has an invalid length. [ 750.128792][T29892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5969'. [ 750.189351][T29892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5969'. [ 750.233995][T29897] wlan1 speed is unknown, defaulting to 1000 [ 750.326955][T29617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 750.375452][T29617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 750.450426][T29617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 750.482276][T29911] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5974'. [ 750.586029][T29617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 750.614380][ T5839] Bluetooth: hci0: command 0x040f tx timeout [ 750.688429][T29918] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5976'. [ 750.940971][T29617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.012970][T29617] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.085449][T28972] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.092648][T28972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.126101][T28972] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.133341][T28972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.157335][T29940] x_tables: duplicate entry at hook 3 [ 751.243951][T29617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 751.293024][T29617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 751.327930][T29946] openvswitch: netlink: IP tunnel dst address not specified [ 751.466545][T28975] IPVS: stop unused estimator thread 0... [ 751.623134][T29973] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5985'. [ 751.871051][T29982] Bluetooth: MGMT ver 1.23 [ 751.917030][T29983] tipc: Enabled bearer , priority 0 [ 751.953038][T29983] syzkaller0: entered promiscuous mode [ 751.968957][T29983] syzkaller0: entered allmulticast mode [ 752.167612][T29983] tipc: Resetting bearer [ 752.178471][T29981] tipc: Resetting bearer [ 752.206518][T29981] tipc: Disabling bearer [ 752.345650][T29617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.414083][T30000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5990'. [ 752.526903][T29617] veth0_vlan: entered promiscuous mode [ 752.552837][T29617] veth1_vlan: entered promiscuous mode [ 752.649590][T29617] veth0_macvtap: entered promiscuous mode [ 752.694268][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 752.702392][ C1] lec:lec_tx_timeout: lec0 [ 752.710829][T29617] veth1_macvtap: entered promiscuous mode [ 752.714999][ T5142] Bluetooth: hci0: command 0x040f tx timeout [ 752.839900][T29617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.895236][T30016] dvmrp2: entered allmulticast mode [ 752.923408][T29617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.000498][T28963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.025737][T28963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.055411][T28979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.090807][T28979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.566586][T28975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.576110][T15999] lec:lec_start_xmit: lec0:No lecd attached [ 753.600479][T28975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.853364][T28979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.892179][T28979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.901095][ T5142] Bluetooth: hci2: command 0x0406 tx timeout [ 753.908571][ T5839] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 754.024950][T30067] __nla_validate_parse: 1 callbacks suppressed [ 754.024970][T30067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6005'. [ 754.153957][T30074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6006'. [ 754.901464][T30111] syzkaller1: entered promiscuous mode [ 754.917537][T30111] syzkaller1: entered allmulticast mode [ 755.183154][T30132] validate_nla: 4 callbacks suppressed [ 755.183173][T30132] netlink: 'syz.4.6017': attribute type 1 has an invalid length. [ 755.226164][T30132] netlink: 'syz.4.6017': attribute type 2 has an invalid length. [ 755.671380][T30160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6020'. [ 755.773471][T30164] 8021q: adding VLAN 0 to HW filter on device bond12 [ 755.803066][T30164] bond12: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 755.816827][T30164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6021'. [ 755.850465][T30164] bond13: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 755.862614][T30164] bond13 (unregistering): Released all slaves [ 755.888013][T28978] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 756.014709][T28955] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 756.029071][T30176] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 756.940440][T30068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 757.208230][T30200] tipc: Enabled bearer , priority 10 [ 757.227773][T30199] tipc: Enabling of bearer rejected, already enabled [ 757.255472][T30204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6031'. [ 757.274406][T30200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6031'. [ 