last executing test programs: 9.878856392s ago: executing program 1 (id=5114): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xb7}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xc7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)={r5, 0x4, 0x18, "88f7a3c4b620e56dcefe984ee4edc6182d24ec0e503e8dd4"}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe80, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) 9.623585024s ago: executing program 1 (id=5118): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 9.404936977s ago: executing program 4 (id=5120): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x4e, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 8.888805195s ago: executing program 1 (id=5128): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000240)={0x11, 0xfa, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f666973682900"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) 8.812412338s ago: executing program 4 (id=5129): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x1}}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000) syz_emit_ethernet(0x6a, &(0x7f0000000580)=ANY=[], 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x5c}}, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000180)={r4, r4, 0x2, 0x0, &(0x7f0000000000), 0x9, 0xc8, 0x4f5, 0x5508, 0xc336, 0x1, 0x7fff, 'syz1\x00'}) 8.65264165s ago: executing program 2 (id=5130): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, &(0x7f0000000680)='=', 0x1, 0x0, &(0x7f0000001100)={0x2, 0x4e22, @empty}, 0x10) 8.537478319s ago: executing program 2 (id=5131): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1f, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @printk={@llx}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r2, 0xffffffffffffff95, &(0x7f00000010c0)={0x0, 0x10, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000000}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x4) 8.351096887s ago: executing program 4 (id=5132): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x39}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x202, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x9, 0x5, 0xe]}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x8040) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x334, r3, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xff, 0x68}}}}, [@NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c7bfa27aa1e42120b36138d5f271f63c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5f2d1127b698adb824fbcad517da2761f7a489607ead449d9603cbc8515f75b4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5f6f846150cfb37397c3d933a3154ea2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "41d9b7f602cc40d9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d6a3b5d47e33f17f"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7979f6cbcc8686c74a51045b4f232d59"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f26ca0c465c4f823"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a52e2b2fb319f13a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b4f70ea022900bf36354e0dc8ca3c4b1302470afd0e6494e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2d322fbfd0164b2f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2d497381b22a0ea564c4442a25167ee973cf175ed0c4edf0"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6a75d12def13800e17bfa8672f4822c3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="582f452cf609f5012932ea0e865e7fdbe55b40798485129e32d3d906e4b8461a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1283}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b687f70c11c43067ede063039226849115f87dad28a52cda"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7ac4f79f3f43c6a6b336df8ea1a2d9f2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "369677dd60d34fd4"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="59c7b8c7bf80658e71cef54601a216b7197861b977e94e1e45eced1af858408e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e42407ba449e46e02f0b9e175efa33db"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3f8e3ec99e1acb5fc10c93f0ddbab325"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0xcc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "73b79e6d6d51ec14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e6bde04cffdd0c8007b26135e17a7b7acad1db67cb938c02"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "13b175ba5350dabc"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="aced4d999bb56002953c679739d738d3e2db55a8d97e6534"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b0d71d825d9fb0636b3fd5571d858e1b"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="a5cd2e8c58b22c846e728fffdeda3aac"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ed11273b43c744557dbf3ad5d9acc680"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "86572e65f72181e9"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0943454c29378188e8f33eb3456b0e62"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9293304cb5453b7d24459873760da0ada02db81001837cc5"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="44acc7bd82673abe1f90d4a45fbd6113"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c588c7987bfa1115"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="135ad7ce32c3f89db94ccbdf23a5546c"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4ee41653e0b06ec9d052c369d2d8e86b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "aae3e3cfa9a1cdcb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x44000}, 0x408c1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000840)={'sit0\x00', 0x0, 0x20, 0x7, 0x2, 0x8, {{0x8, 0x4, 0x1, 0x5, 0x20, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@rr={0x7, 0xb, 0xfd, [@rand_addr=0x64010101, @multicast2]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x88, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x75}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)=@delqdisc={0xbc, 0x25, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xf, 0x7}, {0x0, 0xa}, {0xc, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x285}}]}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xc, 0xebf, 0x1, 0x8, 0xad, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x77, 0x1, 0x6, 0x8, 0x1, 0x1, 0x0, 0x6}}, {0x10, 0x2, [0x89, 0x2b40, 0x6942, 0x3, 0x9, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4008891}, 0x40001) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000bc0)={0x7, 0x7, 0x4}, &(0x7f0000000c00)=0x28) bind$bt_rfcomm(r7, &(0x7f0000000c40)={0x1f, @any, 0x81}, 0xa) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r7) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000001080)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000000d00)={0x338, r8, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x52, 0x3, "8655273af08d2405bb4d65833c32fc7fd0b8e46b02aa66a98f4c9e26feb80dbf63db6bafb622c8061851453b9b06be97668fcba612ef872b3e7f0158406df28980b04043db21dab017d39ab1da9a"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "abf6a7421d128a49a247f6f5868c9059f24c70345f16"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x35744370}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "d0c2e3e73eb54e96a66eacdd6c40eb172df2a6de480492a3075754"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x73, 0x3, "be61bb4be90bc623b8e988f91c4b71e4d95b7689937b083ffbc6dc6720beb4dd56aebf8868f47007ae62f35acbb666512f258945364918e2d8cb9d72191fb67651d87bab3f608c48139a1880b00429c86c6f011503b36ee1482334ed8a1d4bc299b9aa199e91dfbf8ee34e96fa5a06"}, @TIPC_NLA_NODE_ID={0x8, 0x3, "7e95e767"}, @TIPC_NLA_NODE_ID={0x4e, 0x3, "f640c4e08560ba46d9e6931e9c9c5e8f4225737e425fd03cfa4afd4e92bd30a90a28996b57760c4d465e2ed20971673544d1209ce7034dd032323fea6dde468497f72ce3c5569a87c57f"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8973}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb3e}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c011) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x30, r0, 0x910, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xac, 0xa}}}}, ["", "", "", ""]}, 0x30}}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0\x00', 0x0, 0xd93c7612ddfbcd36, r1}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r9, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x68, r10, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x80000001, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000040) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x204000, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x400454d0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0xa004000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x1412, 0x400, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000840) syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r1) ioctl$XFS_IOC_SWAPEXT(r7, 0xc0c0586d, &(0x7f0000001640)={0x0, r11, r11, 0x9, 0x5, '\x00', {0x4, 0x7, 0x98f5, 0x1, 0x0, 0x800, 0xb6, 0x4, {0x7, 0x9}, {0x5a2, 0x7ff}, {0x3, 0x4}, 0xffff, 0x5, 0x7fff, 0x81, 0xfffffff8, 0x4764, 0xf, 0x4f3d, 0x8, 0x300, '\x00', 0x8, 0x5, 0x9, 0x101}}) 8.276437248s ago: executing program 3 (id=5133): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000180)=0x10000, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x8040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x40, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x37c}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 8.267487019s ago: executing program 2 (id=5134): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtclass={0x24, 0x28, 0x200, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x3, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0x9, 0x4, 0x81, 0x81}, 0x92) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8811}, 0x20050840) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000400)={0x0, 'gretap0\x00', 0x1}, 0x18) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x3a) socket$nl_route(0x10, 0x3, 0x0) (async) close(0xffffffffffffffff) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000540)=""/2, 0x2, 0x0, &(0x7f0000000580)=""/105, 0x69}}, 0x10) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="67000000040000000000000008000000000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="05000000040000000300"/28], 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r9, &(0x7f0000000000), 0x0}, 0x20) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000700)) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000810000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa404000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r10, @ANYRES32=0x1, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r12}, &(0x7f00000004c0), &(0x7f0000000b40)}, 0x20) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r13, 0x0) (async) r14 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000a40)="d7e89bb5a079fbb6d4103ce9c952b232b2d146095a128909b81de09ff1406852ee522f8b2b2a946f9eafcf9ef2f4e588dbc36112b92b21824d4a9e923047ad0961814fae7a60a744c153afbb05f530dd4a7f954df3e4896ac2498ef71ccff7bf7f707c4f2c00fef66ddfc691cecd53f6b581480c9a0b779cdb0158b28e7e3ab40c338b65d1cf609c88e87d94dbe9ea686eaa91cc9dd379c40e088fcd21e9fac6dfe1b63b3dee3e61a6305c3a7c1ca8acf16c9f1b90ea120fb94f8094dfa7d8bb4c8ca686aded75c5b687d87251945f4ab872a9dd72a9b3a80374992f15727b8318ea5d68"}, {&(0x7f0000000dc0)="c4568dbd7c7cd65f056856992e185cf7abef72a2219a5958e2728474764d0aa7afdca24f9be568fe97d829928a0ab7c51366fb3b85239cc145eff82e49b269093efed52164cfa57978e28c173b465add7470591aeec66ad9d0f8d51390ac901a2bc4f0bf3e8dc2d7eca48e97e3e67803ab20bc9720a7faa1d7398dd95087a1d811bf650557e22acee4ea096062160e2078824bcf9d6c5599d56cc6b09f0ad719214283dbdebf71ca2ded6f010831d1913ed3f87d2b04cd091b2c9ebaf427786e13438f0e49cd30515e6f8353d4b048f8ce5b991268280cc32edf044c61f6e8d286ddb5650baa3b103be0f259444ce6d1c64c57"}, {&(0x7f00000002c0)="e8ac66084e1bf2e737ef80dc31664dcb87449e5b7be01294fa46894213d4f5e28f95577f74f808009eb6f7faeeab06172ea5e02a"}, {&(0x7f0000001300)="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"}, {&(0x7f00000010c0)="7cc445d89e9e147b9db8d1ee838956b28d53fd69246f90a01d8436133a342e0db7e7bda6078cfd83b011df6de380f5f0b231d0257a14825f8f6ee537c46ee2448666bbe815a42cedee2d328d0d3805c9eaa24c2f9a1763bd5f10a10000000047d1184046158812009921f693f9a4f4758cfa3dde76a15a08fdc251fa75228904d8e1f4f2b40681c611e13adb35f3fe41e555991e542de86a7ec477bf33f4a21fb118b6272718511a0f5aa875e8733fd296e2e52ba775cdf7444a7d52e6d92761246970589ab4be6218b002012353b4e1170e16a767e961ab7fd2c5a85b979fd50c1a4b5587900b1bd870133403"}, {&(0x7f0000001040)="a7b6de8ba1faa6f67a6114ff7e51a6c0b77b92fe5923e487a9083b62cd8deabcbb300c5df3e9b3c8c99292bce5234842864f5f6295f79376d72e5b5a7c36e63b46b523ebe52d98928673550da953634bc79148056852"}, {&(0x7f0000000f40)="9ff078cbecd3432a5ae8baafcce251a2132e6df02de744f674e36d1314178f37e25a5836d145df8810417a4982b61060cced46e2c61f8666aa8682e41a033ebd81d60d015a5033c23f996d2584b64138da3777b2126ac43e3f8281cd6724f35570f5d26fa99dfed10541"}, {&(0x7f00000007c0)="b9eeab5ebf55c55603925dcf77c5a1e6669a0c11568ecc0b"}], 0x3, 0x0, 0xffffffffffffffb1}, 0x0) (async) sendmsg$inet(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0x27, &(0x7f00000025c0)=ANY=[@ANYBLOB="180000000300000000000000001400001811000006efbb06476e377047b3ce9114f7a887f52815bee7c30dbf2475a5787b", @ANYRESOCT, @ANYBLOB="00000000ebff0000b702000004000000b70300000000008500000083000000bf09000000000400550901000000000095000000000000008510000007000200850000001300000018060000c99a0000000001000000181200000000761514f8af180cd3abbbe189ec634fcd9eecc165670efb15f9ba499c44f38d8ab678f32457a3d065bf04319963a497f6f3c04128d256a3d236f48a6ffec83a5a9f2f355e540dbeded948391268879ade7e35e4429933752510ee7a3f895f4f3194a642e12700045fda", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b70800009c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000185100000d0000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x1b2, 0x15, &(0x7f0000000440)=""/21, 0x41100, 0x2c, '\x00', r3, @fallback=0xf, r5, 0x8, &(0x7f00000004c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xc, 0xf641, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[r6, r9, r6, r11, 0xffffffffffffffff, r12], 0x0, 0x10, 0x1}, 0x94) 8.249883621s ago: executing program 4 (id=5135): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000180)="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", 0x118) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="33fe000078009106000000000000004a07"], 0xfe33) setsockopt$packet_int(r1, 0x107, 0xf926685c41925dc9, &(0x7f0000000080), 0x4) 8.153055477s ago: executing program 1 (id=5136): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002120, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xf9, 0x1, 0x50, @ipv4={'\x00', '\xff\xff', @remote}, @loopback={0x0, 0xffff888101827518}, 0x80f, 0x20, 0x1}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x200000000013) sendto$l2tp(r2, &(0x7f0000000080)="d37115c0e9823310d2e21ea2f59e4aa1375b1058e8d7c0b20864ba8af575bf11bf9722e701e6ede981abc289135ab14a37431b14454405aec59a8fd3cde0a98a13e7094a54efd743504780044d8fea53f597d3e3be59d8e6f05baa1e22b74b5f15b8b9802e914e853505a70112136d16cb2001cca7982f84994f440fd7edfed27988", 0x82, 0x4004, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x1}, 0x10) 8.152475953s ago: executing program 3 (id=5137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r7], 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000001003f000008000a00", @ANYRES32=r6, @ANYBLOB="3c0012800b000100626174616476"], 0x64}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1100}, 0x0) 8.136386007s ago: executing program 2 (id=5138): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) unshare(0x2a020480) unshare(0x4c020000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x5) 7.919935961s ago: executing program 0 (id=5139): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000200)={0x2, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbc025087c0000080001800400dd80080003"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0xfffffffe, 0x102, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x68}}, 0x0) 1.097743847s ago: executing program 3 (id=5140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000ab0000000060a0b0400000000000000000200fffe84000480800001800a000100696e6e65720000007000028008000240000000840800034000000007080004400000001308000140000000004c000580090001006d657461000000003c00028008000140000000030800024000000000080003400000000e0800024000000003080001400000000a080002400000000c08000240000000010900010073797a30000000000900020073797a3200"], 0xd8}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r2 = socket$tipc(0x1e, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f00000000c0)={0x5, 0x38, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000480)={{{@in=@private=0xa010100, @in6=@loopback, 0x0, 0x8000, 0x0, 0x843, 0x2}, {}, {0xfffffffffffffffc, 0x7fffffffffd, 0x0, 0x1000000000}, 0x0, 0x0, 0x1}, {{@in=@private, 0x1, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1001}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) getsockopt$inet6_udp_int(r4, 0x11, 0xb, 0x0, &(0x7f0000000340)) close(r1) 1.09698918s ago: executing program 0 (id=5141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb8c}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}}, 0x24000840) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x40}}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x3c}}, 0x24000010) 1.056583422s ago: executing program 3 (id=5142): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={0x0, @in={0x2, 0x4e23, @broadcast}, @l2={0x1f, 0x4, @none, 0x6d49}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x510fb469, 0x7}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffe33}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r5, {0x4, 0x2}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x9}}]}}]}, 0x3c}}, 0x20040054) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r5, {0x4, 0x2}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x9}}]}}]}, 0x3c}}, 0x20040054) listen(r1, 0xfffffffc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4004014}, 0xc1) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4004014}, 0xc1) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x44, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x64, 0x2, 0x6, 0x4, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bind$x25(r6, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) 1.055241277s ago: executing program 0 (id=5143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd40, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x71516}, @IFLA_GROUP={0x8, 0x1b, 0x1c69154a}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x15, 0x3, &(0x7f0000000180)=@framed={{0x2d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x13, 0xfffffffe}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000680)="451a67771f25a3", 0x7}], 0x1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES8=0x0, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRES8=r1, @ANYRESOCT=r2, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) 1.049678471s ago: executing program 0 (id=5144): socket$inet6(0xa, 0x0, 0x7) (async) r0 = socket$inet6(0xa, 0x0, 0x7) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @empty, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) (async) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="1a", 0x1}], 0x1}}, {{&(0x7f0000000a80)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0xeb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="94", 0x1}], 0x1}}], 0x2, 0x20000040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xffe0, 0xa}, {0xf, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xffe0, 0xa}, {0xf, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltfilter={0x38, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltfilter={0x38, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa093fd577ec5d3a26834f756daaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000bbfe80000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/190, 0xbe, 0x0, &(0x7f00000000c0)=""/6, 0x6}, &(0x7f0000000580)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/190, 0xbe, 0x0, &(0x7f00000000c0)=""/6, 0x6}, &(0x7f0000000580)=0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xb, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250500000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) (async) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250500000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) 1.046326081s ago: executing program 0 (id=5145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x77}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 1.046008282s ago: executing program 3 (id=5146): unshare(0x24060400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.042779569s ago: executing program 4 (id=5147): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x39) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@bridge_delneigh={0x38, 0x1c, 0xc07, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40, 0x10, 0xa}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000140)=0x6, 0x4) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x5}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000400)={0x1}, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000280)=@ethtool_cmd={0x27, 0x103, 0xffffffff, 0x7fff, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x7fffffff, 0x7fffffff, 0xfffb, 0x4, 0x5, 0x6, [0xe, 0xfb]}}) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0x505, 0x4) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000440)={@ipv4}, &(0x7f0000000480)=0x14) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x4, '\x00', r7, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x4, 0x1, 0xc, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x4, 0x5, 0xc, 0x5}, {0x7, 0x1, 0xf, 0xb}, {0x5, 0xb6, 0x5, 0x8}, {0x4, 0x1, 0x3, 0x8}, {0x2, 0x5, 0x2, 0x4}, {0x2, 0x5, 0xa, 0x1}, {0x3, 0x1, 0xc, 0x6}, {0x2, 0x1, 0xa, 0x6}], 0x10, 0x7}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000070000000091114e00000000009500"/32], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x16, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.040153425s ago: executing program 1 (id=5148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) unshare(0x24060400) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_U32_SEL={0x54, 0x5, {0xc, 0x80, 0x4, 0x401, 0x1f, 0x3, 0x9, 0x0, [{0x3, 0x7, 0x4, 0xffffffff}, {0x80000000, 0x0, 0x6, 0x2}, {0x3, 0x2, 0x1}, {0x40, 0x370d, 0x1ff, 0x6}]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x41, 0xec, 0x3, 0x12, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7800, 0x7, 0x5}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r11, &(0x7f00000000c0)={0x11, 0x18, r13, 0x1, 0x81}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000001000000000b00000000000000", @ANYRES32=r17, @ANYBLOB="00100000323c0400140012800b00010062720fa46742c20004000280"], 0x34}, 0x1, 0xba01, 0x0, 0x40000080}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)={0x21c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ec1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10040000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.039805113s ago: executing program 2 (id=5149): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000840) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$inet(0x2, 0x80000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r3) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, 0x0, 0x11) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@getchain={0x2c, 0x66, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0x0, 0xfff2}, {0x9, 0x7a5488b18f46881b}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000001340)={0xffffffffffffffff, &(0x7f0000001240)='ip6tnl0\x00', 0x80, &(0x7f0000001280)={@align=0x9, {0x80b7, 0x8, 0x8, 0xffffffffffffffff}}, 0x17, &(0x7f00000012c0)={@_ha_fsid}, 0x0}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, &(0x7f00000023c0)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000002400)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x7, 0x5}, &(0x7f00000024c0)=0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x40, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x200}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_SSID={0x8, 0x34, @random=':/Q$'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21.010688ms ago: executing program 0 (id=5150): bpf$PROG_LOAD(0x5, &(0x7f0000004780)={0x13, 0x22, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000400000000008e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500009fc50cc100b700000000000000814e0000030000008520000002000000182c0000", @ANYRES32, @ANYBLOB="000000000200000018270000", @ANYRES32, @ANYBLOB="0000000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000bf91000000000000b702000001000000850000008400"], 0x0, 0x6, 0x0, 0x0, 0x40e00, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40400) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f0000004700)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000000c0)=""/193, 0xc1}, {&(0x7f0000000280)=""/61, 0x3d}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/54, 0x36}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000480)=""/27, 0x1b}], 0x9, &(0x7f0000001880)=""/244, 0xf4}, 0xfffffd46}, {{&(0x7f0000001980)=@ax25={{0x3, @netrom}, [@rose, @bcast, @remote, @null, @rose, @null, @null, @default]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/135, 0x87}], 0x1, &(0x7f0000001ac0)=""/52, 0x34}, 0x8}, {{&(0x7f0000001b00)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, &(0x7f0000002bc0)=""/104, 0x68}, 0xa670}, {{&(0x7f0000002c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002cc0)=""/60, 0x3c}], 0x1, &(0x7f0000002d40)=""/17, 0x11}, 0x7}, {{&(0x7f0000002d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002e00)=""/50, 0x32}], 0x1, &(0x7f0000002e80)=""/219, 0xdb}}, {{&(0x7f0000002f80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000003000)=""/162, 0xa2}, {&(0x7f00000030c0)=""/21, 0x15}, {&(0x7f0000003100)=""/21, 0x15}, {&(0x7f0000003140)=""/204, 0xcc}], 0x4, &(0x7f0000003280)=""/216, 0xd8}, 0x2}, {{&(0x7f0000003380)=@qipcrtr, 0x80, &(0x7f0000003500)=[{&(0x7f0000003400)=""/3, 0x3}, {&(0x7f0000003440)=""/172, 0xac}], 0x2, &(0x7f0000003540)=""/4096, 0x1000}, 0x6}], 0x7, 0x40010002, &(0x7f0000004740)={r2, r3+60000000}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c000400c508000000000000080002"], 0x160}}, 0x0) 20.463236ms ago: executing program 1 (id=5151): mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x1, 0x3, 0x800, 0x68, 0xfb, 0x3, 0x33, 0x7090, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0xb, 0x38, [@private=0xa010100, @remote]}, @ssrr={0x89, 0x3, 0xb0}, @timestamp_prespec={0x44, 0xc, 0x6b, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x40}, 0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x33, 0x3, 0x4, [{@rand_addr=0x64010102, 0xe}, {@local, 0x1}, {@loopback, 0x80000001}, {@empty, 0x1}]}]}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYBLOB="3ff9d20dd435b7"], 0x2c}, 0x1, 0x0, 0x0, 0x40855}, 0x8884) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140f2000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) (async) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8.18275ms ago: executing program 2 (id=5152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000008"], 0x50) socketpair(0x17, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000380)={0xfffc}, 0x8) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) unshare(0x6a040000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT=r8], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x5, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r9, 0xffffffffffffffff, 0x37, 0x2000, 0x0, @value=r12, @void, @void, @void, r11}, 0x20) r13 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r13, r7, 0x5, 0x2000, 0x0, @value, @void, @void, @void, r11}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x80, 0xf810, 0xb, 0x10, {{0x2d, 0x4, 0x0, 0x3e, 0xb4, 0x66, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, {[@ssrr={0x89, 0x2b, 0xad, [@remote, @local, @private=0xa010100, @multicast1, @loopback, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @ra={0x94, 0x4}, @cipso={0x86, 0x12, 0x2, [{0x1, 0xc, "a463b1e7860efc9d98ec"}]}, @noop, @timestamp_addr={0x44, 0x14, 0xf5, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp_addr={0x44, 0x2c, 0x83, 0x1, 0x7, [{@multicast1, 0x8}, {@multicast2, 0x200}, {@remote, 0x861}, {@multicast2, 0x3}, {@local, 0x2d8}]}, @timestamp_addr={0x44, 0x1c, 0xc5, 0x1, 0x4, [{@broadcast}, {@remote, 0x1}, {@broadcast}]}]}}}}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex=r14, r5, 0x15, 0x10, r5, @void, @value=r5, @void, @void, r11}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018f300000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x94) 5.604167ms ago: executing program 3 (id=5153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000002000000fe8000000000000000000000030000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000010000000000000000000043d10000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000001a00000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0xffffff71, @loopback, 0x7ffffff}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}], 0x1, 0x400c800) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000240)={0x7, 0x62, 0xb, 0x80, 0xf, 0x2, 0x4, 0x4, 0xf7, 0x5, 0x5, 0x8c, 0x82, 0x4}, 0xe) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {0x1, 0x5}, {0x9, 0x1}}, [{0x8, 0xb, 0x100}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008040}, 0x20040014) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000072c1121ce5000961628bdbc26e0869907ea259a2100039041f190000000000", @ANYRES32=r9, @ANYBLOB="8998000000000000180012800800010076746b000c000280080005007f000001"], 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 0s ago: executing program 4 (id=5154): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) (async) r1 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="dd2b1388e92f1842a383", @ANYBLOB="4f43706c39f110e22185b759d741accc1a8c4c4a1a4973d8395b53bcaf1da56a4895fab4002f00b16e162176378f263fbcd19d4f48dc070b72dc262c716f76d59ce47e"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) (async) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf250100010008000100030004000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r4, r4, 0x37, 0x2028, 0x4}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x28, r6, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$pppl2tp(r9, 0x0, 0x0) (async) connect$pppl2tp(r9, 0x0, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000000080), 0x2, 0x0) (async) openat$cgroup_freezer_state(r7, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r12, 0x80108906, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r12) kernel console output (not intermixed with test programs): 623] bond3: (slave bridge1): failed to get link speed/duplex [ 581.499573][T15623] bond3: (slave bridge1): failed to get link speed/duplex [ 581.582216][T20034] lo speed is unknown, defaulting to 1000 [ 581.621752][T20039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3597'. [ 581.689845][T15623] bond3: (slave bridge1): failed to get link speed/duplex [ 581.876171][T20048] lo: Caught tx_queue_len zero misconfig [ 581.967718][ T6919] bond3: (slave bridge1): failed to get link speed/duplex [ 582.065153][T20052] syzkaller1: entered promiscuous mode [ 582.071852][T20057] nbd: illegal input index 1048576 [ 582.080124][T20052] syzkaller1: entered allmulticast mode [ 582.100759][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 582.221166][ T6906] bond3: (slave bridge1): failed to get link speed/duplex [ 582.326301][T20070] team0: Port device team_slave_0 removed [ 582.359650][ T6906] bond3: (slave bridge1): failed to get link speed/duplex [ 582.449156][T20080] netlink: 'syz.4.3609': attribute type 21 has an invalid length. [ 582.479755][T15622] bond3: (slave bridge1): failed to get link speed/duplex [ 582.589988][ T6906] bond3: (slave bridge1): failed to get link speed/duplex [ 582.705039][T20102] __nla_validate_parse: 1 callbacks suppressed [ 582.705059][T20102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3612'. [ 582.723602][ T6919] bond3: (slave bridge1): failed to get link speed/duplex [ 582.869136][T20104] lo speed is unknown, defaulting to 1000 [ 582.873659][T15622] bond3: (slave bridge1): failed to get link speed/duplex [ 582.899835][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3615'. [ 582.937300][T20110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3615'. [ 582.973705][T20115] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3615'. [ 583.024528][T20117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3617'. [ 583.049661][ T6919] bond3: (slave bridge1): failed to get link speed/duplex [ 583.199293][T15622] bond3: (slave bridge1): failed to get link speed/duplex [ 583.248236][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3620'. [ 583.261741][T20129] netlink: 'syz.3.3620': attribute type 1 has an invalid length. [ 583.343249][T20132] bond4: (slave geneve2): making interface the new active one [ 583.352606][T20132] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 583.373717][ T6919] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 583.400005][ T6919] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 583.547163][ T6919] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 583.569963][ T6919] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 583.901640][T20170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3628'. [ 583.927421][T20171] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3629'. [ 583.949832][T20161] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3629'. [ 585.670137][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 587.010408][ T6919] net_ratelimit: 30 callbacks suppressed [ 587.010427][ T6919] bond3: (slave bridge1): failed to get link speed/duplex [ 587.129742][ T6906] bond3: (slave bridge1): failed to get link speed/duplex [ 587.239988][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 587.349951][ T6906] bond3: (slave bridge1): failed to get link speed/duplex [ 587.459842][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 587.569968][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 587.679792][T15623] bond3: (slave bridge1): failed to get link speed/duplex [ 587.789922][T15623] bond3: (slave bridge1): failed to get link speed/duplex [ 587.899929][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 588.009847][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 592.079837][ T6909] net_ratelimit: 36 callbacks suppressed [ 592.079862][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 592.199811][T15623] bond3: (slave bridge1): failed to get link speed/duplex [ 592.310733][ T180] bond3: (slave bridge1): failed to get link speed/duplex [ 592.419668][ T6919] bond3: (slave bridge1): failed to get link speed/duplex [ 592.529689][ T180] bond3: (slave bridge1): failed to get link speed/duplex [ 592.640001][ T6919] bond3: (slave bridge1): failed to get link speed/duplex [ 592.749654][ T6919] bond3: (slave bridge1): failed to get link speed/duplex [ 592.859737][T15623] bond3: (slave bridge1): failed to get link speed/duplex [ 592.970015][ T6919] bond3: (slave bridge1): failed to get link speed/duplex [ 593.079697][T15623] bond3: (slave bridge1): failed to get link speed/duplex [ 593.829912][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 597.152834][T20207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3634'. [ 597.165996][T20210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3635'. [ 597.169691][T20211] netlink: 'syz.4.3637': attribute type 1 has an invalid length. [ 597.214686][T20208] net_ratelimit: 36 callbacks suppressed [ 597.214711][T20208] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 597.226531][T20218] sctp: [Deprecated]: syz.1.3634 (pid 20218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.226531][T20218] Use struct sctp_sack_info instead [ 597.268159][T20207] bond0: ARP target 170.170.170.170 is already present [ 597.300995][T20207] bond0: option arp_ip_target: invalid value (2863311530) [ 597.331412][T20211] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 597.350675][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 597.460585][T20226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3639'. [ 597.478262][T20227] netlink: 'syz.2.3638': attribute type 1 has an invalid length. [ 597.525383][T20227] 8021q: adding VLAN 0 to HW filter on device bond3 [ 597.534275][T20226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3639'. [ 597.596174][T20227] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 597.612584][T20227] bond3: (slave batadv1): making interface the new active one [ 597.636223][T20227] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 597.647243][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'. [ 597.708091][T20233] bond3 (unregistering): (slave batadv1): Releasing active interface [ 597.744902][T20233] bond3 (unregistering): Released all slaves [ 597.788259][T20250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3644'. [ 597.830891][ T6906] bond3: (slave bridge1): failed to get link speed/duplex [ 597.939677][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 597.963834][T20256] netlink: 'syz.0.3646': attribute type 21 has an invalid length. [ 597.995617][T20256] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3646'. [ 598.199794][T20256] netlink: 'syz.0.3646': attribute type 4 has an invalid