757.324906][ T5142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 757.336806][ T5142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 757.346063][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 757.371929][ T5142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 757.387320][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 757.388090][T30212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6034'. [ 757.474185][T30207] batadv_slave_1: entered promiscuous mode [ 757.487082][T30212] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 757.489123][T30214] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 757.623099][T30208] wlan1 speed is unknown, defaulting to 1000 [ 757.640292][T30205] batadv_slave_1: left promiscuous mode [ 757.774442][T30232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.791278][T30233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.866556][T28975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.879912][T28975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.898517][T30241] netlink: zone id is out of range [ 757.905865][T30241] netlink: zone id is out of range [ 757.911157][T30241] netlink: zone id is out of range [ 757.917440][T30241] netlink: zone id is out of range [ 757.922712][T30241] netlink: zone id is out of range [ 757.929174][T30241] netlink: zone id is out of range [ 757.935958][T30241] netlink: zone id is out of range [ 757.941322][T30241] netlink: zone id is out of range [ 757.947231][T30241] netlink: zone id is out of range [ 757.952874][T30241] netlink: zone id is out of range [ 757.987406][T28975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.000577][T28975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.109404][T28975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.126507][T28975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.263287][T28975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.277864][T28975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.377794][T30208] chnl_net:caif_netlink_parms(): no params data found [ 758.604125][T30270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6048'. [ 758.663652][T30208] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.673516][T30208] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.681288][T30208] bridge_slave_0: entered allmulticast mode [ 758.692373][T30208] bridge_slave_0: entered promiscuous mode [ 758.704235][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5130 ms [ 758.712344][ C1] lec:lec_tx_timeout: lec0 [ 758.731233][T30208] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.752239][T30208] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.771124][T30208] bridge_slave_1: entered allmulticast mode [ 758.788679][T30208] bridge_slave_1: entered promiscuous mode [ 758.852976][T30278] xt_TCPMSS: Only works on TCP SYN packets [ 758.883735][T30208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.011990][T30276] syzkaller1: entered promiscuous mode [ 759.018922][T30276] syzkaller1: entered allmulticast mode [ 759.029079][T30208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.416355][T28975] bond7 (unregistering): (slave gretap1): Releasing backup interface [ 759.445229][T28975] bond9 (unregistering): (slave gretap2): Releasing active interface [ 759.469487][T28975] dvmrp2 (unregistering): left allmulticast mode [ 759.494506][ T5839] Bluetooth: hci5: command tx timeout [ 759.542694][T30297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6053'. [ 759.642512][T28975] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 759.951268][T28975] bond0 (unregistering): left promiscuous mode [ 759.958167][T28975] bond_slave_0: left promiscuous mode [ 759.963835][T28975] bridge_slave_1: left promiscuous mode [ 759.979548][T28975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.992239][T28975] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 760.003588][T28975] bond0 (unregistering): Released all slaves [ 760.016755][T28975] bond1 (unregistering): Released all slaves [ 760.035628][T28975] bond2 (unregistering): Released all slaves [ 760.056798][T28975] bond3 (unregistering): Released all slaves [ 760.093246][T28975] bond4 (unregistering): Released all slaves [ 760.114390][T28975] bond5 (unregistering): Released all slaves [ 760.133005][T28975] bond6 (unregistering): Released all slaves [ 760.167914][T28975] bond7 (unregistering): (slave bond8): Releasing backup interface [ 760.177023][T28975] bond8 (unregistering): left promiscuous mode [ 760.189041][T28975] bond7 (unregistering): Released all slaves [ 760.219457][T28975] bond8 (unregistering): Released all slaves [ 760.249768][T28975] bond9 (unregistering): Released all slaves [ 760.276088][T28975] bond10 (unregistering): Released all slaves [ 760.300008][T28975] bond11 (unregistering): Released all slaves [ 760.319632][T28975] bond12 (unregistering): (slave veth3): Releasing backup interface [ 760.328832][T28975] veth3: left promiscuous mode [ 760.344615][T28975] bond12 (unregistering): Released all slaves [ 760.359906][T28975] bond13 (unregistering): Released all slaves [ 760.485984][T30208] team0: Port device team_slave_0 added [ 760.539086][T30208] team0: Port device team_slave_1 added [ 760.576788][T30315] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6055'. [ 760.596470][T28975] m1Ie5èÿá: left promiscuous mode [ 760.602030][T30315] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6055'. [ 760.644937][T30319] ipvlan3: entered promiscuous mode [ 760.661863][T30319] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 760.678708][T30319] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 760.803400][T28975] : left promiscuous mode [ 760.825772][T30323] bridge0: port 3(dummy0) entered disabled state [ 760.843415][T30323] bridge0: entered allmulticast mode [ 760.905232][T30208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.921359][T30208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.984350][T30208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.011405][T28975] tipc: Disabling bearer [ 761.024551][T28975] tipc: Left network mode [ 761.052126][T30208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.092286][T30208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.149398][T28975] IPVS: stopping backup sync thread 29527 ... [ 761.153353][T30208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.399298][T30208] hsr_slave_0: entered promiscuous mode [ 761.422515][T30208] hsr_slave_1: entered promiscuous mode [ 761.456133][T30208] debugfs: 'hsr0' already exists in 'hsr' [ 761.487228][T30208] Cannot create hsr debugfs directory [ 761.574626][ T5839] Bluetooth: hci5: command tx timeout [ 761.658380][T30363] netlink: 'syz.0.6067': attribute type 5 has an invalid length. [ 761.699927][T30363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6067'. [ 763.654528][ T5839] Bluetooth: hci5: command tx timeout [ 763.929867][T30439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6085'. [ 763.965537][T30439] syzkaller1: entered promiscuous mode [ 763.971081][T30439] syzkaller1: entered allmulticast mode [ 764.118882][T30451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6088'. [ 764.445127][T30464] netlink: 'syz.0.6090': attribute type 1 has an invalid length. [ 764.456548][T30464] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6090'. [ 764.649751][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6092'. [ 764.816330][T30208] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 764.858681][T30208] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 764.879088][T30481] xt_hashlimit: overflow, rate too high: 0 [ 764.904446][T30208] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 764.923993][T30208] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 764.937432][T30481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6096'. [ 764.951351][T30485] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6095'. [ 764.981013][T30484] geneve2: entered promiscuous mode [ 764.999935][T28979] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.038200][T28979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.070629][T28979] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.188666][T28979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.238410][T30501] syzkaller0: entered promiscuous mode [ 765.262116][T30501] syzkaller0: entered allmulticast mode [ 765.360360][T30501] net_ratelimit: 5 callbacks suppressed [ 765.360381][T30501] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 765.456321][T30524] tipc: Enabled bearer , priority 0 [ 765.538624][T30529] tipc: Resetting bearer [ 765.736435][ T5839] Bluetooth: hci5: command tx timeout [ 765.759466][T30539] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN PTI [ 765.771466][T30539] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 765.780023][T30539] CPU: 0 UID: 0 PID: 30539 Comm: syz.0.6106 Not tainted syzkaller #0 PREEMPT(full) [ 765.789439][T30539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 765.793122][T30208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.799531][T30539] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 765.799572][T30539] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 765.799594][T30539] RSP: 0018:ffffc9000b717140 EFLAGS: 00010202 [ 765.838808][T30539] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000 [ 765.846837][T30539] RDX: ffffc90012b58000 RSI: 000000000000282e RDI: 000000000000282f [ 765.855022][T30539] RBP: 0000000080000000 R08: ffff88809cfddac0 R09: 0000000000000003 [ 765.863042][T30539] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 765.871060][T30539] R13: 0000000000000000 R14: ffff88804b416058 R15: ffffffffffffffff [ 765.879080][T30539] FS: 00007fbb7a1716c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 765.888055][T30539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 765.894678][T30539] CR2: 000000110c2d81b4 CR3: 0000000032f20000 CR4: 00000000003526f0 [ 765.897074][T30208] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.902687][T30539] Call Trace: [ 765.912589][T30539] [ 765.915557][T30539] ? ip_route_output_key_hash+0xd8/0x2a0 [ 765.921285][T30539] ip_route_output_key_hash+0x18d/0x2a0 [ 765.926868][T30539] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 765.932990][T30539] ? crng_fast_key_erasure+0x196/0x270 [ 765.938473][T30539] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 765.944339][T30539] ip_route_output_flow+0x2a/0x150 [ 765.949561][T30539] sctp_v4_get_dst+0x3f8/0x12b0 [ 765.954433][T30539] ? crng_make_state+0x2c5/0x600 [ 765.959388][T30539] ? lockdep_hardirqs_on+0x7a/0x110 [ 765.964613][T30539] ? crng_make_state+0x36a/0x600 [ 765.969580][T30539] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 765.974887][T30539] ? _get_random_bytes+0x1e7/0x260 [ 765.980028][T30539] ? dst_release+0x72/0x1b0 [ 765.984559][T30539] sctp_transport_route+0x118/0x2f0 [ 765.989956][T30539] sctp_assoc_add_peer+0x650/0x13b0 [ 765.995184][T30539] sctp_connect_new_asoc+0x329/0x6b0 [ 766.000587][T30539] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 766.006417][T30539] ? __local_bh_enable_ip+0xd0/0x130 [ 766.011751][T30539] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 766.017356][T30539] ? security_sctp_bind_connect+0x7e/0x2c0 [ 766.023191][T30539] sctp_sendmsg+0x1528/0x2c10 [ 766.027903][T30539] ? __pfx_sctp_sendmsg+0x10/0x10 [ 766.032949][T30539] ? aa_sk_perm+0x15a/0x960 [ 766.037517][T30539] ? aa_sk_perm+0x82d/0x960 [ 766.042046][T30539] ? __pfx_aa_sk_perm+0x10/0x10 [ 766.046917][T30539] ? finish_task_switch+0x240/0x920 [ 766.052137][T30539] ? sock_rps_record_flow+0x19/0x400 [ 766.057474][T30539] ? inet_sendmsg+0x2f4/0x370 [ 766.062203][T30539] ____sys_sendmsg+0x894/0xad0 [ 766.067027][T30539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.072339][T30539] ? import_iovec+0x73/0xa0 [ 766.076867][T30539] ___sys_sendmsg+0x2a5/0x360 [ 766.081831][T30539] ? __lock_acquire+0x6b5/0x2cf0 [ 766.086801][T30539] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.092287][T30539] ? preempt_schedule_common+0x82/0xd0 [ 766.097780][T30539] ? preempt_schedule_thunk+0x16/0x30 [ 766.103196][T30539] ? __fget_files+0x2a/0x420 [ 766.107818][T30539] ? __fget_files+0x3a0/0x420 [ 766.112524][T30539] __sys_sendmmsg+0x27c/0x4e0 [ 766.117252][T30539] ? __pfx___sys_sendmmsg+0x10/0x10 [ 766.122487][T30539] ? do_futex+0x395/0x420 [ 766.126861][T30539] ? fd_install+0x94/0x3d0 [ 766.131309][T30539] ? lock_acquire+0x106/0x330 [ 766.136015][T30539] ? rcu_is_watching+0x15/0xb0 [ 766.140803][T30539] __x64_sys_sendmmsg+0xa0/0xc0 [ 766.145772][T30539] do_syscall_64+0x14d/0xf80 [ 766.150406][T30539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.156490][T30539] ? trace_irq_disable+0x37/0x100 [ 766.161805][T30539] ? clear_bhb_loop+0x40/0x90 [ 766.166591][T30539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.172505][T30539] RIP: 0033:0x7fbb7939bf79 [ 766.176945][T30539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.196582][T30539] RSP: 002b:00007fbb7a171028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 766.205026][T30539] RAX: ffffffffffffffda RBX: 00007fbb79616090 RCX: 00007fbb7939bf79 [ 766.213030][T30539] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000008 [ 766.221026][T30539] RBP: 00007fbb794327e0 R08: 0000000000000000 R09: 0000000000000000 [ 766.229022][T30539] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.237016][T30539] R13: 00007fbb79616128 R14: 00007fbb79616090 R15: 00007ffdb0d05ef8 [ 766.245017][T30539] [ 766.248065][T30539] Modules linked in: [ 766.253144][T30539] ---[ end trace 0000000000000000 ]--- [ 766.272648][T28973] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.279913][T28973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.287497][T30539] RIP: 0010:ip_route_output_key_hash_rcu+0x12ba/0x25d0 [ 766.296182][T30539] Code: c3 31 ff 89 c6 e8 b6 9b c7 f7 85 db 74 5b e8 6d 97 c7 f7 eb 05 e8 66 97 c7 f7 4d 85 ff 74 36 49 8d 5f 3a 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 ff 10 00 00 0f b7 1b bf ff ff 00 00 89 [ 766.320170][T28973] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.327344][T28973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.340666][T30539] RSP: 0018:ffffc9000b717140 EFLAGS: 00010202 [ 766.354707][T30539] RAX: 0000000000000007 RBX: 0000000000000039 RCX: 0000000000080000 [ 766.373069][T30539] RDX: ffffc90012b58000 RSI: 000000000000282e RDI: 000000000000282f [ 766.393490][T30539] RBP: 0000000080000000 R08: ffff88809cfddac0 R09: 0000000000000003 [ 766.402172][T30539] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 766.410976][T30539] R13: 0000000000000000 R14: ffff88804b416058 R15: ffffffffffffffff [ 766.419363][T30539] FS: 00007fbb7a1716c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 766.428674][T30539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 766.435624][T30539] CR2: 00007f6937a83d58 CR3: 0000000032f20000 CR4: 00000000003526f0 [ 766.443756][T30539] Kernel panic - not syncing: Fatal exception [ 766.450376][T30539] Kernel Offset: disabled [ 766.454741][T30539] Rebooting in 86400 seconds..