length. [ 598.222784][T20256] netlink: 'syz.0.3646': attribute type 3 has an invalid length. [ 598.247916][T20256] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3646'. [ 598.289584][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 598.399524][ T180] bond3: (slave bridge1): failed to get link speed/duplex [ 598.509846][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 598.619545][ T6906] bond3: (slave bridge1): failed to get link speed/duplex [ 598.731580][ T180] bond3: (slave bridge1): failed to get link speed/duplex [ 598.824771][T20295] netlink: 'syz.4.3662': attribute type 4 has an invalid length. [ 598.861295][ T6906] bond3: (slave bridge1): failed to get link speed/duplex [ 598.879902][T20295] netlink: 'syz.4.3662': attribute type 4 has an invalid length. [ 598.917395][T20295] netlink: 'syz.4.3662': attribute type 27 has an invalid length. [ 598.976315][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 599.191365][T20315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3667'. [ 599.236664][T20319] geneve2: entered promiscuous mode [ 599.259590][T20319] geneve2: entered allmulticast mode [ 599.336569][T20327] netlink: 'syz.1.3670': attribute type 1 has an invalid length. [ 599.356413][T20327] netlink: 'syz.1.3670': attribute type 2 has an invalid length. [ 599.476409][T20325] tipc: Enabled bearer , priority 0 [ 600.430012][T20379] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 600.558938][T20374] bond3: entered promiscuous mode [ 600.583835][T20374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.850182][T20393] xt_hashlimit: invalid rate [ 600.890970][T20396] vlan2: entered promiscuous mode [ 600.896090][T20396] bridge0: entered promiscuous mode [ 600.997265][T20398] bridge0: entered promiscuous mode [ 602.034410][T20455] vlan3: entered promiscuous mode [ 602.056058][T20456] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.063833][T20456] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.377697][T20418] tipc: Enabling of bearer rejected, failed to enable media [ 602.410296][ T6909] net_ratelimit: 24 callbacks suppressed [ 602.410315][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 602.550133][ T6910] bond3: (slave bridge1): failed to get link speed/duplex [ 602.659735][ T6910] bond3: (slave bridge1): failed to get link speed/duplex [ 602.769886][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 602.879798][ T6906] bond3: (slave bridge1): failed to get link speed/duplex [ 602.989644][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 603.099609][ T6910] bond3: (slave bridge1): failed to get link speed/duplex [ 603.209959][ T6906] bond3: (slave bridge1): failed to get link speed/duplex [ 603.319565][ T180] bond3: (slave bridge1): failed to get link speed/duplex [ 603.430412][ T180] bond3: (slave bridge1): failed to get link speed/duplex [ 606.149604][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 607.499683][ T6910] net_ratelimit: 36 callbacks suppressed [ 607.499706][ T6910] bond3: (slave bridge1): failed to get link speed/duplex [ 607.619687][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 607.730017][ T6919] bond3: (slave bridge1): failed to get link speed/duplex [ 607.839854][ T6906] bond3: (slave bridge1): failed to get link speed/duplex [ 607.959655][ T6919] bond3: (slave bridge1): failed to get link speed/duplex [ 608.082813][ T6909] bond3: (slave bridge1): failed to get link speed/duplex [ 608.129705][T20493] __nla_validate_parse: 11 callbacks suppressed [ 608.129726][T20493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3715'. [ 608.151684][T20496] xt_TCPMSS: Only works on TCP SYN packets [ 608.217114][T20502] validate_nla: 6 callbacks suppressed [ 608.217134][T20502] netlink: 'syz.4.3719': attribute type 1 has an invalid length. [ 608.242897][T20507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3715'. [ 608.254285][T20494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3715'. [ 608.279877][T20502] netlink: 'syz.4.3719': attribute type 4 has an invalid length. [ 608.287814][T20502] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3719'. [ 608.456875][T20493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.491345][T20493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.604091][T20493] syzkaller0: left promiscuous mode [ 608.614188][T20493] syzkaller0: left allmulticast mode [ 608.621901][T20493] vlan2: left promiscuous mode [ 608.627080][T20493] geneve1: left promiscuous mode [ 608.638391][T20493] vlan2: left allmulticast mode [ 608.643698][T20493] geneve1: left allmulticast mode [ 608.650896][T20493] bond3: left promiscuous mode [ 608.655837][T20493] bridge1: left promiscuous mode [ 608.661448][T20493] bridge2: left promiscuous mode [ 608.666753][T20493] bond3: left allmulticast mode [ 608.673117][T20493] bridge1: left allmulticast mode [ 608.678334][T20493] bridge2: left allmulticast mode [ 608.694457][T20507] hsr_slave_0: left promiscuous mode [ 608.721551][T20507] hsr_slave_1: left promiscuous mode [ 608.751697][ T6919] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.772942][ T6919] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 608.800945][ T6919] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.819589][ T6919] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 608.828648][ T6919] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.859527][ T6919] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 608.881807][ T6919] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.909706][ T6919] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 608.932874][T20522] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3722'. [ 608.956598][ T5902] IPVS: starting estimator thread 0... [ 609.097084][T20525] IPVS: using max 25 ests per chain, 60000 per kthread [ 609.293483][T20542] bond5: option tlb_dynamic_lb: invalid value (5) [ 609.306037][T20542] bond5 (unregistering): Released all slaves [ 609.384935][T20552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3729'. [ 609.398723][T20552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3729'. [ 609.725886][T20575] netlink: 'syz.1.3736': attribute type 2 has an invalid length. [ 609.747330][T20575] netlink: 'syz.1.3736': attribute type 1 has an invalid length. [ 609.772641][T20575] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3736'. [ 610.126231][T20595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3741'. [ 610.393802][T20612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3745'. [ 610.681795][T20620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.096478][T20637] netlink: 'syz.2.3753': attribute type 4 has an invalid length. [ 611.114639][T20639] netlink: 'syz.2.3753': attribute type 4 has an invalid length. [ 611.137087][T20637] netlink: 'syz.2.3753': attribute type 4 has an invalid length. [ 611.362923][T15623] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 611.814704][T20673] pim6reg: entered allmulticast mode [ 611.836506][T20673] pim6reg: left allmulticast mode [ 611.979057][T20695] wg1: entered promiscuous mode [ 611.999714][T20695] wg1: entered allmulticast mode [ 612.115819][T20701] lo speed is unknown, defaulting to 1000 [ 612.638619][T20732] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 612.650462][T20732] team0 (unregistering): Port device team_slave_0 removed [ 612.688785][T20732] team0 (unregistering): Failed to send options change via netlink (err -105) [ 612.704090][T20736] netlink: 'syz.1.3784': attribute type 12 has an invalid length. [ 612.716026][T20732] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 612.727414][T20732] team0 (unregistering): Port device team_slave_1 removed [ 612.765912][T20729] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 612.777620][ T6909] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.801530][T20736] netlink: 'syz.1.3784': attribute type 12 has an invalid length. [ 612.813927][T20729] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 612.832528][T20729] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 612.902023][ T6909] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.940544][ T6909] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.039068][ T6909] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.088900][T20752] netlink: 'syz.4.3787': attribute type 1 has an invalid length. [ 613.438799][T20773] __nla_validate_parse: 17 callbacks suppressed [ 613.438821][T20773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3793'. [ 613.515922][T20762] syzkaller0: entered promiscuous mode [ 613.532680][T20762] syzkaller0: entered allmulticast mode [ 613.675346][T20781] bond4: Removing last ns target with arp_interval on [ 614.131626][T17364] Bluetooth: hci4: link tx timeout [ 614.154421][T17364] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 615.304741][T20798] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3799'. [ 615.334523][T20804] pimreg3: entered allmulticast mode [ 615.523468][T20812] geneve2: entered promiscuous mode [ 615.528768][T20812] geneve2: entered allmulticast mode [ 615.678154][T20820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3808'. [ 616.011264][T20844] IPv6: NLM_F_REPLACE set, but no existing node found! [ 616.044120][T20846] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 616.091306][T20846] 8021q: VLANs not supported on nlmon0 [ 616.188118][T20854] netlink: 'syz.3.3818': attribute type 30 has an invalid length. [ 616.229956][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 616.306200][T20856] bond5: entered promiscuous mode [ 616.377255][T20859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3820'. [ 616.434459][T20862] netlink: 'syz.1.3821': attribute type 1 has an invalid length. [ 616.457549][T20862] veth0: entered promiscuous mode [ 616.515020][T20861] veth0: left promiscuous mode [ 616.781281][T20873] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 617.223672][T20894] x_tables: duplicate underflow at hook 1 [ 617.265249][T20894] veth1_to_team: entered promiscuous mode [ 617.463011][T20903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3835'. [ 617.618360][T20908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3837'. [ 617.805212][T20903] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3835'. [ 618.024217][T20924] netlink: 'syz.2.3841': attribute type 15 has an invalid length. [ 618.049518][T20924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3841'. [ 618.265312][T20936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3846'. [ 618.529322][T20947] sctp: [Deprecated]: syz.0.3849 (pid 20947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 618.529322][T20947] Use struct sctp_sack_info instead [ 618.751143][T20958] syzkaller0: entered promiscuous mode [ 618.767667][T20958] syzkaller0: entered allmulticast mode [ 618.812301][T20958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3852'. [ 619.099974][T20979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3856'. [ 619.407767][T20989] can: request_module (can-proto-0) failed. [ 619.545760][T20996] bond6: option lp_interval: invalid value (0) [ 619.552471][T20996] bond6: option lp_interval: allowed values 1 - 2147483647 [ 619.566062][T20996] bond6 (unregistering): Released all slaves [ 619.724238][T21007] netlink: 'syz.0.3866': attribute type 5 has an invalid length. [ 620.091573][T21022] lo speed is unknown, defaulting to 1000 [ 620.170107][T21026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3872'. [ 620.191927][T21026] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3872'. [ 620.437489][T21017] lo speed is unknown, defaulting to 1000 [ 621.510098][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 624.555181][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.062435][T21043] netlink: 'syz.1.3874': attribute type 3 has an invalid length. [ 626.104675][T21046] bond5: Removing last ns target with arp_interval on [ 626.113233][T21048] batadv_slave_0: Caught tx_queue_len zero misconfig [ 626.228770][T21046] macvlan0: entered promiscuous mode [ 626.240317][T21046] netlink: 'syz.3.3876': attribute type 2 has an invalid length. [ 626.442300][T21066] syzkaller0: entered promiscuous mode [ 626.447843][T21066] syzkaller0: entered allmulticast mode [ 626.617177][T21079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'. [ 626.620625][T21066] tipc: Started in network mode [ 626.665496][T21066] tipc: Node identity daed9025edc2, cluster identity 4711 [ 626.681070][T21066] tipc: Enabled bearer , priority 0 [ 626.690684][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'. [ 626.897461][T21089] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20003 [ 627.010439][T21094] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3887'. [ 627.097763][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3887'. [ 627.168513][T21063] tipc: Resetting bearer [ 627.252172][T21063] tipc: Disabling bearer [ 627.290660][T21117] xt_TCPMSS: Only works on TCP SYN packets [ 627.329676][T21116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3892'. [ 627.415388][T21116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3892'. [ 627.459689][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3892'. [ 627.584642][T21119] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3893'. [ 627.814452][ T6919] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.825713][ T6919] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.856699][ T6919] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.866666][ T6919] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.303705][T21149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3903'. [ 628.393458][T21153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3905'. [ 628.530278][T21167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.569787][T21168] netlink: 'syz.0.3907': attribute type 1 has an invalid length. [ 628.660202][T21175] netlink: 'syz.3.3910': attribute type 1 has an invalid length. [ 628.672014][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.754696][T21173] netlink: 'syz.4.3911': attribute type 1 has an invalid length. [ 628.786449][T21170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.888157][T21175] bond6: entered promiscuous mode [ 628.900926][T21175] 8021q: adding VLAN 0 to HW filter on device bond6 [ 629.059622][T21183] bond6: (slave bridge1): making interface the new active one [ 629.067201][T21183] bridge1: entered promiscuous mode [ 629.111743][T21183] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 629.239653][T21177] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 629.329219][T21179] veth9: entered promiscuous mode [ 629.412805][T21180] lec:lec_atm_close: lec0: Shut down! [ 629.576635][T21206] bond7: option packets_per_slave: invalid value (1048582) [ 629.595101][T21206] bond7: option packets_per_slave: allowed values 0 - 65535 [ 629.631319][T21206] bond7 (unregistering): Released all slaves [ 629.693284][T21210] netlink: 'syz.3.3918': attribute type 3 has an invalid length. [ 629.744163][T21210] netlink: 'syz.3.3918': attribute type 3 has an invalid length. [ 629.995317][T21229] netlink: 'syz.3.3923': attribute type 13 has an invalid length. [ 630.286057][T21244] syzkaller1: entered promiscuous mode [ 630.293052][T21244] syzkaller1: entered allmulticast mode [ 630.310029][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 630.599780][ T7247] IPVS: starting estimator thread 0... [ 630.685115][T21265] bond5: entered promiscuous mode [ 630.711513][T21268] IPVS: using max 25 ests per chain, 60000 per kthread [ 630.740042][T21265] 8021q: adding VLAN 0 to HW filter on device bond5 [ 630.772272][T21265] bond5 (unregistering): Released all slaves [ 630.840259][T21270] netlink: 'syz.0.3932': attribute type 3 has an invalid length. [ 631.180136][ T5902] lec:lec_start_xmit: lec0:No lecd attached [ 631.393880][T21308] 8021q: VLANs not supported on wg0 [ 631.463123][T21309] : entered promiscuous mode [ 631.482732][T21311] unsupported nlmsg_type 40 [ 631.507801][T21306] nbd: must specify a size in bytes for the device [ 631.516873][T21313] netlink: 'syz.0.3941': attribute type 1 has an invalid length. [ 631.569362][T21313] bond7: entered promiscuous mode [ 631.575046][T21313] 8021q: adding VLAN 0 to HW filter on device bond7 [ 631.750049][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 631.938025][T21332] nlmon0: Caught tx_queue_len zero misconfig [ 631.965993][T21332] netlink: 'syz.0.3944': attribute type 1 has an invalid length. [ 631.977051][T21332] __nla_validate_parse: 20 callbacks suppressed [ 631.977073][T21332] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3944'. [ 632.190279][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3947'. [ 632.273827][T21348] hsr_slave_1 (unregistering): left promiscuous mode [ 632.311734][T21349] lo speed is unknown, defaulting to 1000 [ 632.317958][T21298] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 632.388560][T21356] x_tables: duplicate underflow at hook 1 [ 632.430354][T21356] x_tables: duplicate underflow at hook 2 [ 632.486044][T21356] IPVS: Error connecting to the multicast addr [ 632.810560][T21370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3953'. [ 632.922261][T21376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3955'. [ 633.136629][T21392] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3958'. [ 633.446990][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3964'. [ 633.473986][T21405] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3962'. [ 633.549923][T21403] lo speed is unknown, defaulting to 1000 [ 633.593528][T21417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3966'. [ 633.642121][T21417] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3966'. [ 633.896699][T21429] pim6reg1: entered promiscuous mode [ 633.931632][T21429] pim6reg1: entered allmulticast mode [ 634.230166][T17364] Bluetooth: hci1: command 0x0406 tx timeout [ 634.383072][T21464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3977'. [ 634.746876][T21488] sctp: [Deprecated]: syz.1.3985 (pid 21488) Use of int in max_burst socket option. [ 634.746876][T21488] Use struct sctp_assoc_value instead [ 634.760159][T21491] IPv6: sit1: Disabled Multicast RS [ 634.858655][T21494] lo speed is unknown, defaulting to 1000 [ 635.486555][T21524] syzkaller0: entered promiscuous mode [ 635.492239][T21524] syzkaller0: entered allmulticast mode [ 635.515565][T21529] syzkaller1: entered promiscuous mode [ 635.529726][T21529] syzkaller1: entered allmulticast mode [ 635.802860][T21542] netlink: 'syz.1.3996': attribute type 9 has an invalid length. [ 635.868185][T21543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 635.875556][T21543] IPv6: NLM_F_CREATE should be set when creating new route [ 635.882883][T21543] IPv6: NLM_F_CREATE should be set when creating new route [ 635.890177][T21543] IPv6: NLM_F_CREATE should be set when creating new route [ 635.912777][T21543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 636.199749][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 636.209921][ C1] lec:lec_tx_timeout: lec0 [ 636.214807][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 637.200188][T21532] macvtap1: entered promiscuous mode [ 637.205564][T21532] macvtap1: entered allmulticast mode [ 637.224898][T21532] dummy0: entered allmulticast mode [ 637.234666][T21532] dummy0: entered promiscuous mode [ 637.261650][T21532] team0: Device macvtap1 failed to register rx_handler [ 637.294360][T21532] dummy0: left allmulticast mode [ 637.330495][T21532] dummy0: left promiscuous mode [ 637.418762][T21553] sctp: [Deprecated]: syz.4.3998 (pid 21553) Use of int in maxseg socket option. [ 637.418762][T21553] Use struct sctp_assoc_value instead [ 637.438574][T21553] netlink: 'syz.4.3998': attribute type 5 has an invalid length. [ 637.446783][T21553] __nla_validate_parse: 5 callbacks suppressed [ 637.446802][T21553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3998'. [ 637.526980][T21555] vlan5: entered promiscuous mode [ 637.534646][T21555] geneve1: entered promiscuous mode [ 637.555040][T21555] vlan5: entered allmulticast mode [ 637.560986][T21555] geneve1: entered allmulticast mode [ 637.666380][T21568] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4001'. [ 637.682516][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4003'. [ 637.772240][T21575] netlink: 'syz.3.4004': attribute type 1 has an invalid length. [ 637.819838][T21575] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4004'. [ 637.864159][T21575] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4004'. [ 637.920699][T21575] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4004'. [ 638.123769][T21590] lo speed is unknown, defaulting to 1000 [ 638.179042][T21592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4008'. [ 638.198617][T21592] netlink: 'syz.1.4008': attribute type 5 has an invalid length. [ 638.660897][T21614] netlink: 'syz.3.4010': attribute type 4 has an invalid length. [ 638.725515][T21615] netlink: 'syz.3.4010': attribute type 4 has an invalid length. [ 641.229854][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 641.237894][ C1] lec:lec_tx_timeout: lec0 [ 641.242611][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 645.516736][T21669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.695924][T21679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4019'. [ 645.716328][T21681] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4022'. [ 645.854100][T21679] xt_CT: No such helper "netbios-ns" [ 645.924727][T21696] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4024'. [ 646.038929][T21698] lo speed is unknown, defaulting to 1000 [ 646.106698][T21706] ipt_ECN: cannot use operation on non-tcp rule [ 646.136517][T21706] netlink: 'syz.3.4025': attribute type 32 has an invalid length. [ 646.180705][T21706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4025'. [ 646.241903][T21706] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 646.252590][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 646.252674][ C1] lec:lec_tx_timeout: lec0 [ 646.260966][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 646.274635][T21714] netlink: 'syz.0.4029': attribute type 11 has an invalid length. [ 646.298635][T21712] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4027'. [ 646.339291][T21712] syzkaller1: entered promiscuous mode [ 646.356509][T21712] syzkaller1: entered allmulticast mode [ 646.375953][T21698] lo speed is unknown, defaulting to 1000 [ 646.511963][T21723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4031'. [ 646.784189][T21737] ip6tnl2: entered promiscuous mode [ 646.958023][T21745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4037'. [ 646.990862][T21751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4038'. [ 647.010732][T21751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4038'. [ 647.164168][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4035'. [ 647.496670][T21743] lo speed is unknown, defaulting to 1000 [ 647.665949][T21776] wg1: entered promiscuous mode [ 647.671419][T21776] wg1: entered allmulticast mode [ 647.762555][T21778] netlink: 'syz.1.4045': attribute type 1 has an invalid length. [ 647.826319][T21776] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 647.878790][T21778] 8021q: adding VLAN 0 to HW filter on device bond6 [ 647.913860][T21782] vlan3: entered promiscuous mode [ 647.918971][T21782] bond6: entered promiscuous mode [ 647.982864][T21782] vlan3: entered allmulticast mode [ 647.988058][T21782] bond6: entered allmulticast mode [ 648.212218][T21787] netlink: 'syz.0.4047': attribute type 4 has an invalid length. [ 648.220745][T21786] netlink: 'syz.0.4047': attribute type 4 has an invalid length. [ 648.356191][T21790] lo speed is unknown, defaulting to 1000 [ 648.720720][T21814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 648.911888][T21820] netlink: 'syz.1.4055': attribute type 2 has an invalid length. [ 649.140674][T21820] hmac(sha224): entered promiscuous mode [ 649.412466][T21832] veth5: entered promiscuous mode [ 649.822942][T21846] FAULT_INJECTION: forcing a failure. [ 649.822942][T21846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.901422][T21846] CPU: 1 UID: 0 PID: 21846 Comm: syz.4.4062 Not tainted syzkaller #0 PREEMPT(full) [ 649.901452][T21846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 649.901465][T21846] Call Trace: [ 649.901473][T21846] [ 649.901484][T21846] dump_stack_lvl+0xe8/0x150 [ 649.901522][T21846] should_fail_ex+0x412/0x560 [ 649.901555][T21846] _copy_from_user+0x2d/0xb0 [ 649.901591][T21846] ___sys_sendmsg+0x1c6/0x360 [ 649.901619][T21846] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.901688][T21846] ? __fget_files+0x2a/0x420 [ 649.901720][T21846] ? __fget_files+0x3a0/0x420 [ 649.901763][T21846] __x64_sys_sendmsg+0x1bd/0x2a0 [ 649.901788][T21846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 649.901820][T21846] ? __pfx_ksys_write+0x10/0x10 [ 649.901868][T21846] do_syscall_64+0x14d/0xf80 [ 649.901897][T21846] ? trace_irq_disable+0x3b/0x150 [ 649.901926][T21846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.901947][T21846] ? clear_bhb_loop+0x40/0x90 [ 649.901972][T21846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.901992][T21846] RIP: 0033:0x7f9a21d9c799 [ 649.902011][T21846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.902029][T21846] RSP: 002b:00007f9a22cd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.902050][T21846] RAX: ffffffffffffffda RBX: 00007f9a22015fa0 RCX: 00007f9a21d9c799 [ 649.902065][T21846] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 649.902078][T21846] RBP: 00007f9a22cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 649.902090][T21846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.902101][T21846] R13: 00007f9a22016038 R14: 00007f9a22015fa0 R15: 00007fffe48aa288 [ 649.902134][T21846] [ 650.261442][T21858] veth0: entered promiscuous mode [ 650.448493][T21867] lo speed is unknown, defaulting to 1000 [ 650.657795][T21856] veth0: left promiscuous mode [ 651.041904][T21895] __nla_validate_parse: 19 callbacks suppressed [ 651.041928][T21895] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4073'. [ 651.233172][T21900] lo speed is unknown, defaulting to 1000 [ 651.278112][T21904] openvswitch: netlink: Duplicate or invalid key (type 0). [ 651.294514][T21904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.453514][T21884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.465606][T21884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.477259][T21884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 651.558651][T21915] FAULT_INJECTION: forcing a failure. [ 651.558651][T21915] name failslab, interval 1, probability 0, space 0, times 0 [ 651.580401][T21915] CPU: 0 UID: 0 PID: 21915 Comm: syz.0.4077 Not tainted syzkaller #0 PREEMPT(full) [ 651.580429][T21915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 651.580442][T21915] Call Trace: [ 651.580451][T21915] [ 651.580460][T21915] dump_stack_lvl+0xe8/0x150 [ 651.580494][T21915] should_fail_ex+0x412/0x560 [ 651.580526][T21915] should_failslab+0xa8/0x100 [ 651.580554][T21915] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 651.580577][T21915] ? __alloc_skb+0x186/0x7d0 [ 651.580605][T21915] ? __alloc_skb+0x1d0/0x7d0 [ 651.580632][T21915] ? __local_bh_enable_ip+0xd0/0x130 [ 651.580664][T21915] __alloc_skb+0x1d0/0x7d0 [ 651.580692][T21915] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 651.580742][T21915] netlink_sendmsg+0x5d4/0xb40 [ 651.580781][T21915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.580812][T21915] ? aa_sock_msg_perm+0xf1/0x1b0 [ 651.580840][T21915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 651.580865][T21915] ____sys_sendmsg+0x972/0x9f0 [ 651.580895][T21915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.580925][T21915] ? import_iovec+0x73/0xa0 [ 651.580959][T21915] ___sys_sendmsg+0x2a5/0x360 [ 651.580984][T21915] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.581041][T21915] ? __fget_files+0x2a/0x420 [ 651.581079][T21915] ? __fget_files+0x3a0/0x420 [ 651.581118][T21915] __x64_sys_sendmsg+0x1bd/0x2a0 [ 651.581141][T21915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 651.581171][T21915] ? __pfx_ksys_write+0x10/0x10 [ 651.581205][T21915] do_syscall_64+0x14d/0xf80 [ 651.581233][T21915] ? trace_irq_disable+0x3b/0x150 [ 651.581267][T21915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.581288][T21915] ? clear_bhb_loop+0x40/0x90 [ 651.581313][T21915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.581333][T21915] RIP: 0033:0x7fcc90b9c799 [ 651.581353][T21915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.581370][T21915] RSP: 002b:00007fcc919ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.581391][T21915] RAX: ffffffffffffffda RBX: 00007fcc90e15fa0 RCX: 00007fcc90b9c799 [ 651.581406][T21915] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 651.581418][T21915] RBP: 00007fcc919ff090 R08: 0000000000000000 R09: 0000000000000000 [ 651.581431][T21915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.581444][T21915] R13: 00007fcc90e16038 R14: 00007fcc90e15fa0 R15: 00007fff77febe48 [ 651.581476][T21915] [ 651.881263][T21896] lo speed is unknown, defaulting to 1000 [ 651.980115][T21884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.996869][T21884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.050913][T21884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 652.069508][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 652.077701][ C1] lec:lec_tx_timeout: lec0 [ 652.083803][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 652.203726][T21922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4079'. [ 652.279139][T21884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.291056][T21884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.303458][T21884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 652.471726][T21884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.483892][T21884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.496513][T21884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 652.513977][T21925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4079'. [ 652.915189][T15623] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.928310][T15623] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 652.966680][T15623] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 653.052425][T15623] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.084437][T21937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4081'. [ 653.089559][T15623] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 653.151166][T15623] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 653.188683][T15623] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.220344][T15623] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 653.228776][T15623] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 653.284283][T15623] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.329470][T15623] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 653.368355][T15623] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 653.409087][T21947] netlink: 'syz.4.4084': attribute type 1 has an invalid length. [ 653.524942][T21947] 8021q: adding VLAN 0 to HW filter on device bond5 [ 653.556497][T21952] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 653.567461][T21952] bond5: (slave batadv1): making interface the new active one [ 653.582058][T21952] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 653.624017][T21947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4084'. [ 653.720334][T21947] bond5 (unregistering): (slave batadv1): Releasing active interface [ 653.744154][T21947] bond5 (unregistering): Released all slaves [ 653.831077][T21968] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 654.109947][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4090'. [ 654.176681][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4090'. [ 654.230060][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4090'. [ 654.239323][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4090'. [ 654.289843][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4090'. [ 654.613449][T21992] x_tables: duplicate underflow at hook 1 [ 654.652138][T21992] 8021q: VLANs not supported on ip6tnl0 [ 655.297000][T22006] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.304282][T22006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.311941][T22006] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.319135][T22006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.578938][T22033] netlink: 'syz.0.4105': attribute type 10 has an invalid length. [ 655.647601][T22037] netlink: 'syz.0.4105': attribute type 10 has an invalid length. [ 655.781029][T22033] team0: Port device dummy0 added [ 655.861164][T22037] team0: Port device dummy0 removed [ 655.910477][T22037] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 656.523600][T22072] lo speed is unknown, defaulting to 1000 [ 657.005460][T22093] __nla_validate_parse: 61 callbacks suppressed [ 657.005483][T22093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4114'. [ 657.099774][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 657.107913][ C1] lec:lec_tx_timeout: lec0 [ 657.112732][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 657.601939][T22098] kthread_run failed with err -4 [ 662.119498][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 662.127553][ C1] lec:lec_tx_timeout: lec0 [ 662.132579][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 662.996355][T22131] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 663.145553][T22139] lo speed is unknown, defaulting to 1000 [ 663.236447][T22148] openvswitch: netlink: Key type 30 is not supported [ 663.259310][T22145] macsec2: entered allmulticast mode [ 663.265472][T22145] macsec0: entered allmulticast mode [ 663.283068][T22145] macsec0: left allmulticast mode [ 663.344984][T22155] tipc: Enabling of bearer rejected, failed to enable media [ 663.358343][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4123'. [ 663.385581][T22148] batman_adv: batadv0: Adding interface: macvtap1 [ 663.421177][T22148] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.500709][T22148] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 663.725581][T22163] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 663.733667][T22163] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 663.998174][T22185] xfrm1: entered allmulticast mode [ 664.206102][T22200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4139'. [ 664.285387][T22205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4140'. [ 664.411414][T22209] IPVS: ip_vs_edit_dest(): server weight less than zero [ 664.531109][T22215] x_tables: duplicate entry at hook 3 [ 664.639734][T22220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4145'. [ 664.654760][T22222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4143'. [ 665.422715][T22249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4153'. [ 665.454435][T22253] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4155'. [ 665.514527][T22251] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 665.594148][T22251] bond7: left promiscuous mode [ 665.690398][T22264] sctp: [Deprecated]: syz.2.4159 (pid 22264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.690398][T22264] Use struct sctp_sack_info instead [ 665.713741][ T6909] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.737438][ T6909] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.772091][ T6909] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.800917][ T6909] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.835059][T22260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4158'. [ 665.932691][T22267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4158'. [ 666.053372][T22285] netlink: 'syz.1.4163': attribute type 10 has an invalid length. [ 666.103301][T22285] team0: Port device dummy0 added [ 666.127934][T22285] netlink: 'syz.1.4163': attribute type 10 has an invalid length. [ 666.167406][T22285] team0: Port device dummy0 removed [ 666.211888][T22285] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 666.314861][T22295] veth0: entered promiscuous mode [ 666.322361][T22295] veth0: left promiscuous mode [ 666.400704][T22301] netlink: 'syz.4.4165': attribute type 1 has an invalid length. [ 666.451781][T22300] syzkaller0: entered promiscuous mode [ 666.460393][T22300] syzkaller0: entered allmulticast mode [ 666.518007][T22301] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 666.560886][T22301] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 666.631392][T22304] bond5: (slave gretap2): making interface the new active one [ 666.640511][T22304] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 666.660194][T22307] macvlan2: entered promiscuous mode [ 666.665568][T22307] macvlan2: entered allmulticast mode [ 666.681945][T22307] bond5: entered promiscuous mode [ 666.690901][T22307] gretap2: entered promiscuous mode [ 666.697926][T22307] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 666.732779][T22307] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 666.764217][T22307] bond5: left promiscuous mode [ 666.769069][T22307] gretap2: left promiscuous mode [ 667.132916][T22326] netlink: 'syz.2.4175': attribute type 3 has an invalid length. [ 667.149737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 667.157896][ C1] lec:lec_tx_timeout: lec0 [ 667.162858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 667.217202][T22333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4177'. [ 668.239153][T22391] netlink: 'syz.2.4195': attribute type 6 has an invalid length. [ 668.447890][T22393] __nla_validate_parse: 8 callbacks suppressed [ 668.447910][T22393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4196'. [ 668.467605][T22406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4199'. [ 668.598187][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4200'. [ 668.607799][T22417] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 668.617433][T22417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.687646][T22409] tipc: Enabled bearer , priority 0 [ 668.836633][T22391] syzkaller0: entered promiscuous mode [ 668.842557][T22391] syzkaller0: entered allmulticast mode [ 668.848917][T22391] tipc: Resetting bearer [ 668.943057][T22390] tipc: Resetting bearer [ 669.224381][T22448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4205'. [ 669.869241][T22442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 669.886548][T22448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4205'. [ 670.124518][T22459] netlink: 'syz.1.4207': attribute type 11 has an invalid length. [ 670.132595][T22459] netlink: 'syz.1.4207': attribute type 23 has an invalid length. [ 670.141546][T22459] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4207'. [ 670.747365][T22390] tipc: Disabling bearer [ 670.765705][ T10] tipc: Node number set to 1029129774 [ 671.086240][T22485] netlink: 'syz.4.4215': attribute type 64 has an invalid length. [ 671.206957][T22487] lo speed is unknown, defaulting to 1000 [ 671.221175][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4212'. [ 671.297550][ T29] audit: type=1800 audit(1773645418.417:7): pid=22482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4213" name="memory.events" dev="tmpfs" ino=1328 res=0 errno=0 [ 671.333408][ T29] audit: type=1804 audit(1773645418.417:8): pid=22482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4213" name="/newroot/256/memory.events" dev="tmpfs" ino=1328 res=1 errno=0 [ 671.348398][T22477] lo speed is unknown, defaulting to 1000 [ 671.563017][T22499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4217'. [ 671.635819][T22494] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4216'. [ 671.775987][T22504] netlink: 'syz.4.4218': attribute type 10 has an invalid length. [ 671.787296][T22504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.169442][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 672.177539][ C1] lec:lec_tx_timeout: lec0 [ 672.182512][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 672.415565][T22534] netlink: 'syz.1.4226': attribute type 30 has an invalid length. [ 672.439302][T22537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4225'. [ 672.653366][T22542] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.721517][T22542] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 672.814760][T22542] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.837094][T22542] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 672.930966][T22551] lo: entered allmulticast mode [ 672.954667][T22551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.025987][T22542] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.058915][T22542] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 673.149203][T22542] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.177705][T22542] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 673.381157][ T6919] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 673.402749][ T6919] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 673.468301][ T6907] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 673.494436][ T6907] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 673.577378][ T6907] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 673.591537][ T6907] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 673.635338][ T6907] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 673.647422][ T6907] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 677.189969][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 677.198019][ C1] lec:lec_tx_timeout: lec0 [ 677.202653][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 682.209845][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 682.217876][ C1] lec:lec_tx_timeout: lec0 [ 682.222617][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 682.311054][T22641] __nla_validate_parse: 65 callbacks suppressed [ 682.311074][T22641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4250'. [ 682.382003][T22634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4248'. [ 682.409476][T22647] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4247'. [ 682.737079][T22664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4256'. [ 682.771265][T22664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4256'. [ 682.803570][T22667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4257'. [ 682.830136][T22667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4257'. [ 682.843544][T22668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4256'. [ 682.872683][T22664] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 682.889892][T22664] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 682.898339][T22664] tipc: Resetting bearer [ 682.921856][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4258'. [ 682.932624][T22672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4258'. [ 682.953615][T22664] xt_TPROXY: Can be used only with -p tcp or -p udp [ 683.061331][T22680] netlink: 'syz.3.4259': attribute type 21 has an invalid length. [ 683.390502][T15623] tipc: Resetting bearer [ 683.406995][T22692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.423303][T22692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.807084][T22728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 686.003674][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.375852][T22704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.504879][T22731] tipc: Started in network mode [ 686.518158][T22731] tipc: Node identity 3a46ed7d5da1, cluster identity 4711 [ 686.550925][T22731] tipc: Enabled bearer , priority 0 [ 686.775787][T22744] lo speed is unknown, defaulting to 1000 [ 687.082404][ T6909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.159619][ T6909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.229441][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 687.237636][ C1] lec:lec_tx_timeout: lec0 [ 687.242785][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 687.356246][ T29] audit: type=1800 audit(1773645434.477:9): pid=22758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4281" name="memory.events" dev="tmpfs" ino=1417 res=0 errno=0 [ 687.574404][T22800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4291'. [ 687.594720][T22797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4291'. [ 687.690091][T12828] tipc: Node number set to 1743252861 [ 687.715626][T22807] netlink: 'syz.0.4293': attribute type 1 has an invalid length. [ 687.754182][T22807] netlink: 'syz.0.4293': attribute type 2 has an invalid length. [ 687.766680][T22807] netlink: 'syz.0.4293': attribute type 1 has an invalid length. [ 687.774640][T22807] netlink: 'syz.0.4293': attribute type 3 has an invalid length. [ 687.785564][T22807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4293'. [ 687.804996][T22807] netlink: 'syz.0.4293': attribute type 1 has an invalid length. [ 687.815104][T22807] netlink: 'syz.0.4293': attribute type 2 has an invalid length. [ 687.859652][T22807] netlink: 'syz.0.4293': attribute type 1 has an invalid length. [ 687.877776][T22807] netlink: 'syz.0.4293': attribute type 3 has an invalid length. [ 687.893473][T22807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4293'. [ 687.920644][T22812] netlink: 'syz.2.4294': attribute type 1 has an invalid length. [ 687.963706][T22812] bond4 (unregistering): Released all slaves [ 688.018641][T22824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4298'. [ 688.048152][T22812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4294'. [ 688.073443][T22824] validate_nla: 2 callbacks suppressed [ 688.073461][T22824] netlink: 'syz.0.4298': attribute type 2 has an invalid length. [ 688.088782][T22824] netlink: 'syz.0.4298': attribute type 8 has an invalid length. [ 688.097696][T22824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4298'. [ 688.115114][T22820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4297'. [ 688.160479][T22820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4297'. [ 688.169951][T22820] nbd: device at index 64 is going down [ 688.185020][T22824] netlink: 'syz.0.4298': attribute type 2 has an invalid length. [ 688.194806][T22825] lo speed is unknown, defaulting to 1000 [ 688.242150][T22824] netlink: 'syz.0.4298': attribute type 8 has an invalid length. [ 688.260299][T22824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4298'. [ 688.333475][T22824] netlink: 'syz.0.4298': attribute type 2 has an invalid length. [ 688.349996][T22824] netlink: 'syz.0.4298': attribute type 8 has an invalid length. [ 688.367365][T22824] netlink: 'syz.0.4298': attribute type 2 has an invalid length. [ 688.397895][T22824] netlink: 'syz.0.4298': attribute type 8 has an invalid length. [ 688.420280][T22824] netlink: 'syz.0.4298': attribute type 2 has an invalid length. [ 688.447567][T22824] netlink: 'syz.0.4298': attribute type 8 has an invalid length. [ 688.480689][T22703] udevd[22703]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 688.523323][T22703] udevd[22703]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 689.071159][T22844] lo speed is unknown, defaulting to 1000 [ 689.808833][T22883] lo speed is unknown, defaulting to 1000 [ 690.453111][T22916] tipc: Enabled bearer , priority 0 [ 690.535860][T22916] tipc: Resetting bearer [ 690.553430][T22918] ip6tnl0: Caught tx_queue_len zero misconfig [ 690.629187][T22914] tipc: Disabling bearer [ 690.938523][ T29] audit: type=1800 audit(1773645438.057:10): pid=22948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4331" name="memory.events" dev="tmpfs" ino=1399 res=0 errno=0 [ 691.044703][ T29] audit: type=1804 audit(1773645438.167:11): pid=22953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4331" name="/newroot/269/memory.events" dev="tmpfs" ino=1399 res=1 errno=0 [ 691.058413][T22948] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 691.329858][T22957] xt_hashlimit: size too large, truncated to 1048576 [ 691.654170][T22971] lo speed is unknown, defaulting to 1000 [ 692.062888][T22981] lo speed is unknown, defaulting to 1000 [ 692.094981][T22986] syz_tun: entered promiscuous mode [ 692.123091][T22986] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 692.249445][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 692.257556][ C1] lec:lec_tx_timeout: lec0 [ 692.263000][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 692.651272][T23008] __nla_validate_parse: 76 callbacks suppressed [ 692.651295][T23008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4342'. [ 692.813819][T23012] tipc: Enabling of bearer rejected, already enabled [ 692.823956][T23012] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 692.832158][T22991] lo speed is unknown, defaulting to 1000 [ 692.838325][T23012] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 692.861510][T23012] tipc: Resetting bearer [ 692.952125][T22994] lo speed is unknown, defaulting to 1000 [ 693.046533][T23016] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4344'. [ 693.106795][T22993] 8021q: adding VLAN 0 to HW filter on device bond5 [ 693.218831][T23017] bond5: (slave geneve4): making interface the new active one [ 693.266919][T23017] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 698.149482][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5890 ms [ 698.157567][ C1] lec:lec_tx_timeout: lec0 [ 698.162678][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 699.974168][T23049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4348'. [ 700.081678][T23051] validate_nla: 121 callbacks suppressed [ 700.081699][T23051] netlink: 'syz.0.4346': attribute type 1 has an invalid length. [ 700.320283][T23073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4352'. [ 700.361782][T23073] ip6tnl0: Caught tx_queue_len zero misconfig [ 700.378611][T23082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4353'. [ 700.489541][T23086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4357'. [ 700.763689][T23106] lo speed is unknown, defaulting to 1000 [ 700.926291][T23120] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4363'. [ 700.980528][T23121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4361'. [ 701.124140][T23125] netlink: 'syz.3.4364': attribute type 21 has an invalid length. [ 701.132932][T23124] netlink: 'syz.3.4364': attribute type 21 has an invalid length. [ 701.145362][T23125] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4364'. [ 701.157174][T23124] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4364'. [ 701.414241][T23136] lo speed is unknown, defaulting to 1000 [ 701.623620][T23140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4369'. [ 701.658943][T23151] netlink: 47 bytes leftover after parsing attributes in process `syz.2.4371'. [ 701.825471][T23132] lo speed is unknown, defaulting to 1000 [ 702.853728][T23203] Unknown options in mask 6 [ 703.166560][T23219] netlink: 'syz.0.4390': attribute type 1 has an invalid length. [ 703.174519][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 703.174557][ C1] lec:lec_tx_timeout: lec0 [ 703.183022][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 703.229817][T23219] netlink: 'syz.0.4390': attribute type 1 has an invalid length. [ 703.304640][T23219] lo speed is unknown, defaulting to 1000 [ 703.745484][T23240] lo speed is unknown, defaulting to 1000 [ 703.979313][T23254] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 704.186686][T23263] xt_hashlimit: invalid rate [ 704.354202][T23262] sit2: entered allmulticast mode [ 704.396545][T23266] syzkaller0: entered promiscuous mode [ 704.408829][T23266] syzkaller0: entered allmulticast mode [ 704.454892][T23270] bond8: Invalid ad_actor_system MAC address. [ 704.461421][T23270] bond8: option ad_actor_system: invalid value (7) [ 704.472444][T23270] bond8 (unregistering): Released all slaves [ 704.518216][T23274] tipc: Started in network mode [ 704.526862][T23274] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 704.545712][T23274] tipc: Enabled bearer , priority 0 [ 704.565928][T23266] tipc: Enabling of bearer rejected, already enabled [ 704.677053][T23288] netlink: 'syz.0.4406': attribute type 1 has an invalid length. [ 704.823627][T23296] netlink: 'syz.4.4410': attribute type 1 has an invalid length. [ 704.839056][T23298] netlink: 'syz.0.4409': attribute type 1 has an invalid length. [ 704.839688][T23296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.916557][T23298] 8021q: adding VLAN 0 to HW filter on device bond8 [ 704.953050][T23302] bond8: (slave gretap1): making interface the new active one [ 704.966085][T23302] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 704.996115][T23298] __nla_validate_parse: 11 callbacks suppressed [ 704.996140][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'. [ 705.074236][T23298] bond8 (unregistering): (slave gretap1): Releasing active interface [ 705.102343][T23298] bond8 (unregistering): Released all slaves [ 705.336595][T23323] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 705.456168][T23323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.531337][T23331] 8021q: adding VLAN 0 to HW filter on device bond6 [ 705.649688][ T5948] tipc: Node number set to 10005162 [ 705.670195][T23340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4420'. [ 705.718073][T23343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4422'. [ 705.862160][T23351] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.4425'. [ 705.872023][T23351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4425'. [ 705.926291][T23351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4425'. [ 705.929459][T23352] netlink: 1311 bytes leftover after parsing attributes in process `syz.0.4425'. [ 705.977620][T23351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4425'. [ 706.122982][T23363] sock: sock_timestamping_bind_phc: sock not bind to device [ 706.244384][T23369] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4432'. [ 706.443504][T23384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4437'. [ 707.651547][T23461] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20002 [ 708.189497][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 708.197597][ C1] lec:lec_tx_timeout: lec0 [ 708.202868][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 708.233033][T23482] netlink: 'syz.0.4457': attribute type 9 has an invalid length. [ 708.597679][T23504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.607015][T23504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.713321][T23515] IPv6: Can't replace route, no match found [ 709.116688][T23539] syz.1.4473: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 709.149682][T23539] CPU: 0 UID: 0 PID: 23539 Comm: syz.1.4473 Not tainted syzkaller #0 PREEMPT(full) [ 709.149715][T23539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 709.149728][T23539] Call Trace: [ 709.149736][T23539] [ 709.149745][T23539] dump_stack_lvl+0xe8/0x150 [ 709.149779][T23539] warn_alloc+0x249/0x340 [ 709.149803][T23539] ? stack_trace_save+0xa9/0x100 [ 709.149825][T23539] ? __pfx_warn_alloc+0x10/0x10 [ 709.149852][T23539] ? kasan_save_track+0x4f/0x80 [ 709.149871][T23539] ? kasan_save_track+0x3e/0x80 [ 709.149897][T23539] ? __kasan_kmalloc+0x93/0xb0 [ 709.149915][T23539] ? __kmalloc_cache_noprof+0x31c/0x660 [ 709.149934][T23539] ? xskq_create+0x56/0x170 [ 709.149958][T23539] ? xsk_setsockopt+0x54c/0x990 [ 709.149977][T23539] ? do_sock_setsockopt+0x17c/0x1b0 [ 709.150004][T23539] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 709.150030][T23539] ? do_syscall_64+0x14d/0xf80 [ 709.150060][T23539] __vmalloc_node_range_noprof+0x132/0x1730 [ 709.150107][T23539] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 709.150133][T23539] ? __kasan_kmalloc+0x93/0xb0 [ 709.150158][T23539] vmalloc_user_noprof+0xad/0xe0 [ 709.150177][T23539] ? xskq_create+0xbf/0x170 [ 709.150201][T23539] xskq_create+0xbf/0x170 [ 709.150227][T23539] xsk_init_queue+0x8a/0xe0 [ 709.150252][T23539] xsk_setsockopt+0x54c/0x990 [ 709.150276][T23539] ? __pfx_xsk_setsockopt+0x10/0x10 [ 709.150298][T23539] ? __pfx_aa_sk_perm+0x10/0x10 [ 709.150324][T23539] ? aa_sock_opt_perm+0xff/0x1a0 [ 709.150351][T23539] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 709.150371][T23539] ? __pfx_xsk_setsockopt+0x10/0x10 [ 709.150396][T23539] do_sock_setsockopt+0x17c/0x1b0 [ 709.150428][T23539] __x64_sys_setsockopt+0x13d/0x1b0 [ 709.150461][T23539] do_syscall_64+0x14d/0xf80 [ 709.150487][T23539] ? trace_irq_disable+0x3b/0x150 [ 709.150513][T23539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.150531][T23539] ? clear_bhb_loop+0x40/0x90 [ 709.150554][T23539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.150571][T23539] RIP: 0033:0x7fde3ef9c799 [ 709.150591][T23539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.150610][T23539] RSP: 002b:00007fde3fe29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 709.150633][T23539] RAX: ffffffffffffffda RBX: 00007fde3f215fa0 RCX: 00007fde3ef9c799 [ 709.150647][T23539] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 709.150658][T23539] RBP: 00007fde3f032c99 R08: 0000000000000004 R09: 0000000000000000 [ 709.150670][T23539] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.150682][T23539] R13: 00007fde3f216038 R14: 00007fde3f215fa0 R15: 00007ffe5cc7a078 [ 709.150711][T23539] [ 709.150740][T23539] Mem-Info: [ 709.374339][T23541] ip_vti0: entered promiscuous mode [ 709.374368][T23541] ip_vti0: entered allmulticast mode [ 709.468987][T23544] syzkaller0: entered promiscuous mode [ 709.474839][T23544] syzkaller0: entered allmulticast mode [ 709.481223][T23544] tipc: Resetting bearer [ 709.501201][T23539] active_anon:7830 inactive_anon:0 isolated_anon:0 [ 709.501201][T23539] active_file:3351 inactive_file:40168 isolated_file:0 [ 709.501201][T23539] unevictable:768 dirty:175 writeback:0 [ 709.501201][T23539] slab_reclaimable:12824 slab_unreclaimable:123635 [ 709.501201][T23539] mapped:29421 shmem:1375 pagetables:1299 [ 709.501201][T23539] sec_pagetables:0 bounce:0 [ 709.501201][T23539] kernel_misc_reclaimable:0 [ 709.501201][T23539] free:1289302 free_pcp:12603 free_cma:0 [ 709.578487][T23542] tipc: Resetting bearer [ 709.590655][T23539] Node 0 active_anon:31420kB inactive_anon:0kB active_file:13404kB inactive_file:160468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117684kB dirty:696kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16876kB pagetables:5044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 709.708728][T23539] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 709.754301][T23556] lo: Caught tx_queue_len zero misconfig [ 709.801572][T23539] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 709.836175][T23560] openvswitch: netlink: Duplicate or invalid key (type 0). [ 709.855256][T23563] netlink: 'syz.0.4479': attribute type 1 has an invalid length. [ 709.873423][T23560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.890348][T23539] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 709.897846][T23539] Node 0 DMA32 free:1204812kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31920kB inactive_anon:0kB active_file:13404kB inactive_file:160468kB unevictable:1536kB writepending:696kB zspages:0kB present:3129332kB managed:2552572kB mlocked:0kB bounce:0kB free_pcp:49724kB local_pcp:12856kB free_cma:0kB [ 709.980924][T23539] lowmem_reserve[]: 0 0 0 0 0 [ 709.985768][T23539] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 710.036364][T23567] netlink: 'syz.3.4480': attribute type 9 has an invalid length. [ 710.099060][T23539] lowmem_reserve[]: 0 0 0 0 0 [ 710.109173][T23539] Node 1 Normal free:3938424kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 710.156696][T23539] lowmem_reserve[]: 0 0 0 0 0 [ 710.162090][T23539] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 710.195834][T23539] Node 0 DMA32: 8627*4kB (UM) 6380*8kB (UME) 2776*16kB (UME) 625*32kB (UME) 316*64kB (UME) 275*128kB (UME) 386*256kB (UME) 334*512kB (UME) 250*1024kB (UME) 122*2048kB (UME) 56*4096kB (UM) = 1210444kB [ 710.316193][T23539] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 710.349218][T23539] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 6*16kB (UM) 8*32kB (UM) 6*64kB (UM) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (UM) = 3938424kB [ 710.416936][T23539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 710.453424][T23539] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 710.487468][T23539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 710.507707][T23539] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 710.528741][T23539] 44961 total pagecache pages [ 710.543213][T23539] 0 pages in swap cache [ 710.557246][T23539] Free swap = 124996kB [ 710.566091][T23539] Total swap = 124996kB [ 710.576216][T23539] 2097051 pages RAM [ 710.620239][T23539] 0 pages HighMem/MovableOnly [ 710.649695][T23579] lo speed is unknown, defaulting to 1000 [ 710.650681][T23539] 427072 pages reserved [ 710.686985][T15622] tipc: Resetting bearer [ 710.695837][T23539] 0 pages cma reserved [ 710.824095][T23595] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 710.878877][T23595] ip6t_srh: unknown srh invflags 4000 [ 713.209637][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 713.217723][ C1] lec:lec_tx_timeout: lec0 [ 713.222422][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 718.229697][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 718.237792][ C1] lec:lec_tx_timeout: lec0 [ 718.243384][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 721.829776][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 723.542166][T23626] __nla_validate_parse: 12 callbacks suppressed [ 723.542191][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4486'. [ 723.680145][T23637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4493'. [ 723.702978][T23637] veth1: entered promiscuous mode [ 723.709293][T23637] veth1: entered allmulticast mode [ 723.727520][T23637] netlink: 'syz.0.4493': attribute type 83 has an invalid length. [ 723.811502][T23638] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 723.817950][T23641] lo speed is unknown, defaulting to 1000 [ 724.069411][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 724.077584][ C1] lec:lec_tx_timeout: lec0 [ 724.082824][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 724.196156][T23667] netlink: 'syz.2.4499': attribute type 1 has an invalid length. [ 724.204896][T23667] netlink: 'syz.2.4499': attribute type 3 has an invalid length. [ 724.218735][T23667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4499'. [ 724.256055][T23667] geneve5: entered promiscuous mode [ 724.536021][T23681] lo speed is unknown, defaulting to 1000 [ 724.641597][T23692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4502'. [ 725.457032][T23728] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4516'. [ 725.901578][T23765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4521'. [ 725.928333][T23765] hsr0: entered promiscuous mode [ 725.951960][T23765] macvlan2: entered allmulticast mode [ 725.970932][T23765] hsr0: entered allmulticast mode [ 725.986966][T23765] hsr_slave_0: entered allmulticast mode [ 726.359716][T23786] xt_connbytes: Forcing CT accounting to be enabled [ 726.707602][T23804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4534'. [ 727.024607][T23817] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 727.065267][T23823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4539'. [ 727.165308][T23829] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 727.205378][T23820] lo speed is unknown, defaulting to 1000 [ 727.521452][T23840] syzkaller0: entered promiscuous mode [ 727.527011][T23840] syzkaller0: entered allmulticast mode [ 727.684085][T23854] netlink: 'syz.2.4547': attribute type 4 has an invalid length. [ 727.735423][T23856] netlink: 'syz.2.4547': attribute type 4 has an invalid length. [ 728.466729][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4552'. [ 729.089532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 729.097589][ C1] lec:lec_tx_timeout: lec0 [ 729.102827][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 734.109795][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 734.117849][ C1] lec:lec_tx_timeout: lec0 [ 734.122612][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 734.301878][T23920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4557'. [ 734.686867][T23932] vcan0: Caught tx_queue_len zero misconfig [ 734.856558][T23939] ip6erspan0: entered allmulticast mode [ 735.037709][T23947] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.4567'. [ 735.294876][T23966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4571'. [ 735.313015][T23966] x_tables: duplicate underflow at hook 4 [ 736.393447][T24013] tunl0: Caught tx_queue_len zero misconfig [ 736.577974][T24020] team_slave_1: Caught tx_queue_len zero misconfig [ 736.768178][T24033] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4590'. [ 736.885658][T24040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 737.461616][T24068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4602'. [ 737.641212][T24074] team_slave_1: entered promiscuous mode [ 737.665958][T24074] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 737.753797][T24063] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 737.872342][T24083] syzkaller0: entered promiscuous mode [ 737.880471][T24085] netlink: 'syz.2.4606': attribute type 3 has an invalid length. [ 737.888298][T24083] syzkaller0: entered allmulticast mode [ 737.950676][T24083] lo speed is unknown, defaulting to 1000 [ 738.329865][T24099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4609'. [ 738.381190][T24096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4609'. [ 738.660544][T24117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4617'. [ 738.755482][T24123] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4618'. [ 738.768916][T24125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4617'. [ 738.786917][T24119] netlink: 'syz.0.4612': attribute type 1 has an invalid length. [ 738.815208][T24119] gre1: entered allmulticast mode [ 738.869347][T24122] lo speed is unknown, defaulting to 1000 [ 739.129428][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 739.137548][ C1] lec:lec_tx_timeout: lec0 [ 739.142261][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 739.242984][T24142] lo speed is unknown, defaulting to 1000 [ 739.273892][T24147] ipt_ECN: cannot use operation on non-tcp rule [ 739.732433][T24169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.766778][T24171] netlink: 'syz.3.4628': attribute type 30 has an invalid length. [ 739.853544][T24177] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 739.875069][T24176] __nla_validate_parse: 1 callbacks suppressed [ 739.875091][T24176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4631'. [ 739.917402][T24171] bond7: option arp_missed_max: invalid value (0) [ 739.972859][T24181] sctp: [Deprecated]: syz.1.4632 (pid 24181) Use of int in maxseg socket option. [ 739.972859][T24181] Use struct sctp_assoc_value instead [ 740.011665][T24171] bond7: option arp_missed_max: allowed values 1 - 255 [ 740.051436][T24171] bond7 (unregistering): Released all slaves [ 740.402827][T24204] netlink: 'syz.0.4638': attribute type 1 has an invalid length. [ 740.603099][T24204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4638'. [ 740.650446][T24204] 8021q: adding VLAN 0 to HW filter on device bond8 [ 740.812875][T24227] netlink: 'syz.2.4643': attribute type 1 has an invalid length. [ 740.900218][T24227] bond7: entered promiscuous mode [ 740.907265][T24223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4642'. [ 740.907919][T24227] 8021q: adding VLAN 0 to HW filter on device bond7 [ 740.925086][T24232] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4645'. [ 741.066401][T24228] lo speed is unknown, defaulting to 1000 [ 741.096149][T24227] 8021q: adding VLAN 0 to HW filter on device bond7 [ 741.135362][T24227] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 741.157742][T24227] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 741.173977][T24227] bond7: (slave vti0): making interface the new active one [ 741.181696][T24227] vti0: entered promiscuous mode [ 741.188739][T24227] bond7: (slave vti0): Enslaving as an active interface with an up link [ 741.228518][T24250] tipc: Resetting bearer [ 741.355650][T24249] tipc: Resetting bearer [ 741.492659][T24260] netlink: 64106 bytes leftover after parsing attributes in process `syz.1.4649'. [ 741.826168][T24284] IPVS: sh: FWM 3 0x00000003 - no destination available [ 741.893526][T24277] geneve6: entered promiscuous mode [ 741.902651][T24277] geneve6: entered allmulticast mode [ 741.937017][T24290] tipc: Enabled bearer , priority 0 [ 742.064435][T24281] syzkaller0: entered promiscuous mode [ 742.070974][T24281] syzkaller0: entered allmulticast mode [ 742.161740][T24281] tipc: Resetting bearer [ 742.189536][T24279] tipc: Resetting bearer [ 742.279301][T24279] tipc: Disabling bearer [ 742.312727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.336806][ T6906] tipc: Resetting bearer [ 742.553827][T24319] netlink: 'syz.4.4662': attribute type 1 has an invalid length. [ 742.572685][T24322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4660'. [ 742.621317][T24322] openvswitch: netlink: Missing key (keys=40, expected=80) [ 742.637286][T24326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4663'. [ 742.962444][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4665'. [ 742.972039][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4665'. [ 743.137158][T24338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4667'. [ 743.326203][T24341] syzkaller0: refused to change device tx_queue_len [ 743.508039][T24354] netlink: 'syz.1.4672': attribute type 1 has an invalid length. [ 743.639273][ T29] audit: type=1804 audit(1773645490.757:12): pid=24366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4673" name="/newroot/323/memory.events" dev="tmpfs" ino=1666 res=1 errno=0 [ 743.690990][T24363] netlink: 'syz.4.4671': attribute type 1 has an invalid length. [ 743.721115][ T29] audit: type=1800 audit(1773645490.757:13): pid=24366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4673" name="memory.events" dev="tmpfs" ino=1666 res=0 errno=0 [ 743.836266][ T29] audit: type=1804 audit(1773645490.757:14): pid=24366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4673" name="/newroot/323/memory.events" dev="tmpfs" ino=1666 res=1 errno=0 [ 743.938738][T24369] lo speed is unknown, defaulting to 1000 [ 743.965379][T24381] netlink: 'syz.0.4677': attribute type 4 has an invalid length. [ 744.149453][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 744.157588][ C1] lec:lec_tx_timeout: lec0 [ 744.163051][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 744.212732][T24382] lo speed is unknown, defaulting to 1000 [ 744.844123][T24425] netlink: 'syz.3.4689': attribute type 1 has an invalid length. [ 744.844481][T24422] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 744.853983][T24425] netlink: 'syz.3.4689': attribute type 1 has an invalid length. [ 744.990121][T24425] lo speed is unknown, defaulting to 1000 [ 745.293595][T24446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.306861][T24446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.353989][T24449] __nla_validate_parse: 9 callbacks suppressed [ 745.354004][T24449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4693'. [ 745.493901][T24446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.525298][T24446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.769036][T24446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.809593][T24446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.847614][T24461] lo speed is unknown, defaulting to 1000 [ 746.084917][T24446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.100489][T24446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.351395][ T6907] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.361741][ T6907] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.381551][ T6907] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.390154][ T6907] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.413839][ T6907] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.422348][ T6907] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.442061][T15623] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.450538][T15623] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.433766][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.169728][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 749.177762][ C1] lec:lec_tx_timeout: lec0 [ 749.182449][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 753.974875][T24525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4707'. [ 754.051543][T24536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4709'. [ 754.130191][T24536] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4709'. [ 754.199433][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 754.207542][ C1] lec:lec_tx_timeout: lec0 [ 754.213188][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 754.292231][T24553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4713'. [ 754.314669][T24553] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4713'. [ 754.385243][T24555] lo speed is unknown, defaulting to 1000 [ 754.484614][T24564] netlink: 'syz.3.4716': attribute type 13 has an invalid length. [ 754.554696][T24570] netlink: 'syz.0.4715': attribute type 1 has an invalid length. [ 754.574117][T24570] netlink: 174 bytes leftover after parsing attributes in process `syz.0.4715'. [ 754.930258][T24585] lo speed is unknown, defaulting to 1000 [ 754.938447][T24585] lo speed is unknown, defaulting to 1000 [ 754.957145][T24585] lo speed is unknown, defaulting to 1000 [ 755.263130][T24598] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4721'. [ 755.330499][ T5902] lo speed is unknown, defaulting to 1000 [ 755.338886][T24585] infiniband syz0: set down [ 755.357097][T24585] infiniband syz0: added lo [ 755.408522][T24585] RDS/IB: syz0: added [ 755.421648][T24585] smc: adding ib device syz0 with port count 1 [ 755.428066][T24585] smc: ib device syz0 port 1 has no pnetid [ 755.435474][ T5902] lo speed is unknown, defaulting to 1000 [ 755.444354][T24585] lo speed is unknown, defaulting to 1000 [ 755.696057][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4727'. [ 755.795096][T24625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4729'. [ 755.816445][T24624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4729'. [ 756.008189][T24585] lo speed is unknown, defaulting to 1000 [ 756.459054][T24585] lo speed is unknown, defaulting to 1000 [ 756.808443][T24665] batman_adv: batadv0: Adding interface: gretap1 [ 756.827410][T24665] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.867167][T24665] batman_adv: batadv0: Interface activated: gretap1 [ 756.947934][T24585] lo speed is unknown, defaulting to 1000 [ 757.092323][T24672] netlink: 'syz.3.4741': attribute type 1 has an invalid length. [ 757.383485][T24681] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.400555][T24681] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.473561][T24695] netlink: 'syz.1.4748': attribute type 3 has an invalid length. [ 757.544113][T24585] lo speed is unknown, defaulting to 1000 [ 757.676956][T24681] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.696482][T24681] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.753354][T24694] lo speed is unknown, defaulting to 1000 [ 757.798041][T24681] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.810625][T24681] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.862804][T24702] lo speed is unknown, defaulting to 1000 [ 757.986054][T24713] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 758.042005][T24713] bond8 (unregistering): Released all slaves [ 758.192807][T24681] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 758.219517][T24681] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.305252][T24718] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.313009][T24718] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.338325][T24694] lo speed is unknown, defaulting to 1000 [ 758.447814][ T6906] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.456266][ T6906] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.475937][ T6906] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.484444][ T6906] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.511462][ T6910] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.521218][ T6910] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.544318][ T6910] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.559616][ T6910] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.661606][T24702] lo speed is unknown, defaulting to 1000 [ 759.197884][T24585] lo speed is unknown, defaulting to 1000 [ 759.220029][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 759.228121][ C1] lec:lec_tx_timeout: lec0 [ 759.234738][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 759.886856][T24585] lo speed is unknown, defaulting to 1000 [ 760.353174][T24773] tipc: Resetting bearer [ 760.403646][T24785] __nla_validate_parse: 12 callbacks suppressed [ 760.403669][T24785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4765'. [ 760.555242][T24585] lo speed is unknown, defaulting to 1000 [ 761.060964][T24585] lo speed is unknown, defaulting to 1000 [ 761.340590][T24813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4772'. [ 761.498771][T24804] lo speed is unknown, defaulting to 1000 [ 761.519698][T24818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4776'. [ 761.542098][T24821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4777'. [ 761.582290][T24823] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4776'. [ 761.705289][T24828] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 762.067948][T24830] lo speed is unknown, defaulting to 1000 [ 762.102377][T24830] lo speed is unknown, defaulting to 1000 [ 762.429597][T24852] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.4785'. [ 762.560261][T24852] netlink: 'syz.4.4785': attribute type 1 has an invalid length. [ 762.586975][T24852] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4785'. [ 762.668498][T24858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4784'. [ 762.688579][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4785'. [ 762.732610][T24858] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4784'. [ 764.174016][T24901] netlink: 'syz.4.4794': attribute type 2 has an invalid length. [ 764.249776][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 764.257871][ C1] lec:lec_tx_timeout: lec0 [ 764.264726][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 764.479180][T24914] netlink: 'syz.0.4798': attribute type 9 has an invalid length. [ 764.539242][T24915] sctp: [Deprecated]: syz.1.4796 (pid 24915) Use of int in maxseg socket option. [ 764.539242][T24915] Use struct sctp_assoc_value instead [ 764.557762][T24908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.569853][T24908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.670435][T24911] bond7: entered promiscuous mode [ 764.737523][T24908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.748523][T24908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.853433][T24908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.867582][T24908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.951411][T24908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 764.963407][T24908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.053987][ T180] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.062695][ T180] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.081664][ T180] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.090067][ T180] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.108442][ T180] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.117847][ T180] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.135114][ T180] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.144335][ T180] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.469494][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6200 ms [ 770.477567][ C1] lec:lec_tx_timeout: lec0 [ 770.482821][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 771.419256][T24943] __nla_validate_parse: 5 callbacks suppressed [ 771.419280][T24943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4801'. [ 771.435306][T24948] netlink: 'syz.0.4799': attribute type 8 has an invalid length. [ 771.445460][T24945] netlink: 'syz.0.4799': attribute type 8 has an invalid length. [ 771.470455][T24943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4801'. [ 771.515679][T24950] netlink: 'syz.3.4802': attribute type 64 has an invalid length. [ 771.613714][T24956] netlink: 'syz.1.4804': attribute type 1 has an invalid length. [ 771.625838][T24956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4804'. [ 771.654235][T24958] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4806'. [ 771.746562][T24967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4807'. [ 772.061302][T24978] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4809'. [ 772.222840][T24987] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 772.272388][T24995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4813'. [ 772.315503][T24995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4813'. [ 772.376285][T25003] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4814'. [ 772.578439][T25018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4819'. [ 772.598936][T25012] lo speed is unknown, defaulting to 1000 [ 772.641792][T25012] lo speed is unknown, defaulting to 1000 [ 773.329077][T25061] bridge5: port 1(veth0_to_bond) entered blocking state [ 773.347649][T25061] bridge5: port 1(veth0_to_bond) entered disabled state [ 773.380722][T25061] veth0_to_bond: entered allmulticast mode [ 773.388593][T25061] veth0_to_bond: entered promiscuous mode [ 773.481825][T25072] netlink: 'syz.1.4836': attribute type 6 has an invalid length. [ 773.642877][T25078] batadv_slave_0: entered promiscuous mode [ 773.649071][T25078] batadv_slave_0: entered allmulticast mode [ 773.680969][T25081] dvmrp12: entered allmulticast mode [ 773.770104][T25081] dvmrp12: left allmulticast mode [ 773.827370][T25092] netlink: 'syz.3.4842': attribute type 1 has an invalid length. [ 774.232895][T25116] hsr_slave_1 (unregistering): left promiscuous mode [ 774.355302][T25118] netlink: 'syz.0.4848': attribute type 20 has an invalid length. [ 774.814038][T25145] netlink: 'syz.4.4855': attribute type 4 has an invalid length. [ 774.822091][T25145] netlink: 'syz.4.4855': attribute type 8 has an invalid length. [ 774.928035][T25157] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.935503][T25157] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.156850][T25157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.174766][T25157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.201154][T25176] netlink: 'syz.3.4865': attribute type 1 has an invalid length. [ 775.372445][T25168] bond7: option lacp_rate: invalid value (128) [ 775.381831][T25168] bond7 (unregistering): Released all slaves [ 775.411444][T15622] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.422405][T15622] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 775.439055][T15622] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 775.460910][T15622] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.479509][T15622] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 775.493164][T15622] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 775.525319][T15622] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.571802][T15622] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 775.628565][T15622] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 775.639495][T15622] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.668296][T15622] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 775.696448][T15622] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 775.719551][T25190] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 775.774201][T25196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 775.785061][T25190] !: entered promiscuous mode [ 775.808870][T25195] erspan0: entered promiscuous mode [ 775.817425][T25195] erspan0: left promiscuous mode [ 776.065153][T25208] netlink: 'syz.1.4875': attribute type 11 has an invalid length. [ 776.181811][T25216] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 776.193331][T25212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 776.239375][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 776.247448][ C1] lec:lec_tx_timeout: lec0 [ 776.252618][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 776.301546][T25208] gretap1: entered promiscuous mode [ 776.320776][T25215] lo speed is unknown, defaulting to 1000 [ 776.341553][T25215] lo speed is unknown, defaulting to 1000 [ 776.355980][T25218] lo speed is unknown, defaulting to 1000 [ 776.518221][T25234] validate_nla: 6 callbacks suppressed [ 776.518241][T25234] netlink: 'syz.3.4882': attribute type 16 has an invalid length. [ 776.549716][T25234] __nla_validate_parse: 15 callbacks suppressed [ 776.549738][T25234] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4882'. [ 776.684448][T25218] lo speed is unknown, defaulting to 1000 [ 776.973258][T25242] bond8: option mode: invalid value (254) [ 776.999767][T25242] bond8 (unregistering): Released all slaves [ 777.180911][T25246] lo speed is unknown, defaulting to 1000 [ 777.226303][T25246] lo speed is unknown, defaulting to 1000 [ 777.381081][T25258] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4889'. [ 777.808831][T25264] lo speed is unknown, defaulting to 1000 [ 777.840787][T25264] lo speed is unknown, defaulting to 1000 [ 778.021900][T25273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4893'. [ 778.091215][T25268] ip_vti0: left promiscuous mode [ 778.793063][T25268] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.800404][T25268] bridge0: port 2(bridge_slave_1) entered listening state [ 778.807753][T25268] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.814987][T25268] bridge0: port 1(bridge_slave_0) entered listening state [ 779.144273][T25268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 779.356695][T25290] netlink: 'syz.0.4897': attribute type 1 has an invalid length. [ 779.412919][T25292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4897'. [ 779.545135][T25292] bond10 (unregistering): Released all slaves [ 779.649255][T25287] lo speed is unknown, defaulting to 1000 [ 779.677304][T25287] lo speed is unknown, defaulting to 1000 [ 779.872299][T25300] tap0: tun_chr_ioctl cmd 2147767521 [ 779.937959][T25305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4902'. [ 780.609930][T25335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4911'. [ 780.996264][T25347] netlink: 'syz.1.4916': attribute type 1 has an invalid length. [ 781.071944][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4916'. [ 781.085267][T25351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4917'. [ 781.117139][T25347] 8021q: adding VLAN 0 to HW filter on device bond8 [ 781.147530][T25346] bond8: entered promiscuous mode [ 781.153929][T25346] bond8: entered allmulticast mode [ 781.198908][T25354] syzkaller0: entered promiscuous mode [ 781.206656][T25354] syzkaller0: entered allmulticast mode [ 781.231496][T25349] lo speed is unknown, defaulting to 1000 [ 781.240140][T25349] lo speed is unknown, defaulting to 1000 [ 781.503679][T25370] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4919'. [ 781.530516][T25369] netlink: 'syz.4.4921': attribute type 39 has an invalid length. [ 781.730236][T25377] 8021q: adding VLAN 0 to HW filter on device bond8 [ 781.752372][T25384] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 782.069485][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 782.086690][ C1] lec:lec_tx_timeout: lec0 [ 782.093290][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 787.099808][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 787.107864][ C1] lec:lec_tx_timeout: lec0 [ 787.112709][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 788.066684][T25436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4929'. [ 788.068853][T25441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4933'. [ 788.090512][T25436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4929'. [ 788.170764][T25436] lo speed is unknown, defaulting to 1000 [ 788.178587][T25436] lo speed is unknown, defaulting to 1000 [ 788.276521][T25458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4936'. [ 788.295492][T25458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4936'. [ 788.696749][T25471] lo speed is unknown, defaulting to 1000 [ 788.727678][T25471] lo speed is unknown, defaulting to 1000 [ 788.733723][T25474] lo speed is unknown, defaulting to 1000 [ 788.786046][T25486] netlink: 'syz.3.4942': attribute type 2 has an invalid length. [ 788.829572][T25486] hmac(sha224): entered promiscuous mode [ 788.855724][T25491] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4943'. [ 789.435427][T25474] lo speed is unknown, defaulting to 1000 [ 789.486258][T25509] bridge4: entered promiscuous mode [ 789.491885][T25509] bridge4: entered allmulticast mode [ 789.573832][T25510] tipc: Resetting bearer [ 789.618378][T25520] netlink: 'syz.3.4948': attribute type 1 has an invalid length. [ 789.652174][T25520] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4948'. [ 790.361394][T25545] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4955'. [ 790.471435][T25542] netlink: 'syz.4.4955': attribute type 39 has an invalid length. [ 790.809768][T25562] x_tables: duplicate underflow at hook 3 [ 790.833935][T25562] netlink: 'syz.3.4958': attribute type 1 has an invalid length. [ 790.872966][T25564] TCP: TCP_TX_DELAY enabled [ 790.983658][T25567] bond8 (unregistering): Released all slaves [ 791.046883][T25562] netlink: 712 bytes leftover after parsing attributes in process `syz.3.4958'. [ 791.061383][T25562] netlink: 5504 bytes leftover after parsing attributes in process `syz.3.4958'. [ 791.151046][T25574] lo speed is unknown, defaulting to 1000 [ 791.172714][T25574] lo speed is unknown, defaulting to 1000 [ 791.493849][T25585] xt_hashlimit: size too large, truncated to 1048576 [ 791.770805][T25592] team_slave_1: left promiscuous mode [ 792.028233][T25592] team0 (unregistering): Port device team_slave_1 removed [ 792.121142][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 792.129311][ C1] lec:lec_tx_timeout: lec0 [ 792.139518][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 792.372161][T25615] nbd: socks must be embedded in a SOCK_ITEM attr [ 792.543018][T25608] lo speed is unknown, defaulting to 1000 [ 792.571337][T25608] lo speed is unknown, defaulting to 1000 [ 792.659121][T25624] syzkaller0: entered promiscuous mode [ 792.690174][T25624] syzkaller0: entered allmulticast mode [ 793.130875][T25617] netlink: 'syz.4.4970': attribute type 1 has an invalid length. [ 793.338614][T25617] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 793.518845][T25651] __nla_validate_parse: 3 callbacks suppressed [ 793.518869][T25651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4975'. [ 794.149175][T25668] lo speed is unknown, defaulting to 1000 [ 794.176713][T25675] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 794.232160][T25668] lo speed is unknown, defaulting to 1000 [ 794.413392][T25675] bond8: entered promiscuous mode [ 794.418507][T25675] bond8: entered allmulticast mode [ 794.440217][T25675] 8021q: adding VLAN 0 to HW filter on device bond8 [ 794.659250][T25687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4986'. [ 794.826538][T25697] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4989'. [ 794.984586][T25705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4992'. [ 795.021446][T25703] tipc: New replicast peer: 255.255.255.255 [ 795.028446][T25703] tipc: Enabled bearer , priority 10 [ 795.047656][T25699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.093706][T25699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.158431][T25711] xt_hashlimit: size too large, truncated to 1048576 [ 795.249026][T25719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4994'. [ 795.291146][T25719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4994'. [ 795.495411][T25722] macvtap1: entered promiscuous mode [ 795.513863][T25722] macvtap1: entered allmulticast mode [ 795.630634][T25719] team0 (unregistering): Port device team_slave_0 removed [ 795.676141][T25719] team0 (unregistering): Port device team_slave_1 removed [ 795.701878][T25719] team0 (unregistering): Port device veth3 removed [ 795.940113][T25742] 8021q: adding VLAN 0 to HW filter on device bond9 [ 795.981847][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5001'. [ 796.019478][T25742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5001'. [ 796.029920][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5001'. [ 796.038975][T25742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5001'. [ 796.131122][T25751] lo speed is unknown, defaulting to 1000 [ 796.147230][T25751] lo speed is unknown, defaulting to 1000 [ 796.160115][T12828] tipc: Node number set to 925863973 [ 796.326720][T25759] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.371472][T25759] bridge_slave_1: left allmulticast mode [ 796.394984][T25759] bridge_slave_1: left promiscuous mode [ 796.415551][T25759] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.440819][T25759] bridge_slave_1: entered promiscuous mode [ 796.454269][T25759] bridge_slave_1: entered allmulticast mode [ 796.478497][T25759] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 796.541505][T25765] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 796.569592][T25765] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 796.653420][T25765] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 796.676429][T25765] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 796.730761][ T180] bond0: (slave bridge_slave_1): interface is now down [ 796.783950][T25765] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 796.800218][T25765] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 796.889611][T15623] bond0: (slave bridge_slave_1): interface is now down [ 796.927688][T25765] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 796.958888][T25765] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 797.030450][ T6907] bond0: (slave bridge_slave_1): interface is now down [ 797.149440][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 797.157593][ C1] lec:lec_tx_timeout: lec0 [ 797.162687][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 797.179783][ T6907] bond0: (slave bridge_slave_1): interface is now down [ 797.298358][ T6907] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.330176][ T128] bond0: (slave bridge_slave_1): interface is now down [ 797.338320][ T6907] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 797.401879][T15623] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.420089][T15623] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 797.489793][ T6907] bond0: (slave bridge_slave_1): interface is now down [ 797.557230][ T180] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.566671][ T180] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 797.628855][ T180] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 797.637564][T15623] bond0: (slave bridge_slave_1): interface is now down [ 797.657583][ T180] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 797.781075][ T180] bond0: (slave bridge_slave_1): interface is now down [ 797.788790][ T180] bond0: now running without any active interface! [ 797.826573][T25810] netlink: 'syz.3.5016': attribute type 1 has an invalid length. [ 797.907047][T25813] bond1: option mode: unable to set because the bond device has slaves [ 798.420419][T25841] ip_vti0: left allmulticast mode [ 798.466064][T25841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 798.571744][T25844] __nla_validate_parse: 17 callbacks suppressed [ 798.571772][T25844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5028'. [ 798.618614][T25855] lo speed is unknown, defaulting to 1000 [ 798.641598][T25855] lo speed is unknown, defaulting to 1000 [ 798.840517][T25865] netlink: 'syz.4.5030': attribute type 11 has an invalid length. [ 798.842248][T25858] netlink: 'syz.4.5030': attribute type 1 has an invalid length. [ 798.914375][T25858] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5030'. [ 799.908108][T25892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5035'. [ 800.048274][T25901] xt_l2tp: v2 doesn't support IP mode [ 800.090793][T25903] xt_l2tp: v2 doesn't support IP mode [ 800.260908][T25902] lo speed is unknown, defaulting to 1000 [ 800.285865][T25907] syzkaller0: entered promiscuous mode [ 800.291597][T25907] syzkaller0: entered allmulticast mode [ 800.303418][T25902] lo speed is unknown, defaulting to 1000 [ 800.833126][T25924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5043'. [ 800.902780][T25929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5043'. [ 800.976291][T25924] n: the hash_elasticity option has been deprecated and is always 16 [ 800.984687][T25924] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 801.021260][T25933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.169716][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 802.177786][ C1] lec:lec_tx_timeout: lec0 [ 802.183010][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 806.518419][T25959] netlink: 'syz.1.5046': attribute type 1 has an invalid length. [ 806.539667][T25956] netlink: 'syz.1.5046': attribute type 1 has an invalid length. [ 806.547578][T25956] netlink: 'syz.1.5046': attribute type 2 has an invalid length. [ 806.560506][T25961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5045'. [ 806.570210][T25963] netlink: 'syz.3.5048': attribute type 7 has an invalid length. [ 806.589976][T25959] netlink: 'syz.1.5046': attribute type 2 has an invalid length. [ 806.599955][T25956] netlink: 'syz.1.5046': attribute type 1 has an invalid length. [ 806.629123][T25956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5046'. [ 806.640055][T25959] netlink: 'syz.1.5046': attribute type 1 has an invalid length. [ 806.647836][T25959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5046'. [ 806.704305][T25972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5052'. [ 806.715071][T25972] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5052'. [ 807.190210][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 807.198299][ C1] lec:lec_tx_timeout: lec0 [ 807.206486][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 807.282791][T26007] netlink: 'syz.1.5056': attribute type 1 has an invalid length. [ 807.305710][T26007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5056'. [ 807.870516][T26035] netlink: 'syz.0.5064': attribute type 1 has an invalid length. [ 807.897378][T26041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5066'. [ 807.956410][T26041] vlan2: entered promiscuous mode [ 807.965778][T26046] netlink: 'syz.1.5068': attribute type 11 has an invalid length. [ 807.982262][T26041] gretap0: entered promiscuous mode [ 808.012238][T26045] macvlan2: entered promiscuous mode [ 808.023888][T26045] macvlan2: entered allmulticast mode [ 808.056567][T26045] bond10: entered promiscuous mode [ 808.066149][T26045] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 808.140673][T26045] bond10: left promiscuous mode [ 808.572085][T26064] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 808.874466][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.880384][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 808.889053][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 808.991261][T26099] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5082'. [ 809.146600][T26099] lo speed is unknown, defaulting to 1000 [ 809.155820][T26099] lo speed is unknown, defaulting to 1000 [ 809.573052][T26114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5084'. [ 811.614830][T26069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.792391][T26120] macsec3: entered promiscuous mode [ 811.809967][T26120] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 811.828529][T26124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5087'. [ 811.844934][T26121] netlink: 'syz.1.5086': attribute type 11 has an invalid length. [ 811.884020][T26121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5086'. [ 812.016469][T26134] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 812.133583][T26141] lo speed is unknown, defaulting to 1000 [ 812.142872][T26141] lo speed is unknown, defaulting to 1000 [ 812.219885][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 812.227995][ C1] lec:lec_tx_timeout: lec0 [ 812.233143][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 812.301239][T26148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5095'. [ 812.373295][T26146] syzkaller0: entered promiscuous mode [ 812.387547][T26146] syzkaller0: entered allmulticast mode [ 812.418535][T26151] openvswitch: : Dropping previously announced user features [ 812.732394][T26157] 8021q: adding VLAN 0 to HW filter on device bond9 [ 812.742773][T26167] validate_nla: 1 callbacks suppressed [ 812.742796][T26167] netlink: 'syz.3.5098': attribute type 6 has an invalid length. [ 812.787960][T26161] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 812.886812][T26168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.926167][T26172] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5101'. [ 813.209869][T26187] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5104'. [ 814.760070][T26193] tipc: Enabled bearer , priority 10 [ 814.780812][T26194] netlink: 37 bytes leftover after parsing attributes in process `syz.0.5105'. [ 814.920528][T26203] netlink: 'syz.0.5108': attribute type 1 has an invalid length. [ 814.947837][T26203] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5108'. [ 814.972761][T26203] NCSI netlink: No device for ifindex 0 [ 815.104715][T26211] syzkaller0: entered promiscuous mode [ 815.112104][T26211] syzkaller0: entered allmulticast mode [ 815.141343][T26209] tc action pedit offset must be on 32 bit boundaries [ 815.206944][T26221] xt_l2tp: missing protocol rule (udp|l2tpip) [ 815.217925][T26221] xt_l2tp: missing protocol rule (udp|l2tpip) [ 815.238020][T26221] xt_l2tp: missing protocol rule (udp|l2tpip) [ 815.279777][T26221] xt_l2tp: missing protocol rule (udp|l2tpip) [ 815.286129][T26221] xt_l2tp: missing protocol rule (udp|l2tpip) [ 815.293423][T26221] xt_l2tp: missing protocol rule (udp|l2tpip) [ 815.303867][T26221] xt_l2tp: missing protocol rule (udp|l2tpip) [ 815.315331][T26221] xt_l2tp: missing protocol rule (udp|l2tpip) [ 815.325108][T26221] xt_l2tp: missing protocol rule (udp|l2tpip) [ 815.331828][T26221] xt_l2tp: missing protocol rule (udp|l2tpip) [ 815.519961][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5116'. [ 815.535372][T26236] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5112'. [ 815.587530][T26237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5117'. [ 815.620458][T26240] block nbd6: Unsupported socket: should be TCP or UNIX. [ 815.652167][T26243] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 815.658199][T26243] syzkaller1: linktype set to 823 [ 816.494853][T26277] batman_adv: batadv0: Interface deactivated: gretap1 [ 816.503484][T26277] batman_adv: batadv0: Removing interface: gretap1 [ 816.553782][T26274] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 816.684059][T26284] netlink: 'syz.2.5131': attribute type 8 has an invalid length. [ 816.857705][T26290] __nla_validate_parse: 2 callbacks suppressed [ 816.857727][T26290] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5134'. [ 816.975222][T26298] netlink: 'syz.3.5137': attribute type 1 has an invalid length. [ 817.005959][T26298] 8021q: adding VLAN 0 to HW filter on device bond9 [ 817.014741][T26301] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.5135'. [ 817.048423][T26298] vlan6: entered promiscuous mode [ 817.053718][T26298] bond9: entered promiscuous mode [ 817.058945][T26298] vlan6: entered allmulticast mode [ 817.064703][T26298] bond9: entered allmulticast mode [ 817.073393][T26298] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5137'. [ 817.109627][T26303] lo speed is unknown, defaulting to 1000 [ 817.117092][T26303] lo speed is unknown, defaulting to 1000 [ 817.234695][T26308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5139'. [ 817.249429][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 817.257493][ C1] lec:lec_tx_timeout: lec0 [ 817.262479][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 817.383115][T26312] pim6reg1: entered promiscuous mode [ 817.388484][T26312] pim6reg1: entered allmulticast mode [ 817.398637][T26315] tipc: Resetting bearer [ 817.437091][T26314] tipc: Resetting bearer [ 817.656779][T26322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5142'. [ 818.167242][ T128] tipc: Resetting bearer [ 823.589438][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 823.597508][ C1] lec:lec_tx_timeout: lec0 [ 823.603081][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 825.120386][T26385] IPVS: sed: FWM 3 0x00000003 - no destination available [ 825.130341][T26383] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 825.154303][T26386] [ 825.156714][T26386] ====================================================== [ 825.163759][T26386] WARNING: possible circular locking dependency detected [ 825.170906][T26386] syzkaller #0 Not tainted [ 825.175374][T26386] ------------------------------------------------------ [ 825.182436][T26386] syz.0.5150/26386 is trying to acquire lock: [ 825.188547][T26386] ffffffff8fd42798 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 825.198101][T26386] [ 825.198101][T26386] but task is already holding lock: [ 825.205508][T26386] ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 825.215140][T26386] [ 825.215140][T26386] which lock already depends on the new lock. [ 825.215140][T26386] [ 825.225587][T26386] [ 825.225587][T26386] the existing dependency chain (in reverse order) is: [ 825.234619][T26386] [ 825.234619][T26386] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 825.242552][T26386] _raw_spin_lock_bh+0x36/0x50 [ 825.247870][T26386] nr_rt_ioctl+0x40c/0xf90 [ 825.252850][T26386] sock_do_ioctl+0x101/0x320 [ 825.257975][T26386] sock_ioctl+0x5c6/0x7f0 [ 825.262865][T26386] __se_sys_ioctl+0xfc/0x170 [ 825.267999][T26386] do_syscall_64+0x14d/0xf80 [ 825.273133][T26386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.279576][T26386] [ 825.279576][T26386] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 825.287604][T26386] _raw_spin_lock_bh+0x36/0x50 [ 825.292926][T26386] nr_rt_ioctl+0x215/0xf90 [ 825.297889][T26386] sock_do_ioctl+0x101/0x320 [ 825.303015][T26386] sock_ioctl+0x5c6/0x7f0 [ 825.307878][T26386] __se_sys_ioctl+0xfc/0x170 [ 825.313010][T26386] do_syscall_64+0x14d/0xf80 [ 825.318150][T26386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.324580][T26386] [ 825.324580][T26386] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 825.332459][T26386] __lock_acquire+0x15a5/0x2cf0 [ 825.337860][T26386] lock_acquire+0xf0/0x2e0 [ 825.342816][T26386] _raw_spin_lock_bh+0x36/0x50 [ 825.348129][T26386] nr_rt_device_down+0xbe/0x860 [ 825.353519][T26386] nr_device_event+0x137/0x150 [ 825.358851][T26386] notifier_call_chain+0x1be/0x400 [ 825.364503][T26386] __dev_notify_flags+0x16d/0x310 [ 825.370074][T26386] netif_change_flags+0xe8/0x1a0 [ 825.375567][T26386] dev_change_flags+0x130/0x260 [ 825.380976][T26386] dev_ioctl+0x7b4/0x1150 [ 825.385854][T26386] sock_do_ioctl+0x23e/0x320 [ 825.390981][T26386] sock_ioctl+0x5c6/0x7f0 [ 825.395857][T26386] __se_sys_ioctl+0xfc/0x170 [ 825.400982][T26386] do_syscall_64+0x14d/0xf80 [ 825.406110][T26386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.412540][T26386] [ 825.412540][T26386] other info that might help us debug this: [ 825.412540][T26386] [ 825.422783][T26386] Chain exists of: [ 825.422783][T26386] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 825.422783][T26386] [ 825.436627][T26386] Possible unsafe locking scenario: [ 825.436627][T26386] [ 825.444095][T26386] CPU0 CPU1 [ 825.449477][T26386] ---- ---- [ 825.454852][T26386] lock(nr_neigh_list_lock); [ 825.459549][T26386] lock(&nr_node->node_lock); [ 825.466940][T26386] lock(nr_neigh_list_lock); [ 825.474156][T26386] lock(nr_node_list_lock); [ 825.478766][T26386] [ 825.478766][T26386] *** DEADLOCK *** [ 825.478766][T26386] [ 825.486916][T26386] 2 locks held by syz.0.5150/26386: [ 825.492125][T26386] #0: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 825.500945][T26386] #1: ffffffff8fd42738 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 825.510980][T26386] [ 825.510980][T26386] stack backtrace: [ 825.516894][T26386] CPU: 1 UID: 0 PID: 26386 Comm: syz.0.5150 Not tainted syzkaller #0 PREEMPT(full) [ 825.516914][T26386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 825.516926][T26386] Call Trace: [ 825.516933][T26386] [ 825.516943][T26386] dump_stack_lvl+0xe8/0x150 [ 825.516969][T26386] print_circular_bug+0x2e1/0x300 [ 825.516999][T26386] check_noncircular+0x12e/0x150 [ 825.517028][T26386] __lock_acquire+0x15a5/0x2cf0 [ 825.517055][T26386] ? __lock_acquire+0x6b5/0x2cf0 [ 825.517087][T26386] lock_acquire+0xf0/0x2e0 [ 825.517107][T26386] ? nr_rt_device_down+0xbe/0x860 [ 825.517134][T26386] ? nr_rt_device_down+0xbe/0x860 [ 825.517156][T26386] _raw_spin_lock_bh+0x36/0x50 [ 825.517179][T26386] ? nr_rt_device_down+0xbe/0x860 [ 825.517201][T26386] nr_rt_device_down+0xbe/0x860 [ 825.517223][T26386] ? nr_device_event+0x12f/0x150 [ 825.517248][T26386] nr_device_event+0x137/0x150 [ 825.517270][T26386] notifier_call_chain+0x1be/0x400 [ 825.517299][T26386] __dev_notify_flags+0x16d/0x310 [ 825.517327][T26386] ? __pfx___dev_notify_flags+0x10/0x10 [ 825.517352][T26386] ? __dev_change_flags+0x4c6/0x690 [ 825.517379][T26386] ? kasan_quarantine_put+0xbb/0x1f0 [ 825.517396][T26386] ? __pfx___dev_change_flags+0x10/0x10 [ 825.517423][T26386] ? full_name_hash+0x92/0xe0 [ 825.517449][T26386] netif_change_flags+0xe8/0x1a0 [ 825.517477][T26386] dev_change_flags+0x130/0x260 [ 825.517504][T26386] dev_ioctl+0x7b4/0x1150 [ 825.517529][T26386] sock_do_ioctl+0x23e/0x320 [ 825.517551][T26386] ? __pfx_sock_do_ioctl+0x10/0x10 [ 825.517569][T26386] ? do_futex+0x333/0x420 [ 825.517598][T26386] sock_ioctl+0x5c6/0x7f0 [ 825.517617][T26386] ? __pfx_sock_ioctl+0x10/0x10 [ 825.517636][T26386] ? __x64_sys_recvmmsg+0x1fa/0x250 [ 825.517653][T26386] ? __pfx___se_sys_futex+0x10/0x10 [ 825.517676][T26386] ? bpf_lsm_file_ioctl+0x9/0x20 [ 825.517697][T26386] ? __pfx_sock_ioctl+0x10/0x10 [ 825.517715][T26386] __se_sys_ioctl+0xfc/0x170 [ 825.517735][T26386] do_syscall_64+0x14d/0xf80 [ 825.517759][T26386] ? trace_irq_disable+0x3b/0x150 [ 825.517784][T26386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.517800][T26386] ? clear_bhb_loop+0x40/0x90 [ 825.517819][T26386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.517836][T26386] RIP: 0033:0x7fcc90b9c799 [ 825.517852][T26386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.517867][T26386] RSP: 002b:00007fcc919ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.517885][T26386] RAX: ffffffffffffffda RBX: 00007fcc90e15fa0 RCX: 00007fcc90b9c799 [ 825.517898][T26386] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 825.517909][T26386] RBP: 00007fcc90c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 825.517920][T26386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.517930][T26386] R13: 00007fcc90e16038 R14: 00007fcc90e15fa0 R15: 00007fff77febe48 [ 825.517951][T26386] [ 825.553422][T26394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5150'. [ 825.820132][T26394] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5150'. [ 825.896582][T26400] lo speed is unknown, defaulting to 1000 [ 825.904655][T26400] lo speed is unknown, defaulting to 1000 [ 825.988086][T26402] siw: device registration error -23 [ 829.349347][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 829.357440][ C1] lec:lec_tx_timeout: lec0 [ 829.362274][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 835.109452][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 835.117551][ C1] lec:lec_tx_timeout: lec0 [ 835.123149][ C1] lec:lec_start_xmit: lec0:No lecd attached